last executing test programs: 3m28.185454665s ago: executing program 3 (id=234): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$rtl8150(0x0, 0x2e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r1) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000100)=0x9) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x18) r2 = socket$kcm(0x2, 0x3, 0x2) io_destroy(0x0) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x800, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYRESHEX=r1], 0x48}, 0x20002800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x10) syz_usb_ep_read(r1, 0xd, 0x1c, &(0x7f0000000140)=""/28) 3m26.237458075s ago: executing program 3 (id=249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c840}, 0x840) r3 = openat(0xffffffffffffff9c, 0x0, 0x142, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x158, 0x1, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x5e, 0x6, "a901c45c29577b37f668f1ef23ecece6ae4b65c5952a1869aa4b3dedbb70984d484dd5d4a9308a4edb74586bba9f1e983b4631a6969f8523786b943ba3573a7ed7eae3e32bc3d8b1ba1fb4fccfe2f28bf55faa9bc0cec2dc9b56"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc4, 0x6, "765f70659017a04b7d052f0095e299a9ca22c1e128bb158dbf9472adf4dbf262da8d3b31f1948d429b2d022263caaeac69eba1a64a4ddd2977b5702aae3df600e7f582eb266802cdb0ffb85c331facacf187a934d4e6273f7dff48d7c8fc7694b4ae8285f31ed0675a48133ee382cc484370b7be45898c0ae53ac44239e0c5c4e2071796050ef3c23f1a172e314bcdf76bc3ba58c73522a846fbda20dd625acdd3a2a9ae1ce10aa5b43d8aa3c702802ad2ca518ee1af7cc46538c9cea1bd80dd"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0x14}, 0x84c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), &(0x7f00000002c0)=0xc) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0) rmdir(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x240008c4) fcntl$addseals(r3, 0x409, 0x0) 3m26.14764762s ago: executing program 3 (id=250): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (fail_nth: 11) 3m25.773199534s ago: executing program 3 (id=252): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x20000004}, 0x4000085) pivot_root(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000340)='./file0\x00') sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x101) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r1, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="b80000000000000029000000390000002e14001f0000000000000000000000000000000000000000fe8000000000000000000000000000aafc010000000000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000aaff020000000000000000000000000001000000000000000000000000000000000000000000000001000000001400000000000000290000000b0000000000000700000000140000000000000029000000430000007f00000000000000c8000000000000002900000036000000061500000000000007100000000002d703000100000000000000050200080091085b0b318354e5082a9355bf591e72614f4fa53a445c2a4f0e296eabb5ffd758531ab6025ce0f0b7abe1bb9e26f1cdd2411c3d040a879dd5bcf7b9972cf3e7cf8ea7b4b1b2578482e9ff0d66e99b73f1b67580b3f1184c92f2a267be4ffeaab53cde10078b9443a8be1cad217e68377845671713491a746fff07000082dc354d7cc1bdac59baa30f0000d3ace081b90502000700000000000000000000002900000043000000010000000000000000000000ba368bccc824dd736de16f69a55303cd7835b9ec0efd44b6373e000000000000000000002d7414d807f31bc8c9af47363f90978093a75ec2b00b0f0733d9f98278c3aacdd0342d8cd2f022bba1aefee26a99258c9b6b0376b242b8b8360b2197099426f5d641f7443cbfb7ebabf10f7d34cf23"], 0x1e0}}, {{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYRES32]}}], 0x2, 0x20e8880) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400fffe69bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000180)="e4eba9c15d1ee9eb1913bcf106b9b1bb86172d891122171bc44f929c668058cce40ea87402e90200518ed4516e2d4fbc906d645a81939dfb0000959ce7e19237140c51c44c", 0x45, 0x800, 0x0, 0x0) write(r0, &(0x7f0000000100)='-0', 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000280)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x808}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x41, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES64=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="64000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000004000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x88, 0x40010}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x440, 0x0) connect$can_j1939(r5, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x1}, 0x1}, 0x18) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 3m25.358396252s ago: executing program 3 (id=254): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x20000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) read$midi(r0, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 3m24.529559118s ago: executing program 3 (id=261): keyctl$session_to_parent(0x12) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080)) add_key(&(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={r2, 0xffff, 0x2, 0x40}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r2, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x1, @empty, 0x8}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x1, 0x84) 3m24.302427731s ago: executing program 32 (id=261): keyctl$session_to_parent(0x12) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080)) add_key(&(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={r2, 0xffff, 0x2, 0x40}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r2, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x1, @empty, 0x8}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x1, 0x84) 1m28.916817393s ago: executing program 0 (id=783): mkdir(&(0x7f0000000400)='./file0\x00', 0x3f) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40, 0x3}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4000, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x3, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000100)=0x9) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f00000000c0)=0x8) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b02, 0x0) syz_usb_disconnect(r2) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x0, 0x22, 0xf9, {0xf9, 0x31, "c01d6b9d1217b8a9d8c2f5493a2b3a4f341524383aca96c00cda665727ca9a16b484a59619ae543b394a57a1f6bc284cfb7fa7d9a53a8b952e9f7c5adb3046cffdd08421df7751ca8b66a2047b3bc4f0c31f30aba210942de3b9b5f5a4c41d94f837e1539f1560cfcfd10709a23ccca8a3255ddec639f1034ce6266590bd6c9931a82d224b546569e40688dc1ecfa5a4ca4ef7b236c8d1559443497532165b3bc76f78187c4840a31ab627ef0848468b505272c1efe8c5bcd8afc8f2701c6783919c8e132b75eabbb117f72ad0538f0764d95a2589d0c783235156d7b05083bfe13b3d5cb7769abfbc00db3bcde48353e90335841a44da"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="4039ec0000002172609b290c7b22a35cd9b26db568f2e362f783ba54bf9998161bf96fedf75b738704324775be191a3b16eee594f13252d83cca32971c23da5d5ae57c8728c985531ce2cdec0d6e0c1dcfa5acac591d0e8022f77b1ba4fef07d4f40151891ad0745d4d45e0110ff0181f24243e4ebcbcdf370269c861b022b338a58aeb15efe58b130e3ad7ddd0cdb6dd15950017a0c323475c7f5db7814cc099913b928910d4e847424d068bc75e43d20cac50a071e17ec99297a107b95542016f67f09158cf1939581aa2743874d4af6b8c66b82292e038b7762497f08f0bfd0e69b60d312fdcf2bdd955cc44c25bebaaa"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}}) mmap$panthor(&(0x7f000060a000/0x1000)=nil, 0x1000, 0x3000008, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1m25.713697073s ago: executing program 0 (id=796): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') exit(0x80000000) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') sendto$inet6(r0, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffa, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x2}, 0x0, 0x3f0, 0x0, 0x80d613, 0x0, 0x5, 0x0, 0x0, 0x3, 0x4000000, 0x2000000, 0x0, 0x0, 0x100}) 1m24.644092378s ago: executing program 0 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x4e22, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m23.557138595s ago: executing program 0 (id=809): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0xd804, 0x3800, 0x30314247, 0x4, 0xc, [{0x1c1, 0xa}, {0x9, 0x80000001}, {0x4}, {0x1}, {0x40, 0x9}, {0x7, 0xfffffffa}, {0xa, 0x8}, {0x10, 0x7fff}], 0xf1, 0x8, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='my_tracefs/events/task/task_rename/enable\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000f140102000000e4fbdbdf250c00450072646d615f636d00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='0000:00:01.0\x00', 0xd) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0xfffffff1, @ipv4={'\x00', '\xff\xff', @local}, 0x87}}, 0x1, 0x9, 0x5, 0x2, 0x0, 0x1, 0xc}, &(0x7f00000000c0)=0x9c) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x0, 0x2000003, 0x10, 0xffffffffffffffff, 0x20000000) recvmsg$unix(r1, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001800)=""/87, 0x57}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/180, 0xb4}, {&(0x7f0000004980)=""/119, 0x77}], 0x4, &(0x7f0000004a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x10043) 1m21.83038324s ago: executing program 0 (id=816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m21.777487999s ago: executing program 2 (id=817): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000e50"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x40, 0xc, 0x3, "3cb2f6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m21.374556509s ago: executing program 4 (id=819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2dc}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m21.328337615s ago: executing program 4 (id=820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r3, 0xa01, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x31, 0xb, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) (async) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) (async) bind$qrtr(r1, &(0x7f0000000380)={0x2a, 0x1, 0x4000}, 0xc) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) write$tun(r0, &(0x7f0000000500)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x3c, 0x65, 0x0, 0xd, 0x29, 0x0, @broadcast, @local}, "9a07000000c311e4e7c789a9f8cac5a6e46187b669668cbf528d18236f34091aa8095b1067a609f3"}}}}}, 0x52) (async) socket(0x16, 0xa, 0x4) 1m20.74683292s ago: executing program 4 (id=821): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000100)={0xc, 0xfffffffffffffffc}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x48a, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x800, 0x0, 0x200b398, 0x7ffd, 0x1, 0x4, 0x1c, 0x7, 0xfd7, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1c4, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7d, 0x400, 0x102, 0x2, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x5, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x0, 0x9, 0x4, 0x463f, 0x5, 0xdab, 0x5, 0xd1, 0x13fff, 0x8, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'wg1\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x0, 0x2}}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x50, 0x0, &(0x7f00000004c0)=[@register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fd, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000000)={@local}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) 1m20.429384067s ago: executing program 0 (id=822): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) syz_usb_connect$uac1(0x6, 0xf3, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x839, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x6, 0x60, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3c}, [@mixer_unit={0x9, 0x24, 0x4, 0x6, 0x7, "44c9292a"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x6, 0x5, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x2, 0x19, 0x1ff, 0x8, 0x5}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x2, 0xa, "df2e1f80"}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0xff, "3d471155"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff81, 0x2, 0x42, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x200, 0x1000, 0x8, 0xa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x4, 0x8, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xc, 0x1, 0xc, 0x7}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x12e, 0xd, "657e7b5c16"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x0, 0x46, {0x7, 0x25, 0x1, 0xc, 0x9b, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xa, 0x2, 0x5, 0x1, "", "481d"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x1006}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xa, 0xa7, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x3, {0x7, 0x25, 0x1, 0x8, 0x0, 0xf800}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x9, 0x9, 0x5, 0x10, 0x2}, 0x33, &(0x7f00000006c0)={0x5, 0xf, 0x33, 0x2}, 0x6, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x457}}, {0xe4, &(0x7f0000000b40)=@string={0xe4, 0x3, "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"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x48, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x402}}, {0xe3, &(0x7f0000000a40)=@lang_id={0x0, 0x3, 0x41d}}]}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) creat(&(0x7f00000000c0)='./file0\x00', 0x80) read$char_usb(r1, &(0x7f0000000280)=""/159, 0x9f) mkdirat(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x4) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x43, 0xd0, 0x6, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xff, 0x3, 0x7}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0x7, 0x2b, 0x10, 0x6}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x2, [{0xac, &(0x7f00000001c0)=@string={0xac, 0x3, "a6a3bf5b1de17669dc77da0356176a27bf19a21dc9b6e84dbeffba59d330163b01517ac972874d320bc0c2794ee8e87fcaac582b12aa883dcfd8b1e6efd5cbb014fbdf8231f2d4ba08183c3a0e415408a22cfcb83b7baf18a2c87ab93c350554dbc61ab2a801f20723fa07db9bcaf4c5a680184e2f4a0b408187868188f08cfab04f28b5ae9c76214a4eb4f30402a7e5e21f9319fc7a4a87a2fa2ec55302b6bcd9ec9ed466efe4a0ec76"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x459}}]}) r2 = add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @desc2}, &(0x7f00000009c0)={0x0, "5305692e5b762697852ad36bfd10c6e28a41bd033ecd7d8c589729e4a5c86a9e25eb726d5544f368517a79c9bf6239b3d3b49eb7e3aab5e5276f8a01b1106303", 0x2b}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r2, r2) add_key(&(0x7f0000000880)='ceph\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="1a176547a8afd2f2631610ff9f21758375", 0x11, r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000500)={r2, 0xa2, 0x6b}, &(0x7f0000000540)={'enc=', 'raw', ' hash=', {'sha3-512-ce\x00'}}, &(0x7f0000000a80)="cbd4f179cadaa251ea707bc42096cd6b1294a69d4e06efec590ba8ab4fefce801769415e8e3cde3eefda56fe058aa0d2739f1a0dfb01b252b480064f684f587c3571d3ea519872f6110149f3a29ad600142d3d9fb1c2d261c6ffc5190a21f5ec515323436633eb8c4c87fae9de3584bb75b05e8e4d177144b39320b4b2768f390b1f2714313e0d3d10335887d198727f141fb4ae9a850f66de9ed1b7c90172f6b585", &(0x7f0000000c40)="cf6df0a8d9af36b27a10b548d2d216ba36542b852dad2ea55f90ecf0103f6acbcd06cc2c44a538082db2e16e8068097458ee119d73bc17a0c2b89b49ee488ef984b9ae37771451c5a062327e54b5769a9b48b1ca0130977abf7fabe2861d7521f697bd50f1dff05111fe41") pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!G', 0x3}], 0x1, 0x7, 0x1) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000480)={@local, @broadcast, @local}, &(0x7f0000000700)=0xc) 1m20.103613007s ago: executing program 33 (id=822): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) syz_usb_connect$uac1(0x6, 0xf3, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x839, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x6, 0x60, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3c}, [@mixer_unit={0x9, 0x24, 0x4, 0x6, 0x7, "44c9292a"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x6, 0x5, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x2, 0x19, 0x1ff, 0x8, 0x5}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x2, 0xa, "df2e1f80"}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0xff, "3d471155"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff81, 0x2, 0x42, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x200, 0x1000, 0x8, 0xa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x4, 0x8, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xc, 0x1, 0xc, 0x7}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x12e, 0xd, "657e7b5c16"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x0, 0x46, {0x7, 0x25, 0x1, 0xc, 0x9b, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xa, 0x2, 0x5, 0x1, "", "481d"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x1006}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xa, 0xa7, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x3, {0x7, 0x25, 0x1, 0x8, 0x0, 0xf800}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x9, 0x9, 0x5, 0x10, 0x2}, 0x33, &(0x7f00000006c0)={0x5, 0xf, 0x33, 0x2}, 0x6, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x457}}, {0xe4, &(0x7f0000000b40)=@string={0xe4, 0x3, "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"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x48, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x402}}, {0xe3, &(0x7f0000000a40)=@lang_id={0x0, 0x3, 0x41d}}]}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) creat(&(0x7f00000000c0)='./file0\x00', 0x80) read$char_usb(r1, &(0x7f0000000280)=""/159, 0x9f) mkdirat(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x4) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x43, 0xd0, 0x6, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xff, 0x3, 0x7}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0x7, 0x2b, 0x10, 0x6}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x2, [{0xac, &(0x7f00000001c0)=@string={0xac, 0x3, "a6a3bf5b1de17669dc77da0356176a27bf19a21dc9b6e84dbeffba59d330163b01517ac972874d320bc0c2794ee8e87fcaac582b12aa883dcfd8b1e6efd5cbb014fbdf8231f2d4ba08183c3a0e415408a22cfcb83b7baf18a2c87ab93c350554dbc61ab2a801f20723fa07db9bcaf4c5a680184e2f4a0b408187868188f08cfab04f28b5ae9c76214a4eb4f30402a7e5e21f9319fc7a4a87a2fa2ec55302b6bcd9ec9ed466efe4a0ec76"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x459}}]}) r2 = add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @desc2}, &(0x7f00000009c0)={0x0, "5305692e5b762697852ad36bfd10c6e28a41bd033ecd7d8c589729e4a5c86a9e25eb726d5544f368517a79c9bf6239b3d3b49eb7e3aab5e5276f8a01b1106303", 0x2b}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r2, r2) add_key(&(0x7f0000000880)='ceph\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="1a176547a8afd2f2631610ff9f21758375", 0x11, r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000500)={r2, 0xa2, 0x6b}, &(0x7f0000000540)={'enc=', 'raw', ' hash=', {'sha3-512-ce\x00'}}, &(0x7f0000000a80)="cbd4f179cadaa251ea707bc42096cd6b1294a69d4e06efec590ba8ab4fefce801769415e8e3cde3eefda56fe058aa0d2739f1a0dfb01b252b480064f684f587c3571d3ea519872f6110149f3a29ad600142d3d9fb1c2d261c6ffc5190a21f5ec515323436633eb8c4c87fae9de3584bb75b05e8e4d177144b39320b4b2768f390b1f2714313e0d3d10335887d198727f141fb4ae9a850f66de9ed1b7c90172f6b585", &(0x7f0000000c40)="cf6df0a8d9af36b27a10b548d2d216ba36542b852dad2ea55f90ecf0103f6acbcd06cc2c44a538082db2e16e8068097458ee119d73bc17a0c2b89b49ee488ef984b9ae37771451c5a062327e54b5769a9b48b1ca0130977abf7fabe2861d7521f697bd50f1dff05111fe41") pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!G', 0x3}], 0x1, 0x7, 0x1) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000480)={@local, @broadcast, @local}, &(0x7f0000000700)=0xc) 1m19.345248041s ago: executing program 2 (id=824): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d4fa0c511aad03aa4ed217678a64cb3093275783439c7f821ddd78b6915cb170e7603acf9e43a5d683", 0x29}], 0x2}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0', [{0x20, '$^}'}, {0x20, '%{\xb1*='}, {0x20, '{)['}], 0xa, "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"}, 0x114) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) 1m19.199826578s ago: executing program 4 (id=825): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0xd804, 0x3800, 0x30314247, 0x4, 0xc, [{0x1c1, 0xa}, {0x9, 0x80000001}, {0x4}, {0x1}, {0x40, 0x9}, {0x7, 0xfffffffa}, {0xa, 0x8}, {0x10, 0x7fff}], 0xf1, 0x8, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='my_tracefs/events/task/task_rename/enable\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000f140102000000e4fbdbdf250c00450072646d615f636d00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='0000:00:01.0\x00', 0xd) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0xfffffff1, @ipv4={'\x00', '\xff\xff', @local}, 0x87}}, 0x1, 0x9, 0x5, 0x2, 0x0, 0x1, 0xc}, &(0x7f00000000c0)=0x9c) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x0, 0x2000003, 0x10, 0xffffffffffffffff, 0x20000000) recvmsg$unix(r1, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001800)=""/87, 0x57}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/180, 0xb4}, {&(0x7f0000004980)=""/119, 0x77}], 0x4, &(0x7f0000004a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x10043) 1m18.947903068s ago: executing program 4 (id=826): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000000010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r2) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0x100000001, 0x4) r3 = syz_clone(0x940000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='0x4', 0x3) sendto$inet_nvme_pdu(r4, &(0x7f0000000140)=@icreq={{0x0, 0x1, 0x80, 0xfe}, 0x0, 