last executing test programs: 7m29.931129296s ago: executing program 4 (id=3182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[], 0x68}, 0x1, 0xba01, 0x0, 0x40}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x5a79, 0x20, 0x0, 0x2, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r8 = io_uring_setup(0x67bb, &(0x7f0000000280)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) io_uring_enter(r8, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000400)='net/rt_cache\x00') lseek(r10, 0x38, 0x0) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r11, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x3, @private2, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x4000006}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="840c1e54", 0x4}], 0x1}}], 0x2, 0x0) lseek(r10, 0x100, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f0000000040)={"e2b5ecb62814d32aceaf0cfc3439d968", 0x0, 0x0, {0x7, 0x8}, {0x5, 0x200}, 0x8, [0x20000000006, 0x500000000, 0x8, 0x5, 0x4, 0x7, 0x6, 0x111d2969, 0x6, 0x4e06, 0xd, 0x0, 0x3cf, 0xa, 0x1, 0x2]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f0000000100)={"f8967e52dc6ba580faea0cce1a89dc08", 0x0, 0x0, {0x9, 0x9}, {0x7fff, 0x6}, 0x5, [0x9, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x9, 0x401, 0x4, 0x6, 0xbe2, 0x9, 0x2, 0x1d, 0x401, 0x1, 0x40]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c09425, &(0x7f00000001c0)={"50ddb6644b1a874f6d4ccd256bc1c416", r12, r13, {0x6, 0x200}, {0x2, 0x6}, 0x1, [0x80000000, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x10001, 0x4c461990, 0x9, 0xfffffffffffffff7, 0x1, 0x3e44, 0x8, 0x8, 0xdc, 0x2]}) write$binfmt_register(r10, &(0x7f0000000340)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x4, 0x3a, '-}-]-', 0x3a, 'bond0\x00', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x0, 0x4f, 0x4f, 0x43, 0x43]}, 0x39) getuid() 7m14.376487768s ago: executing program 4 (id=3189): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2) r1 = syz_io_uring_setup(0x222f, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x800000, 0x0, 0x0, 0x13}) io_uring_enter(r1, 0x53d1, 0x0, 0x4, 0x0, 0x0) writev(r0, &(0x7f0000000040), 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400800, 0x110) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="019e000000e00000b400756d7178c96be51fa86d1ede00400000000000800000000014"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) ftruncate(r8, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r9 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r8, &(0x7f0000001080), 0x0, 0x40002001, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRES8]) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') 7m14.095916475s ago: executing program 4 (id=3247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r4, &(0x7f0000000280)=ANY=[], 0xc2) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[], 0xffdd) syz_open_pts(r1, 0x20080) r6 = dup3(r2, r1, 0x0) read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020) io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000000)="8730656aa6017e6450511f779a3c1e355927cc130824dfb71bfc51f20c248af4050e68ece8c65ed3b9fbb811f3c802ee95b3", 0x32, 0xfff, 0x0, 0x3, r6}, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0x0, 0x3, {0x7, 0x7}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x0) dup3(r0, r0, 0x80000) 7m11.966262422s ago: executing program 3 (id=3259): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) 7m9.410318464s ago: executing program 4 (id=3264): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d9064653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 7m9.302888514s ago: executing program 4 (id=3266): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x88480000, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 7m9.237167461s ago: executing program 3 (id=3268): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014", 0x5}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 7m9.136308705s ago: executing program 3 (id=3270): socket$inet(0xa, 0x801, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 7m8.029588781s ago: executing program 4 (id=3273): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (fail_nth: 3) 7m7.098019942s ago: executing program 32 (id=3273): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (fail_nth: 3) 7m7.067840279s ago: executing program 3 (id=3277): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d9064653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 7m6.871257551s ago: executing program 3 (id=3279): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="4d17316a3f2601020301fed9acc28fc7ad3628af63d9cb0d3d02120072714547517d3ddc60c408d0ba990eab22ccdd8ccc3ab5363297fb1e4550f582c5c7a96406c9abfdee1cd8d5fde652fba4a0470f26a4d46f4c368ee7a1e163a7f04366307713152ef3adaf18967e61ff0b"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030301e96026931cde11630303030303030303030303034303030302c", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21, 0x3, 0x8000000}}, 0x50) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r3}, 0x10) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000000), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000002e40)='environ\x00') write$cgroup_pid(r5, &(0x7f0000000000)=0xffffffffffffffff, 0x12) recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@cred={{0x1c}}], 0x20}, 0x0) r6 = socket(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r6, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x16, 0x40, 0x8, 0x20, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x72, 0x65, 0x3, 0x80000000}, @sadb_address={0x3, 0x6, 0x33, 0x20, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x80}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd2a, 0x3504}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x29, 0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x4d2, 0xc9, 0x6, 0xf8, 0x1, 0x20000000}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_sec_ctx={0xe, 0x18, 0x7, 0x80, 0x68, "1cb87cf2ec6415fbd472d03552776f10d57776397227bc857d5b95d708a772d667d18edb25bbdf05e514528f8421c3c346e22a7f5962f74134e2c7db5b26218455e7e88328146fb7b8da31a5262a7addb996855e8e78c214b756fdc833767e6f7d0862d40ed9f08a"}]}, 0x100}}, 0x20004000) r7 = socket(0x840000000002, 0x3, 0xfa) getsockopt$inet_mreqn(r7, 0x0, 0x4, 0x0, &(0x7f0000005480)) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x122482) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000001100000000002d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef100", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipmr_getroute={0x1c, 0x1a, 0x20, 0x70bd26, 0x25dfdbff, {0x80, 0x0, 0x20, 0x1, 0x0, 0x4, 0xfd, 0x0, 0x3100}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x8001, 0x0) 7m5.14092122s ago: executing program 3 (id=3286): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="2000000072003303060000000400000007000000", @ANYRES32=0x0, @ANYBLOB="06"], 0x20}}, 0x20000010) 7m4.487801564s ago: executing program 33 (id=3286): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="2000000072003303060000000400000007000000", @ANYRES32=0x0, @ANYBLOB="06"], 0x20}}, 0x20000010) 14.443302208s ago: executing program 0 (id=5020): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b0000000000080028"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r4 = dup(0xffffffffffffffff) io_setup(0x19, 0x0) socket$netlink(0x10, 0x3, 0x12) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x238, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x8, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) read(r9, &(0x7f0000000140)=""/109, 0x6d) 13.069445127s ago: executing program 1 (id=5024): r0 = gettid() close(0x3) kcmp(r0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 12.710908062s ago: executing program 1 (id=5026): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f, 0x40}, 0x9c) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) 11.708519007s ago: executing program 0 (id=5027): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe80000000000000000000000000008a3c0022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800"], 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b40)=@newtfilter={0x918, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8e8, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x8dc, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0x1}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x2, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x7, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x8, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x16b, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0x6, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x2a34, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x6, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x322, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x40000001, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x3, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0x57ae807c, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x8, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x400, 0x9, 0x6489, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x18, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0x3b, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0xa6c, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0xa, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x9748, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x80, 0x9, 0x6, {0x9, 0x1, 0x7f, 0x1, 0xff, 0x3}, {0x7, 0x1, 0xfff, 0x3, 0x8, 0xfe}, 0x7, 0x4, 0x400}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xead0, 0x1, 0x5, 0x8, 0x6, {0x88, 0x0, 0x5, 0xd, 0x4, 0x9}, {0x5, 0x2, 0x6, 0xfff8, 0x2, 0x4}, 0x332d, 0x7, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe0db}]}]}}]}, 0x918}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.346658404s ago: executing program 1 (id=5030): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2f, &(0x7f0000000280), 0x4) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xf, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4000}, {0xfffffffffffffc23}, [@obex={0x5, 0x24, 0x15, 0x3ff}, @dmm={0x7, 0x24, 0x14, 0x6, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="000707000000141f972ad123"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x4010, 0xffffffffffffffff, 0x10000000) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd=r5, 0x0, {}, 0xf0000, 0xa, 0x0, {0x0, r8}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r8}}) syz_usb_control_io(r3, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x40, 0x3c, 0x5, "ffbd196850"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="6a087aeed849"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "bd4e"}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x90}, 0x0}) 8.699727837s ago: executing program 1 (id=5036): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000501000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x480, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000300)=@generic={0x3, 0x1, 0x3}) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386a"], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES64, @ANYBLOB="000426b57000fedbdf253a00000020005b0020891c746dd9b4ef870a6dc7b72e874ddb85a64a37f6f8a4218e7935d2e2acdf2ba780d9d9bb300600650002000000"], 0x3c}}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/profiling', 0x40042, 0x101) 8.031719595s ago: executing program 6 (id=5039): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) 7.006216675s ago: executing program 6 (id=5042): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f0000000200)="bd4c4cc2f24a55e8752448b4c37c520bb5a15833275b9601d6c5c4ab51b93badd121b6dc6ce7b0305b53da8056f62e21b6e61bb466e79eed64b229fb76ae72e773c2ba100f3350ef6f17073a4f3464a6a68d2b21fe0548eaea0a20b59f23080cae50972a2ba17140b98891c318be0ffce9b828f7a216b781d42f96df04466080b721bdf680ac562dc9783aa1e4ebd8d3e6e5a9f3f2535b9042dfc897d4ddce794cff6cb210bddb7670b1da5343", 0xad) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x0, 0x80000000, 0xffffffed, 0xd, 0x0, 0x40000, 0x2, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0804124, &(0x7f00000002c0)) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 6.751456684s ago: executing program 2 (id=5044): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) 6.505629661s ago: executing program 2 (id=5045): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f, 0x40}, 0x9c) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) 6.270655305s ago: executing program 6 (id=5047): setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x9ce3, 0x10100, 0x4, 0x4000000}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4004, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) write$midi(r8, &(0x7f00000001c0)="8c4697510effb97e3420853196ead1e7152566f32ed168f9c39223139829f25a08b0dfc15d7c94c110098218d4ebad2783b33aca38e35ec49d3d6d6691626a9061511f03a8cf047125c624f882d019960b68a69daa2c1bcc3f7d4149db63fe8fcc28bf4a25cd146965455938e8b971330d9b81cb1edbde47229fe000bb910136ed55f58fbd6321cfceeeb36f822f0af40804a58722125dba299812c9cfadcd233e9ceb26181d445d472254e634c05a03453634855d2db35f065471cea49b0771a5f8c82b71f3f6a4983a87ed3a5a9acf3d9db3806d03ddf771bce32e36fccb21dd", 0xe1) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) close(r10) 5.21333422s ago: executing program 6 (id=5050): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000014c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0xffff, 0x14}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x22, 0xfc0, 0x68, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x11, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, "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"}}}}, 0xfce) socket$nl_generic(0x10, 0x3, 0x10) r5 = open(0x0, 0x0, 0x157) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000440)=""/252) r6 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000100)=0x21) r7 = gettid() syz_clone3(&(0x7f00000005c0)={0x8000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r7], 0x1}, 0x58) timer_create(0x3, &(0x7f0000000000)={0x0, 0xa, 0x0, @tid=r7}, &(0x7f0000000040)) r8 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_j1939(r5, &(0x7f0000000400)={&(0x7f0000000380)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x4}}, 0x18, &(0x7f00000003c0)={&(0x7f0000000640)="113770e12151c846d1d339247f2071307f94858892883cbcd958cd99cb35619597a74d49635a44eb86540d100a867f96879e4ecc00342e941e39cbdc77d093cb52d499dcd21dab2696d2b810b2a505938a860f6139a2bf511216946b31e9275badb9fad9d5b63a77faf868d648cf9bf1ee53b6e851657a79f9ae820b42bd7e3d01f83f35e587dc052f8c0134e7536af02e9981b923371e830e008124fe418cd81c44a4fb757bb331f399197e89cc309dd7f42becd9034ea83212db16a9916f20f8a60cdd2194cf8a28cceb34aa89a7ae3161b27a40dded48504fc0f555212ef1e62298471e6d", 0xe6}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000340)={0x1d, r10}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000006b010000feffffff00000000e6", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x940c, 0x3002, 0xc8, 0x2c0, 0x1f8, 0x3d8, 0x3d8, 0x1f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xe}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x4, 0x4, 0x6, 'syz1\x00', 'syz0\x00', {0x1a0000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x31c) 4.769165246s ago: executing program 1 (id=5052): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000700)={0x1c, &(0x7f00000003c0)={0x40, 0x65497d0588c24846, 0x1, "91"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xd093, 0x10, 0x3, 0x13f}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r2, 0x409c, 0x3, 0x28, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) r6 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xfffffffffffffcfe}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r6, 0xd81, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0xa, 0x0, 0xf, 0x6, 0x7, 0x4, 0x0, 0x0, 0x1, 0x8}}, 0x50) 3.586983505s ago: executing program 0 (id=5054): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1}, 0x8c) unshare(0x8000000) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000740)) ioctl$TCSETS(r0, 0x5402, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1030) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6) r5 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000100)=0x9) 2.987103873s ago: executing program 5 (id=5056): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) inotify_init() userfaultfd(0x80001) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000088a83b00810041000800450000580075000000019078ac1e0001ac14142d053490781200183f2f0000040000fffd0d010000ac1414aa0000000044045430441c92337f00000100000002ac14143400000003ffffffff0000054d860600000001000091"], 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0xffffffff00000000, 0x60aea753, 0xfffffffffffffffa, 0x4}, 0x0, &(0x7f0000000280)={0x3ff, 0x7, 0x0, 0x9, 0x1, 0x108, 0x7fffffffffffffff}, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x302) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)={0x20, 0xe, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000000c0)) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}}, 0x0) openat$tun(0xffffff9c, &(0x7f0000000200), 0x600, 0x0) 2.561647711s ago: executing program 5 (id=5057): capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000080)={0x0, 0x20, 0x6, 0x0, 0x0, 0x6}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_create(0x2, &(0x7f0000000000)={0x0, 0x3d, 0x4, @tid=r1}, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 2.491243763s ago: executing program 2 (id=5058): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = syz_io_uring_setup(0x86c, &(0x7f0000000300)={0x0, 0x7905, 0x10, 0x6, 0x13f}, &(0x7f00000001c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xde2, 0xdb9c, 0x9, 0x0, 0x0) (fail_nth: 23) 2.4349454s ago: executing program 6 (id=5059): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfc000000, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 2.29909357s ago: executing program 5 (id=5060): mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) 2.093900312s ago: executing program 5 (id=5061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r2, 0x0) (async, rerun: 32) close(0x3) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xc5, @remote, 0x4}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 32) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xe0, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0xbe, 0x7, 0x1, 0x0, "e3e58c329b54fe3e5f327b4c0fffe658015905660acbfb12b4e8af0c676f6974ff81a8f34d1cdd29c4590639869907a30161707c449e905352a04d38a5fe97a78e2155c57c49518299023c87c5a407a466fedc929c02b45cdc23a85ecb88d4fd89f2d9ce66b2bd53f10794d8a0e3198eed150f59a9f4fcbdb81f23d89939945da4385cfec9cdf6a651297e921ae7a85d8da4e7951b793c92d8bf820d4ec3a7c52808102c58437322450c27f1b21ce434972366d8b520438a8054"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_pid(r6, &(0x7f0000000000)=0xffffffffffffffff, 0x12) (async) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece) (async) close_range(r4, 0xffffffffffffffff, 0x0) 2.045373448s ago: executing program 6 (id=5062): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) unshare(0x20000400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd2b, 0x25dfdbfe, {0x80, 0x20, 0x0, 0x6, 0xfc, 0x2, 0xff, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r4 = socket(0x10, 0x80002, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) r5 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) statfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000001380)=""/134) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', '', [{0x20, ']}-+('}, {0x20, '/dev/loop#\x00'}, {0x20, '/'}, {0x20, '\x00'}]}, 0x1a) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) r6 = eventfd2(0x0, 