last executing test programs: 3m27.622607915s ago: executing program 4 (id=2666): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) r4 = gettid() (rerun: 64) waitid(0x2, r4, 0x0, 0x2, 0x0) (async) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) (async, rerun: 64) syz_open_dev$vbi(&(0x7f0000000340), 0x3, 0x2) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000", @ANYRES16=r5, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x44001}, 0x44894) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r7 = dup(r6) (async) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r11 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r12, 0xc0347c03, &(0x7f0000000c80)) (async) move_pages(r11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r10, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0xe90}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/27, 0x1b}], 0x6}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) (async) sendmmsg(r9, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x10004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00'], 0x28}}], 0x1, 0x4000000) fchdir(r8) (async) close(r8) (async) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd86) 3m27.312105126s ago: executing program 4 (id=2667): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x1, 0x4, 0xc08}}, 0xfffffdf0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffff1, 0x11, 0xffffffffffffffff, 0xbe9f7000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000140)={[0xff]}, 0x8) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000380)=0x1) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x4100, 0x12) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000080)={0x6, 0x7}) 3m26.293963158s ago: executing program 4 (id=2672): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x1002, 0xffffffffffffffff, 0x0) write$snddsp(0xffffffffffffffff, &(0x7f0000001340)='6', 0x1) 3m26.189357265s ago: executing program 4 (id=2673): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000013c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x48, 0x140d, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4001) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000043c0)='./file0\x00', 0x340) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000000)=0x800001) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x2, 0x5, 0x2) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\"\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a}, @routing={0x80}]}}}}}}}, 0x0) r6 = socket(0x1e, 0x5, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x10001}}}, 0x10) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/102, 0x66, 0x0, &(0x7f0000000280)=""/4096, 0x1000}, &(0x7f00000012c0)=0x40) (async) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x3, 0x7, 0x3) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000004440)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002340)={0x50, 0x0, r8, {0x7, 0x2b, 0x8, 0x800, 0x4, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000023c0)="7183c1654c792752d2252c111505954b0b2d4062f31328bea54f310d5dcf627fa7f8f45e484f7bbd0c20f5de909f0c29f7418403b0a343182340147475653be9aec286f773355d274454a71a5eb1afafccb166cd4b995af5b23ea89439fd58f9d4b07fac9ffde1c16f9ec644e02386c4c879fb7495d65b6cd2bda928253538ab5c7061572b7be5483b6fa86968358b4b537fa0b95fc63d8631b1084611daee62ad3bcd2cb9f53a59416985d77f219e29f289a45fbb1ae3ebb4e046d6a9633ec25ea3156f36effa0491e125047e7948e3f889f713abc9474f577d84e8cafe011ee3eec12b43270d728146e2ff22d74bdb0694e93b7f977fa1952ab5b9a69cde45ec4d22047e785794c827c42173a26930b088520677246ac55b5bac5574325eb6aa71b5f67e151efab73f7582588be5eede94b20c257eec7cffb6d6c898f2a525ab0fe9fd0a1fa480137eae2905a932e175ffbba70f1dc7cde443abcfdc2e1fc12b1bf444e65b802eb4859b62a06ff813611a6ea1d8d35bde0348c02af3b8c70fe172d899ff191850604b2786e06cedc28de58093cb585b49a5c1d4c8669e8a59f95ff3bb4287a56d19de4c65d18ae9335cf1cfedc47e6741fdc6a6ca45290cda457a87162fd6868d80e26bbad4657db5214f98e89240c27b071bba6dfc206308a078593c7b7b1d20d64291b7dae4ed3303c5d90d0df3e1be68c47f99baa2cacab4f87878e4a497fe5bd4f9f0bd4e7253dda9a951d1906a6da9e4def5e6fb8df7dcc085957c59b0b725deb104dfa0e38f5d3f4bb6e55d0af541348cfe50f17fcbded2419d939196a349ff139a1545765379442078676ef2287d9a07eeb2758ca36536640820366f99f31155c1d571792bef6c7ee7570f1a267ee692f93203efa00b5678b6f1549068fff92651c9ffe1be516575883c42313c9175bf9dec1c559c8414dcf3c928809f9d4cdc3279164d570b5f2c3f549d7c57acc17286622983bde3db9e6eeaa53fd6dfc30b87edcceed4543eef1ced8a43584a2a0b90ef0c11d92682a7c3647888fdebaf8522a3886cb6874032b803b9024fd2df89a291c8479b6fd1f29202484d2227ee9cfebb58cbbc5459583392c78f4cdea2aaa353fc10d0f6f219e041cb95fc4fcfe95d6e2fdf8680d4d4315ec4a90735aac77c02e0bec67e1f6b8edef2cf8c3b2334aed69bcd855fc70ec13412322bcdfeb9ba36f48b62a19c489ff0be02bb5042bb7b911ba53c2cb73cdc2c8afbcaf4a067c9f33427249ca462fcfc760ad265f468ea8417f1cd35be629d35ddd0901ed6c1be436f248dce3a6280a8e0c245bb409fc4461efdca9b3fbbeb1090f665e2491cb86198d87973ffa4129bd5cc31dd472313f55b3ce5d7517d76414684431ea0eefe3fb4dbcf462cd8ee3605daa4a372b0ecfcddcf9fbea616721cbfc12dbfbf77ebc02de165157bfc7540a8271c2d1f445a2c7afba38c3ebeb61169894ae9ceb8e228c7331137db6f870a19550f2f495c7f08d0b131208fdbab2003479d18093ce57ed13780fed91050ac7be47f4ac661a160f014c18b572c7982c0b03851babdee50a066827ed740f265cc118effc7ef7608a947680c4bee1a305b2cac9f2f37a2771f1382fdb24cb936dc4220a9a6a44669d7c48564e85b475a076c4b06f1f2b8dc04e2d0a0775bf52fcb811a903270d704bac39ed1eeb3caee9b0940e0c22f513ad3c262000047db217f2aea76370af22adbc3c8e6f1e6fc22b5fb4b176f405517e5fc483c50076ecbd2af833c45f1b7fe21722d35bbb5153068426c1a630f9d08517953b39b9adf9b9c5f5f7a9bf2f0020e84edc541bb5112bd00d3dda0a5a784b038de7f2bada95b5040690ef556a5ae169b874f26f85c114e71a0393bda4c8c1aaad8b4c7523f24a901324c9d2cdf6deb88bfc03092130aafcbb75ed469f269a78b83937dea2fc1d0e3d826edb978471c5cbadbd60bd3b9f418ef30aa6a437319793d5b252b30e6c6587b7c888da6d257a59356d2e3aa7ddfe477cb7122a727289d42a5d0773a3a2a93a76e3ba0c854a98a4297ae388f0861f64f1949eda7cb8f1d643b1a8ea488f1565a829c3dc06ddf10ef193ddc74661d4a1e8ade01fe2652ff606d48eee3732c88603f8059c56d08b231069eee3c4c9b62ce59fd03352723ae4068983c5ef5f3aefdacb92756bc051c15936f86ab70910141a897545489da87f8ec6a545626dfeedd1a01b39b03c0961030fca2eef0e0935f0afcf495598ae5e1b428152e62ecf21512ea27d7295bb9697eca3a6fffe5d7c1f1c389ec0d4f509d3bbda5d3bc31cbf8d6a32f966d654b18c25134fb994b1acca6ded0e13f7a2d94964b5e16ec0e0448398c297314254a9acd36d14c342d637084b96e0b770ad7a46d67238f26625e2f3e2c1283983bea299ad149fafaea62e4622c29f168ba2b091ad8a19e5c19f0f51608c0f55012f829af2934bf00b59ef689b93fb5e080620da166f61251a83ef4c52f246bd5ead76449c99048eadf778e52313935ca50d953a962941d07cdb5f201cad408efeac1802f1b622bf9ff338ec0dc0b61297e681c15db4ba82b9a7c7879b2897e2f4da36de9d366770c222a064d5b56ca800009d260376a6dc19f63d0a5fbb4f2b7ccb71b9d693d4596a4580d7822872f29a3af6d0419aad50b5e44515ce4b48bfb923c16dff60eb890bc04a8997b4bb347a643ca436ffb8f4cdab529c2fc847ef8db017dbb8ea76f645eaf3d8314d8b68ebefdff622076f5f5365fb00db199dcf6ffc998d4007a2d3ff11abd03a71f7c2b23bf7da785010acaddc388d21ca5700ec57407e025ab5a93750820a0814b330fca50534edb5a1b8658301a7f175f110c8513b9e0841074f135200965e8d74c93732c7c34c003cb727e86e6caf3fa8ddf54927001e1f29c7ffe1cce3cee719f980d4ffc9abebfeb1c5059b52afe9c78413a6e825af24fb1c675b906577bb1afd02fae10b6d7b6d9a394826987a621c3d332320f714e74b709236dbdcda930db15650d1fb3dac7333944a205c69f78433545b942dc8bc41a670da0ede8b0383e66838a2980344d35977e9a1fa94c164f73ddb673c7e65eeb70df39bf25b692dd09ddbdb6a5d0bd0a5b5773c128abeb021147277cca9c8f76dacdf75174969ea62b479d05557ad3365f0aeaf061323d8de1773c81cfdb809a55e5aa6967a3fde5eb3b590a523e3b986997bd42adcaf55f5859641d8a20288e48eac8b5d3ee23d71be3298120031437d650645e36786b6f887d9dc74e7dbbfdb6d463e912f3e462480b5dac49a2804eb56ff333d7fce4c1b29036ff26cf7ebfa0bb46e36f6ab37cf8a4480fe85004a05a046a7e367ce78699a893f7d9471fa1b81b23d59bc1dcec14ac85db72056c7c84be166e87a2b120c6d7e53d3b1505c1336cd362e1d101a2c29d62ce1e2733efb4e4861a9f712f678b09f174fce6ab5957c185e77b0017964f7caf17ab31531f8ad3afdebadaa949aac1f85b1fe31553afb464ece3b0db14a5c0b42b9574729bd41f1e543529219939685e7dfc643263f363b3836cace58433244180f1ca6bcc740a0e6c66ec22f5c0edb91599faad9ff618d541568680831e5659c73d01151dc4a89ad6666cca1ad7e57bfe819a305328f00d680555f4979348fb444c508785db795d3505b764f328bd123dd2f4fd13c3be9094b5232ff38b02e485da80ea0418d1d6c6facf7bbf020c5d2894f8c4f6d67a0ecf660dc87af9c625c7b8dc12921f3f01edc8954fbc40a61d87bd64a1eb7aa18d525df842492d16d380fbfa0022118c22fe617e4a43dc311fbcc06ed9fa656deadd965021ff973a19a84bb2c04eeeda2b0d8e9dc4ebc9818c21661fe95c42f8917d88ebb5beafb7e0ac35e7174e9851ba2a8c5cf4115a5e0391b65a8fdaa9750c07046e67881cc491dfb14999cae28e835dd083fb5962ea9809664fb5dbacaec93423f9ca2bd37da35fe5560409f76adafded418891cb45d22363cd77f0eabbf90e6c0413f56175ead17954d18f5e13e16f9a43e3d50ecfcaca20cdeadc6a85e3c5d8039d502e82c8657b0d8d67aa81003d5eab83884df0206fa5020e32eee186aab41da797a32c8e7d2ba8309b463bd84447d27d51f8978d744474dac867822814e1adf897c79e53662a3db2575a6ed5654e41baf4da6415fa4f79baa0dd5870916814fb42e72441080dc50f33fed0ec215931f3ef6b53786911afc7ce6b89d8984f5dfe26d29c6d1b59671820390b7c9695f51bc13aa84abb6bb49cfc8dfeb7aebc2d21b9ea4a44be2f90ac7934d6f3910d388dc65ca3f18c6875ff5ee81a4bd61202443bb96e40af5c8d840ecc4374ecccd8c242fbaab3bd5b57beadc8562e5280716898d6684c0f09102f378e9e4c5dc0f2e735acb8c5f312974e1c80c817fa504fbb948c9a5fe779f249b1faf95d3de797615f29ad83807fc357c3de2fa1dea6b75d70bb20d3db88b7ed167e377e7c1f2b0f185cfc598c54a3de9a3c6a1099f3dbdac4ccf9b541c5b82ecc46a02054dadc255b27507615ea028b887e3446f7bfe9f07a397ed271b31f6b61e4d4fe4f444dd501d1bbe5ad0d9f532f22f7d181cdf2eacf02fe73b86bff775c1d27c97fb5d61a62c7bd160fa9abc411628339926915f016c15cb9d7dd6a161a46d0dbe8ce79ee8f92e4b0b1a90d26fd9a336d2dabb6844086ab91ccb875039c22d3e3cd623369642416b13940da156fc38bf22ccd790eaa594a43057886e31aa1d9b08d551128c227b111d11c11149e9f17ba10ef9fa330cf779b53777067d118d92a029359b60a4967460db0ad15437c26cddbe0467cb86332a4ee5a7db0994c70fae7b0c91b2be8ab0b8fd59724f22a7499f367f0a564eaec5a6c6ec33e217d1179e063bdfca7aea8643b258a91326996cea21c3f5833e88ffaf7162760360b068136172e8ff3896c6cb3f85ed389087b782bddc2787d316d02218651e726ac74f0680f41375eaacb65f5e07fe02554b4ef68d21c0057151f1885e40efa06cc575d9da764646ad1623a12476fd22a1689b80029d686b49fc5e3809ecb67a3d455db985f9fa5ef94ff15a37b7f436e25fb6b332a61593b0091320aa059fa4e7b40218721e93a4852a305afb91482711959886dba77ca130d6b704152c88a497492a8c8497d6500d4c00303c976ce4feb63af3c04d79470798916a39a35bbe286f0139ab4a389776216f0ff45192b78ef7bc37a591961f29334bb159f05cfb29077d25ae64e25511cb0e06d04bce0bee9940cc9301e5188410d90de2e6f3c8b2bc7d3b63a7e9e81e06c0f7aba6deb3f65ade427ee759f4a145d48f46be57452c186f79756eddbd57a8afa56c464ec2390bd0de443e9050358600d2aae0f4c26c57509ca44f87828a78b3402877097793a124f1d8797df9ee8a3d4ee31b2d0b6ff15d9fd4dfed8576f8473f11ff1fa8a9ba5d6a98b496fa8ee07b780a2f3db6096ef7a210944c421f917a1dbb6656b5dd1b5d28b9c12fffca50c7ae219cf2fc942f44157e6a9075df8bd1d1a4e78c5257de2c0547ecdbdecab658dbb78cd12f123cf30126f6d3bb9862ac2577dafa57f6d781de013c24de2c1a61b68852933cd52a008188c81db89a3a5f6d726b4a36ec94b88c1f9897ff4c8b70357dd6b8df89814979f23e6299bef881b418b43b2b8b2f9a2b4fdb63602b4855b6af76a0738b05f9595f109a087f51fec1d8c8fd89fc65a7a5e87fb51c6c1d5f7681a03866935099d71a14090b4acbd9b32b53f41b5bd941825099d2b60b8a2824b2ae8a6a280bb49664b168b680b5557cd4c043cd8317740b7bfc67c09c572a6f9430717a7fe8c0de6eac2a8197353fd98008318301586574d3d0a9bd940119c86eab16c37b52f5279ef017dd05ee01ec251ecfa4552faf56b2e6c5da623db3dbbe5b61c997b587a1ff324bd52ebc009083abc3b38ec8e025a74c9a93b4ab93563b077fe21bf8e003ec94d0ba086c755d57d089a4d26da0dc3905794e9f514e6489fb1fd17017214d13e5f8953b5ccbbcdceabbb795c47509b77b856a325062bb576472639a9c5945758862e9919a585a08323e3f6b373daeeae53fc34bcb0348c225b42681698b560adad4d6e76a142fb24fac16ffe41d3ce90f3c8d2c23c9bc9a1f1cb6d7d914a52a4a81e0bcdc81c3db916280b5064e337dbeb609fc55349c3b3c157fd5f290f96a49b9bf793bfc86a5e2f2aa8640b7051cfefc60079807daba74caadda51e509c45b6334364751424f6812aa649044cda11ce9f667433ce507521a2fa5b2bf7426a06c4cd2b96cd5daddf40b83f5201066962ccab5aa240abfc161cd22767af0c9f38eaa353ec94ebc91cd5d0d692199c51c94ab0ad01a96fa5acd1dc426732f46c97b48ca6122e35c165d67af9c1c7939efc4b34b94287339ae19dde488d5ac009b271ddcde85ea9651bc793b1c6a6a71aa569f03f350e0bc9b7f03697bc8c676f8adca0dab2885b40c5ca0cb39f5aafea2ca215267af81f67b1f3598395e1f7b4b98fb85add7d260d53aa7d6720454809daabd390283214a8c04fd86be5fad5417c7256beb270d6528b611d57d9889792f6615ccc8b27e36de49960b2027c12915fa472bd15b233eae9026771be4459397016ebe5e7c03f0c9c24aa62936a98f09c37aabbcc001b55b1fad4729be3b708e70f893fd1901064c5863e444c38ecc8127c40fe573a412f154731587fb4ed173a112ab5ef727f9d35538a00280b099dce9aa990cbc3fb5ba0f224d637d26060c93dd768e4ce14ecdeff52d374e1bbb75b4e36f5c24bc2efd619896d4ae7ce89b3eebc96024c0f20643c8722b20570f52546f0b7950a8b1364041611a57f1cbf0473d1b4c0fb270c3eddcb7ec770990e738057e1e147c7cb222a4fa1d43159b00a5cb4bf8693f46e338c5342fb779dcf3774c47916c9b6378bb7024c46d3a9283db02f06f33e923194f377b60d3a3544df65d7fd0e864bdd2f5498a186d00c055a3266ae58df5324b5577ff8bc10e802587ce4b40224795634a8740f46ca4684513bfdfd058fb3dcacae59fd81328752a4dea349073bee3f8f6deb4ab49d07dc8e12f5c07c03e18dd9f3ed50a81cfaa34b7d76a0ca136800c7dc9d8e4d031dd83d350fdc5f1c381dfe9a4d50ce7a3d672497686e36417bf42c963ea4d57b4a1e8406a8d8366e48d90ca841f11d578707745642a92bee162bf53413193c4f56393fd6f3f16104b037e540467e4399ebb474911ae4e3f6bd8de3b8d78d465a0f965aa83a9a6915e1a8680173dcfc943b0b22e72a9c1e2ff91035c73e1ae8a391433927b4f98721926e27c24ebfd9ae433305de8ae18e4f7e58fba0a71711bc2462e6f58b52f62eedfdd188d82e837d84c695128c442c7feca7cf33bf9f3e0419c2ad2c0d0ce716cd3aa50d14590a1b0cc3f7a7faaf6edbe23f3dca06328618c47eb300aa2e70eaa9d3d9ef1fedc7c62f678001d00b73afedcb904064ab9402556bba36635d6009200524723e30f9e5f3ba0fe7f0dcdd7a71e917d20ce83385832477aed639ff46a6407b6bda8adcc1445c9ac5050012779d5d203e01c1a60a6ec1189e0c311baa8b4b7f80353c2545ed25d4e967bfb55d60502909177e51a4fab5f14bfafeb2f8e29b8c358c4c6e01126ae4909dfce62c05b7c1f26ebec4ca1eeffadf7e2de92d505d4dbce9f01f5898b78a29df49041334f7723ed3f33ef66d47a7d7934bddb65bbc35c61f6f87aaca98e33ed76d99bdf91028202aac5fdc2e8f2349d213d720ed20342275ba17dbd4513771a523d59d4e58f1a85a5b2db3444a7426aeeeee000c7732b580136dbb5da4e38bfeb9b4bcc8d8277191a6bdd3cc8999e7b029eac6d4a3230f3921bb7c05aee79eeb6582da5f55ae988284fb406944f60ce5f56c91571d9871d08e1abbd727021af7de75ed8636ae66b58e28e49ed26f90858103f40477500d8ea9dda0aeb93f8f3ed64584aa53281c0e823f421d2a5ae4c5c6dbed7a5eea7759e5f88e0b1e4c5aba30402eec0f31cad961c7b91f97718d69d36b2e05116003e48b154bd192463c88a91bff59469260d5253f7592d88d7d1b404eb44a1a37b9bc168d2aaae1d9c1bc76429b443e750c5465c9964024401dd840827b6562119bfd26419be851774ee6f042d03023e8733d5e5da81f0d79eb6b2d44680c761a4067340a70e64928ff083d3d6d580818dacc91cf911e43996fdef4e7a2b99961ff9f1524429a619c262bdca9d66ea3d6e2af7726d53fb2daf4aad27c4f140463c2f28ca0080361ebf1bc53d04ed095e79ea456a7df398b27ac4968c91fc05f25ce547c55584b1fd4409bf831f1c094b7b5b922ac320b68f0a2ed9fdf6589cec5664d086832fd2d124ac0a3414cd79231f7608d6a7bb282cd2294b976e76f677a0c55b6230b16ba5c778e7c4b098b254f61c48a96840dea31526ea453a64bd8c6c79cfa6b2d9b67c1f43dd09dae0474234e370dbb87e09c2dd3c06f6e2537d0730258c267dc0125b5de1abf6c873327558059c1f15f8ae330f57bd01e922e7ddfd1645cb7f65fa93758346f40795f7fb4ee34a52a77b88e21bb4ae5f3992a8ecf3749543c9a29018270dc78b2e1b2e2ba8cabfff252d2beab6f3a03fd97f7a3c64c9dc653fa2776247f18806fcaa806adbd1e1f40e452778799dfaa54ddc5034b68b1111204831d172666fe2491f8e7d1b774125021e1e506846a85bf0595e3a4f1d6749fb1e0f307db076f793fbb376748eb4848d277f339f8402c34996a6f0402867b4842a2b49dc5000aa7fd1d1ece309a7d9ac2de864be2f891714f80dc33de0ba12b443d4c797028b428fefa73f4d449db3d8857f54b87bb18be180defec7d342f9bc6a62cf7e803019d5b34699b4d641f7b877473b31eb285ed7298942b390c6f0dc3f2d020b99e97cf77d9c0deb5f7a4d24acfed27529983238a9396387004c1d0d559914fdd328d8138d8a09a239d13ea7cbe6a1e5bb15ef31744c47db7b2ed9adba3490c925f7cd32ebadf1703abfb6f7208a0618fac5ce87c41c34614f12890262e7b768fd61d18ade5dddd17f981a331481d8cf51a4ea0de2b5ae771cd9854eb837e0c3161135c2ea96bc65368fd4ade64bbe8b1ad83bf8e441efa5ad58b504b3363e4f64b107a052e520da8592d5a82cdca61e62dc929675d43ec22adf0d5e6e1b2c6e6da2a8331e43891ec01b8d437ad2eef660f0819b1cdc0da41dcb10e3ab569400b2bfc6596aa3fe74c0a9eab4d49734f8ba17ae80dc2af75f003872b9242d0ea419bfd8f7998e8f5efc3a3f31aae23228f5df23e1a4f9f887aaf62d16db191e16423363228ffb7e5707dbf48b0718664104ca1b3b8094ca2f2e505efeca17449391a1de5273f9945d778a44d25bed43e88627e0f02ac99b17b6062f1cf1c3ff896ffedd647fbf5b17bba1c9f48b44f37c175cab7423bb515266c351bcd32cb8e686dcc2f53c0e6e69370bfeb26a92eed46345faa54d16fb8631abbf87155893a00321d4e6895f1db18791570a3c3bafdc4a0a0ee400879babfb96c32de9fe4f0c7e5525b214f2efa6134fd11b7cce737306c9a2f181589296861a069b52ab409f6d68947d4e93408c58a2583852eef6180386095cf05af416dc753e04d01e63850954877052b91e0106e9e4a09188db2e3d20c4d0f55cbc70191eee8306627934b4385f0388d4473d255edeb2863fd199c7de24e4017eb3419a01986efdd686e6811eafce821a4990612618c635f5493fbbf078f7ebb6ad2524685673ff6de8ddd1f31f5e8c38a4ea82032acc1bc4492921a227869de3465b63c8af1f9da042d6a4ff6038fe2d5d8b33957b2da3751263fc761e474183e9d98800b9a8f70b6c14dc3088e6433e873635e892e0011b619e75d1a9a8f2cdb05cd400a3c9e1e3a49d3e2b94dd31ee691b3405c9d7afc2cd90b158630877b369fc7fa89e99436d8199844c9c8d983dcdc9265ac7fce701366b77a96188bf3e38edd51db71b6e812e5ad91b365c42113579a9a21d6ae1763cd661abeb0d44818b48d0044852bbbde748d0d553e3248e6b8c8b96626955e558ea3545d37bdf8678650846328a192a3094499e278f97ffe373fb84b66cf632cf310e2f9f7bf9796949d8e3df3ce3449962ef94e802866b15a96f639a01563196eebcf5d4c44874b04fe0af19f5e529da8b5c84c4a7720c4a4e376853a62803f147a0b02af0cdb84c8beb82943544e818a405dac88240d5d16163dcd305863ae3e23cbd30a3afee464d3c650584b3f0a4d18d433629584de57bfeae052f0ee56fcbe9e99fb8889330cfde95c2acf458a9547d845d9f16d61c91086e6b093c3231f4ef8ee1d9a483b3ff64e5e1dd458ab1498d5c9ffad7dcffc08f3c17e3471e5d7864d7ff46e3edbd31006cc007692082ab2b876e00003437ae98a12fb5113f30fe0273d6e54bb724e1a68231b514a684c652d9b3221f1002d107607e95690f42441a42fb27ea8c06bff93989868b69b7d89595aff235177a7033cd8460b5ce72d693a465ed5f32db2eb84de6a073df764b171bf95d989fb1d5aecf51a035b6b3a2598178c626355dd45fcfd7418cbefa7266408ead0b0758bdb20458ca2a9e17c4948ed2b448ee0b05c9ca40d2737f18b5d55c1bbcdc54d8d84057211148fd29c673a4d9d40c9ea95934adbd92cf51bc04bb5a129de5e61e745549c3661216cc95ca8bdbaf1300afa4a1b217520498471e25786535183bc9f9e807d5e2f8a719371b36f582b89829c3d122f609d6fbab9ba3f9b531254cf8f136da347fca26c134038e9fe5c37a20a747273a6312a2c8c54a9ef16f1309704b4c6e8f28c64b120c7fc4527250580de7febe7bed26976a2b5f50af3d391005b06216946b0cb83029848092f473b0504a747c10302ead0743abf7879a6bcacf66c51ab74c85dcc9ab80ea97c8e410f4ca2be1496ada764b0d40710110b609b94959063cdd744bfff8a205cc78267451319181314c1ec3f0f7698c91592f5e876a6953cba7040a5dd5abba1064319ca4c9776a5d164b2378765b385c4bd046ece0c19853e5a6b0a95cc4e64ad056327209f6f98f085e2abad270930e1c74f462137184c7ad9cf88a73db662c15235e79065eed8c89e3ad88a68a51505dd09e042871d65204ef36b7958543b23dc4661cd796f98738d8638b3ec8612da6bbd01b3915a23076a55497b8442c6895f2d708e5212e3bc4a377849f690fbf2a4f40189d1416a1c30b841fdf035e97832af641162d221dfd9b9f636ba0e280a338bb5ee8fb9421216f6fab09b782dcc34190bc65f906dfcbf31a932c85440ca6e8e6f20c2a9a76a27a2cba65403ba8ebacccc9a282e29cb8373c24858e51f7f19fa0f484ff15f1f70a819a84abdf69f09c0a8d4fb84ff43f867a4574e1a517b8f3f3724388d90a82dd0ec5d207d40e72812e2b3cb098e9d0a491330fad438355e7bee0240e4fc3b99675ff5f51434746fa700a2bddc2573b2cb5ae6fdfe7130869fc26c95d800ec5870d63fc5b54256cec89f738d62f7921569b4b72ffa7d19823d2da72215a6f994f950945c00", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x78, 0x0, 0x6, {0x7, 0x5, 0x0, {0x4, 0x8000000000000001, 0xfffffffffffffc01, 0x0, 0x1cc2f0c3, 0x101, 0x4, 0x6, 0xbfb, 0x6000, 0x9, r9, r10, 0x8, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='system.posix_acl_access\x00', &(0x7f0000001800)={{}, {0x1, 0x3}, [{}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x1, r9}], {0x4, 0x6}, [{0x8, 0xa, r11}, {0x8, 0x0, 0xee00}], {0x10, 0xc}, {0x20, 0x20a949eeb91fb34e}}, 0x5c, 0x2) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 3m25.944679729s ago: executing program 4 (id=2674): r0 = socket$netlink(0x10, 0x3, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x4}], 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x6]}, 0x8) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f00000002c0)={0x10, {{0x29, 0x0, 0x37000000, @local, 0x1020000}}}, 0x88) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x200000c4, &(0x7f0000000100)={0x11, 0x9, 0x0, 0x1, 0xc, 0x6, @local}, 0x14) (async, rerun: 64) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async, rerun: 64) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000240)={0x9, [0x81, 0x6, 0x3600, 0x101, 0x3ff, 0x3, 0xba7, 0x0, 0x7]}, 0x16) (async) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="f800000055007ae62bbd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="0000000000000009b20000000000005f182ff4c2dcd06500000000000800000020000100", @ANYRES32=r4, @ANYBLOB="01020300ffffffff0000000000000000000000000800000020000100", @ANYRES32=r4, @ANYBLOB="00030300640101000000000000000000000000000800000020000100", @ANYRES32=r4, @ANYBLOB="01030100640101020000000000000000000000000800000020000100", @ANYRES32=r4, @ANYBLOB="00020000ac1414bb00000000000000000000000086dd000020000100", @ANYRES32=r4, @ANYBLOB="00000400000000000000000000000000000000000800000020000100", @ANYRES32=r4, @ANYBLOB="01010400000000000000000000000000000000008edd0000"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) 3m24.898138276s ago: executing program 4 (id=2676): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\b\x00', 0x78, 0x5, 0x2, 0x0, 0x13, '\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', '\x00', "0052008f", '\x00', ["fdfec5d5c01000", "00ad1c517100000000001c00", "440065eafeffff00", "000003cefd70f14003556000"]}) 3m24.210355232s ago: executing program 32 (id=2676): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\b\x00', 0x78, 0x5, 0x2, 0x0, 0x13, '\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', '\x00', "0052008f", '\x00', ["fdfec5d5c01000", "00ad1c517100000000001c00", "440065eafeffff00", "000003cefd70f14003556000"]}) 21.8662797s ago: executing program 0 (id=3369): socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48808}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip_vti0\x00'}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0xf5, 0xffff0000, 0x0, 0x6b, 0x5}) r1 = syz_usb_connect(0x3, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x5, 0xba34}}}}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x80, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x3151, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x3, 0x7, 0x13, 0x11, 0xc, 0x6, 0x7f, {0x6, 0x407c, 0x1, 0x4, 0x2b72, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36268a3afff3d3666", 