0x0, 0x1, 0x1}, 0x80, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r3) 1m18.810080405s ago: executing program 2 (id=827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1ab042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x10, 0x30}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96d", 0x5e4}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x2710, 0x1, 0xffff1000, 0x1000, &(0x7f00005f8000/0x1000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004010}, 0x2c044000) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000bc0)=""/4096) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xd, 0xf132, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='efs\x00', 0xa82019, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002600090123bd702b193e1d4598ed09000800034047"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040000) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x40000) ioctl$VIDIOC_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000001440)={0x0, @reserved}) syz_usb_connect(0x3, 0x32, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240", @ANYRES64=r1, @ANYRESOCT=r0, @ANYBLOB="a88ee5846261ae8cd0da0fecde67c740f3a38f3ba9459292ebd9df79f7bd4b479e2829e2bf36f6513a4db57f0f7a81060b1ebe16b4869a583a58907b7d18c7c5995048eb349f4972e42c9e8efc26285c7356ce6646c7f2c6141233d92de3d784cad07b74e463ef2285122f9daca9c651a93cc703d2f81a4abb660f26c7a0b32a35da80cfd6ad8e59f60f3a61f208917ecae2e97db4e426560afe87482eb2bfa842236f4dc38fbd8b52ae9686279063762c116ac32d6291b2f199ff0cb5e83f546fc14dcd8c262e68289313"], 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x891d, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x19) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) 1m17.130010923s ago: executing program 4 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d6574610000000014000280080001400000000108000240000000012c00018008000100636d700020000280080001400000000108000240000000000c0003800500010000000000300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001"], 0x154}}, 0x8044) (fail_nth: 7) 1m16.825786337s ago: executing program 34 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d6574610000000014000280080001400000000108000240000000012c00018008000100636d700020000280080001400000000108000240000000000c0003800500010000000000300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001"], 0x154}}, 0x8044) (fail_nth: 7) 1m15.880378929s ago: executing program 2 (id=834): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0xd804, 0x3800, 0x30314247, 0x4, 0xc, [{0x1c1, 0xa}, {0x9, 0x80000001}, {0x4}, {0x1}, {0x40, 0x9}, {0x7, 0xfffffffa}, {0xa, 0x8}, {0x10, 0x7fff}], 0xf1, 0x8, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='my_tracefs/events/task/task_rename/enable\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000f140102000000e4fbdbdf250c00450072646d615f636d00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='0000:00:01.0\x00', 0xd) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0xfffffff1, @ipv4={'\x00', '\xff\xff', @local}, 0x87}}, 0x1, 0x9, 0x5, 0x2, 0x0, 0x1, 0xc}, &(0x7f00000000c0)=0x9c) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x0, 0x2000003, 0x10, 0xffffffffffffffff, 0x20000000) recvmsg$unix(r1, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001800)=""/87, 0x57}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/180, 0xb4}, {&(0x7f0000004980)=""/119, 0x77}], 0x4, &(0x7f0000004a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x10043) 1m15.724321176s ago: executing program 2 (id=835): r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) r1 = dup(r0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) ioctl$FE_SET_TONE(r1, 0x6f42, &(0x7f0000000040)=0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b31080008"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x200088cd) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000014c0)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18, 0x11}, 0x4000000) 1m13.58065018s ago: executing program 2 (id=838): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001d14ff701c"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206030000000000000000000000000011000300686173683a6e65742c6e657400000000050001000700000005000500020000000900020073797a30000000000500040000000000140007800800084000000078050014"], 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x228, @tick=0x7, 0x0, {}, 0xfc, 0x0, 0x8}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x40000000000000, 0x0, 0x100000000}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r5, 0x540a, 0x3) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r6 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) timer_create(0x0, 0x0, 0x0) semctl$GETPID(0x0, 0x3, 0xb, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.301675101s ago: executing program 35 (id=838): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001d14ff701c"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206030000000000000000000000000011000300686173683a6e65742c6e657400000000050001000700000005000500020000000900020073797a30000000000500040000000000140007800800084000000078050014"], 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x228, @tick=0x7, 0x0, {}, 0xfc, 0x0, 0x8}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x40000000000000, 0x0, 0x100000000}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r5, 0x540a, 0x3) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r6 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) timer_create(0x0, 0x0, 0x0) semctl$GETPID(0x0, 0x3, 0xb, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.5257564s ago: executing program 5 (id=1068): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x1, 0x80000, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r3 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r2, r3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) syz_usb_connect$uac2(0x5, 0x96, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x1, 0x20, 0x6, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x6, 0x11, 0x2b}, [@source_unit={0x8, 0x24, 0xa, 0x1, 0x4, 0x7, 0xf9, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x81, 0x1, 0x9, 0xf}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x8, 0x9, 0x8, 0xc}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x3, {0x8, 0x25, 0x1, 0x1, 0x30, 0xb, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x6, 0x2, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x6, 0x7}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x7, 0x7, 0x4, 0x8, 0x9}, 0x30, &(0x7f0000000340)={0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "6cefd98a3fe961fbd5da3de3e215d12e"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f55b77000ed020bfa79674b0834aa959"}]}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x814}}]}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/consoles\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f0000000440)=0x5) quotactl_fd$Q_SYNC(r7, 0xffffffff80000102, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000940)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000009c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r9, 0x2}}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000a00)={r4}) syz_usb_connect$uac2(0x0, 0xfd, &(0x7f0000000a40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0x2, 0x80, 0xd, {0x8, 0xb, 0x1, 0x1, 0x1, 0x4, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7fff, 0xa, 0x3c, 0x2}, [@processing_unit={0x11, 0x24, 0x8, 0x3, 0x5, [0x3, 0x2, 0x3, 0x3, 0x3, 0x2]}, @processing_unit={0xb, 0x24, 0x8, 0x4, 0x3, [0x1, 0x3, 0x0]}, @extension_unit={0xb, 0x24, 0x9, 0x6, 0xffff, 0xf, "ca997147"}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x100, 0x1, 0x1, 0x5, 0x1, 0x3e}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0x8, 0xf2, 0x0, 0xe}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x4, 0x6, 0x7, "", "c94422"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x2, 0x1, "ed", "f8786a"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x81, 0x3, 0xe}, @as_header={0x10, 0x24, 0x1, 0x4, 0xed, 0x3, 0x5, 0x1, 0x5, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x1, 0xd, {0x8, 0x25, 0x1, 0x80, 0x3, 0x2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x3, 0xe2, 0xf2, "a7618a07e95ffea9"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x5a}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0xe2, 0x4, {0x8, 0x25, 0x1, 0x82}}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x250, 0x0, 0x6, 0x7, 0x8, 0x7}, 0x38, &(0x7f0000000b80)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "1e3ae6308e269f9e4f2084ed36023002"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x1, 0x6, 0x2, 0x8a}, @ssp_cap={0x14, 0x10, 0xa, 0x80, 0x2, 0x0, 0xf00f, 0x9, [0xc0c0, 0x1bf3f]}]}, 0x1, [{0x57, &(0x7f0000000bc0)=@string={0x57, 0x3, "d34806f3be617c1c018962a10425796b743d0bb506450b25260f7ca8bb5a744547e5e1ffe0cc8383fa62c46dd5a1dfc61009ac0fcfec02ecf51a313483977bcaad96be1c010703b06cef5c602a4e96b1921b209ae5"}}]}) syz_usb_connect$uac2(0x6, 0x11d, &(0x7f0000000c80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x68, 0x499, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10b, 0x3, 0x1, 0x2f, 0xc0, 0x3, {0x8, 0xb, 0x2, 0x0, 0x1, 0x6, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x4e, 0xfc}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x1, [0x4, 0x1, 0x9]}, @extension_unit={0xd, 0x24, 0x9, 0x3, 0x8, 0x2, "1c47f4c9d4a5"}, @selector_unit={0x5, 0x24, 0xb, 0x1e}, @selector_unit={0xa, 0x24, 0xb, 0x2, 0x5, "352aa2cea0"}, @extension_unit={0xd, 0x24, 0x9, 0x5, 0x2e, 0x35, "48632394b82f"}, @sample_rate={0x11, 0x24, 0xd, 0x5, 0x2, 0x5, [0x1, 0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x37, 0x3, 0x8, 0x5, "48b8"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9e2, 0xe4b, 0xf7, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x200, 0x8, 0x2, "54124bf15ce167"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x80}, @as_header={0x10, 0x24, 0x1, 0xfa, 0x7f, 0x1, 0x4, 0x4, 0x73a25fe6, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x800, 0x3, 0x5, 0x64}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x10, 0x5, {0x8, 0x25, 0x1, 0x1, 0xc, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x74, "4c9a4e8b53"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x4, "2eb2cdbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x8, 0x5, {0x8, 0x25, 0x1, 0x83, 0x30, 0x8, 0x40}}}}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x200, 0x7, 0x0, 0x4c, 0x8, 0x80}, 0x72, &(0x7f0000000e00)={0x5, 0xf, 0x72, 0x5, [@ptm_cap={0x3}, @generic={0x3a, 0x10, 0x2, "517781b2620fc2990397f33fc31cef2d51f523f320c951bb7093459314c4bbab8e4519362c6acc9b9d691fdc054ef5f0480442273a59e2"}, @ssp_cap={0x1c, 0x10, 0xa, 0xe7, 0x4, 0x7, 0x0, 0xfff7, [0xffffc0, 0x0, 0x3f, 0xffffc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x1, 0x3, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x8, 0x91, 0x7fff}]}, 0x2, [{0x18, &(0x7f0000000e80)=@string={0x18, 0x3, "2c3b0afabd776e025acb2141024bff3b726698e26f9c"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x422}}]}) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000f80)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000f40), r9, 0x0, 0x1, 0x4}}, 0x20) syz_usb_connect$cdc_ncm(0x5, 0x17c, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16a, 0x2, 0x1, 0xc1, 0x60, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x1ff, 0x8000, 0xfc}, {0x6, 0x24, 0x1a, 0x40, 0x20}, [@mdlm_detail={0xf4, 0x24, 0x13, 0x0, "a0b63c2d81eee42b123863ecffa17137206831800d4f1473200f8b25c8f49d97ac12e1c8bb66844b8426e2923b412e0ecbbbddca80c11c4a17c24fae0b26a640c49a2b068d12661650af5d6a0b6817a45a046407f7e73fc5600c865f2d3048fbb84727c7a5eed08d39fb7d67231e89051bfadb920176ce0a07b0aa9b6c037e140bf944613104c7953d5b7d5841f1ab8ae7f39a60abfb2f99ecc056dde7e29acf06fe97eda4402339942ed626dee7ca0e3bc3ff8bd9b0e03bb8993f8b13fdc816a1d60e62831c4d32ce5f07537db78b60848951d4cb0af0fbc948091324433ed51020f8441697704184c6352a43cce2e2"}, @mdlm={0x15, 0x24, 0x12, 0xecf}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xda}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x6, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0xb, 0x4}}}}}}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x250, 0x7f, 0x4, 0x59, 0x8, 0x7}, 0x168, &(0x7f0000001180)={0x5, 0xf, 0x168, 0x3, [@generic={0x79, 0x10, 0xa, "ecd85b8a52f0f90a5941c0d30b59c26b7f9c5f6f43c923973ad1eb1437ae7836711d1a8b924e1b2d79c530461d54c7f8b586408f51bd9df9384adbe4dfcf2ca8311b3c27229a7712f03a96d46d57a9bbf40aad54ff1415dd4875fb668ce90c8fa150cadd24ffa2d34701959cbb9562a125aa7bce1372"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0xb}, @generic={0xe3, 0x10, 0xb, "ea0e507ed2c513fcbfbd01770f7bfef8e3b31f04ab581feee468f48aea05581a07f5ed3f7e3cae46b43f20ce7425029b0619356122bdd121595d5c9b45f9334c58983836cb053e91c74baaf2ac599453584069ba7f1eb07bbbe5d3352cf97e3dfd306d1b255c482d06dfbc29bcfb180d3dfbd6d2a9c56986ae7a8901f291271989991dacd6d5da03dd1e231b111a8bc206af07644f9ec8e3512b885dd5a07d863130ed52803471ac700c7e604e57e2b6888a0904c5c1dd38ac7119cba910553ac52c3d9452a5f1b164de75085356600e2c680b0d593f797ac2fbc94489e7e341"}]}, 0x3, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x1035}}, {0xee, &(0x7f0000001340)=@string={0xee, 0x3, "732412a75f1d31e62b01a5eebd00b0268d35492f49f18b607f62f8b6834337a855802329dfdf313d93fe2a9c59dd050d38c35245b6f6c3e7049f68ce7de842a168b479de4155df928f034518f6ad733431f9cd7bf044bc1b39c2cb46c7968f0fbfb13c796ee23820c6728dc546db82fb847151b5ebaeec37620b12469ab57b05e8a04638cd2053f0c029da776a89f1063b4e3ae96af481a59b5b53598b0af3f993dc7582a44ef495dc712c77d3e524c88d5e26dc488a3c53b067f847e0485206b3e4eb0c3d868118b7816bdf8cb62648ee9466c5bdbda0e088efb6d051f68ca3482b2a8eb2717300b6a7026f"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x3009}}]}) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000014c0)) syz_kvm_setup_cpu$x86(r6, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001540)=[@textreal={0x8, &(0x7f0000001500)="f3a6663666f30fc7b7fa9b0f01c30f01c466b95e0a00000f32f30fc735f08031aff3f6430451660f3882a9935af26d", 0x2f}], 0x1, 0x2, &(0x7f0000001580), 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r1, {r2, r5}}, './file0/file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000001600)={0xc}) socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r11, 0x1, 0xa, &(0x7f0000001640)=0x8, 0x4) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000001680)={0x15e8, 0x1, 0x3, 0x0, 0x7}) stat(&(0x7f00000016c0)='./file0/file0\x00', &(0x7f0000001700)) 5.919470143s ago: executing program 5 (id=1072): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040), 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) 4.736643043s ago: executing program 5 (id=1078): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa09"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x21, 0x98, {0x98, 0x1, "d8be5483d7ae9aa34c69891b5972e4207ad07b9f2f516f6361b3b34e48ba58d71e1ffc1c035149910ce253006cba390b3cece9fc59cb51b034b991129c09f5d8e1102671a7c78095ac89a5ef2d1756264d778076b7dc564f0e4a21d086dff03401ab4ec9962ded0a31de8732855dfe6b7280db7bf8308ee6a64d88a6deb3ef56d917ed3129ba3db0340a8b5cf369c4d7b678dfb2bf8b"}}, &(0x7f0000000100)={0x0, 0x3, 0x23, @string={0x23, 0x3, "829751061f2043617ee6026f2030d4a7870bdde0db36e32844913702d1efbaa070"}}}, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)={0x0, 0xd, 0x5, "a507952245"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x89}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000240)={0xc0, 0x5, 0x6, "f41c2741eaf3"}, &(0x7f0000000280)={0x40, 0x5, 0x4, "5e3e20b4"}}) 4.545197566s ago: executing program 7 (id=1080): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40806685, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x15e) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ppoll(&(0x7f0000000100)=[{r2}, {r1, 0x4004}, {r1, 0x1}, {r1}, {r2, 0x4008}, {r1}, {r1, 0x4600}], 0x7, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={[0xf0]}, 0x8) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x0) r3 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r4 = fsmount(r3, 0x0, 0xd) fchdir(r4) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f0000000300)={0x0, 0x0, 0x4, 0xffffffff, 0x4}) recvfrom$unix(r4, &(0x7f0000000000)=""/86, 0x56, 0x40002040, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 4.094203055s ago: executing program 7 (id=1081): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) getrandom(&(0x7f0000000140)=""/293, 0x125, 0x2) (async) getgroups(0xb68d432bb60642db, 0x0) (async) mbind(&(0x7f0000129000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xfffffffffffffffc, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 3.849051376s ago: executing program 7 (id=1083): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x20000020064e, 0xe, 0x200000, 0x3, 0x5, 0x9}) (fail_nth: 7) 3.689652879s ago: executing program 6 (id=1084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000001480)={0x1, 0x101000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1603, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 3.604168829s ago: executing program 7 (id=1085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.940691328s ago: executing program 6 (id=1086): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x34181, 0x0) getdents(r0, &(0x7f0000000440)=""/37, 0x25) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fchown(r2, 0xee00, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x0, 0x8}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="100029bd7000f9dbdf250a00000008000300", @ANYRES32, @ANYBLOB="60812cf9924d44cf50ca929e95498a3ecbd81408c0136343e1cc215c5b637b23521ffb09cbdc08cc8a00319103c60b3698"], 0x1c}}, 0x20004004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendfile(r5, r6, 0x0, 0x7ffff004) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f0000000000)={0x21, 0x2}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706050055b6000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r12, r8, &(0x7f00000000c0)=0x8b, 0x100000500) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f00000000c0)={0x8, 0x8, [0x5b18, 0xfa, 0x1e5c, 0x4], &(0x7f0000000080)=[0x0]}) 2.826932483s ago: executing program 7 (id=1087): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x890b, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xf7) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x64, r4, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968c18a}, 0x8006) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000140)=0x3) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x10, 0x0, 0x0) read$hiddev(r5, &(0x7f0000000300)=""/228, 0xe4) 2.809303892s ago: executing program 6 (id=1088): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d010203010902"], 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 1.900828049s ago: executing program 1 (id=1090): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x11) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x260d818b, 0xfffffffffffffffe, 0x8, 0x3, 0x5, 0x7fffffffffd, 0x7fffffff, 0xfff, 0x100, 0x0, 0x0, 0x9, 0x1, 0x2a, 0x7, 0x0, 0x8000000000000003, 0x20007, 0x100100001, 0x8, 0x3, 0x5, 0x7, 0xb7ba, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x7ff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xd) 1.681709262s ago: executing program 1 (id=1091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00006003bbbbbbbb0008119078ac1414297f"], 0x26) (fail_nth: 3) 1.533893318s ago: executing program 6 (id=1092): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000002c0)={@remote, 0x3, 0x2, 0x3, 0x0, 0x77d, 0x4000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000880)=""/88, 0x58}], 0x1, 0x5, 0xf5) 1.486511785s ago: executing program 5 (id=1093): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) 1.486185964s ago: executing program 1 (id=1094): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) (async) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000140)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @string=&(0x7f0000000300)=0xff}}) 1.342046735s ago: executing program 1 (id=1095): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0x6, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8220, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0xa1, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x10, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x200) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x0, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.247239204s ago: executing program 1 (id=1096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.022320771s ago: executing program 1 (id=1097): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) ioctl$TCXONC(r1, 0x540a, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = gettid() rt_tgsigqueueinfo(r6, r6, 0x37, &(0x7f0000000580)={0x2d, 0x9, 0x80000001}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) 817.712966ms ago: executing program 6 (id=1098): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x8, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0xe5c, {0x40, 0x1, 0xb, 0xfffc, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x80000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r2) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc1e9f9de2b7fb0000e600afd2eecb96000100000000020000ffffffffff000000000000000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) 711.112333ms ago: executing program 5 (id=1099): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000000c0)={0x2, "e42b18239854e8836b433a1eb08b5a5edb4a1f792de2c958b35cba3be7728c0c", 0x0, 0x1}) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%/G:\x00\x00\x00\x00\x00\x00\x00\x00v\x00 \x06\xf0aT\x8b\x96\x17l\xdew\x1aP\xb5\x04Y\x1cu\x01\x97g\x12\xf3\xd1\xcd\x9e\xb8\xff\x01\xbc\xe0Bt\x9bf\xa4`\x1a\xa5>t.