0x0) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000000)="f67804e83b4e100b", 0x8}, {0x0, 0x8}], 0x2) 1.621505545s ago: executing program 5 (id=5063): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b3f2219d205e81f4a7f71c1926aae1efd7e0054a86233d5cfe6c00000000fa6935849e6098ed884e6cb51726b360fbb37b4fe035bbb095873028b437f7cb1d70f8755adae8df6e59669da0d022bc891542016a4ef224d3800002000000000000b3200f511300b8a8eb3d2fc0bde47186baaac61790b345538c9d9c16a0539e8411fec789d0a31c185c80751781", 0xa0}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f00000001c0)=""/153, 0x99}], 0x2}, 0x8dffffff) 1.277729168s ago: executing program 5 (id=5064): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0xc80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@mcast2, @empty, @private1={0xfc, 0x1, '\x00', 0x2}, 0x10000005, 0x0, 0x9, 0x0, 0x800}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r4, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x300}]}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000d2e5bf308000300", @ANYRES32, @ANYBLOB="4800128009000100626f6e64000000003800028004000880080007000600"], 0x70}, 0x1, 0x0, 0x0, 0x51}, 0x0) 1.153895109s ago: executing program 2 (id=5065): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)="ac", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864b8, &(0x7f00000000c0)={&(0x7f00000001c0)=[r2], 0x1, 0x80000}) 1.079467465s ago: executing program 0 (id=5066): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) 917.755761ms ago: executing program 2 (id=5067): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)="ac", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f00000001c0)=[r2], 0x1, 0x80000}) (fail_nth: 4) 825.585299ms ago: executing program 0 (id=5068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0xc8, 0x940c, 0x3002, 0xc8, 0x2c0, 0x2c8, 0x3d8, 0x3d8, 0x2c8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x4000, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x198, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x10, 0x9, 0x0, 0x1, 'syz1\x00', 0xbd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x2, 0x4, 0x6, 'syz1\x00', 'syz0\x00', {0x1a0000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3ec) 369.256625ms ago: executing program 0 (id=5069): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "9c304bad897e0216795983be31b98b78a3cddf"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x203}, r8}}, 0x38) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r8, 0xffffffff}}, 0x10) ioctl$sock_ifreq(r1, 0x8932, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a3100"], 0xc8}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f0000000000)=0xfe8e, 0x12) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f00000002c0)=[0x431d, 0x1000000]) 368.314491ms ago: executing program 2 (id=5070): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 0s ago: executing program 1 (id=5071): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, 0x0) sendmsg$tipc(r2, 0x0, 0x200441c5) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000, 0x93}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}, 0x7000000}], 0x300, 0xf00) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180), 0x14) kernel console output (not intermixed with test programs): lock_irqrestore+0x10/0x10 [ 1167.615335][T22325] ? l2tp_tunnel_create+0x249/0x3e0 [ 1167.615356][T22325] ? l2tp_tunnel_create+0x2d3/0x3e0 [ 1167.615381][T22325] l2tp_nl_cmd_tunnel_create+0x331/0x950 [ 1167.615414][T22325] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 1167.615464][T22325] ? __nla_parse+0x40/0x60 [ 1167.615499][T22325] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1167.615534][T22325] genl_family_rcv_msg_doit+0x212/0x300 [ 1167.615562][T22325] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1167.615593][T22325] ? bpf_lsm_capable+0x9/0x20 [ 1167.615612][T22325] ? security_capable+0x7e/0x2e0 [ 1167.615637][T22325] genl_rcv_msg+0x60e/0x790 [ 1167.615663][T22325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1167.615684][T22325] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 1167.615710][T22325] ? __asan_memcpy+0x40/0x70 [ 1167.615731][T22325] ? __pfx_ref_tracker_free+0x10/0x10 [ 1167.615758][T22325] netlink_rcv_skb+0x205/0x470 [ 1167.615773][T22325] ? __lock_acquire+0xab9/0xd20 [ 1167.615789][T22325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1167.615811][T22325] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1167.615854][T22325] ? down_read+0x1ad/0x2e0 [ 1167.615878][T22325] genl_rcv+0x28/0x40 [ 1167.615897][T22325] netlink_unicast+0x82f/0x9e0 [ 1167.615926][T22325] ? __pfx_netlink_unicast+0x10/0x10 [ 1167.615951][T22325] ? netlink_sendmsg+0x642/0xb30 [ 1167.615966][T22325] ? skb_put+0x11b/0x210 [ 1167.615986][T22325] netlink_sendmsg+0x805/0xb30 [ 1167.616009][T22325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.616028][T22325] ? __import_iovec+0x5d4/0x7f0 [ 1167.616041][T22325] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1167.616064][T22325] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1167.616078][T22325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.616096][T22325] __sock_sendmsg+0x21c/0x270 [ 1167.616121][T22325] ____sys_sendmsg+0x505/0x830 [ 1167.616143][T22325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1167.616174][T22325] ___sys_sendmsg+0x21f/0x2a0 [ 1167.616194][T22325] ? __pfx____sys_sendmsg+0x10/0x10 [ 1167.616238][T22325] ? __fget_files+0x2a/0x420 [ 1167.616252][T22325] ? __fget_files+0x3a0/0x420 [ 1167.616273][T22325] __sys_sendmsg+0x164/0x220 [ 1167.616293][T22325] ? __pfx___sys_sendmsg+0x10/0x10 [ 1167.616317][T22325] ? __pfx_ksys_write+0x10/0x10 [ 1167.616341][T22325] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1167.616363][T22325] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.616384][T22325] __do_fast_syscall_32+0xb6/0x2b0 [ 1167.616405][T22325] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.616427][T22325] do_fast_syscall_32+0x34/0x80 [ 1167.616448][T22325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1167.616469][T22325] RIP: 0023:0xf7fa5539 [ 1167.616483][T22325] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1167.616496][T22325] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1167.616513][T22325] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1167.616526][T22325] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1167.616541][T22325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1167.616555][T22325] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1167.616568][T22325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1167.616602][T22325] [ 1168.104885][T15492] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1168.105614][T15515] m920x_read = error: -19 [ 1168.118113][T15515] dvb-usb: error while querying for an remote control event. [ 1168.235305][T15515] m920x_read = error: -19 [ 1168.239709][T15515] dvb-usb: error while querying for an remote control event. [ 1168.355503][T15515] m920x_read = error: -19 [ 1168.359999][T15515] dvb-usb: error while querying for an remote control event. [ 1168.405551][T15492] usb 6-1: device descriptor read/8, error -71 [ 1168.475430][T15515] m920x_read = error: -19 [ 1168.479876][T15515] dvb-usb: error while querying for an remote control event. [ 1168.488418][T11256] usb 7-1: device descriptor read/64, error -71 [ 1168.606451][T15515] m920x_read = error: -19 [ 1168.610958][T15515] dvb-usb: error while querying for an remote control event. [ 1168.645067][T15492] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1168.665540][T15492] usb 6-1: device descriptor read/8, error -71 [ 1168.708621][T22333] IPv6: Can't replace route, no match found [ 1168.735524][T11256] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1168.757554][T15515] m920x_read = error: -19 [ 1168.762054][T15515] dvb-usb: error while querying for an remote control event. [ 1168.777002][T15492] usb usb6-port1: unable to enumerate USB device [ 1168.895314][T11256] usb 7-1: device descriptor read/64, error -71 [ 1168.905139][T15515] m920x_read = error: -19 [ 1168.909508][T15515] dvb-usb: error while querying for an remote control event. [ 1169.015833][T11256] usb usb7-port1: attempt power cycle [ 1169.065464][T15515] m920x_read = error: -19 [ 1169.069985][T15515] dvb-usb: error while querying for an remote control event. [ 1169.276430][T15515] m920x_read = error: -19 [ 1169.298910][T15515] dvb-usb: error while querying for an remote control event. [ 1169.375390][T11256] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1169.471416][T15515] m920x_read = error: -19 [ 1169.473893][T22345] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4751'. [ 1169.476848][T11256] usb 7-1: device descriptor read/8, error -71 [ 1169.505506][T15515] dvb-usb: error while querying for an remote control event. [ 1169.676534][T15515] m920x_read = error: -19 [ 1169.693243][T15515] dvb-usb: error while querying for an remote control event. [ 1169.805462][T11256] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1169.854469][T15515] m920x_read = error: -19 [ 1169.877117][T11256] usb 7-1: device descriptor read/8, error -71 [ 1169.887813][T15515] dvb-usb: error while querying for an remote control event. [ 1170.016043][T11256] usb usb7-port1: unable to enumerate USB device [ 1170.041580][T11256] m920x_read = error: -19 [ 1170.061721][T11256] dvb-usb: error while querying for an remote control event. [ 1170.205827][T11256] m920x_read = error: -19 [ 1170.255395][T11256] dvb-usb: error while querying for an remote control event. [ 1170.396044][T11256] m920x_read = error: -19 [ 1170.430280][T11256] dvb-usb: error while querying for an remote control event. [ 1170.585675][T11256] m920x_read = error: -19 [ 1170.602793][T11256] dvb-usb: error while querying for an remote control event. [ 1170.790068][T11256] m920x_read = error: -19 [ 1170.814566][T11256] dvb-usb: error while querying for an remote control event. [ 1170.862812][T22362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4756'. [ 1170.975657][T11256] m920x_read = error: -19 [ 1170.980767][T11256] dvb-usb: error while querying for an remote control event. [ 1171.128335][T11256] m920x_read = error: -19 [ 1171.170284][T11256] dvb-usb: error while querying for an remote control event. [ 1171.325244][T11256] m920x_read = error: -19 [ 1171.345537][T11256] dvb-usb: error while querying for an remote control event. [ 1171.496195][T11256] m920x_read = error: -19 [ 1171.512226][T11256] dvb-usb: error while querying for an remote control event. [ 1171.732330][T11256] m920x_read = error: -19 [ 1171.849053][T11256] dvb-usb: error while querying for an remote control event. [ 1171.995232][T11256] m920x_read = error: -19 [ 1172.012253][T11256] dvb-usb: error while querying for an remote control event. [ 1172.195537][T11256] m920x_read = error: -19 [ 1172.230652][T11256] dvb-usb: error while querying for an remote control event. [ 1172.385487][T11256] m920x_read = error: -19 [ 1172.397234][T11256] dvb-usb: error while querying for an remote control event. [ 1172.464875][T15492] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1172.591142][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4766'. [ 1172.627124][T11256] m920x_read = error: -19 [ 1172.646469][T11256] dvb-usb: error while querying for an remote control event. [ 1172.685190][T15492] usb 6-1: Using ep0 maxpacket: 8 [ 1172.710163][T15492] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1172.744654][T15492] usb 6-1: config 79 has an invalid interface number: 237 but max is 0 [ 1172.761055][T15492] usb 6-1: config 79 has no interface number 0 [ 1172.782015][T15492] usb 6-1: config 79 interface 237 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1172.807529][T11256] m920x_read = error: -19 [ 1172.823135][T11256] dvb-usb: error while querying for an remote control event. [ 1172.843709][T15492] usb 6-1: config 79 interface 237 has no altsetting 0 [ 1172.861140][T15492] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=4a.4f [ 1172.871231][T15492] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.887998][T15492] usb 6-1: Product: syz [ 1172.903857][T15492] usb 6-1: Manufacturer: syz [ 1172.920643][T15492] usb 6-1: SerialNumber: syz [ 1172.969346][T22376] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1172.995515][T11256] m920x_read = error: -19 [ 1173.022380][T11256] dvb-usb: error while querying for an remote control event. [ 1173.229053][T11256] m920x_read = error: -19 [ 1173.288854][T11256] dvb-usb: error while querying for an remote control event. [ 1173.425469][T11256] m920x_read = error: -19 [ 1173.479535][T11256] dvb-usb: error while querying for an remote control event. [ 1173.605784][T11256] m920x_read = error: -19 [ 1173.620607][T11256] dvb-usb: error while querying for an remote control event. [ 1173.823592][T11256] m920x_read = error: -19 [ 1173.868453][T11256] dvb-usb: error while querying for an remote control event. [ 1174.045429][T15515] m920x_read = error: -19 [ 1174.073512][T15515] dvb-usb: error while querying for an remote control event. [ 1174.250598][T15515] m920x_read = error: -19 [ 1174.273583][T15515] dvb-usb: error while querying for an remote control event. [ 1174.456756][T15515] m920x_read = error: -19 [ 1174.465145][T15515] dvb-usb: error while querying for an remote control event. [ 1174.612235][T15515] m920x_read = error: -19 [ 1174.634447][T15515] dvb-usb: error while querying for an remote control event. [ 1174.784956][T11256] m920x_read = error: -19 [ 1174.791729][T11256] dvb-usb: error while querying for an remote control event. [ 1174.905350][T15515] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1174.960688][T11256] m920x_read = error: -19 [ 1174.975412][T11256] dvb-usb: error while querying for an remote control event. [ 1175.142409][T15515] usb 2-1: config 0 has an invalid interface number: 36 but max is 0 [ 1175.162480][T15515] usb 2-1: config 0 has no interface number 0 [ 1175.169318][T11256] m920x_read = error: -19 [ 1175.240074][T11256] dvb-usb: error while querying for an remote control event. [ 1175.267254][T15515] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72 [ 1175.356443][T15492] pn533_usb 6-1:79.237: NFC: Could not find bulk-in or bulk-out endpoint [ 1175.365077][T15515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.406993][T20033] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1175.420320][T15515] usb 2-1: Product: syz [ 1175.429276][T15492] usb 6-1: USB disconnect, device number 53 [ 1175.445314][T11256] m920x_read = error: -19 [ 1175.460687][T15515] usb 2-1: Manufacturer: syz [ 1175.501080][T11256] dvb-usb: error while querying for an remote control event. [ 1175.516051][T15515] usb 2-1: SerialNumber: syz [ 1175.541595][T15515] usb 2-1: config 0 descriptor?? [ 1175.580495][T20033] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1175.643654][T15515] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1175.650120][T11256] m920x_read = error: -19 [ 1175.654859][T11256] dvb-usb: error while querying for an remote control event. [ 1175.745227][T20033] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1175.764848][T20033] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1175.778968][T11256] m920x_read = error: -19 [ 1175.783355][T11256] dvb-usb: error while querying for an remote control event. [ 1175.794788][T20033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.815071][T20033] usb 7-1: config 0 descriptor?? [ 1176.075644][T11256] m920x_read = error: -19 [ 1176.096256][T11256] dvb-usb: error while querying for an remote control event. [ 1176.279148][T15515] gspca_spca505: reg write: error -71 [ 1176.325567][T15515] spca505 2-1:0.36: probe with driver spca505 failed with error -5 [ 1176.381915][T15515] usb 2-1: USB disconnect, device number 7 [ 1176.464379][T11256] m920x_read = error: -19 [ 1176.507247][T11256] dvb-usb: error while querying for an remote control event. [ 1176.705429][T15515] m920x_read = error: -19 [ 1176.720233][T15515] dvb-usb: error while querying for an remote control event. [ 1176.895689][T15515] m920x_read = error: -19 [ 1176.902426][T15515] dvb-usb: error while querying for an remote control event. [ 1176.920144][T20033] ath6kl: Failed to submit usb control message: -110 [ 1176.934829][T20033] ath6kl: unable to send the bmi data to the device: -110 [ 1176.953078][T20033] ath6kl: Unable to send get target info: -110 [ 1176.972167][T20033] ath6kl: Failed to init ath6kl core: -110 [ 1176.986966][T20033] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1177.114886][T11256] m920x_read = error: -19 [ 1177.119384][T11256] dvb-usb: error while querying for an remote control event. [ 1177.255548][T11256] m920x_read = error: -19 [ 1177.292547][T11256] dvb-usb: error while querying for an remote control event. [ 1177.445527][T11256] m920x_read = error: -19 [ 1177.455120][T20033] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1177.460782][T11256] dvb-usb: error while querying for an remote control event. [ 1177.635489][T11256] m920x_read = error: -19 [ 1177.641804][T20033] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1177.643840][T11256] dvb-usb: error while querying for an remote control event. [ 1177.719522][T20033] usb 2-1: config 0 has no interface number 0 [ 1177.754433][T20033] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1177.779777][T20033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.794640][T20033] usb 2-1: Product: syz [ 1177.796187][T11256] m920x_read = error: -19 [ 1177.801501][T20033] usb 2-1: Manufacturer: syz [ 1177.803370][T11256] dvb-usb: error while querying for an remote control event. [ 1177.812229][T20033] usb 2-1: SerialNumber: syz [ 1177.850078][T20033] usb 2-1: config 0 descriptor?? [ 1177.894010][T22470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4791'. [ 1177.974923][T15515] m920x_read = error: -19 [ 1177.979525][T15515] dvb-usb: error while querying for an remote control event. [ 1178.076493][T22475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.097754][T15515] m920x_read = error: -19 [ 1178.102174][T15515] dvb-usb: error while querying for an remote control event. [ 1178.121029][T22475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.143375][T15511] usb 7-1: USB disconnect, device number 51 [ 1178.175053][T20033] usb 2-1: Firmware: major: 0, minor: 83, hardware type: ATUSB (1) [ 1178.205776][T11256] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1178.266887][T15504] m920x_read = error: -19 [ 1178.271410][T15504] dvb-usb: error while querying for an remote control event. [ 1178.290331][T22481] SET target dimension over the limit! [ 1178.365409][T11256] usb 1-1: Using ep0 maxpacket: 32 [ 1178.378520][T20033] usb 2-1: failed to fetch extended address, random address set [ 1178.405981][T15511] m920x_read = error: -19 [ 1178.411640][T15511] dvb-usb: error while querying for an remote control event. [ 1178.421576][T11256] usb 1-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 1178.465437][T11256] usb 1-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1178.479918][T11256] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1178.490120][T20033] usb 2-1: USB disconnect, device number 8 [ 1178.499659][T11256] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1178.509753][T11256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.526690][T11256] usb 1-1: config 0 descriptor?? [ 1178.575629][T15511] m920x_read = error: -19 [ 1178.580024][T15511] dvb-usb: error while querying for an remote control event. [ 1178.592752][T11256] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1178.715396][T11256] m920x_read = error: -19 [ 1178.720004][T11256] dvb-usb: error while querying for an remote control event. [ 