last executing test programs: 8m13.462144662s ago: executing program 32 (id=193): mkdir(&(0x7f0000000000)='./file0\x00', 0x130) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000080), 0x325040, &(0x7f0000000400)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_cred(r0, 0x1, 0x4c, &(0x7f0000000840), 0xc) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) creat(&(0x7f00000001c0)='./file0/file1\x00', 0x80) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) 8m1.006174121s ago: executing program 33 (id=254): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x24, r3, 0x1, 0xfffffffe, 0xffff0000, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 7m48.866834654s ago: executing program 34 (id=312): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="4400000010000104000000000000000000000000853d00000000000001000000120012000a00010076786c616e000000140002000a0001007b0000000800020001020304", 0x44}], 0x1}, 0x0) 7m27.529988818s ago: executing program 35 (id=466): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000600, 0x1d, 0x0, 0x1, 0x4}) 4m42.252249508s ago: executing program 36 (id=1883): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1, 0x4000010, r0, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x220840, &(0x7f0000000080)={@align=0xc2, {0x0, 0x2, 0x400, 0x3}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000180)="e1459ed63e80520e9a525b7e054314f09529ceacfa8aded74181aeea1bb53657fa4e366568cfd1b32835f73fc883bb21d1480b2e1dd779b26754ecda3bf090a7c4a47a218f280e36af588343d4e8ea6119", 0x51, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000240)={r2}) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000002c0)={0x2, 0x8, 0x2, 0x8, 0x1, 0x0, [{0x72, 0x7, 0xce1c}]}) (async) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r0, 0xc0106440, &(0x7f0000000380)={0x2, 0x0, &(0x7f0000000340)}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={0x0, 0x8000000000000001, 0x5c}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000007c0)={r4, 0x8001, 0x1, [0x3, 0x10400000000000, 0x4, 0x7, 0xa7], [0x14b, 0xffffffffffffffc5, 0x5511, 0x0, 0xff, 0x80, 0x1, 0x3, 0x0, 0x8d5e, 0x7, 0x5, 0x4, 0xf, 0x0, 0x8, 0x9, 0xa, 0x9, 0x0, 0x8000000000000000, 0xb, 0x5, 0xfc52, 0x5, 0xa99, 0x0, 0xb, 0xfff, 0x3, 0x1, 0xfffffffffffffff3, 0x8, 0x9a9, 0xe7, 0x5, 0x0, 0xfffffffffffffec3, 0x7fffffff, 0xfffffffffffffffc, 0x1, 0x7, 0x2, 0xabd, 0x2, 0x1, 0xb8, 0x8, 0x3, 0x5, 0x8000, 0x3161, 0x5, 0x0, 0x63, 0x6, 0xe7, 0xd3e2, 0x8, 0x16ed0000000, 0x0, 0x8, 0x0, 0x4, 0x9, 0x1ff, 0x180000000000000, 0x100000000, 0x8, 0xffffffff, 0xb3c, 0x1, 0x5, 0x987a, 0xe51, 0xff, 0x4, 0x1, 0x2, 0xd, 0x8, 0x6, 0x7, 0x6, 0x401, 0x3, 0xecd, 0x4, 0x1, 0x7fffffff, 0x9, 0x4, 0x401, 0x3, 0xfffffffffffffff7, 0x6, 0x10001, 0x9, 0x4, 0x7, 0x20000, 0x3, 0x81, 0x80, 0x7, 0x9, 0xffff, 0x8, 0x4, 0x1, 0xc03, 0x200, 0x1, 0x1, 0x800000000, 0x4, 0x1, 0x678, 0x100, 0x8, 0x4]}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000c00), 0x80002) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) (async) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000d00)={{r3}, 0x5, &(0x7f0000000cc0)=[0x100, 0x4, 0x5, 0x5, 0x43effcca], 0x80000001, 0xb}) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000d80)=0x5) write(r0, &(0x7f0000000dc0)="5c335a05685dd822bcc2b293d397cbaaa87eefb8a94aa23cf263655f7b0f4a0385410a5dd696b3458d527dff7db8a6adb6555f28fd959ec9375377a0538274fa9f7117c5de125a50580ed0f94eaafd27710f6a7b02a9dabbb4dfcec77c9c28c93bee150bf69b09d2c8355ff4fdad661372cc4043e855f66b5f746aaf845b403a51e6876fa4c6e984fe9169e0a95ed7a800a41d0b441bdbaa3a94197a1e8dee669b60b2f19ee39522ad46cd178784bef1b0f57cc6979cb0e37b7789f2150f1b539643c11be7bff53d16f53d5827ee4d905bd8484b", 0xd4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000ec0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000f00)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000f40)={r6, 0x0, 0xffffffffffffffff}) execveat(r1, &(0x7f0000000f80)='./file0\x00', &(0x7f0000001140)={[&(0x7f0000000fc0)='\x00', &(0x7f0000001000)='#h!&/-,h}\x00', &(0x7f0000001040)='%\x00', &(0x7f0000001080)='^\x00', &(0x7f00000010c0)='/dev/vmci\x00', &(0x7f0000001100)='/dev/vmci\x00']}, &(0x7f0000001200)={[&(0x7f0000001180)='/dev/nvme-fabrics\x00', &(0x7f00000011c0)='}%-)\\\x00']}, 0x1000) (async) execveat(r0, &(0x7f0000001240)='./file0\x00', &(0x7f0000001340)={[&(0x7f0000001280)='#-%\'-^&\\\x00', &(0x7f00000012c0)='(]\x00', &(0x7f0000001300)='%\x00']}, &(0x7f0000001440)={[&(0x7f0000001380)='#h!&/-,h}\x00', &(0x7f00000013c0)='/dev/snd/seq\x00', &(0x7f0000001400)='\x00']}, 0x1000) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001500), 0x393d00, 0x0) mount$9p_fd(0x0, &(0x7f0000001480)='./file0/file0\x00', &(0x7f00000014c0), 0x110015, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}, {@debug={'debug', 0x3d, 0xffffffffffff7966}}]}}) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000015c0)={0x80}) (async, rerun: 64) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000001680)=0x3) (async, rerun: 64) getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f00000016c0), &(0x7f0000001700)=0x4) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000001740)={0x7fff, {{0xa, 0x4e23, 0x7, @mcast1, 0x1200}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x6, @mcast2}}, {{0xa, 0x4e21, 0x1, @mcast1, 0x2}}]}, 0x190) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001900)={0x4, {{0xa, 0x4e20, 0x8, @loopback, 0xfffffffc}}, 0x1, 0x4, [{{0xa, 0x4e23, 0x2, @local, 0x7fff}}, {{0xa, 0x4e21, 0x9, @local, 0x9}}, {{0xa, 0x4e20, 0x800, @empty, 0x8001}}, {{0xa, 0x4e20, 0x0, @empty, 0x80000000}}]}, 0x290) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4048041) (async, rerun: 32) ioctl$KVM_RUN(r1, 0xae80, 0x0) (rerun: 32) 3m15.55641176s ago: executing program 6 (id=2543): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) io_setup(0x1fe, &(0x7f0000001180)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x0, 0xfff0}]) 3m15.319809204s ago: executing program 6 (id=2545): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000200)=0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000000)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000102030408000100e1010203", 0x34, 0x0, &(0x7f0000000100)=@nl, 0xc) (async) sendto(r5, &(0x7f0000000000)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000102030408000100e1010203", 0x34, 0x0, &(0x7f0000000100)=@nl, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r8, @ANYBLOB="050003"], 0x28}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x80) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x80) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x3c}}, 0x0) r11 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x80801) ioctl$FE_GET_EVENT(r11, 0x80286f4e, &(0x7f0000000140)) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r12 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000540)=ANY=[@ANYBLOB="12015002020000402505a1a440000102030109023b000101f7880e090400050302060003052406000005240000080d240f01030000000d0005007109058202000080000109050302400008210255993f378e66af4d4d074367aa8d41ec01bf34666842471c7a405e7839a9b5f1ab907836033722f4e4017af949e3f4c83d7324a64497e2060a4621e6a6d3870990e12e4621e8a1c0268e48f035389ee2e4492a0113672ab0e113c1b25fa1d0560c00873b65a16a17d302f6785d77bf22403ff010752347a9e8837c91ea8b8531a79ed07d5f5d42a983d54f25a3481412d92b8900546439733042afa350adbf34"], 0x0) migrate_pages(r12, 0x4, 0x0, &(0x7f0000000300)=0xa) 3m13.858624538s ago: executing program 6 (id=2553): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) epoll_create1(0x80000) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x43a, 0x5, 0xfffffffffffffffd, 0x0, 0x6, 0x7, 0x800}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8000000000000001, 0xfffffffffffffffd, 0x20000000009, 0x8, 0x4000000000000, 0x7f, 0x7}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 3m13.696301657s ago: executing program 6 (id=2555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70f0e37ef45f348c3100180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000805}, 0x8000) 3m13.67361294s ago: executing program 6 (id=2556): fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052407"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000140)={&(0x7f0000000000)=""/120, 0x78}) stat(&(0x7f0000002740)='./proc/thread-self/fail-nth\x00', &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002800)='./proc\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './proc/thread-self/fail-nth\x00'}) lstat(&(0x7f0000002ac0)='./proc\x00', &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002b80)={0x0, 0x0}, &(0x7f0000002bc0)=0xc) getresgid(&(0x7f0000002c00), &(0x7f0000002c40)=0x0, &(0x7f0000002c80)) getresgid(&(0x7f0000002e40)=0x0, &(0x7f0000002e80), &(0x7f0000002ec0)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x80, 0x7, 0x0, 0xa, 0x0, 0x0, 0x5}, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004040) r11 = getuid() r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000300000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r12, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r12, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x130, 0x0, 0x6, {0x6, 0x6, 0x0, '\x00', {0x6fff, 0xad7, 0xf, 0x20000005, 0x0, r13, 0x8000, '\x00', 0xff7fffffffffffff, 0x7fffffff, 0xdd, 0x5, {0x73c0, 0x660}, {0x8, 0x29}, {0x209, 0x200007b1}, {0x5, 0x5710}, 0x8006, 0x6, 0x7, 0x80000000}}}}) syz_fuse_handle_req(r0, &(0x7f0000000440)="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", 0x2000, &(0x7f0000003140)={&(0x7f0000002440)={0x50, 0xffffffffffffffda, 0x4, {0x7, 0x2d, 0xfffffffe, 0x20000, 0xef7, 0x130, 0x7fffffff, 0x2, 0x0, 0x0, 0x100, 0x6e5}}, &(0x7f00000024c0)={0x18, 0x0, 0x42, {0xffffffffffffffff}}, &(0x7f0000002500)={0x18, 0x0, 0x7, {0x4}}, &(0x7f0000002540)={0x18, 0xfffffffffffffffe, 0x7, {0x80000000}}, &(0x7f0000002580)={0x18, 0xfffffffffffffff5, 0x2, {0xc3b}}, &(0x7f00000025c0)={0x28, 0x0, 0x1, {{0x2efb0000, 0x600000000, 0x0, r2}}}, &(0x7f0000002600)={0x60, 0x0, 0xf, {{0x9, 0x5, 0x9, 0x2, 0x2, 0x4, 0x7f, 0xfffff800}}}, &(0x7f0000002680)={0x18, 0xfffffffffffffffe, 0x0, {0x3add}}, &(0x7f00000026c0)={0x13, 0xffffffffffffffda, 0x9, {'&+\x00'}}, &(0x7f0000002700)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x1f}}, &(0x7f00000028c0)={0x78, 0x0, 0x7ff, {0x5624, 0x5, 0x0, {0x0, 0x4, 0x9, 0xffffffff80000000, 0x3, 0x200, 0xe8, 0x7f, 0x8, 0xc000, 0xa, r3, r4, 0x4, 0xdc7}}}, &(0x7f0000002940)={0x90, 0xfffffffffffffffe, 0x1000, {0x0, 0x1, 0x7fffffff, 0x4, 0x4, 0x5, {0x5, 0x1, 0x5, 0x5, 0x7ad, 0x7f, 0x5c7ff982, 0x400, 0x8, 0x6000, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x40}}}, &(0x7f0000002a00)={0x50, 0xb, 0x1, [{0x4, 0x4, 0x5, 0x8, 'proc\x00'}, {0x6, 0x9, 0x5, 0x2, 'proc\x00'}]}, &(0x7f0000002cc0)={0x158, 0xfffffffffffffffe, 0x8, [{{0x2, 0x3, 0x3ff, 0x1, 0x0, 0x10, {0x0, 0xffffffff00000001, 0xf9, 0x0, 0x9, 0xf, 0xff, 0x0, 0xd6b, 0xc000, 0xfffffffb, r5, r6, 0x9968, 0x3}}, {0x6, 0x6, 0x1, 0x9, 'v'}}, {{0x3, 0x1, 0x3, 0x7, 0x2, 0x944, {0x4, 0x401, 0x68000000000000, 0xfffffffffffffffa, 0x40, 0x3, 0x3, 0xc, 0xffffff2c, 0x6000, 0x400, r7, r8, 0xefe, 0x80000001}}, {0x0, 0x3, 0xb, 0xb812, 'syzkaller1\x00'}}]}, &(0x7f0000002f00)={0xa0, 0x0, 0x0, {{0x6, 0x1, 0x8, 0x9, 0xe4, 0xffff, {0x3, 0x7fffffffffffffff, 0xf, 0x7, 0xffff, 0x7, 0x3, 0x212cf19d, 0x7000, 0xc000, 0x4040, 0xee00, r9, 0x68, 0x8}}, {0x0, 0x2}}}, &(0x7f0000002fc0)={0x20, 0x0, 0x8, {0x3, 0x4, 0x8, 0x100}}, &(0x7f0000003000)={0x130, 0x0, 0x1713, {0x7, 0x3, 0x0, '\x00', {0x2000, 0x8001, 0xa, 0x1000, r11, r13, 0x6000, '\x00', 0x1, 0xfff, 0x6, 0x3, {0xffffffffffffffff, 0x5}, {0x4, 0x4}, {0x6, 0x2}, {0x7f, 0x4f97}, 0x0, 0x40, 0xb, 0x8}}}}) 3m12.394229161s ago: executing program 6 (id=2560): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000fe10008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) 3m3.722914228s ago: executing program 37 (id=2527): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={0x0, 0x3000, 0x800, 0x38e}, 0x20) io_setup(0x2, &(0x7f0000000140)=0x0) r2 = eventfd2(0x4, 0x80001) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x7f, r0, &(0x7f0000000180)="28b041", 0x3, 0x3, 0x0, 0x2, r2}, &(0x7f0000000240)) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff00000007058102400000070501024000000705840240000007050202"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x10) write$P9_RREADLINK(r3, &(0x7f00000000c0)={0xfffffffffffffd65, 0x17, 0x1, {0xd, './dev/ttyUSB0'}}, 0x16) 2m57.334221526s ago: executing program 38 (id=2560): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000fe10008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) 2m34.500532622s ago: executing program 9 (id=2733): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x14000000, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2m34.405495223s ago: executing program 9 (id=2734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010041000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) 2m34.32568659s ago: executing program 9 (id=2735): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x101300) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x6c, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904", @ANYRESDEC=0x0], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) pwrite64(r2, &(0x7f0000000180)='Y', 0x1, 0x4) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000001080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m31.110880632s ago: executing program 9 (id=2750): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r0 = fsopen(&(0x7f0000000280)='ext2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(r4, 0xffffffffffffffff, 0x0) capset(0x0, &(0x7f0000000080)={0x8, 0x6, 0xc0000000, 0xf915, 0xffffffff, 0x10040}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200), 0x8) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000240)={0x1, 0x1, 0x0, {0x8, 0xaa3e, 0x4, 0x4}}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) ioctl(r4, 0xdcc, &(0x7f0000000000)='\x00') r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r5) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01003bbd7000fedbdf250600000006000b00ed"], 0x1c}, 0x1, 0x0, 0x0, 0x12}, 0x2000c040) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x101200) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f00000003c0)="ad61", 0x2}], 0x1) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, 0x0, 0x0) write$6lowpan_enable(r8, &(0x7f0000000080)='0', 0x1) 2m30.812402024s ago: executing program 9 (id=2753): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000005c0)="000000000000000000ea7906668e13", 0xf}, {&(0x7f0000000240)="83429a95ae9205d007bab89f6917", 0xe}, {&(0x7f00000003c0)="252f9dfa42cc7b43e38063cbcf9c498f2fbc30096062dc8202b814a924aa495890154ba149a8c4b3ac9316b92a3f5ca84f23b5bd08eb43c1d02c4646940de022b8194ddd5a5ffd790e260d81d7fab310becb277bae261d4a941be8f38264aee62cd1d47fe6538739374e7b3587e9c06691b137655bf55a9a0b9d2f86a5d59618e548952f6413055d14f76a65ea95f68d0edcde08c7", 0x95}, {&(0x7f00000007c0)="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", 0x648}], 0x4}}], 0x1, 0x40) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0x7, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x8000, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x50, 0x6, 0x9, 0x4, 0x6, 0x4, 0x9, 0x1000, 0x8, 0x471, 0xffffff7f, 0x383, 0x8001, 0x4]}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf252b0000000a0001007770616e31000000"], 0x20}}, 0x20040804) 2m30.120391035s ago: executing program 9 (id=2758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) 2m29.749602433s ago: executing program 39 (id=2758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) 2m2.098088973s ago: executing program 7 (id=2913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000010000100f4000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) 2m1.8918244s ago: executing program 7 (id=2915): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0xa, 0x1f90, 0x0, @local, 0x2000000}, 0x1c) 2m1.787110399s ago: executing program 7 (id=2917): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)={0x20, 0x23}, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000008700c0af0000008000001090202000000000000000409058103200039c80100"/54], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@remote, 0x0, 0x0, 0x4, 0xbb21, 0x0, 0x80, 0x0, 0x29, 0x0, 0xffffffffffffffff}, {@in6=@loopback, 0x14, 0x6c}, @in=@empty, {0x0, 0x7f, 0x8000000000000000, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x6, 0x1000, 0xfffffffffffffffd}, {0x4, 0xffffffff}, 0x80000000, 0x0, 0x2, 0x4, 0x6, 0x2c}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0xf010000, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x9c, '\x00', @p_u8=0x0}}) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000080)={0x40, 0x1, 0x28, {0x28, 0x22, "c2631385269c2c3cbdeacc91080000005f9c59e5f52b8d0f374237cc6e580852973661d60900"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setuid(0xee01) ioctl$TUNSETIFF(r6, 0x4004662b, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=@newsa={0x10c, 0x10, 0x100, 0x70bd2d, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@loopback, 0x4e23, 0x3, 0x4e24, 0xffdc, 0xa, 0x60, 0x20, 0x6c, 0x0, r5}, {@in=@rand_addr=0x64010102, 0x4d5, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x2, 0x6, 0xffffffff, 0x7f, 0x9298, 0x4, 0x80, 0x5}, {0x3, 0x200, 0x3, 0x3}, {0xc, 0x7, 0x6}, 0x70bd28, 0x3502, 0x0, 0x0, 0xd, 0x4e}, [@mark={0xc, 0x15, {0x350759, 0x3}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @proto={0x5, 0x19, 0x3c}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x8810) 2m0.004121976s ago: executing program 7 (id=2927): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc030000007f03e3b80000c00e00e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f801fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1m59.903585412s ago: executing program 7 (id=2928): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) 1m59.783705429s ago: executing program 7 (id=2929): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'batadv_slave_0\x00', @random="010000201000"}) (async) preadv(r0, &(0x7f0000002b40)=[{&(0x7f0000001b40)=""/4093, 0xffd}], 0x1, 0x9, 0xfffffff4) (async) read$hidraw(r0, &(0x7f0000000000)=""/43, 0x2b) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) (async, rerun: 32) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) (rerun: 32) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r3, 0x0, 0x0) (rerun: 64) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x40000000, 0x4, 0x0, 0x8001, 0x27, 0x7, 0x5}, {0x1, 0x8d1f, 0x7, 0x9, 0x3ff, 0x1, 0x3}, {0xc0000000, 0x2, 0x4, 0x7, 0x8001, 0x6, 0x4}, {0xd, 0x6, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0x40000000, 0x7, 0x1, 0xc, 0x2, 0x2, 0x7}, {0xd, 0x2, 0x1, 0x9, 0x2, 0x10000, 0x7}]}) (async) syz_usb_ep_write(r3, 0x9, 0x16, &(0x7f0000000080)="f19a653a8ba7496a39293d88ba2fa0ce82f6ec281f06") 1m44.613926877s ago: executing program 40 (id=2929): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'batadv_slave_0\x00', @random="010000201000"}) (async) preadv(r0, &(0x7f0000002b40)=[{&(0x7f0000001b40)=""/4093, 0xffd}], 0x1, 0x9, 0xfffffff4) (async) read$hidraw(r0, &(0x7f0000000000)=""/43, 0x2b) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) (async, rerun: 32) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) (rerun: 32) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r3, 0x0, 0x0) (rerun: 64) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x40000000, 0x4, 0x0, 0x8001, 0x27, 0x7, 0x5}, {0x1, 0x8d1f, 0x7, 0x9, 0x3ff, 0x1, 0x3}, {0xc0000000, 0x2, 0x4, 0x7, 0x8001, 0x6, 0x4}, {0xd, 0x6, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0x40000000, 0x7, 0x1, 0xc, 0x2, 0x2, 0x7}, {0xd, 0x2, 0x1, 0x9, 0x2, 0x10000, 0x7}]}) (async) syz_usb_ep_write(r3, 0x9, 0x16, &(0x7f0000000080)="f19a653a8ba7496a39293d88ba2fa0ce82f6ec281f06") 1m13.90681803s ago: executing program 4 (id=3148): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000002700010004000001000001ff01"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) chmod(&(0x7f0000004180)='my_tracefs/events/task/task_rename/filter\x00', 0x4) 1m13.671121667s ago: executing program 4 (id=3150): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_ep_write(r2, 0x83, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_ep_write(r2, 0x83, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_ep_write(r2, 0x83, 0x0, 0x0) syz_usb_ep_write(r2, 0x83, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000700e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) 1m11.414116386s ago: executing program 4 (id=3177): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc030000007f03e3b80000fffe00e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f801fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1m11.350996624s ago: executing program 4 (id=3179): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0xe4ffffffffffffff) 1m11.179498543s ago: executing program 4 (id=3180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0xf5, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x154}}, 0x0) 1m11.169586338s ago: executing program 4 (id=3181): r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e7804203005740ed0b0011c3ec0000000109ff981188592dba"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000340)={0x14, &(0x7f0000000180)={0x20, 0x8, 0x88, {0x88, 0x24, "3d1dae6ed01aaac5b6ee9cca05e90e675754f5cd1d2595c49b350e930b0dce0a67810f24fea1e28bd158ad3b6053b569551a6c84e9bbe58f75cfb40b39f2a869a4a9d6d144ad0367b05f648d50b86eeddc94a59de7b8a25b5fa861e1c48a4984d72b47cf4658eeba9e663cad19d47cc0f2aa67d1e687ea241cd0d23e35e6a8d1b604c143f3bb"}}, &(0x7f0000000240)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "8421c486c95d8ec458cdf97e6ae25337d69570ba93b05d6819ba9539a9b23813511c182cc7ac9c0dcc18b8f274467e6cc0af82b91c501e53da723c6bc0b8ec81dc983d05fbd3cc01db2de36b21ab89a4170562561868cbb21294983c94e202ef28f9ac6e7118fb7ce278f2b6f137064083a53d7db3f28d0b5b424a864e6801f9c5095fd0f369fef247f48c75817fd0a51f382883ad8ae3a7d89a4e6eccf9173f65a682321841c4aeb2ccce5b600db829cdbe8cc64ef10eb12b7865b4777753a03c7aaa67e0ce7944947e93d217bcf715118cf1140f61f03dfd275dd6d00f3fa1b0be5f2cceb323"}}}, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x0, 0xb, 0xf0, "91db613498554cc2f8f2e48c3ed9d20abab4424da9a61f32741d2d30b2fcef3b20eac45fc88b0c49ce9290242eaae7df51ea50bc0c6780a1f206ef713509b5987e11ae1cab21e2a3de5b49b811e6e5e06c512b7204d3764443f09cd275bd900c66893dd5a4cad05642f10373d5dc0c056b561def1a9a3b417e82a3930984175f7372fa85abe41bf8312b1f4ab32d13175e8f05cedba4c920bbed4b04b3f3e3b437f6a7cb323a28a9a204e0cc12eea6c6c20aea0722096468e41067eae16a5909d4991afeb8711f04d6c148bf7665b30cc80cefed60c11d3971a7e96f0e405988a5fe7de814ae2959880658c21afb9a59"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0x20, 