last executing test programs: 8.861261795s ago: executing program 4 (id=16913): r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000e40)={'gre0\x00', &(0x7f0000000dc0)={'sit0\x00', 0x0, 0x700, 0x7, 0xffff, 0xffffffff, {{0x5, 0x4, 0x2, 0x2e, 0x14, 0x67, 0x0, 0x6d, 0x4, 0x0, @empty, @multicast1}}}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[], 0xfe33) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/155, 0x9b}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x6}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='c'], 0x0, 0x0, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r6, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r6, 0x0, 0x0, 0xadc) setns(r6, 0x80) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000028c0)={{r1, &(0x7f0000002900)='5\x1cO\x9ec*&1>\x16\xbf\xe5E\xd0\xc0:P\x91\xc3>Cz\xf6\xa4\x19\x9d\x86\x82\xb9b\x1d\x89\x88}/\xf0\x8f\x1bj\xe5\x97\x04\xbb\x05\x7f\xc8\xf0', 0x44082, &(0x7f0000000400)={@_ha_fsid={[0x7, 0xffffffff]}, {0x0, 0x7, 0x40005, 0x7fffffffffffffff}}, 0x8002, 0x0, &(0x7f0000002800)=0x3}, {[0x10000, 0x3, 0x3, 0x9]}, 0x8001, 0x7c, &(0x7f0000002840)=""/124}) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000000)={0x75, {{0x2, 0x4e23, @empty}}}, 0x84) unshare(0x24060400) ioctl$VHOST_VDPA_SET_GROUP_ASID(r5, 0x4008af7c, &(0x7f0000000140)={0x2, 0x63c}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r8, &(0x7f0000000480)=[{&(0x7f0000000300)="ba", 0x1}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0], 0x1}) 8.643085551s ago: executing program 0 (id=16914): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x15, r0, 0x800006, 0x200000) 8.428149676s ago: executing program 0 (id=16916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 6.891002299s ago: executing program 3 (id=16921): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000f9b000/0x4000)=nil) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000005000000000000002020000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900001100000045090100002000009500000000000000bf9800000000000056090000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07daf57ebcfa3fd03477"], 0x1c}}, 0x0) recvmmsg$unix(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x34000, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x82802, 0x1ec541d9ca5bf0af) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000040)=')', 0x1}], 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) inotify_init() ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000000d80)=""/160) socket$netlink(0x10, 0x3, 0x5) syz_usb_connect(0x0, 0xa55, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000280)={0x28, 0x2, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000002c0)}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) 6.649802749s ago: executing program 2 (id=16922): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x3) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154b", 0xb9}, {&(0x7f0000000380)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604", 