1178.846221][T11256] m920x_read = error: -19 [ 1178.852357][T11256] dvb-usb: error while querying for an remote control event. [ 1178.999042][T11256] m920x_read = error: -19 [ 1179.004660][T11256] dvb-usb: error while querying for an remote control event. [ 1179.078608][T22499] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4800'. [ 1179.144953][T11256] m920x_read = error: -19 [ 1179.149347][T11256] dvb-usb: error while querying for an remote control event. [ 1179.296381][T11256] m920x_read = error: -19 [ 1179.320541][T11256] dvb-usb: error while querying for an remote control event. [ 1179.455331][T11256] m920x_read = error: -19 [ 1179.471937][T11256] dvb-usb: error while querying for an remote control event. [ 1179.490524][T22508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4804'. [ 1179.606066][T11256] m920x_read = error: -19 [ 1179.610534][T11256] dvb-usb: error while querying for an remote control event. [ 1179.785451][T11256] m920x_read = error: -19 [ 1179.789958][T11256] dvb-usb: error while querying for an remote control event. [ 1179.915396][T11256] m920x_read = error: -19 [ 1179.931258][T11256] dvb-usb: error while querying for an remote control event. [ 1180.066514][T11256] m920x_read = error: -19 [ 1180.099410][T11256] dvb-usb: error while querying for an remote control event. [ 1180.143702][T22522] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4805'. [ 1180.245688][T11256] m920x_read = error: -19 [ 1180.250095][T11256] dvb-usb: error while querying for an remote control event. [ 1180.445487][T11256] m920x_read = error: -19 [ 1180.450776][T11256] dvb-usb: error while querying for an remote control event. [ 1180.615441][T11256] m920x_read = error: -19 [ 1180.667558][T11256] dvb-usb: error while querying for an remote control event. [ 1180.785440][T15511] m920x_read = error: -19 [ 1180.789934][T15511] dvb-usb: error while querying for an remote control event. [ 1180.935419][T15511] m920x_read = error: -19 [ 1180.940962][T15511] dvb-usb: error while querying for an remote control event. [ 1180.992393][T15511] usb 1-1: USB disconnect, device number 11 [ 1181.060704][T22541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4812'. [ 1181.075779][T11256] m920x_read = error: -19 [ 1181.080236][T11256] dvb-usb: error while querying for an remote control event. [ 1181.205185][T20033] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1181.226443][T11256] m920x_read = error: -19 [ 1181.256510][T11256] dvb-usb: error while querying for an remote control event. [ 1181.385231][T20033] usb 3-1: Using ep0 maxpacket: 8 [ 1181.413251][T20033] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.423744][T11256] m920x_read = error: -19 [ 1181.438367][T11256] dvb-usb: error while querying for an remote control event. [ 1181.469530][T20033] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1181.521338][T20033] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1181.531633][T20033] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1181.547948][T20033] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1181.585413][T11256] m920x_read = error: -19 [ 1181.589828][T11256] dvb-usb: error while querying for an remote control event. [ 1181.600336][T20033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.610772][T20033] usb 3-1: Product: syz [ 1181.615447][T20033] usb 3-1: Manufacturer: syz [ 1181.620265][T20033] usb 3-1: SerialNumber: syz [ 1181.673822][T22551] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1181.696380][T22548] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4815'. [ 1181.716379][T22548] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4815'. [ 1181.745560][T11256] m920x_read = error: -19 [ 1181.750730][T11256] dvb-usb: error while querying for an remote control event. [ 1181.885516][T11256] m920x_read = error: -19 [ 1181.891443][T11256] dvb-usb: error while querying for an remote control event. [ 1182.035009][T11256] m920x_read = error: -19 [ 1182.043244][T11256] dvb-usb: error while querying for an remote control event. [ 1182.195555][T11256] m920x_read = error: -19 [ 1182.213679][T11256] dvb-usb: error while querying for an remote control event. [ 1182.366528][T11256] m920x_read = error: -19 [ 1182.439974][T11256] dvb-usb: error while querying for an remote control event. [ 1182.522787][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.532814][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.585530][T11256] m920x_read = error: -19 [ 1182.608030][T11256] dvb-usb: error while querying for an remote control event. [ 1182.713580][T20033] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1182.742548][T20033] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 1182.783664][T20033] usb 3-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 1182.813453][T20033] usb 3-1: 2:1 : invalid channels 0 [ 1182.821789][T11256] m920x_read = error: -19 [ 1182.841852][T11256] dvb-usb: error while querying for an remote control event. [ 1182.855350][T22553] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4816'. [ 1182.939094][T20033] usb 3-1: USB disconnect, device number 96 [ 1182.975557][T11256] m920x_read = error: -19 [ 1182.979942][T11256] dvb-usb: error while querying for an remote control event. [ 1183.176432][T11256] m920x_read = error: -19 [ 1183.223412][T11256] dvb-usb: error while querying for an remote control event. [ 1183.395752][T15511] m920x_read = error: -19 [ 1183.400646][T15511] dvb-usb: error while querying for an remote control event. [ 1183.507217][T22565] FAULT_INJECTION: forcing a failure. [ 1183.507217][T22565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.556152][T15511] m920x_read = error: -19 [ 1183.570695][T15511] dvb-usb: error while querying for an remote control event. [ 1183.583025][T22565] CPU: 1 UID: 0 PID: 22565 Comm: syz.6.4820 Not tainted syzkaller #0 PREEMPT(full) [ 1183.583058][T22565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1183.583073][T22565] Call Trace: [ 1183.583083][T22565] [ 1183.583093][T22565] dump_stack_lvl+0x189/0x250 [ 1183.583123][T22565] ? __pfx____ratelimit+0x10/0x10 [ 1183.583143][T22565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1183.583159][T22565] ? __pfx__printk+0x10/0x10 [ 1183.583175][T22565] ? __might_fault+0xb0/0x130 [ 1183.583205][T22565] should_fail_ex+0x414/0x560 [ 1183.583228][T22565] _copy_from_user+0x2d/0xb0 [ 1183.583245][T22565] drm_ioctl+0x58a/0xb10 [ 1183.583260][T22565] ? __lock_acquire+0xab9/0xd20 [ 1183.583278][T22565] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1183.583304][T22565] ? __pfx_drm_ioctl+0x10/0x10 [ 1183.583328][T22565] ? __fget_files+0x3a0/0x420 [ 1183.583342][T22565] ? __fget_files+0x2a/0x420 [ 1183.583356][T22565] ? drm_compat_ioctl+0xa7/0x330 [ 1183.583376][T22565] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1183.583397][T22565] __ia32_compat_sys_ioctl+0x540/0x840 [ 1183.583420][T22565] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1183.583441][T22565] ? __fget_files+0x3a0/0x420 [ 1183.583461][T22565] ? fput+0xa0/0xd0 [ 1183.583478][T22565] ? ksys_write+0x22a/0x250 [ 1183.583505][T22565] ? exc_page_fault+0x82/0x100 [ 1183.583526][T22565] ? __pfx_ksys_write+0x10/0x10 [ 1183.583550][T22565] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1183.583572][T22565] ? lockdep_hardirqs_on+0x9c/0x150 [ 1183.583594][T22565] __do_fast_syscall_32+0xb6/0x2b0 [ 1183.583616][T22565] ? lockdep_hardirqs_on+0x9c/0x150 [ 1183.583639][T22565] do_fast_syscall_32+0x34/0x80 [ 1183.583660][T22565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1183.583679][T22565] RIP: 0023:0xf7fc7539 [ 1183.583693][T22565] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1183.583707][T22565] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1183.583723][T22565] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 1183.583735][T22565] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 1183.583745][T22565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1183.583756][T22565] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1183.583766][T22565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1183.583789][T22565] [ 1184.095331][T15511] m920x_read = error: -19 [ 1184.099718][T15511] dvb-usb: error while querying for an remote control event. [ 1184.245272][T22568] netlink: 'syz.1.4819': attribute type 1 has an invalid length. [ 1184.263396][T11256] m920x_read = error: -19 [ 1184.297215][T11256] dvb-usb: error while querying for an remote control event. [ 1184.495494][T11256] m920x_read = error: -19 [ 1184.501310][T11256] dvb-usb: error while querying for an remote control event. [ 1184.635306][T11256] m920x_read = error: -19 [ 1184.639703][T11256] dvb-usb: error while querying for an remote control event. [ 1184.754945][T11256] m920x_read = error: -19 [ 1184.759367][T15511] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1184.767012][T11256] dvb-usb: error while querying for an remote control event. [ 1184.875349][T11256] m920x_read = error: -19 [ 1184.879969][T11256] dvb-usb: error while querying for an remote control event. [ 1184.896551][T22584] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4824'. [ 1184.925438][T15511] usb 7-1: Using ep0 maxpacket: 32 [ 1184.934532][T15511] usb 7-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 1184.945697][T15511] usb 7-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1184.982572][T15511] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1184.995473][T11256] m920x_read = error: -19 [ 1185.000182][T11256] dvb-usb: error while querying for an remote control event. [ 1185.015791][T15511] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1185.089443][T15511] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.116551][T15511] usb 7-1: config 0 descriptor?? [ 1185.130342][T15511] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1185.175453][T15511] m920x_read = error: -19 [ 1185.225387][T15511] dvb-usb: error while querying for an remote control event. [ 1185.368058][T15511] m920x_read = error: -19 [ 1185.372483][T15511] dvb-usb: error while querying for an remote control event. [ 1185.505459][T15511] m920x_read = error: -19 [ 1185.509929][T15511] dvb-usb: error while querying for an remote control event. [ 1185.655895][T15511] m920x_read = error: -19 [ 1185.675836][T15511] dvb-usb: error while querying for an remote control event. [ 1185.838058][T15511] m920x_read = error: -19 [ 1185.848205][T15511] dvb-usb: error while querying for an remote control event. [ 1185.895427][T22609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4832'. [ 1185.978812][T15511] m920x_read = error: -19 [ 1185.983391][T15511] dvb-usb: error while querying for an remote control event. [ 1186.105466][T15511] m920x_read = error: -19 [ 1186.114636][T15511] dvb-usb: error while querying for an remote control event. [ 1186.245426][T15511] m920x_read = error: -19 [ 1186.249963][T15511] dvb-usb: error while querying for an remote control event. [ 1186.375648][T15511] m920x_read = error: -19 [ 1186.400459][T15511] dvb-usb: error while querying for an remote control event. [ 1186.545285][T11256] m920x_read = error: -19 [ 1186.549725][T11256] dvb-usb: error while querying for an remote control event. [ 1186.665551][T11256] m920x_read = error: -19 [ 1186.688762][T11256] dvb-usb: error while querying for an remote control event. [ 1186.886205][T11256] m920x_read = error: -19 [ 1186.911507][T11256] dvb-usb: error while querying for an remote control event. [ 1187.045437][T11256] m920x_read = error: -19 [ 1187.049885][T11256] dvb-usb: error while querying for an remote control event. [ 1187.165303][T11256] m920x_read = error: -19 [ 1187.169786][T11256] dvb-usb: error while querying for an remote control event. [ 1187.214877][T20033] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1187.355387][T11256] m920x_read = error: -19 [ 1187.359845][T11256] dvb-usb: error while querying for an remote control event. [ 1187.384799][T20033] usb 2-1: Using ep0 maxpacket: 8 [ 1187.443801][T15485] usb 7-1: USB disconnect, device number 52 [ 1187.452691][T20033] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.565955][T15511] m920x_read = error: -19 [ 1187.574865][T15511] dvb-usb: error while querying for an remote control event. [ 1187.588798][T20033] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 1187.624987][T20033] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 1187.633144][T20033] usb 2-1: Product: syz [ 1187.710157][T22643] fuse: Unknown parameter 'no' [ 1187.735201][T20033] usb 2-1: Manufacturer: syz [ 1187.738164][T15511] m920x_read = error: -19 [ 1187.739919][T20033] usb 2-1: SerialNumber: syz [ 1187.744233][T15511] dvb-usb: error while querying for an remote control event. [ 1187.819646][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4842'. [ 1187.867074][T20033] usb 2-1: config 0 descriptor?? [ 1187.905686][T15511] m920x_read = error: -19 [ 1187.910096][T15511] dvb-usb: error while querying for an remote control event. [ 1187.917933][T20033] gspca_main: conex-2.14.0 probing 0572:0041 [ 1187.955515][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4842'. [ 1187.977766][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4842'. [ 1188.046303][T15511] m920x_read = error: -19 [ 1188.050720][T15511] dvb-usb: error while querying for an remote control event. [ 1188.191809][T15511] m920x_read = error: -19 [ 1188.199651][T15511] dvb-usb: error while querying for an remote control event. [ 1188.277496][T20033] usb 2-1: USB disconnect, device number 9 [ 1188.326150][T15511] m920x_read = error: -19 [ 1188.333530][T15511] dvb-usb: error while querying for an remote control event. [ 1188.445453][T15511] m920x_read = error: -19 [ 1188.445485][T15511] dvb-usb: error while querying for an remote control event. [ 1188.500766][T22663] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4844'. [ 1188.555338][T15511] m920x_read = error: -19 [ 1188.555368][T15511] dvb-usb: error while querying for an remote control event. [ 1188.665440][T15511] m920x_read = error: -19 [ 1188.665473][T15511] dvb-usb: error while querying for an remote control event. [ 1188.775712][T15511] m920x_read = error: -19 [ 1188.775744][T15511] dvb-usb: error while querying for an remote control event. [ 1188.884904][T15511] m920x_read = error: -19 [ 1188.884935][T15511] dvb-usb: error while querying for an remote control event. [ 1188.998297][T11256] m920x_read = error: -19 [ 1188.998320][T11256] dvb-usb: error while querying for an remote control event. [ 1189.105488][T11256] m920x_read = error: -19 [ 1189.105519][T11256] dvb-usb: error while querying for an remote control event. [ 1189.205348][T15511] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1189.225556][T11256] m920x_read = error: -19 [ 1189.225589][T11256] dvb-usb: error while querying for an remote control event. [ 1189.335530][T11256] m920x_read = error: -19 [ 1189.335563][T11256] dvb-usb: error while querying for an remote control event. [ 1189.337417][T20033] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1189.355497][T15511] usb 2-1: Using ep0 maxpacket: 8 [ 1189.401160][T15511] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1189.421476][T15511] usb 2-1: config 239 has an invalid interface number: 255 but max is 0 [ 1189.436629][T15511] usb 2-1: config 239 has no interface number 0 [ 1189.445443][T11256] m920x_read = error: -19 [ 1189.451624][T11256] dvb-usb: error while querying for an remote control event. [ 1189.460288][T15511] usb 2-1: config 239 interface 255 altsetting 99 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1189.475329][T15511] usb 2-1: config 239 interface 255 has no altsetting 0 [ 1189.493513][T15511] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=ba.f6 [ 1189.503791][T15511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.504878][T20033] usb 3-1: device descriptor read/64, error -71 [ 1189.512571][T15511] usb 2-1: Product: syz [ 1189.525412][T15511] usb 2-1: Manufacturer: syz [ 1189.531629][T15511] usb 2-1: SerialNumber: syz [ 1189.575519][T11256] m920x_read = error: -19 [ 1189.580183][T11256] dvb-usb: error while querying for an remote control event. [ 1189.706764][T11256] m920x_read = error: -19 [ 1189.716754][T11256] dvb-usb: error while querying for an remote control event. [ 1189.765887][T20033] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1189.767138][T15511] visor 2-1:239.255: Sony Clie 3.5 converter detected [ 1189.796727][T15511] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 1189.813611][T15511] visor 2-1:239.255: probe with driver visor failed with error -71 [ 1189.832918][T15511] usb 2-1: USB disconnect, device number 10 [ 1189.850535][T15504] m920x_read = error: -19 [ 1189.857387][T15504] dvb-usb: error while querying for an remote control event. [ 1189.915103][T20033] usb 3-1: device descriptor read/64, error -71 [ 1189.975318][T15504] m920x_read = error: -19 [ 1189.979747][T15504] dvb-usb: error while querying for an remote control event. [ 1190.035782][T20033] usb usb3-port1: attempt power cycle [ 1190.095240][T15511] m920x_read = error: -19 [ 1190.099627][T15511] dvb-usb: error while querying for an remote control event. [ 1190.215772][T15511] m920x_read = error: -19 [ 1190.220162][T15511] dvb-usb: error while querying for an remote control event. [ 1190.340739][T15511] m920x_read = error: -19 [ 1190.345295][T15511] dvb-usb: error while querying for an remote control event. [ 1190.384956][T20033] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1190.406157][T20033] usb 3-1: device descriptor read/8, error -71 [ 1190.455597][T15511] m920x_read = error: -19 [ 1190.465445][T15511] dvb-usb: error while querying for an remote control event. [ 1190.584055][T22688] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4856'. [ 1190.595656][T15511] m920x_read = error: -19 [ 1190.600317][T15511] dvb-usb: error while querying for an remote control event. [ 1190.674867][T20033] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1190.718949][T20033] usb 3-1: device descriptor read/8, error -71 [ 1190.725871][T15504] m920x_read = error: -19 [ 1190.731986][T15504] dvb-usb: error while querying for an remote control event. [ 1190.838496][T20033] usb usb3-port1: unable to enumerate USB device [ 1190.865481][T15504] m920x_read = error: -19 [ 1190.869906][T15504] dvb-usb: error while querying for an remote control event. [ 1190.998220][T15504] m920x_read = error: -19 [ 1191.002805][T15504] dvb-usb: error while querying for an remote control event. [ 1191.135456][T15511] m920x_read = error: -19 [ 1191.144432][T15511] dvb-usb: error while querying for an remote control event. [ 1191.265418][T15511] m920x_read = error: -19 [ 1191.269830][T15511] dvb-usb: error while querying for an remote control event. [ 1191.306952][T15504] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1191.415451][T15511] m920x_read = error: -19 [ 1191.430116][T15511] dvb-usb: error while querying for an remote control event. [ 1191.507839][T15504] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1191.535423][T15504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.575405][T15511] m920x_read = error: -19 [ 1191.581963][T15511] dvb-usb: error while querying for an remote control event. [ 1191.597600][T15504] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1191.630447][T15504] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1191.646605][T15504] usb 2-1: Manufacturer: syz [ 1191.677134][T15504] usb 2-1: config 0 descriptor?? [ 1191.743060][T15511] m920x_read = error: -19 [ 1191.763282][T15511] dvb-usb: error while querying for an remote control event. [ 1191.895527][T15511] m920x_read = error: -19 [ 1191.909798][T22703] FAULT_INJECTION: forcing a failure. [ 