0xb8) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r10, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0xbe, 0x5, 0x2f8f, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x1, 0x8, 0x8, 0x2a}}, 0x331b, 0x0, 0x8}}) connect$pppl2tp(r9, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0xd1d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x32) sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 18.624069489s ago: executing program 0 (id=3380): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "16a8bc", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x40}]}}}}}}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a40)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.345715074s ago: executing program 2 (id=3382): prctl$PR_SCHED_CORE(0x3e, 0x2000001, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x2000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x100, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x100, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_dev$sndpcmc(&(0x7f0000000740), 0x1, 0x8140) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000740), 0x1, 0x8140) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$sg(0x0, 0xa, 0x8001) (async) syz_open_dev$sg(0x0, 0xa, 0x8001) socket$inet(0x2, 0x2, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) syz_usb_connect$cdc_ecm(0x4, 0x187, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x175, 0x1, 0x1, 0x2, 0x60, 0x3, "", [{{0x9, 0x4, 0x0, 0xd2, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xa, 0x24, 0x6, 0x0, 0x0, "e4708c4ed2"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x6, 0x1ff, 0xe}, [@mdlm_detail={0x8d, 0x24, 0x13, 0x9, "4e940cc0f066e8e2759753434805b17bad178cf2aea9ff9fe2fbf5c27a84c585c28ec03e5538369d23a46c86cecfc38aac7db734696faef92cb72fd6e39630f1b0aceaf92c4808a41009ba4030ddb8e1412a77a94d146b2bea6e787a70641bf67a0c6f6d44493bc68be3d4b83244f415ac7b608c60fee3d4e91bdd466e82e8e666cd3b54af60a351ee"}, @acm={0x4, 0x24, 0x2, 0x4}, @mdlm_detail={0x9b, 0x24, 0x13, 0xe, "fd7f87c9af58b4f63cee787b7a4d6d276b733314c236e3ffe077e74004198c71a1fa6daca3df31b8c6c62ae8274bf65a6e5789c7603a453d10a9044e13f95914912d6b79d6944d91ea4a1856b221863746e4963115cba20aae249abd5755dd318706e10997cd0e088f693bba32c50b259b3e9439587c97bd5715848227ef9a0755ccbbe1b747443340b9287f693a4e54fab25927f7ebeb"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x7f, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x6}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x8, 0x8, 0x8, 0x10, 0x4}, 0x1c, &(0x7f00000005c0)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5f, "2dab2191ebe5789b1a85d702cb916883"}]}, 0x7, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41f}}, {0xa2, &(0x7f0000000640)=@string={0xa2, 0x3, "9db6bc9ebd9c8d2e35ad94ec5f20344b9c01fea61d0fa0fd1442e6e30da17c9f746607653a86d55c770a99438cef9dfb51c773d6d95305b88c85b0cc0154c8707f9fd81f774e51d11aae77ba6502df85958c4528fa6d292f4cc155a30b57886dce7ee149b0d2be24e9acc50f074b472a005b032bbc37be9e470a55c89d990bb80c55de27ce5dbd664c9c04074d6af2a6fa338cb85abb746c55bb976fc2ed847e"}}, {0x94, &(0x7f0000000840)=@string={0x94, 0x3, "d47df3165a1011cdd26409f54b27cd7f71bef5b449d8c87694087c08e9d3d0518f33e51a3b4fac159c0231267e7d403d3feb671eb19c547fd6c7d0731bb1ebd6ca2b5c7d845c72ac3809a4611574482b0fed4c0894338c074670467b4502cc9fd98d719bb2a8e290e3ed962556e90193d348098ec10d92cf33094f29e270808f03756d3869f146875f909a84b71916db004a"}}, {0xc8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="c80369dd74f07b4f46fba088abb9aec97329477ca13698eb130c333afa6a1b6cf73686b3d59e4d5ae71287808c33a27fc73dd66b10110d0362fa55ca5d1a44a13e91759b629d886fa492cb0c2f32546e1f4fbb92ef52397458e3286071fac09fc5a5bfcfd882396dc2f2898374e425d229f5b290a3681732434c5114b06d6f9494f5c2ff104a17e2af36b80329f4020147e0ce56d1029c2df8497a1ed9ec767a21128c14e3d570befa9a4f290f1718410da0f79b8c8812091a35d4c57c28694d621eda10822908d316e5cfa210f1e66e840efc3de1b9fb169668b16762c2aa4a5791e0fe56c2e7c03b32c871b1c2a9b4430ee8b526a2a52b555b1daa34dbeb22d544ca883129b262800f85b1c80401713bc1757c76dfdc1fc35b1376d4196dd4000e7fbc9f9a5398daabaf296a8ab6b0c6baddf4c3e414b887486f8ecb7a6f06a4e5a786db2e921ec3752a9307de9728ea208d3a3620c627d05caaf762da1900eb8c4eef82bdba0561807299249a71dc4ec5babba845c44ec364c3"]}, {0x4f, &(0x7f0000000a00)=@string={0x4f, 0x3, "4376270b29b28859979ec8d20b3ef634896b0e92a8c21d9de54596d09e407d3ac53c7493ea2de8774f1c7e8849fb3f96ff9e630d853f210566ddef2a47c1fd91357acafece9c41e03f82e4d22a"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x458}}]}) (async) syz_usb_connect$cdc_ecm(0x4, 0x187, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x175, 0x1, 0x1, 0x2, 0x60, 0x3, "", [{{0x9, 0x4, 0x0, 0xd2, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xa, 0x24, 0x6, 0x0, 0x0, "e4708c4ed2"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x6, 0x1ff, 0xe}, [@mdlm_detail={0x8d, 0x24, 0x13, 0x9, "4e940cc0f066e8e2759753434805b17bad178cf2aea9ff9fe2fbf5c27a84c585c28ec03e5538369d23a46c86cecfc38aac7db734696faef92cb72fd6e39630f1b0aceaf92c4808a41009ba4030ddb8e1412a77a94d146b2bea6e787a70641bf67a0c6f6d44493bc68be3d4b83244f415ac7b608c60fee3d4e91bdd466e82e8e666cd3b54af60a351ee"}, @acm={0x4, 0x24, 0x2, 0x4}, @mdlm_detail={0x9b, 0x24, 0x13, 0xe, "fd7f87c9af58b4f63cee787b7a4d6d276b733314c236e3ffe077e74004198c71a1fa6daca3df31b8c6c62ae8274bf65a6e5789c7603a453d10a9044e13f95914912d6b79d6944d91ea4a1856b221863746e4963115cba20aae249abd5755dd318706e10997cd0e088f693bba32c50b259b3e9439587c97bd5715848227ef9a0755ccbbe1b747443340b9287f693a4e54fab25927f7ebeb"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x7f, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x6}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x8, 0x8, 0x8, 0x10, 0x4}, 0x1c, &(0x7f00000005c0)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5f, "2dab2191ebe5789b1a85d702cb916883"}]}, 0x7, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41f}}, {0xa2, &(0x7f0000000640)=@string={0xa2, 0x3, "9db6bc9ebd9c8d2e35ad94ec5f20344b9c01fea61d0fa0fd1442e6e30da17c9f746607653a86d55c770a99438cef9dfb51c773d6d95305b88c85b0cc0154c8707f9fd81f774e51d11aae77ba6502df85958c4528fa6d292f4cc155a30b57886dce7ee149b0d2be24e9acc50f074b472a005b032bbc37be9e470a55c89d990bb80c55de27ce5dbd664c9c04074d6af2a6fa338cb85abb746c55bb976fc2ed847e"}}, {0x94, &(0x7f0000000840)=@string={0x94, 0x3, "d47df3165a1011cdd26409f54b27cd7f71bef5b449d8c87694087c08e9d3d0518f33e51a3b4fac159c0231267e7d403d3feb671eb19c547fd6c7d0731bb1ebd6ca2b5c7d845c72ac3809a4611574482b0fed4c0894338c074670467b4502cc9fd98d719bb2a8e290e3ed962556e90193d348098ec10d92cf33094f29e270808f03756d3869f146875f909a84b71916db004a"}}, {0xc8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="c80369dd74f07b4f46fba088abb9aec97329477ca13698eb130c333afa6a1b6cf73686b3d59e4d5ae71287808c33a27fc73dd66b10110d0362fa55ca5d1a44a13e91759b629d886fa492cb0c2f32546e1f4fbb92ef52397458e3286071fac09fc5a5bfcfd882396dc2f2898374e425d229f5b290a3681732434c5114b06d6f9494f5c2ff104a17e2af36b80329f4020147e0ce56d1029c2df8497a1ed9ec767a21128c14e3d570befa9a4f290f1718410da0f79b8c8812091a35d4c57c28694d621eda10822908d316e5cfa210f1e66e840efc3de1b9fb169668b16762c2aa4a5791e0fe56c2e7c03b32c871b1c2a9b4430ee8b526a2a52b555b1daa34dbeb22d544ca883129b262800f85b1c80401713bc1757c76dfdc1fc35b1376d4196dd4000e7fbc9f9a5398daabaf296a8ab6b0c6baddf4c3e414b887486f8ecb7a6f06a4e5a786db2e921ec3752a9307de9728ea208d3a3620c627d05caaf762da1900eb8c4eef82bdba0561807299249a71dc4ec5babba845c44ec364c3"]}, {0x4f, &(0x7f0000000a00)=@string={0x4f, 0x3, "4376270b29b28859979ec8d20b3ef634896b0e92a8c21d9de54596d09e407d3ac53c7493ea2de8774f1c7e8849fb3f96ff9e630d853f210566ddef2a47c1fd91357acafece9c41e03f82e4d22a"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x458}}]}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000100)="0000000000000000000000008100", 0xe, 0x4040400, &(0x7f0000000040)={0x11, 0x6, r3, 0x1, 0x3b, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) (async) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x4, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x400}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 16.165222886s ago: executing program 2 (id=3390): socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48808}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip_vti0\x00'}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0xf5, 0xffff0000, 0x0, 0x6b, 0x5}) r1 = syz_usb_connect(0x3, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x5, 0xba34}}}}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x80, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x3151, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x3, 0x7, 0x13, 0x11, 0xc, 0x6, 0x7f, {0x6, 0x407c, 0x1, 0x4, 0x2b72, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36268a3afff3d3666", 0xb8) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r10, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0xbe, 0x5, 0x2f8f, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x1, 0x8, 0x8, 0x2a}}, 0x331b, 0x0, 0x8}}) connect$pppl2tp(r9, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0xd1d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x32) sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 15.438602282s ago: executing program 0 (id=3397): r0 = syz_ublk_setup_io_uring(0x1580, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r4 = getpgrp(0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0x7f3, 0x0, 0x0, 0x1000, 0xffffffff, r4}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x401, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x1ffc, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x7a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (fail_nth: 6) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000440)={0x3, &(0x7f0000000340)=[{0x24, '\x00', @data=0x4, 0xad}]}) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000680)={{0x4, 0x4, 0x0, 0x4, 0x9}, &(0x7f0000000500)=[{}, {}]}) 14.907470039s ago: executing program 0 (id=3398): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x39, 0xc8, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x20, 0x22, 0x28, {0x28, 0xa, "c2631385269c87a15ca2bd283cbdeacc918d0fb74237cc6e442a52973661d609005544380000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff9, 0x40, 0xc, 0xffffffc0, 0x40, 0x1, 0x1}, &(0x7f00000003c0)=0x9c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x10, 0x13, 0x114}, &(0x7f0000000580)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=ANY=[@ANYRESHEX=0x0], 0x20}, {&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0c001f0004009ecd6c60e6dd4140f78008000500", @ANYRES32=r2, @ANYBLOB], 0x224}], 0x2, 0x0, 0x0, 0xc010}, 0x40080) syz_kvm_setup_cpu$x86(r2, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x4d, 0x3, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = memfd_create(&(0x7f0000000240)='([${:+[&{}^}^(\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000280)={r11, 0x0, 0x1000, 0x8000}) 14.119224799s ago: executing program 2 (id=3400): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4$alg(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000006b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20000001) read$alg(r3, &(0x7f0000000000)=""/12, 0xc) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xb) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000280)=[{0x0, 0x3, {0x1, 0x1, 0x3}, {0x1, 0xf0}, 0x1}, {0x2, 0x2, {0x1, 0x1}, {0x1, 0xff}, 0x1, 0x1}, {0x3, 0x4000000001, {0x0, 0xff, 0x3}, {0x0, 0xff}, 0xfe, 0x1}, {0x3, 0x3, {0x0, 0x0, 0x2}, {0x1, 0x0, 0x3}, 0xff, 0xfe}, {0x2, 0x3, {0x1, 0x0, 0x2}, {0x0, 0x1, 0x2}}, {0x0, 0x0, {0x0, 0xf, 0x1}, {0x0, 0xff, 0x3}, 0x1, 0xff}, {0x0, 0x3, {}, {0x1, 0xff, 0x3}, 0x1, 0x1}], 0xe0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r5, r5) setpgid(0x0, r5) wait4(r5, 0x0, 0x2, 0x0) r6 = syz_clone(0x22204011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r5, 0x0, 0x4, 0x0) setpgid(r6, r6) setpgid(0x0, r6) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f00000002c0)=0x9, 0x4) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty, 0x400}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r8, &(0x7f00000000c0), 0x28) 12.832651432s ago: executing program 1 (id=3402): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x80000, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x21, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x40, 0x1}) syz_io_uring_setup(0x36c, &(0x7f0000000480)={0x0, 0x7c33, 0x80, 0x3, 0x275, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000500), &(0x7f0000000080)) syz_ublk_add_dev(r0, r4, r2, r3, &(0x7f0000000540)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3b4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x1104, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 12.665507676s ago: executing program 1 (id=3403): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\b\x00', 0x78, 0x5, 0x2, 0x0, 0x13, '\x00', '\x00', "0052008f", '\x00', ["fdfec5d5c01000", "00ad1c517100000000001c00", "440065eafeffff00", "000003cefd70f14003556000"]}) 12.55366707s ago: executing program 2 (id=3404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x0) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000000e00)={0x1c, &(0x7f0000000240)={0x40, 0x1, 0x6, "a56fd18a80a2"}, 0x0, 0x0}) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d40)={0x40, 0x14, 0x10, "b856d2e9542b23d02b84c0fa6e0b8460"}, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="2046ae0000000410a2deaf30"], 0x0, 0x0, &(0x7f0000000f80)={0x40, 0xb, 0x2, "d1b1"}, &(0x7f0000000fc0)={0x40, 0xf, 0x2, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.526615881s ago: executing program 1 (id=3405): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) (async) sysinfo(&(0x7f0000000000)=""/104) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000240)=0x800001, 0x4) (async) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0xffff8c66, @empty, 0x1fe}, 0x1c) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f31fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066ba000000000f3066b9bb0800000f32", 0x4a}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000100)=0x3fe, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r1, 0x100002) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) copy_file_range(r8, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x0) (async) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000014000180060001000200000008000300e000000276018e49b9a9541b0e96a6c621454651f11f1034ea18d710cbf3"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 11.769214968s ago: executing program 3 (id=3407): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30"], 0x128}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900000000000000000000000000000000000000e4ffffff00", [0x8, 0xffffffff9673e359]}}) 11.691580296s ago: executing program 0 (id=3408): r0 = syz_ublk_setup_io_uring(0x1580, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r4 = getpgrp(0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0x7f3, 0x0, 0x0, 0x1000, 0xffffffff, r4}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x401, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x1ffc, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x7a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (fail_nth: 7) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000440)={0x3, &(0x7f0000000340)=[{0x24, '\x00', @data=0x4, 0xad}]}) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000680)={{0x4, 0x4, 0x0, 0x4, 0x9}, &(0x7f0000000500)=[{}, {}]}) 11.299594483s ago: executing program 3 (id=3409): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)='H', 0x1}], 0x1}}], 0x1, 0x200400d1) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16=r0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.199202821s ago: executing program 1 (id=3410): socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48808}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip_vti0\x00'}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0xf5, 0xffff0000, 0x0, 0x6b, 0x5}) r1 = syz_usb_connect(0x3, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x5, 0xba34}}}}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x80, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x3151, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x3, 0x7, 0x13, 0x11, 0xc, 0x6, 0x7f, {0x6, 0x407c, 0x1, 0x4, 0x2b72, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36268a3afff3d3666", 0xb8) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r10, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0xbe, 0x5, 0x2f8f, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x1, 0x8, 0x8, 0x2a}}, 0x331b, 0x0, 0x8}}) connect$pppl2tp(r9, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0xd1d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x32) sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 11.120898244s ago: executing program 0 (id=3412): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) dup(r2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000000}, 0xc800) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c801000000"], 0x0) 11.030954644s ago: executing program 5 (id=3413): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x80000, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x21, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x40, 0x1}) syz_io_uring_setup(0x36c, &(0x7f0000000480)={0x0, 0x7c33, 0x80, 0x3, 0x275, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000500), &(0x7f0000000080)) syz_ublk_add_dev(r0, r4, r2, r3, &(0x7f0000000540)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3b4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x1800, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 10.909361647s ago: executing program 3 (id=3414): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000800)={0x2, 0x1f90, @empty}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) recvmmsg$unix(r3, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 10.797030252s ago: executing program 5 (id=3415): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\b\x00', 0x78, 0x5, 0x2, 0x0, 0x13, '\x00', '\x00', "0052008f", '\x00', ["fdfec5d5c01000", "00ad1c517100000000001c00", "440065eafeffff00", "000003cefd70f14003556000"]}) 10.732194075s ago: executing program 5 (id=3416): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d07}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x1, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x40000001, 0x3, 0x38, 0xff, 0x84, 0x7, 0x6, 0x0, 0x8, 0x3, 0x4, 0x8, 0x24ab}], 0xffffffff}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x35, 0x0, @void}, 0x10) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb5, 0x5, 0x6, 0x0, 0x7fffffff, 0x4, 0xf, 0xc0, 0x40, 0x4, 0x60, 0x6, 0x0, 0x6e8, 0xffffbfc3, 0xf0, 0x4, 0x0, 0x7, '\x00', 0xcb, 0xffffffffffffff59}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x8000000000, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x8, 0x2, 0x1, 0x40000000000000b6, 0x1], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000280)=@x86={0x3, 0x0, 0xf1, 0x0, 0x4, 0x9, 0x8b, 0x31, 0x10, 0x1, 0x4, 0x2, 0x0, 0x7, 0x3, 0x21, 0x0, 0x7, 0x7, '\x00', 0x1, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x201000, 0x1) 10.674724879s ago: executing program 3 (id=3417): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000a80)=""/193, &(0x7f0000000b80)=0xc1) (async) timerfd_create(0x6, 0x80000) (async) quotactl_fd$Q_SETQUOTA(r1, 0x80001800, 0x0, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) (async) syz_usb_connect(0x1, 0x24, &(0x7f0000000bc0)=ANY=[], 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000002c01040000000000000068a8000000080002400000000120000000060a01040000000000000000020000000c0006400000000000000005130000003d"], 0x64}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}}, 0x8004) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2400, 0x0) close(r6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20004000) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000000)=0xffffffff, 0x4) 10.494858995s ago: executing program 3 (id=3418): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)=ANY=[@ANYBLOB="600000000206010800000000000000000000000c050005000a0000000900020073797a300004000005000100070000001400078008000840000000d30800064000001700050004000000000011000300686173683a69702c706f727400000000"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x4000) fsopen(0x0, 0x0) r5 = gettid() getpeername(r0, &(0x7f0000000340)=@nl=@proc, &(0x7f0000000480)=0x80) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r7, r12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e65, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) 10.378421744s ago: executing program 5 (id=3419): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_AIE_OFF(r2, 0x7002) setitimer(0xc3d0181c873aaa3f, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000ffa000/0x4000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x10, 0x2}, {0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a00", @ANYRES64=r3], 0x44}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0xd) 10.07742981s ago: executing program 5 (id=3420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x1c564}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0xba01, 0x0, 0x40d0}, 0x810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x7, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x1, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000500)=0x1) 9.400870211s ago: executing program 2 (id=3421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c0009"], 0x3c}, 0x1, 0x11}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xd, 0x0, 0x7, 0xffffff81, 0x8004, 0x4, 0x5}]}) (async) epoll_create(0x2) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xfffffffffffff37f) 9.248315545s ago: executing program 1 (id=3422): r0 = socket(0x6, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000480)={r3, 0x9, 0x3, "4dcf23"}, 0xb) ptrace$setregset(0x4205, r1, 0x4, 0xfffffffffffffffe) ptrace$cont(0x20, r1, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 9.189236204s ago: executing program 3 (id=3423): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd09118", 0x77}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54a", 0x20}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5", 0xa6}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.048930572s ago: executing program 2 (id=3424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x80000, 0x3, 0x4000055}, &(0x7f0000000240)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000540)=@IORING_OP_SHUTDOWN={0x22, 0x40, 0x0, r5, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r6}}) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="52015002023a5d40f905ffff9f61010203010902120001bd00100200007fc700ff02c106"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) bind$unix(r9, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r9, 