0x81, 0x1, "93"}, &(0x7f0000000540)={0x20, 0x82, 0x3, "5c1593"}, &(0x7f0000000580)={0x20, 0x83, 0x2, "1266"}, &(0x7f00000005c0)={0x20, 0x84, 0x4, "47e51e54"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "a6efc5"}}) r1 = socket$inet6(0xa, 0x1, 0x0) fgetxattr(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="757365722e01"], 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="001249"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000e00)={0x14, &(0x7f00000000c0)={0x40, 0x6, 0x63, {0x63, 0xd, "cba787adf9e3f72950b02efa51dd063e75e00f28d800c749c0951ad51ba52c95ddd25255f6dcd971d7a24ff7ba00e406ad2d7db3ca587f505434e50799396c5d1890f5405db80eaef4c371ec3f06260029214ad681d436314fe5293ffea6fe0f59"}}, &(0x7f0000000640)={0x0, 0x3, 0x37, @string={0x37, 0x3, "f34aa056351fc21372daa63f11b8b3ff41855019d328e1f719c3c168747ea170d91c7c0d04f37959858d37029a5d02affd369cb881"}}}, &(0x7f0000001040)={0x44, &(0x7f0000000e40)={0x0, 0x3, 0x23, "01093629cf7866e45db2933efd284ad02eae0bbc42ace0d688495c17d7ef27c742fe2c"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x4e}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xdc}, &(0x7f0000000f00)={0x20, 0x81, 0x1, "db"}, &(0x7f0000000f40)={0x20, 0x82, 0x3, "5f29ed"}, &(0x7f0000000f80)={0x20, 0x83, 0x3, "53b55a"}, &(0x7f0000000fc0)={0x20, 0x84, 0x3, "25ef65"}, &(0x7f0000001000)={0x20, 0x85, 0x3, "d0423d"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='4', 0x1) syz_usb_control_io$sierra_net(r0, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x0, 0x10, 0xfa, {0xfa, 0x5, "67a976f372e8b9f36bb67d321f0365553a3f58439d8b0986758b29787f02330c07c0ae2e87eef78eb69671136f65c087daf4e0ee21f339445969f54d96a39d483a389628da094697a0b6c8bf36aaafd3e4f4b696f4b021b0de0c0f80c69e64d6903eaf98e0f935e62f677ce2df4017108ad9a76e279df0f9df8803f783f916a54a542ba9f8d17545bf2e8ebcfc9bbb46f84be60090e38dd9ca22d016fd77aa28113cdd02cb64b4e367fe55174a30ab486ca272a1ae786e114df1a4f0c5dca123aad959ab77fa427f47e34f0b2f58aa918a1b8844837a2ef0a5aa58fe7614ceb776a099302ab59e2c1251075d735e8308b3538c69e3696f98"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, &(0x7f0000000dc0)={0x1c, &(0x7f0000000900)={0x40, 0x8, 0x22, "f28d8aa356fe76e917a33147e5c21fda7eec530a7504e9fb0a55ac81ad1751ec5e11"}, &(0x7f0000000940)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000d80)={0x21, 0x0, 0x2, '(\r'}}) 57.620876975s ago: executing program 0 (id=3266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000700000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) 57.523368231s ago: executing program 0 (id=3267): fsopen(0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) listen(r1, 0x6) accept(r1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r4, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x9}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x277b, 0xfffd}, 0x90) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0xe) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) r6 = socket(0x2a, 0x2, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) 56.58215236s ago: executing program 0 (id=3269): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0xa, @in6=@loopback, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x18) 56.427531573s ago: executing program 0 (id=3270): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) io_setup(0x1fe, &(0x7f0000001180)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x0, 0x6040000}]) 56.284239611s ago: executing program 0 (id=3271): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x9, 0xff, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x1, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f00000014c0)=[&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x5, 0x81, r1, &(0x7f00000003c0), 0x0, 0x6, 0x0, 0x4}]) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x10) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0xfffffffffffffffe, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002206000000583d000000002b078a217028ff4c3fa3dd2fef8f162beac425ea78abd70edd7b161abefcc821cd1ad7b88572e8f8c9163be6e3fa5884a3ec5d6d315682b7b54cfe77300f4c097a3bb3b234b94c27d06c38f9873f7fd201b2e22f238624fadc06fa67aac07a48c1c997bee94f329485f855a8ac43f04d47ec37dec0338d473d314acc4edc67d6ee8c3a32d49c98beec0278e84b6aca41364e17"], 0x0}, 0x0) 55.267279525s ago: executing program 41 (id=3181): r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e7804203005740ed0b0011c3ec0000000109ff981188592dba"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000340)={0x14, &(0x7f0000000180)={0x20, 0x8, 0x88, {0x88, 0x24, "3d1dae6ed01aaac5b6ee9cca05e90e675754f5cd1d2595c49b350e930b0dce0a67810f24fea1e28bd158ad3b6053b569551a6c84e9bbe58f75cfb40b39f2a869a4a9d6d144ad0367b05f648d50b86eeddc94a59de7b8a25b5fa861e1c48a4984d72b47cf4658eeba9e663cad19d47cc0f2aa67d1e687ea241cd0d23e35e6a8d1b604c143f3bb"}}, &(0x7f0000000240)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "8421c486c95d8ec458cdf97e6ae25337d69570ba93b05d6819ba9539a9b23813511c182cc7ac9c0dcc18b8f274467e6cc0af82b91c501e53da723c6bc0b8ec81dc983d05fbd3cc01db2de36b21ab89a4170562561868cbb21294983c94e202ef28f9ac6e7118fb7ce278f2b6f137064083a53d7db3f28d0b5b424a864e6801f9c5095fd0f369fef247f48c75817fd0a51f382883ad8ae3a7d89a4e6eccf9173f65a682321841c4aeb2ccce5b600db829cdbe8cc64ef10eb12b7865b4777753a03c7aaa67e0ce7944947e93d217bcf715118cf1140f61f03dfd275dd6d00f3fa1b0be5f2cceb323"}}}, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x0, 0xb, 0xf0, "91db613498554cc2f8f2e48c3ed9d20abab4424da9a61f32741d2d30b2fcef3b20eac45fc88b0c49ce9290242eaae7df51ea50bc0c6780a1f206ef713509b5987e11ae1cab21e2a3de5b49b811e6e5e06c512b7204d3764443f09cd275bd900c66893dd5a4cad05642f10373d5dc0c056b561def1a9a3b417e82a3930984175f7372fa85abe41bf8312b1f4ab32d13175e8f05cedba4c920bbed4b04b3f3e3b437f6a7cb323a28a9a204e0cc12eea6c6c20aea0722096468e41067eae16a5909d4991afeb8711f04d6c148bf7665b30cc80cefed60c11d3971a7e96f0e405988a5fe7de814ae2959880658c21afb9a59"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0x20, 0x81, 0x1, "93"}, &(0x7f0000000540)={0x20, 0x82, 0x3, "5c1593"}, &(0x7f0000000580)={0x20, 0x83, 0x2, "1266"}, &(0x7f00000005c0)={0x20, 0x84, 0x4, "47e51e54"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "a6efc5"}}) r1 = socket$inet6(0xa, 0x1, 0x0) fgetxattr(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="757365722e01"], 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="001249"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000e00)={0x14, &(0x7f00000000c0)={0x40, 0x6, 0x63, {0x63, 0xd, "cba787adf9e3f72950b02efa51dd063e75e00f28d800c749c0951ad51ba52c95ddd25255f6dcd971d7a24ff7ba00e406ad2d7db3ca587f505434e50799396c5d1890f5405db80eaef4c371ec3f06260029214ad681d436314fe5293ffea6fe0f59"}}, &(0x7f0000000640)={0x0, 0x3, 0x37, @string={0x37, 0x3, "f34aa056351fc21372daa63f11b8b3ff41855019d328e1f719c3c168747ea170d91c7c0d04f37959858d37029a5d02affd369cb881"}}}, &(0x7f0000001040)={0x44, &(0x7f0000000e40)={0x0, 0x3, 0x23, "01093629cf7866e45db2933efd284ad02eae0bbc42ace0d688495c17d7ef27c742fe2c"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x4e}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xdc}, &(0x7f0000000f00)={0x20, 0x81, 0x1, "db"}, &(0x7f0000000f40)={0x20, 0x82, 0x3, "5f29ed"}, &(0x7f0000000f80)={0x20, 0x83, 0x3, "53b55a"}, &(0x7f0000000fc0)={0x20, 0x84, 0x3, "25ef65"}, &(0x7f0000001000)={0x20, 0x85, 0x3, "d0423d"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='4', 0x1) syz_usb_control_io$sierra_net(r0, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x0, 0x10, 0xfa, {0xfa, 0x5, "67a976f372e8b9f36bb67d321f0365553a3f58439d8b0986758b29787f02330c07c0ae2e87eef78eb69671136f65c087daf4e0ee21f339445969f54d96a39d483a389628da094697a0b6c8bf36aaafd3e4f4b696f4b021b0de0c0f80c69e64d6903eaf98e0f935e62f677ce2df4017108ad9a76e279df0f9df8803f783f916a54a542ba9f8d17545bf2e8ebcfc9bbb46f84be60090e38dd9ca22d016fd77aa28113cdd02cb64b4e367fe55174a30ab486ca272a1ae786e114df1a4f0c5dca123aad959ab77fa427f47e34f0b2f58aa918a1b8844837a2ef0a5aa58fe7614ceb776a099302ab59e2c1251075d735e8308b3538c69e3696f98"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, &(0x7f0000000dc0)={0x1c, &(0x7f0000000900)={0x40, 0x8, 0x22, "f28d8aa356fe76e917a33147e5c21fda7eec530a7504e9fb0a55ac81ad1751ec5e11"}, &(0x7f0000000940)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000d80)={0x21, 0x0, 0x2, '(\r'}}) 54.417754366s ago: executing program 0 (id=3278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000040000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f000100756e636f6e66696e656400001400000011000100"], 0x90}}, 0x4) 39.227927273s ago: executing program 42 (id=3278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000040000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f000100756e636f6e66696e656400001400000011000100"], 0x90}}, 0x4) 32.172558974s ago: executing program 2 (id=3377): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x1c, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x68}]}]}, 0x1c}, 0x1, 0x0, 0x3000000000000000, 0x4048011}, 0xc000) 31.989253272s ago: executing program 2 (id=3378): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x18, 0x2, 0x0, "b43d70dde5dbbbe40f00f401bbe6c9000000c67f00e7ffffff00", 0x49433553}) 31.851212469s ago: executing program 2 (id=3380): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e0005030000000000003907000000000800be0007", @ANYRES32], 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x700000000000000) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) 31.692665763s ago: executing program 2 (id=3382): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e") syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a00010000000904010000010230000904010101010230000905010940000303100a252508000000030b0009040200000102300009040001"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) connect$l2tp6(r0, &(0x7f00000002c0)={0xa, 0x0, 0xd4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x1}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030401600004010203010902320001010080320904000002ffffff000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb-serial/devices/ttyUSB0/latency_timer\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='10\x00', 0x2) 28.956219072s ago: executing program 2 (id=3390): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300040008004a000200000008004bf0"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 28.643482614s ago: executing program 2 (id=3391): r0 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000140)='/', 0x1}], 0x1) ptrace(0x10, r0) ptrace$cont(0x19, r0, 0x8d, 0x40000000000000) (async) ptrace$cont(0x19, r0, 0x8d, 0x40000000000000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) bind$inet6(r2, 0x0, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, &(0x7f0000000100)) syz_usb_connect$cdc_ncm(0x6, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900710000020d00000524060001082400a9b30d000300ff0005001407240a050905580c240c00000040a90cf700030424020204240200042406024424"], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4$alg(r3, 0x0, 0x0, 0x800) (async) r4 = accept4$alg(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000003840)=[{0x0, 0x0, 0x0}], 0x1, 0x40) (async) sendmmsg$alg(r4, &(0x7f0000003840)=[{0x0, 0x0, 0x0}], 0x1, 0x40) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r5, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r4, &(0x7f0000000340), 0x2d}]) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 13.582913972s ago: executing program 43 (id=3391): r0 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000140)='/', 0x1}], 0x1) ptrace(0x10, r0) ptrace$cont(0x19, r0, 0x8d, 0x40000000000000) (async) ptrace$cont(0x19, r0, 0x8d, 0x40000000000000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) bind$inet6(r2, 0x0, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, &(0x7f0000000100)) syz_usb_connect$cdc_ncm(0x6, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900710000020d00000524060001082400a9b30d000300ff0005001407240a050905580c240c00000040a90cf700030424020204240200042406024424"], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4$alg(r3, 0x0, 0x0, 0x800) (async) r4 = accept4$alg(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000003840)=[{0x0, 0x0, 0x0}], 0x1, 0x40) (async) sendmmsg$alg(r4, &(0x7f0000003840)=[{0x0, 0x0, 0x0}], 0x1, 0x40) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r5, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r4, &(0x7f0000000340), 0x2d}]) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 13.53447529s ago: executing program 3 (id=3473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {}, @broadcast, @device_a, @random="4ad42965dde2", {0x0, 0xfff}}, 0x0, @val={0x8c, 0x18, {0x300, "24e5ea3c21c3", @long="5601f5f04ef706287517224b9d6d386c"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 13.463814493s ago: executing program 3 (id=3475): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0240) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1', 0x1) 13.090848811s ago: executing program 3 (id=3477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000010000100000e0000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) 13.064039908s ago: executing program 3 (id=3478): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="4c00000011000f140011000200000c0002000000200000", 0x17) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20071800000018562fd275239f7e5a300ac1ffa3a5ba89db83b04e"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20071800000018562fd275239f7e5a300ac1ffa3a5ba89db83b04e"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 9.978234428s ago: executing program 3 (id=3502): mkdir(&(0x7f00000001c0)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) read(r0, &(0x7f0000019200)=""/199, 0xc7) r3 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r3, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000300) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x989046, 0x0) 8.891095914s ago: executing program 3 (id=3507): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_ep_write(r2, 0x83, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_ep_write(r2, 0x83, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_ep_write(r2, 0x83, 0x0, 0x0) syz_usb_ep_write(r2, 0x83, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410001f00e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) 3.121907522s ago: executing program 1 (id=3532): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, 0x0, &(0x7f0000000040)) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x8) 2.98520791s ago: executing program 1 (id=3533): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e0005030000000000003907000000000800be0007", @ANYRES32], 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x2000000000000000) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) 2.651911254s ago: executing program 1 (id=3535): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') symlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) openat(r4, &(0x7f0000000300)='./file1\x00', 0x88700, 0x36) 2.603614445s ago: executing program 5 (id=3536): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) inotify_init1(0x80800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000002400000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 2.390347243s ago: executing program 5 (id=3538): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4a8082) r5 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.124337705s ago: executing program 5 (id=3541): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000000c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/176, 0xb0}], 0x4}, 0x100) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a0101000000000000000001000000090001fc73797a30000000000900030073797a320000000058000000060a010400000000000000000100000208000b4000000000300004802c000180090001006d657461000000001c000280080002400000000e080002400000000208000140000000120900010073797a3000000000140000001100010000000000000000000700000a"], 0xcc}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="900736ffd7fb87465963b0d3522d82eab665c2832180d084a2b466cc4ea717ab45c96aea10a8c013fdd2a867d155cff2cc400602ee3af3f80c92a078afe315445c352d1695da6c390258ae2e7efc2c02fc161e1b5e271d98a04e5d977b6ca58c3c61f2e559489bcad21796d816c99b330ad4f7f0ff31a95635d4e18731539a4485d53546337f6453f17004a64899aa1c42bceea63fb4bb4a43deb4de7ddf18f773c836c304b2f2edf9c37e2859da3e0f28a1db43866032877a5b3218da48534a923d2b864964cf53bc0156359c23b20c4b5ed905fb9b6dd9178e6110aa63b24a24c71ff171dbf7bb65c26a4f3e3b960e1fe4e5c38c458170e7e5d38a2fa77262a334b70da13159214b59e99043f2d45738cfe619d4e54d9d9d52faad4185dc1461e3de1d4a8e2bac117f496b9198352ed12b367de480013f50733fcce28686f100f105d037fe1d3c387164fd3bb6d9f758e8c35de274cc824e0ef8a4ec4d740cb37a646300158bd9f137d0712242f3ff01641eedbf6207cc3e7b9314e8cd44581f210ae9980710a38a426305d71a732645e48a5faf121177bb16c0253dbba4b6495b2fdf147bf3557edbf1134ad8135eddb75535613f0c13e995f458d7117b7b4484be02dda974d1f894074f5258bc3416e61b41949c2bca7746dd9edc6fc1d0b9305c7ee799be795a7df68f76872046beb4e1ff6d5a62a7177902fdb74cb5d1e104b8852fd4db5ced74b73b68eb138695110452ddf5def0a6961d7010d1b170391e5897f32102ebade663ec2804708f63becf2b7595461d10062df096794e1cb4232cda841f3a86a6d5e50fe8db194bfb3721c9bc3e29b176f3554f1010776afe8fe89b5869bb25e5ffe24ad26f382b7176fd85e3d19a2d8e58031e1939ed39c96c4f2f967f75049ee7e36469b8c010992623f8248cff1c362bbb12e8ed5fd05b72fb1f391b4c13d06a453f2169bea0cc67768e06311494a3dc736c80ef644fc0d09dae7dfc09de2b7f6d0b21734486503b74bd3387ffa9a5da1b39a2ec9c410a4b2d4ec1f8ef1d3a7ced2637878b038da8d69b32a3e402580e5b746f8e7f930ff478e6b15f475b6b96a25cd8f55bdd73bc483ee5625b56b81f8d9183bc36a5c4c0974db6ad499bf1fcccb994c3defccf1324543260fb1a790ef60d50da4f955783af41066d51abdf7a566c2b2c876e0199e7b920068f226c7a5f14b65b3dbd7fb244c3fb1660740b5f849942e468af39e5a9bc80a6075878dfac23d0ae839a0e509448130e7dabadd7c494b64e67be6400ea34b097bfc578deb3c5ebefa9c1019ef65bf641c9388d9b29f6c9c2e5b8b81fcfdd94059d9a21c80f318d9675721a31ca77a4920b06cb744e96ae74ef66b4dfbe5d1085c9485abf9356d966cb63a75a250dc4432b89ec09dff3531613e12694abdd61d270ab34fba12ae1db3ed45fbc87eb1725f962de4922a64c82ed5d4b652ad926be7330f15fee7a6d53719f6231be26e7593454eabf6fdfe940f04c8cdf022ce9e278c0e2ce9aa9285594972d2b910cedf1d956976f9e6d9571210e4939821c9b68146925e2780db8e1fe6872ba1e178dfb627d9623b5c700cae1d3ce830422b9d906060b28d0956af355a2ce927c9cde8391b43fdbccd428403ee758de7c09de5a2c8eb2dac85a0e056b1ce291da6e54ea1e669b5eee9ca1043aa4f92368b39920f23f2ce3ea3906412de447a0ba28474f2b839a0413e1a0c5c1e7e818b6ae483fbf9a5fcf9367cf9badb8d2040e54dd868a672f3d24fc0e9a77648acb524999c46061b5a71cc8e0b3e66e5421b4e4f8ade64015793ac3949f7c0a3bd64b8e1d2bb99d3e51b5a295b1d2ae2de914a8d6309d9faf5f6b10edb2d9c1dad7eef2ade703d92f06f811cc8682fb98ba2ec324d9ffb23ccff4d231b459214004c7c3afd1f43265f3e40dfc15053103c220347ce2c480ffc73e500314bf7125baf8047ae9521a9c23b53983366fa69466d0bbd00374f703d8e1645849f024b5f2e6affcd99d0ac335e91daf78d5966b081f82762f050b090847f48696736db6ca4afa74e40c8be0fa72a4f8dfc1ba573ee763c9f995fe9fb17c2d1e6ef167c9f15d3bce4ea8a4634628e38f2460d0387c60cabdc6eb6c722364", 0x5eb}], 0x1}, 0x84) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) fcntl$setstatus(r4, 0x4, 0x42000) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r6, 0x4, 0x42000) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120180004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYRESDEC], 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) fcntl$setstatus(r0, 0x4, 0x2000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000000c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/176, 0xb0}], 0x4}, 0x100) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a0101000000000000000001000000090001fc73797a30000000000900030073797a320000000058000000060a010400000000000000000100000208000b4000000000300004802c000180090001006d657461000000001c000280080002400000000e080002400000000208000140000000120900010073797a3000000000140000001100010000000000000000000700000a"], 0xcc}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x5eb}], 0x1}, 0x84) (async) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) (async) fcntl$setstatus(r4, 0x4, 0x42000) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) (async) fcntl$setstatus(r6, 0x4, 0x42000) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120180004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYRESDEC], 0x0) (async) 2.055539124s ago: executing program 1 (id=3542): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300040008004a000200000008004b00"], 0x38}, 0x1, 0xf0, 0x0, 0x20004085}, 0x4004080) 1.839796438s ago: executing program 1 (id=3543): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000800)) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703260000201f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) 1.591606772s ago: executing program 1 (id=3544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000040)={0x2000}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) (async) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) ioctl$TCXONC(r5, 0x540a, 0x2) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xb4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2e}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0xfcf1, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) fallocate(r4, 0x1, 0x0, 0x1000) (async) fallocate(r4, 0x1, 0x0, 0x3000) (async) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x93}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x88}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@local}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) (async) getgid() 1.142084609s ago: executing program 8 (id=3545): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000feffffff00"/88, 0x58) 799.468545ms ago: executing program 8 (id=3546): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0xba) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000801010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 572.077055ms ago: executing program 8 (id=3547): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0xb, @pix_mp={0x38305343, 0x8, 0x78110513, 0x8, 0x9, [{0xffff, 0x7}, {0x9}, {0x0, 0x7fffffff}, {0x9, 0xda}, {0x472, 0x5}, {0x8, 0x4}, {0x2, 0x1000001}, {0x6, 0x1000}], 0xff, 0x80, 0x3, 0x1, 0x2}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x36) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x4, 