1191.909798][T22703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.927934][T15511] dvb-usb: error while querying for an remote control event. [ 1191.936244][T15504] rc_core: IR keymap rc-hauppauge not found [ 1191.942204][T15504] Registered IR keymap rc-empty [ 1191.979917][T15504] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1191.991763][T22703] CPU: 0 UID: 0 PID: 22703 Comm: syz.1.4862 Not tainted syzkaller #0 PREEMPT(full) [ 1191.991797][T22703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1191.991813][T22703] Call Trace: [ 1191.991823][T22703] [ 1191.991833][T22703] dump_stack_lvl+0x189/0x250 [ 1191.991866][T22703] ? __pfx____ratelimit+0x10/0x10 [ 1191.991895][T22703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1191.991920][T22703] ? __pfx__printk+0x10/0x10 [ 1191.991959][T22703] should_fail_ex+0x414/0x560 [ 1191.991995][T22703] _copy_to_user+0x31/0xb0 [ 1191.992026][T22703] simple_read_from_buffer+0xe1/0x170 [ 1191.992066][T22703] proc_fail_nth_read+0x1b3/0x220 [ 1191.992101][T22703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1191.992134][T22703] ? rw_verify_area+0x2a6/0x4d0 [ 1191.992164][T22703] ? __lock_acquire+0xab9/0xd20 [ 1191.992186][T22703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1191.992217][T22703] vfs_read+0x1fd/0xa30 [ 1191.992248][T22703] ? fdget_pos+0x247/0x320 [ 1191.992281][T22703] ? __pfx___mutex_lock+0x10/0x10 [ 1191.992313][T22703] ? __pfx_vfs_read+0x10/0x10 [ 1191.992346][T22703] ? __fget_files+0x2a/0x420 [ 1191.992372][T22703] ? __fget_files+0x3a0/0x420 [ 1191.992393][T22703] ? __fget_files+0x2a/0x420 [ 1191.992424][T22703] ksys_read+0x145/0x250 [ 1191.992459][T22703] ? __pfx_ksys_read+0x10/0x10 [ 1191.992494][T22703] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1191.992527][T22703] ? lockdep_hardirqs_on+0x9c/0x150 [ 1191.992560][T22703] __do_fast_syscall_32+0xb6/0x2b0 [ 1191.992592][T22703] ? lockdep_hardirqs_on+0x9c/0x150 [ 1191.992626][T22703] do_fast_syscall_32+0x34/0x80 [ 1191.992658][T22703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1191.992691][T22703] RIP: 0023:0xf70ad539 [ 1191.992713][T22703] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1191.992733][T22703] RSP: 002b:00000000f549d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1191.992758][T22703] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f549d620 [ 1191.992774][T22703] RDX: 000000000000000f RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 1191.992789][T22703] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1191.992802][T22703] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1191.992817][T22703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1191.992851][T22703] [ 1192.235559][T15504] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input73 [ 1192.251627][T22714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4866'. [ 1192.266334][T15504] m920x_read = error: -19 [ 1192.270800][T15504] dvb-usb: error while querying for an remote control event. [ 1192.294126][T22713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4865'. [ 1192.315847][T22714] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4866'. [ 1192.325034][T22714] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4866'. [ 1192.385541][T15511] m920x_read = error: -19 [ 1192.390105][T15511] dvb-usb: error while querying for an remote control event. [ 1192.401507][T15511] usb 2-1: USB disconnect, device number 11 [ 1192.505424][T15504] m920x_read = error: -19 [ 1192.509836][T15504] dvb-usb: error while querying for an remote control event. [ 1192.625459][T15504] m920x_read = error: -19 [ 1192.629872][T15504] dvb-usb: error while querying for an remote control event. [ 1192.755922][T15504] m920x_read = error: -19 [ 1192.775973][T15504] dvb-usb: error while querying for an remote control event. [ 1192.945299][T15504] m920x_read = error: -19 [ 1192.957771][T15504] dvb-usb: error while querying for an remote control event. [ 1193.135522][T15504] m920x_read = error: -19 [ 1193.139936][T15504] dvb-usb: error while querying for an remote control event. [ 1193.320807][T15504] m920x_read = error: -19 [ 1193.353255][T22734] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1193.378381][T22734] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1193.382335][T15504] dvb-usb: error while querying for an remote control event. [ 1193.582018][T22737] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4873'. [ 1193.675494][T15504] m920x_read = error: -19 [ 1193.685912][T15504] dvb-usb: error while querying for an remote control event. [ 1193.855399][T15504] m920x_read = error: -19 [ 1193.859854][T15504] dvb-usb: error while querying for an remote control event. [ 1194.025468][T15504] m920x_read = error: -19 [ 1194.035461][T15504] dvb-usb: error while querying for an remote control event. [ 1194.175309][T15504] m920x_read = error: -19 [ 1194.179728][T15504] dvb-usb: error while querying for an remote control event. [ 1194.315491][T15504] m920x_read = error: -19 [ 1194.338006][T15504] dvb-usb: error while querying for an remote control event. [ 1194.369959][T22750] FAULT_INJECTION: forcing a failure. [ 1194.369959][T22750] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.446602][T22750] CPU: 1 UID: 0 PID: 22750 Comm: syz.0.4878 Not tainted syzkaller #0 PREEMPT(full) [ 1194.446636][T22750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1194.446651][T22750] Call Trace: [ 1194.446661][T22750] [ 1194.446672][T22750] dump_stack_lvl+0x189/0x250 [ 1194.446704][T22750] ? __pfx____ratelimit+0x10/0x10 [ 1194.446734][T22750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1194.446758][T22750] ? __pfx__printk+0x10/0x10 [ 1194.446787][T22750] ? __pfx___might_resched+0x10/0x10 [ 1194.446821][T22750] ? fs_reclaim_acquire+0x7d/0x100 [ 1194.446864][T22750] should_fail_ex+0x414/0x560 [ 1194.446899][T22750] should_failslab+0xa8/0x100 [ 1194.446924][T22750] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1194.446957][T22750] ? __flush_work+0xd2/0xbc0 [ 1194.446985][T22750] ? led_tg_check+0x190/0x3e0 [ 1194.447023][T22750] led_tg_check+0x190/0x3e0 [ 1194.447058][T22750] xt_check_target+0x3c3/0xa90 [ 1194.447098][T22750] ? __pfx_xt_check_target+0x10/0x10 [ 1194.447135][T22750] ? __pfx___might_resched+0x10/0x10 [ 1194.447167][T22750] ? nft_pernet+0x23/0x240 [ 1194.447200][T22750] ? nft_pernet+0x23/0x240 [ 1194.447228][T22750] ? nft_pernet+0x23/0x240 [ 1194.447268][T22750] nft_target_init+0x672/0x9c0 [ 1194.447289][T22750] ? __sys_sendmsg+0x164/0x220 [ 1194.447314][T22750] ? __do_fast_syscall_32+0xb6/0x2b0 [ 1194.447356][T22750] ? __pfx_nft_target_init+0x10/0x10 [ 1194.447419][T22750] ? rcu_is_watching+0x15/0xb0 [ 1194.447446][T22750] ? trace_kmalloc+0x1f/0xd0 [ 1194.447475][T22750] ? __kmalloc_noprof+0x432/0x7f0 [ 1194.447515][T22750] nf_tables_newrule+0x1791/0x28a0 [ 1194.447565][T22750] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1194.447598][T22750] ? nfnl_pernet+0x23/0x240 [ 1194.447647][T22750] ? __nla_parse+0x40/0x60 [ 1194.447686][T22750] nfnetlink_rcv+0x11d9/0x2590 [ 1194.447761][T22750] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1194.447822][T22750] ? ref_tracker_free+0x63a/0x7d0 [ 1194.447887][T22750] ? __netlink_deliver_tap+0x807/0x850 [ 1194.447911][T22750] ? netlink_deliver_tap+0x2e/0x1b0 [ 1194.447958][T22750] netlink_unicast+0x82f/0x9e0 [ 1194.448004][T22750] ? __pfx_netlink_unicast+0x10/0x10 [ 1194.448043][T22750] ? netlink_sendmsg+0x642/0xb30 [ 1194.448065][T22750] ? skb_put+0x11b/0x210 [ 1194.448095][T22750] netlink_sendmsg+0x805/0xb30 [ 1194.448133][T22750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.448162][T22750] ? __import_iovec+0x5d4/0x7f0 [ 1194.448183][T22750] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1194.448217][T22750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1194.448240][T22750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.448266][T22750] __sock_sendmsg+0x21c/0x270 [ 1194.448305][T22750] ____sys_sendmsg+0x505/0x830 [ 1194.448340][T22750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1194.448387][T22750] ___sys_sendmsg+0x21f/0x2a0 [ 1194.448419][T22750] ? __pfx____sys_sendmsg+0x10/0x10 [ 1194.448490][T22750] ? __fget_files+0x2a/0x420 [ 1194.448514][T22750] ? __fget_files+0x3a0/0x420 [ 1194.448547][T22750] __sys_sendmsg+0x164/0x220 [ 1194.448577][T22750] ? __pfx___sys_sendmsg+0x10/0x10 [ 1194.448616][T22750] ? __pfx_ksys_write+0x10/0x10 [ 1194.448652][T22750] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1194.448685][T22750] ? lockdep_hardirqs_on+0x9c/0x150 [ 1194.448718][T22750] __do_fast_syscall_32+0xb6/0x2b0 [ 1194.448750][T22750] ? lockdep_hardirqs_on+0x9c/0x150 [ 1194.448785][T22750] do_fast_syscall_32+0x34/0x80 [ 1194.448823][T22750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1194.448852][T22750] RIP: 0023:0xf7f25539 [ 1194.448873][T22750] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1194.448894][T22750] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1194.448919][T22750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 1194.448936][T22750] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1194.448950][T22750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1194.448964][T22750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1194.448978][T22750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1194.449013][T22750] [ 1194.486992][T15504] m920x_read = error: -19 [ 1194.891500][T15504] dvb-usb: error while querying for an remote control event. [ 1195.015516][T15504] m920x_read = error: -19 [ 1195.026491][T15504] dvb-usb: error while querying for an remote control event. [ 1195.175742][T15511] m920x_read = error: -19 [ 1195.180492][T15511] dvb-usb: error while querying for an remote control event. [ 1195.307072][T15511] m920x_read = error: -19 [ 1195.314282][T15511] dvb-usb: error while querying for an remote control event. [ 1195.345876][T15504] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1195.445874][T15511] m920x_read = error: -19 [ 1195.450361][T15511] dvb-usb: error while querying for an remote control event. [ 1195.556774][T15504] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1195.577539][T15511] m920x_read = error: -19 [ 1195.582088][T15511] dvb-usb: error while querying for an remote control event. [ 1195.591261][T15504] usb 2-1: not running at top speed; connect to a high speed hub [ 1195.608005][T15504] usb 2-1: config 12 has an invalid interface number: 187 but max is 0 [ 1195.626661][T15504] usb 2-1: config 12 has no interface number 0 [ 1195.635604][T15504] usb 2-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1195.675517][T15504] usb 2-1: config 12 interface 187 has no altsetting 0 [ 1195.716318][T15511] m920x_read = error: -19 [ 1195.720771][T15511] dvb-usb: error while querying for an remote control event. [ 1195.741202][T15504] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=4e.fa [ 1195.761488][T15504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.790969][T15504] usb 2-1: Product: syz [ 1195.805056][T15504] usb 2-1: Manufacturer: syz [ 1195.805680][T22772] FAULT_INJECTION: forcing a failure. [ 1195.805680][T22772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1195.824117][T15504] usb 2-1: SerialNumber: syz [ 1195.842293][T22759] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1195.855487][T15511] m920x_read = error: -19 [ 1195.859944][T15511] dvb-usb: error while querying for an remote control event. [ 1195.891653][T22772] CPU: 1 UID: 0 PID: 22772 Comm: syz.6.4887 Not tainted syzkaller #0 PREEMPT(full) [ 1195.891685][T22772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1195.891700][T22772] Call Trace: [ 1195.891709][T22772] [ 1195.891720][T22772] dump_stack_lvl+0x189/0x250 [ 1195.891750][T22772] ? __pfx____ratelimit+0x10/0x10 [ 1195.891786][T22772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1195.891811][T22772] ? __pfx__printk+0x10/0x10 [ 1195.891835][T22772] ? __might_fault+0xb0/0x130 [ 1195.891888][T22772] should_fail_ex+0x414/0x560 [ 1195.891922][T22772] _copy_from_iter+0x1de/0x1790 [ 1195.891970][T22772] ? __pfx__copy_from_iter+0x10/0x10 [ 1195.892018][T22772] bcm_sendmsg+0x15b/0x6a0 [ 1195.892046][T22772] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1195.892073][T22772] ? __import_iovec+0x5d4/0x7f0 [ 1195.892091][T22772] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1195.892124][T22772] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1195.892145][T22772] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1195.892166][T22772] __sock_sendmsg+0x21c/0x270 [ 1195.892202][T22772] ____sys_sendmsg+0x505/0x830 [ 1195.892232][T22772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1195.892273][T22772] ___sys_sendmsg+0x21f/0x2a0 [ 1195.892301][T22772] ? __pfx____sys_sendmsg+0x10/0x10 [ 1195.892360][T22772] ? __fget_files+0x2a/0x420 [ 1195.892380][T22772] ? __fget_files+0x3a0/0x420 [ 1195.892408][T22772] __sys_sendmsg+0x164/0x220 [ 1195.892436][T22772] ? __pfx___sys_sendmsg+0x10/0x10 [ 1195.892472][T22772] ? __pfx_ksys_write+0x10/0x10 [ 1195.892506][T22772] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1195.892537][T22772] ? lockdep_hardirqs_on+0x9c/0x150 [ 1195.892567][T22772] __do_fast_syscall_32+0xb6/0x2b0 [ 1195.892597][T22772] ? lockdep_hardirqs_on+0x9c/0x150 [ 1195.892627][T22772] do_fast_syscall_32+0x34/0x80 [ 1195.892656][T22772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1195.892681][T22772] RIP: 0023:0xf7fc7539 [ 1195.892704][T22772] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1195.892741][T22772] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1195.892783][T22772] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 1195.892800][T22772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1195.892813][T22772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1195.892827][T22772] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1195.892841][T22772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1195.892875][T22772] [ 1195.985700][T15511] m920x_read = error: -19 [ 1196.064835][T20033] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1196.177817][T15511] dvb-usb: error while querying for an remote control event. [ 1196.196630][T15504] ti_usb_3410_5052 2-1:12.187: TI USB 3410 1 port adapter converter detected [ 1196.215365][T20033] usb 3-1: Using ep0 maxpacket: 32 [ 1196.216263][T15504] ti_usb_3410_5052 2-1:12.187: missing endpoints [ 1196.233120][T20033] usb 3-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 1196.269866][T15504] usb 2-1: USB disconnect, device number 12 [ 1196.274909][T20033] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1196.315766][T15515] m920x_read = error: -19 [ 1196.320310][T15515] dvb-usb: error while querying for an remote control event. [ 1196.372448][T20033] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1196.404351][T20033] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1196.443017][T20033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.446200][T11256] m920x_read = error: -19 [ 1196.457017][T11256] dvb-usb: error while querying for an remote control event. [ 1196.506000][T20033] usb 3-1: config 0 descriptor?? [ 1196.551561][T20033] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1196.585530][T11256] m920x_read = error: -19 [ 1196.590119][T11256] dvb-usb: error while querying for an remote control event. [ 1196.725560][T11256] m920x_read = error: -19 [ 1196.730160][T11256] dvb-usb: error while querying for an remote control event. [ 1196.876086][T11256] m920x_read = error: -19 [ 1196.880741][T11256] dvb-usb: error while querying for an remote control event. [ 1197.021030][T11256] m920x_read = error: -19 [ 1197.056472][T11256] dvb-usb: error while querying for an remote control event. [ 1197.235504][T11256] m920x_read = error: -19 [ 1197.240124][T11256] dvb-usb: error while querying for an remote control event. [ 1197.365412][T11256] m920x_read = error: -19 [ 1197.379574][T11256] dvb-usb: error while querying for an remote control event. [ 1197.525670][T11256] m920x_read = error: -19 [ 1197.589635][T22807] sctp: [Deprecated]: syz.0.4899 (pid 22807) Use of int in max_burst socket option. [ 1197.589635][T22807] Use struct sctp_assoc_value instead [ 1197.609315][T11256] dvb-usb: error while querying for an remote control event. [ 1197.875401][T11256] m920x_read = error: -19 [ 1197.890006][T11256] dvb-usb: error while querying for an remote control event. [ 1198.025440][T11256] m920x_read = error: -19 [ 1198.030486][T11256] dvb-usb: error while querying for an remote control event. [ 1198.166364][T11256] m920x_read = error: -19 [ 1198.188779][T11256] dvb-usb: error while querying for an remote control event. [ 1198.345381][T11256] m920x_read = error: -19 [ 1198.384324][T11256] dvb-usb: error while querying for an remote control event. [ 1198.556342][T11256] m920x_read = error: -19 [ 1198.654688][T11256] dvb-usb: error while querying for an remote control event. [ 1198.719358][T20033] usb 3-1: USB disconnect, device number 101 [ 1198.834089][T15504] m920x_read = error: -19 [ 1198.845202][T15504] dvb-usb: error while querying for an remote control event. [ 1198.995438][T11256] m920x_read = error: -19 [ 1198.999876][T11256] dvb-usb: error while querying for an remote control event. [ 1199.014096][T22827] FAULT_INJECTION: forcing a failure. [ 1199.014096][T22827] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.014881][T15504] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 1199.057550][T22827] CPU: 1 UID: 0 PID: 22827 Comm: syz.6.4906 Not tainted syzkaller #0 PREEMPT(full) [ 1199.057581][T22827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1199.057594][T22827] Call Trace: [ 1199.057603][T22827] [ 1199.057612][T22827] dump_stack_lvl+0x189/0x250 [ 1199.057639][T22827] ? __pfx____ratelimit+0x10/0x10 [ 1199.057664][T22827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1199.057686][T22827] ? __pfx__printk+0x10/0x10 [ 1199.057713][T22827] ? __pfx___might_resched+0x10/0x10 [ 1199.057741][T22827] should_fail_ex+0x414/0x560 [ 1199.057772][T22827] should_failslab+0xa8/0x100 [ 1199.057794][T22827] __kmalloc_noprof+0xcb/0x7f0 [ 1199.057828][T22827] ? kfree+0x4d/0x6d0 [ 1199.057851][T22827] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1199.057888][T22827] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1199.057920][T22827] ? tomoyo_domain+0xd9/0x130 [ 1199.057955][T22827] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1199.057979][T22827] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1199.058006][T22827] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1199.058048][T22827] ? __lock_acquire+0xab9/0xd20 [ 1199.058089][T22827] ? __fget_files+0x2a/0x420 [ 1199.058113][T22827] ? __fget_files+0x3a0/0x420 [ 1199.058130][T22827] ? __fget_files+0x2a/0x420 [ 1199.058153][T22827] security_file_ioctl_compat+0xcb/0x2d0 [ 1199.058179][T22827] __ia32_compat_sys_ioctl+0x128/0x840 [ 1199.058210][T22827] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1199.058237][T22827] ? __fget_files+0x3a0/0x420 [ 1199.058262][T22827] ? fput+0xa0/0xd0 [ 1199.058285][T22827] ? ksys_write+0x22a/0x250 [ 1199.058311][T22827] ? exc_page_fault+0x82/0x100 [ 1199.058337][T22827] ? __pfx_ksys_write+0x10/0x10 [ 1199.058368][T22827] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1199.058397][T22827] ? lockdep_hardirqs_on+0x9c/0x150 [ 1199.058426][T22827] __do_fast_syscall_32+0xb6/0x2b0 [ 1199.058454][T22827] ? lockdep_hardirqs_on+0x9c/0x150 [ 1199.058483][T22827] do_fast_syscall_32+0x34/0x80 [ 1199.058511][T22827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1199.058536][T22827] RIP: 0023:0xf7fc7539 [ 1199.058554][T22827] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1199.058572][T22827] RSP: 