0xf4}, {&(0x7f0000000140)="641a6a2b863c0800", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af84202254eadfd12b56f2ebc32396500466e9f16d358dd5354ef69bb8caedf66a220372311a092a4f03a336f27222302c6364b738a58c3b8e99d1a40552dfad46ba272544c0b39ebbca7d1da95fc74f6010956a8bb3165ee8", 0xc6}], 0x1}}], 0x2, 0x4000900) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="ebae0000201a0100140003006e657464657673696d3000000000000018001680140001801000060000"], 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.314403075s ago: executing program 0 (id=16923): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statfs(&(0x7f0000000680)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x4, 0x6}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x3, r1, 0x10000000, 0x7ffffffd, 0xb, 0x1fd, 0x1}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000440)={0x9, @sdr={0x59455247, 0x8}}) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0xff, 0x0, 0x10, 0xffff}}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000540)={[{0x2d, 'freezer'}, {0x2b, 'cpuacct'}, {0x2b, 'net'}, {0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2b, 'net_cls'}, {0x2b, 'cpuacct'}]}, 0x38) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) 6.292446929s ago: executing program 4 (id=16925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000140)=0xfffffffe) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x100f3, 0xfffffffe, 0x5, 0x722, 0x4, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) getgroups(0x6, &(0x7f0000007380)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="13eefb9dc89a06500fc196a6d1c82e0d57947c28f59271582578b12c4c336bbc5f42e5a0cb1e332d22e9b884a849b3e23faf6ce08661a678f47f5d42b6dc2d29c2575aa403cf3e559a1f14724f547814a1bf3719ebd43897ee2a8a0cddcd6ae9bba01ac19bab54b2f151e6d83ca073c4068f968e483993d87ab66180f7e1980e513dbc57c994033589f40df7879f26e2534ed03257bc54a1bbd97388879d3bca5b43b20b7a06863e11a4fed01c9a6ced1913d6908dd84ac7a65b6264d79f48ad3d99126636997633a7b29700a77e14a8a031bb4fd0b02cc04d22a7ff01b6c2b7ed55687414815735a950c0db505b85d8cc8ab7cefcfba9ef3b164ee6d86129f33e1ae3cea7cf86a81c6297733b031c081bdd310052b2d179cfd34ee657e3f171795ade927d7c3761f3bd44e089e0a3d44ba488f6f3bc349815ce03a9b8ce6477d0fe2fca5cd553513f8c5b86143d0f346c3bd306494293731acfe1f3a2c5bfd8d5b921ce740cc3f235b62b208c045b224922cad11caba2d9e5fcd411e555a95ee78ca96fefffa8d264f1543a8e7f73bcca76316c7ff1bbed06dc0409f93f7ca9393baad961a7ed8acb6d37af9c31598acefcde6a2b7c0bda9c17c986f0fcd8b5f456a904766531284d9f647e7daa4fe2520d4f7e3633892956da774ebe2de28aea3ed48f6e6a48bc7ec6b8ba8cd23be593928cd134b50129a94198b6d537e65360e5af4f17913c5223a923856fea72fc50f71dee8e3eaff9641ba75d9cddb1aa9f7a04d07e67825ac912a0c6aa73fa989da8cca46710eea202a2988de3eaf78854647c75c2a98876a99fd72655e7e21e65b942be23928d9ce78c7444f330c0222268d99ca04f92a235b176b3bcd0d3176c51e11660e664e86ae6e27853f7c1bb642ec396f04fd9c5c39e807c5b9937e90d546c30d096779d52c1330a16bba93513251a343cbd47560d1b4e545e72531d68715495ad993edbb55679157d061a142ae8bd7a167f2ffc2b83f0062664c0de448be4f13d0a3dabdeaf205b6016b8a1200e6418123968131d64d1feeee50f35d9bb702c4bc30b0395f24e3f57c89c9728459d07d7bbf312cea811b4514224ff6637753c286158e3ae860efa25b897b096625e5387047257acfb1b4fdbb08651db5