0x8}, {0x10, 0x200}, {0x6, 0x800}, {0xf}, {0x3, 0x2}, {0x3, 0x5}, {0x9, 0x6c10}, {0x8001, 0xee51}, {0xff0c, 0x6}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) 485.917263ms ago: executing program 8 (id=3548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {}, @broadcast, @device_a, @random="4ad42965dde2", {0x0, 0xfff}}, 0x0, @val={0x8c, 0x18, {0x500, "24e5ea3c21c3", @long="5601f5f04ef706287517224b9d6d386c"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 308.679801ms ago: executing program 5 (id=3549): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x200000000000000, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 308.258449ms ago: executing program 8 (id=3550): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f00000001c0)="cf", 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x20002, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)={0x3c, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20004800) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) write(r1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) r8 = gettid() r9 = socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r9, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000080)=0x1e) write(r7, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x5, 0x2012, r0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x40000004c0902, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 167.407512ms ago: executing program 5 (id=3551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000200000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) 50.685302ms ago: executing program 8 (id=3552): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000080)={0x1}) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x144, r1, 0xb11, 0x70bd2a, 0x259fdbfe, {0x24}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_RATE_NODE_NAME={0x86, 0xa8, @random="1ee92a6f367f49937251d3fa9b5318ed1aa8020caee225f6a5aed23e668ef914aa4cbbcc1d85b6698822f89f85d51d88373330f4675ea13dde2dc715ce47786096460122af6a1ddce7bb0bd8d844ddc29763314616046b6ffc0acf8af273c8b5df873ea7fb884716a726f4952ccd4ab0bb2cc4e2ecca543496387a11620df2fba29b"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x2c, 0xa8, @random="d31e3b155a4422c6fe32445b772563705c4e8d65f2198fde82cfff4488b6e8a291a485a56312daa3"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x144}}, 0x8000) 0s ago: executing program 5 (id=3553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000f80)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x4, "1ce45b", "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"}}, 0x110) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r4, 0x0, 0x2000fb) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xcb) sendmmsg(r2, &(0x7f000000c900)=[{{&(0x7f00000001c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x52, 0xe1, "110db71b2d2b304b2065bec60256b960fc1dadf2aef8dfc30518d15b419cb80b3f04a89ebd5a6c4e84119711c4583936e0270926b3b5bfca4f02ebfb7de8aa", 0x30}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000044) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="01"]) r6 = socket(0x27, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0xc8, "1952c4645442d20fb28ea61f648a5bb48f16ede4f684732bd8b80334504cc8311cea89e3bfbeb8be000e07c2edb0baba6c5c402f1c57696e69de46a856c7e81e3f25a3874407384c0b5f3585fb217809ff7414de66de422ee1bfab2a0878972dad3c2b566aa25589ecd7eedd210f613212969052aa54cb4a605225afa4eae4d66607ff981ca715cafb4941a6eb261d9e86fdc6818e96710c005cd47e92fb966ccb76fd75be7aef8f7bec0b32b7370827cb09850b9fdba5d2f5a586f7a6dacdd2df33ffa0412482cc"}, &(0x7f0000000500)=0xd0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000540)={0x7, 0x202, 0x7fff, 0x6, r9}, 0x10) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x810, r8, 0xa14f3000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="f044284509c4a1fc2b6d00c4e1ed58370f0158000f0f8f00000000b73af8653636400fee570866b8df000f00d8f30f7f35a9ba0000c4837905a2450000003a", 0x3f}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) ioctl$MEMREADOOB64(r11, 0xc0184d16, &(0x7f00000003c0)={0xff80000000000000, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r10, 0xae80, 0x0) kernel console output (not intermixed with test programs): n remote control event. [ 553.342479][T17118] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.370443][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.370575][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.404872][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.404972][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.444399][ T9803] m920x_read = error: -19 [ 553.444427][ T9803] dvb-usb: error while querying for an remote control event. [ 553.553551][ T42] m920x_read = error: -19 [ 553.553577][ T42] dvb-usb: error while querying for an remote control event. [ 553.664051][ T42] m920x_read = error: -19 [ 553.664070][ T42] dvb-usb: error while querying for an remote control event. [ 553.773988][ T42] m920x_read = error: -19 [ 553.774018][ T42] dvb-usb: error while querying for an remote control event. [ 553.886973][ T1218] m920x_read = error: -19 [ 553.886999][ T1218] dvb-usb: error while querying for an remote control event. [ 553.993266][ T42] m920x_read = error: -19 [ 553.993296][ T42] dvb-usb: error while querying for an remote control event. [ 554.084974][ T5627] Bluetooth: hci2: command tx timeout [ 554.105819][ T42] m920x_read = error: -19 [ 554.105855][ T42] dvb-usb: error while querying for an remote control event. [ 554.213817][ T42] m920x_read = error: -19 [ 554.213848][ T42] dvb-usb: error while querying for an remote control event. [ 554.323858][ T9802] m920x_read = error: -19 [ 554.323885][ T9802] dvb-usb: error while querying for an remote control event. [ 554.433167][ T42] m920x_read = error: -19 [ 554.433192][ T42] dvb-usb: error while querying for an remote control event. [ 554.493521][ T5622] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 554.544677][ T9802] m920x_read = error: -19 [ 554.544703][ T9802] dvb-usb: error while querying for an remote control event. [ 554.641429][T17118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.652964][ T5622] usb 4-1: Using ep0 maxpacket: 8 [ 554.654642][ T42] m920x_read = error: -19 [ 554.654664][ T42] dvb-usb: error while querying for an remote control event. [ 554.658748][ T5622] usb 4-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 554.662640][ T5622] usb 4-1: config 1 interface 0 altsetting 241 endpoint 0x2 has an invalid bInterval 52, changing to 9 [ 554.662668][ T5622] usb 4-1: config 1 interface 0 has no altsetting 0 [ 554.711347][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.711373][ T5622] usb 4-1: Product: 㤐遜憾並⁦賑懩湺⮩示ẏ퇴뻜榏䶖ꉙ圖뎐佟倯펵侵୒＃霓኷⮤꫱᪓蠙쐶ꋪ鮪붪钋䖍蔗瑮餛偟覶덚컝ඳⳈ‰ủꆽ萙␋㭔衠쵲杳骷넝訉ִ嫽偃ሲ᳖觜홾虨ᾇ젧ۖᰶ苃鮣ᆼ쉁뤶뎖궺댩㟇측听ဘ䷋첋▁䚕麙㺤糯{坁暇焤윃퀜涫؉Ꭼ痷琟ܝ年ᯔ൴䴶 [ 554.711406][ T5622] usb 4-1: Manufacturer: ㋻ [ 554.711420][ T5622] usb 4-1: SerialNumber: ᶿḲ소穩專㈉ [ 554.764157][ T42] m920x_read = error: -19 [ 554.764220][ T42] dvb-usb: error while querying for an remote control event. [ 554.876056][ T42] m920x_read = error: -19 [ 554.876083][ T42] dvb-usb: error while querying for an remote control event. [ 554.921899][T17118] veth0_vlan: entered promiscuous mode [ 554.955015][T17118] veth1_vlan: entered promiscuous mode [ 554.984727][ T42] m920x_read = error: -19 [ 554.984752][ T42] dvb-usb: error while querying for an remote control event. [ 555.054152][ T5622] usbhid 4-1:1.0: can't add hid device: -71 [ 555.054245][ T5622] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 555.061855][ T5622] usb 4-1: USB disconnect, device number 17 [ 555.093698][ T9802] m920x_read = error: -19 [ 555.093722][ T9802] dvb-usb: error while querying for an remote control event. [ 555.138317][T17118] veth0_macvtap: entered promiscuous mode [ 555.161046][T17118] veth1_macvtap: entered promiscuous mode [ 555.203522][ T42] m920x_read = error: -19 [ 555.203547][ T42] dvb-usb: error while querying for an remote control event. [ 555.210029][T17118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.249471][T17118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.318948][ T42] m920x_read = error: -19 [ 555.318973][ T42] dvb-usb: error while querying for an remote control event. [ 555.336534][ T266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.337350][ T266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.337389][ T266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.337421][ T266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.423513][ T9802] m920x_read = error: -19 [ 555.423538][ T9802] dvb-usb: error while querying for an remote control event. [ 555.537922][ T42] m920x_read = error: -19 [ 555.537946][ T42] dvb-usb: error while querying for an remote control event. [ 555.643298][ T42] m920x_read = error: -19 [ 555.643324][ T42] dvb-usb: error while querying for an remote control event. [ 555.721768][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.721790][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.742196][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3296'. [ 555.757728][ T42] m920x_read = error: -19 [ 555.757751][ T42] dvb-usb: error while querying for an remote control event. [ 555.832460][ T266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.832480][ T266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.864336][ T42] m920x_read = error: -19 [ 555.864361][ T42] dvb-usb: error while querying for an remote control event. [ 555.974119][ T42] m920x_read = error: -19 [ 555.974151][ T42] dvb-usb: error while querying for an remote control event. [ 556.040949][T17275] xt_nfacct: accounting object `syz0' does not exist [ 556.083825][ T42] m920x_read = error: -19 [ 556.083852][ T42] dvb-usb: error while querying for an remote control event. [ 556.163372][ T5627] Bluetooth: hci2: command tx timeout [ 556.193617][ T42] m920x_read = error: -19 [ 556.193641][ T42] dvb-usb: error while querying for an remote control event. [ 556.303344][ T42] m920x_read = error: -19 [ 556.303370][ T42] dvb-usb: error while querying for an remote control event. [ 556.415758][ T42] m920x_read = error: -19 [ 556.415796][ T42] dvb-usb: error while querying for an remote control event. [ 556.523431][ T42] m920x_read = error: -19 [ 556.523477][ T42] dvb-usb: error while querying for an remote control event. [ 556.615087][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3300'. [ 556.634947][ T42] m920x_read = error: -19 [ 556.634972][ T42] dvb-usb: error while querying for an remote control event. [ 556.743335][ T42] m920x_read = error: -19 [ 556.743363][ T42] dvb-usb: error while querying for an remote control event. [ 556.853639][ T9802] m920x_read = error: -19 [ 556.853687][ T9802] dvb-usb: error while querying for an remote control event. [ 556.963483][ T9802] m920x_read = error: -19 [ 556.963507][ T9802] dvb-usb: error while querying for an remote control event. [ 557.078126][ T9802] m920x_read = error: -19 [ 557.078151][ T9802] dvb-usb: error while querying for an remote control event. [ 557.183495][ T42] m920x_read = error: -19 [ 557.183522][ T42] dvb-usb: error while querying for an remote control event. [ 557.293487][ T42] m920x_read = error: -19 [ 557.293514][ T42] dvb-usb: error while querying for an remote control event. [ 557.404174][ T9802] m920x_read = error: -19 [ 557.404200][ T9802] dvb-usb: error while querying for an remote control event. [ 557.427786][T17314] netlink: 'syz.2.3305': attribute type 10 has an invalid length. [ 557.427808][T17314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3305'. [ 557.428244][T17314] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 557.429771][T17314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 557.513203][ T9802] m920x_read = error: -19 [ 557.513227][ T9802] dvb-usb: error while querying for an remote control event. [ 557.624222][ T42] m920x_read = error: -19 [ 557.624247][ T42] dvb-usb: error while querying for an remote control event. [ 557.733327][ T42] m920x_read = error: -19 [ 557.733356][ T42] dvb-usb: error while querying for an remote control event. [ 557.846681][ T42] m920x_read = error: -19 [ 557.846708][ T42] dvb-usb: error while querying for an remote control event. [ 557.938551][T17303] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 557.961737][ T42] m920x_read = error: -19 [ 557.961763][ T42] dvb-usb: error while querying for an remote control event. [ 558.063146][ T42] m920x_read = error: -19 [ 558.063171][ T42] dvb-usb: error while querying for an remote control event. [ 558.173316][ T42] m920x_read = error: -19 [ 558.173343][ T42] dvb-usb: error while querying for an remote control event. [ 558.243349][ T5627] Bluetooth: hci2: command tx timeout [ 558.283431][ T42] m920x_read = error: -19 [ 558.283455][ T42] dvb-usb: error while querying for an remote control event. [ 558.319773][T17332] nvme_fabrics: missing parameter 'nqn=%s' [ 558.393166][ T42] m920x_read = error: -19 [ 558.393193][ T42] dvb-usb: error while querying for an remote control event. [ 558.510781][ T9802] m920x_read = error: -19 [ 558.510807][ T9802] dvb-usb: error while querying for an remote control event. [ 558.552649][T17343] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3309'. [ 558.613234][ T9802] m920x_read = error: -19 [ 558.613260][ T9802] dvb-usb: error while querying for an remote control event. [ 558.724136][ T9802] m920x_read = error: -19 [ 558.724163][ T9802] dvb-usb: error while querying for an remote control event. [ 558.796765][T17348] syz.2.3310 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 558.834424][ T42] m920x_read = error: -19 [ 558.834450][ T42] dvb-usb: error while querying for an remote control event. [ 558.943118][ T9802] m920x_read = error: -19 [ 558.943143][ T9802] dvb-usb: error while querying for an remote control event. [ 559.054105][ T9802] m920x_read = error: -19 [ 559.054132][ T9802] dvb-usb: error while querying for an remote control event. [ 559.163134][ T42] m920x_read = error: -19 [ 559.163160][ T42] dvb-usb: error while querying for an remote control event. [ 559.273164][ T42] m920x_read = error: -19 [ 559.273191][ T42] dvb-usb: error while querying for an remote control event. [ 559.383124][ T42] m920x_read = error: -19 [ 559.383149][ T42] dvb-usb: error while querying for an remote control event. [ 559.494307][ T42] m920x_read = error: -19 [ 559.494333][ T42] dvb-usb: error while querying for an remote control event. [ 559.537276][T17374] input: syz0 as /devices/virtual/input/input94 [ 559.595797][T17362] netlink: 'syz.2.3312': attribute type 10 has an invalid length. [ 559.595818][T17362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3312'. [ 559.634286][ T1218] m920x_read = error: -19 [ 559.634312][ T1218] dvb-usb: error while querying for an remote control event. [ 559.790087][ T9804] m920x_read = error: -19 [ 559.790118][ T9804] dvb-usb: error while querying for an remote control event. [ 559.893192][ T1218] m920x_read = error: -19 [ 559.893218][ T1218] dvb-usb: error while querying for an remote control event. [ 560.004168][ T1218] m920x_read = error: -19 [ 560.004194][ T1218] dvb-usb: error while querying for an remote control event. [ 560.113320][ T1218] m920x_read = error: -19 [ 560.113347][ T1218] dvb-usb: error while querying for an remote control event. [ 560.223281][ T1218] m920x_read = error: -19 [ 560.223307][ T1218] dvb-usb: error while querying for an remote control event. [ 560.323696][ T5627] Bluetooth: hci2: command 0x0401 tx timeout [ 560.331646][ T9802] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 560.331669][ T9802] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 560.333964][ T9803] m920x_read = error: -19 [ 560.334014][ T9803] dvb-usb: error while querying for an remote control event. [ 560.443211][ T9803] m920x_read = error: -19 [ 560.443236][ T9803] dvb-usb: error while querying for an remote control event. [ 560.486665][ T1218] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 560.553753][ T9802] m920x_read = error: -19 [ 560.553781][ T9802] dvb-usb: error while querying for an remote control event. [ 560.633724][ T1218] usb 3-1: Using ep0 maxpacket: 32 [ 560.634280][ T1218] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 560.640591][ T1218] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 560.640644][ T1218] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 560.640691][ T1218] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 560.640718][ T1218] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 560.640744][ T1218] usb 3-1: config 0 interface 0 has no altsetting 0 [ 560.649740][ T1218] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 560.649827][ T1218] usb 3-1: Product: syz [ 560.649870][ T1218] usb 3-1: Manufacturer: syz [ 560.649913][ T1218] usb 3-1: SerialNumber: syz [ 560.699651][ T42] m920x_read = error: -19 [ 560.699717][ T42] dvb-usb: error while querying for an remote control event. [ 560.738008][ T1218] usb 3-1: config 0 descriptor?? [ 560.770361][ T1218] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 560.775208][ T1218] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 560.809572][ T1218] m920x_read = error: -19 [ 560.809599][ T1218] dvb-usb: error while querying for an remote control event. [ 560.855116][T17402] nvme_fabrics: unknown parameter or missing value 'data_digext' in ctrl creation request [ 560.913290][ T1218] m920x_read = error: -19 [ 560.913316][ T1218] dvb-usb: error while querying for an remote control event. [ 560.991468][ T1218] usb 3-1: USB disconnect, device number 28 [ 560.991581][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 561.009438][ T1218] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 561.026090][ T42] m920x_read = error: -19 [ 561.026111][ T42] dvb-usb: error while querying for an remote control event. [ 561.133624][ T42] m920x_read = error: -19 [ 561.133667][ T42] dvb-usb: error while querying for an remote control event. [ 561.192954][ T9796] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 561.214805][T17394] ldusb: No device or device unplugged -19 [ 561.243267][ T1218] m920x_read = error: -19 [ 561.243291][ T1218] dvb-usb: error while querying for an remote control event. [ 561.343606][ T9796] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 561.346758][ T9796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.346785][ T9796] usb 4-1: Product: syz [ 561.346802][ T9796] usb 4-1: Manufacturer: syz [ 561.346817][ T9796] usb 4-1: SerialNumber: syz [ 561.360087][ T1218] m920x_read = error: -19 [ 561.360158][ T1218] dvb-usb: error while querying for an remote control event. [ 561.463737][ T42] m920x_read = error: -19 [ 561.463766][ T42] dvb-usb: error while querying for an remote control event. [ 561.573298][ T42] m920x_read = error: -19 [ 561.573319][ T42] dvb-usb: error while querying for an remote control event. [ 561.683295][ T1218] m920x_read = error: -19 [ 561.683320][ T1218] dvb-usb: error while querying for an remote control event. [ 561.761041][ T9796] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 561.761099][ T9796] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 561.794715][ T1218] m920x_read = error: -19 [ 561.794743][ T1218] dvb-usb: error while querying for an remote control event. [ 561.903944][ T42] m920x_read = error: -19 [ 561.903984][ T42] dvb-usb: error while querying for an remote control event. [ 562.016268][ T42] m920x_read = error: -19 [ 562.016297][ T42] dvb-usb: error while querying for an remote control event. [ 562.123323][ T42] m920x_read = error: -19 [ 562.123349][ T42] dvb-usb: error while querying for an remote control event. [ 562.179264][T17433] FAULT_INJECTION: forcing a failure. [ 562.179264][T17433] name failslab, interval 1, probability 0, space 0, times 0 [ 562.179302][T17433] CPU: 1 UID: 0 PID: 17433 Comm: syz.2.3322 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.179335][T17433] Tainted: [L]=SOFTLOCKUP [ 562.179345][T17433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.179361][T17433] Call Trace: [ 562.179370][T17433] [ 562.179381][T17433] dump_stack_lvl+0xe8/0x150 [ 562.179427][T17433] should_fail_ex+0x3eb/0x540 [ 562.179462][T17433] should_failslab+0xa8/0x100 [ 562.179489][T17433] ? inet_bind_bucket_create+0x30/0x240 [ 562.179516][T17433] kmem_cache_alloc_noprof+0x9c/0x600 [ 562.179552][T17433] ? inet_bind_bucket_create+0x30/0x240 [ 562.179579][T17433] ? inet_bind2_bucket_find+0x39d/0x3d0 [ 562.179609][T17433] inet_bind_bucket_create+0x30/0x240 [ 562.179639][T17433] inet_csk_get_port+0xbf0/0x1730 [ 562.179698][T17433] inet_csk_listen_start+0x17c/0x380 [ 562.179735][T17433] __inet_listen_sk+0x2d3/0x5c0 [ 562.179773][T17433] ? __pfx___inet_listen_sk+0x10/0x10 [ 562.179811][T17433] ? mptcp_listen+0x21d/0x600 [ 562.179848][T17433] ? __local_bh_enable_ip+0xd6/0x140 [ 562.179883][T17433] mptcp_listen+0x229/0x600 [ 562.179915][T17433] __x64_sys_listen+0x1c7/0x240 [ 562.179956][T17433] do_syscall_64+0x166/0x520 [ 562.179979][T17433] ? trace_irq_disable+0x3b/0x140 [ 562.180014][T17433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.180039][T17433] ? clear_bhb_loop+0x70/0xc0 [ 562.180070][T17433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.180096][T17433] RIP: 0033:0x7fecdf79e159 [ 562.180118][T17433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.180139][T17433] RSP: 002b:00007fece06f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 562.180166][T17433] RAX: ffffffffffffffda RBX: 00007fecdfa25fa0 RCX: 00007fecdf79e159 [ 562.180185][T17433] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 562.180200][T17433] RBP: 00007fecdf83503b R08: 0000000000000000 R09: 0000000000000000 [ 562.180216][T17433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.180230][T17433] R13: 00007fecdfa26038 R14: 00007fecdfa25fa0 R15: 00007ffcbb0c5588 [ 562.180267][T17433] [ 562.233738][ T1218] m920x_read = error: -19 [ 562.233796][ T1218] dvb-usb: error while querying for an remote control event. [ 562.345394][ T1218] m920x_read = error: -19 [ 562.345459][ T1218] dvb-usb: error while querying for an remote control event. [ 562.453644][ T1218] m920x_read = error: -19 [ 562.453668][ T1218] dvb-usb: error while querying for an remote control event. [ 562.453745][ T42] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 562.563266][ T1218] m920x_read = error: -19 [ 562.563301][ T1218] dvb-usb: error while querying for an remote control event. [ 562.602953][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 