002b:00000000f549555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1199.058594][T22827] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004004e502 [ 1199.058609][T22827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1199.058621][T22827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1199.058634][T22827] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1199.058646][T22827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1199.058677][T22827] [ 1199.058686][T22827] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1199.163755][T11256] m920x_read = error: -19 [ 1199.254904][T20033] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1199.389748][T15504] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1199.405404][T15504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.417375][T11256] dvb-usb: error while querying for an remote control event. [ 1199.427614][T15504] usb 2-1: config 0 descriptor?? [ 1199.456468][T22826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4905'. [ 1199.565429][T11256] m920x_read = error: -19 [ 1199.570096][T11256] dvb-usb: error while querying for an remote control event. [ 1199.610789][T22831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1199.697121][T11256] m920x_read = error: -19 [ 1199.701822][T11256] dvb-usb: error while querying for an remote control event. [ 1199.746292][T20033] usb 3-1: Using ep0 maxpacket: 32 [ 1199.753985][T20033] usb 3-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 1199.777812][T20033] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1199.791270][T20033] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1199.799784][T20033] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1199.809494][T20033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.816478][T22839] FAULT_INJECTION: forcing a failure. [ 1199.816478][T22839] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.822823][T20033] usb 3-1: config 0 descriptor?? [ 1199.831238][T11256] m920x_read = error: -19 [ 1199.836297][T22839] CPU: 1 UID: 0 PID: 22839 Comm: syz.0.4909 Not tainted syzkaller #0 PREEMPT(full) [ 1199.836334][T22839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1199.836351][T22839] Call Trace: [ 1199.836361][T22839] [ 1199.836372][T22839] dump_stack_lvl+0x189/0x250 [ 1199.836406][T22839] ? __pfx____ratelimit+0x10/0x10 [ 1199.836438][T22839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1199.836464][T22839] ? __pfx__printk+0x10/0x10 [ 1199.836535][T22839] should_fail_ex+0x414/0x560 [ 1199.836572][T22839] should_failslab+0xa8/0x100 [ 1199.836599][T22839] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1199.836634][T22839] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1199.836665][T22839] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1199.836695][T22839] ? sctp_add_bind_addr+0x8c/0x370 [ 1199.836723][T22839] ? sctp_add_bind_addr+0xb0/0x370 [ 1199.836758][T22839] sctp_add_bind_addr+0x8c/0x370 [ 1199.836793][T22839] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1199.836829][T22839] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1199.836861][T22839] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1199.836888][T22839] ? sctp_association_new+0x18b3/0x25f0 [ 1199.836926][T22839] ? sctp_v6_is_any+0x64/0x80 [ 1199.836960][T22839] ? sctp_copy_one_addr+0x93/0x360 [ 1199.836995][T22839] sctp_bind_addr_copy+0xb3/0x3c0 [ 1199.837027][T22839] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1199.837057][T22839] sctp_connect_new_asoc+0x2e0/0x690 [ 1199.837098][T22839] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1199.837133][T22839] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1199.837168][T22839] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1199.837195][T22839] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1199.837227][T22839] sctp_sendmsg+0x155c/0x2810 [ 1199.837276][T22839] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1199.837316][T22839] ? aa_sk_perm+0x81e/0x950 [ 1199.837355][T22839] ? __pfx_aa_sk_perm+0x10/0x10 [ 1199.837391][T22839] ? sock_rps_record_flow+0x19/0x410 [ 1199.837419][T22839] ? inet_sendmsg+0x2f4/0x370 [ 1199.837450][T22839] __sock_sendmsg+0x19c/0x270 [ 1199.837491][T22839] __sys_sendto+0x3bd/0x520 [ 1199.837528][T22839] ? __pfx___sys_sendto+0x10/0x10 [ 1199.837550][T22839] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1199.837600][T22839] ? __fget_files+0x3a0/0x420 [ 1199.837635][T22839] ? ksys_write+0x22a/0x250 [ 1199.837668][T22839] ? exc_page_fault+0x82/0x100 [ 1199.837698][T22839] ? __pfx_ksys_write+0x10/0x10 [ 1199.837738][T22839] __ia32_sys_sendto+0xdd/0x100 [ 1199.837770][T22839] __do_fast_syscall_32+0xb6/0x2b0 [ 1199.837804][T22839] ? lockdep_hardirqs_on+0x9c/0x150 [ 1199.837838][T22839] do_fast_syscall_32+0x34/0x80 [ 1199.837871][T22839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1199.837902][T22839] RIP: 0023:0xf7f25539 [ 1199.837923][T22839] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1199.837943][T22839] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1199.837968][T22839] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1199.837985][T22839] RDX: 0000000000000001 RSI: 000000000400c0d4 RDI: 0000000080000140 [ 1199.838001][T22839] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1199.838016][T22839] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1199.838030][T22839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1199.838066][T22839] [ 1199.854603][T22820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.906672][T11256] dvb-usb: error while querying for an remote control event. [ 1199.911585][T15485] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1200.045639][T11256] m920x_read = error: -19 [ 1200.054496][T20033] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1200.080099][T11256] dvb-usb: error while querying for an remote control event. [ 1200.099820][T22820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.249016][T11256] m920x_read = error: -19 [ 1200.253534][T11256] dvb-usb: error while querying for an remote control event. [ 1200.365512][T11256] m920x_read = error: -19 [ 1200.370191][T11256] dvb-usb: error while querying for an remote control event. [ 1200.386804][T15485] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.397273][T15485] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1200.407434][T15485] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1200.422945][T15485] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1200.432177][T15485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.441152][T15485] usb 6-1: Product: syz [ 1200.446047][T15485] usb 6-1: Manufacturer: syz [ 1200.450689][T15485] usb 6-1: SerialNumber: syz [ 1200.469678][T15485] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1200.480279][T15485] cdc_ncm 6-1:1.0: bind() failure [ 1200.485169][T11256] m920x_read = error: -19 [ 1200.490001][T11256] dvb-usb: error while querying for an remote control event. [ 1200.615303][T11256] m920x_read = error: -19 [ 1200.619741][T11256] dvb-usb: error while querying for an remote control event. [ 1200.699017][T20033] usb 6-1: USB disconnect, device number 54 [ 1200.735611][T11256] m920x_read = error: -19 [ 1200.741315][T11256] dvb-usb: error while querying for an remote control event. [ 1200.855328][T11256] m920x_read = error: -19 [ 1200.859956][T11256] dvb-usb: error while querying for an remote control event. [ 1200.975336][T11256] m920x_read = error: -19 [ 1200.979910][T11256] dvb-usb: error while querying for an remote control event. [ 1201.061118][T15504] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1201.071394][T15504] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1201.085035][T15504] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1201.095601][T11256] m920x_read = error: -19 [ 1201.100003][T11256] dvb-usb: error while querying for an remote control event. [ 1201.113866][T15504] usb 2-1: USB disconnect, device number 13 [ 1201.225409][T11256] m920x_read = error: -19 [ 1201.229861][T11256] dvb-usb: error while querying for an remote control event. [ 1201.345442][T15504] m920x_read = error: -19 [ 1201.349874][T15504] dvb-usb: error while querying for an remote control event. [ 1201.495467][T15504] m920x_read = error: -19 [ 1201.499966][T15504] dvb-usb: error while querying for an remote control event. [ 1201.635509][T15504] m920x_read = error: -19 [ 1201.640012][T15504] dvb-usb: error while querying for an remote control event. [ 1201.815327][T15504] m920x_read = error: -19 [ 1201.823828][T15504] dvb-usb: error while querying for an remote control event. [ 1201.919656][T15504] usb 3-1: USB disconnect, device number 102 [ 1201.955887][T15515] m920x_read = error: -19 [ 1201.962616][T15515] dvb-usb: error while querying for an remote control event. [ 1202.105633][T15515] m920x_read = error: -19 [ 1202.110106][T15515] dvb-usb: error while querying for an remote control event. [ 1202.275653][T15504] m920x_read = error: -19 [ 1202.295501][T15504] dvb-usb: error while querying for an remote control event. [ 1202.445481][T15504] m920x_read = error: -19 [ 1202.472815][T15504] dvb-usb: error while querying for an remote control event. [ 1202.645441][T15504] m920x_read = error: -19 [ 1202.669836][T15504] dvb-usb: error while querying for an remote control event. [ 1202.817188][T15504] m920x_read = error: -19 [ 1202.835488][T15504] dvb-usb: error while querying for an remote control event. [ 1202.891214][T22875] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4919'. [ 1202.995643][T15504] m920x_read = error: -19 [ 1203.002137][T15504] dvb-usb: error while querying for an remote control event. [ 1203.155543][T15504] m920x_read = error: -19 [ 1203.159958][T15504] dvb-usb: error while querying for an remote control event. [ 1203.300806][T15504] m920x_read = error: -19 [ 1203.338137][T15504] dvb-usb: error while querying for an remote control event. [ 1203.485428][T15504] m920x_read = error: -19 [ 1203.489827][T15504] dvb-usb: error while querying for an remote control event. [ 1203.495991][T22891] pim6reg: entered allmulticast mode [ 1203.564897][T20033] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1203.624208][T22897] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4928'. [ 1203.627182][T15504] m920x_read = error: -19 [ 1203.633572][T22897] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4928'. [ 1203.654048][T15504] dvb-usb: error while querying for an remote control event. [ 1203.657642][T22897] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1203.735183][T20033] usb 6-1: Using ep0 maxpacket: 16 [ 1203.745443][T20033] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1203.756723][T20033] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1203.765362][T15504] m920x_read = error: -19 [ 1203.767023][T20033] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1203.775534][T15504] dvb-usb: error while querying for an remote control event. [ 1203.780091][T20033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.795544][T20033] usb 6-1: Product: syz [ 1203.799840][T20033] usb 6-1: Manufacturer: syz [ 1203.804538][T20033] usb 6-1: SerialNumber: syz [ 1203.816890][T20033] usb 6-1: config 0 descriptor?? [ 1203.825062][T15485] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1203.885486][T15515] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1203.917908][T15504] m920x_read = error: -19 [ 1203.917940][T15504] dvb-usb: error while querying for an remote control event. [ 1203.988898][T15485] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1203.989010][T15485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.990737][T15485] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1203.990793][T15485] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1203.990817][T15485] usb 1-1: Manufacturer: syz [ 1204.000389][T15485] usb 1-1: config 0 descriptor?? [ 1204.026484][T15504] m920x_read = error: -19 [ 1204.026518][T15504] dvb-usb: error while querying for an remote control event. [ 1204.035395][T15515] usb 2-1: Using ep0 maxpacket: 32 [ 1204.037365][T15515] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1204.037401][T15515] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1204.037433][T15515] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1204.037480][T15515] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1204.037507][T15515] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.040648][T15515] usb 2-1: config 0 descriptor?? [ 1204.041392][T22899] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1204.058551][T15515] hub 2-1:0.0: USB hub found [ 1204.064353][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1204.089541][T20033] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input75 [ 1204.135287][T20033] imon:send_packet: packet tx failed (-71) [ 1204.142595][T15504] m920x_read = error: -19 [ 1204.165127][T15485] rc_core: IR keymap rc-hauppauge not found [ 1204.227883][T15504] dvb-usb: error while querying for an remote control event. [ 1204.230685][T15485] Registered IR keymap rc-empty [ 1204.251831][T15515] hub 2-1:0.0: 2 ports detected [ 1204.255234][T20033] imon 6-1:0.0: panel buttons/knobs setup failed [ 1204.299237][T15485] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1204.307107][T15485] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input74 [ 1204.355695][T15504] m920x_read = error: -19 [ 1204.358322][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 1204.360193][T15504] dvb-usb: error while querying for an remote control event. [ 1204.476144][T15485] usb 1-1: USB disconnect, device number 12 [ 1204.495425][T15504] m920x_read = error: -19 [ 1204.500049][T15504] dvb-usb: error while querying for an remote control event. [ 1204.549686][T20033] rc_core: IR keymap rc-imon-pad not found [ 1204.556984][T20033] Registered IR keymap rc-empty [ 1204.571541][T20033] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1204.608983][T20033] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1204.625730][T15504] m920x_read = error: -19 [ 1204.630168][T15504] dvb-usb: error while querying for an remote control event. [ 1204.636489][T20033] imon:send_packet: packet tx failed (-71) [ 1204.669367][T20033] imon 6-1:0.0: remote input dev register failed [ 1204.694982][T20033] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1204.775459][T15504] m920x_read = error: -19 [ 1204.780038][T15504] dvb-usb: error while querying for an remote control event. [ 1204.799315][T20033] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1204.827425][T20033] imon:imon_probe: failed to initialize context! [ 1204.834401][T20033] imon 6-1:0.0: unable to register, err -19 [ 1204.905168][T20033] usb 6-1: USB disconnect, device number 55 [ 1204.925522][T15504] m920x_read = error: -19 [ 1204.935958][T15504] dvb-usb: error while querying for an remote control event. [ 1205.066873][T15504] m920x_read = error: -19 [ 1205.075472][T15504] dvb-usb: error while querying for an remote control event. [ 1205.140929][T22926] loop6: detected capacity change from 0 to 524288000 [ 1205.206121][T11256] m920x_read = error: -19 [ 1205.219124][T11256] dvb-usb: error while querying for an remote control event. [ 1205.227500][T22926] loop6: detected capacity change from 524288000 to 1 [ 1205.267753][T15515] hub 2-1:0.0: set hub depth failed [ 1205.286016][T20033] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1205.297711][T15515] usb 2-1: USB disconnect, device number 14 [ 1205.366453][T11256] m920x_read = error: -19 [ 1205.370943][T11256] dvb-usb: error while querying for an remote control event. [ 1205.484970][T20033] usb 6-1: Using ep0 maxpacket: 16 [ 1205.519509][T20033] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1205.565451][T11256] m920x_read = error: -19 [ 1205.580044][T11256] dvb-usb: error while querying for an remote control event. [ 1205.609321][T20033] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1205.675061][T20033] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1205.707242][T20033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.718216][T20033] usb 6-1: Product: syz [ 1205.724342][T20033] usb 6-1: Manufacturer: syz [ 1205.729589][T11256] m920x_read = error: -19 [ 1205.730511][T20033] usb 6-1: SerialNumber: syz [ 1205.746663][T20033] usb 6-1: config 0 descriptor?? [ 1205.753635][T11256] dvb-usb: error while querying for an remote control event. [ 1205.835437][T15515] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1205.915521][T11256] m920x_read = error: -19 [ 1205.919951][T11256] dvb-usb: error while querying for an remote control event. [ 1206.049742][T20033] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input77 [ 1206.065514][T15515] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1206.098881][T11256] m920x_read = error: -19 [ 1206.217453][T11256] dvb-usb: error while querying for an remote control event. [ 1206.235541][T15515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.250032][T22882] CUSE: unknown device info "KJ H+ۤ2LhL1`Ccn80(3նi>f_ٮ,<_eF" [ 1206.250948][T15515] usb 2-1: Product: syz [ 1206.322063][T22882] CUSE: unknown device info "<> &L;hUY-o3" [ 1206.355416][T11256] m920x_read = error: -19 [ 1206.367697][T22882] CUSE: unknown device info "3ܟ,̘" [ 1206.401428][T22882] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 1206.401428][T22882] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 1206.508381][T22882] CUSE: unknown device info "To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 1206.557258][T11256] dvb-usb: error while querying for an remote control event. [ 1206.574193][T15515] usb 2-1: Manufacturer: syz [ 1206.597818][T15515] usb 2-1: SerialNumber: syz [ 1206.604775][T22882] CUSE: DEVNAME unspecified [ 1206.647907][T15515] usb 2-1: config 0 descriptor?? [ 1206.688126][T11256] m920x_read = error: -19 [ 1206.692526][T11256] dvb-usb: error while querying for an remote control event. [ 1206.712112][T15515] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1206.804841][T20033] rc_core: IR keymap rc-imon-pad not found [ 1206.810964][T20033] Registered IR keymap rc-empty [ 1206.834390][T20033] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1206.925589][T11256] m920x_read = error: -19 [ 1206.930116][T11256] dvb-usb: error while querying for an remote control event. [ 1206.945582][T20033] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1207.001644][T20033] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1207.100923][T20033] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input78 [ 1207.115725][T11256] m920x_read = error: -19 [ 1207.134432][T11256] dvb-usb: error while querying for an remote control event. [ 1207.176066][T20033] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:56> initialized [ 1207.315509][T11256] m920x_read = error: -19 [ 1207.340939][T11256] dvb-usb: error while querying for an remote control event. [ 1207.375865][T15515] sonixb 2-1:0.0: Error writing register 01: -110 [ 1207.402935][T15515] sonixb 2-1:0.0: probe with driver sonixb failed with error -110 [ 1207.498226][T15515] m920x_read = error: -19 [ 1207.540290][T15515] dvb-usb: error while querying for an remote control event. [ 1207.610778][T20033] usb 2-1: USB disconnect, device number 15 [ 1207.715224][T15515] m920x_read = error: -19 [ 1207.719721][T15515] dvb-usb: error while querying for an remote control event. [ 1207.845527][T15515] m920x_read = error: -19 [ 1207.861441][T15515] dvb-usb: error while querying for an remote control event. [ 1207.874063][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4945'. [ 1207.924628][T22959] bridge0: entered promiscuous mode [ 1207.995614][T15515] m920x_read = error: -19 [ 1208.001237][T15515] dvb-usb: error while querying for an remote control event. [ 1208.145485][T15515] m920x_read = error: -19 [ 1208.150063][T15515] dvb-usb: error while querying for an remote control event. [ 1208.285425][T15515] m920x_read = error: -19 [ 1208.322217][T15515] dvb-usb: error while querying for an remote control event. [ 1208.475665][T15515] m920x_read = error: -19 [ 1208.480609][T15515] dvb-usb: error while querying for an remote control event. [ 1208.559454][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1208.567121][T15485] usb 6-1: USB disconnect, device number 56 [ 1208.604892][T20033] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1208.648308][T15515] m920x_read = error: -19 [ 1208.667301][T15515] dvb-usb: error while querying for an remote control event. [ 1208.766615][T20033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.783732][T20033] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1208.825534][T15515] m920x_read = error: -19 [ 1208.829975][T15515] dvb-usb: error while querying for an remote control event. [ 1208.836234][T20033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.887034][T20033] usb 3-1: config 0 descriptor?? [ 1208.985470][T15515] m920x_read = error: -19 [ 1208.989861][T15515] dvb-usb: error while querying for an remote control event. [ 1209.137962][T15515] m920x_read = error: -19 [ 1209.153577][T22964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.195605][T15515] dvb-usb: error while querying for an remote control event. [ 1209.227331][T22964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.335407][T15515] m920x_read = error: -19 [ 1209.343176][T15515] dvb-usb: error while querying for an remote control event. [ 1209.475379][T15515] m920x_read = error: -19 [ 1209.480176][T15515] dvb-usb: error while querying for an remote control event. [ 1209.636026][T15515] m920x_read = error: -19 [ 1209.721989][T20033] usbhid 3-1:0.0: can't add hid device: -71 [ 1209.732479][T20033] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1209.757820][T20033] usb 3-1: USB disconnect, device number 103 [ 1209.773110][T15515] dvb-usb: error while querying for an remote control event. [ 1209.945425][T15515] m920x_read = error: -19 [ 1209.950254][T15515] dvb-usb: error while querying for an remote control event. [ 1210.075466][T15515] m920x_read = error: -19 [ 1210.080043][T15515] dvb-usb: error while querying for an remote control event. [ 1210.225276][T11256] m920x_read = error: -19 [ 1210.229746][T11256] dvb-usb: error while querying for an remote control event. [ 1210.346002][T11256] m920x_read = error: -19 [ 1210.351323][T11256] dvb-usb: error while querying for an remote control event. [ 1210.405444][T15515] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1210.465428][T11256] m920x_read = error: -19 [ 1210.469821][T11256] dvb-usb: error while querying for an remote control event. [ 1210.535216][T15515] usb 6-1: device descriptor read/64, error -71 [ 1210.585281][T11256] m920x_read = error: -19 [ 1210.589809][T11256] dvb-usb: error while querying for an remote control event. [ 1210.634866][T20033] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1210.705846][T11256] m920x_read = error: -19 [ 1210.710237][T11256] dvb-usb: error while querying for an remote control event. [ 1210.784824][T20033] usb 3-1: Using ep0 maxpacket: 8 [ 1210.785546][T15515] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1210.795276][T20033] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1210.807284][T20033] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.817891][T20033] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1210.825548][T11256] m920x_read = error: -19 [ 1210.830518][T20033] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1210.831375][T11256] dvb-usb: error while querying for an remote control event. [ 1210.852940][T20033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.861501][T20033] usb 3-1: Product: syz [ 1210.865776][T20033] usb 3-1: Manufacturer: syz [ 1210.870406][T20033] usb 3-1: SerialNumber: syz [ 1210.934825][T15515] usb 6-1: device descriptor read/64, error -71 [ 1210.955442][T11256] m920x_read = error: -19 [ 1210.959840][T11256] dvb-usb: error while querying for an remote control event. [ 1211.045965][T15515] usb usb6-port1: attempt power cycle [ 1211.075546][T11256] m920x_read = error: -19 [ 1211.090266][T11256] dvb-usb: error while querying for an remote control event. [ 1211.111885][T20033] usb 3-1: 0:2 : does not exist [ 1211.160516][T20033] usb 3-1: USB disconnect, device number 104 [ 1211.200660][T22950] udevd[22950]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1211.225096][T11256] m920x_read = error: -19 [ 1211.229507][T11256] dvb-usb: error while querying for an remote control event. [ 1211.375720][T11256] m920x_read = error: -19 [ 1211.380106][T11256] dvb-usb: error while querying for an remote control event. [ 1211.436067][T15515] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1211.456190][T15515] usb 6-1: device descriptor read/8, error -71 [ 1211.506884][T11256] m920x_read = error: -19 [ 1211.511286][T11256] dvb-usb: error while querying for an remote control event. [ 1211.626128][T11256] m920x_read = error: -19 [ 1211.632693][T11256] dvb-usb: error while querying for an remote control event. [ 1211.715776][T15515] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1211.746108][T15515] usb 6-1: device descriptor read/8, error -71 [ 1211.765452][T11256] m920x_read = error: -19 [ 1211.769854][T11256] dvb-usb: error while querying for an remote control event. [ 1211.814557][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4969'. [ 1211.865811][T15515] usb usb6-port1: unable to enumerate USB device [ 1211.937622][T11256] m920x_read = error: -19 [ 1211.942551][T11256] dvb-usb: error while querying for an remote control event. [ 1212.058352][T11256] m920x_read = error: -19 [ 1212.062877][T11256] dvb-usb: error while querying for an remote control event. [ 1212.185265][T11256] m920x_read = error: -19 [ 1212.190000][T11256] dvb-usb: error while querying for an remote control event. [ 1212.316203][T11256] m920x_read = error: -19 [ 1212.321861][T11256] dvb-usb: error while querying for an remote control event. [ 1212.446341][T11256] m920x_read = error: -19 [ 1212.454299][T11256] dvb-usb: error while querying for an remote control event. [ 1212.576496][T11256] m920x_read = error: -19 [ 1212.580906][T11256] dvb-usb: error while querying for an remote control event. [ 1212.696925][T11256] m920x_read = error: -19 [ 1212.798910][T11256] dvb-usb: error while querying for an remote control event. [ 1212.917306][T11256] m920x_read = error: -19 [ 1212.921990][T11256] dvb-usb: error while querying for an remote control event. [ 1213.035559][T11256] m920x_read = error: -19 [ 1213.039939][T11256] dvb-usb: error while querying for an remote control event. [ 1213.155911][T11256] m920x_read = error: -19 [ 1213.161195][T11256] dvb-usb: error while querying for an remote control event. [ 1213.290857][T15515] m920x_read = error: -19 [ 1213.300376][T15515] dvb-usb: error while querying for an remote control event. [ 1213.455244][T15515] m920x_read = error: -19 [ 1213.463923][T15515] dvb-usb: error while querying for an remote control event. [ 1213.605328][T15515] m920x_read = error: -19 [ 1213.619929][T15515] dvb-usb: error while querying for an remote control event. [ 1213.755656][T15515] m920x_read = error: -19 [ 1213.780414][T15515] dvb-usb: error while querying for an remote control event. [ 1213.926331][T15515] m920x_read = error: -19 [ 1213.937482][T15515] dvb-usb: error while querying for an remote control event. [ 1214.055590][T15515] m920x_read = error: -19 [ 1214.060442][T15515] dvb-usb: error while querying for an remote control event. [ 1214.186425][T15515] m920x_read = error: -19 [ 1214.201022][T15515] dvb-usb: error while querying for an remote control event. [ 1214.300326][T23053] FAULT_INJECTION: forcing a failure. [ 1214.300326][T23053] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.313895][T23053] CPU: 0 UID: 0 PID: 23053 Comm: syz.1.4974 Not tainted syzkaller #0 PREEMPT(full) [ 1214.313925][T23053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1214.313936][T23053] Call Trace: [ 1214.313944][T23053] [ 1214.313951][T23053] dump_stack_lvl+0x189/0x250 [ 1214.313976][T23053] ? __pfx____ratelimit+0x10/0x10 [ 1214.313998][T23053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1214.314016][T23053] ? __pfx__printk+0x10/0x10 [ 1214.314037][T23053] ? __pfx___might_resched+0x10/0x10 [ 1214.314056][T23053] ? fs_reclaim_acquire+0x7d/0x100 [ 1214.314086][T23053] should_fail_ex+0x414/0x560 [ 1214.314109][T23053] should_failslab+0xa8/0x100 [ 1214.314125][T23053] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1214.314147][T23053] ? skb_clone+0x212/0x3a0 [ 1214.314171][T23053] skb_clone+0x212/0x3a0 [ 1214.314195][T23053] ? nfnetlink_rcv+0x4ba/0x2590 [ 1214.314222][T23053] nfnetlink_rcv+0x4ec/0x2590 [ 1214.314251][T23053] ? is_bpf_text_address+0x26/0x2b0 [ 1214.314274][T23053] ? unwind_get_return_address+0x4d/0x90 [ 1214.314296][T23053] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1214.314319][T23053] ? arch_stack_walk+0xfc/0x150 [ 1214.314347][T23053] ? stack_trace_save+0x9c/0xe0 [ 1214.314367][T23053] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1214.314417][T23053] ? __lock_acquire+0xab9/0xd20 [ 1214.314440][T23053] ? netlink_deliver_tap+0x2e/0x1b0 [ 1214.314470][T23053] netlink_unicast+0x82f/0x9e0 [ 1214.314501][T23053] ? __pfx_netlink_unicast+0x10/0x10 [ 1214.314527][T23053] ? netlink_sendmsg+0x642/0xb30 [ 1214.314542][T23053] ? skb_put+0x11b/0x210 [ 1214.314561][T23053] netlink_sendmsg+0x805/0xb30 [ 1214.314584][T23053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1214.314603][T23053] ? __import_iovec+0x5d4/0x7f0 [ 1214.314617][T23053] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1214.314640][T23053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1214.314655][T23053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1214.314673][T23053] __sock_sendmsg+0x21c/0x270 [ 1214.314708][T23053] ____sys_sendmsg+0x505/0x830 [ 1214.314749][T23053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1214.314790][T23053] ___sys_sendmsg+0x21f/0x2a0 [ 1214.314817][T23053] ? __pfx____sys_sendmsg+0x10/0x10 [ 1214.314862][T23053] ? __fget_files+0x2a/0x420 [ 1214.314876][T23053] ? __fget_files+0x3a0/0x420 [ 1214.314898][T23053] __sys_sendmsg+0x164/0x220 [ 1214.314918][T23053] ? __pfx___sys_sendmsg+0x10/0x10 [ 1214.314943][T23053] ? __pfx_ksys_write+0x10/0x10 [ 1214.314970][T23053] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1214.314995][T23053] ? lockdep_hardirqs_on+0x9c/0x150 [ 1214.315016][T23053] __do_fast_syscall_32+0xb6/0x2b0 [ 1214.315038][T23053] ? lockdep_hardirqs_on+0x9c/0x150 [ 1214.315060][T23053] do_fast_syscall_32+0x34/0x80 [ 1214.315082][T23053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1214.315102][T23053] RIP: 0023:0xf70ad539 [ 1214.315117][T23053] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1214.315131][T23053] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1214.315147][T23053] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1214.315158][T23053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1214.315167][T23053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1214.315177][T23053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1214.315186][T23053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1214.315208][T23053] [ 1214.652873][T15515] m920x_read = error: -19 [ 1214.657674][T15515] dvb-usb: error while querying for an remote control event. [ 1214.775841][T15515] m920x_read = error: -19 [ 1214.780342][T15515] dvb-usb: error while querying for an remote control event. [ 1214.896304][T15515] m920x_read = error: -19 [ 1214.900728][T15515] dvb-usb: error while querying for an remote control event. [ 1215.015683][T15515] m920x_read = error: -19 [ 1215.020310][T15515] dvb-usb: error while querying for an remote control event. [ 1215.136804][T15515] m920x_read = error: -19 [ 1215.141346][T15515] dvb-usb: error while querying for an remote control event. [ 1215.185026][T15485] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1215.193112][T20033] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1215.255282][T15515] m920x_read = error: -19 [ 1215.259685][T15515] dvb-usb: error while querying for an remote control event. [ 1215.334963][T15485] usb 3-1: device descriptor read/64, error -71 [ 1215.372282][T20033] usb 2-1: config index 0 descriptor too short (expected 12306, got 18) [ 1215.375605][T15515] m920x_read = error: -19 [ 1215.381224][T20033] usb 2-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1215.394051][T20033] usb 2-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 1215.405157][T20033] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1215.418535][T20033] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1215.418669][T15515] dvb-usb: error while querying for an remote control event. [ 1215.446455][T20033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.522783][T23070] bridge2: entered allmulticast mode [ 1215.576977][T15515] m920x_read = error: -19 [ 1215.581493][T15515] dvb-usb: error while querying for an remote control event. [ 1215.584834][T15485] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1215.705827][T15515] m920x_read = error: -19 [ 1215.710231][T15515] dvb-usb: error while querying for an remote control event. [ 1215.747158][T15485] usb 3-1: device descriptor read/64, error -71 [ 1215.860871][T15515] m920x_read = error: -19 [ 1215.887128][T15515] dvb-usb: error while querying for an remote control event. [ 1215.895644][T15485] usb usb3-port1: attempt power cycle [ 1215.973283][T20033] usb 2-1: string descriptor 0 read error: -71 [ 1215.996193][T15515] m920x_read = error: -19 [ 1215.997260][T20033] usb 2-1: USB disconnect, device number 16 [ 1216.005796][T15515] dvb-usb: error while querying for an remote control event. [ 1216.090680][T23079] netlink: 'syz.5.4985': attribute type 10 has an invalid length. [ 1216.119178][T23079] bond0: (slave team0): Enslaving as an active interface with an up link [ 1216.128798][T23081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4986'. [ 1216.138755][T15515] m920x_read = error: -19 [ 1216.143148][T15515] dvb-usb: error while querying for an remote control event. [ 1216.155668][T23082] netlink: 'syz.5.4985': attribute type 10 has an invalid length. [ 1216.209022][T23081] netlink: 'syz.0.4986': attribute type 4 has an invalid length. [ 1216.265289][T15485] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1216.275511][T15515] m920x_read = error: -19 [ 1216.281596][T15515] dvb-usb: error while querying for an remote control event. [ 1216.295550][T15485] usb 3-1: device descriptor read/8, error -71 [ 1216.418485][T15515] m920x_read = error: -19 [ 1216.423277][T15515] dvb-usb: error while querying for an remote control event. [ 1216.547353][T15515] m920x_read = error: -19 [ 1216.551772][T15515] dvb-usb: error while querying for an remote control event. [ 1216.566519][T15485] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1216.615889][T15485] usb 3-1: device descriptor read/8, error -71 [ 1216.705655][T11256] m920x_read = error: -19 [ 1216.710276][T11256] dvb-usb: error while querying for an remote control event. [ 1216.737898][T15485] usb usb3-port1: unable to enumerate USB device [ 1216.835486][T11256] m920x_read = error: -19 [ 1216.840499][T11256] dvb-usb: error while querying for an remote control event. [ 1216.885390][T15515] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1216.903748][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1216.965287][T11256] m920x_read = error: -19 [ 1216.970010][T11256] dvb-usb: error while querying for an remote control event. [ 1217.045524][T15515] usb 6-1: device descriptor read/64, error -32 [ 1217.095494][T11256] m920x_read = error: -19 [ 1217.102992][T11256] dvb-usb: error while querying for an remote control event. [ 1217.235848][T11256] m920x_read = error: -19 [ 1217.240230][T11256] dvb-usb: error while querying for an remote control event. [ 1217.305672][T15515] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1217.317954][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1217.375468][T11256] m920x_read = error: -19 [ 1217.380266][T11256] dvb-usb: error while querying for an remote control event. [ 1217.475547][T15515] usb 6-1: device descriptor read/64, error -32 [ 1217.505515][T11256] m920x_read = error: -19 [ 1217.509937][T11256] dvb-usb: error while querying for an remote control event. [ 1217.595616][T15515] usb usb6-port1: attempt power cycle [ 1217.656373][T11256] m920x_read = error: -19 [ 1217.660822][T11256] dvb-usb: error while querying for an remote control event. [ 1217.785420][T11256] m920x_read = error: -19 [ 1217.789859][T11256] dvb-usb: error while querying for an remote control event. [ 1217.930208][T11256] m920x_read = error: -19 [ 1217.952679][T11256] dvb-usb: error while querying for an remote control event. [ 1217.961284][T15515] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1218.015686][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1218.033281][T15515] usb 6-1: device descriptor read/8, error -32 [ 1218.106469][T11256] m920x_read = error: -19 [ 1218.110890][T11256] dvb-usb: error while querying for an remote control event. [ 1218.175576][T15515] raw-gadget.0 gadget.5: failed to queue suspend event [ 1218.210029][T15515] raw-gadget.0 gadget.5: failed to queue reset event [ 1218.265397][T11256] m920x_read = error: -19 [ 1218.300644][T11256] dvb-usb: error while querying for an remote control event. [ 1218.315694][T15515] raw-gadget.0 gadget.5: failed to queue resume event [ 1218.415397][T15515] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1218.455516][T11256] m920x_read = error: -19 [ 1218.459928][T11256] dvb-usb: error while querying for an remote control event. [ 1218.480152][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1218.490213][T15515] usb 6-1: device descriptor read/8, error -32 [ 1218.605958][T11256] m920x_read = error: -19 [ 1218.610375][T11256] dvb-usb: error while querying for an remote control event. [ 1218.618674][T15515] raw-gadget.0 gadget.5: failed to queue suspend event [ 1218.640686][T15515] usb usb6-port1: unable to enumerate USB device [ 1218.765270][T15515] m920x_read = error: -19 [ 1218.770043][T15515] dvb-usb: error while querying for an remote control event. [ 1218.898669][T15515] m920x_read = error: -19 [ 1218.905195][T15515] dvb-usb: error while querying for an remote control event. [ 1219.025275][T15515] m920x_read = error: -19 [ 1219.029661][T15515] dvb-usb: error while querying for an remote control event. [ 1219.165370][T15515] m920x_read = error: -19 [ 1219.169852][T15515] dvb-usb: error while querying for an remote control event. [ 1219.305263][T15515] m920x_read = error: -19 [ 1219.309738][T15515] dvb-usb: error while querying for an remote control event. [ 1219.376736][T23138] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5001'. [ 1219.455717][T15515] m920x_read = error: -19 [ 1219.465880][T15515] dvb-usb: error while querying for an remote control event. [ 1219.585733][T15515] m920x_read = error: -19 [ 1219.590953][T15515] dvb-usb: error while querying for an remote control event. [ 1219.705305][T11256] m920x_read = error: -19 [ 1219.710055][T11256] dvb-usb: error while querying for an remote control event. [ 1219.825267][T11256] m920x_read = error: -19 [ 1219.830013][T11256] dvb-usb: error while querying for an remote control event. [ 1219.955192][T11256] m920x_read = error: -19 [ 1219.959619][T11256] dvb-usb: error while querying for an remote control event. [ 1220.075324][T11256] m920x_read = error: -19 [ 1220.081207][T11256] dvb-usb: error