bcad581ab27d07c7111a17c6c2ae7ee061ce125bf4597f2c37de9e968c2c3130b3378716b99c38df785b0877edb20394887ea8eaa3ba9fe7fffb0471038dc0053682c4f72c961768398ce96ae424d714ae45f93974758a5aec76c58f6cb0c5fed25b65324e7ef93c648384bc01008e83d1fc80624e7b729ae48484825ef1671e72c6476cf316226ee0ff11a1e4a29d78a3fc9a2708c7491e0760519d8296337f5b9d926b85915f8ff94d55cd0c2a86beefad4f0e6dda29d33e9aedbd3d28317527be409ce276fef226dca3e6a8e49718394d2d4384dd771cda1ea70b0526a9307b0c983e3958f2a982e02b129f71956103beca25989a68312048ba4749be9bee5e09587102ec831234ada7dbe3a7090b0ea393fca67a696352b9e73b851bd7a7bd7519627e9efd98b795320cfbb23a9c25a4a0aadbebd6db07df59afa7a2b18563615283da49fc4a6dc9b8ef9bad8560424e793d1cc9374164a42419146dff63eef4c6f82394afa3e3caa574f7f1f71db63e760db9b908e6aec9d1f2dde75c12bfc425b93c0cf439ef23b780848127e4a83cdb4097266149da2cbc1ee35b77ab8a19fb00659f75a7458c9fdda938d92fa8caa29ff7d1cb3797cef6e94bacffcd81ecb6a68832f64d03e006a8409e6a93186b8a15124348b3e76cc3d9288f7bac618426b1314022deae21ef08ac57d525082c648b3dfc1121a9f556672083ca43a0179f6e0056855a36e64a25d15bcf822fdf3cef0234b2c022238bf8cf4132b01dc35fc4bcdfd98e4748367104f7a031882af0c8939b897eb40cb9545cf225a1eff82ab62916c437baaa2ad32ab108d76aabe1a9a94509ae0f5b84c144b963320daa692baa2490486b8c7ae6c7835e6131f150cb51a2c0d782726131a13932aa453d453fa9f2888141b741bfb4e18be48158aec963cbf4e424f3a4cb1e44866e776d23f7d6be9eaac6b3979033ba6015f173437f75fffa621e0b1c0c9e7f37bb7b0dfcf11ee11e3fbb1c7af7f9ca20d1ca025ef5220addeac1886255a9b7acdd595fd87d3b34a239a2f90ea87bb5f81fa8fbbb3f887a5e2a3f0fcf71aeefc730c2aa97fa2c8d8c1a7f0fb26291b732a9e0ff25fd382a29b3f51493875e12c0e730607c1f660136e9acd61a34ed66597c0d3b16e49223ecb3acfe534b97ae282b3e10692a2196451c6edf1f48d5e2532960aa2db3509147f48074f16491b69f66d0c32cf4863c673e4ba73768785db461e591a70fa60387e30242c7f002af3b0bd64b53cf6a4f3b887cc47f5cf3dbc5685ee5d8211b70dd8060ab56f9626666ef45d3ec8903600662bdedd33078a3b4d8ace09a40b11dfff34efadcac0e331e5f1ac87b77142593de2cc380040e958cedf9f11bb6aa27d7cd099d1f48ef45dcd095efcb8b021634cd0e8918f6d6c19c450a34a06fa39c8e7c565f07f1f3e361823993fc20cefe11a3b6deed68ba780f6ffb654a8fdbe7b513d965f8fe0f9174b496a7a5be302e772da3fbcce415b8a5e942ba859e52aeb51e4660af32b45912bb0023fc4824c5029ad58c070f937cd33057a2ab972632c7ef01c5464fcc9026034100082e09e5eb8edada9ac2c05138bf461db22f3948fc8961d7a006a9bb1dc235356653ef7f91df3b48b3cce7b2d0b336d713f76ae3cdef852618dc5f198db55079ac0137efa8983a8b8e81aa7b3dd19b278d95de0d1e15be32bf27e9ebe5c283161c446551665b8fb9d1943f5c9440407b83cd19e4fd26409df5214d413fd22b3f20b5a922b929745b4cc42a6b2a5e3934b93f47070a69b0a344374b6d2013a23e2c871e3247453ffdff4bac640963057d137210b9503fbec2eb7be7e2338a7de8565970ea277030546de2b830634ec6e5acc7b91e1938b60641669bc2860f492b37b0d304e8580755092af8bc78bba6bb6374b272ef31aa950da5ef5aad95eaef9cc814b25d36feb427d7f70f3a16f2770d405823a9d0a37e51f8e59138792fc22d18206022a96f7c0c8d6cf3271afd4c19f887dc233ecd8e845b7b1fee1ec39001359daff02ccea46eeebea232fe6f8e3d0c928fd4290d3bf0103839d21e94b82c03c2354b69cce59b27759e4dcb642a15b247fd3468ae47b9e4436a687a9ba44aee0c556d69eacffae8fd12a99ec803604c2686b319c4db44bf2a814a703215bdcc9f5d69c85793e3ccdaf035dcf44c7eed951