562.605323][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 562.605368][ T42] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 562.606316][ T42] usb 3-1: config 165 has an invalid interface number: 162 but max is 0 [ 562.606340][ T42] usb 3-1: config 165 has no interface number 0 [ 562.606381][ T42] usb 3-1: config 165 interface 162 has no altsetting 0 [ 562.619861][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.619936][ T42] usb 3-1: Product: syz [ 562.619989][ T42] usb 3-1: Manufacturer: syz [ 562.620033][ T42] usb 3-1: SerialNumber: syz [ 562.674976][ T1218] m920x_read = error: -19 [ 562.675037][ T1218] dvb-usb: error while querying for an remote control event. [ 562.727241][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.727313][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.783540][ T1218] m920x_read = error: -19 [ 562.783564][ T1218] dvb-usb: error while querying for an remote control event. [ 562.894932][ T1218] m920x_read = error: -19 [ 562.894961][ T1218] dvb-usb: error while querying for an remote control event. [ 562.929935][T17442] fuse: Unknown parameter '' [ 562.932453][ T42] usb 3-1: USB disconnect, device number 29 [ 562.988742][T17406] netlink: ct family unspecified [ 562.988773][T17406] openvswitch: netlink: Actions may not be safe on all matching packets [ 562.991154][ T9796] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 562.991771][ T9796] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 563.006485][ T9802] m920x_read = error: -19 [ 563.006507][ T9802] dvb-usb: error while querying for an remote control event. [ 563.113985][ T42] m920x_read = error: -19 [ 563.114015][ T42] dvb-usb: error while querying for an remote control event. [ 563.223612][ T9802] m920x_read = error: -19 [ 563.223638][ T9802] dvb-usb: error while querying for an remote control event. [ 563.336293][ T9802] m920x_read = error: -19 [ 563.336330][ T9802] dvb-usb: error while querying for an remote control event. [ 563.397207][T17406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.397615][T17406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.442536][T17458] netlink: ct family unspecified [ 563.442565][T17458] openvswitch: netlink: Actions may not be safe on all matching packets [ 563.444328][ T9802] m920x_read = error: -19 [ 563.444377][ T9802] dvb-usb: error while querying for an remote control event. [ 563.553220][ T9802] m920x_read = error: -19 [ 563.553246][ T9802] dvb-usb: error while querying for an remote control event. [ 563.663673][ T9802] m920x_read = error: -19 [ 563.663698][ T9802] dvb-usb: error while querying for an remote control event. [ 563.687666][ T9796] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000094. ret = -EPROTO [ 563.687718][ T9796] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 563.724229][ T9796] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 563.729207][ T9796] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 563.752308][ T9796] usb 4-1: USB disconnect, device number 18 [ 563.775950][ T42] m920x_read = error: -19 [ 563.775972][ T42] dvb-usb: error while querying for an remote control event. [ 563.883220][ T9802] m920x_read = error: -19 [ 563.883245][ T9802] dvb-usb: error while querying for an remote control event. [ 563.969324][T17469] MTRR 1 not used [ 563.993276][ T42] m920x_read = error: -19 [ 563.993312][ T42] dvb-usb: error while querying for an remote control event. [ 564.103877][ T42] m920x_read = error: -19 [ 564.103906][ T42] dvb-usb: error while querying for an remote control event. [ 564.213302][ T42] m920x_read = error: -19 [ 564.213328][ T42] dvb-usb: error while querying for an remote control event. [ 564.323650][ T42] m920x_read = error: -19 [ 564.323677][ T42] dvb-usb: error while querying for an remote control event. [ 564.434633][ T42] m920x_read = error: -19 [ 564.434660][ T42] dvb-usb: error while querying for an remote control event. [ 564.436155][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 564.436184][T17484] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3336'. [ 564.544605][ T42] m920x_read = error: -19 [ 564.544631][ T42] dvb-usb: error while querying for an remote control event. [ 564.656528][ T42] m920x_read = error: -19 [ 564.656552][ T42] dvb-usb: error while querying for an remote control event. [ 564.662280][T17486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 564.763639][ T9802] m920x_read = error: -19 [ 564.763669][ T9802] dvb-usb: error while querying for an remote control event. [ 564.873960][ T9802] m920x_read = error: -19 [ 564.873985][ T9802] dvb-usb: error while querying for an remote control event. [ 564.983262][ T9802] m920x_read = error: -19 [ 564.983288][ T9802] dvb-usb: error while querying for an remote control event. [ 565.089589][T17497] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 565.098900][ T42] m920x_read = error: -19 [ 565.098922][ T42] dvb-usb: error while querying for an remote control event. [ 565.101873][T17502] overlayfs: failed to resolve './bus': -2 [ 565.131772][T17502] overlay: filesystem on ./file0 not supported as upperdir [ 565.132547][T17502] overlay: filesystem on ./file0 not supported as upperdir [ 565.148747][T17502] overlay: filesystem on ./file0 not supported as upperdir [ 565.149337][T17502] overlay: filesystem on ./file0 not supported as upperdir [ 565.150166][T17502] overlay: filesystem on ./file0 not supported as upperdir [ 565.177158][T17502] overlay: filesystem on ./file0 not supported as upperdir [ 565.182299][T17500] overlayfs: missing 'lowerdir' [ 565.203332][ T9802] m920x_read = error: -19 [ 565.203354][ T9802] dvb-usb: error while querying for an remote control event. [ 565.223177][ T42] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 565.314904][ T9802] m920x_read = error: -19 [ 565.314930][ T9802] dvb-usb: error while querying for an remote control event. [ 565.377788][ T42] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 565.380317][T17507] netlink: 'syz.3.3345': attribute type 10 has an invalid length. [ 565.380838][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.402159][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.402217][ T42] usb 3-1: Product: syz [ 565.402262][ T42] usb 3-1: Manufacturer: syz [ 565.402297][ T42] usb 3-1: SerialNumber: syz [ 565.434497][ T9802] m920x_read = error: -19 [ 565.434519][ T9802] dvb-usb: error while querying for an remote control event. [ 565.458871][ T42] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 565.549722][ T9802] m920x_read = error: -19 [ 565.549752][ T9802] dvb-usb: error while querying for an remote control event. [ 565.653372][ T9802] m920x_read = error: -19 [ 565.653399][ T9802] dvb-usb: error while querying for an remote control event. [ 565.763567][ T9802] m920x_read = error: -19 [ 565.763593][ T9802] dvb-usb: error while querying for an remote control event. [ 565.874982][ T1218] m920x_read = error: -19 [ 565.875007][ T1218] dvb-usb: error while querying for an remote control event. [ 565.889754][T17517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3350'. [ 565.941240][T17517] usb usb7: usbfs: process 17517 (syz.3.3350) did not claim interface 4 before use [ 565.983385][ T9802] m920x_read = error: -19 [ 565.983418][ T9802] dvb-usb: error while querying for an remote control event. [ 566.093262][ T1218] m920x_read = error: -19 [ 566.093290][ T1218] dvb-usb: error while querying for an remote control event. [ 566.205540][ T1218] m920x_read = error: -19 [ 566.205568][ T1218] dvb-usb: error while querying for an remote control event. [ 566.256518][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 566.271745][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 566.285039][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 566.286152][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 566.286860][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 566.314147][ T1218] m920x_read = error: -19 [ 566.314268][ T1218] dvb-usb: error while querying for an remote control event. [ 566.348664][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 566.350297][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 566.350763][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 566.373413][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 566.385060][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 566.433318][ T1218] m920x_read = error: -19 [ 566.433343][ T1218] dvb-usb: error while querying for an remote control event. [ 566.508734][T17495] netlink: 'syz.2.3341': attribute type 10 has an invalid length. [ 566.509776][ T42] gspca_mr97310a: reg write [19] error -71 [ 566.509861][ T42] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 566.547431][ T42] usb 3-1: USB disconnect, device number 30 [ 566.552190][ T1218] m920x_read = error: -19 [ 566.552212][ T1218] dvb-usb: error while querying for an remote control event. [ 566.664793][ T1218] m920x_read = error: -19 [ 566.664819][ T1218] dvb-usb: error while querying for an remote control event. [ 566.774581][ T42] m920x_read = error: -19 [ 566.774618][ T42] dvb-usb: error while querying for an remote control event. [ 566.886033][ T42] m920x_read = error: -19 [ 566.886059][ T42] dvb-usb: error while querying for an remote control event. [ 566.904779][ T9796] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 566.998017][ T1218] m920x_read = error: -19 [ 566.998046][ T1218] dvb-usb: error while querying for an remote control event. [ 567.072929][ T9796] usb 4-1: Using ep0 maxpacket: 16 [ 567.073464][ T9796] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 567.074416][ T9796] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 567.074440][ T9796] usb 4-1: config 0 has no interface number 0 [ 567.074478][ T9796] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 567.074503][ T9796] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 567.076748][ T9796] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 567.076773][ T9796] usb 4-1: Product: syz [ 567.076788][ T9796] usb 4-1: SerialNumber: syz [ 567.105965][ T42] m920x_read = error: -19 [ 567.106022][ T42] dvb-usb: error while querying for an remote control event. [ 567.161967][ T9796] usb 4-1: config 0 descriptor?? [ 567.173765][ T9796] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 567.182163][T16742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.214072][ T1218] m920x_read = error: -19 [ 567.214096][ T1218] dvb-usb: error while querying for an remote control event. [ 567.279493][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3353'. [ 567.323276][ T1218] m920x_read = error: -19 [ 567.323302][ T1218] dvb-usb: error while querying for an remote control event. [ 567.435180][ T1218] m920x_read = error: -19 [ 567.435206][ T1218] dvb-usb: error while querying for an remote control event. [ 567.552673][ T42] m920x_read = error: -19 [ 567.552701][ T42] dvb-usb: error while querying for an remote control event. [ 567.640868][T16742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.654223][ T42] m920x_read = error: -19 [ 567.654246][ T42] dvb-usb: error while querying for an remote control event. [ 567.763380][ T42] m920x_read = error: -19 [ 567.763410][ T42] dvb-usb: error while querying for an remote control event. [ 567.873861][ T1218] m920x_read = error: -19 [ 567.873883][ T1218] dvb-usb: error while querying for an remote control event. [ 567.881575][T16742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.983273][ T1218] m920x_read = error: -19 [ 567.983300][ T1218] dvb-usb: error while querying for an remote control event. [ 568.067667][T16742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.094058][ T1218] m920x_read = error: -19 [ 568.094103][ T1218] dvb-usb: error while querying for an remote control event. [ 568.203288][ T1218] m920x_read = error: -19 [ 568.203337][ T1218] dvb-usb: error while querying for an remote control event. [ 568.313644][ T1218] m920x_read = error: -19 [ 568.313670][ T1218] dvb-usb: error while querying for an remote control event. [ 568.424405][ T42] m920x_read = error: -19 [ 568.424438][ T42] dvb-usb: error while querying for an remote control event. [ 568.485840][ T5627] Bluetooth: hci5: command tx timeout [ 568.533251][ T9802] m920x_read = error: -19 [ 568.533276][ T9802] dvb-usb: error while querying for an remote control event. [ 568.643760][ T9802] m920x_read = error: -19 [ 568.643785][ T9802] dvb-usb: error while querying for an remote control event. [ 568.746255][T16742] bridge_slave_1: left allmulticast mode [ 568.746281][T16742] bridge_slave_1: left promiscuous mode [ 568.746463][T16742] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.751122][T16742] bridge_slave_0: left allmulticast mode [ 568.751139][T16742] bridge_slave_0: left promiscuous mode [ 568.751285][T16742] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.754633][ T9802] m920x_read = error: -19 [ 568.754691][ T9802] dvb-usb: error while querying for an remote control event. [ 568.864166][ T9802] m920x_read = error: -19 [ 568.864192][ T9802] dvb-usb: error while querying for an remote control event. [ 568.973244][ T42] m920x_read = error: -19 [ 568.973276][ T42] dvb-usb: error while querying for an remote control event. [ 569.035266][T16742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.038595][T16742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.040875][T16742] bond0 (unregistering): Released all slaves [ 569.077445][T17520] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.077528][T17520] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.077650][T17520] bridge_slave_0: entered allmulticast mode [ 569.079536][T17520] bridge_slave_0: entered promiscuous mode [ 569.083978][ T42] m920x_read = error: -19 [ 569.084025][ T42] dvb-usb: error while querying for an remote control event. [ 569.147697][T17520] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.148307][T17520] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.148440][T17520] bridge_slave_1: entered allmulticast mode [ 569.152801][T17520] bridge_slave_1: entered promiscuous mode [ 569.193634][ T9802] m920x_read = error: -19 [ 569.193656][ T9802] dvb-usb: error while querying for an remote control event. [ 569.303951][ T42] m920x_read = error: -19 [ 569.303977][ T42] dvb-usb: error while querying for an remote control event. [ 569.307687][T17520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.312642][T17520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.391658][T17520] team0: Port device team_slave_0 added [ 569.400736][T17520] team0: Port device team_slave_1 added [ 569.418245][ T42] m920x_read = error: -19 [ 569.418263][ T42] dvb-usb: error while querying for an remote control event. [ 569.501517][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3360'. [ 569.525612][ T42] m920x_read = error: -19 [ 569.525637][ T42] dvb-usb: error while querying for an remote control event. [ 569.530119][T17520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.530137][T17520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.530166][T17520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.545051][T17520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.545065][T17520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.545090][T17520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.633677][ T1218] m920x_read = error: -19 [ 569.633704][ T1218] dvb-usb: error while querying for an remote control event. [ 569.745917][ T1218] m920x_read = error: -19 [ 569.745945][ T1218] dvb-usb: error while querying for an remote control event. [ 569.777230][T16742] hsr_slave_0: left promiscuous mode [ 569.794687][T16742] hsr_slave_1: left promiscuous mode [ 569.797524][T16742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.797546][T16742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.800902][T16742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.800948][T16742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.853829][ T1218] m920x_read = error: -19 [ 569.853864][ T1218] dvb-usb: error while querying for an remote control event. [ 569.868390][T16742] veth1_macvtap: left promiscuous mode [ 569.868492][T16742] veth0_macvtap: left promiscuous mode [ 569.868742][T16742] veth1_vlan: left promiscuous mode [ 569.868898][T16742] veth0_vlan: left promiscuous mode [ 569.944597][T17590] loop0: detected capacity change from 0 to 4096 [ 569.964943][ T9802] m920x_read = error: -19 [ 569.964968][ T9802] dvb-usb: error while querying for an remote control event. [ 570.059388][ T9802] usb 4-1: USB disconnect, device number 19 [ 570.081530][ T42] m920x_read = error: -19 [ 570.081552][ T42] dvb-usb: error while querying for an remote control event. [ 570.106759][T17590] loop0: [ 570.184054][ T42] m920x_read = error: -19 [ 570.184079][ T42] dvb-usb: error while querying for an remote control event. [ 570.293194][ T9803] m920x_read = error: -19 [ 570.293219][ T9803] dvb-usb: error while querying for an remote control event. [ 570.404033][ T9802] m920x_read = error: -19 [ 570.404063][ T9802] dvb-usb: error while querying for an remote control event. [ 570.513308][ T9802] m920x_read = error: -19 [ 570.513343][ T9802] dvb-usb: error while querying for an remote control event. [ 570.563026][ T5627] Bluetooth: hci5: command tx timeout [ 570.571835][T16742] team0 (unregistering): Port device team_slave_1 removed [ 570.599695][T16742] team0 (unregistering): Port device team_slave_0 removed [ 570.623244][ T9802] m920x_read = error: -19 [ 570.623268][ T9802] dvb-usb: error while querying for an remote control event. [ 570.686250][ T4984] loop0: [ 570.733205][ T9802] m920x_read = error: -19 [ 570.733231][ T9802] dvb-usb: error while querying for an remote control event. [ 570.736946][ T1218] logitech-hidpp-device 0003:046D:C082.0027: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 570.843295][ T1218] m920x_read = error: -19 [ 570.843321][ T1218] dvb-usb: error while querying for an remote control event. [ 570.899293][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 570.946970][T17605] fido_id[17605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 570.957128][ T9802] m920x_read = error: -19 [ 570.957181][ T9802] dvb-usb: error while querying for an remote control event. [ 571.063263][ T1218] m920x_read = error: -19 [ 571.063289][ T1218] dvb-usb: error while querying for an remote control event. [ 571.107896][T17520] hsr_slave_0: entered promiscuous mode [ 571.108558][T17520] hsr_slave_1: entered promiscuous mode [ 571.109011][T17520] debugfs: 'hsr0' already exists in 'hsr' [ 571.109029][T17520] Cannot create hsr debugfs directory [ 571.173362][ T1218] m920x_read = error: -19 [ 571.173391][ T1218] dvb-usb: error while querying for an remote control event. [ 571.283652][ T1218] m920x_read = error: -19 [ 571.283677][ T1218] dvb-usb: error while querying for an remote control event. [ 571.397689][ T1218] m920x_read = error: -19 [ 571.397717][ T1218] dvb-usb: error while querying for an remote control event. [ 571.503945][ T1218] m920x_read = error: -19 [ 571.503972][ T1218] dvb-usb: error while querying for an remote control event. [ 571.579006][T16742] IPVS: stop unused estimator thread 0... [ 571.615112][ T1218] m920x_read = error: -19 [ 571.615137][ T1218] dvb-usb: error while querying for an remote control event. [ 571.724282][ T1218] m920x_read = error: -19 [ 571.724308][ T1218] dvb-usb: error while querying for an remote control event. [ 571.833204][ T1218] m920x_read = error: -19 [ 571.833228][ T1218] dvb-usb: error while querying for an remote control event. [ 571.864880][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 571.943864][ T1218] m920x_read = error: -19 [ 571.943888][ T1218] dvb-usb: error while querying for an remote control event. [ 572.018359][T17636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3370'. [ 572.053343][ T9802] m920x_read = error: -19 [ 572.053371][ T9802] dvb-usb: error while querying for an remote control event. [ 572.163551][ T9802] m920x_read = error: -19 [ 572.163579][ T9802] dvb-usb: error while querying for an remote control event. [ 572.273306][ T1218] m920x_read = error: -19 [ 572.273335][ T1218] dvb-usb: error while querying for an remote control event. [ 572.383224][ T1218] m920x_read = error: -19 [ 572.383254][ T1218] dvb-usb: error while querying for an remote control event. [ 572.470364][T17650] netlink: 'syz.2.3373': attribute type 2 has an invalid length. [ 572.493230][ T1218] m920x_read = error: -19 [ 572.493254][ T1218] dvb-usb: error while querying for an remote control event. [ 572.537188][T17653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3374'. [ 572.537435][T17644] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3370'. [ 572.537524][T17644] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3370'. [ 572.537543][T17644] netlink: 'syz.3.3370': attribute type 1 has an invalid length. [ 572.604027][ T1218] m920x_read = error: -19 [ 572.604052][ T1218] dvb-usb: error while querying for an remote control event. [ 572.643448][ T5627] Bluetooth: hci5: command tx timeout [ 572.662913][T17655] xt_nfacct: accounting object `syz0' does not exist [ 572.715371][ T1218] m920x_read = error: -19 [ 572.715396][ T1218] dvb-usb: error while querying for an remote control event. [ 572.825179][ T1218] m920x_read = error: -19 [ 572.825234][ T1218] dvb-usb: error while querying for an remote control event. [ 572.933707][ T1218] m920x_read = error: -19 [ 572.933732][ T1218] dvb-usb: error while querying for an remote control event. [ 573.043722][ T9802] m920x_read = error: -19 [ 573.043749][ T9802] dvb-usb: error while querying for an remote control event. [ 573.153402][ T9802] m920x_read = error: -19 [ 573.153429][ T9802] dvb-usb: error while querying for an remote control event. [ 573.199876][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3380'. [ 573.263402][ T9802] m920x_read = error: -19 [ 573.263432][ T9802] dvb-usb: error while querying for an remote control event. [ 573.373334][ T1218] m920x_read = error: -19 [ 573.373361][ T1218] dvb-usb: error while querying for an remote control event. [ 573.378491][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 573.452102][T17678] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 573.484225][ T42] m920x_read = error: -19 [ 573.484251][ T42] dvb-usb: error while querying for an remote control event. [ 573.534038][ T9802] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 573.594957][ T9803] m920x_read = error: -19 [ 573.594983][ T9803] dvb-usb: error while querying for