0x0) connect$unix(r8, &(0x7f0000000640)=@file={0x1}, 0x6e) io_uring_enter(r1, 0xfffffffd, 0xffffffdd, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xac}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) 9.001838849s ago: executing program 1 (id=3425): openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000840), 0xb55, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x1b, 0x1, 0x200, "46fbe936e166eef826bf052b6cbe7fea32f9c64484a97077d69b02f6d484c517", 0x35315258}) (async) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) (async) syz_usb_control_io$uac2(r6, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r7 = io_uring_setup(0x895, &(0x7f0000000040)={0x0, 0x3cb1, 0x40, 0xa, 0x20002fa}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}]}, 0x38}}, 0x0) 0s ago: executing program 5 (id=3426): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\b\x00', 0x78, 0x5, 0x2, 0x0, 0x13, '\x00', '\x00', "0052008f", '\x00', ["fdfec5d5c01000", "00ad1c517100000000001c00", "440065eafeffff00", "000003cefd70f14003556000"]}) kernel console output (not intermixed with test programs): ad = error: -19 [ 816.013399][ T5682] dvb-usb: error while querying for an remote control event. [ 816.144821][ T5682] m920x_read = error: -19 [ 816.150533][ T5682] dvb-usb: error while querying for an remote control event. [ 816.195857][ T5696] asus 0003:0B05:1ABE.0035: Asus handshake 5a failed to receive ack: -71 [ 816.263902][ T5696] usb 3-1: USB disconnect, device number 73 [ 816.285368][ T10] m920x_read = error: -19 [ 816.297215][ T10] dvb-usb: error while querying for an remote control event. [ 816.446037][ T10] m920x_read = error: -19 [ 816.462759][ T10] dvb-usb: error while querying for an remote control event. [ 816.507428][ T5704] usb usb44-port1: unable to enumerate USB device [ 816.604766][ T5704] m920x_read = error: -19 [ 816.626389][ T5704] dvb-usb: error while querying for an remote control event. [ 816.754958][ T5704] m920x_read = error: -19 [ 816.762360][ T5704] dvb-usb: error while querying for an remote control event. [ 816.836785][ T5696] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 816.900311][ T10] m920x_read = error: -19 [ 816.915341][ T10] dvb-usb: error while querying for an remote control event. [ 816.997210][ T5696] usb 2-1: device descriptor read/64, error -71 [ 817.044923][ T10] m920x_read = error: -19 [ 817.060928][ T10] dvb-usb: error while querying for an remote control event. [ 817.204971][ T10] m920x_read = error: -19 [ 817.248042][ T10] dvb-usb: error while querying for an remote control event. [ 817.277807][ T5696] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 817.312298][ T5762] usb 4-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 817.340958][ T5762] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 817.364100][ T5762] usb 4-1: media controller created [ 817.384871][ T10] m920x_read = error: -19 [ 817.405154][ T10] dvb-usb: error while querying for an remote control event. [ 817.446402][ T5762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 817.455045][ T5696] usb 2-1: device descriptor read/64, error -71 [ 817.488530][ T5762] dvb_usb_rtl28xxu 4-1:0.0: unknown tuner MT2063 [ 817.501000][ T5704] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 817.552524][ T5682] m920x_read = error: -19 [ 817.568601][ T5682] dvb-usb: error while querying for an remote control event. [ 817.597907][ T5696] usb usb2-port1: attempt power cycle [ 817.622977][T15468] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 817.643606][T15468] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 817.649285][ T5762] usb 4-1: USB disconnect, device number 61 [ 817.667437][T15468] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 817.686349][T15468] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 817.697790][T15468] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 817.757696][ T5682] m920x_read = error: -19 [ 817.766798][ T5704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 817.785232][ T5682] dvb-usb: error while querying for an remote control event. [ 817.804953][ T5704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 817.823887][ T5704] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 817.833816][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.842499][ T5704] usb 3-1: Product: syz [ 817.846940][ T5704] usb 3-1: Manufacturer: syz [ 817.851703][ T5704] usb 3-1: SerialNumber: syz [ 817.925522][ T5682] m920x_read = error: -19 [ 817.930306][ T5682] dvb-usb: error while querying for an remote control event. [ 818.015265][ T5696] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 818.044894][ T5682] m920x_read = error: -19 [ 818.060411][ T5682] dvb-usb: error while querying for an remote control event. [ 818.079910][T17734] openvswitch: netlink: IPv6 tunnel dst address is zero [ 818.089418][ T5696] usb 2-1: device descriptor read/8, error -71 [ 818.104039][T17734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.205935][ T10] m920x_read = error: -19 [ 818.211558][ T10] dvb-usb: error while querying for an remote control event. [ 818.280576][ T5704] usb 3-1: usb_control_msg returned -71 [ 818.309522][ T5704] usbtmc 3-1:1.0: can't read capabilities [ 818.334144][ T5704] usbtmc 3-1:1.0: Failed to submit iin_urb [ 818.344816][ T10] m920x_read = error: -19 [ 818.356505][ T10] dvb-usb: error while querying for an remote control event. [ 818.364824][ T5696] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 818.377931][ T5704] usbtmc 3-1:1.0: probe with driver usbtmc failed with error -90 [ 818.408601][ T5704] usbtouchscreen 3-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 818.426496][ T5696] usb 2-1: device descriptor read/8, error -71 [ 818.489868][ T5704] usb 3-1: USB disconnect, device number 74 [ 818.549092][ T5682] m920x_read = error: -19 [ 818.565062][ T5696] usb usb2-port1: unable to enumerate USB device [ 818.571882][ T5682] dvb-usb: error while querying for an remote control event. [ 818.726420][ T5682] m920x_read = error: -19 [ 818.766919][ T5682] dvb-usb: error while querying for an remote control event. [ 818.905219][ T5704] m920x_read = error: -19 [ 818.916343][ T5704] dvb-usb: error while querying for an remote control event. [ 819.056043][ T5704] m920x_read = error: -19 [ 819.078110][ T5704] dvb-usb: error while querying for an remote control event. [ 819.224539][T17736] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.238096][ T5682] m920x_read = error: -19 [ 819.254593][ T5682] dvb-usb: error while querying for an remote control event. [ 819.285933][T17736] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.312701][T17736] bridge_slave_0: entered allmulticast mode [ 819.330757][T17736] bridge_slave_0: entered promiscuous mode [ 819.350579][T17736] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.366830][T17736] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.385223][ T5682] m920x_read = error: -19 [ 819.390156][ T5682] dvb-usb: error while querying for an remote control event. [ 819.402712][T17736] bridge_slave_1: entered allmulticast mode [ 819.413097][T17736] bridge_slave_1: entered promiscuous mode [ 819.471507][T17736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.486934][T17736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.515990][ T5704] m920x_read = error: -19 [ 819.520860][ T5704] dvb-usb: error while querying for an remote control event. [ 819.580348][T17736] team0: Port device team_slave_0 added [ 819.602519][T17736] team0: Port device team_slave_1 added [ 819.645938][ T5704] m920x_read = error: -19 [ 819.655699][ T5704] dvb-usb: error while querying for an remote control event. [ 819.722605][T17736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.730627][T17736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.766338][T17736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.775457][ T4927] Bluetooth: hci0: command tx timeout [ 819.787669][ T5682] m920x_read = error: -19 [ 819.792374][T17758] netlink: 'syz.5.3182': attribute type 22 has an invalid length. [ 819.807160][ T5682] dvb-usb: error while querying for an remote control event. [ 819.816907][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3182'. [ 819.836747][T17736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.843907][T17736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.912409][T17736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.925625][ T5682] m920x_read = error: -19 [ 819.934073][ T5682] dvb-usb: error while querying for an remote control event. [ 819.985183][T17764] netlink: 'syz.1.3184': attribute type 1 has an invalid length. [ 820.064914][ T5704] m920x_read = error: -19 [ 820.074620][ T5704] dvb-usb: error while querying for an remote control event. [ 820.112078][ T30] kauditd_printk_skb: 214 callbacks suppressed [ 820.112093][ T30] audit: type=1326 audit(1786239892.839:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.2.3186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd22239e0d9 code=0x0 [ 820.147274][ T5809] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.158087][ T5809] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.171577][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'. [ 820.196014][ T5682] m920x_read = error: -19 [ 820.217962][ T5682] dvb-usb: error while querying for an remote control event. [ 820.337566][ T5704] m920x_read = error: -19 [ 820.353268][ T5704] dvb-usb: error while querying for an remote control event. [ 820.451169][T17736] hsr_slave_0: entered promiscuous mode [ 820.458163][T17736] hsr_slave_1: entered promiscuous mode [ 820.486855][ T5704] m920x_read = error: -19 [ 820.498511][ T5704] dvb-usb: error while querying for an remote control event. [ 820.617922][ T5809] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.628345][ T5704] m920x_read = error: -19 [ 820.635843][ T5704] dvb-usb: error while querying for an remote control event. [ 820.644272][ T5809] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.754774][ T5682] m920x_read = error: -19 [ 820.769272][ T5682] dvb-usb: error while querying for an remote control event. [ 820.903523][ T5682] m920x_read = error: -19 [ 820.916174][ T5696] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 820.941161][ T5682] dvb-usb: error while querying for an remote control event. [ 821.054421][T17736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.074973][ T5682] m920x_read = error: -19 [ 821.086545][ T5682] dvb-usb: error while querying for an remote control event. [ 821.105908][T17736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.134833][ T5696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.147775][ T5696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.162589][ T5696] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 821.175676][ T5696] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 821.188928][ T5696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.211034][ T9] m920x_read = error: -19 [ 821.215695][ T9] dvb-usb: error while querying for an remote control event. [ 821.232579][ T5696] usb 6-1: config 0 descriptor?? [ 821.309625][T17736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.320527][T17736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.334827][ T5682] m920x_read = error: -19 [ 821.340136][ T5682] dvb-usb: error while querying for an remote control event. [ 821.354763][ T5704] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 821.362516][ T9] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 821.475818][ T5682] m920x_read = error: -19 [ 821.480543][ T5682] dvb-usb: error while querying for an remote control event. [ 821.502088][T17736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.512735][ T9] usb 2-1: device descriptor read/64, error -71 [ 821.520318][T17736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.535520][ T5704] usb 4-1: Using ep0 maxpacket: 8 [ 821.542762][ T5704] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.558055][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 821.572882][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 821.585853][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 821.605710][ T10] m920x_read = error: -19 [ 821.611473][ T10] dvb-usb: error while querying for an remote control event. [ 821.619069][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 821.643010][ T5704] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 821.657881][ T5696] usbhid 6-1:0.0: can't add hid device: -71 [ 821.674903][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 821.689734][ T5704] usb 4-1: Product: syz [ 821.700195][ T5696] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 821.710955][ T5704] usb 4-1: Manufacturer: syz [ 821.722061][ T5696] usb 6-1: USB disconnect, device number 45 [ 821.749502][ T5704] usb 4-1: SerialNumber: syz [ 821.757917][ T9] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 821.782127][ T5704] usb 4-1: config 0 descriptor?? [ 821.814527][ T187] m920x_read = error: -19 [ 821.824343][ T187] dvb-usb: error while querying for an remote control event. [ 821.836113][T17736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.846628][T17736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.857674][ T4927] Bluetooth: hci0: command tx timeout [ 821.914793][ T9] usb 2-1: device descriptor read/64, error -71 [ 821.954830][ T187] m920x_read = error: -19 [ 821.960119][ T187] dvb-usb: error while querying for an remote control event. [ 822.025811][ T9] usb usb2-port1: attempt power cycle [ 822.046183][T17789] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3192'. [ 822.058512][ T5704] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 822.066400][ T5704] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 822.079729][ T5696] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 822.095070][ T10] m920x_read = error: -19 [ 822.104470][ T10] dvb-usb: error while querying for an remote control event. [ 822.218622][T17736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 822.228447][ T10] m920x_read = error: -19 [ 822.237454][ T10] dvb-usb: error while querying for an remote control event. [ 822.244595][T17736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 822.257394][T17736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 822.264947][ T5696] usb 6-1: Using ep0 maxpacket: 32 [ 822.287126][ T5696] usb 6-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 822.308339][ T5696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.321332][T17736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.334433][ T5696] usb 6-1: Product: 雴嶓ᣯ髾ꦵ죪႙ꕃࡩ쩇무瞄凟æšï´ºç»…紸탼￾七娣ë‚鮯蕧㥌ᬼ骓헹ꠜ厜㶈㈭꼹囂罔ï è®šä«´á‹Ÿè½œç»‰åŸ†ï¸«ãµºä³é´ã—§ï»¬ä—­ï‰ˆç––ï¼’æ¹æ¸‘圕鎋⧞▪녨쑿柵씧밳ì›ì¿¹á‰”짷뼵천놭ꀿó£–⭅䫂燗ꅈ慬æ儷뉂ﴞ䠂耥啶䵖⋯巄㣥ᴄ㛞䄕〈륢ì¸á…â“⸪礆웅æ•å¹ï¯œãˆæ’« [ 822.368615][T17736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 822.376551][ T5696] usb 6-1: Manufacturer: И [ 822.384839][ T9] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 822.386309][T17736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.402514][T17736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 822.412880][ T5696] usb 6-1: SerialNumber: syz [ 822.424996][ T10] m920x_read = error: -19 [ 822.431218][ T10] dvb-usb: error while querying for an remote control event. [ 822.451454][ T9] usb 2-1: device descriptor read/8, error -71 [ 822.464432][T17736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.473172][ T5696] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 822.497596][ T5696] usb 6-1: no configuration chosen from 1 choice [ 822.562048][T17808] loop4: detected capacity change from 0 to 7 [ 822.568723][ T10] m920x_read = error: -19 [ 822.573383][ T10] dvb-usb: error while querying for an remote control event. [ 822.589178][ T5704] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 822.602825][T17808] Dev loop4: unable to read RDB block 7 [ 822.609732][ T5704] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 822.620943][T17808] loop4: AHDI p1 p2 p3 p4 [ 822.625714][T17808] loop4: partition table partially beyond EOD, truncated [ 822.640846][ T5704] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 822.652146][T17808] loop4: p1 start 1601398130 is beyond EOD, truncated [ 822.661270][T17808] loop4: p2 start 1702059890 is beyond EOD, truncated [ 822.671449][T17808] loop4: p3 size 150995200 extends beyond EOD, truncated [ 822.715956][ T5704] m920x_read = error: -19 [ 822.723228][ T9] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 822.731309][ T5704] dvb-usb: error while querying for an remote control event. [ 822.755362][T17736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.766243][ T9] usb 2-1: device descriptor read/8, error -71 [ 822.801985][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 822.817145][T17736] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.855200][ T10] m920x_read = error: -19 [ 822.873967][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.874527][ T10] dvb-usb: error while querying for an remote control event. [ 822.881305][ T5807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.911607][ T9] usb usb2-port1: unable to enumerate USB device [ 822.944001][T11263] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.951344][T11263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.035478][ T9] m920x_read = error: -19 [ 823.041436][ T9] dvb-usb: error while querying for an remote control event. [ 823.084158][T17736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.118348][T17555] usb 4-1: USB disconnect, device number 62 [ 823.147909][T17736] veth0_vlan: entered promiscuous mode [ 823.155486][ T10] m920x_read = error: -19 [ 823.160022][ T10] dvb-usb: error while querying for an remote control event. [ 823.178497][T17736] veth1_vlan: entered promiscuous mode [ 823.206385][T17736] veth0_macvtap: entered promiscuous mode [ 823.216432][T17736] veth1_macvtap: entered promiscuous mode [ 823.236988][T17736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.254578][T17736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.274922][ T10] m920x_read = error: -19 [ 823.282945][ T10] dvb-usb: error while querying for an remote control event. [ 823.318383][T11263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.335864][T11263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.375461][T11262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.424956][ T10] m920x_read = error: -19 [ 823.434774][ T10] dvb-usb: error while querying for an remote control event. [ 823.448438][T11252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.457126][T11252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.459330][T11262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.504162][T11252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.512771][T11252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.564883][ T10] m920x_read = error: -19 [ 823.569344][ T10] dvb-usb: error while querying for an remote control event. [ 823.685105][ T10] m920x_read = error: -19 [ 823.694947][ T10] dvb-usb: error while querying for an remote control event. [ 823.816458][ T10] m920x_read = error: -19 [ 823.825853][ T10] dvb-usb: error while querying for an remote control event. [ 823.945125][T15468] Bluetooth: hci0: command tx timeout [ 823.954872][ T5704] m920x_read = error: -19 [ 823.960256][ T5704] dvb-usb: error while querying for an remote control event. [ 824.077927][ T10] m920x_read = error: -19 [ 824.091051][ T10] dvb-usb: error while querying for an remote control event. [ 824.244811][ T5704] m920x_read = error: -19 [ 824.264177][ T5704] dvb-usb: error while querying for an remote control event. [ 824.385807][ T5704] m920x_read = error: -19 [ 824.417125][ T5704] dvb-usb: error while querying for an remote control event. [ 824.566627][ T10] m920x_read = error: -19 [ 824.590524][ T10] dvb-usb: error while querying for an remote control event. [ 824.724955][ T10] m920x_read = error: -19 [ 824.736992][T17555] usb 6-1: USB disconnect, device number 46 [ 824.748703][ T10] dvb-usb: error while querying for an remote control event. [ 824.904884][ T10] m920x_read = error: -19 [ 824.954441][ T10] dvb-usb: error while querying for an remote control event. [ 825.085161][ T5762] IPVS: starting estimator thread 0... [ 825.145814][ T10] m920x_read = error: -19 [ 825.161459][ T10] dvb-usb: error while querying for an remote control event. [ 825.194818][T17849] IPVS: using max 27 ests per chain, 64800 per kthread [ 825.284814][ T5704] m920x_read = error: -19 [ 825.295046][ T5704] dvb-usb: error while querying for an remote control event. [ 825.344898][ T5762] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 825.434809][ T5704] m920x_read = error: -19 [ 825.443615][ T5704] dvb-usb: error while querying for an remote control event. [ 825.484778][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 825.504744][ T5762] usb 6-1: Using ep0 maxpacket: 32 [ 825.523679][ T5762] usb 6-1: unable to get BOS descriptor or descriptor too short [ 825.546622][ T5762] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.565570][ T5704] m920x_read = error: -19 [ 825.570049][ T5704] dvb-usb: error while querying for an remote control event. [ 825.583004][ T5762] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 825.613066][ T5762] usb 6-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 825.639975][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.654809][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 825.662727][ T5762] usb 6-1: Product: syz [ 825.670695][ T10] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 825.688772][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.705162][ T5704] m920x_read = error: -19 [ 825.713593][ T5762] usb 6-1: Manufacturer: syz [ 825.715928][ T5704] dvb-usb: error while querying for an remote control event. [ 825.739451][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 825.753695][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 825.766866][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 825.768399][ T5762] usb 6-1: SerialNumber: syz [ 825.783921][ T10] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 825.797737][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.855275][ T5704] m920x_read = error: -19 [ 825.862665][ T5704] dvb-usb: error while querying for an remote control event. [ 825.874502][ T10] usb 2-1: config 0 descriptor?? [ 825.885783][T17851] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 825.919575][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input81 [ 825.994887][ T10] m920x_read = error: -19 [ 826.002208][ T10] dvb-usb: error while querying for an remote control event. [ 826.019308][ T4927] Bluetooth: hci0: command tx timeout [ 826.080298][ T5762] usb 6-1: 0:2 : does not exist [ 826.114971][ T5704] m920x_read = error: -19 [ 826.130287][ T5704] dvb-usb: error while querying for an remote control event. [ 826.144303][ T5762] usb 6-1: unknown interface protocol 0x4, assuming v1 [ 826.182827][ T5762] usb 6-1: cannot find UAC_HEADER [ 826.192229][ T5704] usb 2-1: USB disconnect, device number 114 [ 826.252906][ T10] m920x_read = error: -19 [ 826.271403][ T10] dvb-usb: error while querying for an remote control event. [ 826.333819][ T5762] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 826.363190][ T5762] usb 6-1: USB disconnect, device number 47 [ 826.396137][ T10] m920x_read = error: -19 [ 826.424186][ T10] dvb-usb: error while querying for an remote control event. [ 826.443072][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 826.567330][ T10] m920x_read = error: -19 [ 826.576146][ T10] dvb-usb: error while querying for an remote control event. [ 826.718411][ T10] m920x_read = error: -19 [ 826.728171][T17870] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3210'. [ 826.733316][ T10] dvb-usb: error while querying for an remote control event. [ 826.869617][ T10] m920x_read = error: -19 [ 826.875181][ T10] dvb-usb: error while querying for an remote control event. [ 826.919571][ T5762] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 826.948784][T17877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3213'. [ 826.985138][ T10] m920x_read = error: -19 [ 826.989735][ T10] dvb-usb: error while querying for an remote control event. [ 827.023893][T17880] loop4: detected capacity change from 0 to 7 [ 827.037777][T17880] Dev loop4: unable to read RDB block 7 [ 827.043508][T17880] loop4: AHDI p1 p2 p3 p4 [ 827.048652][T17880] loop4: partition table partially beyond EOD, truncated [ 827.055919][T17880] loop4: p1 start 1601398130 is beyond EOD, truncated [ 827.062792][T17880] loop4: p2 start 1702059890 is beyond EOD, truncated [ 827.072656][T17880] loop4: p3 size 150995200 extends beyond EOD, truncated [ 827.087636][ T5762] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 827.105297][ T5762] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.123530][ T5762] usb 3-1: config 0 interface 0 has no altsetting 0 [ 827.125583][ T5704] m920x_read = error: -19 [ 827.152646][ T5762] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 827.153457][ T5704] dvb-usb: error while querying for an remote control event. [ 827.170741][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.198308][ T5762] usb 3-1: config 0 descriptor?? [ 827.211370][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 827.304793][ T10] m920x_read = error: -19 [ 827.311001][ T10] dvb-usb: error while querying for an remote control event. [ 827.322508][T17891] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 827.329066][T17891] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 827.351746][T17891] vhci_hcd vhci_hcd.0: Device attached [ 827.388316][T17894] vhci_hcd: connection closed [ 827.388622][T11266] vhci_hcd vhci_hcd.0: stop threads [ 827.399263][T11266] vhci_hcd vhci_hcd.0: release socket [ 827.405228][T11266] vhci_hcd vhci_hcd.0: disconnect device [ 827.425265][ T10] m920x_read = error: -19 [ 827.434905][ T10] dvb-usb: error while querying for an remote control event. [ 827.564940][ T10] m920x_read = error: -19 [ 827.572590][ T10] dvb-usb: error while querying for an remote control event. [ 827.695358][ T10] m920x_read = error: -19 [ 827.711314][ T10] dvb-usb: error while querying for an remote control event. [ 827.834998][ T10] m920x_read = error: -19 [ 827.847110][ T10] dvb-usb: error while querying for an remote control event. [ 827.985051][ T10] m920x_read = error: -19 [ 827.989881][ T10] dvb-usb: error while querying for an remote control event. [ 828.104898][ T10] m920x_read = error: -19 [ 828.120325][ T10] dvb-usb: error while querying for an remote control event. [ 828.265390][ T10] m920x_read = error: -19 [ 828.279917][ T10] dvb-usb: error while querying for an remote control event. [ 828.392856][T17922] netlink: 'syz.1.3223': attribute type 1 has an invalid length. [ 828.405133][ T10] m920x_read = error: -19 [ 828.413890][ T10] dvb-usb: error while querying for an remote control event. [ 828.544812][ T10] m920x_read = error: -19 [ 828.552048][ T10] dvb-usb: error while querying for an remote control event. [ 828.596863][T17922] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 828.684846][ T5704] m920x_read = error: -19 [ 828.732283][ T5704] dvb-usb: error while querying for an remote control event. [ 828.865552][ T5704] m920x_read = error: -19 [ 828.876061][ T5704] dvb-usb: error while querying for an remote control event. [ 828.920307][T17933] loop4: detected capacity change from 0 to 7 [ 828.931462][T17933] Dev loop4: unable to read RDB block 7 [ 828.951910][T17933] loop4: AHDI p1 p2 p3 p4 [ 828.960805][T17933] loop4: partition table partially beyond EOD, truncated [ 828.972586][T17933] loop4: p1 start 1601398130 is beyond EOD, truncated [ 828.985529][T17933] loop4: p2 start 1702059890 is beyond EOD, truncated [ 828.994887][ T5704] m920x_read = error: -19 [ 828.999366][T17933] loop4: p3 size 150995200 extends beyond EOD, truncated [ 829.007713][ T5704] dvb-usb: error while querying for an remote control event. [ 829.034735][ T3099] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 829.092515][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 829.130548][ T5704] m920x_read = error: -19 [ 829.144210][ T5704] dvb-usb: error while querying for an remote control event. [ 829.203808][T17935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3227'. [ 829.265002][ T3099] usb 6-1: Using ep0 maxpacket: 32 [ 829.276422][ T3099] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 829.285138][ T3099] usb 6-1: config 0 has no interface number 0 [ 829.295660][ T5704] m920x_read = error: -19 [ 829.307395][ T5704] dvb-usb: error while querying for an remote control event. [ 829.316293][ T3099] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 829.329964][ T3099] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.346372][ T3099] usb 6-1: Product: syz [ 829.366006][ T3099] usb 6-1: Manufacturer: syz [ 829.385089][ T3099] usb 6-1: SerialNumber: syz [ 829.409733][ T3099] usb 6-1: config 0 descriptor?? [ 829.426008][ T3099] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 829.444810][ T5704] m920x_read = error: -19 [ 829.451581][ T5704] dvb-usb: error while querying for an remote control event. [ 829.584925][ T5704] m920x_read = error: -19 [ 829.589453][ T5704] dvb-usb: error while querying for an remote control event. [ 829.690330][ T5762] usbhid 3-1:0.0: can't add hid device: -71 [ 829.709473][ T9] m920x_read = error: -19 [ 829.713822][ T5762] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 829.733850][ T9] dvb-usb: error while querying for an remote control event. [ 829.753558][ T5762] usb 3-1: USB disconnect, device number 75 [ 829.886260][ T9] m920x_read = error: -19 [ 829.895033][ T9] dvb-usb: error while querying for an remote control event. [ 829.923200][T17943] kAFS: unable to lookup cell 'ÿ' [ 829.940498][T17943] kAFS: unable to lookup cell '(,c¾Ì' [ 830.014823][ T9] m920x_read = error: -19 [ 830.025614][ T9] dvb-usb: error while querying for an remote control event. [ 830.154919][ T9] m920x_read = error: -19 [ 830.161727][ T9] dvb-usb: error while querying for an remote control event. [ 830.296001][ T9] m920x_read = error: -19 [ 830.309938][ T9] dvb-usb: error while querying for an remote control event. [ 830.424995][ T9] m920x_read = error: -19 [ 830.429875][ T9] dvb-usb: error while querying for an remote control event. [ 830.554888][ T9] m920x_read = error: -19 [ 830.568374][ T9] dvb-usb: error while querying for an remote control event. [ 830.694964][ T9] m920x_read = error: -19 [ 830.723525][ T9] dvb-usb: error while querying for an remote control event. [ 830.874972][ T9] m920x_read = error: -19 [ 830.893597][ T9] dvb-usb: error while querying for an remote control event. [ 831.034851][ T9] m920x_read = error: -19 [ 831.043892][ T9] dvb-usb: error while querying for an remote control event. [ 831.195010][ T9] m920x_read = error: -19 [ 831.203188][ T9] dvb-usb: error while querying for an remote control event. [ 831.346582][ T9] m920x_read = error: -19 [ 831.352601][ T9] dvb-usb: error while querying for an remote control event. [ 831.477213][T17963] Cannot find set identified by id 1 to match [ 831.505322][ T9] m920x_read = error: -19 [ 831.514545][ T9] dvb-usb: error while querying for an remote control event. [ 831.649203][ T9] m920x_read = error: -19 [ 831.660941][ T9] dvb-usb: error while querying for an remote control event. [ 831.677267][ T3099] gspca_ov534_9: reg_w failed -71 [ 831.797994][ T9] m920x_read = error: -19 [ 831.816490][ T9] dvb-usb: error while querying for an remote control event. [ 831.934215][T17971] loop4: detected capacity change from 0 to 7 [ 831.947714][ T3099] gspca_ov534_9: Unknown sensor 0000 [ 831.947803][ T3099] ov534_9 6-1:0.255: probe with driver ov534_9 failed with error -22 [ 831.948759][ T10] m920x_read = error: -19 [ 831.985643][T17971] Dev loop4: unable to read RDB block 7 [ 831.997364][ T3099] usb 6-1: USB disconnect, device number 48 [ 832.011003][T17971] loop4: AHDI p1 p2 p3 p4 [ 832.011297][ T10] dvb-usb: error while querying for an remote control event. [ 832.053008][T17971] loop4: partition table partially beyond EOD, truncated [ 832.101026][T17971] loop4: p1 start 1601398130 is beyond EOD, truncated [ 832.136256][T17971] loop4: p2 start 1702059890 is beyond EOD, truncated [ 832.158966][ T10] m920x_read = error: -19 [ 832.166507][T17971] loop4: p3 size 150995200 extends beyond EOD, truncated [ 832.184787][ T10] dvb-usb: error while querying for an remote control event. [ 832.300378][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 832.315176][ T9] m920x_read = error: -19 [ 832.326706][ T9] dvb-usb: error while querying for an remote control event. [ 832.467510][ T10] m920x_read = error: -19 [ 832.498425][ T10] dvb-usb: error while querying for an remote control event. [ 832.685701][ T9] m920x_read = error: -19 [ 832.714732][ T9] dvb-usb: error while querying for an remote control event. [ 832.879070][ T30] audit: type=1326 audit(1786239905.609:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.2.3242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 832.907376][ T9] m920x_read = error: -19 [ 832.922871][ T9] dvb-usb: error while querying for an remote control event. [ 832.969164][ T30] audit: type=1326 audit(1786239905.639:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.2.3242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 832.997452][ T30] audit: type=1326 audit(1786239905.639:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.2.3242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 833.070630][ T30] audit: type=1326 audit(1786239905.639:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.2.3242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 833.073667][ T9] m920x_read = error: -19 [ 833.127242][ T9] dvb-usb: error while querying for an remote control event. [ 833.152299][ T30] audit: type=1326 audit(1786239905.639:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.2.3242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 833.194756][ T5762] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 833.218213][ T30] audit: type=1326 audit(1786239905.639:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.2.3242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 833.255010][ T9] m920x_read = error: -19 [ 833.259563][ T9] dvb-usb: error while querying for an remote control event. [ 833.269936][ T30] audit: type=1326 audit(1786239905.639:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.2.3242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 833.316525][T18019] netlink: 'syz.2.3245': attribute type 29 has an invalid length. [ 833.324460][ T30] audit: type=1326 audit(1786239905.639:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.2.3242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 833.391785][ T5762] usb 6-1: unable to get BOS descriptor or descriptor too short [ 833.403868][ T5762] usb 6-1: config 160 has an invalid interface number: 168 but max is 0 [ 833.415974][ T30] audit: type=1326 audit(1786239905.639:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.2.3242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 833.442003][ T5762] usb 6-1: config 160 has no interface number 0 [ 833.445194][ T5704] m920x_read = error: -19 [ 833.454829][ T5762] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 833.487011][ T5762] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 833.487037][ T5704] dvb-usb: error while querying for an remote control event. [ 833.516518][ T30] audit: type=1326 audit(1786239905.639:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.2.3242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 833.553352][ T5762] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 833.597352][ T5762] usb 6-1: config 160 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 833.609765][ T9] m920x_read = error: -19 [ 833.633113][ T9] dvb-usb: error while querying for an remote control event. [ 833.653638][ T5762] usb 6-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 833.688129][ T5762] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 833.720114][ T5762] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 833.735168][ T5762] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 833.754180][ T5762] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 833.775362][ T9] m920x_read = error: -19 [ 833.785162][ T9] dvb-usb: error while querying for an remote control event. [ 833.802923][ T5762] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 833.839835][ T5762] usb 6-1: config 160 interface 168 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 833.879239][ T5762] usb 6-1: config 160 interface 168 has no altsetting 0 [ 833.913713][ T5762] usb 6-1: string descriptor 0 read error: -22 [ 833.929121][ T5762] usb 6-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 833.944857][ T9] m920x_read = error: -19 [ 833.961313][ T9] dvb-usb: error while querying for an remote control event. [ 833.966722][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.023171][T18012] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 834.041885][T18012] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 834.073476][T18012] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 834.093605][T18012] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 834.105964][ T5704] m920x_read = error: -19 [ 834.116218][ T5704] dvb-usb: error while querying for an remote control event. [ 834.148041][ T5762] io_edgeport 6-1:160.168: EPiC device converter detected [ 834.170415][ T5762] usb 6-1: detected [ 834.269391][ T5704] m920x_read = error: -19 [ 834.290409][ T5704] dvb-usb: error while querying for an remote control event. [ 834.346496][ T5762] usb 6-1: EPiC device converter now attached to ttyUSB0 [ 834.424867][ T5704] m920x_read = error: -19 [ 834.434050][ T5704] dvb-usb: error while querying for an remote control event. [ 834.556720][ T9] m920x_read = error: -19 [ 834.563569][ T9] dvb-usb: error while querying for an remote control event. [ 834.596549][ T5696] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 834.684867][ T9] m920x_read = error: -19 [ 834.693738][ T9] dvb-usb: error while querying for an remote control event. [ 834.736499][ T5696] usb 2-1: device descriptor read/64, error -71 [ 834.804926][ T9] m920x_read = error: -19 [ 834.817009][ T9] dvb-usb: error while querying for an remote control event. [ 834.964834][ T9] m920x_read = error: -19 [ 834.971579][ T9] dvb-usb: error while querying for an remote control event. [ 834.994821][ T5696] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 835.094879][ T5704] m920x_read = error: -19 [ 835.101418][ T5704] dvb-usb: error while querying for an remote control event. [ 835.144795][ T5696] usb 2-1: device descriptor read/64, error -71 [ 835.234789][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 835.249198][ T5704] m920x_read = error: -19 [ 835.253928][ T5704] dvb-usb: error while querying for an remote control event. [ 835.264355][ T5696] usb usb2-port1: attempt power cycle [ 835.364835][ T5704] m920x_read = error: -19 [ 835.372811][ T5704] dvb-usb: error while querying for an remote control event. [ 835.412829][ T9] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 835.429826][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.444324][ T9] usb 4-1: Product: syz [ 835.448849][ T9] usb 4-1: Manufacturer: syz [ 835.454734][ T9] usb 4-1: SerialNumber: syz [ 835.504799][ T5704] m920x_read = error: -19 [ 835.509280][ T5704] dvb-usb: error while querying for an remote control event. [ 835.615028][ T5696] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 835.625070][ T5704] m920x_read = error: -19 [ 835.639923][ T5704] dvb-usb: error while querying for an remote control event. [ 835.676382][ T5696] usb 2-1: device descriptor read/8, error -71 [ 835.724471][ T9] usb 4-1: 1:1 : no cluster descriptor [ 835.752572][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 835.775275][ T5704] m920x_read = error: -19 [ 835.783749][ T5704] dvb-usb: error while querying for an remote control event. [ 835.845734][ T9] usb 4-1: USB disconnect, device number 63 [ 835.904832][ T5704] m920x_read = error: -19 [ 835.922203][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.930875][ T5696] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 835.949005][ T5704] dvb-usb: error while querying for an remote control event. [ 835.985053][ T5696] usb 2-1: device descriptor read/8, error -71 [ 836.032352][T17555] usb 6-1: USB disconnect, device number 49 [ 836.038433][ C1] usb 6-1: edge_interrupt_callback - Error -19 submitting control urb [ 836.064871][ T5704] m920x_read = error: -19 [ 836.069330][ T5704] dvb-usb: error while querying for an remote control event. [ 836.077004][T17555] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0 [ 836.089933][T17555] io_edgeport 6-1:160.168: device disconnected [ 836.122611][ T5696] usb usb2-port1: unable to enumerate USB device [ 836.195771][ T9] m920x_read = error: -19 [ 836.208071][ T9] dvb-usb: error while querying for an remote control event. [ 836.280478][T18053] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3254'. [ 836.300856][T18053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.335124][ T9] m920x_read = error: -19 [ 836.376072][ T9] dvb-usb: error while querying for an remote control event. [ 836.455033][T18053] loop8: detected capacity change from 0 to 7 [ 836.486195][ T9] m920x_read = error: -19 [ 836.526500][ T9] dvb-usb: error while querying for an remote control event. [ 836.544149][T18053] Dev loop8: unable to read RDB block 7 [ 836.555328][T18053] loop8: unable to read partition table [ 836.588126][T18053] loop8: partition table beyond EOD, truncated [ 836.595013][T18053] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 836.695155][ T9] m920x_read = error: -19 [ 836.728914][ T9] dvb-usb: error while querying for an remote control event. [ 836.875268][ T9] m920x_read = error: -19 [ 836.879767][ T9] dvb-usb: error while querying for an remote control event. [ 836.995046][ T9] m920x_read = error: -19 [ 837.037162][ T9] dvb-usb: error while querying for an remote control event. [ 837.157965][ T9] m920x_read = error: -19 [ 837.226594][ T9] dvb-usb: error while querying for an remote control event. [ 837.354775][ T9] m920x_read = error: -19 [ 837.367347][ T9] dvb-usb: error while querying for an remote control event. [ 837.496904][ T9] m920x_read = error: -19 [ 837.530633][ T9] dvb-usb: error while querying for an remote control event. [ 837.599070][T18066] netlink: 'syz.0.3257': attribute type 8 has an invalid length. [ 837.695717][ T9] m920x_read = error: -19 [ 837.710243][ T9] dvb-usb: error while querying for an remote control event. [ 837.855074][ T9] m920x_read = error: -19 [ 837.869626][ T9] dvb-usb: error while querying for an remote control event. [ 837.893810][T18077] loop2: detected capacity change from 0 to 7 [ 837.920087][T18077] Dev loop2: unable to read RDB block 7 [ 837.936527][T18077] loop2: unable to read partition table [ 837.943731][T18077] loop2: partition table beyond EOD, truncated [ 837.961827][T18077] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 838.024860][ T9] m920x_read = error: -19 [ 838.037283][T17555] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 838.067523][ T9] dvb-usb: error while querying for an remote control event. [ 838.204822][ T187] m920x_read = error: -19 [ 838.213989][ T187] dvb-usb: error while querying for an remote control event. [ 838.218725][T17555] usb 2-1: device descriptor read/64, error -71 [ 838.345041][ T187] m920x_read = error: -19 [ 838.349520][ T187] dvb-usb: error while querying for an remote control event. [ 838.375116][ T9] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 838.494797][ T187] m920x_read = error: -19 [ 838.497392][T17555] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 838.504348][ T187] dvb-usb: error while querying for an remote control event. [ 838.546261][ T9] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 838.567980][ T9] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 838.591428][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.624768][ T9] usb 3-1: config 0 has no interface number 0 [ 838.639388][ T9] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 838.654607][ T187] m920x_read = error: -19 [ 838.669968][ T187] dvb-usb: error while querying for an remote control event. [ 838.674948][T17555] usb 2-1: device descriptor read/64, error -71 [ 838.697889][ T9] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 17956, setting to 64 [ 838.726287][ T9] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 838.794473][ T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 838.810329][T17555] usb usb2-port1: attempt power cycle [ 838.818458][ T187] m920x_read = error: -19 [ 838.832433][ T187] dvb-usb: error while querying for an remote control event. [ 838.848687][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.893531][ T9] usb 3-1: config 0 descriptor?? [ 838.921720][T18079] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 838.967739][ T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 838.979511][ T187] m920x_read = error: -19 [ 839.011180][ T187] dvb-usb: error while querying for an remote control event. [ 839.145176][ T187] m920x_read = error: -19 [ 839.164054][ T187] dvb-usb: error while querying for an remote control event. [ 839.172892][T11252] usb 3-1: Failed to submit usb control message: -71 [ 839.180402][T17555] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 839.188327][T11252] usb 3-1: unable to send the bmi data to the device: -71 [ 839.196631][T11252] usb 3-1: unable to get target info from device [ 839.204237][T11252] usb 3-1: could not get target info (-71) [ 839.207119][ T9] usb 3-1: USB disconnect, device number 76 [ 839.216355][T11252] usb 3-1: could not probe fw (-71) [ 839.227597][T17555] usb 2-1: device descriptor read/8, error -71 [ 839.325925][ T5704] m920x_read = error: -19 [ 839.330356][ T5704] dvb-usb: error while querying for an remote control event. [ 839.445593][ T5704] m920x_read = error: -19 [ 839.450220][ T5704] dvb-usb: error while querying for an remote control event. [ 839.514795][T17555] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 839.547939][T17555] usb 2-1: device descriptor read/8, error -71 [ 839.584893][ T5704] m920x_read = error: -19 [ 839.591456][ T5704] dvb-usb: error while querying for an remote control event. [ 839.673624][ T5704] hid_parser_main: 461 callbacks suppressed [ 839.673648][ T5704] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 839.687874][ T5704] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 839.688241][T17555] usb usb2-port1: unable to enumerate USB device [ 839.704941][ T9] m920x_read = error: -19 [ 839.712846][ T9] dvb-usb: error while querying for an remote control event. [ 839.727548][ T5704] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz0 [ 839.828659][T18110] fido_id[18110]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 839.846142][ T5704] m920x_read = error: -19 [ 839.877134][ T5704] dvb-usb: error while querying for an remote control event. [ 840.024843][ T5704] m920x_read = error: -19 [ 840.047780][ T5704] dvb-usb: error while querying for an remote control event. [ 840.194983][ T5704] m920x_read = error: -19 [ 840.216532][ T5704] dvb-usb: error while querying for an remote control event. [ 840.334820][ T5704] m920x_read = error: -19 [ 840.349714][ T5704] dvb-usb: error while querying for an remote control event. [ 840.402936][T18133] loop2: detected capacity change from 0 to 7 [ 840.411189][T18133] Dev loop2: unable to read RDB block 7 [ 840.417039][T18133] loop2: unable to read partition table [ 840.423912][T18133] loop2: partition table beyond EOD, truncated [ 840.432975][T18133] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 840.474861][ T5704] m920x_read = error: -19 [ 840.482255][ T5704] dvb-usb: error while querying for an remote control event. [ 840.546270][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3275'. [ 840.618366][ T5704] m920x_read = error: -19 [ 840.630506][ T5704] dvb-usb: error while querying for an remote control event. [ 840.661070][T18141] geneve2: entered promiscuous mode [ 840.687078][T18143] input: syz0 as /devices/virtual/input/input82 [ 840.765844][ T5704] m920x_read = error: -19 [ 840.783424][ T5704] dvb-usb: error while querying for an remote control event. [ 840.936012][ T9] m920x_read = error: -19 [ 840.956479][ T9] dvb-usb: error while querying for an remote control event. [ 841.095519][ T9] m920x_read = error: -19 [ 841.121031][ T9] dvb-usb: error while querying for an remote control event. [ 841.250130][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 841.250149][ T30] audit: type=1800 audit(1786239913.979:3466): pid=18138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3276" name="bus" dev="ramfs" ino=90413 res=0 errno=0 [ 841.268523][ T9] m920x_read = error: -19 [ 841.367225][ T9] dvb-usb: error while querying for an remote control event. [ 841.520301][ T9] m920x_read = error: -19 [ 841.538990][ T9] dvb-usb: error while querying for an remote control event. [ 841.686695][ T9] m920x_read = error: -19 [ 841.698859][ T9] dvb-usb: error while querying for an remote control event. [ 841.835943][ T9] m920x_read = error: -19 [ 841.849307][ T9] dvb-usb: error while querying for an remote control event. [ 841.996906][ T9] m920x_read = error: -19 [ 842.031791][ T9] dvb-usb: error while querying for an remote control event. [ 842.186421][ T5704] m920x_read = error: -19 [ 842.198300][ T5704] dvb-usb: error while querying for an remote control event. [ 842.291282][T18181] loop2: detected capacity change from 0 to 7 [ 842.328461][T18181] Dev loop2: unable to read RDB block 7 [ 842.334932][ T5704] m920x_read = error: -19 [ 842.339843][ T5704] dvb-usb: error while querying for an remote control event. [ 842.348739][T18181] loop2: unable to read partition table [ 842.390006][T18181] loop2: partition table beyond EOD, truncated [ 842.410049][T18181] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 842.474537][ T4977] Dev loop2: unable to read RDB block 7 [ 842.493300][ T4977] loop2: unable to read partition table [ 842.505182][ T5704] m920x_read = error: -19 [ 842.516520][ T5704] dvb-usb: error while querying for an remote control event. [ 842.526844][ T4977] loop2: partition table beyond EOD, truncated [ 842.689734][ T5704] m920x_read = error: -19 [ 842.715481][ T5704] dvb-usb: error while querying for an remote control event. [ 842.844745][T17555] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 842.854914][ T5704] m920x_read = error: -19 [ 842.878750][ T5704] dvb-usb: error while querying for an remote control event. [ 843.024767][T17555] usb 6-1: device descriptor read/64, error -71 [ 843.024920][ T5704] m920x_read = error: -19 [ 843.061077][ T5704] dvb-usb: error while querying for an remote control event. [ 843.100687][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3287'. [ 843.204936][ T9] m920x_read = error: -19 [ 843.212349][ T9] dvb-usb: error while querying for an remote control event. [ 843.284777][T17555] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 843.345082][ T9] m920x_read = error: -19 [ 843.359303][ T9] dvb-usb: error while querying for an remote control event. [ 843.457386][T17555] usb 6-1: device descriptor read/64, error -71 [ 843.496056][ T9] m920x_read = error: -19 [ 843.509265][ T9] dvb-usb: error while querying for an remote control event. [ 843.595030][T17555] usb usb6-port1: attempt power cycle [ 843.634787][ T5704] m920x_read = error: -19 [ 843.634813][ T5704] dvb-usb: error while querying for an remote control event. [ 843.744770][ T9] m920x_read = error: -19 [ 843.744811][ T9] dvb-usb: error while querying for an remote control event. [ 843.855669][ T5704] m920x_read = error: -19 [ 843.855696][ T5704] dvb-usb: error while querying for an remote control event. [ 843.955000][T17555] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 843.972177][ T187] m920x_read = error: -19 [ 844.001505][ T187] dvb-usb: error while querying for an remote control event. [ 844.012453][T17555] usb 6-1: device descriptor read/8, error -71 [ 844.139643][ T187] m920x_read = error: -19 [ 844.153018][ T187] dvb-usb: error while querying for an remote control event. [ 844.234317][T18210] netlink: 'syz.0.3297': attribute type 1 has an invalid length. [ 844.242965][T18210] netlink: 'syz.0.3297': attribute type 1 has an invalid length. [ 844.274786][T17555] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 844.284852][ T187] m920x_read = error: -19 [ 844.290894][ T187] dvb-usb: error while querying for an remote control event. [ 844.355772][T17555] usb 6-1: device descriptor read/8, error -71 [ 844.429697][ T187] m920x_read = error: -19 [ 844.449859][ T187] dvb-usb: error while querying for an remote control event. [ 844.475451][T17555] usb usb6-port1: unable to enumerate USB device [ 844.605176][ T187] m920x_read = error: -19 [ 844.609887][ T187] dvb-usb: error while querying for an remote control event. [ 844.724781][ T187] m920x_read = error: -19 [ 844.734339][ T187] dvb-usb: error while querying for an remote control event. [ 844.805094][T17555] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 844.864966][ T187] m920x_read = error: -19 [ 844.869427][ T187] dvb-usb: error while querying for an remote control event. [ 844.954715][T17555] usb 2-1: device descriptor read/64, error -71 [ 844.984877][ T187] m920x_read = error: -19 [ 845.013572][ T187] dvb-usb: error while querying for an remote control event. [ 845.135922][ T187] m920x_read = error: -19 [ 845.143374][ T187] dvb-usb: error while querying for an remote control event. [ 845.152060][T18222] loop2: detected capacity change from 0 to 7 [ 845.160703][T18222] Dev loop2: unable to read RDB block 7 [ 845.167516][T18222] loop2: unable to read partition table [ 845.173587][T18222] loop2: partition table beyond EOD, truncated [ 845.190022][T18222] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 845.235278][T17555] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 845.267944][ T5704] m920x_read = error: -19 [ 845.273737][ T5704] dvb-usb: error while querying for an remote control event. [ 845.343719][T18228] bridge2: entered promiscuous mode [ 845.394735][T17555] usb 2-1: device descriptor read/64, error -71 [ 845.407168][ T5704] m920x_read = error: -19 [ 845.414280][ T5704] dvb-usb: error while querying for an remote control event. [ 845.445177][T18231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.521166][T17555] usb usb2-port1: attempt power cycle [ 845.535542][ T187] m920x_read = error: -19 [ 845.543375][ T187] dvb-usb: error while querying for an remote control event. [ 845.602095][ T9] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 845.632675][ T9] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 845.664841][ T9] m920x_read = error: -19 [ 845.669303][ T9] dvb-usb: error while querying for an remote control event. [ 845.715664][ T5704] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 845.794791][ T187] m920x_read = error: -19 [ 845.800245][ T187] dvb-usb: error while querying for an remote control event. [ 845.874820][T17555] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 845.879282][ T5704] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 845.916835][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.925048][ T187] m920x_read = error: -19 [ 845.934560][ T187] dvb-usb: error while querying for an remote control event. [ 845.943389][T17555] usb 2-1: device descriptor read/8, error -71 [ 845.985180][ T5704] usb 4-1: config 0 descriptor?? [ 846.095167][ T187] m920x_read = error: -19 [ 846.100828][ T187] dvb-usb: error while querying for an remote control event. [ 846.214910][ T187] m920x_read = error: -19 [ 846.221126][ T187] dvb-usb: error while querying for an remote control event. [ 846.234976][T17555] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 846.257792][T17555] usb 2-1: device descriptor read/8, error -71 [ 846.354959][ T187] m920x_read = error: -19 [ 846.361372][ T187] dvb-usb: error while querying for an remote control event. [ 846.375061][T17555] usb usb2-port1: unable to enumerate USB device [ 846.418920][ T5704] ath6kl: Failed to submit usb control message: -71 [ 846.433322][ T5704] ath6kl: unable to send the bmi data to the device: -71 [ 846.441095][ T5704] ath6kl: Unable to send get target info: -71 [ 846.452844][ T5704] ath6kl: Failed to init ath6kl core: -71 [ 846.460026][ T5704] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 846.475320][ T5704] usb 4-1: USB disconnect, device number 64 [ 846.502436][ T187] m920x_read = error: -19 [ 846.508374][ T187] dvb-usb: error while querying for an remote control event. [ 846.508401][T18246] loop4: detected capacity change from 0 to 7 [ 846.549985][T18246] Dev loop4: unable to read RDB block 7 [ 846.560903][T18246] loop4: AHDI p1 p2 p3 p4 [ 846.565549][T18246] loop4: partition table partially beyond EOD, truncated [ 846.581035][T18246] loop4: p1 start 1601398130 is beyond EOD, truncated [ 846.590633][T18246] loop4: p2 start 1702059890 is beyond EOD, truncated [ 846.597751][T18246] loop4: p3 size 150995200 extends beyond EOD, truncated [ 846.645261][ T187] m920x_read = error: -19 [ 846.654588][ T187] dvb-usb: error while querying for an remote control event. [ 846.673663][T18247] netlink: 'syz.2.3306': attribute type 46 has an invalid length. [ 846.695978][T18247] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3306'. [ 846.736616][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 846.775499][ T5704] m920x_read = error: -19 [ 846.780132][ T5704] dvb-usb: error while querying for an remote control event. [ 846.895003][ T187] m920x_read = error: -19 [ 846.905541][ T187] dvb-usb: error while querying for an remote control event. [ 847.137785][ T187] m920x_read = error: -19 [ 847.184884][ T187] dvb-usb: error while querying for an remote control event. [ 847.285692][T18252] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 847.293992][T18252] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 847.304226][T18252] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 847.313383][T18252] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 847.319624][T18252] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 847.325202][ T187] m920x_read = error: -19 [ 847.331744][T18252] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 847.337900][ T187] dvb-usb: error while querying for an remote control event. [ 847.445763][ T187] m920x_read = error: -19 [ 847.450307][ T187] dvb-usb: error while querying for an remote control event. [ 847.472139][T18261] loop2: detected capacity change from 0 to 7 [ 847.510012][T18261] Dev loop2: unable to read RDB block 7 [ 847.542823][T18261] loop2: unable to read partition table [ 847.564837][ T187] m920x_read = error: -19 [ 847.572759][ T187] dvb-usb: error while querying for an remote control event. [ 847.575420][T18261] loop2: partition table beyond EOD, truncated [ 847.640877][T18261] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 847.694900][ T187] m920x_read = error: -19 [ 847.699345][ T187] dvb-usb: error while querying for an remote control event. [ 847.814834][ T187] m920x_read = error: -19 [ 847.819405][ T187] dvb-usb: error while querying for an remote control event. [ 847.934792][ T187] m920x_read = error: -19 [ 847.941713][ T187] dvb-usb: error while querying for an remote control event. [ 848.064983][ T187] m920x_read = error: -19 [ 848.082398][ T187] dvb-usb: error while querying for an remote control event. [ 848.225918][ T187] m920x_read = error: -19 [ 848.247307][ T187] dvb-usb: error while querying for an remote control event. [ 848.384831][ T187] m920x_read = error: -19 [ 848.393329][ T187] dvb-usb: error while querying for an remote control event. [ 848.515725][ T187] m920x_read = error: -19 [ 848.535828][ T187] dvb-usb: error while querying for an remote control event. [ 848.633218][T18290] netlink: 'syz.2.3319': attribute type 8 has an invalid length. [ 848.664812][ T9] m920x_read = error: -19 [ 848.686894][ T9] dvb-usb: error while querying for an remote control event. [ 848.837208][ T187] m920x_read = error: -19 [ 848.848954][ T187] dvb-usb: error while querying for an remote control event. [ 848.965297][ T187] m920x_read = error: -19 [ 848.979227][ T187] dvb-usb: error while querying for an remote control event. [ 849.124849][ T187] m920x_read = error: -19 [ 849.133734][ T187] dvb-usb: error while querying for an remote control event. [ 849.153902][T18297] syzkaller0: entered promiscuous mode [ 849.170329][T18297] syzkaller0: entered allmulticast mode [ 849.274953][ T9] m920x_read = error: -19 [ 849.280902][ T9] dvb-usb: error while querying for an remote control event. [ 849.294861][ T4927] Bluetooth: hci5: command 0x0c1a tx timeout [ 849.332831][T18301] IPv6: A: Disabled Multicast RS [ 849.384885][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 849.395288][ T9] m920x_read = error: -19 [ 849.400085][ T9] dvb-usb: error while querying for an remote control event. [ 849.414778][ T5704] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 849.451385][T18307] loop2: detected capacity change from 0 to 7 [ 849.488221][T18307] Dev loop2: unable to read RDB block 7 [ 849.494016][T18307] loop2: unable to read partition table [ 849.500721][T18307] loop2: partition table beyond EOD, truncated [ 849.508770][T18310] netlink: 'syz.0.3327': attribute type 5 has an invalid length. [ 849.516618][ T9] m920x_read = error: -19 [ 849.516642][ T9] dvb-usb: error while querying for an remote control event. [ 849.529419][T18307] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 849.565024][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 849.580199][ T5704] usb 2-1: config 1 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 849.611908][ T5704] usb 2-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 849.625445][ T9] m920x_read = error: -19 [ 849.653778][ T9] dvb-usb: error while querying for an remote control event. [ 849.714592][ T5704] usb 2-1: config 1 interface 0 has no altsetting 0 [ 849.790478][ T5704] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.40 [ 849.810806][ T9] m920x_read = error: -19 [ 849.848419][ T9] dvb-usb: error while querying for an remote control event. [ 849.859384][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.893868][ T5704] usb 2-1: Product: à°ª [ 849.909999][ T5704] usb 2-1: Manufacturer: Ñ‹ [ 849.918406][T18323] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3329'. [ 849.940450][ T5704] usb 2-1: SerialNumber: à°‡ [ 849.951290][T18311] bond1: entered promiscuous mode [ 849.978443][T18311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 849.994809][ T187] m920x_read = error: -19 [ 850.000454][ T187] dvb-usb: error while querying for an remote control event. [ 850.120198][T18315] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 850.143559][ T187] m920x_read = error: -19 [ 850.164551][ T187] dvb-usb: error while querying for an remote control event. [ 850.188648][T18315] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 850.207512][T18315] bond1: (slave ipvlan2): Error -95 calling set_mac_address [ 850.242777][T18323] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3329'. [ 850.271838][T18327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3330'. [ 850.304914][ T9] m920x_read = error: -19 [ 850.309515][ T9] dvb-usb: error while querying for an remote control event. [ 850.432055][ T5704] usbhid 2-1:1.0: can't add hid device: -71 [ 850.439672][ T9] m920x_read = error: -19 [ 850.448712][ T9] dvb-usb: error while querying for an remote control event. [ 850.459512][ T5704] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 850.479086][ T5704] usb 2-1: USB disconnect, device number 127 [ 850.574980][ T5681] m920x_read = error: -19 [ 850.587158][ T5681] dvb-usb: error while querying for an remote control event. [ 850.694800][ T187] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 850.716009][ T5704] m920x_read = error: -19 [ 850.724188][ T5704] dvb-usb: error while querying for an remote control event. [ 850.845327][ T5704] m920x_read = error: -19 [ 850.849884][ T5704] dvb-usb: error while querying for an remote control event. [ 850.887662][ T187] usb 6-1: not running at top speed; connect to a high speed hub [ 850.906856][ T187] usb 6-1: config 184 has an invalid interface number: 4 but max is 0 [ 850.916754][ T187] usb 6-1: config 184 has an invalid interface number: 17 but max is 0 [ 850.936579][ T187] usb 6-1: config 184 has 2 interfaces, different from the descriptor's value: 1 [ 850.954695][ T187] usb 6-1: config 184 has no interface number 0 [ 850.969666][ T187] usb 6-1: config 184 has no interface number 1 [ 850.976465][ T5681] m920x_read = error: -19 [ 850.985941][ T5681] dvb-usb: error while querying for an remote control event. [ 850.994002][ T187] usb 6-1: config 184 interface 4 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 851.021717][ T187] usb 6-1: too many endpoints for config 184 interface 17 altsetting 200: 235, using maximum allowed: 30 [ 851.061154][ T187] usb 6-1: config 184 interface 17 altsetting 200 has a duplicate endpoint with address 0x1, skipping [ 851.086589][ T187] usb 6-1: config 184 interface 17 altsetting 200 has a duplicate endpoint with address 0x8F, skipping [ 851.114977][ T5681] m920x_read = error: -19 [ 851.125785][ T5681] dvb-usb: error while querying for an remote control event. [ 851.136544][ T187] usb 6-1: config 184 interface 17 altsetting 200 has 2 endpoint descriptors, different from the interface descriptor's value: 235 [ 851.165145][ T187] usb 6-1: config 184 interface 4 has no altsetting 0 [ 851.172019][ T187] usb 6-1: config 184 interface 17 has no altsetting 0 [ 851.180345][T18346] syzkaller0: entered promiscuous mode [ 851.187303][ T187] usb 6-1: New USB device found, idVendor=1e2d, idProduct=0053, bcdDevice=4b.f0 [ 851.196689][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.204855][ T187] usb 6-1: Product:  [ 851.210857][ T187] usb 6-1: Manufacturer: ë™æ¤ƒã…¥î´˜ï·µä·•ìµ‰íŒ™ëƒï‹‹íš‘䔳咈퓰ꩲꔶ諸ඳ讟蟴冸שּ䑲鑞벤氆ï°éž¸äŸâ ƒå—†æ––è弛瀂煷㨊멈䗦䎪࿘㓰少ԫꣿ傱ᇅ苃 [ 851.214305][T18346] syzkaller0: entered allmulticast mode [ 851.237760][ T187] usb 6-1: SerialNumber: 㖌숸뮮ë´á–€îœƒä¾¿ã´¬æ£ªçŸ«î™·ë¹«á¢¡ [ 851.264866][ T5681] m920x_read = error: -19 [ 851.269544][ T5681] dvb-usb: error while querying for an remote control event. [ 851.375414][ T4927] Bluetooth: hci5: command 0x0c1a tx timeout [ 851.387205][ T5681] m920x_read = error: -19 [ 851.403212][ T5681] dvb-usb: error while querying for an remote control event. [ 851.459084][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 851.482288][ T187] option 6-1:184.17: GSM modem (1-port) converter detected [ 851.494938][ T187] usb 6-1: USB disconnect, device number 55 [ 851.507527][ T187] option 6-1:184.17: device disconnected [ 851.535857][ T5681] m920x_read = error: -19 [ 851.544075][ T5681] dvb-usb: error while querying for an remote control event. [ 851.617148][T18354] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3338'. [ 851.656310][ T5681] m920x_read = error: -19 [ 851.665934][ T5681] dvb-usb: error while querying for an remote control event. [ 851.815045][ T5704] m920x_read = error: -19 [ 851.831782][ T5704] dvb-usb: error while querying for an remote control event. [ 851.965458][ T5704] m920x_read = error: -19 [ 851.979689][ T5704] dvb-usb: error while querying for an remote control event. [ 851.996057][ T187] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 852.092264][T18359] loop2: detected capacity change from 0 to 7 [ 852.114916][ T5704] m920x_read = error: -19 [ 852.124970][ T5704] dvb-usb: error while querying for an remote control event. [ 852.152884][T18359] Dev loop2: unable to read RDB block 7 [ 852.165754][ T187] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 852.181010][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.193053][T18359] loop2: unable to read partition table [ 852.199011][ T187] usb 6-1: Product: syz [ 852.211096][ T187] usb 6-1: Manufacturer: syz [ 852.218578][T18359] loop2: partition table beyond EOD, truncated [ 852.224897][ T187] usb 6-1: SerialNumber: syz [ 852.244798][ T5704] m920x_read = error: -19 [ 852.250050][ T5704] dvb-usb: error while querying for an remote control event. [ 852.263727][T18359] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 852.329533][ T4977] Dev loop2: unable to read RDB block 7 [ 852.366404][ T4977] loop2: unable to read partition table [ 852.384876][ T5704] m920x_read = error: -19 [ 852.390766][ T4977] loop2: partition table beyond EOD, truncated [ 852.402169][ T5704] dvb-usb: error while querying for an remote control event. [ 852.527583][ T187] rtl8150 6-1:1.0: couldn't reset the device [ 852.539881][ T5704] m920x_read = error: -19 [ 852.558296][ T187] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 852.571850][ T5704] dvb-usb: error while querying for an remote control event. [ 852.605189][ T187] usb 6-1: USB disconnect, device number 56 [ 852.694838][ T5704] m920x_read = error: -19 [ 852.704855][ T5704] dvb-usb: error while querying for an remote control event. [ 852.824835][ T187] m920x_read = error: -19 [ 852.834334][ T187] dvb-usb: error while querying for an remote control event. [ 852.964828][ T187] m920x_read = error: -19 [ 852.981156][ T187] dvb-usb: error while querying for an remote control event. [ 853.114862][ T187] m920x_read = error: -19 [ 853.140074][ T187] dvb-usb: error while querying for an remote control event. [ 853.264780][ T187] m920x_read = error: -19 [ 853.277305][ T187] dvb-usb: error while querying for an remote control event. [ 853.394829][ T5762] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 853.405127][ T5704] m920x_read = error: -19 [ 853.419589][ T5704] dvb-usb: error while querying for an remote control event. [ 853.441636][ T30] audit: type=1800 audit(1786239926.169:3467): pid=18378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3345" name="blkio.bfq.time_recursive" dev="tmpfs" ino=350 res=0 errno=0 [ 853.455171][ T4927] Bluetooth: hci5: command 0x0c1a tx timeout [ 853.534788][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 853.567228][ T5762] usb 6-1: config index 0 descriptor too short (expected 65321, got 45) [ 853.584796][ T5704] m920x_read = error: -19 [ 853.594257][ T5704] dvb-usb: error while querying for an remote control event. [ 853.608476][ T5762] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 853.625862][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.649111][ T5762] usb 6-1: Product: syz [ 853.663710][ T5762] usb 6-1: Manufacturer: syz [ 853.676427][ T5762] usb 6-1: SerialNumber: syz [ 853.731823][ T5704] m920x_read = error: -19 [ 853.747151][ T5704] dvb-usb: error while querying for an remote control event. [ 853.894977][ T5704] m920x_read = error: -19 [ 853.905624][ T5704] dvb-usb: error while querying for an remote control event. [ 853.921813][ T5762] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 853.954153][ T5762] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 853.970150][ T5762] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 853.995818][ T5762] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 854.045471][ T5704] m920x_read = error: -19 [ 854.057217][ T5704] dvb-usb: error while querying for an remote control event. [ 854.145145][ T5762] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 854.194868][ T5704] m920x_read = error: -19 [ 854.214277][ T5704] dvb-usb: error while querying for an remote control event. [ 854.217064][ T5762] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 854.271195][T18383] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3347'. [ 854.276130][ T5762] usb 6-1: USB disconnect, device number 57 [ 854.357773][ T5704] m920x_read = error: -19 [ 854.382427][ T5704] dvb-usb: error while querying for an remote control event. [ 854.434783][T17555] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 854.514780][ T9] m920x_read = error: -19 [ 854.528641][ T9] dvb-usb: error while querying for an remote control event. [ 854.595899][T17555] usb 4-1: Using ep0 maxpacket: 16 [ 854.614519][T17555] usb 4-1: no configurations [ 854.633114][T17555] usb 4-1: can't read configurations, error -22 [ 854.664966][ T9] m920x_read = error: -19 [ 854.671865][ T9] dvb-usb: error while querying for an remote control event. [ 854.804864][ T9] m920x_read = error: -19 [ 854.822154][ T9] dvb-usb: error while querying for an remote control event. [ 854.836667][T17555] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 854.964801][ T9] m920x_read = error: -19 [ 854.976412][ T9] dvb-usb: error while querying for an remote control event. [ 855.037537][T17555] usb 4-1: Using ep0 maxpacket: 16 [ 855.062550][T17555] usb 4-1: no configurations [ 855.080572][T17555] usb 4-1: can't read configurations, error -22 [ 855.104887][ T9] m920x_read = error: -19 [ 855.112345][T17555] usb usb4-port1: attempt power cycle [ 855.123211][ T9] dvb-usb: error while querying for an remote control event. [ 855.255286][ T9] m920x_read = error: -19 [ 855.285894][ T9] dvb-usb: error while querying for an remote control event. [ 855.337366][T18407] loop2: detected capacity change from 0 to 7 [ 855.366628][T18407] Dev loop2: unable to read RDB block 7 [ 855.372639][T18398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.390359][T18407] loop2: unable to read partition table [ 855.415380][T18407] loop2: partition table beyond EOD, truncated [ 855.425662][ T9] m920x_read = error: -19 [ 855.442548][ T9] dvb-usb: error while querying for an remote control event. [ 855.443274][T18407] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 855.535387][T17555] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 855.584814][ T9] m920x_read = error: -19 [ 855.594594][T17555] usb 4-1: Using ep0 maxpacket: 16 [ 855.606417][ T9] dvb-usb: error while querying for an remote control event. [ 855.635232][T17555] usb 4-1: no configurations [ 855.649844][T17555] usb 4-1: can't read configurations, error -22 [ 855.755856][ T9] m920x_read = error: -19 [ 855.778282][ T9] dvb-usb: error while querying for an remote control event. [ 855.815337][T17555] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 855.895734][T17555] usb 4-1: Using ep0 maxpacket: 16 [ 855.906926][T17555] usb 4-1: no configurations [ 855.914859][ T9] m920x_read = error: -19 [ 855.929807][T17555] usb 4-1: can't read configurations, error -22 [ 855.952052][ T9] dvb-usb: error while querying for an remote control event. [ 855.984549][T17555] usb usb4-port1: unable to enumerate USB device [ 856.085697][ T9] m920x_read = error: -19 [ 856.109564][ T9] dvb-usb: error while querying for an remote control event. [ 856.276636][ T9] m920x_read = error: -19 [ 856.290700][ T9] dvb-usb: error while querying for an remote control event. [ 856.445359][ T9] m920x_read = error: -19 [ 856.461963][ T9] dvb-usb: error while querying for an remote control event. [ 856.597483][ T5704] m920x_read = error: -19 [ 856.620349][ T5704] dvb-usb: error while querying for an remote control event. [ 856.764908][ T5704] m920x_read = error: -19 [ 856.788920][ T5704] dvb-usb: error while querying for an remote control event. [ 856.925022][ T5704] m920x_read = error: -19 [ 856.957129][ T5704] dvb-usb: error while querying for an remote control event. [ 857.074791][ T5704] m920x_read = error: -19 [ 857.096207][ T5704] dvb-usb: error while querying for an remote control event. [ 857.143045][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3358'. [ 857.225757][ T5704] m920x_read = error: -19 [ 857.234322][ T5704] dvb-usb: error while querying for an remote control event. [ 857.375714][ T5704] m920x_read = error: -19 [ 857.404036][ T5704] dvb-usb: error while querying for an remote control event. [ 857.435134][ T30] audit: type=1326 audit(1786239930.159:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.2.3361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 857.472720][T18432] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 857.537649][ T9] m920x_read = error: -19 [ 857.552425][ T9] dvb-usb: error while querying for an remote control event. [ 857.566421][T18436] fuse: Bad value for 'group_id' [ 857.573024][ T30] audit: type=1326 audit(1786239930.159:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.2.3361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 857.648709][ T30] audit: type=1326 audit(1786239930.159:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.2.3361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 857.690966][ T30] audit: type=1326 audit(1786239930.199:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.2.3361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 857.719571][ T5704] m920x_read = error: -19 [ 857.726298][ T5704] dvb-usb: error while querying for an remote control event. [ 857.740932][ T30] audit: type=1326 audit(1786239930.199:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.2.3361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 857.742634][T18436] fuse: Bad value for 'group_id' [ 857.798834][ T30] audit: type=1326 audit(1786239930.199:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.2.3361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 857.844607][T18436] binder: 18435:18436 ioctl c018620c 200000000900 returned -1 [ 857.849165][ T5704] m920x_read = error: -19 [ 857.887299][ T30] audit: type=1326 audit(1786239930.199:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.2.3361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 857.918450][ T5704] dvb-usb: error while querying for an remote control event. [ 857.926092][ T5681] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 857.955497][ T5696] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 857.992158][ T30] audit: type=1326 audit(1786239930.199:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.2.3361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 858.066462][ T9] m920x_read = error: -19 [ 858.073936][ T9] dvb-usb: error while querying for an remote control event. [ 858.093811][ T30] audit: type=1326 audit(1786239930.199:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.2.3361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fd22239e0d9 code=0x7ffc0000 [ 858.141896][ T5681] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.167761][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 858.178881][ T5696] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.178906][ T5696] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 858.178982][ T5696] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x55, changing to 0x5 [ 858.179008][ T5696] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 858.236205][ T9] m920x_read = error: -19 [ 858.257054][ T9] dvb-usb: error while querying for an remote control event. [ 858.285836][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 858.330946][ T5681] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 858.357996][ T5696] usb 4-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 858.365529][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.384787][ T9] m920x_read = error: -19 [ 858.392146][T18448] loop2: detected capacity change from 0 to 7 [ 858.394456][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.398543][ T9] dvb-usb: error while querying for an remote control event. [ 858.445451][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.454876][ T5681] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 858.466062][ T5696] usb 4-1: Product: syz [ 858.470052][ T5681] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 858.472613][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.478944][T18448] Dev loop2: unable to read RDB block 7 [ 858.508034][ T5696] usb 4-1: Manufacturer: syz [ 858.516241][ T5681] usb 2-1: Manufacturer: syz [ 858.533018][ T5696] usb 4-1: SerialNumber: syz [ 858.538675][T18448] loop2: unable to read partition table [ 858.547659][ T5681] usb 2-1: config 0 descriptor?? [ 858.567591][T18448] loop2: partition table beyond EOD, truncated [ 858.594223][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.605530][ T9] m920x_read = error: -19 [ 858.610070][ T9] dvb-usb: error while querying for an remote control event. [ 858.623955][T18448] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 858.789441][ T9] m920x_read = error: -19 [ 858.809137][ T9] dvb-usb: error while querying for an remote control event. [ 858.944832][ T9] m920x_read = error: -19 [ 858.959743][T18458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 858.982604][ T9] dvb-usb: error while querying for an remote control event. [ 859.046356][ T5681] rc_core: IR keymap rc-hauppauge not found [ 859.061896][T18459] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 859.113969][ T5681] Registered IR keymap rc-empty [ 859.154069][ T5681] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 859.170373][ T9] m920x_read = error: -19 [ 859.184234][ T9] dvb-usb: error while querying for an remote control event. [ 859.199768][ T5681] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 859.244046][ T5681] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 859.287321][ T5681] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input85 [ 859.328548][ T9] m920x_read = error: -19 [ 859.350118][ T9] dvb-usb: error while querying for an remote control event. [ 859.399672][ T5681] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 859.429254][T17555] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 859.442842][ T5681] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 859.476799][ T5681] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 859.500448][ T9] m920x_read = error: -19 [ 859.512520][ T9] dvb-usb: error while querying for an remote control event. [ 859.527929][ T5681] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 859.571522][ T5681] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 859.606733][ T5681] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 859.615998][T17555] usb 3-1: Using ep0 maxpacket: 32 [ 859.637773][T17555] usb 3-1: unable to get BOS descriptor or descriptor too short [ 859.645561][ T9] m920x_read = error: -19 [ 859.645585][ T9] dvb-usb: error while querying for an remote control event. [ 859.645703][ T5681] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 859.665687][ T5681] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 859.685551][ T5681] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 859.741576][ T5681] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 859.755813][ T187] m920x_read = error: -19 [ 859.766550][ T187] dvb-usb: error while querying for an remote control event. [ 859.766571][T17555] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 253, changing to 11 [ 859.788559][ T5681] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 859.827672][ T5681] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 859.842950][T18468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3370'. [ 859.854569][T17555] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 859.873202][ T5681] usb 2-1: USB disconnect, device number 2 [ 859.884552][T17555] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40 [ 859.905405][T17555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.925316][ T187] m920x_read = error: -19 [ 859.933042][T17555] usb 3-1: Product: syz [ 859.937326][ T187] dvb-usb: error while querying for an remote control event. [ 859.973318][T17555] usb 3-1: Manufacturer: syz [ 860.000014][T17555] usb 3-1: SerialNumber: syz [ 860.043467][T18462] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 860.045610][ T187] m920x_read = error: -19 [ 860.080375][ T187] dvb-usb: error while querying for an remote control event. [ 860.204800][ T5681] m920x_read = error: -19 [ 860.212948][ T5681] dvb-usb: error while querying for an remote control event. [ 860.258552][T18462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.271542][T18463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.298660][T18463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.321631][T18462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.336993][ T5681] m920x_read = error: -19 [ 860.353006][ T5681] dvb-usb: error while querying for an remote control event. [ 860.361385][T18463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.435464][T18462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.463313][T18463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.475317][ T5762] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 860.494792][ T5681] m920x_read = error: -19 [ 860.509584][ T5681] dvb-usb: error while querying for an remote control event. [ 860.512521][T18462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.560290][T18463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.595077][T18463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.673234][ T5681] m920x_read = error: -19 [ 860.685306][ T5681] dvb-usb: error while querying for an remote control event. [ 860.698123][ T5762] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 860.716378][ T5762] usb 6-1: can't read configurations, error -61 [ 860.838257][ T5681] m920x_read = error: -19 [ 860.852589][ T5681] dvb-usb: error while querying for an remote control event. [ 860.865486][ T5762] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 860.994915][ T5681] m920x_read = error: -19 [ 861.012140][ T5681] dvb-usb: error while querying for an remote control event. [ 861.049189][ T5762] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 861.071619][ T5762] usb 6-1: can't read configurations, error -61 [ 861.094077][ T5762] usb usb6-port1: attempt power cycle [ 861.134939][ T187] m920x_read = error: -19 [ 861.151028][ T187] dvb-usb: error while querying for an remote control event. [ 861.205052][ T5696] usb 4-1: unit 4 not found! [ 861.220772][ T5696] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 861.286375][ T187] m920x_read = error: -19 [ 861.299081][ T187] dvb-usb: error while querying for an remote control event. [ 861.391220][ T5696] usb 4-1: USB disconnect, device number 69 [ 861.434863][ T187] m920x_read = error: -19 [ 861.448619][ T187] dvb-usb: error while querying for an remote control event. [ 861.466198][ T5762] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 861.498601][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.536990][ T5762] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 861.556035][ T5762] usb 6-1: can't read configurations, error -61 [ 861.595059][ T187] m920x_read = error: -19 [ 861.604062][ T187] dvb-usb: error while querying for an remote control event. [ 861.715378][ T5762] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 861.734980][ T187] m920x_read = error: -19 [ 861.742496][ T187] dvb-usb: error while querying for an remote control event. [ 861.761979][ T5762] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 861.785402][ T5762] usb 6-1: can't read configurations, error -61 [ 861.802482][ T5762] usb usb6-port1: unable to enumerate USB device [ 861.864905][ T187] m920x_read = error: -19 [ 861.877235][ T187] dvb-usb: error while querying for an remote control event. [ 861.915422][ T5696] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 862.005032][ T187] m920x_read = error: -19 [ 862.016645][ T187] dvb-usb: error while querying for an remote control event. [ 862.057668][T18487] netlink: 'syz.1.3376': attribute type 4 has an invalid length. [ 862.066257][ T5696] usb 4-1: Using ep0 maxpacket: 32 [ 862.076971][ T5696] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 862.102818][ T5696] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 862.114398][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 862.144774][ T187] m920x_read = error: -19 [ 862.152973][ T187] dvb-usb: error while querying for an remote control event. [ 862.156841][ T5696] usb 4-1: Product: syz [ 862.181208][ T5696] usb 4-1: Manufacturer: syz [ 862.190365][ T5696] usb 4-1: SerialNumber: syz [ 862.223433][ T5696] usb 4-1: config 0 descriptor?? [ 862.231365][T17555] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 862.251305][T17555] usb 3-1: MIDIStreaming interface descriptor not found [ 862.262277][T18485] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 862.272636][ T5696] hub 4-1:0.0: bad descriptor, ignoring hub [ 862.273608][T18489] loop2: detected capacity change from 0 to 7 [ 862.288238][ T5696] hub 4-1:0.0: probe with driver hub failed with error -5 [ 862.295803][ T187] m920x_read = error: -19 [ 862.295826][ T187] dvb-usb: error while querying for an remote control event. [ 862.326674][T18489] Dev loop2: unable to read RDB block 7 [ 862.349099][T18489] loop2: unable to read partition table [ 862.374284][T18489] loop2: partition table beyond EOD, truncated [ 862.399993][T18489] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 862.409811][ T187] m920x_read = error: -19 [ 862.426945][ T187] dvb-usb: error while querying for an remote control event. [ 862.472088][T17555] usb 3-1: USB disconnect, device number 77 [ 862.564817][ T5681] m920x_read = error: -19 [ 862.571119][ T5681] dvb-usb: error while querying for an remote control event. [ 862.595284][ T187] usb 4-1: USB disconnect, device number 70 [ 862.658355][ T6642] udevd[6642]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.695085][ T5681] m920x_read = error: -19 [ 862.706809][ T5681] dvb-usb: error while querying for an remote control event. [ 862.864867][ T5704] m920x_read = error: -19 [ 862.877354][ T5704] dvb-usb: error while querying for an remote control event. [ 863.004955][ T5704] m920x_read = error: -19 [ 863.013906][ T5704] dvb-usb: error while querying for an remote control event. [ 863.023936][ T5681] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 863.134989][ T187] m920x_read = error: -19 [ 863.145308][ T187] dvb-usb: error while querying for an remote control event. [ 863.186395][ T5681] usb 4-1: Using ep0 maxpacket: 32 [ 863.194526][ T5681] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 863.208242][ T5681] usb 4-1: string descriptor 0 read error: -22 [ 863.215558][ T5681] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 863.225830][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 863.245591][ T5681] usb 4-1: config 0 descriptor?? [ 863.252306][T18485] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 863.264576][ T5681] hub 4-1:0.0: bad descriptor, ignoring hub [ 863.272346][ T5704] m920x_read = error: -19 [ 863.278773][ T5704] dvb-usb: error while querying for an remote control event. [ 863.286847][ T5681] hub 4-1:0.0: probe with driver hub failed with error -5 [ 863.345610][T17555] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 863.396003][ T5704] m920x_read = error: -19 [ 863.404739][ T5704] dvb-usb: error while querying for an