\x84*\xa5\xdd\x9e\x00_\xaf\x03\xd5\x93\xa1\x8e.\x13\xfcS\xab\xca~\v\x04\xa17\x7f \x97\b\xc5\x140\x15\r\xb5\x92-\xb1Z.\x9e,\xbfP\n\xbaz7I\xb0Y?#\xab\xb4\xbd\x98>v\xd3\x97\xd1S\x00\xb5L*\x11\x055d\xf2{7\\a\xaa)\xb2^\x06\xa6?(\xc7g\xacj\xe6\xb8\xb6\x8blz\xea9\xaa\f\xcavk\xe97\xc8\xaf\x06MI\xce\x81\x85\x92W\x1c\x12L\x9b\xe3\xb7_\xabo<\x11~\x1c\xe2\a5+\xb4\xe13\xadPq\x89c\x1a\xad\xd1n\xed\xe5\x86H\xbf\x9a\x8bI\x1fCOE\x1a{LT\xfa\x17,\xe1\xe2\x9a\xdd\xfc\xf9o^\f\x8c\x8b ^t\xa9\x9a\xb7| 2\xa2|\x04\xbdoF\xce9\xd0\x03=\xb5/\xc6\x85\xb0\xc6\xc9Fq\x13K\xdb\x8e\xbdu&\x8baE\xeb\v6\xb6O\xe0\xb7\xc8\x05\x02\x13\x9b\x9c\x10\x00\xcdH7\x9b\xd5c0\\\x88d\xee>\xcc#\x96:\v\x99\xa1\xe2x`%J0\xa4\xfd\xa8^\x03\xc1ZU\x12A:zbs\xe2|\xd1U\xcc\f~\x15\x98K\x84\x06W\a\x0e\xf1\xfd\r\xb3\xa8j\xbd\xdd1W\x91\xbb\xef\xf2', 0x0) 489.779315ms ago: executing program 6 (id=1100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000100)="0f01c4660f68634948b800800000000000000f23c80f21f8350c0090000f23f866baf80cb8f893bf8aef66bafc0cb808000000ef48b88d750000000000000f23c00f21f835010005000f23f80fc732b9800000c00f3235000400000f30f345ac430f20c066470fd45f22", 0x6a}], 0x1, 0xb6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 344.665184ms ago: executing program 7 (id=1101): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)={0x0, 0xd, 0x5, "a507952245"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x89}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000240)={0xc0, 0x5, 0x6, "f41c2741eaf3"}, &(0x7f0000000280)={0x40, 0x5, 0x4, "5e3e20b4"}}) 0s ago: executing program 5 (id=1102): write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0xfffffffffffffffc}}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="ebfa0e80ceb3dc4c43c215dc4dade38ff8c84ace0200bebe5b179f12cf39c48c2d4b61ce76443644c1dc73113bee39b5796edc2a8f551d6fa7", 0x39}], 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd12, &(0x7f0000000000)="0400000002000000000000007e0100003801") kernel console output (not intermixed with test programs): ][ T32] dvb-usb: error while querying for an remote control event. [ 310.508265][ T32] m920x_read = error: -19 [ 310.508288][ T32] dvb-usb: error while querying for an remote control event. [ 310.620469][ T32] m920x_read = error: -19 [ 310.620492][ T32] dvb-usb: error while querying for an remote control event. [ 310.729483][ T32] m920x_read = error: -19 [ 310.729694][ T32] dvb-usb: error while querying for an remote control event. [ 310.837655][ T32] m920x_read = error: -19 [ 310.837680][ T32] dvb-usb: error while querying for an remote control event. [ 310.948822][ T32] m920x_read = error: -19 [ 310.948849][ T32] dvb-usb: error while querying for an remote control event. [ 310.966398][ T9174] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.057021][ T37] m920x_read = error: -19 [ 311.057048][ T37] dvb-usb: error while querying for an remote control event. [ 311.075754][ T9174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 311.075879][ T9174] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 311.167397][ T37] m920x_read = error: -19 [ 311.167422][ T37] dvb-usb: error while querying for an remote control event. [ 311.202274][ T9174] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 311.262114][ T9174] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.263426][ T9174] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 311.277021][ T37] m920x_read = error: -19 [ 311.277037][ T37] dvb-usb: error while querying for an remote control event. [ 311.340000][ T9174] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 311.387532][ T37] m920x_read = error: -19 [ 311.387560][ T37] dvb-usb: error while querying for an remote control event. [ 311.434924][ T9174] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 311.435065][ T9174] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 311.510095][ T32] m920x_read = error: -19 [ 311.510120][ T32] dvb-usb: error while querying for an remote control event. [ 311.597930][ T9174] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 311.617038][ T37] m920x_read = error: -19 [ 311.617064][ T37] dvb-usb: error while querying for an remote control event. [ 311.726955][ T37] m920x_read = error: -19 [ 311.726982][ T37] dvb-usb: error while querying for an remote control event. [ 311.837987][ T37] m920x_read = error: -19 [ 311.838014][ T37] dvb-usb: error while querying for an remote control event. [ 311.947142][ T37] m920x_read = error: -19 [ 311.947166][ T37] dvb-usb: error while querying for an remote control event. [ 312.058406][ T37] m920x_read = error: -19 [ 312.058433][ T37] dvb-usb: error while querying for an remote control event. [ 312.167210][ T37] m920x_read = error: -19 [ 312.167238][ T37] dvb-usb: error while querying for an remote control event. [ 312.277103][ T37] m920x_read = error: -19 [ 312.277129][ T37] dvb-usb: error while querying for an remote control event. [ 312.387219][ T37] m920x_read = error: -19 [ 312.387246][ T37] dvb-usb: error while querying for an remote control event. [ 312.497014][ T37] m920x_read = error: -19 [ 312.497040][ T37] dvb-usb: error while querying for an remote control event. [ 312.606941][ T37] m920x_read = error: -19 [ 312.606968][ T37] dvb-usb: error while querying for an remote control event. [ 312.615437][ T9245] netlink: 16 bytes leftover after parsing attributes in process `syz.5.935'. [ 312.615480][ T9245] netlink: 128 bytes leftover after parsing attributes in process `syz.5.935'. [ 312.717000][ T37] m920x_read = error: -19 [ 312.717145][ T37] dvb-usb: error while querying for an remote control event. [ 312.756914][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 312.830936][ T37] m920x_read = error: -19 [ 312.830960][ T37] dvb-usb: error while querying for an remote control event. [ 312.877163][ T9262] syzkaller1: entered promiscuous mode [ 312.877189][ T9262] syzkaller1: entered allmulticast mode [ 312.937032][ T37] m920x_read = error: -19 [ 312.937058][ T37] dvb-usb: error while querying for an remote control event. [ 313.046973][ T32] m920x_read = error: -19 [ 313.046999][ T32] dvb-usb: error while querying for an remote control event. [ 313.147790][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 313.157033][ T5791] m920x_read = error: -19 [ 313.157055][ T5791] dvb-usb: error while querying for an remote control event. [ 313.267023][ T5791] m920x_read = error: -19 [ 313.267050][ T5791] dvb-usb: error while querying for an remote control event. [ 313.267157][ T37] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 313.350814][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 313.377013][ T32] m920x_read = error: -19 [ 313.377038][ T32] dvb-usb: error while querying for an remote control event. [ 313.426797][ T9272] input: syz1 as /devices/virtual/input/input12 [ 313.429311][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 313.438703][ T37] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 313.438732][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.438752][ T37] usb 2-1: Product: syz [ 313.438766][ T37] usb 2-1: Manufacturer: syz [ 313.438781][ T37] usb 2-1: SerialNumber: syz [ 313.473732][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 313.486960][ T32] m920x_read = error: -19 [ 313.486991][ T32] dvb-usb: error while querying for an remote control event. [ 313.602766][ T5791] m920x_read = error: -19 [ 313.602795][ T5791] dvb-usb: error while querying for an remote control event. [ 313.707134][ T5791] m920x_read = error: -19 [ 313.707163][ T5791] dvb-usb: error while querying for an remote control event. [ 313.817662][ T5791] m920x_read = error: -19 [ 313.817690][ T5791] dvb-usb: error while querying for an remote control event. [ 313.908262][ T37] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 313.945357][ T5791] m920x_read = error: -19 [ 313.945382][ T5791] dvb-usb: error while querying for an remote control event. [ 314.059133][ T5791] m920x_read = error: -19 [ 314.059158][ T5791] dvb-usb: error while querying for an remote control event. [ 314.167007][ T32] m920x_read = error: -19 [ 314.167034][ T32] dvb-usb: error while querying for an remote control event. [ 314.280917][ T32] m920x_read = error: -19 [ 314.280945][ T32] dvb-usb: error while querying for an remote control event. [ 314.358543][ T9294] FAULT_INJECTION: forcing a failure. [ 314.358543][ T9294] name failslab, interval 1, probability 0, space 0, times 0 [ 314.358577][ T9294] CPU: 1 UID: 0 PID: 9294 Comm: syz.7.945 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 314.358602][ T9294] Tainted: [L]=SOFTLOCKUP [ 314.358609][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.358621][ T9294] Call Trace: [ 314.358627][ T9294] [ 314.358635][ T9294] dump_stack_lvl+0xe8/0x150 [ 314.358664][ T9294] should_fail_ex+0x467/0x600 [ 314.358692][ T9294] should_failslab+0xa8/0x100 [ 314.358712][ T9294] __kmalloc_cache_noprof+0xa1/0x670 [ 314.358740][ T9294] ? __pollwait+0x27f/0x430 [ 314.358764][ T9294] ? __pollwait+0x27f/0x430 [ 314.358788][ T9294] ? __fget_files+0x2a/0x420 [ 314.358807][ T9294] __pollwait+0x27f/0x430 [ 314.358824][ T9294] ? __pfx___pollwait+0x10/0x10 [ 314.358838][ T9294] pipe_poll+0x181/0x4b0 [ 314.358853][ T9294] ? __pfx_pipe_poll+0x10/0x10 [ 314.358867][ T9294] do_sys_poll+0x92e/0xf50 [ 314.358876][ T9294] ? lock_acquire+0x115/0x350 [ 314.358895][ T9294] ? do_sys_poll+0x3c1/0xf50 [ 314.358907][ T9294] ? __pfx_do_sys_poll+0x10/0x10 [ 314.358917][ T9294] ? is_bpf_text_address+0x26/0x2b0 [ 314.358931][ T9294] ? kernel_text_address+0xa5/0xe0 [ 314.358945][ T9294] ? __pfx___pollwait+0x10/0x10 [ 314.358962][ T9294] ? __pfx_pollwake+0x10/0x10 [ 314.358981][ T9294] ? __pfx_pollwake+0x10/0x10 [ 314.358998][ T9294] ? __pfx_pollwake+0x10/0x10 [ 314.359014][ T9294] ? __pfx_pollwake+0x10/0x10 [ 314.359030][ T9294] ? __pfx_pollwake+0x10/0x10 [ 314.359046][ T9294] ? __pfx_pollwake+0x10/0x10 [ 314.359063][ T9294] ? __pfx_pollwake+0x10/0x10 [ 314.359079][ T9294] ? __pfx_pollwake+0x10/0x10 [ 314.359095][ T9294] ? __pfx_pollwake+0x10/0x10 [ 314.359127][ T9294] ? set_user_sigmask+0xcd/0x1c0 [ 314.359138][ T9294] ? __pfx_set_user_sigmask+0x10/0x10 [ 314.359150][ T9294] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 314.359168][ T9294] __se_sys_ppoll+0x209/0x2b0 [ 314.359182][ T9294] ? fput+0xa0/0xd0 [ 314.359199][ T9294] ? __pfx___se_sys_ppoll+0x10/0x10 [ 314.359214][ T9294] ? __pfx_ksys_write+0x10/0x10 [ 314.359227][ T9294] ? __x64_sys_ppoll+0x20/0xc0 [ 314.359246][ T9294] do_syscall_64+0x17b/0x530 [ 314.359257][ T9294] ? irqentry_exit+0x10f/0x8f0 [ 314.359266][ T9294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.359277][ T9294] ? clear_bhb_loop+0x40/0x90 [ 314.359290][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.359300][ T9294] RIP: 0033:0x7f416f88e0d9 [ 314.359312][ T9294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.359321][ T9294] RSP: 002b:00007f416dae6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 314.359333][ T9294] RAX: ffffffffffffffda RBX: 00007f416fb15fa0 RCX: 00007f416f88e0d9 [ 314.359341][ T9294] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 314.359348][ T9294] RBP: 00007f416dae6090 R08: fffffffffffffcdd R09: 0000000000000000 [ 314.359356][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.359362][ T9294] R13: 00007f416fb16038 R14: 00007f416fb15fa0 R15: 00007ffc8c0d7f68 [ 314.359377][ T9294] [ 314.360931][ T37] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 314.387397][ T32] m920x_read = error: -19 [ 314.387424][ T32] dvb-usb: error while querying for an remote control event. [ 314.497110][ T32] m920x_read = error: -19 [ 314.497136][ T32] dvb-usb: error while querying for an remote control event. [ 314.607599][ T32] m920x_read = error: -19 [ 314.607625][ T32] dvb-usb: error while querying for an remote control event. [ 314.720513][ T32] m920x_read = error: -19 [ 314.720540][ T32] dvb-usb: error while querying for an remote control event. [ 314.768688][ T37] usb 2-1: USB disconnect, device number 73 [ 314.816782][ T8919] udevd[8919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.830041][ T32] m920x_read = error: -19 [ 314.830067][ T32] dvb-usb: error while querying for an remote control event. [ 314.943217][ T32] m920x_read = error: -19 [ 314.943235][ T32] dvb-usb: error while querying for an remote control event. [ 315.048662][ T37] m920x_read = error: -19 [ 315.048689][ T37] dvb-usb: error while querying for an remote control event. [ 315.157916][ T37] m920x_read = error: -19 [ 315.157933][ T37] dvb-usb: error while querying for an remote control event. [ 315.192747][ T9316] netlink: 'syz.6.951': attribute type 1 has an invalid length. [ 315.226762][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 315.267748][ T37] m920x_read = error: -19 [ 315.267774][ T37] dvb-usb: error while querying for an remote control event. [ 315.353266][ T9322] FAULT_INJECTION: forcing a failure. [ 315.353266][ T9322] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 315.353304][ T9322] CPU: 1 UID: 0 PID: 9322 Comm: syz.6.952 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 315.353331][ T9322] Tainted: [L]=SOFTLOCKUP [ 315.353339][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.353351][ T9322] Call Trace: [ 315.353359][ T9322] [ 315.353368][ T9322] dump_stack_lvl+0xe8/0x150 [ 315.353405][ T9322] should_fail_ex+0x467/0x600 [ 315.353436][ T9322] prepare_alloc_pages+0x223/0x650 [ 315.353473][ T9322] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 315.353513][ T9322] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 315.353543][ T9322] ? __alloc_frozen_pages_noprof+0x2a9/0x5b0 [ 315.353577][ T9322] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 315.353615][ T9322] ? __pfx_policy_nodemask+0x10/0x10 [ 315.353635][ T9322] ? lockdep_hardirqs_on+0x7a/0x110 [ 315.353659][ T9322] __alloc_pages_noprof+0x10/0x100 [ 315.353690][ T9322] alloc_pages_bulk_noprof+0x681/0x890 [ 315.353721][ T9322] ? alloc_pages_mpol+0x249/0x280 [ 315.353745][ T9322] ? alloc_pages_noprof+0x161/0x2f0 [ 315.353770][ T9322] __kasan_populate_vmalloc+0xb7/0x1c0 [ 315.353798][ T9322] ? rt_spin_unlock+0x163/0x200 [ 315.353827][ T9322] alloc_vmap_area+0xd1a/0x1420 [ 315.353867][ T9322] ? __pfx_alloc_vmap_area+0x10/0x10 [ 315.353891][ T9322] ? __kmalloc_cache_node_noprof+0x459/0x670 [ 315.353922][ T9322] ? __get_vm_area_node+0x136/0x300 [ 315.353945][ T9322] ? __get_vm_area_node+0x136/0x300 [ 315.353974][ T9322] __get_vm_area_node+0x1f2/0x300 [ 315.354005][ T9322] __vmalloc_node_range_noprof+0x34e/0x1560 [ 315.354033][ T9322] ? copy_process+0x820/0x43f0 [ 315.354060][ T9322] ? percpu_ref_get_many+0x19/0x140 [ 315.354086][ T9322] ? __memcg_slab_post_alloc_hook+0x4d6/0xf60 [ 315.354124][ T9322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 315.354152][ T9322] ? trace_kmem_cache_alloc+0x29/0xe0 [ 315.354178][ T9322] ? memcpy_and_pad+0x48/0x80 [ 315.354205][ T9322] __vmalloc_node_noprof+0xc2/0x100 [ 315.354232][ T9322] ? copy_process+0x820/0x43f0 [ 315.354250][ T9322] ? copy_process+0x820/0x43f0 [ 315.354273][ T9322] dup_task_struct+0x2a0/0x8e0 [ 315.354294][ T9322] ? rt_spin_unlock+0x163/0x200 [ 315.354322][ T9322] copy_process+0x820/0x43f0 [ 315.354342][ T9322] ? _parse_integer_limit+0x18f/0x1e0 [ 315.354379][ T9322] ? kstrtouint+0x6e/0xe0 [ 315.354415][ T9322] ? __lock_acquire+0x6df/0x2e40 [ 315.354438][ T9322] ? __pfx_copy_process+0x10/0x10 [ 315.354460][ T9322] ? get_pid_task+0x20/0x1f0 [ 315.354483][ T9322] ? get_pid_task+0x20/0x1f0 [ 315.354516][ T9322] kernel_clone+0x2d7/0x940 [ 315.354545][ T9322] ? __pfx_kernel_clone+0x10/0x10 [ 315.354576][ T9322] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 315.354603][ T9322] __x64_sys_clone+0x1b6/0x230 [ 315.354630][ T9322] ? __pfx___x64_sys_clone+0x10/0x10 [ 315.354669][ T9322] ? __pfx_ksys_write+0x10/0x10 [ 315.354701][ T9322] do_syscall_64+0x17b/0x530 [ 315.354721][ T9322] ? irqentry_exit+0x10f/0x8f0 [ 315.354739][ T9322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.354760][ T9322] ? clear_bhb_loop+0x40/0x90 [ 315.354782][ T9322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.354803][ T9322] RIP: 0033:0x7f6f9dcfe0d9 [ 315.354821][ T9322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.354836][ T9322] RSP: 002b:00007f6f9bf55fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 315.354856][ T9322] RAX: ffffffffffffffda RBX: 00007f6f9df85fa0 RCX: 00007f6f9dcfe0d9 [ 315.354870][ T9322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020223000 [ 315.354880][ T9322] RBP: 00007f6f9bf56090 R08: 0000000000000000 R09: 0000000000000000 [ 315.354891][ T9322] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 315.354902][ T9322] R13: 00007f6f9df86038 R14: 00007f6f9df85fa0 R15: 00007ffdb357d728 [ 315.354932][ T9322] [ 315.375578][ T9322] syz.6.952: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 315.375651][ T9322] CPU: 1 UID: 0 PID: 9322 Comm: syz.6.952 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 315.375678][ T9322] Tainted: [L]=SOFTLOCKUP [ 315.375685][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.375697][ T9322] Call Trace: [ 315.375705][ T9322] [ 315.375713][ T9322] dump_stack_lvl+0xe8/0x150 [ 315.375744][ T9322] warn_alloc+0x24c/0x270 [ 315.375773][ T9322] ? kasan_quarantine_put+0xbb/0x1f0 [ 315.375802][ T9322] ? __pfx_warn_alloc+0x10/0x10 [ 315.375832][ T9322] ? __get_vm_area_node+0x20b/0x300 [ 315.375861][ T9322] ? __get_vm_area_node+0x20b/0x300 [ 315.375891][ T9322] __vmalloc_node_range_noprof+0x376/0x1560 [ 315.375926][ T9322] ? percpu_ref_get_many+0x19/0x140 [ 315.375952][ T9322] ? __memcg_slab_post_alloc_hook+0x4d6/0xf60 [ 315.375989][ T9322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 315.376015][ T9322] ? trace_kmem_cache_alloc+0x29/0xe0 [ 315.376041][ T9322] ? memcpy_and_pad+0x48/0x80 [ 315.376066][ T9322] __vmalloc_node_noprof+0xc2/0x100 [ 315.376093][ T9322] ? copy_process+0x820/0x43f0 [ 315.376111][ T9322] ? copy_process+0x820/0x43f0 [ 315.376132][ T9322] dup_task_struct+0x2a0/0x8e0 [ 315.376152][ T9322] ? rt_spin_unlock+0x163/0x200 [ 315.376181][ T9322] copy_process+0x820/0x43f0 [ 315.376200][ T9322] ? _parse_integer_limit+0x18f/0x1e0 [ 315.376233][ T9322] ? kstrtouint+0x6e/0xe0 [ 315.376263][ T9322] ? __lock_acquire+0x6df/0x2e40 [ 315.376284][ T9322] ? __pfx_copy_process+0x10/0x10 [ 315.376306][ T9322] ? get_pid_task+0x20/0x1f0 [ 315.376328][ T9322] ? get_pid_task+0x20/0x1f0 [ 315.376359][ T9322] kernel_clone+0x2d7/0x940 [ 315.376394][ T9322] ? __pfx_kernel_clone+0x10/0x10 [ 315.376424][ T9322] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 315.376450][ T9322] __x64_sys_clone+0x1b6/0x230 [ 315.376476][ T9322] ? __pfx___x64_sys_clone+0x10/0x10 [ 315.376512][ T9322] ? __pfx_ksys_write+0x10/0x10 [ 315.376544][ T9322] do_syscall_64+0x17b/0x530 [ 315.376564][ T9322] ? irqentry_exit+0x10f/0x8f0 [ 315.376582][ T9322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.376602][ T9322] ? clear_bhb_loop+0x40/0x90 [ 315.376624][ T9322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.376642][ T9322] RIP: 0033:0x7f6f9dcfe0d9 [ 315.376657][ T9322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.376673][ T9322] RSP: 002b:00007f6f9bf55fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 315.376693][ T9322] RAX: ffffffffffffffda RBX: 00007f6f9df85fa0 RCX: 00007f6f9dcfe0d9 [ 315.376707][ T9322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020223000 [ 315.376720][ T9322] RBP: 00007f6f9bf56090 R08: 0000000000000000 R09: 0000000000000000 [ 315.376733][ T9322] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 315.376745][ T9322] R13: 00007f6f9df86038 R14: 00007f6f9df85fa0 R15: 00007ffdb357d728 [ 315.376776][ T9322] [ 315.377206][ T37] m920x_read = error: -19 [ 315.377226][ T37] dvb-usb: error while querying for an remote control event. [ 315.379596][ T9322] Mem-Info: [ 315.385438][ T9322] active_anon:6381 inactive_anon:0 isolated_anon:0 [ 315.385438][ T9322] active_file:56 inactive_file:52915 isolated_file:0 [ 315.385438][ T9322] unevictable:768 dirty:77 writeback:0 [ 315.385438][ T9322] slab_reclaimable:12382 slab_unreclaimable:106841 [ 315.385438][ T9322] mapped:25033 shmem:1303 pagetables:1575 [ 315.385438][ T9322] sec_pagetables:3 bounce:0 [ 315.385438][ T9322] kernel_misc_reclaimable:0 [ 315.385438][ T9322] free:1306496 free_pcp:2753 free_cma:0 [ 315.385640][ T9322] Node 0 active_anon:25524kB inactive_anon:0kB active_file:224kB inactive_file:211456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100132kB dirty:308kB writeback:0kB shmem:3676kB kernel_stack:13852kB pagetables:6144kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 315.385691][ T9322] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 315.385737][ T9322] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.385796][ T9322] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 