e3586300c99fd7ebab3242b70f427a7b4878cf33ed6ea0164d02d7b99af008158a7210d4f9d4d389510f92e8270aeedfddb17b1cf0d282838079033e98adb5d51713eb71f470d1e5a3ea25fa2dc2262c426a600980db82deeca990b357f68bfc9d626ace7b237697bc3d0be98253d7ecf514ddc605277a18b7a8b33b5508fb6e57e790a1eaeb0e67fae274ee9843ebd8a6708cac48e17c84e5035b16f273778559f01e204e43b8ee4a573fe77ac46f28e0ebf03a7feb06170f9182c46d7555ccecead316cfc44d283608300ca8df531e9cc6fa15214a1a7141d9f41afaba5d1ca44e280039c4a028ad80a186404982bdf1efd95435cff2a6862e5a7cfab8bd9ad6327fb06cbcda8b0c2c8e31080e43efb69b54011a0c95a130b039fbf3e1e0c94dad81af850242b4146fb6cac4f48333a721b7c5a13c7a862e34a3de7b1c7b5f8579bcb05f65895584bb9ce6060a90d9496b13ca65af37127cd342f6324ecebc2f3d578ec03e5aa51793881619ef052d74a167b0aca6a67dcba8ac65b5fee4b87f807542dc6fe4a279ac3a67b762384af3d75de1339a77d5f2b54d2a26e36b1accc11adc86a6d7265e44b254e273bf9c59c8db619eceb4ac8fb97eafbb7f47a9c6ea22d5590e44199fa28ea595f07b58f682e293dfa593809ae6ddf1ab305c1651899fe35bd8fb18522e12f52e53955d1f70396fef24aec357937884570a72800082c2995539528fc86f79dc3c36dc11507301d963e416bf68c26e308d2d8d17364080cfa05e433c28d96b7daad3a6379fec59805d15d36d4d00efecce875cee65436e6c1093e58f2e3255ffba451151fb0bf2faed2d158db2540064d4e05b7332ad6cdc693d9be344bf8a5139acc91735ff7044fd6155a8a8ee4c220621048f9f84756185802ff88c5e91d370a4dec269fb9d66155ff2651b7debd2156d38505ede48525205801bbf17b07aed4d10ae852cca9ab80885c3d0eef7094b6d705cffc3975684146570e99ba30103926c3dbea3b128fdd426fcc253dee3ad915fd23f8723cd7fee0c8e620fd5763597090386dd35e7c4d75de11bad450568a6d9ef4d3e9187b3a713f91b967af249c632536bf0bc42855c5162214a34e6519202c8fc2389d09db10d4dc898ce160fe04b29dd3156a119bad085151df4653808f04b85c8ec9345fe3d80edee87303551454ede3e98a43b023a6bbd88ae4fb878dfe8837abb5fb6c7b821b94186087218cf120f86af86e9ffdecb937eba7e321a7616c5b6aef646401669175eb911178955abb1574a179d00065e2c303c0defeb03633b25abfccb9eb47720b863f2dda64682bb71a9ae018917fcee020ee3c9bc0940ebdcbb8bd913ae9c56580410f8509be4fd677443fd2b92311995015900e74aecbd33e58e97e176a0a8fcba9546e5db52aa9d685767f6c3ff44b039fb5aa1b2d5c4a0babc8d9cfebb26cd022778274333b829a02f566753a2b39a4636729170f83e8dc61650c976f004afefc9d7cdeaf94adeb769753131a733a6897a476cf69db27c14b17a15d223b3281222b9ce6510bcbe37dbb8f3c295146573de3aa8d145d0a1d8eedd8e9202db3765eb86948a305b85531f43cd8720e327711335ff2f05538f554fe52c3b07a5fefb6552d95116031e370c0c1aad646a074a87987478baef20c35aab828f3491822ff752013dfe6e2e1f992ae02b67cc211c38d2381a782f274d13eb9c6d5bbb7953478f92d43e3f5c20b9ed2fbb568ba37b0a32fcdf3b6973c8f9c42d231f8faa6972fddeaab4e75b99faed8a47921d93cfd0027e353931f3efbb5de7118317f42b27486a4f37028f3b72c5135fcea91ed74d95e98442f64f802444bcd73c3e569c49c8dfce2e9befb5c4eb77c63844e2939d5b369f2a806eab365782c094b6081cbf11506f7d7be864d989d8f7eed1f82e7bc993bdb24f4d46ea83cbeddd2c8e58bda56cfb3c368de35d4a2ef0b44d0f1eb77d895c8654e555f1d0501a50b9b13e80f481280d37a9316f0ab5b251249964346d4225d7deefb27c0a4a9a9a53f13780d8dec256f987c4ff5de5ed4dbd3fd2e86f32eac1792a8dd661e201e5a852298e50a24a29ffdfae3612ca6801da76f8866206a999f5ed5367f90499d2b444b4929387a89092b48b66f9ca8c504fccb8595d0142e5d993586599a201684a8186ac764901f1aadaa1f04