remote control event. [ 863.480177][T18512] loop4: detected capacity change from 0 to 7 [ 863.489696][T18512] Dev loop4: unable to read RDB block 7 [ 863.498761][T18512] loop4: AHDI p1 p2 p3 p4 [ 863.503396][T18512] loop4: partition table partially beyond EOD, truncated [ 863.511233][T17555] usb 3-1: Using ep0 maxpacket: 8 [ 863.517666][T18512] loop4: p1 start 1601398130 is beyond EOD, truncated [ 863.525494][ T5681] m920x_read = error: -19 [ 863.530311][T17555] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 863.533073][ T5681] dvb-usb: error while querying for an remote control event. [ 863.542309][T18512] loop4: p2 start 1702059890 is beyond EOD, truncated [ 863.557034][T17555] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 863.567124][T18512] loop4: p3 size 150995200 extends beyond EOD, truncated [ 863.576204][T17555] usb 3-1: config 0 has no interface number 0 [ 863.582451][T17555] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 863.594919][ T5704] usb 4-1: USB disconnect, device number 71 [ 863.617614][T17555] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 863.635253][T17555] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 863.653326][T17555] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 863.666356][T17555] usb 3-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 863.675494][T17555] usb 3-1: Product: syz [ 863.681577][T17555] usb 3-1: Manufacturer: syz [ 863.696497][ T5681] m920x_read = error: -19 [ 863.705926][T17555] usb 3-1: config 0 descriptor?? [ 863.715134][ T5681] dvb-usb: error while querying for an remote control event. [ 863.729424][T18503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 863.766426][ T8833] udevd[8833]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 863.856059][ T5681] m920x_read = error: -19 [ 863.864939][ T5681] dvb-usb: error while querying for an remote control event. [ 863.985206][ T5704] m920x_read = error: -19 [ 864.004743][ T5704] dvb-usb: error while querying for an remote control event. [ 864.074868][ T5696] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 864.116205][ T5704] m920x_read = error: -19 [ 864.123525][ T5704] dvb-usb: error while querying for an remote control event. [ 864.241727][ T5696] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 864.247305][ T5704] m920x_read = error: -19 [ 864.260719][ T5704] dvb-usb: error while querying for an remote control event. [ 864.274256][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.287128][ T5696] usb 2-1: config 0 descriptor?? [ 864.297722][ T5696] cp210x 2-1:0.0: cp210x converter detected [ 864.359882][T18503] netlink: 'syz.2.3382': attribute type 1 has an invalid length. [ 864.374851][ T5704] m920x_read = error: -19 [ 864.381589][ T5704] dvb-usb: error while querying for an remote control event. [ 864.428179][T18503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 864.461176][T18505] veth3: entered allmulticast mode [ 864.479585][T18505] bond2: (slave veth3): Enslaving as an active interface with a down link [ 864.500992][T18503] bond2: entered promiscuous mode [ 864.504997][ T5704] m920x_read = error: -19 [ 864.517088][ T5704] dvb-usb: error while querying for an remote control event. [ 864.517154][T18503] bond2: entered allmulticast mode [ 864.551194][T17555] usb 3-1: USB disconnect, device number 78 [ 864.644812][ T5704] m920x_read = error: -19 [ 864.653824][ T5704] dvb-usb: error while querying for an remote control event. [ 864.709488][ T5696] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 864.739029][ T5696] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 864.750455][ T5696] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 864.774800][ T5704] m920x_read = error: -19 [ 864.777090][ T5696] usb 2-1: cp210x converter now attached to ttyUSB0 [ 864.796141][ T5704] dvb-usb: error while querying for an remote control event. [ 864.825238][ T5696] usb 2-1: USB disconnect, device number 3 [ 864.851241][ T5696] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 864.896593][ T5696] cp210x 2-1:0.0: device disconnected [ 864.928490][ T5704] m920x_read = error: -19 [ 864.942985][ T5704] dvb-usb: error while querying for an remote control event. [ 865.064963][ T5704] m920x_read = error: -19 [ 865.074748][ T5704] dvb-usb: error while querying for an remote control event. [ 865.187192][T18531] geneve2: entered promiscuous mode [ 865.195051][ T5681] m920x_read = error: -19 [ 865.201809][ T5681] dvb-usb: error while querying for an remote control event. [ 865.324968][ T5681] m920x_read = error: -19 [ 865.329402][ T5681] dvb-usb: error while querying for an remote control event. [ 865.444797][ T5681] m920x_read = error: -19 [ 865.446055][ T3099] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 865.449428][ T5681] dvb-usb: error while querying for an remote control event. [ 865.584865][ T5704] m920x_read = error: -19 [ 865.596197][ T5704] dvb-usb: error while querying for an remote control event. [ 865.613175][T18546] loop4: detected capacity change from 0 to 7 [ 865.626322][T18546] Dev loop4: unable to read RDB block 7 [ 865.627914][ T3099] usb 3-1: Using ep0 maxpacket: 8 [ 865.635463][T18546] loop4: AHDI p1 p2 p3 p4 [ 865.641511][T18546] loop4: partition table partially beyond EOD, truncated [ 865.650291][T18546] loop4: p1 start 1601398130 is beyond EOD, truncated [ 865.658970][T18546] loop4: p2 start 1702059890 is beyond EOD, truncated [ 865.672856][T18546] loop4: p3 size 150995200 extends beyond EOD, truncated [ 865.677900][ T3099] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.695290][ T3099] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 865.709087][ T3099] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 865.718031][ T5704] m920x_read = error: -19 [ 865.739026][ T5704] dvb-usb: error while querying for an remote control event. [ 865.742353][ T3099] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 865.773782][ T3099] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 865.787217][ T5681] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 865.799418][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 865.848919][ T3099] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 865.875951][ T3099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 865.883625][ T5704] m920x_read = error: -19 [ 865.905074][ T3099] usb 3-1: Product: syz [ 865.911075][ T3099] usb 3-1: Manufacturer: syz [ 865.912982][ T5704] dvb-usb: error while querying for an remote control event. [ 865.922167][ T3099] usb 3-1: SerialNumber: syz [ 865.954041][ T3099] usb 3-1: config 0 descriptor?? [ 865.975008][ T5681] usb 2-1: Using ep0 maxpacket: 16 [ 865.988654][ T5681] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 866.015656][ T5681] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.040406][T18550] FAULT_INJECTION: forcing a failure. [ 866.040406][T18550] name failslab, interval 1, probability 0, space 0, times 0 [ 866.045155][ T5704] m920x_read = error: -19 [ 866.058434][ T5681] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 866.067653][T18550] CPU: 0 UID: 0 PID: 18550 Comm: syz.0.3397 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.067689][T18550] Tainted: [L]=SOFTLOCKUP [ 866.067697][T18550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 866.067712][T18550] Call Trace: [ 866.067721][T18550] [ 866.067730][T18550] dump_stack_lvl+0xe8/0x150 [ 866.067767][T18550] should_fail_ex+0x40c/0x560 [ 866.067794][T18550] ? io_alloc_cache_init+0x42/0x140 [ 866.067821][T18550] should_failslab+0xa8/0x100 [ 866.067853][T18550] __kvmalloc_node_noprof+0x176/0x860 [ 866.067887][T18550] ? __kvmalloc_node_noprof+0x35c/0x860 [ 866.067914][T18550] ? io_alloc_cache_init+0x42/0x140 [ 866.067946][T18550] io_alloc_cache_init+0x42/0x140 [ 866.067974][T18550] io_ring_ctx_alloc+0x4ee/0xc40 [ 866.068013][T18550] io_uring_create+0x50/0x990 [ 866.068049][T18550] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 866.068088][T18550] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 866.068120][T18550] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 866.068165][T18550] ? __pfx_ksys_write+0x10/0x10 [ 866.068219][T18550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.068241][T18550] do_syscall_64+0x174/0x580 [ 866.068267][T18550] ? trace_irq_disable+0x3b/0x140 [ 866.068293][T18550] ? clear_bhb_loop+0x70/0xc0 [ 866.068318][T18550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.068340][T18550] RIP: 0033:0x7fce30b9e0d9 [ 866.068360][T18550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.068378][T18550] RSP: 002b:00007fce31a98ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 866.068400][T18550] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007fce30b9e0d9 [ 866.068416][T18550] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000007f3 [ 866.068430][T18550] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 866.068445][T18550] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 866.068460][T18550] R13: 0000200000000890 R14: 00007fce31a98fd8 R15: 0000000000000000 [ 866.068492][T18550] [ 866.125541][T18542] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3394'. [ 866.147298][ T5704] dvb-usb: error while querying for an remote control event. [ 866.337063][ T5681] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 866.356233][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.372459][ T5681] usb 2-1: Product: syz [ 866.386427][ T5681] usb 2-1: Manufacturer: syz [ 866.397747][ T5681] usb 2-1: SerialNumber: syz [ 866.439603][T18533] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3390'. [ 866.479507][ T3099] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 866.500822][ T3099] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 866.515556][ T5704] m920x_read = error: -19 [ 866.520021][ T5704] dvb-usb: error while querying for an remote control event. [ 866.549114][ T5681] r8152-cfgselector 2-1: Unknown version 0x0000 [ 866.566139][ T5681] r8152-cfgselector 2-1: config 0 descriptor?? [ 866.667220][ T3099] usb 3-1: USB disconnect, device number 79 [ 866.667256][ T5681] m920x_read = error: -19 [ 866.692343][ T5681] dvb-usb: error while querying for an remote control event. [ 866.824957][ T5681] m920x_read = error: -19 [ 866.829903][ T5681] dvb-usb: error while querying for an remote control event. [ 866.944841][ T5681] m920x_read = error: -19 [ 866.949337][ T5681] dvb-usb: error while querying for an remote control event. [ 867.064853][ T5681] m920x_read = error: -19 [ 867.072749][ T5681] dvb-usb: error while querying for an remote control event. [ 867.085350][ T5696] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 867.185058][ T5681] m920x_read = error: -19 [ 867.199852][ T5681] dvb-usb: error while querying for an remote control event. [ 867.255226][ T5696] usb 6-1: Using ep0 maxpacket: 16 [ 867.268327][ T5696] usb 6-1: config 4 has an invalid interface number: 9 but max is 0 [ 867.285181][ T5696] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 867.306683][ T5696] usb 6-1: config 4 has no interface number 0 [ 867.320156][ T5696] usb 6-1: config 4 interface 9 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 867.341636][ T5696] usb 6-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 867.345385][ T5681] m920x_read = error: -19 [ 867.372531][ T5696] usb 6-1: config 4 interface 9 has no altsetting 0 [ 867.374399][ T5681] dvb-usb: error while querying for an remote control event. [ 867.401466][ T5696] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 867.421154][ T5696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.437197][ T5696] usb 6-1: Product: syz [ 867.446415][ T5696] usb 6-1: Manufacturer: syz [ 867.459802][ T5696] usb 6-1: SerialNumber: syz [ 867.490479][ T5696] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 867.495303][ T5681] m920x_read = error: -19 [ 867.505503][ T5681] dvb-usb: error while querying for an remote control event. [ 867.614865][ T5681] m920x_read = error: -19 [ 867.620281][ T5681] dvb-usb: error while querying for an remote control event. [ 867.734832][ T5681] m920x_read = error: -19 [ 867.739429][ T5681] dvb-usb: error while querying for an remote control event. [ 867.856542][ T5681] m920x_read = error: -19 [ 867.865914][ T5681] dvb-usb: error while querying for an remote control event. [ 867.986038][ T5681] m920x_read = error: -19 [ 867.994826][ T5681] dvb-usb: error while querying for an remote control event. [ 868.115095][ T5681] m920x_read = error: -19 [ 868.125185][ T5681] dvb-usb: error while querying for an remote control event. [ 868.256018][ T5681] m920x_read = error: -19 [ 868.262864][ T5681] dvb-usb: error while querying for an remote control event. [ 868.384802][ T5681] m920x_read = error: -19 [ 868.392214][ T5681] dvb-usb: error while querying for an remote control event. [ 868.445353][ T5681] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 868.491541][T18578] netlink: 'syz.3.3401': attribute type 21 has an invalid length. [ 868.514838][ T5704] m920x_read = error: -19 [ 868.519267][ T5704] dvb-usb: error while querying for an remote control event. [ 868.531663][T18578] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3401'. [ 868.587776][ T5824] usb 6-1: Failed to submit usb control message: -110 [ 868.620729][ T5824] usb 6-1: unable to send the bmi data to the device: -110 [ 868.642977][ T5824] usb 6-1: unable to get target info from device [ 868.645491][ T9] m920x_read = error: -19 [ 868.663509][ T9] dvb-usb: error while querying for an remote control event. [ 868.669990][ T5824] usb 6-1: could not get target info (-110) [ 868.692064][ T5824] usb 6-1: could not probe fw (-110) [ 868.794905][ T9] m920x_read = error: -19 [ 868.800018][ T9] dvb-usb: error while querying for an remote control event. [ 868.900766][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 868.900784][ T30] audit: type=1326 audit(1786239941.629:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18587 comm="syz.1.3405" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6679e0d9 code=0x7ffc0000 [ 868.934869][ T5681] m920x_read = error: -19 [ 868.939381][ T5681] dvb-usb: error while querying for an remote control event. [ 868.964714][ T30] audit: type=1326 audit(1786239941.629:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18587 comm="syz.1.3405" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6679e0d9 code=0x7ffc0000 [ 869.015232][ T30] audit: type=1326 audit(1786239941.629:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18587 comm="syz.1.3405" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6b6679e0d9 code=0x7ffc0000 [ 869.055339][ T30] audit: type=1326 audit(1786239941.629:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18587 comm="syz.1.3405" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6679e0d9 code=0x7ffc0000 [ 869.065120][ T5681] m920x_read = error: -19 [ 869.084303][ T9] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 869.093018][ T30] audit: type=1326 audit(1786239941.629:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18587 comm="syz.1.3405" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f6b6679e0d9 code=0x7ffc0000 [ 869.110050][ T5681] dvb-usb: error while querying for an remote control event. [ 869.125893][ T30] audit: type=1326 audit(1786239941.629:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18587 comm="syz.1.3405" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6679e0d9 code=0x7ffc0000 [ 869.153229][ T30] audit: type=1326 audit(1786239941.629:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18587 comm="syz.1.3405" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6679e0d9 code=0x7ffc0000 [ 869.180756][ T30] audit: type=1326 audit(1786239941.649:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18587 comm="syz.1.3405" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6679e0d9 code=0x7ffc0000 [ 869.232206][ T30] audit: type=1326 audit(1786239941.699:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18587 comm="syz.1.3405" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6679e0d9 code=0x7ffc0000 [ 869.244951][ T5681] m920x_read = error: -19 [ 869.259042][ T30] audit: type=1326 audit(1786239941.699:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18587 comm="syz.1.3405" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b6679e0d9 code=0x7ffc0000 [ 869.265542][ T9] usb 3-1: device descriptor read/64, error -71 [ 869.292324][ T5681] dvb-usb: error while querying for an remote control event. [ 869.404836][ T5681] m920x_read = error: -19 [ 869.413835][ T5681] dvb-usb: error while querying for an remote control event. [ 869.524775][ T5681] m920x_read = error: -19 [ 869.535419][ T9] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 869.544020][ T5681] dvb-usb: error while querying for an remote control event. [ 869.578257][T18596] loop4: detected capacity change from 0 to 7 [ 869.585847][T18596] Dev loop4: unable to read RDB block 7 [ 869.591604][T18596] loop4: AHDI p1 p2 p3 p4 [ 869.597412][T18596] loop4: partition table partially beyond EOD, truncated [ 869.629610][T18596] loop4: p1 start 1601398130 is beyond EOD, truncated [ 869.646754][T18596] loop4: p2 start 1702059890 is beyond EOD, truncated [ 869.653687][T18596] loop4: p3 size 150995200 extends beyond EOD, truncated [ 869.674824][ T5681] m920x_read = error: -19 [ 869.679340][ T5681] dvb-usb: error while querying for an remote control event. [ 869.693198][T18598] FAULT_INJECTION: forcing a failure. [ 869.693198][T18598] name failslab, interval 1, probability 0, space 0, times 0 [ 869.705251][ T9] usb 3-1: device descriptor read/64, error -71 [ 869.720566][T18598] CPU: 1 UID: 0 PID: 18598 Comm: syz.0.3408 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.720598][T18598] Tainted: [L]=SOFTLOCKUP [ 869.720606][T18598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 869.720620][T18598] Call Trace: [ 869.720628][T18598] [ 869.720638][T18598] dump_stack_lvl+0xe8/0x150 [ 869.720672][T18598] should_fail_ex+0x40c/0x560 [ 869.720707][T18598] ? io_alloc_cache_init+0x42/0x140 [ 869.720750][T18598] should_failslab+0xa8/0x100 [ 869.720782][T18598] __kvmalloc_node_noprof+0x176/0x860 [ 869.720814][T18598] ? __kvmalloc_node_noprof+0x35c/0x860 [ 869.720842][T18598] ? io_alloc_cache_init+0x42/0x140 [ 869.720872][T18598] io_alloc_cache_init+0x42/0x140 [ 869.720900][T18598] io_ring_ctx_alloc+0x512/0xc40 [ 869.720938][T18598] io_uring_create+0x50/0x990 [ 869.720973][T18598] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 869.721001][T18598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 869.721032][T18598] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 869.721076][T18598] ? __pfx_ksys_write+0x10/0x10 [ 869.721118][T18598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.721141][T18598] do_syscall_64+0x174/0x580 [ 869.721171][T18598] ? trace_irq_disable+0x3b/0x140 [ 869.721197][T18598] ? clear_bhb_loop+0x70/0xc0 [ 869.721223][T18598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.721245][T18598] RIP: 0033:0x7fce30b9e0d9 [ 869.721272][T18598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.721290][T18598] RSP: 002b:00007fce31a98ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 869.721313][T18598] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007fce30b9e0d9 [ 869.721329][T18598] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000007f3 [ 869.721344][T18598] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 869.721359][T18598] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 869.721374][T18598] R13: 0000200000000890 R14: 00007fce31a98fd8 R15: 0000000000000000 [ 869.721407][T18598] [ 869.934057][ T5681] m920x_read = error: -19 [ 869.943178][ T5681] dvb-usb: error while querying for an remote control event. [ 869.956133][ T9] usb usb3-port1: attempt power cycle [ 869.963701][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 870.016526][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.022932][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.042862][ T5704] usb 6-1: USB disconnect, device number 62 [ 870.074853][ T5681] m920x_read = error: -19 [ 870.079356][ T5681] dvb-usb: error while querying for an remote control event. [ 870.248535][ T187] m920x_read = error: -19 [ 870.254867][ T187] dvb-usb: error while querying for an remote control event. [ 870.282166][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3409'. [ 870.299672][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3409'. [ 870.309120][ T9] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 870.337903][ T9] usb 3-1: device descriptor read/8, error -71 [ 870.375457][ T5704] m920x_read = error: -19 [ 870.389068][ T5704] dvb-usb: error while querying for an remote control event. [ 870.404753][ T5681] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 870.515431][ T5704] m920x_read = error: -19 [ 870.524603][ T5704] dvb-usb: error while querying for an remote control event. [ 870.575399][ T5681] usb 2-1: Using ep0 maxpacket: 8 [ 870.584095][ T5681] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.595061][ T9] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 870.612509][ T5681] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 870.634483][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 870.648118][ T9] usb 3-1: device descriptor read/8, error -71 [ 870.665192][ T5704] m920x_read = error: -19 [ 870.671829][ T5704] dvb-usb: error while querying for an remote control event. [ 870.680592][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 870.700422][ T5681] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 870.749720][ T5681] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 870.767961][ T9] usb usb3-port1: unable to enumerate USB device [ 870.776276][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 870.796117][ T5681] usb 2-1: Product: syz [ 870.805467][ T9] m920x_read = error: -19 [ 870.810173][ T9] dvb-usb: error while querying for an remote control event. [ 870.817951][ T5681] usb 2-1: Manufacturer: syz [ 870.829446][ T5681] usb 2-1: SerialNumber: syz [ 870.839593][ T5681] usb 2-1: config 0 descriptor?? [ 870.936744][ T9] m920x_read = error: -19 [ 870.952464][ T9] dvb-usb: error while querying for an remote control event. [ 871.034886][T18632] bridge_slave_0: left allmulticast mode [ 871.050947][T18632] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.076138][ T9] m920x_read = error: -19 [ 871.089539][T18632] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 871.099010][ T9] dvb-usb: error while querying for an remote control event. [ 871.189230][ T5681] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 871.210959][ T5681] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 871.234983][ T9] m920x_read = error: -19 [ 871.244296][ T9] dvb-usb: error while