315.385829][ T9322] Node 0 DMA32 free:1283424kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25524kB inactive_anon:0kB active_file:224kB inactive_file:211456kB unevictable:1536kB writepending:308kB zspages:0kB present:3129332kB managed:2550076kB mlocked:0kB bounce:0kB free_pcp:10004kB local_pcp:4144kB free_cma:0kB [ 315.385889][ T9322] lowmem_reserve[]: 0 0 0 0 0 [ 315.385920][ T9322] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:552kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.385973][ T9322] lowmem_reserve[]: 0 0 0 0 0 [ 315.386003][ T9322] Node 1 Normal free:3927200kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:1008kB local_pcp:1008kB free_cma:0kB [ 315.386600][ T9322] lowmem_reserve[]: 0 0 0 0 0 [ 315.391042][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 315.400127][ T9322] [ 315.400142][ T9322] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 315.400257][ T9322] Node 0 DMA32: 359*4kB (UME) 320*8kB (UME) 405*16kB (UME) 301*32kB (UME) 224*64kB (UM) 152*128kB (UME) 37*256kB (UM) 29*512kB (M) 3*1024kB (M) 3*2048kB (ME) 292*4096kB (UM) = 1283468kB [ 315.400411][ T9322] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 315.401414][ T9322] Node 1 Normal: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (UM) 2*64kB (M) 3*128kB (UM) 2*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 958*4096kB (M) = 3927192kB [ 315.401555][ T9322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.401571][ T9322] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.401587][ T9322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.401603][ T9322] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.401618][ T9322] 54270 total pagecache pages [ 315.401627][ T9322] 0 pages in swap cache [ 315.401634][ T9322] Free swap = 124996kB [ 315.401641][ T9322] Total swap = 124996kB [ 315.401649][ T9322] 2097051 pages RAM [ 315.401656][ T9322] 0 pages HighMem/MovableOnly [ 315.401663][ T9322] 427780 pages reserved [ 315.401670][ T9322] 0 pages cma reserved [ 315.487005][ T32] m920x_read = error: -19 [ 315.487029][ T32] dvb-usb: error while querying for an remote control event. [ 315.546887][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 315.598170][ T32] m920x_read = error: -19 [ 315.598197][ T32] dvb-usb: error while querying for an remote control event. [ 315.719059][ T32] m920x_read = error: -19 [ 315.719086][ T32] dvb-usb: error while querying for an remote control event. [ 315.827065][ T32] m920x_read = error: -19 [ 315.827090][ T32] dvb-usb: error while querying for an remote control event. [ 315.967982][ T32] m920x_read = error: -19 [ 315.968007][ T32] dvb-usb: error while querying for an remote control event. [ 316.077313][ T32] m920x_read = error: -19 [ 316.077337][ T32] dvb-usb: error while querying for an remote control event. [ 316.149821][ T9321] netlink: 'syz.7.950': attribute type 19 has an invalid length. [ 316.187883][ T32] m920x_read = error: -19 [ 316.187912][ T32] dvb-usb: error while querying for an remote control event. [ 316.303515][ T37] m920x_read = error: -19 [ 316.303543][ T37] dvb-usb: error while querying for an remote control event. [ 316.412507][ T37] m920x_read = error: -19 [ 316.412536][ T37] dvb-usb: error while querying for an remote control event. [ 316.524688][ T32] m920x_read = error: -19 [ 316.524712][ T32] dvb-usb: error while querying for an remote control event. [ 316.632486][ T37] m920x_read = error: -19 [ 316.632529][ T37] dvb-usb: error while querying for an remote control event. [ 316.740840][ T5791] m920x_read = error: -19 [ 316.740868][ T5791] dvb-usb: error while querying for an remote control event. [ 316.854905][ T5791] m920x_read = error: -19 [ 316.854933][ T5791] dvb-usb: error while querying for an remote control event. [ 316.963966][ T5791] m920x_read = error: -19 [ 316.963992][ T5791] dvb-usb: error while querying for an remote control event. [ 317.067677][ T5791] m920x_read = error: -19 [ 317.067706][ T5791] dvb-usb: error while querying for an remote control event. [ 317.174169][ T9356] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 32769 out of range (51000000..2150000000) [ 317.177446][ T5791] m920x_read = error: -19 [ 317.177473][ T5791] dvb-usb: error while querying for an remote control event. [ 317.287382][ T5791] m920x_read = error: -19 [ 317.287408][ T5791] dvb-usb: error while querying for an remote control event. [ 317.324736][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 317.326056][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.326155][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.396968][ T32] m920x_read = error: -19 [ 317.396995][ T32] dvb-usb: error while querying for an remote control event. [ 317.469565][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 317.513404][ T32] m920x_read = error: -19 [ 317.513433][ T32] dvb-usb: error while querying for an remote control event. [ 317.617050][ T5791] m920x_read = error: -19 [ 317.617076][ T5791] dvb-usb: error while querying for an remote control event. [ 317.627591][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 317.651063][ T5612] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 317.728174][ T5791] m920x_read = error: -19 [ 317.728198][ T5791] dvb-usb: error while querying for an remote control event. [ 317.819086][ T9372] WARNING! power/level is deprecated; use power/control instead [ 317.835640][ T9372] i2c i2c-0: dtv_property_process_set: SET cmd 0x65642f62 undefined [ 317.837277][ T5791] m920x_read = error: -19 [ 317.837301][ T5791] dvb-usb: error while querying for an remote control event. [ 317.949678][ T5791] m920x_read = error: -19 [ 317.949705][ T5791] dvb-usb: error while querying for an remote control event. [ 318.057202][ T5791] m920x_read = error: -19 [ 318.057226][ T5791] dvb-usb: error while querying for an remote control event. [ 318.148335][ T9387] FAULT_INJECTION: forcing a failure. [ 318.148335][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 318.148362][ T9387] CPU: 1 UID: 0 PID: 9387 Comm: syz.5.965 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.148377][ T9387] Tainted: [L]=SOFTLOCKUP [ 318.148381][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.148388][ T9387] Call Trace: [ 318.148393][ T9387] [ 318.148398][ T9387] dump_stack_lvl+0xe8/0x150 [ 318.148414][ T9387] should_fail_ex+0x467/0x600 [ 318.148430][ T9387] should_failslab+0xa8/0x100 [ 318.148442][ T9387] kmem_cache_alloc_node_noprof+0xac/0x660 [ 318.148456][ T9387] ? __alloc_skb+0x1d7/0x7a0 [ 318.148469][ T9387] ? __alloc_skb+0x1d7/0x7a0 [ 318.148485][ T9387] __alloc_skb+0x1d7/0x7a0 [ 318.148499][ T9387] netlink_ack+0x136/0xb30 [ 318.148513][ T9387] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.148524][ T9387] ? ref_tracker_free+0x668/0x820 [ 318.148539][ T9387] ? ____sys_sendmsg+0x565/0x870 [ 318.148553][ T9387] ? ___sys_sendmsg+0x2a5/0x360 [ 318.148566][ T9387] ? __x64_sys_sendmsg+0x1b7/0x290 [ 318.148579][ T9387] ? do_syscall_64+0x17b/0x530 [ 318.148590][ T9387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.148605][ T9387] netlink_rcv_skb+0x2a4/0x4a0 [ 318.148621][ T9387] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.148633][ T9387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.148654][ T9387] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.148669][ T9387] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.148689][ T9387] genl_rcv+0x28/0x40 [ 318.148700][ T9387] netlink_unicast+0x7f5/0x990 [ 318.148719][ T9387] netlink_sendmsg+0x813/0xb40 [ 318.148739][ T9387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.148755][ T9387] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 318.148773][ T9387] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 318.148789][ T9387] ? arch_stack_walk+0xfb/0x150 [ 318.148805][ T9387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.148820][ T9387] sock_sendmsg_nosec+0x13a/0x180 [ 318.148833][ T9387] ____sys_sendmsg+0x565/0x870 [ 318.148852][ T9387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.148871][ T9387] ? import_iovec+0x73/0xa0 [ 318.148889][ T9387] ___sys_sendmsg+0x2a5/0x360 [ 318.148903][ T9387] ? __lock_acquire+0x6df/0x2e40 [ 318.148918][ T9387] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.148950][ T9387] ? __fget_files+0x2a/0x420 [ 318.148961][ T9387] ? __fget_files+0x3a8/0x420 [ 318.148976][ T9387] __x64_sys_sendmsg+0x1b7/0x290 [ 318.148993][ T9387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.149018][ T9387] do_syscall_64+0x17b/0x530 [ 318.149028][ T9387] ? irqentry_exit+0x10f/0x8f0 [ 318.149038][ T9387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.149048][ T9387] ? clear_bhb_loop+0x40/0x90 [ 318.149061][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.149072][ T9387] RIP: 0033:0x7f276aeae0d9 [ 318.149082][ T9387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.149091][ T9387] RSP: 002b:00007f2769106028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.149103][ T9387] RAX: ffffffffffffffda RBX: 00007f276b135fa0 RCX: 00007f276aeae0d9 [ 318.149111][ T9387] RDX: 0000000000040006 RSI: 0000200000000700 RDI: 0000000000000003 [ 318.149118][ T9387] RBP: 00007f2769106090 R08: 0000000000000000 R09: 0000000000000000 [ 318.149124][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.149131][ T9387] R13: 00007f276b136038 R14: 00007f276b135fa0 R15: 00007ffdc0ff0268 [ 318.149147][ T9387] [ 318.166931][ T5791] m920x_read = error: -19 [ 318.166956][ T5791] dvb-usb: error while querying for an remote control event. [ 318.286107][ T32] m920x_read = error: -19 [ 318.286132][ T32] dvb-usb: error while querying for an remote control event. [ 318.387010][ T32] m920x_read = error: -19 [ 318.387033][ T32] dvb-usb: error while querying for an remote control event. [ 318.500779][ T32] m920x_read = error: -19 [ 318.500803][ T32] dvb-usb: error while querying for an remote control event. [ 318.606967][ T32] m920x_read = error: -19 [ 318.606993][ T32] dvb-usb: error while querying for an remote control event. [ 318.717072][ T32] m920x_read = error: -19 [ 318.717099][ T32] dvb-usb: error while querying for an remote control event. [ 318.827552][ T32] m920x_read = error: -19 [ 318.827579][ T32] dvb-usb: error while querying for an remote control event. [ 318.887985][ T9408] FAULT_INJECTION: forcing a failure. [ 318.887985][ T9408] name failslab, interval 1, probability 0, space 0, times 0 [ 318.888019][ T9408] CPU: 0 UID: 0 PID: 9408 Comm: syz.7.969 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.888047][ T9408] Tainted: [L]=SOFTLOCKUP [ 318.888054][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.888067][ T9408] Call Trace: [ 318.888075][ T9408] [ 318.888083][ T9408] dump_stack_lvl+0xe8/0x150 [ 318.888114][ T9408] should_fail_ex+0x467/0x600 [ 318.888144][ T9408] should_failslab+0xa8/0x100 [ 318.888166][ T9408] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 318.888195][ T9408] ? __kasan_kmalloc+0x93/0xb0 [ 318.888223][ T9408] ? __request_module+0x2ec/0x630 [ 318.888243][ T9408] ? __request_module+0x2ec/0x630 [ 318.888272][ T9408] kstrdup+0x42/0x100 [ 318.888294][ T9408] __request_module+0x2ec/0x630 [ 318.888321][ T9408] ? __pfx___request_module+0x10/0x10 [ 318.888345][ T9408] ? rt_mutex_slowunlock+0x219/0x460 [ 318.888381][ T9408] ? snd_timer_open+0x3cc/0x1350 [ 318.888405][ T9408] snd_timer_open+0x4ec/0x1350 [ 318.888441][ T9408] snd_seq_timer_open+0x2de/0x620 [ 318.888472][ T9408] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 318.888501][ T9408] ? rt_spin_unlock+0x157/0x200 [ 318.888528][ T9408] ? rt_spin_unlock+0x163/0x200 [ 318.888551][ T9408] snd_seq_queue_timer_open+0xba/0x140 [ 318.888577][ T9408] snd_seq_ioctl_set_queue_timer+0x217/0x380 [ 318.888600][ T9408] snd_seq_ioctl+0x295/0x490 [ 318.888621][ T9408] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 318.888645][ T9408] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 318.888683][ T9408] ? __fget_files+0x3a8/0x420 [ 318.888704][ T9408] ? __fget_files+0x2a/0x420 [ 318.888726][ T9408] ? bpf_lsm_file_ioctl+0x9/0x20 [ 318.888754][ T9408] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 318.888775][ T9408] __se_sys_ioctl+0xff/0x170 [ 318.888802][ T9408] do_syscall_64+0x17b/0x530 [ 318.888823][ T9408] ? irqentry_exit+0x10f/0x8f0 [ 318.888841][ T9408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.888861][ T9408] ? clear_bhb_loop+0x40/0x90 [ 318.888885][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.888902][ T9408] RIP: 0033:0x7f416f88e0d9 [ 318.888921][ T9408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.888938][ T9408] RSP: 002b:00007f416dae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.888959][ T9408] RAX: ffffffffffffffda RBX: 00007f416fb15fa0 RCX: 00007f416f88e0d9 [ 318.888973][ T9408] RDX: 0000200000000280 RSI: 0000000040605346 RDI: 0000000000000004 [ 318.888986][ T9408] RBP: 00007f416dae6090 R08: 0000000000000000 R09: 0000000000000000 [ 318.888999][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.889010][ T9408] R13: 00007f416fb16038 R14: 00007f416fb15fa0 R15: 00007ffc8c0d7f68 [ 318.889042][ T9408] [ 318.938734][ T32] m920x_read = error: -19 [ 318.938758][ T32] dvb-usb: error while querying for an remote control event. [ 319.057839][ T32] m920x_read = error: -19 [ 319.057866][ T32] dvb-usb: error while querying for an remote control event. [ 319.061031][ T9410] netlink: 'syz.6.970': attribute type 2 has an invalid length. [ 319.061052][ T9410] netlink: 132 bytes leftover after parsing attributes in process `syz.6.970'. [ 319.167011][ T32] m920x_read = error: -19 [ 319.167037][ T32] dvb-usb: error while querying for an remote control event. [ 319.277001][ T32] m920x_read = error: -19 [ 319.277026][ T32] dvb-usb: error while querying for an remote control event. [ 319.389761][ T5791] m920x_read = error: -19 [ 319.389788][ T5791] dvb-usb: error while querying for an remote control event. [ 319.443393][ T9415] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 319.496951][ T5791] m920x_read = error: -19 [ 319.496976][ T5791] dvb-usb: error while querying for an remote control event. [ 319.607103][ T32] m920x_read = error: -19 [ 319.607128][ T32] dvb-usb: error while querying for an remote control event. [ 319.721104][ T37] m920x_read = error: -19 [ 319.721133][ T37] dvb-usb: error while querying for an remote control event. [ 319.829719][ T5791] m920x_read = error: -19 [ 319.829748][ T5791] dvb-usb: error while querying for an remote control event. [ 319.907154][ T9432] overlayfs: upper fs does not support file handles, falling back to index=off. [ 319.938959][ T5791] m920x_read = error: -19 [ 319.938983][ T5791] dvb-usb: error while querying for an remote control event. [ 320.047356][ T5791] m920x_read = error: -19 [ 320.047374][ T5791] dvb-usb: error while querying for an remote control event. [ 320.157335][ T32] m920x_read = error: -19 [ 320.157353][ T32] dvb-usb: error while querying for an remote control event. [ 320.279962][ T5791] m920x_read = error: -19 [ 320.279991][ T5791] dvb-usb: error while querying for an remote control event. [ 320.387144][ T5791] m920x_read = error: -19 [ 320.387173][ T5791] dvb-usb: error while querying for an remote control event. [ 320.505692][ T5791] m920x_read = error: -19 [ 320.505719][ T5791] dvb-usb: error while querying for an remote control event. [ 320.609759][ T5791] m920x_read = error: -19 [ 320.609787][ T5791] dvb-usb: error while querying for an remote control event. [ 320.717017][ T32] m920x_read = error: -19 [ 320.717109][ T32] dvb-usb: error while querying for an remote control event. [ 320.829199][ T32] m920x_read = error: -19 [ 320.829290][ T32] dvb-usb: error while querying for an remote control event. [ 320.937053][ T32] m920x_read = error: -19 [ 320.937079][ T32] dvb-usb: error while querying for an remote control event. [ 321.047012][ T32] m920x_read = error: -19 [ 321.047040][ T32] dvb-usb: error while querying for an remote control event. [ 321.158458][ T32] m920x_read = error: -19 [ 321.158482][ T32] dvb-usb: error while querying for an remote control event. [ 321.179089][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 321.266970][ T32] m920x_read = error: -19 [ 321.266997][ T32] dvb-usb: error while querying for an remote control event. [ 321.320923][ T9446] FAULT_INJECTION: forcing a failure. [ 321.320923][ T9446] name failslab, interval 1, probability 0, space 0, times 0 [ 321.320959][ T9446] CPU: 0 UID: 0 PID: 9446 Comm: syz.6.979 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 321.320986][ T9446] Tainted: [L]=SOFTLOCKUP [ 321.320993][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.321005][ T9446] Call Trace: [ 321.321014][ T9446] [ 321.321022][ T9446] dump_stack_lvl+0xe8/0x150 [ 321.321050][ T9446] should_fail_ex+0x467/0x600 [ 321.321082][ T9446] should_failslab+0xa8/0x100 [ 321.321103][ T9446] kmem_cache_alloc_node_noprof+0xac/0x660 [ 321.321132][ T9446] ? __alloc_skb+0x1d7/0x7a0 [ 321.321157][ T9446] ? __alloc_skb+0x1d7/0x7a0 [ 321.321188][ T9446] __alloc_skb+0x1d7/0x7a0 [ 321.321219][ T9446] netlink_ack+0x136/0xb30 [ 321.321245][ T9446] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.321266][ T9446] ? ref_tracker_free+0x668/0x820 [ 321.321293][ T9446] ? __pfx_nl80211_post_doit+0x10/0x10 [ 321.321316][ T9446] ? ____sys_sendmsg+0x565/0x870 [ 321.321343][ T9446] ? ___sys_sendmsg+0x2a5/0x360 [ 321.321370][ T9446] ? __x64_sys_sendmsg+0x1b7/0x290 [ 321.321396][ T9446] ? do_syscall_64+0x17b/0x530 [ 321.321414][ T9446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.321449][ T9446] netlink_rcv_skb+0x2a4/0x4a0 [ 321.321478][ T9446] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.321500][ T9446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.321539][ T9446] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.321567][ T9446] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.321602][ T9446] genl_rcv+0x28/0x40 [ 321.321623][ T9446] netlink_unicast+0x7f5/0x990 [ 321.321662][ T9446] netlink_sendmsg+0x813/0xb40 [ 321.321704][ T9446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.321737][ T9446] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 321.321771][ T9446] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 321.321802][ T9446] ? arch_stack_walk+0xfb/0x150 [ 321.321841][ T9446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.321870][ T9446] sock_sendmsg_nosec+0x13a/0x180 [ 321.321896][ T9446] ____sys_sendmsg+0x565/0x870 [ 321.321934][ T9446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.321972][ T9446] ? import_iovec+0x73/0xa0 [ 321.322007][ T9446] ___sys_sendmsg+0x2a5/0x360 [ 321.322035][ T9446] ? __lock_acquire+0x6df/0x2e40 [ 321.322057][ T9446] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.322121][ T9446] ? __fget_files+0x2a/0x420 [ 321.322141][ T9446] ? __fget_files+0x3a8/0x420 [ 321.322172][ T9446] __x64_sys_sendmsg+0x1b7/0x290 [ 321.322205][ T9446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.322254][ T9446] do_syscall_64+0x17b/0x530 [ 321.322274][ T9446] ? irqentry_exit+0x10f/0x8f0 [ 321.322293][ T9446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.322313][ T9446] ? clear_bhb_loop+0x40/0x90 [ 321.322338][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.322358][ T9446] RIP: 0033:0x7f6f9dcfe0d9 [ 321.322377][ T9446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.322395][ T9446] RSP: 002b:00007f6f9bf56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.322416][ T9446] RAX: ffffffffffffffda RBX: 00007f6f9df85fa0 RCX: 00007f6f9dcfe0d9 [ 321.322432][ T9446] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 321.322453][ T9446] RBP: 00007f6f9bf56090 R08: 0000000000000000 R09: 0000000000000000 [ 321.322467][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.322479][ T9446] R13: 00007f6f9df86038 R14: 00007f6f9df85fa0 R15: 00007ffdb357d728 [ 321.322511][ T9446] [ 321.377000][ T32] m920x_read = error: -19 [ 321.377025][ T32] dvb-usb: error while querying for an remote control event. [ 321.487063][ T32] m920x_read = error: -19 [ 321.487089][ T32] dvb-usb: error while querying for an remote control event. [ 321.598731][ T32] m920x_read = error: -19 [ 321.598757][ T32] dvb-usb: error while querying for an remote control event. [ 321.708658][ T32] m920x_read = error: -19 [ 321.708685][ T32] dvb-usb: error while querying for an remote control event. [ 321.759692][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.759719][ T9] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 321.784550][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 321.784580][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.784599][ T9] usb 6-1: Product: syz [ 321.784612][ T9] usb 6-1: Manufacturer: syz [ 321.784626][ T9] usb 6-1: SerialNumber: syz [ 321.818271][ T32] m920x_read = error: -19 [ 321.818297][ T32] dvb-usb: error while querying for an remote control event. [ 321.859349][ T9448] netlink: 'syz.6.980': attribute type 1 has an invalid length. [ 321.928953][ T32] m920x_read = error: -19 [ 321.928978][ T32] dvb-usb: error while querying for an remote control event. [ 322.036892][ T32] m920x_read = error: -19 [ 322.036910][ T32] dvb-usb: error while querying for an remote control event. [ 322.147028][ T32] m920x_read = error: -19 [ 322.147045][ T32] dvb-usb: error while querying