an remote control event. [ 573.688691][ T9802] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 573.691215][ T9802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.705232][ T9803] m920x_read = error: -19 [ 573.705306][ T9803] dvb-usb: error while querying for an remote control event. [ 573.713533][ T1218] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 573.729860][ T9802] usb 4-1: config 0 descriptor?? [ 573.750966][ T9802] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 573.813319][ T9803] m920x_read = error: -19 [ 573.813375][ T9803] dvb-usb: error while querying for an remote control event. [ 573.867318][ T1218] usb 3-1: unable to get BOS descriptor or descriptor too short [ 573.868232][ T1218] usb 3-1: not running at top speed; connect to a high speed hub [ 573.868304][ T1218] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 573.871428][ T1218] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.877096][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.877206][ T1218] usb 3-1: Product: syz [ 573.877254][ T1218] usb 3-1: Manufacturer: syz [ 573.877297][ T1218] usb 3-1: SerialNumber: syz [ 573.888711][T17520] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 573.924031][ T9803] m920x_read = error: -19 [ 573.924142][ T9803] dvb-usb: error while querying for an remote control event. [ 573.956528][ T9802] gp8psk: usb in 128 operation failed. [ 573.959116][T17520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.960182][T17520] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 573.989948][T17520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 573.990832][T17520] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 574.025144][T17520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.028364][ T1218] snd-ua101 3-1:1.1: sample format descriptor not found [ 574.028385][ T1218] snd-ua101 3-1:1.0: invalid bNumEndpoints [ 574.032121][T17520] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 574.035701][ T9803] m920x_read = error: -19 [ 574.035752][ T9803] dvb-usb: error while querying for an remote control event. [ 574.102103][T17520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 574.145757][ T1218] m920x_read = error: -19 [ 574.145785][ T1218] dvb-usb: error while querying for an remote control event. [ 574.207037][ T9802] gp8psk: FW Version = 216.162.133 (0xd8a285) Build 2187/109/55 [ 574.253470][ T42] m920x_read = error: -19 [ 574.253520][ T42] dvb-usb: error while querying for an remote control event. [ 574.257613][T17678] FAULT_INJECTION: forcing a failure. [ 574.257613][T17678] name failslab, interval 1, probability 0, space 0, times 0 [ 574.257667][T17678] CPU: 1 UID: 0 PID: 17678 Comm: syz.2.3382 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.257696][T17678] Tainted: [L]=SOFTLOCKUP [ 574.257704][T17678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.257716][T17678] Call Trace: [ 574.257725][T17678] [ 574.257734][T17678] dump_stack_lvl+0xe8/0x150 [ 574.257780][T17678] should_fail_ex+0x3eb/0x540 [ 574.257809][T17678] should_failslab+0xa8/0x100 [ 574.257834][T17678] __kmalloc_cache_noprof+0x9e/0x600 [ 574.257865][T17678] ? __kmalloc_cache_noprof+0x148/0x600 [ 574.257893][T17678] ? kvm_dev_ioctl+0xa84/0x1770 [ 574.257921][T17678] ? kvm_dev_ioctl+0xa84/0x1770 [ 574.257955][T17678] kvm_dev_ioctl+0xa84/0x1770 [ 574.257991][T17678] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 574.258018][T17678] ? __fget_files+0x2a/0x420 [ 574.258046][T17678] ? bpf_lsm_file_ioctl+0x9/0x20 [ 574.258072][T17678] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 574.258101][T17678] __se_sys_ioctl+0xfc/0x170 [ 574.258135][T17678] do_syscall_64+0x166/0x520 [ 574.258154][T17678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.258176][T17678] ? clear_bhb_loop+0x70/0xc0 [ 574.258201][T17678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.258222][T17678] RIP: 0033:0x7fecdf79e159 [ 574.258240][T17678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.258259][T17678] RSP: 002b:00007fece06f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.258282][T17678] RAX: ffffffffffffffda RBX: 00007fecdfa25fa0 RCX: 00007fecdf79e159 [ 574.258298][T17678] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 574.258311][T17678] RBP: 00007fecdf83503b R08: 0000000000000000 R09: 0000000000000000 [ 574.258324][T17678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.258337][T17678] R13: 00007fecdfa26038 R14: 00007fecdfa25fa0 R15: 00007ffcbb0c5588 [ 574.258367][T17678] [ 574.279274][T17678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.299646][T17678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.364312][ T42] m920x_read = error: -19 [ 574.364377][ T42] dvb-usb: error while querying for an remote control event. [ 574.475053][ T42] m920x_read = error: -19 [ 574.475126][ T42] dvb-usb: error while querying for an remote control event. [ 574.597515][T17673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3379'. [ 574.645466][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12 [ 574.676935][ T42] m920x_read = error: -19 [ 574.676966][ T42] dvb-usb: error while querying for an remote control event. [ 574.707448][T17520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.723301][ T5627] Bluetooth: hci5: command tx timeout [ 574.739178][T17520] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.766091][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.766202][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.787901][ T42] m920x_read = error: -19 [ 574.787925][ T42] dvb-usb: error while querying for an remote control event. [ 574.789599][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.789713][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.851155][T17711] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3386'. [ 574.881338][ T9802] gp8psk: usb in 149 operation failed. [ 574.881355][ T9802] gp8psk: failed to get FPGA version [ 574.892421][ T9802] gp8psk: usb in 138 operation failed. [ 574.892459][ T9802] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 574.892556][ T9802] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 574.898832][ T42] m920x_read = error: -19 [ 574.898966][ T42] dvb-usb: error while querying for an remote control event. [ 574.950377][ T9802] usb 4-1: USB disconnect, device number 20 [ 575.008137][ T42] m920x_read = error: -19 [ 575.008165][ T42] dvb-usb: error while querying for an remote control event. [ 575.120042][ T42] m920x_read = error: -19 [ 575.120073][ T42] dvb-usb: error while querying for an remote control event. [ 575.224200][ T9802] m920x_read = error: -19 [ 575.224227][ T9802] dvb-usb: error while querying for an remote control event. [ 575.334611][ T9802] m920x_read = error: -19 [ 575.334640][ T9802] dvb-usb: error while querying for an remote control event. [ 575.358703][ T9802] usb 3-1: USB disconnect, device number 31 [ 575.450847][ T9803] m920x_read = error: -19 [ 575.450884][ T9803] dvb-usb: error while querying for an remote control event. [ 575.553201][ T1218] m920x_read = error: -19 [ 575.553227][ T1218] dvb-usb: error while querying for an remote control event. [ 575.663300][ T9802] m920x_read = error: -19 [ 575.663326][ T9802] dvb-usb: error while querying for an remote control event. [ 575.773436][ T9802] m920x_read = error: -19 [ 575.773468][ T9802] dvb-usb: error while querying for an remote control event. [ 575.883268][ T1218] m920x_read = error: -19 [ 575.883294][ T1218] dvb-usb: error while querying for an remote control event. [ 575.996609][ T9802] m920x_read = error: -19 [ 575.996636][ T9802] dvb-usb: error while querying for an remote control event. [ 576.103394][ T1218] m920x_read = error: -19 [ 576.103420][ T1218] dvb-usb: error while querying for an remote control event. [ 576.213789][ T9802] m920x_read = error: -19 [ 576.213817][ T9802] dvb-usb: error while querying for an remote control event. [ 576.225394][T17738] input: syz0 as /devices/virtual/input/input95 [ 576.292217][T17738] netlink: 'syz.1.3389': attribute type 10 has an invalid length. [ 576.292240][T17738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3389'. [ 576.325098][ T9802] m920x_read = error: -19 [ 576.325122][ T9802] dvb-usb: error while querying for an remote control event. [ 576.433817][ T1218] m920x_read = error: -19 [ 576.433843][ T1218] dvb-usb: error while querying for an remote control event. [ 576.543347][ T9802] m920x_read = error: -19 [ 576.543374][ T9802] dvb-usb: error while querying for an remote control event. [ 576.548609][T17520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.653333][ T1218] m920x_read = error: -19 [ 576.653362][ T1218] dvb-usb: error while querying for an remote control event. [ 576.764582][ T9804] m920x_read = error: -19 [ 576.764609][ T9804] dvb-usb: error while querying for an remote control event. [ 576.871812][T17756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.872210][T17756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.873537][ T1218] m920x_read = error: -19 [ 576.873604][ T1218] dvb-usb: error while querying for an remote control event. [ 576.985871][ T9804] m920x_read = error: -19 [ 576.985899][ T9804] dvb-usb: error while querying for an remote control event. [ 577.093572][ T9804] m920x_read = error: -19 [ 577.093600][ T9804] dvb-usb: error while querying for an remote control event. [ 577.132208][ T9803] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 577.263645][ T1218] m920x_read = error: -19 [ 577.263670][ T1218] dvb-usb: error while querying for an remote control event. [ 577.285240][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 577.324883][ T9803] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 577.326200][ T9803] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 577.326227][ T9803] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 577.326246][ T9803] usb 3-1: config 220 has no interface number 2 [ 577.326305][ T9803] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 577.326332][ T9803] usb 3-1: config 220 interface 0 has no altsetting 0 [ 577.326350][ T9803] usb 3-1: config 220 interface 76 has no altsetting 0 [ 577.326367][ T9803] usb 3-1: config 220 interface 1 has no altsetting 0 [ 577.333440][ T9803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.333516][ T9803] usb 3-1: Product: syz [ 577.333670][ T9803] usb 3-1: Manufacturer: syz [ 577.333726][ T9803] usb 3-1: SerialNumber: syz [ 577.444177][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 577.478620][ T9804] m920x_read = error: -19 [ 577.478646][ T9804] dvb-usb: error while querying for an remote control event. [ 577.498677][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 577.500499][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.526837][T17780] nvme_fabrics: unknown parameter or missing value 'data_diges.' in ctrl creation request [ 577.529267][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.529292][ T9] usb 4-1: Product: syz [ 577.529308][ T9] usb 4-1: Manufacturer: syz [ 577.529331][ T9] usb 4-1: SerialNumber: syz [ 577.532364][ T9] usb 4-1: config 0 descriptor?? [ 577.583334][ T9804] m920x_read = error: -19 [ 577.583358][ T9804] dvb-usb: error while querying for an remote control event. [ 577.696282][ T9804] m920x_read = error: -19 [ 577.696308][ T9804] dvb-usb: error while querying for an remote control event. [ 577.810134][ T9805] m920x_read = error: -19 [ 577.810165][ T9805] dvb-usb: error while querying for an remote control event. [ 577.913245][ T9805] m920x_read = error: -19 [ 577.913297][ T9805] dvb-usb: error while querying for an remote control event. [ 577.993897][T17520] veth0_vlan: entered promiscuous mode [ 578.025061][ T9804] m920x_read = error: -19 [ 578.025085][ T9804] dvb-usb: error while querying for an remote control event. [ 578.060044][T17520] veth1_vlan: entered promiscuous mode [ 578.134048][ T9805] m920x_read = error: -19 [ 578.134079][ T9805] dvb-usb: error while querying for an remote control event. [ 578.171496][T17792] netlink: 'syz.1.3397': attribute type 10 has an invalid length. [ 578.171519][T17792] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3397'. [ 578.192175][T17794] netlink: 'syz.1.3397': attribute type 10 has an invalid length. [ 578.192196][T17794] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3397'. [ 578.243022][ T5622] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 578.243049][ T5622] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 578.247552][ T5627] Bluetooth: hci5: command 0x0c1a tx timeout [ 578.247794][ T9805] m920x_read = error: -19 [ 578.247813][ T9805] dvb-usb: error while querying for an remote control event. [ 578.318992][T17520] veth0_macvtap: entered promiscuous mode [ 578.355549][ T9804] m920x_read = error: -19 [ 578.355578][ T9804] dvb-usb: error while querying for an remote control event. [ 578.376651][T17520] veth1_macvtap: entered promiscuous mode [ 578.464888][ T9805] m920x_read = error: -19 [ 578.464914][ T9805] dvb-usb: error while querying for an remote control event. [ 578.515280][T17520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.574843][ T9804] m920x_read = error: -19 [ 578.574891][ T9804] dvb-usb: error while querying for an remote control event. [ 578.605994][T17520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.677082][T16741] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.677126][T16741] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.695819][ T9804] m920x_read = error: -19 [ 578.695890][ T9804] dvb-usb: error while querying for an remote control event. [ 578.733622][T16740] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.796781][T16742] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.814074][ T1218] m920x_read = error: -19 [ 578.814098][ T1218] dvb-usb: error while querying for an remote control event. [ 578.880975][T17800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3399'. [ 578.923510][ T1218] m920x_read = error: -19 [ 578.923534][ T1218] dvb-usb: error while querying for an remote control event. [ 578.982141][T16741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.982163][T16741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.033416][ T1218] m920x_read = error: -19 [ 579.033457][ T1218] dvb-usb: error while querying for an remote control event. [ 579.087654][ T266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.087697][ T266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.143735][ T9804] m920x_read = error: -19 [ 579.143786][ T9804] dvb-usb: error while querying for an remote control event. [ 579.253456][ T1218] m920x_read = error: -19 [ 579.253485][ T1218] dvb-usb: error while querying for an remote control event. [ 579.369526][ T9804] m920x_read = error: -19 [ 579.369584][ T9804] dvb-usb: error while querying for an remote control event. [ 579.473297][ T1218] m920x_read = error: -19 [ 579.473324][ T1218] dvb-usb: error while querying for an remote control event. [ 579.583306][ T9804] m920x_read = error: -19 [ 579.583331][ T9804] dvb-usb: error while querying for an remote control event. [ 579.694054][ T1218] m920x_read = error: -19 [ 579.694080][ T1218] dvb-usb: error while querying for an remote control event. [ 579.803364][ T9804] m920x_read = error: -19 [ 579.803390][ T9804] dvb-usb: error while querying for an remote control event. [ 579.913305][ T9805] m920x_read = error: -19 [ 579.913354][ T9805] dvb-usb: error while querying for an remote control event. [ 579.936099][ T9] ljca 4-1:0.0: bulk endpoints not found [ 579.962810][ T9] usb 4-1: USB disconnect, device number 21 [ 580.025008][ T9804] m920x_read = error: -19 [ 580.025036][ T9804] dvb-usb: error while querying for an remote control event. [ 580.083477][ T1218] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 580.135495][ T9805] m920x_read = error: -19 [ 580.135521][ T9805] dvb-usb: error while querying for an remote control event. [ 580.234970][ T1218] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 580.236326][ T1218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 580.236354][ T1218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.236375][ T1218] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 580.236437][ T1218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.250164][ T1218] usb 6-1: config 0 descriptor?? [ 580.252323][ T9804] m920x_read = error: -19 [ 580.252473][ T9804] dvb-usb: error while querying for an remote control event. [ 580.353284][ T9805] m920x_read = error: -19 [ 580.353309][ T9805] dvb-usb: error while querying for an remote control event. [ 580.464681][ T9804] m920x_read = error: -19 [ 580.464709][ T9804] dvb-usb: error while querying for an remote control event. [ 580.574341][ T9804] m920x_read = error: -19 [ 580.574402][ T9804] dvb-usb: error while querying for an remote control event. [ 580.683665][ T9805] m920x_read = error: -19 [ 580.683691][ T9805] dvb-usb: error while querying for an remote control event. [ 580.731152][ T1218] hid-multitouch 0003:0457:07DA.0028: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 580.794172][ T1218] m920x_read = error: -19 [ 580.794222][ T1218] dvb-usb: error while querying for an remote control event. [ 580.903369][ T9805] m920x_read = error: -19 [ 580.903395][ T9805] dvb-usb: error while querying for an remote control event. [ 581.014718][ T1218] m920x_read = error: -19 [ 581.014744][ T1218] dvb-usb: error while querying for an remote control event. [ 581.053170][T17855] netlink: 'syz.3.3409': attribute type 27 has an invalid length. [ 581.124402][ T1218] m920x_read = error: -19 [ 581.124429][ T1218] dvb-usb: error while querying for an remote control event. [ 581.233335][ T1218] m920x_read = error: -19 [ 581.233361][ T1218] dvb-usb: error while querying for an remote control event. [ 581.343261][ T9805] m920x_read = error: -19 [ 581.343313][ T9805] dvb-usb: error while querying for an remote control event. [ 581.453311][ T1218] m920x_read = error: -19 [ 581.453339][ T1218] dvb-usb: error while querying for an remote control event. [ 581.564708][ T1218] m920x_read = error: -19 [ 581.564736][ T1218] dvb-usb: error while querying for an remote control event. [ 581.673310][ T9805] m920x_read = error: -19 [ 581.673361][ T9805] dvb-usb: error while querying for an remote control event. [ 581.785905][ T9805] m920x_read = error: -19 [ 581.785931][ T9805] dvb-usb: error while querying for an remote control event. [ 581.847548][T17880] .: renamed from bond0 (while UP) [ 581.858939][T17880] kvm: user requested TSC rate below hardware speed [ 581.894244][ T1218] m920x_read = error: -19 [ 581.894268][ T1218] dvb-usb: error while querying for an remote control event. [ 582.005533][ T9804] m920x_read = error: -19 [ 582.005558][ T9804] dvb-usb: error while querying for an remote control event. [ 582.102975][ T9805] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 582.113834][ T9804] m920x_read = error: -19 [ 582.113890][ T9804] dvb-usb: error while querying for an remote control event. [ 582.192589][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'. [ 582.192614][T17889] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3413'. [ 582.226099][ T9804] m920x_read = error: -19 [ 582.226135][ T9804] dvb-usb: error while querying for an remote control event. [ 582.254724][ T9805] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 582.255787][ T9805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.260263][ T9805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.260290][ T9805] usb 4-1: Product: syz [ 582.260307][ T9805] usb 4-1: Manufacturer: syz [ 582.260324][ T9805] usb 4-1: SerialNumber: syz [ 582.313453][ T9805] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 582.314729][ T9805] usb 4-1: setting power ON [ 582.344433][ T9804] m920x_read = error: -19 [ 582.344457][ T9804] dvb-usb: error while querying for an remote control event. [ 582.453329][ T9804] m920x_read = error: -19 [ 582.453354][ T9804] dvb-usb: error while querying for an remote control event. [ 582.514935][ T9803] usb 3-1: selecting invalid altsetting 0 [ 582.538159][ T9803] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 582.538237][ T9803] uvcvideo 3-1:220.0: No valid video chain found. [ 582.567999][ T1218] m920x_read = error: -19 [ 582.568022][ T1218] dvb-usb: error while querying for an remote control event. [ 582.611330][ T9803] usb 3-1: selecting invalid altsetting 0 [ 582.611359][ T9803] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 582.674011][ T9803] m920x_read = error: -19 [ 582.674036][ T9803] dvb-usb: error while querying for an remote control event. [ 582.697203][ T9805] dvb-usb: bulk message failed: -71 (2/0) [ 582.739243][ T9805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 582.740330][ T9805] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 582.740386][ T9805] usb 4-1: media controller created [ 582.794282][ T9803] m920x_read = error: -19 [ 582.794309][ T9803] dvb-usb: error while querying for an remote control event. [ 582.815297][ T9805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 582.863622][ T9805] usb 4-1: selecting invalid altsetting 6 [ 582.863645][ T9805] usb 4-1: digital interface selection failed (-22) [ 582.863661][ T9805] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 582.869040][ T9805] usb 4-1: setting power OFF [ 582.911175][ T9803] m920x_read = error: -19 [ 582.911199][ T9803] dvb-usb: error while querying for an remote control event. [ 582.940978][ T9805] dvb-usb: bulk message failed: -71 (2/0) [ 582.961410][ T9805] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 582.961430][ T9805] (NULL device *): no iso interface [ 582.989254][ T9803] usb 6-1: USB disconnect, device number 57 [ 583.067805][ T9804] m920x_read = error: -19 [ 583.067831][ T9804] dvb-usb: error while querying for an remote control event. [ 583.171822][ T9805] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 583.174393][ T9804] m920x_read = error: -19 [ 583.174447][ T9804] dvb-usb: error while querying for an remote control event. [ 583.198114][T17916] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 583.200076][ T9805] usb 4-1: USB disconnect, device number 22 [ 583.289193][ T9804] m920x_read = error: -19 [ 583.289222][ T9804] dvb-usb: error while querying for an remote control event. [ 583.393664][ T9804] m920x_read = error: -19 [ 583.393691][ T9804] dvb-usb: error while querying for an remote control event. [ 583.504116][ T9805] m920x_read = error: -19 [ 583.504141][ T9805] dvb-usb: error while querying for an remote control event. [ 