querying for an remote control event. [ 871.343651][T18639] ipvlan2: entered promiscuous mode [ 871.352633][T18639] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 871.365154][ T9] m920x_read = error: -19 [ 871.365194][ T9] dvb-usb: error while querying for an remote control event. [ 871.381436][T18639] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 871.403914][T18639] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 871.474955][ T5704] m920x_read = error: -19 [ 871.479847][ T5704] dvb-usb: error while querying for an remote control event. [ 871.487515][ T5681] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 871.505643][ T5681] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 871.515208][ T5681] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 871.541453][ T5681] usb 2-1: USB disconnect, device number 5 [ 871.604953][ T5704] m920x_read = error: -19 [ 871.611702][ T5704] dvb-usb: error while querying for an remote control event. [ 871.624777][ T9] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 871.735485][ T5681] m920x_read = error: -19 [ 871.744730][ T5681] dvb-usb: error while querying for an remote control event. [ 871.764749][ T9] usb 6-1: device descriptor read/64, error -71 [ 871.866323][ T5704] m920x_read = error: -19 [ 871.878585][ T5704] dvb-usb: error while querying for an remote control event. [ 872.026733][ T5681] m920x_read = error: -19 [ 872.035249][ T5681] dvb-usb: error while querying for an remote control event. [ 872.045950][ T9] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 872.177017][ T5681] m920x_read = error: -19 [ 872.190345][ T5681] dvb-usb: error while querying for an remote control event. [ 872.206710][ T9] usb 6-1: device descriptor read/64, error -71 [ 872.286916][T18654] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3424'. [ 872.337728][ T5681] m920x_read = error: -19 [ 872.342214][ T9] usb usb6-port1: attempt power cycle [ 872.351157][ T5681] dvb-usb: error while querying for an remote control event. [ 881.204553][ T5681] m920x_read = error: -19 [ 881.224099][ T5681] dvb-usb: error while querying for an remote control event. [ 986.274621][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 986.281745][ C0] rcu: 1-...!: (2 GPs behind) idle=a36c/1/0x4000000000000000 softirq=129553/129553 fqs=1 [ 986.293072][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15568 [ 986.300491][ C0] rcu: (detected by 0, t=10502 jiffies, g=168649, q=695 ncpus=2) [ 986.308308][ C0] Sending NMI from CPU 0 to CPUs 1: [ 986.308346][ C1] NMI backtrace for cpu 1 [ 986.308365][ C1] CPU: 1 UID: 0 PID: 15568 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 986.308387][ C1] Tainted: [L]=SOFTLOCKUP [ 986.308393][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 986.308404][ C1] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 986.308434][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 a0 cf c0 11 cb f1 24 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 986.308459][ C1] RSP: 0018:ffffc90000a07450 EFLAGS: 00000002 [ 986.308472][ C1] RAX: ffffffff81b3dbf0 RBX: 0000000000000001 RCX: 0000000000010100 [ 986.308483][ C1] RDX: ffff8880315e9f00 RSI: 0000000000000001 RDI: 0000000000000002 [ 986.308492][ C1] RBP: 0000000000000000 R08: ffffffff90574637 R09: 1ffffffff20ae8c6 [ 986.308503][ C1] R10: dffffc0000000000 R11: fffffbfff20ae8c7 R12: 0000000000000001 [ 986.308514][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 986.308524][ C1] FS: 0000555580ebe500(0000) GS:ffff888125055000(0000) knlGS:0000000000000000 [ 986.308537][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 986.308547][ C1] CR2: 00007f65133556c8 CR3: 000000007b308000 CR4: 00000000003526f0 [ 986.308561][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000460 [ 986.308569][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 986.308579][ C1] Call Trace: [ 986.308586][ C1] [ 986.308595][ C1] trace_hrtimer_start+0x79/0x200 [ 986.308614][ C1] enqueue_hrtimer+0xb7/0x2c0 [ 986.308631][ C1] __hrtimer_run_queues+0x4ce/0xa10 [ 986.308658][ C1] hrtimer_interrupt+0x448/0x910 [ 986.308684][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 986.308710][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 986.308729][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 986.308745][ C1] RIP: 0010:unwind_next_frame+0x9a0/0x2550 [ 986.308761][ C1] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 8a 12 bd 00 48 8b 3b 48 85 ff 0f 84 db 0d 00 00 48 83 c7 50 e9 2d 01 00 00 48 8b 44 24 38 <42> 80 3c 20 00 74 0c 48 89 ef e8 61 12 bd 00 49 8d 55 04 4c 8b 45 [ 986.308773][ C1] RSP: 0018:ffffc90000a077c0 EFLAGS: 00000246 [ 986.308785][ C1] RAX: 1ffff92000140f14 RBX: 0000000000000003 RCX: ffffffff90d1f4ec [ 986.308813][ C1] RDX: ffffffff9180763e RSI: ffffffff9180763a RDI: ffffffff8c4bbe20 [ 986.308825][ C1] RBP: ffffc90000a078a0 R08: 0000000000000001 R09: 0000000000000000 [ 986.308836][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 986.308847][ C1] R13: ffffffff9180763a R14: ffffc90000a07868 R15: 1ffff92000140f0d [ 986.308870][ C1] ? tcp_v4_do_rcv+0x727/0x13b0 [ 986.308892][ C1] ? unwind_next_frame+0x8f/0x2550 [ 986.308908][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 986.308927][ C1] arch_stack_walk+0x11b/0x150 [ 986.308954][ C1] ? tcp_v4_do_rcv+0x727/0x13b0 [ 986.308977][ C1] stack_trace_save+0xa9/0x100 [ 986.308995][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 986.309014][ C1] ? __lock_acquire+0x683/0x2cf0 [ 986.309036][ C1] kasan_save_track+0x3e/0x80 [ 986.309055][ C1] ? kasan_save_track+0x3e/0x80 [ 986.309072][ C1] ? kasan_save_free_info+0x40/0x50 [ 986.309086][ C1] ? __kasan_slab_free+0x5c/0x80 [ 986.309105][ C1] ? kfree+0x1c5/0x640 [ 986.309119][ C1] ? skb_release_data+0x85e/0xab0 [ 986.309135][ C1] ? __kfree_skb+0x5d/0x210 [ 986.309149][ C1] ? tcp_data_queue+0x1d72/0x5fa0 [ 986.309168][ C1] ? tcp_rcv_established+0xe45/0x2910 [ 986.309186][ C1] ? tcp_v4_do_rcv+0x727/0x13b0 [ 986.309230][ C1] kasan_save_free_info+0x40/0x50 [ 986.309246][ C1] __kasan_slab_free+0x5c/0x80 [ 986.309266][ C1] kfree+0x1c5/0x640 [ 986.309281][ C1] ? skb_release_data+0x85e/0xab0 [ 986.309299][ C1] skb_release_data+0x85e/0xab0 [ 986.309320][ C1] __kfree_skb+0x5d/0x210 [ 986.309336][ C1] tcp_data_queue+0x1d72/0x5fa0 [ 986.309366][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 986.309385][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 986.309403][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 986.309422][ C1] ? ktime_get+0x45/0x220 [ 986.309440][ C1] ? ktime_get+0x1f5/0x220 [ 986.309459][ C1] tcp_rcv_established+0xe45/0x2910 [ 986.309487][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 986.309506][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 986.309526][ C1] tcp_v4_do_rcv+0x727/0x13b0 [ 986.309551][ C1] tcp_v4_rcv+0x27d4/0x3170 [ 986.309590][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 986.309611][ C1] ? raw_local_deliver+0x345/0x1010 [ 986.309628][ C1] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 986.309658][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 986.309680][ C1] ip_protocol_deliver_rcu+0x21d/0x440 [ 986.309703][ C1] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 986.309725][ C1] ip_local_deliver_finish+0x3bb/0x6f0 [ 986.309750][ C1] NF_HOOK+0x336/0x3c0 [ 986.309772][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 986.309794][ C1] ? NF_HOOK+0x9e/0x3c0 [ 986.309814][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 986.309840][ C1] ? ip_local_deliver+0x113/0x190 [ 986.309861][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 986.309882][ C1] ip_sublist_rcv_finish+0x1f0/0x240 [ 986.309907][ C1] ip_sublist_rcv+0x767/0xa70 [ 986.309935][ C1] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 986.309956][ C1] ? arch_stack_walk+0x11b/0x150 [ 986.309981][ C1] ? __asan_memset+0x22/0x50 [ 986.309998][ C1] ? ip_rcv_core+0x88d/0xd50 [ 986.310022][ C1] ip_list_rcv+0x3ec/0x440 [ 986.310058][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 986.310077][ C1] ? ip_fast_csum+0x1ee/0x2b0 [ 986.310100][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 986.310121][ C1] __netif_receive_skb_list_core+0x804/0x830 [ 986.310149][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 986.310170][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 986.310188][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 986.310207][ C1] ? ktime_get_with_offset+0x27f/0x2d0 [ 986.310227][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 986.310250][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 986.310270][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 986.310290][ C1] ? receive_buf+0xf9b/0x1b70 [ 986.310315][ C1] napi_complete_done+0x299/0x730 [ 986.310336][ C1] ? virtqueue_get_buf_ctx+0x129/0x2150 [ 986.310356][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 986.310378][ C1] ? virtqueue_enable_cb_prepare+0x26d/0x950 [ 986.310400][ C1] virtnet_poll+0x2768/0x3190 [ 986.310426][ C1] ? virtqueue_poll+0x14e/0x360 [ 986.310447][ C1] ? __pfx_virtnet_poll+0x10/0x10 [ 986.310465][ C1] ? __lock_acquire+0x683/0x2cf0 [ 986.310494][ C1] ? xdp_do_check_flushed+0x204/0x230 [ 986.310511][ C1] __napi_poll+0xaa/0x330 [ 986.310532][ C1] net_rx_action+0x61d/0xf50 [ 986.310576][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 986.310603][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 986.310628][ C1] handle_softirqs+0x225/0x840 [ 986.310646][ C1] ? __irq_exit_rcu+0xca/0x220 [ 986.310674][ C1] __irq_exit_rcu+0xca/0x220 [ 986.310691][ C1] irq_exit_rcu+0x9/0x30 [ 986.310705][ C1] common_interrupt+0xbb/0xe0 [ 986.310720][ C1] [ 986.310726][ C1] [ 986.310732][ C1] asm_common_interrupt+0x26/0x40 [ 986.310748][ C1] RIP: 0010:finish_task_switch+0x417/0xc60 [ 986.310764][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 d5 06 00 00 49 83 c4 48 4c 89 e7 e8 53 dc 3d 0a e8 de aa 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 986.310776][ C1] RSP: 0018:ffffc900057b70a0 EFLAGS: 00000206 [ 986.310807][ C1] RAX: 0000000000119271 RBX: ffff8880b873bf20 RCX: 0000000080000001 [ 986.310819][ C1] RDX: 0000000000000000 RSI: ffffffff8e228932 RDI: ffffffff8c4bbe80 [ 986.310848][ C1] RBP: ffffc900057b70f0 R08: ffffffff90574637 R09: 1ffffffff20ae8c6 [ 986.310861][ C1] R10: dffffc0000000000 R11: fffffbfff20ae8c7 R12: ffff8880315e9f00 [ 986.310874][ C1] R13: ffff8880b873bee8 R14: dffffc0000000000 R15: 1ffff110170e77e4 [ 986.310901][ C1] __schedule+0x17e1/0x56c0 [ 986.310929][ C1] ? __update_page_owner_handle+0x5a/0x580 [ 986.310958][ C1] ? __pfx___schedule+0x10/0x10 [ 986.310980][ C1] ? __lock_acquire+0x683/0x2cf0 [ 986.311008][ C1] preempt_schedule_irq+0x4d/0xa0 [ 986.311029][ C1] irqentry_exit+0x14f/0x8f0 [ 986.311055][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 986.311073][ C1] RIP: 0010:unwind_next_frame+0x2b1/0x2550 [ 986.311089][ C1] Code: 4e 8d 24 82 49 83 c4 fc 49 89 d5 4c 39 e2 0f 86 22 02 00 00 49 29 d5 49 c1 fd 02 4a 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 14 46 <49> bc 00 00 00 00 00 fc ff df e9 8c 01 00 00 31 ed e9 e8 18 00 00 [ 986.311104][ C1] RSP: 0018:ffffc900057b7420 EFLAGS: 00000246 [ 986.311118][ C1] RAX: 0000000000000000 RBX: ffffffff906a8960 RCX: ffffffff906a8964 [ 986.311130][ C1] RDX: ffffffff90e554ee RSI: ffffffff90e554ee RDI: ffffffff8c4bbe20 [ 986.311144][ C1] RBP: ffffffff8100012f R08: 0000000000000022 R09: 0000000000000000 [ 986.311156][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff906a8960 [ 986.311169][ C1] R13: 0000000000000000 R14: ffffc900057b74c8 R15: ffffffff906a8964 [ 986.311183][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7f [ 986.311211][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.311228][ C1] ? unwind_next_frame+0x8f/0x2550 [ 986.311245][ C1] ? alloc_fdtable+0x101/0x2c0 [ 986.311264][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 986.311286][ C1] arch_stack_walk+0x11b/0x150 [ 986.311315][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.311335][ C1] stack_trace_save+0xa9/0x100 [ 986.311355][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 986.311378][ C1] ? __pfx___css_rstat_updated+0x10/0x10 [ 986.311401][ C1] kasan_save_track+0x3e/0x80 [ 986.311422][ C1] ? kasan_save_track+0x3e/0x80 [ 986.311442][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 986.311462][ C1] ? __kvmalloc_node_noprof+0x53f/0x860 [ 986.311485][ C1] ? alloc_fdtable+0x101/0x2c0 [ 986.311503][ C1] ? dup_fd+0x7fe/0xaf0 [ 986.311521][ C1] ? copy_files+0xaf/0x120 [ 986.311537][ C1] ? copy_process+0x1cca/0x4390 [ 986.311554][ C1] ? kernel_clone+0x2d7/0x940 [ 986.311573][ C1] ? __x64_sys_clone+0x1b6/0x230 [ 986.311592][ C1] ? do_syscall_64+0x174/0x580 [ 986.311614][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.311661][ C1] __kasan_kmalloc+0x93/0xb0 [ 986.311683][ C1] __kvmalloc_node_noprof+0x53f/0x860 [ 986.311708][ C1] ? __kvmalloc_node_noprof+0x35c/0x860 [ 986.311730][ C1] ? alloc_fdtable+0x101/0x2c0 [ 986.311753][ C1] alloc_fdtable+0x101/0x2c0 [ 986.311772][ C1] ? dup_fd+0x7f5/0xaf0 [ 986.311792][ C1] dup_fd+0x7fe/0xaf0 [ 986.311814][ C1] ? apparmor_task_alloc+0x1bd/0x240 [ 986.311841][ C1] copy_files+0xaf/0x120 [ 986.311860][ C1] ? copy_process+0xd3c/0x4390 [ 986.311877][ C1] copy_process+0x1cca/0x4390 [ 986.311900][ C1] ? copy_process+0xd3c/0x4390 [ 986.311928][ C1] ? __pfx_copy_process+0x10/0x10 [ 986.311952][ C1] kernel_clone+0x2d7/0x940 [ 986.311988][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 986.312017][ C1] __x64_sys_clone+0x1b6/0x230 [ 986.312039][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 986.312079][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 986.312104][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.312120][ C1] do_syscall_64+0x174/0x580 [ 986.312141][ C1] ? trace_irq_disable+0x3b/0x140 [ 986.312160][ C1] ? clear_bhb_loop+0x70/0xc0 [ 986.312179][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.312195][ C1] RIP: 0033:0x7f65125c6b52 [ 986.312210][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 986.312222][ C1] RSP: 002b:00007f651294fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 986.312238][ C1] RAX: ffffffffffffffda RBX: 00007f651294fc60 RCX: 00007f65125c6b52 [ 986.312250][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 986.312259][ C1] RBP: 00007f651294fdec R08: 0000000000000000 R09: 0000000000000001 [ 986.312270][ C1] R10: 0000555580ebe7d0 R11: 0000000000000246 R12: 0000000000000001 [ 986.312281][ C1] R13: 0000000000000063 R14: 00000000000d4b73 R15: 00007f651294fe40 [ 986.312300][ C1] [ 986.312341][ C0] task:syz-executor state:R running task stack:22512 pid:15568 tgid:15568 ppid:15563 task_flags:0x400140 flags:0x00080010 [ 987.504180][ C0] Call Trace: [ 987.507487][ C0] [ 987.510448][ C0] ? __schedule+0x17e1/0x56c0 [ 987.515159][ C0] ? __update_page_owner_handle+0x5a/0x580 [ 987.521003][ C0] ? __pfx___schedule+0x10/0x10 [ 987.525901][ C0] ? __lock_acquire+0x683/0x2cf0 [ 987.530870][ C0] ? preempt_schedule_irq+0x4d/0xa0 [ 987.536111][ C0] ? irqentry_exit+0x14f/0x8f0 [ 987.540911][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 987.546598][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7f [ 987.552731][ C0] ? unwind_next_frame+0x2b1/0x2550 [ 987.557955][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.564044][ C0] ? unwind_next_frame+0x8f/0x2550 [ 987.569174][ C0] ? alloc_fdtable+0x101/0x2c0 [ 987.573951][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 987.580126][ C0] ? arch_stack_walk+0x11b/0x150 [ 987.585091][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.591178][ C0] ? stack_trace_save+0xa9/0x100 [ 987.596145][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 987.601546][ C0] ? __pfx___css_rstat_updated+0x10/0x10 [ 987.607219][ C0] ? kasan_save_track+0x3e/0x80 [ 987.612089][ C0] ? kasan_save_track+0x3e/0x80 [ 987.616966][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 987.621746][ C0] ? __kvmalloc_node_noprof+0x53f/0x860 [ 987.627320][ C0] ? alloc_fdtable+0x101/0x2c0 [ 987.632099][ C0] ? dup_fd+0x7fe/0xaf0 [ 987.636266][ C0] ? copy_files+0xaf/0x120 [ 987.640700][ C0] ? copy_process+0x1cca/0x4390 [ 987.645566][ C0] ? kernel_clone+0x2d7/0x940 [ 987.650289][ C0] ? __x64_sys_clone+0x1b6/0x230 [ 987.655251][ C0] ? do_syscall_64+0x174/0x580 [ 987.660038][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.666176][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 987.670966][ C0] ? __kvmalloc_node_noprof+0x53f/0x860 [ 987.676545][ C0] ? __kvmalloc_node_noprof+0x35c/0x860 [ 987.682113][ C0] ? alloc_fdtable+0x101/0x2c0 [ 987.686906][ C0] ? alloc_fdtable+0x101/0x2c0 [ 987.691690][ C0] ? dup_fd+0x7f5/0xaf0 [ 987.695872][ C0] ? dup_fd+0x7fe/0xaf0 [ 987.700061][ C0] ? apparmor_task_alloc+0x1bd/0x240 [ 987.705372][ C0] ? copy_files+0xaf/0x120 [ 987.709807][ C0] ? copy_process+0xd3c/0x4390 [ 987.714587][ C0] ? copy_process+0x1cca/0x4390 [ 987.719465][ C0] ? copy_process+0xd3c/0x4390 [ 987.724265][ C0] ? __pfx_copy_process+0x10/0x10 [ 987.729328][ C0] ? kernel_clone+0x2d7/0x940 [ 987.734034][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 987.739114][ C0] ? __x64_sys_clone+0x1b6/0x230 [ 987.744075][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 987.749406][ C0] ? do_user_addr_fault+0xc4a/0x1340 [ 987.754717][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.760829][ C0] ? do_syscall_64+0x174/0x580 [ 987.765636][ C0] ? trace_irq_disable+0x3b/0x140 [ 987.770685][ C0] ? clear_bhb_loop+0x70/0xc0 [ 987.775391][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.781496][ C0] [ 987.784548][ C0] rcu: rcu_preempt kthread starved for 10497 jiffies! g168649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 987.795842][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 987.805819][ C0] rcu: RCU grace-period kthread stack dump: [ 987.811740][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 987.825262][ C0] Call Trace: [ 987.828556][ C0] [ 987.831546][ C0] __schedule+0x17d9/0x56c0 [ 987.836116][ C0] ? __pfx___schedule+0x10/0x10 [ 987.840993][ C0] ? schedule+0x90/0x2b0 [ 987.845270][ C0] schedule+0x164/0x2b0 [ 987.849444][ C0] schedule_timeout+0x152/0x2c0 [ 987.854313][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 987.859709][ C0] ? __pfx_process_timeout+0x10/0x10 [ 987.865019][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 987.870853][ C0] ? prepare_to_swait_event+0x322/0x350 [ 987.876439][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 987.881353][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 987.887272][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 987.892597][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 987.897830][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 987.903660][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 987.908294][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 987.913521][ C0] ? __kthread_parkme+0x71/0x1f0 [ 987.918481][ C0] ? __kthread_parkme+0x196/0x1f0 [ 987.923526][ C0] kthread+0x388/0x470 [ 987.927652][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 987.932875][ C0] ? __pfx_kthread+0x10/0x10 [ 987.937514][ C0] ret_from_fork+0x514/0xb70 [ 987.942131][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 987.947265][ C0] ? __switch_to+0xc89/0x1420 [ 987.951972][ C0] ? __pfx_kthread+0x10/0x10 [ 987.956612][ C0] ret_from_fork_asm+0x1a/0x30 [ 987.961419][ C0] [ 987.964456][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 987.970811][ C0] CPU: 0 UID: 0 PID: 5809 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.981994][ C0] Tainted: [L]=SOFTLOCKUP [ 987.986331][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 987.996401][ C0] Workqueue: events_unbound toggle_allocation_gate [ 988.002930][ C0] RIP: 0010:smp_call_function_many_cond+0x11e6/0x15f0 [ 988.009708][ C0] Code: c0 75 7a 41 8b 1e 89 de 83 e6 01 31 ff e8 e2 1e 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 8e 1a 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 73 1a 0c [ 988.029327][ C0] RSP: 0018:ffffc90004f9f700 EFLAGS: 00000293 [ 988.035408][ C0] RAX: ffffffff81bae81d RBX: dffffc0000000000 RCX: ffff888031713e00 [ 988.043393][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 988.051382][ C0] RBP: ffffc90004f9f860 R08: ffffffff90574637 R09: 1ffffffff20ae8c6 [ 988.059374][ C0] R10: dffffc0000000000 R11: fffffbfff20ae8c7 R12: 1ffff110170e81d1 [ 988.067365][ C0] R13: ffff8880b863c448 R14: ffff8880b8740e88 R15: 0000000000000001 [ 988.075348][ C0] FS: 0000000000000000(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 988.084285][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 988.090890][ C0] CR2: 00007f65127ef2f8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 988.098891][ C0] Call Trace: [ 988.102186][ C0] [ 988.105138][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 988.110187][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 988.116541][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 988.121953][ C0] ? kmem_cache_alloc_bulk_noprof+0xb7/0x7b0 [ 988.127979][ C0] ? __pfx___text_poke+0x10/0x10 [ 988.132967][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 988.138018][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 988.143147][ C0] smp_text_poke_batch_finish+0x5fd/0x1110 [ 988.148974][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 988.154979][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 988.160067][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 988.166368][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 988.172642][ C0] ? __jump_label_update+0x347/0x370 [ 988.177964][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 988.183964][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 988.189884][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 988.195627][ C0] static_key_enable+0x1a/0x20 [ 988.200408][ C0] toggle_allocation_gate+0xab/0x290 [ 988.205713][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 988.211629][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 988.217375][ C0] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 988.223455][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 988.229191][ C0] process_scheduled_works+0xa8e/0x14e0 [ 988.234771][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 988.240772][ C0] ? assign_work+0x3cf/0x5d0 [ 988.245410][ C0] worker_thread+0xa47/0xfb0 [ 988.250032][ C0] ? __kthread_parkme+0x71/0x1f0 [ 988.254989][ C0] kthread+0x388/0x470 [ 988.259095][ C0] ? __pfx_worker_thread+0x10/0x10 [ 988.264221][ C0] ? __pfx_kthread+0x10/0x10 [ 988.268833][ C0] ret_from_fork+0x514/0xb70 [ 988.273456][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 988.278603][ C0] ? __switch_to+0xc89/0x1420 [ 988.283311][ C0] ? __pfx_kthread+0x10/0x10 [ 988.287993][ C0] ret_from_fork_asm+0x1a/0x30 [ 988.292818][ C0]