for an remote control event. [ 322.257026][ T32] m920x_read = error: -19 [ 322.257049][ T32] dvb-usb: error while querying for an remote control event. [ 322.278973][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 322.355133][ T9459] overlayfs: upper fs does not support file handles, falling back to index=off. [ 322.367006][ T32] m920x_read = error: -19 [ 322.367028][ T32] dvb-usb: error while querying for an remote control event. [ 322.464481][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 322.477038][ T32] m920x_read = error: -19 [ 322.477064][ T32] dvb-usb: error while querying for an remote control event. [ 322.478572][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 322.479886][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.479974][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.499960][ T9] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 322.499990][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.500010][ T9] usb 2-1: Product: syz [ 322.500024][ T9] usb 2-1: Manufacturer: syz [ 322.500039][ T9] usb 2-1: SerialNumber: syz [ 322.587064][ T32] m920x_read = error: -19 [ 322.587092][ T32] dvb-usb: error while querying for an remote control event. [ 322.699428][ T32] m920x_read = error: -19 [ 322.699454][ T32] dvb-usb: error while querying for an remote control event. [ 322.809784][ T32] m920x_read = error: -19 [ 322.809808][ T32] dvb-usb: error while querying for an remote control event. [ 322.809969][ T9] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 322.863515][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 322.917143][ T32] m920x_read = error: -19 [ 322.917170][ T32] dvb-usb: error while querying for an remote control event. [ 323.027392][ T32] m920x_read = error: -19 [ 323.027421][ T32] dvb-usb: error while querying for an remote control event. [ 323.137742][ T32] m920x_read = error: -19 [ 323.137765][ T32] dvb-usb: error while querying for an remote control event. [ 323.216904][ T5782] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 323.247016][ T32] m920x_read = error: -19 [ 323.247044][ T32] dvb-usb: error while querying for an remote control event. [ 323.273326][ T9] usb 2-1: USB disconnect, device number 74 [ 323.351638][ T8919] udevd[8919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.359399][ T32] m920x_read = error: -19 [ 323.359422][ T32] dvb-usb: error while querying for an remote control event. [ 323.376940][ T5782] usb 8-1: Using ep0 maxpacket: 8 [ 323.378784][ T5782] usb 8-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 323.378810][ T5782] usb 8-1: config 0 interface 0 has no altsetting 0 [ 323.378829][ T5782] usb 8-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 323.378842][ T5782] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.434298][ T5782] usb 8-1: config 0 descriptor?? [ 323.467305][ T32] m920x_read = error: -19 [ 323.467333][ T32] dvb-usb: error while querying for an remote control event. [ 323.578556][ T32] m920x_read = error: -19 [ 323.578573][ T32] dvb-usb: error while querying for an remote control event. [ 323.686994][ T32] m920x_read = error: -19 [ 323.687018][ T32] dvb-usb: error while querying for an remote control event. [ 323.797069][ T32] m920x_read = error: -19 [ 323.797092][ T32] dvb-usb: error while querying for an remote control event. [ 323.887823][ T5782] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 323.887861][ T5782] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 323.887886][ T5782] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 323.887910][ T5782] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 323.887936][ T5782] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 323.887960][ T5782] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 323.888031][ T5782] zydacron 0003:13EC:0006.0006: unknown main item tag 0x6 [ 323.888057][ T5782] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 323.889912][ T5782] zydacron 0003:13EC:0006.0006: reserved main item tag 0xe [ 323.889955][ T5782] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 323.889981][ T5782] zydacron 0003:13EC:0006.0006: item fetching failed at offset 24/40 [ 323.890721][ T5782] zydacron 0003:13EC:0006.0006: parse failed [ 323.890823][ T5782] zydacron 0003:13EC:0006.0006: probe with driver zydacron failed with error -22 [ 323.907052][ T5791] m920x_read = error: -19 [ 323.907081][ T5791] dvb-usb: error while querying for an remote control event. [ 324.017196][ T5791] m920x_read = error: -19 [ 324.017214][ T5791] dvb-usb: error while querying for an remote control event. [ 324.068116][ T5791] usb 6-1: USB disconnect, device number 3 [ 324.130490][ T32] m920x_read = error: -19 [ 324.130517][ T32] dvb-usb: error while querying for an remote control event. [ 324.235850][ T5782] usb 8-1: USB disconnect, device number 2 [ 324.237311][ T32] m920x_read = error: -19 [ 324.237388][ T32] dvb-usb: error while querying for an remote control event. [ 324.351497][ T5791] m920x_read = error: -19 [ 324.351515][ T5791] dvb-usb: error while querying for an remote control event. [ 324.365564][ T9485] FAULT_INJECTION: forcing a failure. [ 324.365564][ T9485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 324.365717][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.1.989 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 324.365746][ T9485] Tainted: [L]=SOFTLOCKUP [ 324.365753][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.365765][ T9485] Call Trace: [ 324.365773][ T9485] [ 324.365781][ T9485] dump_stack_lvl+0xe8/0x150 [ 324.365812][ T9485] should_fail_ex+0x467/0x600 [ 324.365843][ T9485] prepare_alloc_pages+0x223/0x650 [ 324.365879][ T9485] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 324.365915][ T9485] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 324.365950][ T9485] ? __pfx_policy_nodemask+0x10/0x10 [ 324.365971][ T9485] ? __lock_acquire+0x6df/0x2e40 [ 324.365996][ T9485] alloc_pages_mpol+0xd4/0x280 [ 324.366022][ T9485] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 324.366045][ T9485] vma_alloc_folio_noprof+0xe1/0x1e0 [ 324.366069][ T9485] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 324.366089][ T9485] ? lock_acquire+0x115/0x350 [ 324.366128][ T9485] do_pte_missing+0x835/0x28f0 [ 324.366166][ T9485] ? handle_mm_fault+0xeb/0x28d0 [ 324.366195][ T9485] handle_mm_fault+0xf95/0x28d0 [ 324.366224][ T9485] ? mt_find+0x186/0x630 [ 324.366249][ T9485] ? handle_mm_fault+0xeb/0x28d0 [ 324.366284][ T9485] ? __pfx_handle_mm_fault+0x10/0x10 [ 324.366320][ T9485] ? __pfx_kvm_hv_setup_tsc_page+0x10/0x10 [ 324.366345][ T9485] ? lock_mm_and_find_vma+0xa7/0x340 [ 324.366377][ T9485] do_user_addr_fault+0x744/0x1340 [ 324.366419][ T9485] exc_page_fault+0x6a/0xc0 [ 324.366440][ T9485] asm_exc_page_fault+0x26/0x30 [ 324.366459][ T9485] RIP: 0010:vcpu_run+0x1f45/0x7780 [ 324.366487][ T9485] Code: 0f 85 eb 00 00 00 48 bb 00 f0 ff ff ff 7f 00 00 48 89 df 4c 89 f6 e8 4a a6 7f 00 4c 39 f3 0f 82 cd 33 00 00 0f 01 cb 0f ae e8 <41> c6 46 10 00 e8 91 a3 7f 00 48 8b 9c 24 20 02 00 00 48 89 d8 48 [ 324.366503][ T9485] RSP: 0018:ffffc9000638f800 EFLAGS: 00050206 [ 324.366521][ T9485] RAX: ffffffff81460006 RBX: 00007ffffffff000 RCX: ffff88802553be80 [ 324.366537][ T9485] RDX: 0000000000000000 RSI: 00002000005ad000 RDI: 00007ffffffff000 [ 324.366550][ T9485] RBP: ffffc9000638fbb0 R08: 0000000000000000 R09: 0000000000000000 [ 324.366563][ T9485] R10: dffffc0000000000 R11: ffffed1006f7b036 R12: ffff88803e268000 [ 324.366579][ T9485] R13: 1ffff11007c4d007 R14: 00002000005ad000 R15: dffffc0000000000 [ 324.366601][ T9485] ? vcpu_run+0x1f36/0x7780 [ 324.366702][ T9485] ? __pfx_vcpu_run+0x10/0x10 [ 324.366729][ T9485] ? lock_acquire+0x115/0x350 [ 324.366775][ T9485] kvm_arch_vcpu_ioctl_run+0xe23/0x1920 [ 324.366806][ T9485] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1920 [ 324.366843][ T9485] kvm_vcpu_ioctl+0xa64/0xfe0 [ 324.366879][ T9485] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 324.366908][ T9485] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 324.366928][ T9485] ? lockdep_hardirqs_on+0x7a/0x110 [ 324.366964][ T9485] ? __fget_files+0x2a/0x420 [ 324.366989][ T9485] ? __fget_files+0x3a8/0x420 [ 324.367007][ T9485] ? __fget_files+0x2a/0x420 [ 324.367030][ T9485] ? bpf_lsm_file_ioctl+0x9/0x20 [ 324.367059][ T9485] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 324.367088][ T9485] __se_sys_ioctl+0xff/0x170 [ 324.367115][ T9485] do_syscall_64+0x17b/0x530 [ 324.367135][ T9485] ? irqentry_exit+0x10f/0x8f0 [ 324.367153][ T9485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.367173][ T9485] ? clear_bhb_loop+0x40/0x90 [ 324.367198][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.367216][ T9485] RIP: 0033:0x7f9573cbe0d9 [ 324.367234][ T9485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.367249][ T9485] RSP: 002b:00007f9571ef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.367268][ T9485] RAX: ffffffffffffffda RBX: 00007f9573f46090 RCX: 00007f9573cbe0d9 [ 324.367283][ T9485] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 324.367295][ T9485] RBP: 00007f9571ef5090 R08: 0000000000000000 R09: 0000000000000000 [ 324.367308][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.367319][ T9485] R13: 00007f9573f46128 R14: 00007f9573f46090 R15: 00007ffc802483c8 [ 324.367351][ T9485] [ 324.463492][ T5791] m920x_read = error: -19 [ 324.463518][ T5791] dvb-usb: error while querying for an remote control event. [ 324.566950][ T5791] m920x_read = error: -19 [ 324.566974][ T5791] dvb-usb: error while querying for an remote control event. [ 324.683256][ T5791] m920x_read = error: -19 [ 324.683285][ T5791] dvb-usb: error while querying for an remote control event. [ 324.690366][ T9488] netlink: 40 bytes leftover after parsing attributes in process `syz.5.990'. [ 324.788789][ T5791] m920x_read = error: -19 [ 324.788815][ T5791] dvb-usb: error while querying for an remote control event. [ 324.897925][ T5791] m920x_read = error: -19 [ 324.897949][ T5791] dvb-usb: error while querying for an remote control event. [ 325.007209][ T32] m920x_read = error: -19 [ 325.007235][ T32] dvb-usb: error while querying for an remote control event. [ 325.117032][ T32] m920x_read = error: -19 [ 325.117063][ T32] dvb-usb: error while querying for an remote control event. [ 325.227107][ T32] m920x_read = error: -19 [ 325.227134][ T32] dvb-usb: error while querying for an remote control event. [ 325.337896][ T32] m920x_read = error: -19 [ 325.337924][ T32] dvb-usb: error while querying for an remote control event. [ 325.447190][ T32] m920x_read = error: -19 [ 325.447216][ T32] dvb-usb: error while querying for an remote control event. [ 325.535422][ T9507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.995'. [ 325.556986][ T32] m920x_read = error: -19 [ 325.557010][ T32] dvb-usb: error while querying for an remote control event. [ 325.667905][ T32] m920x_read = error: -19 [ 325.667934][ T32] dvb-usb: error while querying for an remote control event. [ 325.752533][ T9516] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 325.752551][ T9516] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 325.784376][ T32] m920x_read = error: -19 [ 325.784405][ T32] dvb-usb: error while querying for an remote control event. [ 325.866847][ T5782] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 325.892702][ T37] m920x_read = error: -19 [ 325.892724][ T37] dvb-usb: error while querying for an remote control event. [ 325.936265][ T9516] vhci_hcd vhci_hcd.0: Device attached [ 325.967816][ T9519] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 325.967843][ T9519] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 325.967928][ T9519] vhci_hcd vhci_hcd.0: Device attached [ 326.001127][ T32] m920x_read = error: -19 [ 326.001145][ T32] dvb-usb: error while querying for an remote control event. [ 326.066938][ T32] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 326.080870][ T5782] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.080895][ T5782] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 326.084865][ T5782] usb 8-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 326.084895][ T5782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.084914][ T5782] usb 8-1: Product: syz [ 326.084934][ T5782] usb 8-1: Manufacturer: syz [ 326.084948][ T5782] usb 8-1: SerialNumber: syz [ 326.107374][ T37] m920x_read = error: -19 [ 326.107405][ T37] dvb-usb: error while querying for an remote control event. [ 326.127011][ T32] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 326.221751][ T37] m920x_read = error: -19 [ 326.221776][ T37] dvb-usb: error while querying for an remote control event. [ 326.434108][ T37] m920x_read = error: -19 [ 326.434137][ T37] dvb-usb: error while querying for an remote control event. [ 326.536885][ T37] m920x_read = error: -19 [ 326.536912][ T37] dvb-usb: error while querying for an remote control event. [ 326.646864][ T37] m920x_read = error: -19 [ 326.646891][ T37] dvb-usb: error while querying for an remote control event. [ 326.700761][ T9521] vhci_hcd: connection closed [ 326.701760][ T9517] vhci_hcd: connection reset by peer [ 326.738285][ T1502] vhci_hcd vhci_hcd.5: stop threads [ 326.752157][ T1502] vhci_hcd vhci_hcd.5: release socket [ 326.753179][ T1502] vhci_hcd vhci_hcd.5: disconnect device [ 326.753340][ T1502] vhci_hcd vhci_hcd.5: stop threads [ 326.753355][ T1502] vhci_hcd vhci_hcd.5: release socket [ 326.753416][ T1502] vhci_hcd vhci_hcd.5: disconnect device [ 326.809283][ T5796] m920x_read = error: -19 [ 326.809308][ T5796] dvb-usb: error while querying for an remote control event. [ 326.923168][ T822] m920x_read = error: -19 [ 326.923196][ T822] dvb-usb: error while querying for an remote control event. [ 327.022215][ T9533] sctp: [Deprecated]: syz.1.1001 (pid 9533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.022215][ T9533] Use struct sctp_sack_info instead [ 327.043373][ T5685] m920x_read = error: -19 [ 327.043397][ T5685] dvb-usb: error while querying for an remote control event. [ 327.147152][ T5685] m920x_read = error: -19 [ 327.147179][ T5685] dvb-usb: error while querying for an remote control event. [ 327.256827][ T5685] m920x_read = error: -19 [ 327.256853][ T5685] dvb-usb: error while querying for an remote control event. [ 327.284579][ T9537] FAULT_INJECTION: forcing a failure. [ 327.284579][ T9537] name failslab, interval 1, probability 0, space 0, times 0 [ 327.284615][ T9537] CPU: 1 UID: 0 PID: 9537 Comm: syz.1.1003 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 327.284643][ T9537] Tainted: [L]=SOFTLOCKUP [ 327.284650][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 327.284663][ T9537] Call Trace: [ 327.284671][ T9537] [ 327.284680][ T9537] dump_stack_lvl+0xe8/0x150 [ 327.284710][ T9537] should_fail_ex+0x467/0x600 [ 327.284742][ T9537] should_failslab+0xa8/0x100 [ 327.284763][ T9537] __kmalloc_noprof+0xfb/0x790 [ 327.284791][ T9537] ? afs_alloc_vlserver_list+0x27/0x100 [ 327.284817][ T9537] ? afs_alloc_vlserver_list+0x27/0x100 [ 327.284850][ T9537] afs_alloc_vlserver_list+0x27/0x100 [ 327.284877][ T9537] afs_lookup_cell+0x1185/0x1ce0 [ 327.284917][ T9537] ? __pfx_afs_lookup_cell+0x10/0x10 [ 327.284946][ T9537] ? __fs_parse+0x4f3/0x740 [ 327.284983][ T9537] afs_parse_param+0x64c/0x870 [ 327.285014][ T9537] ? __pfx_afs_parse_param+0x10/0x10 [ 327.285040][ T9537] ? static_key_count+0x41/0x70 [ 327.285066][ T9537] vfs_parse_fs_param+0x1a9/0x420 [ 327.285098][ T9537] __se_sys_fsconfig+0x6bf/0x810 [ 327.285136][ T9537] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 327.285165][ T9537] ? ksys_write+0x248/0x270 [ 327.285191][ T9537] ? __pfx_ksys_write+0x10/0x10 [ 327.285219][ T9537] ? __x64_sys_fsconfig+0x20/0xc0 [ 327.285255][ T9537] do_syscall_64+0x17b/0x530 [ 327.285277][ T9537] ? irqentry_exit+0x10f/0x8f0 [ 327.285295][ T9537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.285316][ T9537] ? clear_bhb_loop+0x40/0x90 [ 327.285341][ T9537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.285361][ T9537] RIP: 0033:0x7f9573cbe0d9 [ 327.285379][ T9537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.285396][ T9537] RSP: 002b:00007f9571f16028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 327.285417][ T9537] RAX: ffffffffffffffda RBX: 00007f9573f45fa0 RCX: 00007f9573cbe0d9 [ 327.285432][ T9537] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 327.285446][ T9537] RBP: 00007f9571f16090 R08: 0000000000000000 R09: 0000000000000000 [ 327.285459][ T9537] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 327.285473][ T9537] R13: 00007f9573f46038 R14: 00007f9573f45fa0 R15: 00007ffc802483c8 [ 327.285505][ T9537] [ 327.285568][ T9537] kAFS: unable to lookup cell '(G' [ 327.526840][ T5685] m920x_read = error: -19 [ 327.526865][ T5685] dvb-usb: error while querying for an remote control event. [ 327.637024][ T5685] m920x_read = error: -19 [ 327.637052][ T5685] dvb-usb: error while querying for an remote control event. [ 327.746913][ T37] m920x_read = error: -19 [ 327.746937][ T37] dvb-usb: error while querying for an remote control event. [ 327.860715][ T37] m920x_read = error: -19 [ 327.860742][ T37] dvb-usb: error while querying for an remote control event. [ 327.866836][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 327.916960][ T5685] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 327.967024][ T37] m920x_read = error: -19 [ 327.967052][ T37] dvb-usb: error while querying for an remote control event. [ 328.030951][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.030987][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.031025][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 328.031048][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.053865][ T9] usb 6-1: config 0 descriptor?? [ 328.092476][ T5329] m920x_read = error: -19 [ 328.092502][ T5329] dvb-usb: error while querying for an remote control event. [ 328.111133][ T5685] usb 2-1: Using ep0 maxpacket: 8 [ 328.115929][ T5685] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 328.115954][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.115971][ T5685] usb 2-1: Product: syz [ 328.115983][ T5685] usb 2-1: Manufacturer: syz [ 328.115995][ T5685] usb 2-1: SerialNumber: syz [ 328.174693][ T5685] usb 2-1: config 0 descriptor?? [ 328.198219][ T37] m920x_read = error: -19 [ 328.198244][ T37] dvb-usb: error while querying for an remote control event. [ 328.311040][ T37] m920x_read = error: -19 [ 328.311067][ T37] dvb-usb: error while querying for an remote control event. [ 328.382415][ T5685] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 328.419046][ T37] m920x_read = error: -19 [ 328.419074][ T37] dvb-usb: error while querying for an remote control event. [ 328.474769][ T9] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 328.527008][ T37] m920x_read = error: -19 [ 328.527228][ T37] dvb-usb: error while querying for an remote control event. [ 328.537577][ T9] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 328.637022][ T37] m920x_read = error: -19 [ 328.637048][ T37] dvb-usb: error while querying for an remote control event. [ 328.654989][ T37] usb 8-1: USB disconnect, device number 3 [ 328.749631][ T5796] m920x_read = error: -19 [ 328.749658][ T5796] dvb-usb: error while querying for an remote control event. [ 328.858247][ T37] m920x_read = error: -19 [ 328.858274][ T37] dvb-usb: error while querying for an remote control event. [ 328.962817][ T9540] comedi comedi0: rti802: I/O base address not correctly aligned [ 328.967569][ T37] m920x_read = error: -19 [ 328.967592][ T37] dvb-usb: error while querying for an remote control event. [ 329.077591][ T5329] m920x_read = error: -19 [ 329.077614][ T5329] dvb-usb: error while querying for an remote control event. [ 329.195095][ T822] m920x_read = error: -19 [ 329.195120][ T822] dvb-usb: error while querying for an remote control event. [ 329.255934][ T5685] usb write operation failed. (-71) [ 329.297441][ T5796] m920x_read = error: -19 [ 329.297467][ T5796] dvb-usb: error while querying for an remote control event. [ 329.312082][ T5685] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 329.312666][ T5685] dvbdev: DVB: registering new adapter (Terratec H7) [ 329.312710][ T5685] usb 2-1: media controller created [ 329.313102][ T5685] usb read operation failed. (-71) [ 329.313530][ T5685] usb write operation failed. (-71) [ 329.356955][ T37] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 329.383434][ T5685] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 329.396058][ T5685] usb 2-1: USB disconnect, device number 75 [ 329.414987][ T5796] m920x_read = error: -19 [ 329.415013][ T5796] dvb-usb: error while querying for an remote control event. [ 329.518130][ T5796] m920x_read = error: -19 [ 329.518154][ T5796] dvb-usb: error while querying for an remote control event. [ 329.556940][ T37] usb 8-1: device descriptor read/64, error -71 [ 329.634560][ T5796] m920x_read = error: -19 [ 329.634588][ T5796] dvb-usb: error while querying for an remote control event. [ 329.737806][ T5796] m920x_read = error: -19 [ 329.737832][ T5796] dvb-usb: error while querying for an remote control event. [ 329.796968][ T37] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 329.846992][ T5685] m920x_read = error: -19 [ 329.847018][ T5685] dvb-usb: error while querying for an remote control event. [ 329.936794][ T37] usb 8-1: device descriptor read/64, error -71 [ 329.938047][ T5799] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 329.957021][ T5685] m920x_read = error: -19 [ 329.957049][ T5685] dvb-usb: error while querying for an remote control event. [ 330.047361][ T37] usb usb8-port1: attempt power cycle [ 330.066987][ T5796] m920x_read = error: -19 [ 330.067014][ T5796] dvb-usb: error while querying for an remote control event. [ 330.108474][ T5782] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 330.139632][ T5799] usb 7-1: too many configurations: 253, using maximum allowed: 8 [ 330.148370][ T5799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.155283][ T5799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.176967][ T5796] m920x_read = error: -19 [ 330.176991][ T5796] dvb-usb: error while querying for an remote control event. [ 330.181373][ T5799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.182477][ T5799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.183739][ T5799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.202212][ T5799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.235904][ T5799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.249286][ T5799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.249316][ T5799] usb 7-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 330.249328][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.254989][ T5799] usb 7-1: config 0 descriptor?? [ 330.289564][ T822] m920x_read = error: -19 [ 330.289581][ T822] dvb-usb: error while querying for an remote control event. [ 330.306287][ T5799] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 330.318777][ T5782] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 330.319014][ T5782] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.319035][ T5782] usb 2-1: config 0 has no interface number 0 [ 330.319065][ T5782] usb 2-1: config 0 interface 4 has no altsetting 0 [ 330.323593][ T5782] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 330.323622][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 330.324196][ T5782] usb 2-1: Product: syz [ 330.324212][ T5782] usb 2-1: SerialNumber: syz [ 330.363944][ T5782] usb 2-1: config 0 descriptor?? [ 330.396998][ T5796] m920x_read = error: -19 [ 330.397022][ T5796] dvb-usb: error while querying for an remote control event. [ 330.438130][ T5782] ftdi_sio 2-1:0.4: FTDI USB Serial Device converter detected [ 330.451585][ T37] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 330.489873][ T37] usb 8-1: device descriptor read/8, error -71 [ 330.508678][ T5796] m920x_read = error: -19 [ 330.508702][ T5796] dvb-usb: error while querying for an remote control event. [ 330.562604][ T5782] usb 2-1: Detected SIO [ 330.601591][ T822] usb 7-1: USB disconnect, device number 5 [ 330.618269][ T5796] m920x_read = error: -19 [ 330.618292][ T5796] dvb-usb: error while querying for an remote control event. [ 330.654871][ T5782] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 330.698843][ T5782] usb 2-1: USB disconnect, device number 76 [ 330.727095][ T5796] m920x_read = error: -19 [ 330.727122][ T5796] dvb-usb: error while querying for an remote control event. [ 330.727186][ T37] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 330.749730][ T37] usb 8-1: device descriptor read/8, error -71 [ 330.772165][ T5782] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 330.794340][ T5782] ftdi_sio 2-1:0.4: device disconnected [ 330.837135][ T5796] m920x_read = error: -19 [ 330.837161][ T5796] dvb-usb: error while querying for an remote control event. [ 330.841931][ T9] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 330.841984][ T9] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 330.859597][ T37] usb usb8-port1: unable to enumerate USB device [ 330.867485][ T9] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 330.890399][ T9] usb 6-1: USB disconnect, device number 4 [ 330.947354][ T37] m920x_read = error: -19 [ 330.947382][ T37] dvb-usb: error while querying for an remote control event. [ 331.057105][ T37] m920x_read = error: -19 [ 331.057134][ T37] dvb-usb: error while querying for an remote control event. [ 331.167039][ T822] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 331.167436][ T37] m920x_read = error: -19 [ 331.167462][ T37] dvb-usb: error while querying for an remote control event. [ 331.288102][ T37] m920x_read = error: -19 [ 331.288132][ T37] dvb-usb: error while querying for an remote control event. [ 331.290570][ T9575] FAULT_INJECTION: forcing a failure. [ 331.290570][ T9575] name failslab, interval 1, probability 0, space 0, times 0 [ 331.290604][ T9575] CPU: 1 UID: 0 PID: 9575 Comm: syz.1.1014 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 331.290629][ T9575] Tainted: [L]=SOFTLOCKUP [ 331.290636][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.290648][ T9575] Call Trace: [ 331.290654][ T9575] [ 331.290662][ T9575] dump_stack_lvl+0xe8/0x150 [ 331.290692][ T9575] should_fail_ex+0x467/0x600 [ 331.290721][ T9575] should_failslab+0xa8/0x100 [ 331.290743][ T9575] __kmalloc_noprof+0xfb/0x790 [ 331.290771][ T9575] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 331.290794][ T9575] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 331.290822][ T9575] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 331.290848][ T9575] genl_start+0x180/0x6d0 [ 331.290873][ T9575] __netlink_dump_start+0x442/0x7b0 [ 331.290903][ T9575] genl_family_rcv_msg_dumpit+0x213/0x310 [ 331.290926][ T9575] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 331.290945][ T9575] ? genl_get_cmd+0x6cc/0x960 [ 331.290967][ T9575] ? __pfx_genl_start+0x10/0x10 [ 331.290986][ T9575] ? __pfx_genl_dumpit+0x10/0x10 [ 331.291004][ T9575] ? __pfx_genl_done+0x10/0x10 [ 331.291034][ T9575] genl_rcv_msg+0x5e1/0x7a0 [ 331.291059][ T9575] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.291077][ T9575] ? ref_tracker_free+0x668/0x820 [ 331.291097][ T9575] ? __pfx_ethnl_rss_dump_start+0x10/0x10 [ 331.291117][ T9575] ? __pfx_ethnl_rss_dumpit+0x10/0x10 [ 331.291137][ T9575] ? ____sys_sendmsg+0x565/0x870 [ 331.291159][ T9575] ? ___sys_sendmsg+0x2a5/0x360 [ 331.291181][ T9575] ? __x64_sys_sendmsg+0x1b7/0x290 [ 331.291204][ T9575] ? do_syscall_64+0x17b/0x530 [ 331.291219][ T9575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.291244][ T9575] netlink_rcv_skb+0x226/0x4a0 [ 331.291269][ T9575] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.291289][ T9575] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.291324][ T9575] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.291348][ T9575] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.291375][ T9575] genl_rcv+0x28/0x40 [ 331.291399][ T9575] netlink_unicast+0x7f5/0x990 [ 331.291430][ T9575] netlink_sendmsg+0x813/0xb40 [ 331.291463][ T9575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.291490][ T9575] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 331.291518][ T9575] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 331.291543][ T9575] ? arch_stack_walk+0xfb/0x150 [ 331.291570][ T9575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.291594][ T9575] sock_sendmsg_nosec+0x13a/0x180 [ 331.291614][ T9575] ____sys_sendmsg+0x565/0x870 [ 331.291645][ T9575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.291677][ T9575] ? import_iovec+0x73/0xa0 [ 331.291704][ T9575] ___sys_sendmsg+0x2a5/0x360 [ 331.291727][ T9575] ? __lock_acquire+0x6df/0x2e40 [ 331.291747][ T9575] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.291799][ T9575] ? __fget_files+0x2a/0x420 [ 331.291816][ T9575] ? __fget_files+0x3a8/0x420 [ 331.291841][ T9575] __x64_sys_sendmsg+0x1b7/0x290 [ 331.291867][ T9575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.291925][ T9575] do_syscall_64+0x17b/0x530 [ 331.291942][ T9575] ? irqentry_exit+0x10f/0x8f0 [ 331.291957][ T9575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.291974][ T9575] ? clear_bhb_loop+0x40/0x90 [ 331.291994][ T9575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.292011][ T9575] RIP: 0033:0x7f9573cbe0d9 [ 331.292026][ T9575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.292041][ T9575] RSP: 002b:00007f9571ef5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.292058][ T9575] RAX: ffffffffffffffda RBX: 00007f9573f46090 RCX: 00007f9573cbe0d9 [ 331.292071][ T9575] RDX: 00000000000048d4 RSI: 0000200000000240 RDI: 0000000000000004 [ 331.292082][ T9575] RBP: 00007f9571ef5090 R08: 0000000000000000 R09: 0000000000000000 [ 331.292093][ T9575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.292103][ T9575] R13: 00007f9573f46128 R14: 00007f9573f46090 R15: 00007ffc802483c8 [ 331.292130][ T9575] [ 331.404297][ T37] m920x_read = error: -19 [ 331.404334][ T37] dvb-usb: error while querying for an remote control event. [ 331.467621][ T822] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 331.467649][ T822] usb 7-1: config 4 has no interface number 0 [ 331.467690][ T822] usb 7-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 331.467714][ T822] usb 7-1: config 4 interface 44 altsetting 0 endpoint 0x8D has invalid maxpacket 256, setting to 64 [ 331.467741][ T822] usb 7-1: config 4 interface 44 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.507014][ T37] m920x_read = error: -19 [ 331.507040][ T37] dvb-usb: error while querying for an remote control event. [ 331.528359][ T822] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 331.528391][ T822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.528412][ T822] usb 7-1: Product: syz [ 331.528427][ T822] usb 7-1: Manufacturer: syz [ 331.528441][ T822] usb 7-1: SerialNumber: syz [ 331.696915][ T37] m920x_read = error: -19 [ 331.696952][ T37] dvb-usb: error while querying for an remote control event. [ 331.854300][ T37] m920x_read = error: -19 [ 331.854328][ T37] dvb-usb: error while querying for an remote control event. [ 331.891683][ T9565] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 331.916878][ T32] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 331.957118][ T5796] m920x_read = error: -19 [ 331.957144][ T5796] dvb-usb: error while querying for an remote control event. [ 332.066980][ T5796] m920x_read = error: -19 [ 332.067053][ T5796] dvb-usb: error while querying for an remote control event. [ 332.146957][ T37] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 332.177412][ T5796] m920x_read = error: -19 [ 332.177439][ T5796] dvb-usb: error while querying for an remote control event. [ 332.286959][ T5796] m920x_read = error: -19 [ 332.287042][ T5796] dvb-usb: error while querying for an remote control event. [ 332.312168][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.312310][ T37] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 332.315541][ T37] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 332.315559][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.315569][ T37] usb 2-1: Product: syz [ 332.315577][ T37] usb 2-1: Manufacturer: syz [ 332.315584][ T37] usb 2-1: SerialNumber: syz [ 332.397116][ T5796] m920x_read = error: -19 [ 332.397143][ T5796] dvb-usb: error while querying for an remote control event. [ 332.507101][ T37] m920x_read = error: -19 [ 332.507129][ T37] dvb-usb: error while querying for an remote control event. [ 332.617144][ T37] m920x_read = error: -19 [ 332.617173][ T37] dvb-usb: error while querying for an remote control event. [ 332.756609][ T37] m920x_read = error: -19 [ 332.756761][ T37] dvb-usb: error while querying for an remote control event. [ 332.803899][ T822] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 332.868760][ T37] m920x_read = error: -19 [ 332.868785][ T37] dvb-usb: error while querying for an remote control event. [ 332.977048][ T32] m920x_read = error: -19 [ 332.977075][ T32] dvb-usb: error while querying for an remote control event. [ 333.060458][ T822] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 333.060594][ T822] dib0700: firmware download failed at 7 with -8 [ 333.087365][ T32] m920x_read = error: -19 [ 333.087390][ T32] dvb-usb: error while querying for an remote control event. [ 333.114070][ T822] usb 7-1: USB disconnect, device number 6 [ 333.198534][ T32] m920x_read = error: -19 [ 333.198562][ T32] dvb-usb: error while querying for an remote control event. [ 333.310263][ T37] m920x_read = error: -19 [ 333.310291][ T37] dvb-usb: error while querying for an remote control event. [ 333.417549][ T822] m920x_read = error: -19 [ 333.417637][ T822] dvb-usb: error while querying for an remote control event. [ 333.432764][ T9606] netlink: zone id is out of range [ 333.432780][ T9606] netlink: zone id is out of range [ 333.432820][ T9606] netlink: zone id is out of range [ 333.433107][ T9606] netlink: zone id is out of range [ 333.433116][ T9606] netlink: zone id is out of range [ 333.433124][ T9606] netlink: zone id is out of range [ 333.433132][ T9606] netlink: zone id is out of range [ 333.433459][ T9606] netlink: zone id is out of range [ 333.433499][ T9606] netlink: zone id is out of range [ 333.453545][ T9606] netlink: zone id is out of range [ 333.517150][ T5791] usb usb44-port1: attempt power cycle [ 333.530064][ T822] m920x_read = error: -19 [ 333.530084][ T822] dvb-usb: error while querying for an remote control event. [ 333.637490][ T822] m920x_read = error: -19 [ 333.637514][ T822] dvb-usb: error while querying for an remote control event. [ 333.746947][ T822] m920x_read = error: -19 [ 333.746975][ T822] dvb-usb: error while querying for an remote control event. [ 333.857166][ T822] m920x_read = error: -19 [ 333.857193][ T822] dvb-usb: error while querying for an remote control event. [ 333.974996][ T822] m920x_read = error: -19 [ 333.975025][ T822] dvb-usb: error while querying for an remote control event. [ 334.078092][ T822] m920x_read = error: -19 [ 334.078118][ T822] dvb-usb: error while querying for an remote control event. [ 334.101142][ T5791] usb usb44-port1: unable to enumerate USB device [ 334.160063][ T5601] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 334.189090][ T5791] m920x_read = error: -19 [ 334.189117][ T5791] dvb-usb: error while querying for an remote control event. [ 334.297004][ T822] m920x_read = error: -19 [ 334.297033][ T822] dvb-usb: error while querying for an remote control event. [ 334.320630][ T5601] usb 7-1: device descriptor read/64, error -71 [ 334.406948][ T822] m920x_read = error: -19 [ 334.406971][ T822] dvb-usb: error while querying for an remote control event. [ 334.517126][ T822] m920x_read = error: -19 [ 334.517160][ T822] dvb-usb: error while querying for an remote control event. [ 334.599347][ T5601] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 334.627675][ T822] m920x_read = error: -19 [ 334.627700][ T822] dvb-usb: error while querying for an remote control event. [ 334.736852][ T5601] usb 7-1: device descriptor read/64, error -71 [ 334.746403][ T822] m920x_read = error: -19 [ 334.746429][ T822] dvb-usb: error while querying for an remote control event. [ 334.848576][ T822] m920x_read = error: -19 [ 334.848604][ T822] dvb-usb: error while querying for an remote control event. [ 334.850516][ T5601] usb usb7-port1: attempt power cycle [ 334.910422][ T9624] sg_write: data in/out 426460/128 bytes for SCSI command 0x0-- guessing data in; [ 334.910422][ T9624] program syz.5.1029 not setting count and/or reply_len properly [ 334.921196][ T9624] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1029'. [ 334.921993][ T9624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1029'. [ 334.972551][ T5791] m920x_read = error: -19 [ 334.972576][ T5791] dvb-usb: error while querying for an remote control event. [ 334.990340][ T822] usb 2-1: USB disconnect, device number 77 [ 335.077004][ T5791] m920x_read = error: -19 [ 335.077027][ T5791] dvb-usb: error while querying for an remote control event. [ 335.187073][ T822] m920x_read = error: -19 [ 335.187102][ T822] dvb-usb: error while querying for an remote control event. [ 335.275534][ T5601] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 335.288787][ T5601] usb 7-1: device descriptor read/8, error -71 [ 335.297028][ T822] m920x_read = error: -19 [ 335.297054][ T822] dvb-usb: error while querying for an remote control event. [ 335.407024][ T5791] m920x_read = error: -19 [ 335.407077][ T5791] dvb-usb: error while querying for an remote control event. [ 335.517164][ T5791] m920x_read = error: -19 [ 335.517192][ T5791] dvb-usb: error while querying for an remote control event. [ 335.546872][ T5601] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 335.572194][ T5601] usb 7-1: device descriptor read/8, error -71 [ 335.575033][ T5612] Bluetooth: hci0: unexpected event for opcode 0x042c [ 335.628410][ T5791] m920x_read = error: -19 [ 335.628430][ T5791] dvb-usb: error while querying for an remote control event. [ 335.687284][ T5601] usb usb7-port1: unable to enumerate USB device [ 335.737462][ T5791] m920x_read = error: -19 [ 335.737491][ T5791] dvb-usb: error while querying for an remote control event. [ 335.846994][ T5791] m920x_read = error: -19 [ 335.847011][ T5791] dvb-usb: error while querying for an remote control event. [ 335.957005][ T5791] m920x_read = error: -19 [ 335.957025][ T5791] dvb-usb: error while querying for an remote control event. [ 335.959474][ T5799] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 336.066980][ T5791] m920x_read = error: -19 [ 336.067008][ T5791] dvb-usb: error while querying for an remote control event. [ 336.126818][ T5799] usb 6-1: Using ep0 maxpacket: 16 [ 336.133110][ T5799] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 16 [ 336.133135][ T5799] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 16 [ 336.133149][ T5799] usb 6-1: config 1 interface 0 has no altsetting 0 [ 336.135232][ T5799] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.135260][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.135279][ T5799] usb 6-1: Product: syz [ 336.135289][ T5799] usb 6-1: Manufacturer: syz [ 336.135296][ T5799] usb 6-1: SerialNumber: syz [ 336.177053][ T5791] m920x_read = error: -19 [ 336.177094][ T5791] dvb-usb: error while querying for an remote control event. [ 336.228528][ T9641] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 336.228631][ T9641] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 336.287735][ T5791] m920x_read = error: -19 [ 336.287763][ T5791] dvb-usb: error while querying for an remote control event. [ 336.399165][ T5791] m920x_read = error: -19 [ 336.399187][ T5791] dvb-usb: error while querying for an remote control event. [ 336.510540][ T37] m920x_read = error: -19 [ 336.510566][ T37] dvb-usb: error while querying for an remote control event. [ 336.535334][ T5799] usb 6-1: No union descriptors [ 336.583270][ T5799] usb 6-1: USB disconnect, device number 5 [ 336.617016][ T37] m920x_read = error: -19 [ 336.617041][ T37] dvb-usb: error while querying for an remote control event. [ 336.674773][ T37] IPVS: starting estimator thread 0... [ 336.726944][ T37] m920x_read = error: -19 [ 336.726972][ T37] dvb-usb: error while querying for an remote control event. [ 336.747113][ T5601] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 336.776833][ T9651] IPVS: using max 11 ests per chain, 26400 per kthread [ 336.777319][ T9650] 9p: Could not find request transport: t [ 336.839172][ T37] m920x_read = error: -19 [ 336.839199][ T37] dvb-usb: error while querying for an remote control event. [ 336.909657][ T5601] usb 2-1: Using ep0 maxpacket: 8 [ 336.919217][ T5601] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.919244][ T5601] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 336.927762][ T5601] usb 2-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 336.927792][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.927811][ T5601] usb 2-1: Product: syz [ 336.927824][ T5601] usb 2-1: Manufacturer: syz [ 336.927836][ T5601] usb 2-1: SerialNumber: syz [ 336.952299][ T5791] m920x_read = error: -19 [ 336.952389][ T5791] dvb-usb: error while querying for an remote control event. [ 336.964978][ T9655] FAULT_INJECTION: forcing a failure. [ 336.964978][ T9655] name failslab, interval 1, probability 0, space 0, times 0 [ 336.965015][ T9655] CPU: 1 UID: 0 PID: 9655 Comm: syz.6.1041 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 336.965043][ T9655] Tainted: [L]=SOFTLOCKUP [ 336.965050][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.965061][ T9655] Call Trace: [ 336.965069][ T9655] [ 336.965078][ T9655] dump_stack_lvl+0xe8/0x150 [ 336.965106][ T9655] should_fail_ex+0x467/0x600 [ 336.965138][ T9655] should_failslab+0xa8/0x100 [ 336.965158][ T9655] kmem_cache_alloc_node_noprof+0xac/0x660 [ 336.965187][ T9655] ? __alloc_skb+0x1d7/0x7a0 [ 336.965211][ T9655] ? __alloc_skb+0x1d7/0x7a0 [ 336.965242][ T9655] __alloc_skb+0x1d7/0x7a0 [ 336.965271][ T9655] nl80211_tx_mgmt+0xad5/0xf40 [ 336.965308][ T9655] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 336.965338][ T9655] ? __pfx_netdev_run_todo+0x10/0x10 [ 336.965372][ T9655] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 336.965405][ T9655] ? nl80211_pre_doit+0x55a/0x8b0 [ 336.965434][ T9655] genl_family_rcv_msg_doit+0x233/0x340 [ 336.965466][ T9655] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 336.965503][ T9655] ? bpf_lsm_capable+0x9/0x20 [ 336.965523][ T9655] ? security_capable+0x74/0x280 [ 336.965554][ T9655] genl_rcv_msg+0x614/0x7a0 [ 336.965583][ T9655] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.965603][ T9655] ? ref_tracker_free+0x668/0x820 [ 336.965626][ T9655] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 336.965647][ T9655] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 336.965675][ T9655] ? __pfx_nl80211_post_doit+0x10/0x10 [ 336.965697][ T9655] ? ____sys_sendmsg+0x565/0x870 [ 336.965723][ T9655] ? ___sys_sendmsg+0x2a5/0x360 [ 336.965749][ T9655] ? __x64_sys_sendmsg+0x1b7/0x290 [ 336.965776][ T9655] ? do_syscall_64+0x17b/0x530 [ 336.965794][ T9655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.965823][ T9655] netlink_rcv_skb+0x226/0x4a0 [ 336.965852][ T9655] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.965877][ T9655] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.965925][ T9655] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.965954][ T9655] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.965986][ T9655] genl_rcv+0x28/0x40 [ 336.966007][ T9655] netlink_unicast+0x7f5/0x990 [ 336.966044][ T9655] netlink_sendmsg+0x813/0xb40 [ 336.966083][ T9655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.966115][ T9655] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 336.966147][ T9655] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 336.966174][ T9655] ? arch_stack_walk+0xfb/0x150 [ 336.966205][ T9655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.966232][ T9655] sock_sendmsg_nosec+0x13a/0x180 [ 336.966257][ T9655] ____sys_sendmsg+0x565/0x870 [ 336.966293][ T9655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.966331][ T9655] ? import_iovec+0x73/0xa0 [ 336.966363][ T9655] ___sys_sendmsg+0x2a5/0x360 [ 336.966390][ T9655] ? __lock_acquire+0x6df/0x2e40 [ 336.966413][ T9655] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.966476][ T9655] ? __fget_files+0x2a/0x420 [ 336.966495][ T9655] ? __fget_files+0x3a8/0x420 [ 336.966525][ T9655] __x64_sys_sendmsg+0x1b7/0x290 [ 336.966557][ T9655] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.966604][ T9655] do_syscall_64+0x17b/0x530 [ 336.966624][ T9655] ? irqentry_exit+0x10f/0x8f0 [ 336.966641][ T9655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.966658][ T9655] ? clear_bhb_loop+0x40/0x90 [ 336.966682][ T9655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.966701][ T9655] RIP: 0033:0x7f6f9dcfe0d9 [ 336.966720][ T9655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.966737][ T9655] RSP: 002b:00007f6f9bf56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.966757][ T9655] RAX: ffffffffffffffda RBX: 00007f6f9df85fa0 RCX: 00007f6f9dcfe0d9 [ 336.966771][ T9655] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 336.966784][ T9655] RBP: 00007f6f9bf56090 R08: 0000000000000000 R09: 0000000000000000 [ 336.966797][ T9655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.966809][ T9655] R13: 00007f6f9df86038 R14: 00007f6f9df85fa0 R15: 00007ffdb357d728 [ 336.966842][ T9655] [ 337.057704][ T37] m920x_read = error: -19 [ 337.057731][ T37] dvb-usb: error while querying for an remote control event. [ 337.172911][ T37] m920x_read = error: -19 [ 337.172937][ T37] dvb-usb: error while querying for an remote control event. [ 337.281824][ T37] m920x_read = error: -19 [ 337.281851][ T37] dvb-usb: error while querying for an remote control event. [ 337.407520][ T822] m920x_read = error: -19 [ 337.407548][ T822] dvb-usb: error while querying for an remote control event. [ 337.551958][ T37] m920x_read = error: -19 [ 337.551987][ T37] dvb-usb: error while querying for an remote control event. [ 337.657525][ T5791] m920x_read = error: -19 [ 337.657551][ T5791] dvb-usb: error while querying for an remote control event. [ 337.771377][ T5791] m920x_read = error: -19 [ 337.771405][ T5791] dvb-usb: error while querying for an remote control event. [ 337.850926][ T5601] usb 2-1: unit 3 not found! [ 337.851527][ T5601] usb 2-1: 6:0: failed to get current value for ch 0 (-71) [ 337.876871][ T5791] m920x_read = error: -19 [ 337.876896][ T5791] dvb-usb: error while querying for an remote control event. [ 337.924505][ T9668] FAULT_INJECTION: forcing a failure. [ 337.924505][ T9668] name failslab, interval 1, probability 0, space 0, times 0 [ 337.924542][ T9668] CPU: 1 UID: 0 PID: 9668 Comm: syz.6.1045 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 337.924570][ T9668] Tainted: [L]=SOFTLOCKUP [ 337.924578][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.924590][ T9668] Call Trace: [ 337.924598][ T9668] [ 337.924607][ T9668] dump_stack_lvl+0xe8/0x150 [ 337.924638][ T9668] should_fail_ex+0x467/0x600 [ 337.924670][ T9668] should_failslab+0xa8/0x100 [ 337.924691][ T9668] __kvmalloc_node_noprof+0x176/0x880 [ 337.924726][ T9668] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 337.924753][ T9668] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 337.924782][ T9668] ? __pfx_kvm_hv_setup_tsc_page+0x10/0x10 [ 337.924808][ T9668] __kvm_mmu_topup_memory_cache+0x461/0x600 [ 337.924837][ T9668] ? kvm_msr_allowed+0x9a/0x490 [ 337.924875][ T9668] mmu_topup_memory_caches+0x21/0x170 [ 337.924917][ T9668] kvm_mmu_load+0x9d/0x22b0 [ 337.924936][ T9668] ? kvm_msr_allowed+0x3f4/0x490 [ 337.924967][ T9668] ? kvm_msr_allowed+0x9a/0x490 [ 337.924994][ T9668] ? kvm_msr_allowed+0x9a/0x490 [ 337.925029][ T9668] ? kvm_apic_has_interrupt+0x740/0x770 [ 337.925065][ T9668] vcpu_run+0x4d91/0x7780 [ 337.925164][ T9668] ? __pfx_vcpu_run+0x10/0x10 [ 337.925191][ T9668] ? lock_acquire+0x115/0x350 [ 337.925236][ T9668] kvm_arch_vcpu_ioctl_run+0xe23/0x1920 [ 337.925269][ T9668] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1920 [ 337.925307][ T9668] kvm_vcpu_ioctl+0xa64/0xfe0 [ 337.925343][ T9668] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 337.925373][ T9668] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 337.925394][ T9668] ? lockdep_hardirqs_on+0x7a/0x110 [ 337.925431][ T9668] ? __fget_files+0x2a/0x420 [ 337.925454][ T9668] ? __fget_files+0x3a8/0x420 [ 337.925474][ T9668] ? __fget_files+0x2a/0x420 [ 337.925497][ T9668] ? bpf_lsm_file_ioctl+0x9/0x20 [ 337.925527][ T9668] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 337.925556][ T9668] __se_sys_ioctl+0xff/0x170 [ 337.925585][ T9668] do_syscall_64+0x17b/0x530 [ 337.925604][ T9668] ? irqentry_exit+0x10f/0x8f0 [ 337.925623][ T9668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.925642][ T9668] ? clear_bhb_loop+0x40/0x90 [ 337.925667][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.925686][ T9668] RIP: 0033:0x7f6f9dcfe0d9 [ 337.925705][ T9668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.925722][ T9668] RSP: 002b:00007f6f9bf56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.925744][ T9668] RAX: ffffffffffffffda RBX: 00007f6f9df85fa0 RCX: 00007f6f9dcfe0d9 [ 337.925758][ T9668] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 337.925770][ T9668] RBP: 00007f6f9bf56090 R08: 0000000000000000 R09: 0000000000000000 [ 337.925783][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.925796][ T9668] R13: 00007f6f9df86038 R14: 00007f6f9df85fa0 R15: 00007ffdb357d728 [ 337.925828][ T9668] [ 337.994430][ T37] m920x_read = error: -19 [ 337.994454][ T37] dvb-usb: error while querying for an remote control event. [ 338.100681][ T37] m920x_read = error: -19 [ 338.100709][ T37] dvb-usb: error while querying for an remote control event. [ 338.206959][ T37] m920x_read = error: -19 [ 338.206985][ T37] dvb-usb: error while querying for an remote control event. [ 338.208285][ T5791] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 338.296181][ T5601] usb 2-1: selecting invalid altsetting 1 [ 338.296206][ T5601] snd-usb-caiaq 2-1:1.1: can't set alt interface. [ 338.296236][ T5601] usb 2-1: unable to init card! (ret=-5) [ 338.314897][ T5601] snd-usb-caiaq 2-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 338.316851][ T37] m920x_read = error: -19 [ 338.316874][ T37] dvb-usb: error while querying for an remote control event. [ 338.339162][ T5601] usb 2-1: USB disconnect, device number 78 [ 338.369761][ T5791] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 338.369790][ T5791] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.369809][ T5791] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 338.369869][ T5791] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.369905][ T5791] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.381836][ T5791] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 338.381866][ T5791] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 338.381892][ T5791] usb 8-1: Product: syz [ 338.381907][ T5791] usb 8-1: Manufacturer: syz [ 338.428019][ T37] m920x_read = error: -19 [ 338.428045][ T37] dvb-usb: error while querying for an remote control event. [ 338.463857][ T9673] syzkaller1: left promiscuous mode [ 338.463889][ T9673] syzkaller1: left allmulticast mode [ 338.537841][ T5791] cdc_wdm 8-1:1.0: skipping garbage [ 338.537863][ T5791] cdc_wdm 8-1:1.0: skipping garbage [ 338.547938][ T37] m920x_read = error: -19 [ 338.547962][ T37] dvb-usb: error while querying for an remote control event. [ 338.604508][ T5791] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 338.604545][ T5791] cdc_wdm 8-1:1.0: Unknown control protocol [ 338.610180][ T9678] sctp: [Deprecated]: syz.6.1048 (pid 9678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.610180][ T9678] Use struct sctp_sack_info instead [ 338.656872][ T5791] m920x_read = error: -19 [ 338.656899][ T5791] dvb-usb: error while querying for an remote control event. [ 338.659136][ T8919] udevd[8919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.768736][ T5791] m920x_read = error: -19 [ 338.768764][ T5791] dvb-usb: error while querying for an remote control event. [ 338.793531][ T9666] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 338.877791][ T5791] m920x_read = error: -19 [ 338.877817][ T5791] dvb-usb: error while querying for an remote control event. [ 338.879793][ T9682] xt_socket: unknown flags 0x4 [ 338.913082][ T9684] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 338.913112][ T9684] bridge0: port 3(syz_tun) entered blocking state [ 338.913296][ T9684] bridge0: port 3(syz_tun) entered disabled state [ 338.913478][ T9684] syz_tun: entered allmulticast mode [ 338.980418][ T9684] syz_tun: entered promiscuous mode [ 338.981236][ T9684] bridge0: port 3(syz_tun) entered blocking state [ 338.981378][ T9684] bridge0: port 3(syz_tun) entered forwarding state [ 338.989521][ T37] m920x_read = error: -19 [ 338.989545][ T37] dvb-usb: error while querying for an remote control event. [ 339.096842][ T37] m920x_read = error: -19 [ 339.096861][ T37] dvb-usb: error while querying for an remote control event. [ 339.209502][ T5791] m920x_read = error: -19 [ 339.209529][ T5791] dvb-usb: error while querying for an remote control event. [ 339.211864][ T9693] xt_socket: unknown flags 0x4 [ 339.321168][ T5791] m920x_read = error: -19 [ 339.321194][ T5791] dvb-usb: error while querying for an remote control event. [ 339.427035][ T5791] m920x_read = error: -19 [ 339.427063][ T5791] dvb-usb: error while querying for an remote control event. [ 339.539148][ T5791] m920x_read = error: -19 [ 339.539174][ T5791] dvb-usb: error while querying for an remote control event. [ 339.646940][ T37] m920x_read = error: -19 [ 339.646967][ T37] dvb-usb: error while querying for an remote control event. [ 339.757350][ T37] m920x_read = error: -19 [ 339.757377][ T37] dvb-usb: error while querying for an remote control event. [ 339.868976][ T37] m920x_read = error: -19 [ 339.869003][ T37] dvb-usb: error while querying for an remote control event. [ 339.977317][ T37] m920x_read = error: -19 [ 339.977342][ T37] dvb-usb: error while querying for an remote control event. [ 340.092055][ T37] m920x_read = error: -19 [ 340.092079][ T37] dvb-usb: error while querying for an remote control event. [ 340.197558][ T37] m920x_read = error: -19 [ 340.197584][ T37] dvb-usb: error while querying for an remote control event. [ 340.307508][ T37] m920x_read = error: -19 [ 340.307534][ T37] dvb-usb: error while querying for an remote control event. [ 340.396881][ T9063] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 340.416902][ T37] m920x_read = error: -19 [ 340.416927][ T37] dvb-usb: error while querying for an remote control event. [ 340.540694][ T37] m920x_read = error: -19 [ 340.540719][ T37] dvb-usb: error while querying for an remote control event. [ 340.559457][ T9725] overlayfs: upper fs does not support file handles, falling back to index=off. [ 340.577388][ T9063] usb 2-1: too many configurations: 253, using maximum allowed: 8 [ 340.578970][ T9063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.580333][ T9063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.581568][ T9063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.583537][ T9063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.633963][ T9063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.636199][ T9063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.646913][ T37] m920x_read = error: -19 [ 340.646937][ T37] dvb-usb: error while querying for an remote control event. [ 340.671033][ T9063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.675149][ T9063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.675196][ T9063] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 340.675220][ T9063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.677318][ T5601] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 340.738803][ T9063] usb 2-1: config 0 descriptor?? [ 340.755463][ T9063] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 340.764015][ T37] m920x_read = error: -19 [ 340.764038][ T37] dvb-usb: error while querying for an remote control event. [ 340.812149][ T37] usb 8-1: USB disconnect, device number 8 [ 340.857074][ T5601] usb 7-1: device descriptor read/64, error -71 [ 340.867023][ T5791] m920x_read = error: -19 [ 340.867046][ T5791] dvb-usb: error while querying for an remote control event. [ 340.976896][ T5791] m920x_read = error: -19 [ 340.976918][ T5791] dvb-usb: error while querying for an remote control event. [ 341.009815][ T5791] usb 2-1: USB disconnect, device number 79 [ 341.096497][ T37] m920x_read = error: -19 [ 341.096524][ T37] dvb-usb: error while querying for an remote control event. [ 341.096800][ T5601] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 341.197025][ T37] m920x_read = error: -19 [ 341.197042][ T37] dvb-usb: error while querying for an remote control event. [ 341.240128][ T5601] usb 7-1: device descriptor read/64, error -71 [ 341.306841][ T37] m920x_read = error: -19 [ 341.306868][ T37] dvb-usb: error while querying for an remote control event. [ 341.357167][ T5601] usb usb7-port1: attempt power cycle [ 341.417536][ T37] m920x_read = error: -19 [ 341.417564][ T37] dvb-usb: error while querying for an remote control event. [ 341.526881][ T37] m920x_read = error: -19 [ 341.526907][ T37] dvb-usb: error while querying for an remote control event. [ 341.533361][ T9733] syzkaller1: entered promiscuous mode [ 341.533387][ T9733] syzkaller1: entered allmulticast mode [ 341.557429][ T5791] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 341.638037][ T37] m920x_read = error: -19 [ 341.638059][ T37] dvb-usb: error while querying for an remote control event. [ 341.708607][ T5601] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 341.711504][ T5791] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 341.711532][ T5791] usb 2-1: config 4 has no interface number 0 [ 341.711575][ T5791] usb 2-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 341.711601][ T5791] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x8D has invalid maxpacket 256, setting to 64 [ 341.711628][ T5791] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.714226][ T5791] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 341.714255][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.714275][ T5791] usb 2-1: Product: syz [ 341.714290][ T5791] usb 2-1: Manufacturer: syz [ 341.714304][ T5791] usb 2-1: SerialNumber: syz [ 341.759326][ T822] m920x_read = error: -19 [ 341.759352][ T822] dvb-usb: error while querying for an remote control event. [ 341.760700][ T5601] usb 7-1: device descriptor read/8, error -71 [ 341.867030][ T822] m920x_read = error: -19 [ 341.867112][ T822] dvb-usb: error while querying for an remote control event. [ 341.886825][ T37] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 341.978808][ T822] m920x_read = error: -19 [ 341.978836][ T822] dvb-usb: error while querying for an remote control event. [ 342.007122][ T5601] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 342.047953][ T5601] usb 7-1: device descriptor read/8, error -71 [ 342.100014][ T822] m920x_read = error: -19 [ 342.100041][ T822] dvb-usb: error while querying for an remote control event. [ 342.166587][ T37] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 342.166617][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.168265][ T37] usb 6-1: Product: syz [ 342.168283][ T37] usb 6-1: Manufacturer: syz [ 342.168297][ T37] usb 6-1: SerialNumber: syz [ 342.199423][ T5601] usb usb7-port1: unable to enumerate USB device [ 342.240452][ T822] m920x_read = error: -19 [ 342.240530][ T822] dvb-usb: error while querying for an remote control event. [ 342.370411][ T822] m920x_read = error: -19 [ 342.370437][ T822] dvb-usb: error while querying for an remote control event. [ 342.476844][ T822] m920x_read = error: -19 [ 342.476865][ T822] dvb-usb: error while querying for an remote control event. [ 342.583617][ T9735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.587216][ T32] m920x_read = error: -19 [ 342.587300][ T32] dvb-usb: error while querying for an remote control event. [ 342.589687][ T9735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.614049][ T9735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.615002][ T9735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.680936][ T9742] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1070'. [ 342.681168][ T37] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 342.704647][ T9742] bridge0: port 3(syz_tun) entered blocking state [ 342.705009][ T9742] bridge0: port 3(syz_tun) entered disabled state [ 342.705271][ T9742] syz_tun: entered allmulticast mode [ 342.711524][ T822] m920x_read = error: -19 [ 342.711549][ T822] dvb-usb: error while querying for an remote control event. [ 342.787893][ T9742] syz_tun: entered promiscuous mode [ 342.801493][ T9742] bridge0: port 3(syz_tun) entered blocking state [ 342.801637][ T9742] bridge0: port 3(syz_tun) entered forwarding state [ 342.816965][ T822] m920x_read = error: -19 [ 342.817040][ T822] dvb-usb: error while querying for an remote control event. [ 342.918984][ T37] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 342.927317][ T822] m920x_read = error: -19 [ 342.927340][ T822] dvb-usb: error while querying for an remote control event. [ 342.933410][ T9745] netlink: 'syz.7.1071': attribute type 12 has an invalid length. [ 342.933442][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1071'. [ 343.041365][ T37] usb 6-1: USB disconnect, device number 6 [ 343.041581][ T822] m920x_read = error: -19 [ 343.041601][ T822] dvb-usb: error while querying for an remote control event. [ 343.071584][ T9040] udevd[9040]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.146833][ T822] m920x_read = error: -19 [ 343.146850][ T822] dvb-usb: error while querying for an remote control event. [ 343.256911][ T822] m920x_read = error: -19 [ 343.256934][ T822] dvb-usb: error while querying for an remote control event. [ 343.260098][ T5791] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 343.265698][ T5791] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 343.265791][ T5791] dib0700: firmware download failed at 7 with -8 [ 343.373168][ T37] m920x_read = error: -19 [ 343.373190][ T37] dvb-usb: error while querying for an remote control event. [ 343.373737][ T5791] usb 2-1: USB disconnect, device number 80 [ 343.480745][ T37] m920x_read = error: -19 [ 343.480772][ T37] dvb-usb: error while querying for an remote control event. [ 343.587002][ T822] m920x_read = error: -19 [ 343.587027][ T822] dvb-usb: error while querying for an remote control event. [ 343.707645][ T5791] m920x_read = error: -19 [ 343.707669][ T5791] dvb-usb: error while querying for an remote control event. [ 343.816965][ T5791] m920x_read = error: -19 [ 343.817072][ T5791] dvb-usb: error while querying for an remote control event. [ 343.926917][ T5791] m920x_read = error: -19 [ 343.926946][ T5791] dvb-usb: error while querying for an remote control event. [ 344.042573][ T5791] m920x_read = error: -19 [ 344.042601][ T5791] dvb-usb: error while querying for an remote control event. [ 344.146971][ T5791] m920x_read = error: -19 [ 344.146995][ T5791] dvb-usb: error while querying for an remote control event. [ 344.257292][ T5791] m920x_read = error: -19 [ 344.257320][ T5791] dvb-usb: error while querying for an remote control event. [ 