while querying for an remote control event. [ 1220.195833][T11256] m920x_read = error: -19 [ 1220.210790][T11256] dvb-usb: error while querying for an remote control event. [ 1220.343859][T23095] raw-gadget.0 gadget.5: failed to queue disconnect event [ 1220.352129][T15515] m920x_read = error: -19 [ 1220.357898][T15515] dvb-usb: error while querying for an remote control event. [ 1220.391195][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5009'. [ 1220.453004][T23161] bridge1: entered promiscuous mode [ 1220.486403][T11256] m920x_read = error: -19 [ 1220.490834][T11256] dvb-usb: error while querying for an remote control event. [ 1220.549770][T11256] hid (null): unknown global tag 0xc [ 1220.561159][T11256] hid (null): global environment stack underflow [ 1220.570615][T11256] hid-generic 0400:0739:0C23.0022: unknown global tag 0xc [ 1220.578383][T11256] hid-generic 0400:0739:0C23.0022: item 0 4 1 12 parsing failed [ 1220.594511][T11256] hid-generic 0400:0739:0C23.0022: probe with driver hid-generic failed with error -22 [ 1220.625238][T11256] m920x_read = error: -19 [ 1220.629818][T11256] dvb-usb: error while querying for an remote control event. [ 1220.785512][T11256] m920x_read = error: -19 [ 1220.790095][T11256] dvb-usb: error while querying for an remote control event. [ 1220.935988][T11256] m920x_read = error: -19 [ 1220.946130][T11256] dvb-usb: error while querying for an remote control event. [ 1221.075283][T11256] m920x_read = error: -19 [ 1221.079679][T11256] dvb-usb: error while querying for an remote control event. [ 1221.205662][T23179] FAULT_INJECTION: forcing a failure. [ 1221.205662][T23179] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.205897][T11256] m920x_read = error: -19 [ 1221.225382][T23179] CPU: 1 UID: 0 PID: 23179 Comm: syz.1.5014 Not tainted syzkaller #0 PREEMPT(full) [ 1221.225410][T23179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1221.225424][T23179] Call Trace: [ 1221.225433][T23179] [ 1221.225442][T23179] dump_stack_lvl+0x189/0x250 [ 1221.225470][T23179] ? __pfx____ratelimit+0x10/0x10 [ 1221.225496][T23179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1221.225518][T23179] ? __pfx__printk+0x10/0x10 [ 1221.225546][T23179] ? __pfx___might_resched+0x10/0x10 [ 1221.225585][T23179] should_fail_ex+0x414/0x560 [ 1221.225617][T23179] should_failslab+0xa8/0x100 [ 1221.225640][T23179] __kmalloc_noprof+0xcb/0x7f0 [ 1221.225669][T23179] ? kfree+0x4d/0x6d0 [ 1221.225691][T23179] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1221.225728][T23179] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1221.225759][T23179] ? tomoyo_domain+0xd9/0x130 [ 1221.225794][T23179] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1221.225818][T23179] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1221.225846][T23179] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1221.225889][T23179] ? __lock_acquire+0xab9/0xd20 [ 1221.225931][T23179] ? __fget_files+0x2a/0x420 [ 1221.225956][T23179] ? __fget_files+0x3a0/0x420 [ 1221.225975][T23179] ? __fget_files+0x2a/0x420 [ 1221.225999][T23179] security_file_ioctl_compat+0xcb/0x2d0 [ 1221.226027][T23179] __ia32_compat_sys_ioctl+0x128/0x840 [ 1221.226060][T23179] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1221.226090][T23179] ? __fget_files+0x3a0/0x420 [ 1221.226117][T23179] ? fput+0xa0/0xd0 [ 1221.226142][T23179] ? ksys_write+0x22a/0x250 [ 1221.226170][T23179] ? exc_page_fault+0x82/0x100 [ 1221.226196][T23179] ? __pfx_ksys_write+0x10/0x10 [ 1221.226229][T23179] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1221.226259][T23179] ? lockdep_hardirqs_on+0x9c/0x150 [ 1221.226288][T23179] __do_fast_syscall_32+0xb6/0x2b0 [ 1221.226318][T23179] ? lockdep_hardirqs_on+0x9c/0x150 [ 1221.226351][T23179] do_fast_syscall_32+0x34/0x80 [ 1221.226379][T23179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1221.226405][T23179] RIP: 0023:0xf70ad539 [ 1221.226425][T23179] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1221.226445][T23179] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1221.226468][T23179] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c008ae88 [ 1221.226483][T23179] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1221.226497][T23179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1221.226509][T23179] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1221.226522][T23179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1221.226555][T23179] [ 1221.226571][T23179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1221.270177][T11256] dvb-usb: error while querying for an remote control event. [ 1221.756524][T11256] m920x_read = error: -19 [ 1221.776876][T11256] dvb-usb: error while querying for an remote control event. [ 1221.896778][T11256] m920x_read = error: -19 [ 1221.901418][T11256] dvb-usb: error while querying for an remote control event. [ 1221.963792][T23190] fuse: Unknown parameter '' [ 1221.975749][T23190] fuse: Unknown parameter '0x0000000000000009 g%wA˘v' [ 1222.035384][T11256] m920x_read = error: -19 [ 1222.040005][T11256] dvb-usb: error while querying for an remote control event. [ 1222.186126][T11256] m920x_read = error: -19 [ 1222.190513][T11256] dvb-usb: error while querying for an remote control event. [ 1222.335490][T11256] m920x_read = error: -19 [ 1222.339954][T11256] dvb-usb: error while querying for an remote control event. [ 1222.495284][T11256] m920x_read = error: -19 [ 1222.499933][T11256] dvb-usb: error while querying for an remote control event. [ 1222.659070][T15515] m920x_read = error: -19 [ 1222.672440][T15515] dvb-usb: error while querying for an remote control event. [ 1222.825340][T15515] m920x_read = error: -19 [ 1222.834679][T15515] dvb-usb: error while querying for an remote control event. [ 1223.065793][T15515] m920x_read = error: -19 [ 1223.096187][T15515] dvb-usb: error while querying for an remote control event. [ 1223.235721][T15515] m920x_read = error: -19 [ 1223.243859][T15515] dvb-usb: error while querying for an remote control event. [ 1223.385793][T15515] m920x_read = error: -19 [ 1223.411655][T15515] dvb-usb: error while querying for an remote control event. [ 1223.535309][T15515] m920x_read = error: -19 [ 1223.546233][T15515] dvb-usb: error while querying for an remote control event. [ 1223.688269][T15515] m920x_read = error: -19 [ 1223.692647][T15515] dvb-usb: error while querying for an remote control event. [ 1223.835323][T15515] m920x_read = error: -19 [ 1223.839765][T15515] dvb-usb: error while querying for an remote control event. [ 1223.995408][T11256] m920x_read = error: -19 [ 1223.999833][T11256] dvb-usb: error while querying for an remote control event. [ 1224.145999][T11256] m920x_read = error: -19 [ 1224.150410][T11256] dvb-usb: error while querying for an remote control event. [ 1224.314929][T11256] m920x_read = error: -19 [ 1224.319298][T11256] dvb-usb: error while querying for an remote control event. [ 1224.475267][T11256] m920x_read = error: -19 [ 1224.479714][T11256] dvb-usb: error while querying for an remote control event. [ 1224.614862][T11256] m920x_read = error: -19 [ 1224.629450][T11256] dvb-usb: error while querying for an remote control event. [ 1224.755391][T11256] m920x_read = error: -19 [ 1224.762046][T11256] dvb-usb: error while querying for an remote control event. [ 1224.854845][T15485] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1224.885599][T15515] m920x_read = error: -19 [ 1224.889997][T15515] dvb-usb: error while querying for an remote control event. [ 1224.945017][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1225.019189][T15515] m920x_read = error: -19 [ 1225.038386][T15515] dvb-usb: error while querying for an remote control event. [ 1225.076100][T15485] usb 6-1: device descriptor read/64, error -32 [ 1225.165873][T15515] m920x_read = error: -19 [ 1225.175338][T15515] dvb-usb: error while querying for an remote control event. [ 1225.309068][T11256] m920x_read = error: -19 [ 1225.357272][T15485] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1225.386197][T23230] tipc: Cannot configure node identity twice [ 1225.407449][T11256] dvb-usb: error while querying for an remote control event. [ 1225.424934][T20033] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1225.545392][T15515] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1225.574907][T20033] usb 3-1: Using ep0 maxpacket: 16 [ 1225.586708][T11256] m920x_read = error: -19 [ 1225.594095][T11256] dvb-usb: error while querying for an remote control event. [ 1225.715850][T15515] usb 1-1: Using ep0 maxpacket: 32 [ 1225.730915][T15515] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1225.742011][T11256] m920x_read = error: -19 [ 1225.742513][T20033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1225.748161][T11256] dvb-usb: error while querying for an remote control event. [ 1225.790915][T15515] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1225.813727][T15515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.832861][T15515] usb 1-1: Product: syz [ 1225.844318][T15515] usb 1-1: Manufacturer: syz [ 1225.857984][T15515] usb 1-1: SerialNumber: syz [ 1225.935880][T11256] m920x_read = error: -19 [ 1225.940460][T11256] dvb-usb: error while querying for an remote control event. [ 1225.997084][T15515] usb 1-1: config 0 descriptor?? [ 1226.034583][T15515] usb 1-1: bad CDC descriptors [ 1226.052464][T15515] usb 1-1: unsupported MDLM descriptors [ 1226.080964][T15515] m920x_read = error: -19 [ 1226.095523][T15515] dvb-usb: error while querying for an remote control event. [ 1226.189001][T20033] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1226.198271][T20033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.225529][T15515] m920x_read = error: -19 [ 1226.229943][T15515] dvb-usb: error while querying for an remote control event. [ 1226.265275][T20033] usb 3-1: Product: syz [ 1226.302028][T20033] usb 3-1: Manufacturer: syz [ 1226.315305][T20033] usb 3-1: SerialNumber: syz [ 1226.349708][T20033] usb 3-1: config 0 descriptor?? [ 1226.367693][T15515] m920x_read = error: -19 [ 1226.373521][T20033] hub 3-1:0.0: bad descriptor, ignoring hub [ 1226.381174][T15515] dvb-usb: error while querying for an remote control event. [ 1226.382389][T20033] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1226.407088][T20033] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input79 [ 1226.535344][T15515] m920x_read = error: -19 [ 1226.541747][T15515] dvb-usb: error while querying for an remote control event. [ 1226.635150][T11256] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1226.686748][T15515] m920x_read = error: -19 [ 1226.707210][T15515] dvb-usb: error while querying for an remote control event. [ 1226.827671][T23235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.850529][T11256] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.868529][T23235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.881456][T11256] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 1226.896362][T15515] m920x_read = error: -19 [ 1226.923504][T15515] dvb-usb: error while querying for an remote control event. [ 1226.950714][T11256] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1226.968844][T11256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1226.988785][T11256] usb 2-1: SerialNumber: syz [ 1227.045442][T15515] m920x_read = error: -19 [ 1227.050250][T15515] dvb-usb: error while querying for an remote control event. [ 1227.070674][T11256] cdc_ether 2-1:1.0: skipping garbage [ 1227.079208][T11256] usb 2-1: bad CDC descriptors [ 1227.171178][T11256] m920x_read = error: -19 [ 1227.176199][T11256] dvb-usb: error while querying for an remote control event. [ 1227.237702][T23233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.252411][T23233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.295715][T11256] m920x_read = error: -19 [ 1227.300131][T11256] dvb-usb: error while querying for an remote control event. [ 1227.351335][T15495] usb 2-1: USB disconnect, device number 17 [ 1227.455367][T15515] m920x_read = error: -19 [ 1227.459866][T15515] dvb-usb: error while querying for an remote control event. [ 1227.578136][T15515] m920x_read = error: -19 [ 1227.588798][T15515] dvb-usb: error while querying for an remote control event. [ 1227.710090][T15515] m920x_read = error: -19 [ 1227.714480][T15515] dvb-usb: error while querying for an remote control event. [ 1227.824887][T15515] m920x_read = error: -19 [ 1227.829486][T15515] dvb-usb: error while querying for an remote control event. [ 1227.945869][T15515] m920x_read = error: -19 [ 1227.945902][T15515] dvb-usb: error while querying for an remote control event. [ 1228.055621][T15515] m920x_read = error: -19 [ 1228.055654][T15515] dvb-usb: error while querying for an remote control event. [ 1228.166064][T15515] m920x_read = error: -19 [ 1228.166120][T15515] dvb-usb: error while querying for an remote control event. [ 1228.236364][T23255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5036'. [ 1228.283148][T23255] bridge0: entered promiscuous mode [ 1228.287287][T15515] m920x_read = error: -19 [ 1228.287316][T15515] dvb-usb: error while querying for an remote control event. [ 1228.403231][T15515] m920x_read = error: -19 [ 1228.403254][T15515] dvb-usb: error while querying for an remote control event. [ 1228.505989][T15515] m920x_read = error: -19 [ 1228.506028][T15515] dvb-usb: error while querying for an remote control event. [ 1228.632668][T15515] m920x_read = error: -19 [ 1228.632697][T15515] dvb-usb: error while querying for an remote control event. [ 1228.762602][T15515] m920x_read = error: -19 [ 1228.785436][T15515] dvb-usb: error while querying for an remote control event. [ 1228.925651][T15515] m920x_read = error: -19 [ 1228.930550][T15515] dvb-usb: error while querying for an remote control event. [ 1228.939250][T23265] netem: incorrect ge model size [ 1228.944468][T23265] netem: change failed [ 1229.125426][T15515] m920x_read = error: -19 [ 1229.130089][T15515] dvb-usb: error while querying for an remote control event. [ 1229.435505][T15515] m920x_read = error: -19 [ 1229.440026][T15515] dvb-usb: error while querying for an remote control event. [ 1229.626556][T15515] m920x_read = error: -19 [ 1229.630926][T15515] dvb-usb: error while querying for an remote control event. [ 1229.795329][T15515] m920x_read = error: -19 [ 1229.799853][T15515] dvb-usb: error while querying for an remote control event. [ 1229.925869][T15515] m920x_read = error: -19 [ 1229.930299][T15515] dvb-usb: error while querying for an remote control event. [ 1230.055659][T15515] m920x_read = error: -19 [ 1230.061253][T15515] dvb-usb: error while querying for an remote control event. [ 1230.175436][T15515] m920x_read = error: -19 [ 1230.179841][T15515] dvb-usb: error while querying for an remote control event. [ 1230.305323][T15515] m920x_read = error: -19 [ 1230.316185][T15515] dvb-usb: error while querying for an remote control event. [ 1230.457981][T15515] m920x_read = error: -19 [ 1230.473787][T15515] dvb-usb: error while querying for an remote control event. [ 1230.626136][T15515] m920x_read = error: -19 [ 1230.639804][T15515] dvb-usb: error while querying for an remote control event. [ 1230.672298][T15495] usb 1-1: USB disconnect, device number 13 [ 1230.781990][T23282] binder: 23279:23282 ioctl c0306201 800003c0 returned -14 [ 1230.836098][T15515] m920x_read = error: -19 [ 1230.880163][T15515] dvb-usb: error while querying for an remote control event. [ 1230.962140][T11256] usb 3-1: USB disconnect, device number 109 [ 1231.270989][T15515] m920x_read = error: -19 [ 1231.309710][T15515] dvb-usb: error while querying for an remote control event. [ 1231.656245][T15515] m920x_read = error: -19 [ 1231.665363][T15515] dvb-usb: error while querying for an remote control event. [ 1231.775418][T15515] m920x_read = error: -19 [ 1231.802024][T15515] dvb-usb: error while querying for an remote control event. [ 1231.949500][T23297] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1231.962274][T15515] m920x_read = error: -19 [ 1231.980029][T15515] dvb-usb: error while querying for an remote control event. [ 1232.125349][T15515] m920x_read = error: -19 [ 1232.137318][T15515] dvb-usb: error while querying for an remote control event. [ 1232.189204][T23301] FAULT_INJECTION: forcing a failure. [ 1232.189204][T23301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1232.265483][T11256] m920x_read = error: -19 [ 1232.275650][T11256] dvb-usb: error while querying for an remote control event. [ 1232.360388][T23301] CPU: 1 UID: 0 PID: 23301 Comm: syz.5.5053 Not tainted syzkaller #0 PREEMPT(full) [ 1232.360422][T23301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1232.360437][T23301] Call Trace: [ 1232.360447][T23301] [ 1232.360458][T23301] dump_stack_lvl+0x189/0x250 [ 1232.360488][T23301] ? __pfx____ratelimit+0x10/0x10 [ 1232.360517][T23301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1232.360540][T23301] ? __pfx__printk+0x10/0x10 [ 1232.360564][T23301] ? __might_fault+0xb0/0x130 [ 1232.360607][T23301] should_fail_ex+0x414/0x560 [ 1232.360640][T23301] _copy_from_user+0x2d/0xb0 [ 1232.360671][T23301] get_compat_msghdr+0xad/0x4a0 [ 1232.360705][T23301] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1232.360733][T23301] ? ___sys_recvmsg+0x1c4/0x510 [ 1232.360760][T23301] ? kfree+0x4d/0x6d0 [ 1232.360794][T23301] ___sys_recvmsg+0x17f/0x510 [ 1232.360828][T23301] ? __pfx____sys_recvmsg+0x10/0x10 [ 1232.360882][T23301] ? __fget_files+0x3a0/0x420 [ 1232.360916][T23301] do_recvmmsg+0x36a/0x770 [ 1232.360954][T23301] ? __pfx_do_recvmmsg+0x10/0x10 [ 1232.360982][T23301] ? ksys_write+0x1cb/0x250 [ 1232.361057][T23301] ? __fget_files+0x3a0/0x420 [ 1232.361087][T23301] __sys_recvmmsg+0x19d/0x280 [ 1232.361119][T23301] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1232.361149][T23301] ? __pfx_ksys_write+0x10/0x10 [ 1232.361194][T23301] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1232.361227][T23301] __do_fast_syscall_32+0xb6/0x2b0 [ 1232.361260][T23301] ? lockdep_hardirqs_on+0x9c/0x150 [ 1232.361294][T23301] do_fast_syscall_32+0x34/0x80 [ 1232.361326][T23301] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1232.361354][T23301] RIP: 0023:0xf7fb3539 [ 1232.361374][T23301] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1232.361395][T23301] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1232.361425][T23301] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003700 [ 1232.361442][T23301] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 1232.361457][T23301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1232.361471][T23301] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1232.361485][T23301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1232.361519][T23301] [ 1232.593679][T15515] m920x_read = error: -19 [ 1232.611623][T15515] dvb-usb: error while querying for an remote control event. [ 1232.667231][T11256] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1232.975820][T15515] m920x_read = error: -19 [ 1232.980229][T15515] dvb-usb: error while querying for an remote control event. [ 1233.015319][T11256] usb 2-1: Using ep0 maxpacket: 32 [ 1233.022193][T11256] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1233.030537][T11256] usb 2-1: config 0 has no interface number 0 [ 1233.058603][T11256] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1233.096636][T15515] m920x_read = error: -19 [ 1233.101041][T15515] dvb-usb: error while querying for an remote control event. [ 1233.597838][T11256] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1233.597882][T11256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.597907][T11256] usb 2-1: Product: syz [ 1233.597925][T11256] usb 2-1: Manufacturer: syz [ 1233.597943][T11256] usb 2-1: SerialNumber: syz [ 1233.600923][T11256] usb 2-1: config 0 descriptor?? [ 1233.647523][T11256] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1233.647564][T11256] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1233.698522][T15504] m920x_read = error: -19 [ 1233.698574][T15504] dvb-usb: error while querying for an remote control event. [ 1233.805555][T15504] m920x_read = error: -19 [ 1233.805588][T15504] dvb-usb: error while querying for an remote control event. [ 1233.925974][T15504] m920x_read = error: -19 [ 1233.926005][T15504] dvb-usb: error while querying for an remote control event. [ 1234.035666][T15504] m920x_read = error: -19 [ 1234.040115][T15504] dvb-usb: error while querying for an remote control event. [ 1234.300082][T15504] m920x_read = error: -19 [ 1234.304575][T15504] dvb-usb: error while querying for an remote control event. [ 1234.377614][T11256] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1234.495430][T15504] m920x_read = error: -19 [ 1234.499897][T15504] dvb-usb: error while querying for an remote control event. [ 1234.676401][T15504] m920x_read = error: -19 [ 1234.681055][T15504] dvb-usb: error while querying for an remote control event. [ 1234.816361][T15504] m920x_read = error: -19 [ 1234.820897][T15504] dvb-usb: error while querying for an remote control event. [ 1235.000987][T15504] m920x_read = error: -19 [ 1235.030884][T15504] dvb-usb: error while querying for an remote control event. [ 1235.199643][T15515] m920x_read = error: -19 [ 1235.219497][T15515] dvb-usb: error while querying for an remote control event. [ 1235.345434][T15515] m920x_read = error: -19 [ 1235.398005][T15515] dvb-usb: error while querying for an remote control event. [ 1235.565529][T15515] m920x_read = error: -19 [ 1235.578280][T15515] dvb-usb: error while querying for an remote control event. [ 1235.725372][T15515] m920x_read = error: -19 [ 1235.729793][T15515] dvb-usb: error while querying for an remote control event. [ 1235.856737][T15495] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1235.905498][T15515] m920x_read = error: -19 [ 1235.909983][T15515] dvb-usb: error while querying for an remote control event. [ 1236.055667][T15515] m920x_read = error: -19 [ 1236.061488][T23346] FAULT_INJECTION: forcing a failure. [ 1236.061488][T23346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.065125][T15515] dvb-usb: error while querying for an remote control event. [ 1236.092857][T23346] CPU: 1 UID: 0 PID: 23346 Comm: syz.2.5067 Not tainted syzkaller #0 PREEMPT(full) [ 1236.092890][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1236.092906][T23346] Call Trace: [ 1236.092917][T23346] [ 1236.092928][T23346] dump_stack_lvl+0x189/0x250 [ 1236.092958][T23346] ? __pfx____ratelimit+0x10/0x10 [ 1236.092987][T23346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1236.093012][T23346] ? __pfx__printk+0x10/0x10 [ 1236.093050][T23346] should_fail_ex+0x414/0x560 [ 1236.093084][T23346] _copy_to_user+0x31/0xb0 [ 1236.093110][T23346] drm_ioctl+0x6a4/0xb10 [ 1236.093132][T23346] ? __lock_acquire+0xab9/0xd20 [ 1236.093159][T23346] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 1236.093191][T23346] ? __pfx_drm_ioctl+0x10/0x10 [ 1236.093228][T23346] ? __fget_files+0x3a0/0x420 [ 1236.093250][T23346] ? __fget_files+0x2a/0x420 [ 1236.093269][T23346] ? drm_compat_ioctl+0xa7/0x330 [ 1236.093299][T23346] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1236.093332][T23346] __ia32_compat_sys_ioctl+0x540/0x840 [ 1236.093368][T23346] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1236.093401][T23346] ? __fget_files+0x3a0/0x420 [ 1236.093432][T23346] ? fput+0xa0/0xd0 [ 1236.093466][T23346] ? ksys_write+0x22a/0x250 [ 1236.093496][T23346] ? exc_page_fault+0x82/0x100 [ 1236.093525][T23346] ? __pfx_ksys_write+0x10/0x10 [ 1236.093560][T23346] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1236.093592][T23346] ? lockdep_hardirqs_on+0x9c/0x150 [ 1236.093626][T23346] __do_fast_syscall_32+0xb6/0x2b0 [ 1236.093658][T23346] ? lockdep_hardirqs_on+0x9c/0x150 [ 1236.093691][T23346] do_fast_syscall_32+0x34/0x80 [ 1236.093723][T23346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1236.093751][T23346] RIP: 0023:0xf7fa5539 [ 1236.093771][T23346] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1236.093792][T23346] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1236.093816][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 1236.093832][T23346] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1236.093846][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1236.093860][T23346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1236.093874][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1236.093908][T23346] [ 1236.206472][T15515] m920x_read = error: -19 [ 1236.343891][T11256] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1236.374355][T11256] em28xx 2-1:0.89: board has no eeprom [ 1236.386643][T15515] dvb-usb: error while querying for an remote control event. [ 1236.387078][T15495] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1236.426456][T15495] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1236.445567][T11256] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1236.452976][T11256] em28xx 2-1:0.89: analog set to bulk mode. [ 1236.460244][T15515] em28xx 2-1:0.89: Registering V4L2 extension [ 1236.495559][T11256] m920x_read = error: -19 [ 1236.501400][T15495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.525175][T11256] dvb-usb: error while querying for an remote control event. [ 1236.588906][T15495] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1236.675158][T11256] usb 2-1: USB disconnect, device number 18 [ 1236.682026][T11256] em28xx 2-1:0.89: Disconnecting em28xx [ 1236.688452][T15511] m920x_read = error: -19 [ 1236.692803][T15511] dvb-usb: error while querying for an remote control event. [ 1236.755068][T15515] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1236.811242][T15515] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1236.822303][T23357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5069'. [ 1236.855281][T23337] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5064'. [ 1236.855778][T15511] m920x_read = error: -19 [ 1236.909794][T23337] : Removing last arp target with arp_interval on [ 1236.937544][T15504] usb 6-1: USB disconnect, device number 67 [ 1237.000512][T15515] em28xx 2-1:0.89: No AC97 audio processor [ 1237.008937][T15511] dvb-usb: error while querying for an remote control event. [ 1237.053328][T23357] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1237.082863][T15515] usb 2-1: Decoder not found [ 1237.126621][T15515] em28xx 2-1:0.89: failed to create media graph [ 1237.170594][T15515] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1237.186455][T15504] m920x_read = error: -19 [ 1237.200999][T15504] dvb-usb: error while querying for an remote control event. [ 1237.253393][T15515] em28xx 2-1:0.89: Registering snapshot button... [ 1237.261111][T23361] ================================================================== [ 1237.269212][T23361] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1237.276616][T23361] Read of size 8 at addr ffff888032164740 by task v4l_id/23361 [ 1237.284161][T23361] [ 1237.286491][T23361] CPU: 1 UID: 0 PID: 23361 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1237.286510][T23361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1237.286521][T23361] Call Trace: [ 1237.286528][T23361] [ 1237.286535][T23361] dump_stack_lvl+0x189/0x250 [ 1237.286555][T23361] ? __virt_addr_valid+0x1c8/0x5c0 [ 1237.286576][T23361] ? rcu_is_watching+0x15/0xb0 [ 1237.286593][T23361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1237.286609][T23361] ? rcu_is_watching+0x15/0xb0 [ 1237.286630][T23361] ? lock_release+0x4b/0x3e0 [ 1237.286644][T23361] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1237.286663][T23361] ? __virt_addr_valid+0x1c8/0x5c0 [ 1237.286683][T23361] ? __virt_addr_valid+0x4a5/0x5c0 [ 1237.286705][T23361] print_report+0xca/0x240 [ 1237.286723][T23361] ? v4l2_fh_open+0xac/0x420 [ 1237.286740][T23361] kasan_report+0x118/0x150 [ 1237.286755][T23361] ? v4l2_fh_open+0xac/0x420 [ 1237.286776][T23361] v4l2_fh_open+0xac/0x420 [ 1237.286794][T23361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1237.286817][T23361] em28xx_v4l2_open+0x157/0x9a0 [ 1237.286838][T23361] v4l2_open+0x1bf/0x3a0 [ 1237.286858][T23361] chrdev_open+0x4c9/0x5e0 [ 1237.286873][T23361] ? __pfx_chrdev_open+0x10/0x10 [ 1237.286888][T23361] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1237.286906][T23361] ? __pfx_chrdev_open+0x10/0x10 [ 1237.286919][T23361] do_dentry_open+0x950/0x13f0 [ 1237.286940][T23361] vfs_open+0x3b/0x340 [ 1237.286955][T23361] ? path_openat+0x2ecd/0x3830 [ 1237.286975][T23361] path_openat+0x2ee5/0x3830 [ 1237.287006][T23361] ? __pfx_path_openat+0x10/0x10 [ 1237.287031][T23361] do_filp_open+0x1fa/0x410 [ 1237.287049][T23361] ? __lock_acquire+0xab9/0xd20 [ 1237.287064][T23361] ? __pfx_do_filp_open+0x10/0x10 [ 1237.287091][T23361] ? _raw_spin_unlock+0x28/0x50 [ 1237.287106][T23361] ? alloc_fd+0x64c/0x6c0 [ 1237.287133][T23361] do_sys_openat2+0x121/0x1c0 [ 1237.287151][T23361] ? __pfx_do_sys_openat2+0x10/0x10 [ 1237.287168][T23361] ? exc_page_fault+0x82/0x100 [ 1237.287188][T23361] ? do_user_addr_fault+0xc85/0x1380 [ 1237.287204][T23361] __x64_sys_openat+0x138/0x170 [ 1237.287223][T23361] do_syscall_64+0xfa/0xfa0 [ 1237.287241][T23361] ? lockdep_hardirqs_on+0x9c/0x150 [ 1237.287259][T23361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.287275][T23361] ? clear_bhb_loop+0x60/0xb0 [ 1237.287292][T23361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.287307][T23361] RIP: 0033:0x7efdf84a7407 [ 1237.287321][T23361] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1237.287336][T23361] RSP: 002b:00007ffc0aa8c990 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1237.287352][T23361] RAX: ffffffffffffffda RBX: 00007efdf8b78880 RCX: 00007efdf84a7407 [ 1237.287364][T23361] RDX: 0000000000000000 RSI: 00007ffc0aa8cf1b RDI: ffffffffffffff9c [ 1237.287376][T23361] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1237.287385][T23361] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1237.287395][T23361] R13: 00007ffc0aa8cbe0 R14: 00007efdf8cdf000 R15: 000056234821b4d8 [ 1237.287413][T23361] [ 1237.287418][T23361] [ 1237.405957][T15504] m920x_read = error: -19 [ 1237.410397][T23361] Allocated by task 15515: [ 1237.410412][T23361] kasan_save_track+0x3e/0x80 [ 1237.410449][T23361] __kasan_kmalloc+0x93/0xb0 [ 1237.410478][T23361] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1237.613739][T23361] em28xx_v4l2_init+0x10b/0x2e70 [ 1237.618723][T23361] em28xx_init_extension+0x120/0x1c0 [ 1237.624025][T23361] process_scheduled_works+0xae1/0x17b0 [ 1237.629588][T23361] worker_thread+0x8a0/0xda0 [ 1237.634190][T23361] kthread+0x711/0x8a0 [ 1237.638268][T23361] ret_from_fork+0x4bc/0x870 [ 1237.642869][T23361] ret_from_fork_asm+0x1a/0x30 [ 1237.647645][T23361] [ 1237.649972][T23361] Freed by task 15515: [ 1237.654037][T23361] kasan_save_track+0x3e/0x80 [ 1237.658728][T23361] __kasan_save_free_info+0x46/0x50 [ 1237.663956][T23361] __kasan_slab_free+0x5c/0x80 [ 1237.668728][T23361] kfree+0x19a/0x6d0 [ 1237.672633][T23361] em28xx_v4l2_init+0x1683/0x2e70 [ 1237.677656][T23361] em28xx_init_extension+0x120/0x1c0 [ 1237.682962][T23361] process_scheduled_works+0xae1/0x17b0 [ 1237.688517][T23361] worker_thread+0x8a0/0xda0 [ 1237.693116][T23361] kthread+0x711/0x8a0 [ 1237.697196][T23361] ret_from_fork+0x4bc/0x870 [ 1237.701788][T23361] ret_from_fork_asm+0x1a/0x30 [ 1237.706570][T23361] [ 1237.708900][T23361] The buggy address belongs to the object at ffff888032164000 [ 1237.708900][T23361] which belongs to the cache kmalloc-8k of size 8192 [ 1237.722965][T23361] The buggy address is located 1856 bytes inside of [ 1237.722965][T23361] freed 8192-byte region [ffff888032164000, ffff888032166000) [ 1237.736940][T23361] [ 1237.739271][T23361] The buggy address belongs to the physical page: [ 1237.745693][T23361] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32160 [ 1237.754458][T23361] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1237.762963][T23361] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1237.770523][T23361] page_type: f5(slab) [ 1237.774523][T23361] raw: 00fff00000000040 ffff88813ffa7280 ffffea0001113e00 dead000000000002 [ 1237.783135][T23361] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1237.791734][T23361] head: 00fff00000000040 ffff88813ffa7280 ffffea0001113e00 dead000000000002 [ 1237.800415][T23361] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1237.809112][T23361] head: 00fff00000000003 ffffea0000c85801 00000000ffffffff 00000000ffffffff [ 1237.817796][T23361] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1237.826461][T23361] page dumped because: kasan: bad access detected [ 1237.832875][T23361] page_owner tracks the page as allocated [ 1237.838598][T23361] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7740, tgid 7739 (syz.1.519), ts 244964292669, free_ts 244839863797 [ 1237.859881][T23361] post_alloc_hook+0x240/0x2a0 [ 1237.864674][T23361] get_page_from_freelist+0x2365/0x2440 [ 1237.870250][T23361] __alloc_frozen_pages_noprof+0x181/0x370 [ 1237.876068][T23361] alloc_pages_mpol+0x232/0x4a0 [ 1237.880935][T23361] allocate_slab+0x96/0x3a0 [ 1237.885445][T23361] ___slab_alloc+0xe94/0x18a0 [ 1237.890122][T23361] __slab_alloc+0x65/0x100 [ 1237.894540][T23361] __kmalloc_cache_noprof+0x411/0x6f0 [ 1237.899935][T23361] mr_table_alloc+0x65/0x250 [ 1237.904546][T23361] ipmr_net_init+0x21a/0x390 [ 1237.909165][T23361] ops_init+0x359/0x5c0 [ 1237.913332][T23361] setup_net+0xfe/0x320 [ 1237.917500][T23361] copy_net_ns+0x34e/0x4e0 [ 1237.921913][T23361] create_new_namespaces+0x3f3/0x720 [ 1237.927201][T23361] unshare_nsproxy_namespaces+0x11c/0x170 [ 1237.932925][T23361] ksys_unshare+0x4c8/0x8c0 [ 1237.937436][T23361] page last free pid 7733 tgid 7732 stack trace: [ 1237.943759][T23361] __free_frozen_pages+0xbc4/0xd30 [ 1237.948883][T23361] __put_partials+0x146/0x170 [ 1237.953563][T23361] put_cpu_partial+0x1f2/0x2e0 [ 1237.958340][T23361] __slab_free+0x2b9/0x390 [ 1237.962767][T23361] qlist_free_all+0x97/0x140 [ 1237.967367][T23361] kasan_quarantine_reduce+0x148/0x160 [ 1237.972841][T23361] __kasan_slab_alloc+0x22/0x80 [ 1237.977707][T23361] kmem_cache_alloc_node_noprof+0x433/0x710 [ 1237.983613][T23361] __alloc_skb+0x112/0x2d0 [ 1237.988031][T23361] netlink_ack+0x146/0xa50 [ 1237.992566][T23361] netlink_rcv_skb+0x28c/0x470 [ 1237.997342][T23361] netlink_unicast+0x82f/0x9e0 [ 1238.002123][T23361] netlink_sendmsg+0x805/0xb30 [ 1238.006894][T23361] __sock_sendmsg+0x21c/0x270 [ 1238.011586][T23361] ____sys_sendmsg+0x505/0x830 [ 1238.016359][T23361] ___sys_sendmsg+0x21f/0x2a0 [ 1238.021039][T23361] [ 1238.023365][T23361] Memory state around the buggy address: [ 1238.028994][T23361] ffff888032164600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1238.037058][T23361] ffff888032164680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1238.045122][T23361] >ffff888032164700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1238.053181][T23361] ^ [ 1238.059341][T23361] ffff888032164780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1238.067407][T23361] ffff888032164800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1238.075466][T23361] ================================================================== [ 1238.097690][T15515] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input81 [ 1238.108935][T15504] dvb-usb: error while querying for an remote control event. [ 1238.221104][T15515] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1238.230086][T15511] m920x_read = error: -19 [ 1238.234428][T15511] dvb-usb: error while querying for an remote control event. [ 1238.255346][T11256] em28xx 2-1:0.89: Closing input extension [ 1238.262354][T11256] em28xx 2-1:0.89: Deregistering snapshot button [ 1238.375410][T15511] m920x_read = error: -19 [ 1238.380012][T15511] dvb-usb: error while querying for an remote control event. [ 1238.525493][T15511] m920x_read = error: -19 [ 1238.530187][T15511] dvb-usb: error while querying for an remote control event. [ 1238.633043][T23361] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1238.640279][T23361] CPU: 0 UID: 0 PID: 23361 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1238.649314][T23361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1238.659369][T23361] Call Trace: [ 1238.662661][T23361] [ 1238.665595][T23361] dump_stack_lvl+0x99/0x250 [ 1238.670186][T23361] ? __asan_memcpy+0x40/0x70 [ 1238.674780][T23361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1238.679988][T23361] ? __pfx__printk+0x10/0x10 [ 1238.684580][T23361] vpanic+0x237/0x6d0 [ 1238.688568][T23361] ? __pfx_vpanic+0x10/0x10 [ 1238.693076][T23361] ? preempt_schedule+0xae/0xc0 [ 1238.697930][T23361] ? __pfx_preempt_schedule+0x10/0x10 [ 1238.703308][T23361] panic+0xb9/0xc0 [ 1238.707035][T23361] ? __pfx_panic+0x10/0x10 [ 1238.711454][T23361] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1238.717347][T23361] ? is_module_address+0x17/0xf0 [ 1238.722284][T23361] ? v4l2_fh_open+0xac/0x420 [ 1238.726890][T23361] check_panic_on_warn+0x89/0xb0 [ 1238.731840][T23361] ? v4l2_fh_open+0xac/0x420 [ 1238.736442][T23361] end_report+0x78/0x160 [ 1238.740684][T23361] kasan_report+0x129/0x150 [ 1238.745186][T23361] ? v4l2_fh_open+0xac/0x420 [ 1238.749779][T23361] v4l2_fh_open+0xac/0x420 [ 1238.754205][T23361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1238.760219][T23361] em28xx_v4l2_open+0x157/0x9a0 [ 1238.765082][T23361] v4l2_open+0x1bf/0x3a0 [ 1238.769331][T23361] chrdev_open+0x4c9/0x5e0 [ 1238.773745][T23361] ? __pfx_chrdev_open+0x10/0x10 [ 1238.778684][T23361] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1238.785016][T23361] ? __pfx_chrdev_open+0x10/0x10 [ 1238.789947][T23361] do_dentry_open+0x950/0x13f0 [ 1238.794733][T23361] vfs_open+0x3b/0x340 [ 1238.798833][T23361] ? path_openat+0x2ecd/0x3830 [ 1238.803600][T23361] path_openat+0x2ee5/0x3830 [ 1238.808204][T23361] ? __pfx_path_openat+0x10/0x10 [ 1238.813151][T23361] do_filp_open+0x1fa/0x410 [ 1238.817654][T23361] ? __lock_acquire+0xab9/0xd20 [ 1238.822500][T23361] ? __pfx_do_filp_open+0x10/0x10 [ 1238.827534][T23361] ? _raw_spin_unlock+0x28/0x50 [ 1238.832386][T23361] ? alloc_fd+0x64c/0x6c0 [ 1238.836730][T23361] do_sys_openat2+0x121/0x1c0 [ 1238.841412][T23361] ? __pfx_do_sys_openat2+0x10/0x10 [ 1238.846615][T23361] ? exc_page_fault+0x82/0x100 [ 1238.851395][T23361] ? do_user_addr_fault+0xc85/0x1380 [ 1238.856677][T23361] __x64_sys_openat+0x138/0x170 [ 1238.861531][T23361] do_syscall_64+0xfa/0xfa0 [ 1238.866034][T23361] ? lockdep_hardirqs_on+0x9c/0x150 [ 1238.871235][T23361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.877309][T23361] ? clear_bhb_loop+0x60/0xb0 [ 1238.881993][T23361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.887887][T23361] RIP: 0033:0x7efdf84a7407 [ 1238.892312][T23361] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1238.911917][T23361] RSP: 002b:00007ffc0aa8c990 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1238.920330][T23361] RAX: ffffffffffffffda RBX: 00007efdf8b78880 RCX: 00007efdf84a7407 [ 1238.928332][T23361] RDX: 0000000000000000 RSI: 00007ffc0aa8cf1b RDI: ffffffffffffff9c [ 1238.936322][T23361] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1238.944298][T23361] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1238.952267][T23361] R13: 00007ffc0aa8cbe0 R14: 00007efdf8cdf000 R15: 000056234821b4d8 [ 1238.960254][T23361] [ 1238.963558][T23361] Kernel Offset: disabled [ 1238.967882][T23361] Rebooting in 86400 seconds..