583.554518][T17930] netlink: 'syz.1.3420': attribute type 10 has an invalid length. [ 583.613576][ T9805] m920x_read = error: -19 [ 583.613601][ T9805] dvb-usb: error while querying for an remote control event. [ 583.727027][ T9805] m920x_read = error: -19 [ 583.727052][ T9805] dvb-usb: error while querying for an remote control event. [ 583.825020][ T9804] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 583.833715][ T9805] m920x_read = error: -19 [ 583.833768][ T9805] dvb-usb: error while querying for an remote control event. [ 583.943646][ T9803] m920x_read = error: -19 [ 583.943673][ T9803] dvb-usb: error while querying for an remote control event. [ 583.975434][ T9804] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 583.976378][ T9804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.976410][ T9804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 583.978547][ T9804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.978570][ T9804] usb 4-1: Product: syz [ 583.978585][ T9804] usb 4-1: Manufacturer: syz [ 583.978599][ T9804] usb 4-1: SerialNumber: syz [ 584.015351][ T9804] usb 4-1: config 0 descriptor?? [ 584.045506][ T9804] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 584.052519][ T9804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 584.056647][ T9803] m920x_read = error: -19 [ 584.056700][ T9803] dvb-usb: error while querying for an remote control event. [ 584.067611][ T9804] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 584.067749][ T9804] usb 4-1: media controller created [ 584.113725][ T9804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 584.164135][ T9803] m920x_read = error: -19 [ 584.164162][ T9803] dvb-usb: error while querying for an remote control event. [ 584.183276][ T9805] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 584.206314][ T9804] DVB: Unable to find symbol tda10046_attach() [ 584.206332][ T9804] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 584.206349][ T9804] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 584.273328][ T9803] m920x_read = error: -19 [ 584.273360][ T9803] dvb-usb: error while querying for an remote control event. [ 584.334001][ T9805] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 584.335649][ T9805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.340081][ T9805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.340110][ T9805] usb 6-1: Product: syz [ 584.340128][ T9805] usb 6-1: Manufacturer: syz [ 584.340145][ T9805] usb 6-1: SerialNumber: syz [ 584.384580][ T9803] m920x_read = error: -19 [ 584.384734][ T9803] dvb-usb: error while querying for an remote control event. [ 584.412492][ T9805] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 584.443105][T17932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.444448][T17932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.493345][ T1218] m920x_read = error: -19 [ 584.493372][ T1218] dvb-usb: error while querying for an remote control event. [ 584.604709][ T9803] m920x_read = error: -19 [ 584.604762][ T9803] dvb-usb: error while querying for an remote control event. [ 584.650771][ T9804] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 584.671218][ T9804] usb 4-1: USB disconnect, device number 23 [ 584.713294][ T9803] m920x_read = error: -19 [ 584.713319][ T9803] dvb-usb: error while querying for an remote control event. [ 584.825426][ T9803] m920x_read = error: -19 [ 584.825452][ T9803] dvb-usb: error while querying for an remote control event. [ 584.933330][ T9804] m920x_read = error: -19 [ 584.933382][ T9804] dvb-usb: error while querying for an remote control event. [ 585.043418][ T9804] m920x_read = error: -19 [ 585.043445][ T9804] dvb-usb: error while querying for an remote control event. [ 585.153253][ T9804] m920x_read = error: -19 [ 585.153304][ T9804] dvb-usb: error while querying for an remote control event. [ 585.263265][ T9804] m920x_read = error: -19 [ 585.263315][ T9804] dvb-usb: error while querying for an remote control event. [ 585.297734][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3428'. [ 585.373599][ T9804] m920x_read = error: -19 [ 585.373625][ T9804] dvb-usb: error while querying for an remote control event. [ 585.409115][T17946] netlink: 'syz.5.3426': attribute type 10 has an invalid length. [ 585.412268][ T9805] gspca_mr97310a: reg write [19] error -71 [ 585.412345][ T9805] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -71 [ 585.450356][ T9805] usb 6-1: USB disconnect, device number 58 [ 585.483473][ T9804] m920x_read = error: -19 [ 585.483498][ T9804] dvb-usb: error while querying for an remote control event. [ 585.593694][ T9804] m920x_read = error: -19 [ 585.593723][ T9804] dvb-usb: error while querying for an remote control event. [ 585.703568][ T9804] m920x_read = error: -19 [ 585.703594][ T9804] dvb-usb: error while querying for an remote control event. [ 585.816905][ T9803] m920x_read = error: -19 [ 585.816931][ T9803] dvb-usb: error while querying for an remote control event. [ 585.914833][ T9805] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 585.923903][ T9803] m920x_read = error: -19 [ 585.923944][ T9803] dvb-usb: error while querying for an remote control event. [ 586.034206][ T9804] m920x_read = error: -19 [ 586.034231][ T9804] dvb-usb: error while querying for an remote control event. [ 586.066391][ T9805] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 586.068156][ T9805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 586.070072][ T9805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.070100][ T9805] usb 4-1: Product: syz [ 586.070117][ T9805] usb 4-1: Manufacturer: syz [ 586.070135][ T9805] usb 4-1: SerialNumber: syz [ 586.076071][ T9805] usb 4-1: config 0 descriptor?? [ 586.104257][ T9805] hub 4-1:0.0: bad descriptor, ignoring hub [ 586.104314][ T9805] hub 4-1:0.0: probe with driver hub failed with error -5 [ 586.143376][ T9804] m920x_read = error: -19 [ 586.143400][ T9804] dvb-usb: error while querying for an remote control event. [ 586.253283][ T9805] m920x_read = error: -19 [ 586.253313][ T9805] dvb-usb: error while querying for an remote control event. [ 586.363621][ T9805] m920x_read = error: -19 [ 586.363653][ T9805] dvb-usb: error while querying for an remote control event. [ 586.413707][ T9] usb 4-1: USB disconnect, device number 24 [ 586.473164][ T9805] m920x_read = error: -19 [ 586.473190][ T9805] dvb-usb: error while querying for an remote control event. [ 586.583245][ T9805] m920x_read = error: -19 [ 586.583275][ T9805] dvb-usb: error while querying for an remote control event. [ 586.693170][ T9805] m920x_read = error: -19 [ 586.693197][ T9805] dvb-usb: error while querying for an remote control event. [ 586.803621][ T9804] m920x_read = error: -19 [ 586.803648][ T9804] dvb-usb: error while querying for an remote control event. [ 586.913231][ T9805] m920x_read = error: -19 [ 586.913259][ T9805] dvb-usb: error while querying for an remote control event. [ 586.915223][T18023] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3436'. [ 587.024047][ T9805] m920x_read = error: -19 [ 587.024075][ T9805] dvb-usb: error while querying for an remote control event. [ 587.050767][T18026] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3437'. [ 587.134594][ T9805] m920x_read = error: -19 [ 587.134620][ T9805] dvb-usb: error while querying for an remote control event. [ 587.246555][ T9805] m920x_read = error: -19 [ 587.246590][ T9805] dvb-usb: error while querying for an remote control event. [ 587.276305][T18028] syzkaller1: entered promiscuous mode [ 587.276324][T18028] syzkaller1: entered allmulticast mode [ 587.353178][ T9805] m920x_read = error: -19 [ 587.353203][ T9805] dvb-usb: error while querying for an remote control event. [ 587.473384][ T9805] m920x_read = error: -19 [ 587.473411][ T9805] dvb-usb: error while querying for an remote control event. [ 587.583197][ T9805] m920x_read = error: -19 [ 587.583223][ T9805] dvb-usb: error while querying for an remote control event. [ 587.665417][ T9796] libceph: connect (1)[c::]:6789 error -101 [ 587.665829][ T9796] libceph: mon0 (1)[c::]:6789 connect error [ 587.700467][ T9804] m920x_read = error: -19 [ 587.700494][ T9804] dvb-usb: error while querying for an remote control event. [ 587.718631][T18046] ceph: No mds server is up or the cluster is laggy [ 587.807731][ T9805] m920x_read = error: -19 [ 587.807751][ T9805] dvb-usb: error while querying for an remote control event. [ 587.913152][ T9805] m920x_read = error: -19 [ 587.913178][ T9805] dvb-usb: error while querying for an remote control event. [ 587.951332][T18061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3450'. [ 588.026752][ T9802] m920x_read = error: -19 [ 588.026779][ T9802] dvb-usb: error while querying for an remote control event. [ 588.133966][T18065] xt_nfacct: accounting object `syz0' does not exist [ 588.145145][ T9802] m920x_read = error: -19 [ 588.145162][ T9802] dvb-usb: error while querying for an remote control event. [ 588.253285][ T1218] m920x_read = error: -19 [ 588.253310][ T1218] dvb-usb: error while querying for an remote control event. [ 588.336848][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3456'. [ 588.363304][ T1218] m920x_read = error: -19 [ 588.363329][ T1218] dvb-usb: error while querying for an remote control event. [ 588.473550][ T1218] m920x_read = error: -19 [ 588.473570][ T1218] dvb-usb: error while querying for an remote control event. [ 588.473635][ T9802] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 588.583366][ T1218] m920x_read = error: -19 [ 588.583384][ T1218] dvb-usb: error while querying for an remote control event. [ 588.622978][ T9802] usb 6-1: Using ep0 maxpacket: 32 [ 588.625144][ T9802] usb 6-1: unable to get BOS descriptor or descriptor too short [ 588.625174][ T9802] usb 6-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=6f.78 [ 588.626133][ T9802] usb 6-1: config 64 has an invalid interface number: 74 but max is 0 [ 588.626150][ T9802] usb 6-1: config 64 has no interface number 0 [ 588.626169][ T9802] usb 6-1: config 64 interface 74 has no altsetting 0 [ 588.628269][ T9802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.628292][ T9802] usb 6-1: Product: ⏶씴ﲔ쮻亂瞴伞ꦶ㜾䳪뿐䅨⧤꙾쫡饭圷읃๣㬌涔ጸၫṠ烊┬玈靖䓇壅皼瞓뀓Ɒ嘷쒫커堖ㄉ [ 588.628311][ T9802] usb 6-1: Manufacturer: ᠌ [ 588.628324][ T9802] usb 6-1: SerialNumber: ⠊ [ 588.694438][ T1218] m920x_read = error: -19 [ 588.694492][ T1218] dvb-usb: error while querying for an remote control event. [ 588.803336][ T1218] m920x_read = error: -19 [ 588.803388][ T1218] dvb-usb: error while querying for an remote control event. [ 588.851375][ T9802] usb 6-1: USB disconnect, device number 59 [ 588.913544][ T9803] m920x_read = error: -19 [ 588.913572][ T9803] dvb-usb: error while querying for an remote control event. [ 589.023227][ T9803] m920x_read = error: -19 [ 589.023247][ T9803] dvb-usb: error while querying for an remote control event. [ 589.134058][ T9802] m920x_read = error: -19 [ 589.134087][ T9802] dvb-usb: error while querying for an remote control event. [ 589.244518][ T9802] m920x_read = error: -19 [ 589.244543][ T9802] dvb-usb: error while querying for an remote control event. [ 589.353283][ T9803] m920x_read = error: -19 [ 589.353326][ T9803] dvb-usb: error while querying for an remote control event. [ 589.464699][ T9803] m920x_read = error: -19 [ 589.464737][ T9803] dvb-usb: error while querying for an remote control event. [ 589.543193][T18087] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3462'. [ 589.573274][ T9803] m920x_read = error: -19 [ 589.573300][ T9803] dvb-usb: error while querying for an remote control event. [ 589.663056][ T9807] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 589.683333][ T9803] m920x_read = error: -19 [ 589.683356][ T9803] dvb-usb: error while querying for an remote control event. [ 589.708347][T18094] netlink: 'syz.3.3464': attribute type 10 has an invalid length. [ 589.708365][T18094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3464'. [ 589.708391][T18094] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 589.715605][T18094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.793007][ T9807] usb 6-1: device descriptor read/64, error -71 [ 589.793210][ T9802] m920x_read = error: -19 [ 589.793224][ T9802] dvb-usb: error while querying for an remote control event. [ 589.903695][ T9802] m920x_read = error: -19 [ 589.903721][ T9802] dvb-usb: error while querying for an remote control event. [ 590.014985][ T9802] m920x_read = error: -19 [ 590.015005][ T9802] dvb-usb: error while querying for an remote control event. [ 590.034969][ T9807] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 590.123946][ T9802] m920x_read = error: -19 [ 590.123973][ T9802] dvb-usb: error while querying for an remote control event. [ 590.172968][ T9807] usb 6-1: device descriptor read/64, error -71 [ 590.233187][ T9802] m920x_read = error: -19 [ 590.233214][ T9802] dvb-usb: error while querying for an remote control event. [ 590.283502][ T9807] usb usb6-port1: attempt power cycle [ 590.343350][ T9802] m920x_read = error: -19 [ 590.343381][ T9802] dvb-usb: error while querying for an remote control event. [ 590.454441][ T9802] m920x_read = error: -19 [ 590.454480][ T9802] dvb-usb: error while querying for an remote control event. [ 590.565102][ T9802] m920x_read = error: -19 [ 590.565129][ T9802] dvb-usb: error while querying for an remote control event. [ 590.643047][ T9807] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 590.665259][ T9807] usb 6-1: device descriptor read/8, error -71 [ 590.673791][ T9802] m920x_read = error: -19 [ 590.673844][ T9802] dvb-usb: error while querying for an remote control event. [ 590.725532][T18103] input: syz0 as /devices/virtual/input/input96 [ 590.740842][T18103] netlink: 'syz.1.3467': attribute type 10 has an invalid length. [ 590.740863][T18103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3467'. [ 590.783629][ T9802] m920x_read = error: -19 [ 590.783658][ T9802] dvb-usb: error while querying for an remote control event. [ 590.895357][ T9803] m920x_read = error: -19 [ 590.895382][ T9803] dvb-usb: error while querying for an remote control event. [ 590.915293][ T9807] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 590.951608][ T9807] usb 6-1: device descriptor read/8, error -71 [ 590.980047][ T9803] hid-generic 0006:0008:0008.0029: unknown main item tag 0x0 [ 590.980087][ T9803] hid-generic 0006:0008:0008.0029: unknown main item tag 0x0 [ 590.980118][ T9803] hid-generic 0006:0008:0008.0029: unknown main item tag 0x0 [ 590.980148][ T9803] hid-generic 0006:0008:0008.0029: unknown main item tag 0x0 [ 590.980178][ T9803] hid-generic 0006:0008:0008.0029: unknown main item tag 0x0 [ 590.980207][ T9803] hid-generic 0006:0008:0008.0029: unknown main item tag 0x0 [ 590.980237][ T9803] hid-generic 0006:0008:0008.0029: unknown main item tag 0x0 [ 590.980267][ T9803] hid-generic 0006:0008:0008.0029: unknown main item tag 0x0 [ 590.980296][ T9803] hid-generic 0006:0008:0008.0029: unknown main item tag 0x0 [ 590.980326][ T9803] hid-generic 0006:0008:0008.0029: unknown main item tag 0x0 [ 591.005301][ T9802] m920x_read = error: -19 [ 591.005364][ T9802] dvb-usb: error while querying for an remote control event. [ 591.017079][ T9803] hid-generic 0006:0008:0008.0029: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 591.058403][ T9807] usb usb6-port1: unable to enumerate USB device [ 591.116611][ T9803] m920x_read = error: -19 [ 591.116637][ T9803] dvb-usb: error while querying for an remote control event. [ 591.151785][T18109] fido_id[18109]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 591.227916][ T9803] m920x_read = error: -19 [ 591.227933][ T9803] dvb-usb: error while querying for an remote control event. [ 591.328121][T18116] nvme_fabrics: unknown parameter or missing value 'data_diges/' in ctrl creation request [ 591.337469][ T9803] m920x_read = error: -19 [ 591.337539][ T9803] dvb-usb: error while querying for an remote control event. [ 591.443721][ T9803] m920x_read = error: -19 [ 591.443745][ T9803] dvb-usb: error while querying for an remote control event. [ 591.555575][ T9802] m920x_read = error: -19 [ 591.555602][ T9802] dvb-usb: error while querying for an remote control event. [ 591.618051][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 591.630859][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 591.642465][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 591.652169][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 591.652712][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 591.663723][ T1218] m920x_read = error: -19 [ 591.663776][ T1218] dvb-usb: error while querying for an remote control event. [ 591.711936][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 591.726260][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 591.727183][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 591.728120][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 591.731840][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 591.778926][ T1218] m920x_read = error: -19 [ 591.778947][ T1218] dvb-usb: error while querying for an remote control event. [ 591.810452][T18127] nvmet: adding nsid 1 to subsystem testsubsys [ 591.828954][T18127] nvmet: failed to open block device (null): (-22) [ 591.883198][ T9803] m920x_read = error: -19 [ 591.883221][ T9803] dvb-usb: error while querying for an remote control event. [ 591.993190][ T1218] m920x_read = error: -19 [ 591.993215][ T1218] dvb-usb: error while querying for an remote control event. [ 592.103235][ T9805] m920x_read = error: -19 [ 592.103261][ T9805] dvb-usb: error while querying for an remote control event. [ 592.213210][ T9805] m920x_read = error: -19 [ 592.213235][ T9805] dvb-usb: error while querying for an remote control event. [ 592.223388][ T9803] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 592.325057][ T9805] m920x_read = error: -19 [ 592.325083][ T9805] dvb-usb: error while querying for an remote control event. [ 592.378479][ T9803] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 592.381427][ T9803] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 592.381458][ T9803] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 592.381483][ T9803] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.381508][ T9803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 592.381538][ T9803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.405324][ T9803] usb 4-1: config 0 descriptor?? [ 592.414411][T18138] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 592.434352][ T1218] m920x_read = error: -19 [ 592.434406][ T1218] dvb-usb: error while querying for an remote control event. [ 592.544626][ T1218] m920x_read = error: -19 [ 592.544653][ T1218] dvb-usb: error while querying for an remote control event. [ 592.654968][ T1218] m920x_read = error: -19 [ 592.654994][ T1218] dvb-usb: error while querying for an remote control event. [ 592.764532][ T1218] m920x_read = error: -19 [ 592.764559][ T1218] dvb-usb: error while querying for an remote control event. [ 592.820684][T18138] Bluetooth: MGMT ver 1.23 [ 592.829285][T18138] Bluetooth: hci0: unsupported parameter 5135 [ 592.829305][T18138] Bluetooth: hci0: unsupported parameter 8192 [ 592.829350][T18138] Bluetooth: hci0: unsupported parameter 5135 [ 592.829363][T18138] Bluetooth: hci0: unsupported parameter 8192 [ 592.845826][ T9803] zydacron 0003:13EC:0006.002A: collection stack underflow [ 592.845911][ T9803] zydacron 0003:13EC:0006.002A: item 0 1 0 12 parsing failed [ 592.847639][ T9803] zydacron 0003:13EC:0006.002A: parse failed [ 592.847871][ T9803] zydacron 0003:13EC:0006.002A: probe with driver zydacron failed with error -22 [ 592.873827][ T9803] m920x_read = error: -19 [ 592.873891][ T9803] dvb-usb: error while querying for an remote control event. [ 592.983466][ T1218] m920x_read = error: -19 [ 592.983491][ T1218] dvb-usb: error while querying for an remote control event. [ 593.000015][T18158] null_blk: disk nullb1 created [ 593.093256][ T1218] m920x_read = error: -19 [ 593.093282][ T1218] dvb-usb: error while querying for an remote control event. [ 593.169519][T18180] netlink: 'syz.1.3485': attribute type 10 has an invalid length. [ 593.203348][ T1218] m920x_read = error: -19 [ 593.203372][ T1218] dvb-usb: error while querying for an remote control event. [ 593.279332][T18123] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.293873][T18123] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.293999][T18123] bridge_slave_0: entered allmulticast mode [ 593.301579][T18123] bridge_slave_0: entered promiscuous mode [ 593.314018][ T1218] m920x_read = error: -19 [ 593.314077][ T1218] dvb-usb: error while querying for an remote control event. [ 593.346012][T18123] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.347654][T18123] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.347782][T18123] bridge_slave_1: entered allmulticast mode [ 593.349403][T18123] bridge_slave_1: entered promiscuous mode [ 593.423833][ T1218] m920x_read = error: -19 [ 593.423851][ T1218] dvb-usb: error while querying for an remote control event. [ 593.431182][T18123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.461286][T18123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.524478][T18123] team0: Port device team_slave_0 added [ 593.527490][T18123] team0: Port device team_slave_1 added [ 593.535433][ T9803] m920x_read = error: -19 [ 593.535496][ T9803] dvb-usb: error while querying for an remote control event. [ 593.561266][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3489'. [ 593.561288][T18195] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3489'. [ 593.598024][T18123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.598043][T18123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.598073][T18123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.600041][T18123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.600057][T18123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.600091][T18123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.644680][ T9803] m920x_read = error: -19 [ 593.644736][ T9803] dvb-usb: error while querying for an remote control event. [ 593.757546][ T9803] m920x_read = error: -19 [ 593.757570][ T9803] dvb-usb: error while querying for an remote control event. [ 593.768150][T18197] nbd4: detected capacity change from 0 to 127 [ 593.776236][ T5627] block nbd4: Receive control failed (result -32) [ 