344.367517][ T5791] m920x_read = error: -19 [ 344.367543][ T5791] dvb-usb: error while querying for an remote control event. [ 344.477391][ T5791] m920x_read = error: -19 [ 344.477419][ T5791] dvb-usb: error while querying for an remote control event. [ 344.587982][ T5791] m920x_read = error: -19 [ 344.588010][ T5791] dvb-usb: error while querying for an remote control event. [ 344.685293][ T5799] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 344.696985][ T822] m920x_read = error: -19 [ 344.697009][ T822] dvb-usb: error while querying for an remote control event. [ 344.697581][ T5601] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 344.806970][ T822] m920x_read = error: -19 [ 344.806998][ T822] dvb-usb: error while querying for an remote control event. [ 344.854552][ T5799] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.854582][ T5799] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 344.859637][ T5799] usb 6-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 344.859667][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.859686][ T5799] usb 6-1: Product: syz [ 344.859700][ T5799] usb 6-1: Manufacturer: syz [ 344.859714][ T5799] usb 6-1: SerialNumber: syz [ 344.873491][ T5601] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 344.873522][ T5601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.893535][ T5601] usb 2-1: config 0 descriptor?? [ 344.916963][ T5791] m920x_read = error: -19 [ 344.916985][ T5791] dvb-usb: error while querying for an remote control event. [ 344.931414][ T5601] cp210x 2-1:0.0: cp210x converter detected [ 345.027122][ T5791] m920x_read = error: -19 [ 345.027146][ T5791] dvb-usb: error while querying for an remote control event. [ 345.137928][ T5791] m920x_read = error: -19 [ 345.137955][ T5791] dvb-usb: error while querying for an remote control event. [ 345.246934][ T5791] m920x_read = error: -19 [ 345.246959][ T5791] dvb-usb: error while querying for an remote control event. [ 345.320872][ T9789] FAULT_INJECTION: forcing a failure. [ 345.320872][ T9789] name failslab, interval 1, probability 0, space 0, times 0 [ 345.320902][ T9789] CPU: 1 UID: 0 PID: 9789 Comm: syz.7.1083 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 345.320923][ T9789] Tainted: [L]=SOFTLOCKUP [ 345.320928][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.320937][ T9789] Call Trace: [ 345.320944][ T9789] [ 345.320951][ T9789] dump_stack_lvl+0xe8/0x150 [ 345.320975][ T9789] should_fail_ex+0x467/0x600 [ 345.320999][ T9789] should_failslab+0xa8/0x100 [ 345.321014][ T9789] ? ptlock_alloc+0x20/0x70 [ 345.321036][ T9789] kmem_cache_alloc_noprof+0x9e/0x680 [ 345.321057][ T9789] ? ptlock_alloc+0x20/0x70 [ 345.321082][ T9789] ptlock_alloc+0x20/0x70 [ 345.321103][ T9789] pte_alloc_one+0x7e/0x380 [ 345.321122][ T9789] __pte_alloc+0x25/0x1a0 [ 345.321143][ T9789] do_pte_missing+0x1bda/0x28f0 [ 345.321183][ T9789] handle_mm_fault+0xf95/0x28d0 [ 345.321204][ T9789] ? mt_find+0x186/0x630 [ 345.321222][ T9789] ? handle_mm_fault+0xeb/0x28d0 [ 345.321244][ T9789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.321262][ T9789] ? __pfx_handle_mm_fault+0x10/0x10 [ 345.321296][ T9789] ? lock_mm_and_find_vma+0xa7/0x340 [ 345.321349][ T9789] do_user_addr_fault+0x744/0x1340 [ 345.321385][ T9789] exc_page_fault+0x6a/0xc0 [ 345.321402][ T9789] asm_exc_page_fault+0x26/0x30 [ 345.321416][ T9789] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 345.321441][ T9789] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 345.321456][ T9789] RSP: 0018:ffffc90007677988 EFLAGS: 00050246 [ 345.321471][ T9789] RAX: 00000000000004e0 RBX: 0000000000000008 RCX: 0000000000000008 [ 345.321482][ T9789] RDX: 0000000000000000 RSI: ffff888029616c90 RDI: 000020000020064e [ 345.321493][ T9789] RBP: ffffc90007677e98 R08: ffff888029616c97 R09: 1ffff110052c2d92 [ 345.321505][ T9789] R10: dffffc0000000000 R11: ffffed10052c2d93 R12: 0000200000200656 [ 345.321516][ T9789] R13: 00007ffffffff000 R14: ffff888029616c90 R15: 000020000020064e [ 345.321541][ T9789] _copy_to_user+0x8a/0xb0 [ 345.321560][ T9789] vmci_host_unlocked_ioctl+0x2296/0x2850 [ 345.321587][ T9789] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 345.321631][ T9789] ? kasan_quarantine_put+0xbb/0x1f0 [ 345.321660][ T9789] ? tomoyo_path_number_perm+0x219/0x5f0 [ 345.321684][ T9789] ? do_vfs_ioctl+0x1184/0x1550 [ 345.321708][ T9789] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 345.321740][ T9789] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 345.321757][ T9789] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.321785][ T9789] ? __fget_files+0x2a/0x420 [ 345.321809][ T9789] ? __fget_files+0x3a8/0x420 [ 345.321824][ T9789] ? __fget_files+0x2a/0x420 [ 345.321842][ T9789] ? bpf_lsm_file_ioctl+0x9/0x20 [ 345.321868][ T9789] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 345.321885][ T9789] __se_sys_ioctl+0xff/0x170 [ 345.321905][ T9789] do_syscall_64+0x17b/0x530 [ 345.321920][ T9789] ? irqentry_exit+0x10f/0x8f0 [ 345.321933][ T9789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.321948][ T9789] ? clear_bhb_loop+0x40/0x90 [ 345.321966][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.321980][ T9789] RIP: 0033:0x7f416f88e0d9 [ 345.321994][ T9789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.322006][ T9789] RSP: 002b:00007f416dae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.322022][ T9789] RAX: ffffffffffffffda RBX: 00007f416fb15fa0 RCX: 00007f416f88e0d9 [ 345.322033][ T9789] RDX: 0000200000000040 RSI: 00000000000007a6 RDI: 0000000000000003 [ 345.322042][ T9789] RBP: 00007f416dae6090 R08: 0000000000000000 R09: 0000000000000000 [ 345.322051][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.322061][ T9789] R13: 00007f416fb16038 R14: 00007f416fb15fa0 R15: 00007ffc8c0d7f68 [ 345.322085][ T9789] [ 345.357080][ T5791] m920x_read = error: -19 [ 345.357102][ T5791] dvb-usb: error while querying for an remote control event. [ 345.468102][ T5791] m920x_read = error: -19 [ 345.468125][ T5791] dvb-usb: error while querying for an remote control event. [ 345.473883][ T5601] usb 2-1: cp210x converter now attached to ttyUSB0 [ 345.576993][ T5791] m920x_read = error: -19 [ 345.577018][ T5791] dvb-usb: error while querying for an remote control event. [ 345.686892][ T5791] m920x_read = error: -19 [ 345.686912][ T5791] dvb-usb: error while querying for an remote control event. [ 345.798913][ T822] m920x_read = error: -19 [ 345.798939][ T822] dvb-usb: error while querying for an remote control event. [ 345.861241][ T9795] syzkaller1: entered promiscuous mode [ 345.861267][ T9795] syzkaller1: entered allmulticast mode [ 345.907002][ T5791] m920x_read = error: -19 [ 345.907026][ T5791] dvb-usb: error while querying for an remote control event. [ 345.924684][ T9063] usb 2-1: USB disconnect, device number 81 [ 345.962308][ T9063] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 346.017035][ T5791] m920x_read = error: -19 [ 346.017054][ T5791] dvb-usb: error while querying for an remote control event. [ 346.126996][ T5791] m920x_read = error: -19 [ 346.127024][ T5791] dvb-usb: error while querying for an remote control event. [ 346.207140][ T9063] cp210x 2-1:0.0: device disconnected [ 346.237159][ T5791] m920x_read = error: -19 [ 346.237187][ T5791] dvb-usb: error while querying for an remote control event. [ 346.347061][ T822] m920x_read = error: -19 [ 346.347086][ T822] dvb-usb: error while querying for an remote control event. [ 346.457150][ T822] m920x_read = error: -19 [ 346.457178][ T822] dvb-usb: error while querying for an remote control event. [ 346.566919][ T37] m920x_read = error: -19 [ 346.566947][ T37] dvb-usb: error while querying for an remote control event. [ 346.576913][ T5791] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 346.587009][ T822] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 346.677015][ T37] m920x_read = error: -19 [ 346.677043][ T37] dvb-usb: error while querying for an remote control event. [ 346.729563][ T5791] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 346.729589][ T5791] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 346.729601][ T5791] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.731916][ T5791] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 346.731944][ T5791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.731960][ T5791] usb 7-1: Product: syz [ 346.731968][ T5791] usb 7-1: Manufacturer: syz [ 346.731976][ T5791] usb 7-1: SerialNumber: syz [ 346.743463][ T5791] hub 7-1:1.0: bad descriptor, ignoring hub [ 346.743500][ T5791] hub 7-1:1.0: probe with driver hub failed with error -5 [ 346.752577][ T822] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.753057][ T822] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 346.753135][ T822] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 346.753158][ T822] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.753200][ T822] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.753224][ T822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.766213][ T822] usb 8-1: config 0 descriptor?? [ 346.804010][ T32] m920x_read = error: -19 [ 346.804093][ T32] dvb-usb: error while querying for an remote control event. [ 346.908504][ T32] m920x_read = error: -19 [ 346.908522][ T32] dvb-usb: error while querying for an remote control event. [ 346.945719][ T9804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.946473][ T9804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.022175][ T5791] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 347.022347][ T37] m920x_read = error: -19 [ 347.022360][ T37] dvb-usb: error while querying for an remote control event. [ 347.105889][ T5791] usb 7-1: USB disconnect, device number 15 [ 347.190757][ T37] m920x_read = error: -19 [ 347.190775][ T37] dvb-usb: error while querying for an remote control event. [ 347.217946][ T5791] usblp0: removed [ 347.284825][ T9806] input: syz0 as /devices/virtual/input/input13 [ 347.296960][ T37] m920x_read = error: -19 [ 347.296984][ T37] dvb-usb: error while querying for an remote control event. [ 347.429698][ T32] m920x_read = error: -19 [ 347.429716][ T32] dvb-usb: error while querying for an remote control event. [ 347.494294][ T9814] syzkaller1: left promiscuous mode [ 347.494314][ T9814] syzkaller1: left allmulticast mode [ 347.537824][ T5791] m920x_read = error: -19 [ 347.537841][ T5791] dvb-usb: error while querying for an remote control event. [ 347.617555][ T9] usb 6-1: USB disconnect, device number 7 [ 347.660687][ T32] m920x_read = error: -19 [ 347.660768][ T32] dvb-usb: error while querying for an remote control event. [ 347.766942][ T37] m920x_read = error: -19 [ 347.766959][ T37] dvb-usb: error while querying for an remote control event. [ 347.877121][ T32] m920x_read = error: -19 [ 347.877149][ T32] dvb-usb: error while querying for an remote control event. [ 347.908095][ T9825] syzkaller1: entered promiscuous mode [ 347.908120][ T9825] syzkaller1: entered allmulticast mode [ 347.987319][ T5796] m920x_read = error: -19 [ 347.987335][ T5796] dvb-usb: error while querying for an remote control event. [ 348.118452][ T5791] m920x_read = error: -19 [ 348.118533][ T5791] dvb-usb: error while querying for an remote control event. [ 348.199022][ T822] usbhid 8-1:0.0: can't add hid device: -71 [ 348.199151][ T822] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 348.243747][ T5796] m920x_read = error: -19 [ 348.243773][ T5796] dvb-usb: error while querying for an remote control event. [ 348.245853][ T822] usb 8-1: USB disconnect, device number 9 [ 348.346893][ T5796] m920x_read = error: -19 [ 348.346910][ T5796] dvb-usb: error while querying for an remote control event. [ 348.462405][ T5796] m920x_read = error: -19 [ 348.462432][ T5796] dvb-usb: error while querying for an remote control event. [ 348.503410][ T9834] loop5: detected capacity change from 0 to 7 [ 348.504789][ T9834] Dev loop5: unable to read RDB block 7 [ 348.504832][ T9834] loop5: unable to read partition table [ 348.505036][ T9834] loop5: partition table beyond EOD, truncated [ 348.505068][ T9834] loop_reread_partitions: partition scan of loop5 (被x) failed (rc=-5) [ 348.566848][ T822] m920x_read = error: -19 [ 348.566869][ T822] dvb-usb: error while querying for an remote control event. [ 348.632912][ T4961] Dev loop5: unable to read RDB block 7 [ 348.632957][ T4961] loop5: unable to read partition table [ 348.633162][ T4961] loop5: partition table beyond EOD, truncated [ 348.636773][ T4961] Flush: task=udevd[4961] dev=loop5 state=2 [ 348.676770][ T822] m920x_read = error: -19 [ 348.676793][ T822] dvb-usb: error while querying for an remote control event. [ 348.796792][ T822] m920x_read = error: -19 [ 348.796810][ T822] dvb-usb: error while querying for an remote control event. [ 348.854859][ T4961] Teardown: task=udevd[4961] dev=loop5 state=2 [ 348.910798][ T822] m920x_read = error: -19 [ 348.910825][ T822] dvb-usb: error while querying for an remote control event. [ 348.955690][ T9840] page: refcount:3 mapcount:1 mapping:ffff8880276d7420 index:0x373 pfn:0x5be8e [ 348.955719][ T9840] memcg:ffff88803bb14480 [ 348.955731][ T9840] aops:def_blk_aops ino:fa00000 [ 348.955761][ T9840] flags: 0xac000000000a2d(locked|referenced|uptodate|lru|workingset|owner_2|node=0|zone=1) [ 348.955789][ T9840] raw: 00ac000000000a2d ffffea00016fa348 ffffea00016fa3c8 ffff8880276d7420 [ 348.955807][ T9840] raw: 0000000000000373 0000000000000000 0000000300000000 ffff88803bb14480 [ 348.955817][ T9840] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 348.955842][ T9840] page_owner tracks the page as allocated [ 348.955851][ T9840] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9829, tgid 9828 (syz.1.1097), ts 348171710553 [ 348.955883][ T9840] post_alloc_hook+0x1f9/0x250 [ 348.955919][ T9840] get_page_from_freelist+0x264c/0x26c0 [ 348.955947][ T9840] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 348.955974][ T9840] alloc_pages_mpol+0xd4/0x280 [ 348.955991][ T9840] alloc_pages_noprof+0xd2/0x2f0 [ 348.956007][ T9840] folio_alloc_noprof+0x22/0xc0 [ 348.956024][ T9840] filemap_alloc_folio_noprof+0x111/0x4d0 [ 348.956048][ T9840] page_cache_ra_unbounded+0x2d6/0x8f0 [ 348.956075][ T9840] page_cache_ra_order+0x2c1/0x4a0 [ 348.956101][ T9840] filemap_fault+0x741/0x13c0 [ 348.956127][ T9840] __do_fault+0x138/0x2a0 [ 348.956154][ T9840] do_pte_missing+0x1828/0x28f0 [ 348.956181][ T9840] handle_mm_fault+0xf95/0x28d0 [ 348.956205][ T9840] __get_user_pages+0x1676/0x2650 [ 348.956227][ T9840] populate_vma_page_range+0x2be/0x3c0 [ 348.956249][ T9840] __mm_populate+0x25f/0x390 [ 348.956271][ T9840] page last free pid 9021 tgid 9019 ts 304215325549 stack trace: [ 348.956286][ T9840] __free_frozen_pages+0x1185/0x1270 [ 348.956312][ T9840] __slab_free+0x252/0x2a0 [ 348.956337][ T9840] qlist_free_all+0x99/0x100 [ 348.956361][ T9840] kasan_quarantine_reduce+0x148/0x160 [ 348.956386][ T9840] __kasan_slab_alloc+0x22/0x80 [ 348.956413][ T9840] __kmalloc_node_track_caller_noprof+0x4fd/0x7b0 [ 348.956443][ T9840] memdup_user+0x2b/0xd0 [ 348.956462][ T9840] raw_ioctl+0xdad/0x40d0 [ 348.956485][ T9840] __se_sys_ioctl+0xff/0x170 [ 348.992192][ T9838] kAFS: unable to lookup cell '/G' [ 349.018104][ T822] m920x_read = error: -19 [ 349.018130][ T822] dvb-usb: error while querying for an remote control event. [ 349.126842][ T822] m920x_read = error: -19 [ 349.126867][ T822] dvb-usb: error while querying for an remote control event. [ 349.199334][ T9840] do_syscall_64+0x17b/0x530 [ 349.199364][ T9840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.199540][ T9840] ------------[ cut here ]------------ [ 349.199549][ T9840] kernel BUG at mm/filemap.c:155! [ 349.199589][ T9840] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 349.199618][ T9840] CPU: 0 UID: 0 PID: 9840 Comm: syz.1.1097 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 349.199645][ T9840] Tainted: [L]=SOFTLOCKUP [ 349.199652][ T9840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.199666][ T9840] RIP: 0010:filemap_unaccount_folio+0x506/0x550 [ 349.199694][ T9840] Code: 62 c1 ff 48 89 df 48 c7 c6 c0 30 78 8b e8 02 85 23 ff 90 0f 0b e8 1a 62 c1 ff 48 89 df 48 c7 c6 80 2e 78 8b e8 eb 84 23 ff 90 <0f> 0b e8 03 62 c1 ff 48 89 df 48 c7 c6 c0 30 78 8b e8 d4 84 23 ff [ 349.199712][ T9840] RSP: 0018:ffffc90007687560 EFLAGS: 00010246 [ 349.199732][ T9840] RAX: ec050876c15c9100 RBX: ffffea00016fa380 RCX: 0000000000000046 [ 349.199747][ T9840] RDX: ffffc90013fb5000 RSI: ffffffff8dbfaa0e RDI: ffff8880295c1f40 [ 349.199760][ T9840] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 349.199772][ T9840] R10: dffffc0000000000 R11: ffffed10170c4903 R12: ffffea00016fa3b0 [ 349.199787][ T9840] R13: ffff8880276d7420 R14: 1ffffd40002df470 R15: 1ffffd40002df471 [ 349.199802][ T9840] FS: 00007f957168e6c0(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 349.199821][ T9840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.199835][ T9840] CR2: 00007f957168dff8 CR3: 000000005bdf0000 CR4: 00000000003526f0 [ 349.199852][ T9840] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 349.199864][ T9840] DR3: 00000000e08e000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 349.199878][ T9840] Call Trace: [ 349.199895][ T9840] [ 349.199902][ T9840] ? trace_mm_filemap_delete_from_page_cache+0x7c/0x1d0 [ 349.199929][ T9840] delete_from_page_cache_batch+0x16c/0xba0 [ 349.199951][ T9840] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 349.199975][ T9840] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 349.200001][ T9840] ? __folio_cancel_dirty+0xf2/0x3f0 [ 349.200025][ T9840] ? __folio_cancel_dirty+0x303/0x3f0 [ 349.200044][ T9840] ? __folio_cancel_dirty+0xf2/0x3f0 [ 349.200066][ T9840] truncate_inode_pages_range+0x31b/0xd80 [ 349.200094][ T9840] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 349.200117][ T9840] ? is_bpf_text_address+0x26/0x2b0 [ 349.200160][ T9840] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 349.200178][ T9840] ? lockdep_hardirqs_on+0x7a/0x110 [ 349.200195][ T9840] ? rwbase_write_lock+0x550/0x720 [ 349.200217][ T9840] truncate_bdev_range+0xc9/0x100 [ 349.200244][ T9840] blkdev_common_ioctl+0x22eb/0x3250 [ 349.200268][ T9840] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 349.200289][ T9840] ? kasan_quarantine_put+0xbb/0x1f0 [ 349.200317][ T9840] ? tomoyo_path_number_perm+0x219/0x5f0 [ 349.200341][ T9840] ? do_vfs_ioctl+0x1184/0x1550 [ 349.200367][ T9840] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 349.200397][ T9840] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 349.200422][ T9840] blkdev_ioctl+0x52b/0x750 [ 349.200441][ T9840] ? __pfx_blkdev_ioctl+0x10/0x10 [ 349.200457][ T9840] ? __fget_files+0x3a8/0x420 [ 349.200475][ T9840] ? __fget_files+0x2a/0x420 [ 349.200491][ T9840] ? bpf_lsm_file_ioctl+0x9/0x20 [ 349.200517][ T9840] ? __pfx_blkdev_ioctl+0x10/0x10 [ 349.200535][ T9840] __se_sys_ioctl+0xff/0x170 [ 349.200556][ T9840] do_syscall_64+0x17b/0x530 [ 349.200572][ T9840] ? irqentry_exit+0x10f/0x8f0 [ 349.200589][ T9840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.200606][ T9840] ? clear_bhb_loop+0x40/0x90 [ 349.200625][ T9840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.200645][ T9840] RIP: 0033:0x7f9573cbe0d9 [ 349.200662][ T9840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.200678][ T9840] RSP: 002b:00007f957168e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.200697][ T9840] RAX: ffffffffffffffda RBX: 00007f9573f46360 RCX: 00007f9573cbe0d9 [ 349.200714][ T9840] RDX: 0000200000000000 RSI: 000000000000127f RDI: 0000000000000003 [ 349.200726][ T9840] RBP: 00007f9573d55024 R08: 0000000000000000 R09: 0000000000000000 [ 349.200739][ T9840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.200752][ T9840] R13: 00007f9573f463f8 R14: 00007f9573f46360 R15: 00007ffc802483c8 [ 349.200773][ T9840] [ 349.200780][ T9840] Modules linked in: [ 349.200825][ T9840] ---[ end trace 0000000000000000 ]--- [ 349.200940][ T9840] RIP: 0010:filemap_unaccount_folio+0x506/0x550 [ 349.200967][ T9840] Code: 62 c1 ff 48 89 df 48 c7 c6 c0 30 78 8b e8 02 85 23 ff 90 0f 0b e8 1a 62 c1 ff 48 89 df 48 c7 c6 80 2e 78 8b e8 eb 84 23 ff 90 <0f> 0b e8 03 62 c1 ff 48 89 df 48 c7 c6 c0 30 78 8b e8 d4 84 23 ff [ 349.200983][ T9840] RSP: 0018:ffffc90007687560 EFLAGS: 00010246 [ 349.201000][ T9840] RAX: ec050876c15c9100 RBX: ffffea00016fa380 RCX: 0000000000000046 [ 349.201014][ T9840] RDX: ffffc90013fb5000 RSI: ffffffff8dbfaa0e RDI: ffff8880295c1f40 [ 349.201030][ T9840] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 349.201042][ T9840] R10: dffffc0000000000 R11: ffffed10170c4903 R12: ffffea00016fa3b0 [ 349.201058][ T9840] R13: ffff8880276d7420 R14: 1ffffd40002df470 R15: 1ffffd40002df471 [ 349.201074][ T9840] FS: 00007f957168e6c0(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 349.201090][ T9840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.201103][ T9840] CR2: 00007f957168dff8 CR3: 000000005bdf0000 CR4: 00000000003526f0 [ 349.201121][ T9840] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 349.201133][ T9840] DR3: 00000000e08e000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 349.201150][ T9840] Kernel panic - not syncing: Fatal exception [ 349.201423][ T9840] Kernel Offset: disabled