593.792514][T18123] hsr_slave_0: entered promiscuous mode [ 593.799255][T18123] hsr_slave_1: entered promiscuous mode [ 593.800079][T18123] debugfs: 'hsr0' already exists in 'hsr' [ 593.800102][T18123] Cannot create hsr debugfs directory [ 593.834904][ T1724] block nbd4: Dead connection, failed to find a fallback [ 593.834928][ T1724] block nbd4: shutting down sockets [ 593.835021][ T1724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.835050][ T1724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 593.842170][ T1724] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.842198][ T1724] Buffer I/O error on dev nbd4, logical block 1, async page read [ 593.842297][ T1724] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.842321][ T1724] Buffer I/O error on dev nbd4, logical block 2, async page read [ 593.845095][ T5627] Bluetooth: hci0: command tx timeout [ 593.853959][ T1724] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.854040][ T1724] Buffer I/O error on dev nbd4, logical block 3, async page read [ 593.855002][ T1724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.855072][ T1724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 593.856237][ T1724] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.856327][ T1724] Buffer I/O error on dev nbd4, logical block 1, async page read [ 593.859092][ T1724] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.859190][ T1724] Buffer I/O error on dev nbd4, logical block 2, async page read [ 593.862054][ T1724] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.862127][ T1724] Buffer I/O error on dev nbd4, logical block 3, async page read [ 593.872017][ T9803] m920x_read = error: -19 [ 593.872070][ T9803] dvb-usb: error while querying for an remote control event. [ 593.874687][ T1724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 593.874715][ T1724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 593.874731][ T1724] Buffer I/O error on dev nbd4, logical block 1, async page read [ 593.878255][ T1724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 593.888761][ T5807] ldm_validate_partition_table(): Disk read failed. [ 593.919140][ T5807] Dev nbd4: unable to read RDB block 0 [ 593.948196][ T5807] nbd4: unable to read partition table [ 593.974698][ T1218] m920x_read = error: -19 [ 593.974756][ T1218] dvb-usb: error while querying for an remote control event. [ 594.084050][ T1218] m920x_read = error: -19 [ 594.084080][ T1218] dvb-usb: error while querying for an remote control event. [ 594.106799][ T5807] ldm_validate_partition_table(): Disk read failed. [ 594.108504][ T5807] Dev nbd4: unable to read RDB block 0 [ 594.119204][ T5807] nbd4: unable to read partition table [ 594.193643][ T9803] m920x_read = error: -19 [ 594.193668][ T9803] dvb-usb: error while querying for an remote control event. [ 594.305060][ T9803] m920x_read = error: -19 [ 594.305079][ T9803] dvb-usb: error while querying for an remote control event. [ 594.423145][ T9803] m920x_read = error: -19 [ 594.423170][ T9803] dvb-usb: error while querying for an remote control event. [ 594.424748][T18207] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 594.534553][ T9803] m920x_read = error: -19 [ 594.534579][ T9803] dvb-usb: error while querying for an remote control event. [ 594.593477][T18214] netlink: 'syz.5.3495': attribute type 10 has an invalid length. [ 594.648142][ T9803] m920x_read = error: -19 [ 594.648170][ T9803] dvb-usb: error while querying for an remote control event. [ 594.757487][ T1218] m920x_read = error: -19 [ 594.757517][ T1218] dvb-usb: error while querying for an remote control event. [ 594.863154][ T1218] m920x_read = error: -19 [ 594.863180][ T1218] dvb-usb: error while querying for an remote control event. [ 594.973635][ T9803] m920x_read = error: -19 [ 594.973662][ T9803] dvb-usb: error while querying for an remote control event. [ 595.008483][ T9796] usb 4-1: USB disconnect, device number 25 [ 595.083576][ T9803] m920x_read = error: -19 [ 595.083605][ T9803] dvb-usb: error while querying for an remote control event. [ 595.146875][T18235] FAULT_INJECTION: forcing a failure. [ 595.146875][T18235] name failslab, interval 1, probability 0, space 0, times 0 [ 595.146906][T18235] CPU: 1 UID: 0 PID: 18235 Comm: syz.3.3502 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.146934][T18235] Tainted: [L]=SOFTLOCKUP [ 595.146942][T18235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 595.146955][T18235] Call Trace: [ 595.146964][T18235] [ 595.146973][T18235] dump_stack_lvl+0xe8/0x150 [ 595.147006][T18235] should_fail_ex+0x3eb/0x540 [ 595.147034][T18235] should_failslab+0xa8/0x100 [ 595.147059][T18235] __kmalloc_cache_node_noprof+0xa5/0x620 [ 595.147093][T18235] ? init_rescuer+0x167/0x530 [ 595.147111][T18235] ? init_rescuer+0x167/0x530 [ 595.147137][T18235] init_rescuer+0x167/0x530 [ 595.147161][T18235] ? __pfx_init_rescuer+0x10/0x10 [ 595.147181][T18235] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 595.147212][T18235] ? wq_adjust_max_active+0x1a2/0x500 [ 595.147249][T18235] __alloc_workqueue+0x175e/0x1b70 [ 595.147299][T18235] alloc_workqueue_noprof+0xe3/0x210 [ 595.147334][T18235] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 595.147371][T18235] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 595.147404][T18235] nci_register_device+0x22c/0xa00 [ 595.147434][T18235] ? __pfx_nci_register_device+0x10/0x10 [ 595.147456][T18235] ? __raw_spin_lock_init+0x45/0x100 [ 595.147483][T18235] ? __raw_spin_lock_init+0x45/0x100 [ 595.147510][T18235] ? __init_waitqueue_head+0xa8/0x150 [ 595.147537][T18235] virtual_ncidev_open+0x129/0x1a0 [ 595.147560][T18235] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 595.147580][T18235] misc_open+0x2d5/0x350 [ 595.147613][T18235] chrdev_open+0x4d9/0x600 [ 595.147637][T18235] ? __pfx_chrdev_open+0x10/0x10 [ 595.147660][T18235] ? devcgroup_check_permission+0x31/0x8f0 [ 595.147695][T18235] ? __pfx_chrdev_open+0x10/0x10 [ 595.147714][T18235] do_dentry_open+0x80e/0x1360 [ 595.147747][T18235] vfs_open_consume+0x4a/0x350 [ 595.147768][T18235] ? path_openat+0x14bb/0x1e40 [ 595.147806][T18235] path_openat+0x14d7/0x1e40 [ 595.147854][T18235] do_file_open+0x23e/0x4a0 [ 595.147889][T18235] ? __pfx_do_file_open+0x10/0x10 [ 595.147938][T18235] ? _raw_spin_unlock+0x28/0x50 [ 595.147963][T18235] ? alloc_fd+0x651/0x6c0 [ 595.147996][T18235] do_sys_openat2+0x115/0x200 [ 595.148036][T18235] ? __se_sys_futex+0x3a8/0x450 [ 595.148061][T18235] ? __pfx_do_sys_openat2+0x10/0x10 [ 595.148092][T18235] ? rcu_is_watching+0x16/0xb0 [ 595.148120][T18235] __x64_sys_openat+0x138/0x170 [ 595.148151][T18235] do_syscall_64+0x166/0x520 [ 595.148171][T18235] ? trace_irq_disable+0x3b/0x140 [ 595.148203][T18235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.148225][T18235] ? clear_bhb_loop+0x70/0xc0 [ 595.148252][T18235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.148274][T18235] RIP: 0033:0x7f2f1e59e159 [ 595.148302][T18235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.148321][T18235] RSP: 002b:00007f2f1f3f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 595.148344][T18235] RAX: ffffffffffffffda RBX: 00007f2f1e825fa0 RCX: 00007f2f1e59e159 [ 595.148360][T18235] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 595.148376][T18235] RBP: 00007f2f1e63503b R08: 0000000000000000 R09: 0000000000000000 [ 595.148390][T18235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.148403][T18235] R13: 00007f2f1e826038 R14: 00007f2f1e825fa0 R15: 00007fffcd914f48 [ 595.148437][T18235] [ 595.148469][T18235] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 595.205182][ T9803] m920x_read = error: -19 [ 595.205206][ T9803] dvb-usb: error while querying for an remote control event. [ 595.318476][ T9803] m920x_read = error: -19 [ 595.318521][ T9803] dvb-usb: error while querying for an remote control event. [ 595.423823][ T9803] m920x_read = error: -19 [ 595.423902][ T9803] dvb-usb: error while querying for an remote control event. [ 595.536314][ T9803] m920x_read = error: -19 [ 595.536373][ T9803] dvb-usb: error while querying for an remote control event. [ 595.632618][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3503'. [ 595.659659][ T1218] m920x_read = error: -19 [ 595.659688][ T1218] dvb-usb: error while querying for an remote control event. [ 595.764002][ T9803] m920x_read = error: -19 [ 595.764028][ T9803] dvb-usb: error while querying for an remote control event. [ 595.873329][ T1218] m920x_read = error: -19 [ 595.873356][ T1218] dvb-usb: error while querying for an remote control event. [ 595.881526][T18123] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 595.903948][T18123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 595.905194][T18123] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 595.908770][T18123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.909875][T18123] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 595.920070][T18123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 595.923720][ T5627] Bluetooth: hci0: command tx timeout [ 595.934707][T18123] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 595.977121][T18123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.983945][ T1218] m920x_read = error: -19 [ 595.984002][ T1218] dvb-usb: error while querying for an remote control event. [ 596.093343][ T9803] m920x_read = error: -19 [ 596.093369][ T9803] dvb-usb: error while querying for an remote control event. [ 596.204285][ T9803] m920x_read = error: -19 [ 596.204312][ T9803] dvb-usb: error while querying for an remote control event. [ 596.205917][T18123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.264184][T18123] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.282607][T16742] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.282719][T16742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.302798][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.302981][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.319159][ T9805] m920x_read = error: -19 [ 596.319175][ T9805] dvb-usb: error while querying for an remote control event. [ 596.424951][ T9805] m920x_read = error: -19 [ 596.424980][ T9805] dvb-usb: error while querying for an remote control event. [ 596.533738][ T9803] m920x_read = error: -19 [ 596.533766][ T9803] dvb-usb: error while querying for an remote control event. [ 596.644313][ T9803] m920x_read = error: -19 [ 596.644339][ T9803] dvb-usb: error while querying for an remote control event. [ 596.754918][ T9803] m920x_read = error: -19 [ 596.754945][ T9803] dvb-usb: error while querying for an remote control event. [ 596.863501][ T9805] m920x_read = error: -19 [ 596.863529][ T9805] dvb-usb: error while querying for an remote control event. [ 596.973260][ T9802] m920x_read = error: -19 [ 596.973286][ T9802] dvb-usb: error while querying for an remote control event. [ 597.011013][T18123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.022986][ T9803] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 597.085573][ T42] m920x_read = error: -19 [ 597.085601][ T42] dvb-usb: error while querying for an remote control event. [ 597.175164][ T9803] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 597.176141][ T9803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 597.178008][ T9803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.178032][ T9803] usb 6-1: Product: syz [ 597.178046][ T9803] usb 6-1: Manufacturer: syz [ 597.178068][ T9803] usb 6-1: SerialNumber: syz [ 597.181066][ T9803] usb 6-1: config 0 descriptor?? [ 597.192175][ T9803] hub 6-1:0.0: bad descriptor, ignoring hub [ 597.192200][ T9803] hub 6-1:0.0: probe with driver hub failed with error -5 [ 597.258098][ T42] m920x_read = error: -19 [ 597.258122][ T42] dvb-usb: error while querying for an remote control event. [ 597.363836][ T9803] m920x_read = error: -19 [ 597.363862][ T9803] dvb-usb: error while querying for an remote control event. [ 597.473264][ T9802] m920x_read = error: -19 [ 597.473292][ T9802] dvb-usb: error while querying for an remote control event. [ 597.513884][ T1218] usb 6-1: USB disconnect, device number 64 [ 597.554741][T18316] FAULT_INJECTION: forcing a failure. [ 597.554741][T18316] name failslab, interval 1, probability 0, space 0, times 0 [ 597.554777][T18316] CPU: 0 UID: 0 PID: 18316 Comm: syz.1.3511 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.554809][T18316] Tainted: [L]=SOFTLOCKUP [ 597.554819][T18316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.554833][T18316] Call Trace: [ 597.554843][T18316] [ 597.554853][T18316] dump_stack_lvl+0xe8/0x150 [ 597.554890][T18316] should_fail_ex+0x3eb/0x540 [ 597.554921][T18316] ? __alloc_skb+0x1db/0x7a0 [ 597.554944][T18316] should_failslab+0xa8/0x100 [ 597.554970][T18316] ? __alloc_skb+0x1db/0x7a0 [ 597.554994][T18316] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 597.555038][T18316] ? lock_acquire+0x115/0x350 [ 597.555070][T18316] ? __alloc_skb+0x1db/0x7a0 [ 597.555099][T18316] __alloc_skb+0x1db/0x7a0 [ 597.555125][T18316] tcp_stream_alloc_skb+0x3f/0x580 [ 597.555159][T18316] ? __asan_memset+0x22/0x50 [ 597.555193][T18316] tcp_connect+0x1646/0x54e0 [ 597.555242][T18316] ? _raw_spin_unlock+0x28/0x50 [ 597.555276][T18316] ? __lock_acquire+0x747/0x2de0 [ 597.555313][T18316] ? lock_acquire+0x115/0x350 [ 597.555346][T18316] ? __pfx_tcp_connect+0x10/0x10 [ 597.555394][T18316] ? __asan_memset+0x22/0x50 [ 597.555431][T18316] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 597.555454][T18316] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 597.555487][T18316] ? sk_setup_caps+0x94f/0xbc0 [ 597.555513][T18316] ? sk_setup_caps+0x29/0xbc0 [ 597.555541][T18316] tcp_v4_connect+0x1051/0x1950 [ 597.555592][T18316] ? __pfx_tcp_v4_connect+0x10/0x10 [ 597.555638][T18316] __inet_stream_connect+0x28c/0xf50 [ 597.555679][T18316] ? do_raw_spin_lock+0x12b/0x2f0 [ 597.555710][T18316] ? __pfx___inet_stream_connect+0x10/0x10 [ 597.555745][T18316] ? inet_stream_connect+0x51/0xa0 [ 597.555777][T18316] ? __local_bh_enable_ip+0xd6/0x140 [ 597.555808][T18316] inet_stream_connect+0x66/0xa0 [ 597.555842][T18316] __sys_connect+0x316/0x450 [ 597.555881][T18316] ? __pfx___sys_connect+0x10/0x10 [ 597.555929][T18316] ? rcu_is_watching+0x16/0xb0 [ 597.555962][T18316] __x64_sys_connect+0x7a/0x90 [ 597.555999][T18316] do_syscall_64+0x166/0x520 [ 597.556028][T18316] ? trace_irq_disable+0x3b/0x140 [ 597.556059][T18316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.556083][T18316] ? clear_bhb_loop+0x70/0xc0 [ 597.556111][T18316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.556143][T18316] RIP: 0033:0x7f93a1f9e159 [ 597.556192][T18316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.556212][T18316] RSP: 002b:00007f93a01f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 597.556237][T18316] RAX: ffffffffffffffda RBX: 00007f93a2225fa0 RCX: 00007f93a1f9e159 [ 597.556269][T18316] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 597.556285][T18316] RBP: 00007f93a203503b R08: 0000000000000000 R09: 0000000000000000 [ 597.556299][T18316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.556314][T18316] R13: 00007f93a2226038 R14: 00007f93a2225fa0 R15: 00007ffe32926448 [ 597.556348][T18316] [ 597.596247][ T1218] m920x_read = error: -19 [ 597.596394][ T1218] dvb-usb: error while querying for an remote control event. [ 597.708578][ T1218] m920x_read = error: -19 [ 597.708612][ T1218] dvb-usb: error while querying for an remote control event. [ 597.815022][ T9803] m920x_read = error: -19 [ 597.815084][ T9803] dvb-usb: error while querying for an remote control event. [ 597.923327][ T1218] m920x_read = error: -19 [ 597.923357][ T1218] dvb-usb: error while querying for an remote control event. [ 597.927100][T18123] veth0_vlan: entered promiscuous mode [ 597.968902][T18123] veth1_vlan: entered promiscuous mode [ 598.005779][ T5627] Bluetooth: hci0: command tx timeout [ 598.033147][ T9802] m920x_read = error: -19 [ 598.033170][ T9802] dvb-usb: error while querying for an remote control event. [ 598.062604][T18123] veth0_macvtap: entered promiscuous mode [ 598.092485][T18123] veth1_macvtap: entered promiscuous mode [ 598.131694][T18123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.143568][ T9802] m920x_read = error: -19 [ 598.143592][ T9802] dvb-usb: error while querying for an remote control event. [ 598.156467][T18123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.182441][T18325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3513'. [ 598.193189][T16741] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.205237][ T266] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.225403][ T266] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.253887][T16741] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.254191][ T9802] m920x_read = error: -19 [ 598.254212][ T9802] dvb-usb: error while querying for an remote control event. [ 598.354691][T16742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.354711][T16742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.364483][ T1218] m920x_read = error: -19 [ 598.364505][ T1218] dvb-usb: error while querying for an remote control event. [ 598.415758][T16742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.415781][T16742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.476719][ T9802] m920x_read = error: -19 [ 598.476743][ T9802] dvb-usb: error while querying for an remote control event. [ 598.583206][ T9802] m920x_read = error: -19 [ 598.583232][ T9802] dvb-usb: error while querying for an remote control event. [ 598.697217][ T9802] m920x_read = error: -19 [ 598.697243][ T9802] dvb-usb: error while querying for an remote control event. [ 598.803464][ T9802] m920x_read = error: -19 [ 598.803490][ T9802] dvb-usb: error while querying for an remote control event. [ 598.913615][ T9802] m920x_read = error: -19 [ 598.913642][ T9802] dvb-usb: error while querying for an remote control event. [ 598.946498][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 598.946517][ T30] audit: type=1800 audit(1789225903.647:93): pid=18348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3517" name="bus" dev="tmpfs" ino=242 res=0 errno=0 [ 599.023455][ T9802] m920x_read = error: -19 [ 599.023479][ T9802] dvb-usb: error while querying for an remote control event. [ 599.133329][ T9802] m920x_read = error: -19 [ 599.133355][ T9802] dvb-usb: error while querying for an remote control event. [ 599.243346][ T9802] m920x_read = error: -19 [ 599.243374][ T9802] dvb-usb: error while querying for an remote control event. [ 599.353528][ T9802] m920x_read = error: -19 [ 599.353554][ T9802] dvb-usb: error while querying for an remote control event. [ 599.455564][ T9] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 599.463124][ T9803] m920x_read = error: -19 [ 599.463145][ T9803] dvb-usb: error while querying for an remote control event. [ 599.573104][ T9802] m920x_read = error: -19 [ 599.573131][ T9802] dvb-usb: error while querying for an remote control event. [ 599.605368][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 599.610031][ T9] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 599.623709][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 599.635611][ T9] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 599.635668][ T9] usb 9-1: Product: syz [ 599.635702][ T9] usb 9-1: Manufacturer: syz [ 599.635738][ T9] usb 9-1: SerialNumber: syz [ 599.659656][ T9] usb 9-1: config 0 descriptor?? [ 599.666557][T18362] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 599.669353][ T9] hub 9-1:0.0: bad descriptor, ignoring hub [ 599.669383][ T9] hub 9-1:0.0: probe with driver hub failed with error -5 [ 599.686521][ T9802] m920x_read = error: -19 [ 599.686543][ T9802] dvb-usb: error while querying for an remote control event. [ 599.793105][ T9802] m920x_read = error: -19 [ 599.793129][ T9802] dvb-usb: error while querying for an remote control event. [ 599.801926][ T59] IPVS: starting estimator thread 0... [ 599.874310][T18392] ieee802154 phy0 wpan0: encryption failed: -22 [ 599.895282][T18387] IPVS: using max 34 ests per chain, 81600 per kthread [ 599.904211][ T9802] m920x_read = error: -19 [ 599.904232][ T9802] dvb-usb: error while querying for an remote control event. [ 600.013326][ T9802] m920x_read = error: -19 [ 600.013354][ T9802] dvb-usb: error while querying for an remote control event. [ 600.020726][T18397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3527'. [ 600.083305][ T5627] Bluetooth: hci0: command tx timeout [ 600.122315][T18403] xt_nfacct: accounting object `syz0' does not exist [ 600.134880][ T9802] m920x_read = error: -19 [ 600.134906][ T9802] dvb-usb: error while querying for an remote control event. [ 600.243200][ T9802] m920x_read = error: -19 [ 600.243226][ T9802] dvb-usb: error while querying for an remote control event. [ 600.353493][ T9802] m920x_read = error: -19 [ 600.353519][ T9802] dvb-usb: error while querying for an remote control event. [ 600.443657][ T9803] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 600.465430][ T9802] m920x_read = error: -19 [ 600.465454][ T9802] dvb-usb: error while querying for an remote control event. [ 600.573159][ T9802] m920x_read = error: -19 [ 600.573180][ T9802] dvb-usb: error while querying for an remote control event. [ 600.600224][ T9803] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 600.602364][ T9803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.602392][ T9803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.634133][ T9803] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 600.634149][ T9803] usb 6-1: Manufacturer: syz [ 600.637569][ T9803] usb 6-1: config 0 descriptor?? [ 600.683132][ T9802] m920x_read = error: -19 [ 600.683156][ T9802] dvb-usb: error while querying for an remote control event. [ 600.793139][ T9802] m920x_read = error: -19 [ 600.793166][ T9802] dvb-usb: error while querying for an remote control event. [ 600.849310][T18407] FAULT_INJECTION: forcing a failure. [ 600.849310][T18407] name failslab, interval 1, probability 0, space 0, times 0 [ 600.849350][T18407] CPU: 1 UID: 0 PID: 18407 Comm: syz.5.3529 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.849380][T18407] Tainted: [L]=SOFTLOCKUP [ 600.849389][T18407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.849404][T18407] Call Trace: [ 600.849413][T18407] [ 600.849424][T18407] dump_stack_lvl+0xe8/0x150 [ 600.849476][T18407] should_fail_ex+0x3eb/0x540 [ 600.849510][T18407] should_failslab+0xa8/0x100 [ 600.849539][T18407] __kmalloc_noprof+0xf9/0x710 [ 600.849574][T18407] ? __kasan_kmalloc+0x93/0xb0 [ 600.849597][T18407] ? asymmetric_key_generate_id+0x60/0x170 [ 600.849631][T18407] ? asymmetric_key_generate_id+0x60/0x170 [ 600.849674][T18407] asymmetric_key_generate_id+0x60/0x170 [ 600.849715][T18407] x509_key_preparse+0x3d7/0x6d0 [ 600.849751][T18407] asymmetric_key_preparse+0xb9/0x1b0 [ 600.849848][T18407] __key_create_or_update+0x3a4/0xa70 [ 600.849908][T18407] ? __pfx___key_create_or_update+0x10/0x10 [ 600.849959][T18407] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 600.849996][T18407] key_create_or_update+0x42/0x60 [ 600.850029][T18407] __se_sys_add_key+0x349/0x420 [ 600.850068][T18407] ? __pfx___se_sys_add_key+0x10/0x10 [ 600.850111][T18407] ? __x64_sys_add_key+0x20/0xc0 [ 600.850148][T18407] do_syscall_64+0x166/0x520 [ 600.850172][T18407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.850197][T18407] ? clear_bhb_loop+0x70/0xc0 [ 600.850226][T18407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.850251][T18407] RIP: 0033:0x7f8801f9e159 [ 600.850274][T18407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.850296][T18407] RSP: 002b:00007f8802d92028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 600.850323][T18407] RAX: ffffffffffffffda RBX: 00007f8802225fa0 RCX: 00007f8801f9e159 [ 600.850341][T18407] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 600.850360][T18407] RBP: 00007f880203503b R08: ffffffffffffffff R09: 0000000000000000 [ 600.850376][T18407] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 600.850391][T18407] R13: 00007f8802226038 R14: 00007f8802225fa0 R15: 00007ffddd3c4188 [ 600.850428][T18407] [ 600.904666][ T1218] m920x_read = error: -19 [ 600.904690][ T1218] dvb-usb: error while querying for an remote control event. [ 600.997203][T16714] raw-gadget.3 gadget.8: failed to queue suspend event [ 601.018130][ T9802] m920x_read = error: -19 [ 601.022716][ T9802] dvb-usb: error while querying for an remote control event. [ 601.080099][T18357] raw-gadget.3 gadget.8: failed to queue resume event [ 601.128335][ T9802] m920x_read = error: -19 [ 601.128359][ T9802] dvb-usb: error while querying for an remote control event. [ 601.156704][ T266] raw-gadget.3 gadget.8: failed to queue suspend event [ 601.223077][T18357] raw-gadget.3 gadget.8: failed to queue resume event [ 601.233447][ T1218] m920x_read = error: -19 [ 601.233473][ T1218] dvb-usb: error while querying for an remote control event. [ 601.261119][ T3045] raw-gadget.3 gadget.8: failed to queue suspend event [ 601.323509][T18357] raw-gadget.3 gadget.8: failed to queue resume event [ 601.343149][ T1218] m920x_read = error: -19 [ 601.343180][ T1218] dvb-usb: error while querying for an remote control event. [ 601.366626][ T12] raw-gadget.3 gadget.8: failed to queue suspend event [ 601.443341][T18357] raw-gadget.3 gadget.8: failed to queue resume event [ 601.461217][ T9802] m920x_read = error: -19 [ 601.461240][ T9802] dvb-usb: error while querying for an remote control event. [ 601.476075][T16714] raw-gadget.3 gadget.8: failed to queue suspend event [ 601.543160][T18357] raw-gadget.3 gadget.8: failed to queue resume event [ 601.563156][ T42] m920x_read = error: -19 [ 601.563180][ T42] dvb-usb: error while querying for an remote control event. [ 601.571443][T16714] raw-gadget.3 gadget.8: failed to queue suspend event [ 601.644096][T18357] raw-gadget.3 gadget.8: failed to queue resume event [ 601.673140][ T1218] m920x_read = error: -19 [ 601.673188][ T1218] dvb-usb: error while querying for an remote control event. [ 601.680353][ T12] raw-gadget.3 gadget.8: failed to queue suspend event [ 601.753198][T18357] raw-gadget.3 gadget.8: failed to queue resume event [ 601.783185][ T1218] m920x_read = error: -19 [ 601.783237][ T1218] dvb-usb: error while querying for an remote control event. [ 601.802474][T16714] raw-gadget.3 gadget.8: failed to queue suspend event [ 601.828498][ T9803] uclogic 0003:256C:006D.002B: failed retrieving Huion firmware version: -71 [ 601.828561][ T9803] uclogic 0003:256C:006D.002B: failed probing parameters: -71 [ 601.828675][ T9803] uclogic 0003:256C:006D.002B: probe with driver uclogic failed with error -71 [ 601.863401][ T9803] usb 6-1: USB disconnect, device number 65 [ 601.876099][T18357] raw-gadget.3 gadget.8: failed to queue resume event [ 601.893990][ T1218] m920x_read = error: -19 [ 601.894012][ T1218] dvb-usb: error while querying for an remote control event. [ 601.936766][ T266] raw-gadget.3 gadget.8: failed to queue suspend event [ 602.003637][ T1218] m920x_read = error: -19 [ 602.003663][ T1218] dvb-usb: error while querying for an remote control event. [ 602.003778][T18357] raw-gadget.3 gadget.8: failed to queue resume event [ 602.036534][ T266] raw-gadget.3 gadget.8: failed to queue suspend event [ 602.103632][T18357] raw-gadget.3 gadget.8: failed to queue resume event [ 602.120063][ T9803] m920x_read = error: -19 [ 602.120089][ T9803] dvb-usb: error while querying for an remote control event. [ 602.144085][T16714] raw-gadget.3 gadget.8: failed to queue suspend event [ 602.178618][T18357] raw-gadget.3 gadget.8: failed to queue disconnect event [ 602.223073][ T1218] m920x_read = error: -19 [ 602.223098][ T1218] dvb-usb: error while querying for an remote control event. [ 602.232322][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 602.283178][ T9803] usb 9-1: USB disconnect, device number 27 [ 602.333236][ T9803] m920x_read = error: -19 [ 602.333261][ T9803] dvb-usb: error while querying for an remote control event. [ 602.443080][ T42] m920x_read = error: -19 [ 602.443106][ T42] dvb-usb: error while querying for an remote control event. [ 602.554147][ T42] m920x_read = error: -19 [ 602.554174][ T42] dvb-usb: error while querying for an remote control event. [ 602.629094][T18452] evm: overlay not supported [ 602.663046][ T9803] m920x_read = error: -19 [ 602.663071][ T9803] dvb-usb: error while querying for an remote control event. [ 602.773229][ T9803] m920x_read = error: -19 [ 602.773252][ T9803] dvb-usb: error while querying for an remote control event. [ 602.781025][T18470] netlink: 2 bytes leftover after parsing attributes in process `syz.8.3539'. [ 602.894387][ T9803] m920x_read = error: -19 [ 602.894413][ T9803] dvb-usb: error while querying for an remote control event. [ 602.940609][T18475] netlink: 'syz.8.3540': attribute type 10 has an invalid length. [ 602.940648][T18475] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3540'. [ 602.941084][T18475] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 602.941431][T18475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.997541][T18476] mac80211_hwsim hwsim35 ..c: renamed from wlan1 [ 603.003433][ T9803] m920x_read = error: -19 [ 603.003455][ T9803] dvb-usb: error while querying for an remote control event. [ 603.113119][ T9803] m920x_read = error: -19 [ 603.113145][ T9803] dvb-usb: error while querying for an remote control event. [ 603.224983][ T9803] m920x_read = error: -19 [ 603.225000][ T9803] dvb-usb: error while querying for an remote control event. [ 603.263550][T18484] input: syz0 as /devices/virtual/input/input97 [ 603.286458][T18484] netlink: 'syz.1.3543': attribute type 10 has an invalid length. [ 603.286479][T18484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3543'. [ 603.313300][ T9] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 603.345779][ T9802] m920x_read = error: -19 [ 603.345803][ T9802] dvb-usb: error while querying for an remote control event. [ 603.456301][ T9802] m920x_read = error: -19 [ 603.456328][ T9802] dvb-usb: error while querying for an remote control event. [ 603.470514][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 603.474012][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 603.474086][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 4 [ 603.474154][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 13368, setting to 1023 [ 603.474260][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.488997][ T9] usb 6-1: config 0 descriptor?? [ 603.563187][ T9802] m920x_read = error: -19 [ 603.563211][ T9802] dvb-usb: error while querying for an remote control event. [ 603.673187][ T9802] m920x_read = error: -19 [ 603.673216][ T9802] dvb-usb: error while querying for an remote control event. [ 603.783089][ T1218] m920x_read = error: -19 [ 603.783116][ T1218] dvb-usb: error while querying for an remote control event. [ 603.811852][T18508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.828340][T18508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.893181][ T1218] m920x_read = error: -19 [ 603.893299][ T1218] dvb-usb: error while querying for an remote control event. [ 604.003191][ T1218] m920x_read = error: -19 [ 604.003218][ T1218] dvb-usb: error while querying for an remote control event. [ 604.080402][ T9] ath6kl: Failed to submit usb control message: -71 [ 604.080455][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 604.080472][ T9] ath6kl: Unable to send get target info: -71 [ 604.095439][ T9] ath6kl: Failed to init ath6kl core: -71 [ 604.099682][ T9] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 604.121834][ T1218] m920x_read = error: -19 [ 604.121857][ T1218] dvb-usb: error while querying for an remote control event. [ 604.152546][ T9] usb 6-1: USB disconnect, device number 66 [ 604.223236][ T1218] m920x_read = error: -19 [ 604.223259][ T1218] dvb-usb: error while querying for an remote control event. [ 604.334097][ T9802] m920x_read = error: -19 [ 604.334134][ T9802] dvb-usb: error while querying for an remote control event. [ 604.443137][ T9802] m920x_read = error: -19 [ 604.443163][ T9802] dvb-usb: error while querying for an remote control event. [ 604.553168][ T9802] m920x_read = error: -19 [ 604.553195][ T9802] dvb-usb: error while querying for an remote control event. [ 604.663342][ T1218] m920x_read = error: -19 [ 604.663367][ T1218] dvb-usb: error while querying for an remote control event. [ 604.769316][T18540] gadgetfs: bound to dummy_udc driver [ 604.773701][ T1218] m920x_read = error: -19 [ 604.773722][ T1218] dvb-usb: error while querying for an remote control event. [ 604.883141][ T1218] m920x_read = error: -19 [ 604.883167][ T1218] dvb-usb: error while querying for an remote control event. [ 604.993157][ T1218] m920x_read = error: -19 [ 604.993183][ T1218] dvb-usb: error while querying for an remote control event. [ 605.003034][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 605.003449][ C0] gadgetfs: connected [ 605.004565][ T9] gadgetfs: disconnected [ 605.088984][T18123] ================================================================== [ 605.088995][T18123] BUG: KASAN: slab-use-after-free in __mutex_lock+0x14e/0x15a0 [ 605.089014][T18123] Read of size 8 at addr ff ** replaying previous printk message ** [ 605.089014][T18123] Read of size 8 at addr ffff88807f128458 by task syz-executor/18123 [ 605.089025][T18123] [ 605.089039][T18123] CPU: 0 UID: 0 PID: 18123 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 605.089058][T18123] Tainted: [L]=SOFTLOCKUP [ 605.089063][T18123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.089071][T18123] Call Trace: [ 605.089077][T18123] [ 605.089083][T18123] dump_stack_lvl+0xe8/0x150 [ 605.089101][T18123] print_address_description+0x55/0x1e0 [ 605.089121][T18123] ? __mutex_lock+0x14e/0x15a0 [ 605.089133][T18123] print_report+0x58/0x70 [ 605.089150][T18123] kasan_report+0x117/0x150 [ 605.089166][T18123] ? __mutex_lock+0x14e/0x15a0 [ 605.089181][T18123] __mutex_lock+0x14e/0x15a0 [ 605.089196][T18123] ? lockdep_hardirqs_on+0x7b/0x110 [ 605.089217][T18123] ? ep_open+0x4e/0x270 [ 605.089238][T18123] ? __pfx___mutex_lock+0x10/0x10 [ 605.089250][T18123] ? apparmor_file_open+0x523/0x6c0 [ 605.089274][T18123] ? __pfx_apparmor_file_open+0x10/0x10 [ 605.089297][T18123] ep_open+0x4e/0x270 [ 605.089317][T18123] ? do_dentry_open+0x7ff/0x1360 [ 605.089335][T18123] ? __pfx_ep_open+0x10/0x10 [ 605.089354][T18123] do_dentry_open+0x80e/0x1360 [ 605.089371][T18123] vfs_open_consume+0x4a/0x350 [ 605.089385][T18123] ? path_openat+0x14bb/0x1e40 [ 605.089406][T18123] path_openat+0x14d7/0x1e40 [ 605.089435][T18123] do_file_open+0x23e/0x4a0 [ 605.089506][T18123] ? __pfx_do_file_open+0x10/0x10 [ 605.089540][T18123] ? _raw_spin_unlock+0x28/0x50 [ 605.089561][T18123] ? alloc_fd+0x651/0x6c0 [ 605.089584][T18123] do_sys_openat2+0x115/0x200 [ 605.089603][T18123] ? __pfx_do_sys_openat2+0x10/0x10 [ 605.089623][T18123] ? __se_sys_unlink+0xc2/0x140 [ 605.089638][T18123] ? kmem_cache_free+0x182/0x650 [ 605.089667][T18123] __x64_sys_openat+0x138/0x170 [ 605.089714][T18123] do_syscall_64+0x166/0x520 [ 605.089735][T18123] ? trace_irq_disable+0x3b/0x140 [ 605.089767][T18123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.089790][T18123] ? clear_bhb_loop+0x70/0xc0 [ 605.089816][T18123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.089838][T18123] RIP: 0033:0x7f4f7635e98e [ 605.089853][T18123] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 605.089867][T18123] RSP: 002b:00007fff02cc96f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 605.089884][T18123] RAX: ffffffffffffffda RBX: 000055558a9b7500 RCX: 00007f4f7635e98e [ 605.089896][T18123] RDX: 0000000000000000 RSI: 00007fff02cc9860 RDI: ffffffffffffff9c [ 605.089907][T18123] RBP: 00007fff02cc9860 R08: 0000000000000000 R09: 0000000000000000 [ 605.089918][T18123] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff02cca950 [ 605.089928][T18123] R13: 00007f4f7643448b R14: 000055558a9b74e8 R15: 0000000000000006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 605.089946][T18123] [ 605.089952][T18123] [ 605.089962][T18123] Allocated by task 18540: [ 605.089970][T18123] kasan_save_track+0x3e/0x80 [ 605.089994][T18123] __kasan_kmalloc+0x93/0xb0 [ 605.090007][T18123] __kmalloc_cache_noprof+0x31c/0x600 [ 605.090028][T18123] gadgetfs_bind+0x277/0xad0 [ 605.090063][T18123] gadget_bind_driver+0x2ca/0x9e0 [ 605.090083][T18123] really_probe+0x254/0xae0 [ 605.090102][T18123] __driver_probe_device+0x1e8/0x360 [ 605.090121][T18123] driver_probe_device+0x4f/0x240 [ 605.090140][T18123] __driver_attach+0x339/0x600 [ 605.090157][T18123] bus_for_each_dev+0x23b/0x2c0 [ 605.090169][T18123] bus_add_driver+0x345/0x670 [ 605.090182][T18123] driver_register+0x23a/0x320 [ 605.090202][T18123] usb_gadget_register_driver_owner+0xf9/0x270 [ 605.090221][T18123] dev_config+0xe3c/0x12a0 [ 605.090241][T18123] vfs_write+0x296/0xba0 [ 605.090260][T18123] ksys_write+0x150/0x270 [ 605.090279][T18123] do_syscall_64+0x166/0x520 [ 605.090291][T18123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.090305][T18123] [ 605.090309][T18123] Freed by task 18544: [ 605.090317][T18123] kasan_save_track+0x3e/0x80 [ 605.090338][T18123] kasan_save_free_info+0x40/0x50 [ 605.090356][T18123] __kasan_slab_free+0x5c/0x80 [ 605.090369][T18123] kfree+0x1c5/0x650 [ 605.090386][T18123] destroy_ep_files+0x29f/0x330 [ 605.090407][T18123] gadgetfs_unbind+0x109/0x2b0 [ 605.090428][T18123] gadget_unbind_driver+0x1cb/0x410 [ 605.090447][T18123] device_release_driver_internal+0x48b/0x880 [ 605.090466][T18123] driver_detach+0x1f3/0x2d0 [ 605.090484][T18123] bus_remove_driver+0x226/0x320 [ 605.090497][T18123] usb_gadget_unregister_driver+0x4e/0x70 [ 605.090515][T18123] dev_release+0x83/0x200 [ 605.090536][T18123] __fput+0x413/0xa50 [ 605.090554][T18123] task_work_run+0x1d9/0x260 [ 605.090576][T18123] do_exit+0x73a/0x2360 [ 605.090595][T18123] __pfx___ia32_sys_exit+0x0/0x10 [ 605.090617][T18123] x64_sys_call+0x18b4/0x18d0 [ 605.090637][T18123] do_syscall_64+0x166/0x520 [ 605.090678][T18123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.090709][T18123] [ 605.090714][T18123] The buggy address belongs to the object at ffff88807f128400 [ 605.090714][T18123] which belongs to the cache kmalloc-512 of size 512 [ 605.090730][T18123] The buggy address is located 88 bytes inside of [ 605.090730][T18123] freed 512-byte region [ffff88807f128400, ffff88807f128600) [ 605.090750][T18123] [ 605.090755][T18123] The buggy address belongs to the physical page: [ 605.090769][T18123] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f128 [ 605.090785][T18123] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 605.090801][T18123] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 605.090824][T18123] page_type: f5(slab) [ 605.090842][T18123] raw: 00fff00000000040 ffff88813ff1ac80 dead000000000100 dead000000000122 [ 605.090858][T18123] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 605.090875][T18123] head: 00fff00000000040 ffff88813ff1ac80 dead000000000100 dead000000000122 [ 605.090896][T18123] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 605.090909][T18123] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 605.090921][T18123] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 605.090928][T18123] page dumped because: kasan: bad access detected [ 605.090939][T18123] page_owner tracks the page as allocated [ 605.090944][T18123] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4979, tgid 4979 (logger), ts 28761138598 [ 605.090965][T18123] post_alloc_hook+0x1f9/0x250 [ 605.090981][T18123] get_page_from_freelist+0x2209/0x2280 [ 605.091001][T18123] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 605.091020][T18123] allocate_slab+0x7d/0x620 [ 605.091038][T18123] refill_objects+0x2d5/0x350 [ 605.091052][T18123] __pcs_replace_empty_main+0x2c8/0x6c0 [ 605.091065][T18123] __kmalloc_noprof+0x476/0x710 [ 605.091083][T18123] tomoyo_init_log+0x1a6b/0x1f60 [ 605.091098][T18123] tomoyo_supervisor+0x35f/0x1550 [ 605.091113][T18123] tomoyo_path_permission+0x262/0x3b0 [ 605.091127][T18123] tomoyo_check_open_permission+0x2b2/0x470 [ 605.091140][T18123] security_file_open+0xa9/0x240 [ 605.091151][T18123] do_dentry_open+0x495/0x1360 [ 605.091163][T18123] vfs_open_consume+0x4a/0x350 [ 605.091176][T18123] path_openat+0x14d7/0x1e40 [ 605.091194][T18123] do_file_open+0x23e/0x4a0 [ 605.091211][T18123] page last free pid 1 tgid 1 ts 26465853085 stack trace: [ 605.091220][T18123] free_pages_prepare+0x9eb/0xaf0 [ 605.091235][T18123] __free_contig_range_common+0x174/0x340 [ 605.091249][T18123] destroy_args+0x4e5/0x570 [ 605.091263][T18123] debug_vm_pgtable+0x3f8/0x410 [ 605.091273][T18123] do_one_initcall+0x250/0x870 [ 605.091288][T18123] do_initcall_level+0x10a/0x1a0 [ 605.091301][T18123] do_initcalls+0x59/0xa0 [ 605.091312][T18123] kernel_init_freeable+0x29d/0x3e0 [ 605.091323][T18123] kernel_init+0x22/0x1d0 [ 605.091337][T18123] ret_from_fork+0x514/0xb70 [ 605.091354][T18123] ret_from_fork_asm+0x1a/0x30 [ 605.091370][T18123] [ 605.091374][T18123] Memory state around the buggy address: [ 605.091381][T18123] ffff88807f128300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 605.091390][T18123] ffff88807f128380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 605.091399][T18123] >ffff88807f128400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.091405][T18123] ^ [ 605.091413][T18123] ffff88807f128480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.091421][T18123] ffff88807f128500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.091428][T18123] ================================================================== [ 605.109054][ T1218] m920x_read = error: -19 [ 605.109081][ T1218] dvb-usb: error while querying for an remote control event. [ 605.112736][T18123] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 605.959694][T18123] CPU: 0 UID: 0 PID: 18123 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 605.970835][T18123] Tainted: [L]=SOFTLOCKUP [ 605.975170][T18123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.985231][T18123] Call Trace: [ 605.988529][T18123] [ 605.991488][T18123] vpanic+0x56d/0xa70 [ 605.995492][T18123] ? __pfx_vpanic+0x10/0x10 [ 606.000017][T18123] panic+0xc5/0xd0 [ 606.003765][T18123] ? __pfx_panic+0x10/0x10 [ 606.008201][T18123] ? preempt_schedule_thunk+0x16/0x40 [ 606.013589][T18123] ? __mutex_lock+0x14e/0x15a0 [ 606.018363][T18123] ? preempt_schedule_thunk+0x16/0x40 [ 606.023754][T18123] ? __mutex_lock+0x14e/0x15a0 [ 606.028524][T18123] check_panic_on_warn+0x89/0xb0 [ 606.033476][T18123] ? __mutex_lock+0x14e/0x15a0 [ 606.038246][T18123] end_report+0x73/0x170 [ 606.042499][T18123] ? __mutex_lock+0x14e/0x15a0 [ 606.047272][T18123] kasan_report+0x128/0x150 [ 606.051790][T18123] ? __mutex_lock+0x14e/0x15a0 [ 606.056570][T18123] __mutex_lock+0x14e/0x15a0 [ 606.061183][T18123] ? lockdep_hardirqs_on+0x7b/0x110 [ 606.066398][T18123] ? ep_open+0x4e/0x270 [ 606.070569][T18123] ? __pfx___mutex_lock+0x10/0x10 [ 606.075608][T18123] ? apparmor_file_open+0x523/0x6c0 [ 606.080822][T18123] ? __pfx_apparmor_file_open+0x10/0x10 [ 606.086382][T18123] ep_open+0x4e/0x270 [ 606.090386][T18123] ? do_dentry_open+0x7ff/0x1360 [ 606.095339][T18123] ? __pfx_ep_open+0x10/0x10 [ 606.099945][T18123] do_dentry_open+0x80e/0x1360 [ 606.104733][T18123] vfs_open_consume+0x4a/0x350 [ 606.109549][T18123] ? path_openat+0x14bb/0x1e40 [ 606.114334][T18123] path_openat+0x14d7/0x1e40 [ 606.118952][T18123] do_file_open+0x23e/0x4a0 [ 606.123479][T18123] ? __pfx_do_file_open+0x10/0x10 [ 606.128527][T18123] ? _raw_spin_unlock+0x28/0x50 [ 606.133388][T18123] ? alloc_fd+0x651/0x6c0 [ 606.137728][T18123] do_sys_openat2+0x115/0x200 [ 606.142417][T18123] ? __pfx_do_sys_openat2+0x10/0x10 [ 606.147630][T18123] ? __se_sys_unlink+0xc2/0x140 [ 606.152484][T18123] ? kmem_cache_free+0x182/0x650 [ 606.157434][T18123] __x64_sys_openat+0x138/0x170 [ 606.162309][T18123] do_syscall_64+0x166/0x520 [ 606.166904][T18123] ? trace_irq_disable+0x3b/0x140 [ 606.171960][T18123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.178045][T18123] ? clear_bhb_loop+0x70/0xc0 [ 606.182735][T18123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.188665][T18123] RIP: 0033:0x7f4f7635e98e [ 606.193092][T18123] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 606.212726][T18123] RSP: 002b:00007fff02cc96f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 606.221149][T18123] RAX: ffffffffffffffda RBX: 000055558a9b7500 RCX: 00007f4f7635e98e [ 606.229158][T18123] RDX: 0000000000000000 RSI: 00007fff02cc9860 RDI: ffffffffffffff9c [ 606.237135][T18123] RBP: 00007fff02cc9860 R08: 0000000000000000 R09: 0000000000000000 [ 606.245109][T18123] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff02cca950 [ 606.253106][T18123] R13: 00007f4f7643448b R14: 000055558a9b74e8 R15: 0000000000000006 [ 606.261134][T18123] [ 606.264755][T18123] Kernel Offset: disabled [ 606.269100][T18123] Rebooting in 86400 seconds..