574e4008526d8f5e452ab3b14be1b158674afb627ad2ed09d30ce82a96b937d50d6edf1d23faf9c3113cb8c61817d4ca661176f34ff78da8236894ac7e9c6132d1b820445f0047660c425341e35a5f27587931dbcd320a6a30cc675dcef7d9d52d66ea07872c4cb4e15653ac9fda33427c01ff5643dd8f5846882a7650b4fca2201f84df6422b86eceb1edb8a4b5bac84dcd8657a37bc1d02d253e19616cb6a70ccdfae00c7cf7228a92492f7d176a18df0e8c984232b587cf9634646cd49d0a3e803e40d19655f8d7fa89db9542e93634ed10dffd5db4a60b31cacb82df95f81a66803daffcc4d070b4297b0560e36e889ff1dd37fc30b5a9a00b113f92c8245c409ce8966b958e590c23118f8ee8d8db2d09f7ad96e6887b891ea973477084441ca3a59a2b861cd7d6c37f6726457ab73f67c9b3cb1ad7adbc7b3e7fb7c6bd7edf4350303cf7b59b870bb3db7a523fa3f9e99f971184ce1b0fc27c459a86a05d4563d3b9321b68f284ebdc45c14c2592a13acf614bc8dab1c4401297fc18eacedf863d8f8da332c249303151042a64de296ae5612023dd65c6899c4ee24e5847bcba95ea8b385b1bf85a22fdc014e355daa0b3d598475de24e65a1fdb2ec1cf7ea435d8a3dba9e1d880b72b9bbe1a21bd39bc964b9a5ae0b68ddf47eac33849159ff5a6640a488c858afa9c6aa903a91c41bcf4117fa42bc9623b1f75566c1bd6d7bc5da567333e455c79dba0d08d6447a9b120b2f40afa30b9c110c72f0057f5b3aa157260d06e315187d8eb9c710dde147f7f0e354be9750efeeb81d85e2137c4454854950faebdc0a1463f60150dd9553eb689b045c45aa91b96dfa7ea98de4024c0d166fc9f8ceb10e5df6f2edeb58a7eeb6a63bfe75daaf82857da6499461be6eca6b1eda076a9a683a7cc68f0c35c2d6250d25d6ab66f5aeddb2470c1cfe7db9f5a896202fc9086ce69e09a6d1899877d7f4e569177356192ac7a5325a4fe227e0224d38b445fb057c30f5681ef730973b0986012647fe5c37b66e11c190b2fffc2d18645fe91172aa3974815227b192d62820c1be067211067d51ad089cb4183c483a84e4f5c590d9616e35c039f5ce089fde32ca18ba24725717376682cb6ca8611818aa2cd73163f5a924e2802b380f1bdc1848ade0ab4d14a1d1875e1ee7f4b5c3c572b0dbf55fab7c0e7215497c40c5ff0aaae6ed49a73c1a6da16a7dea570e195d5868bc213846c359d697ebafe2e39eeb4317782455de8b46fa9f0e420a3cc303c5395a16a8daf85d78fc3b7229e532cc8672990a1ff13a355e5f95f3131cc2b15da71ac1192ff1eaf6069e04cb7a76a12fe2354e077d3e66ec356d41b9e35de7ee035fabea66fd37d3850f5373a90cff0cf45882f1952bb437a524b014de4c584a56895f60621b3c4b2c7614102ffa8e2ad9856054f881cc3e0ccdac1e0e833cca18396fe12b60b777a95089b083a62cd35aa7b343c57e661003977ffbb32dfbcad59b73d063f9231af25c20264e0f2381781155eda78a4a8ee1ea9178a394a460e857a745ed5f4395932d600fef08706b9672d34ac66d397bedeb23c2c3f9e35062849746a0126ed84c7c891997adbc58f489b894284c32a5014932d5ffea71f06b84f6de1cef59284296ff356efb5a64b51812243ebd1bd9cd40c0bb8ad01e9890970cf0214207cab23b0e8e1779086bef5078cb97c98fdef8529b1b3b447f7fd0f093350a5b29bf941413f7f5d1c3c29d85e52980a0819991f3d9be82830469975c830fc81437f9fa7b49cd3aa4f7bf4ff55711a76e383ab8e67bccb6502a4733466bfe6e9f5345c684959103779ab020315437865dbaf769d130bc0dbc5a72ce5023f4492d8d5d50aac28981b44443c921d32a3e75bab3dde2584d4eb25f0c92eacb8f5228dc624074c0c9a97552aae2f96e24a78a67d049bb59b84a63fd7621374c34b8fc2d7371abe3b3a0f6c3fc0a86f6fe6de778e193a924fa31b057e93025edbe3d5d3ec2d049485ea208232fe106c21b8fee66b7472a8ba4f9347e1b30aa77cda04d2f2113499186ba858b0575da4e490a8ee362489c821c9774d171280098bf8ee19017baa8458eba169786e8054661c04155c8bde62e50bb09a6fd2ca43eb011ee297dc5042dbef15f198702917c8439fd62879ffd8e668ffc02aeca011e771392644ed8bdb1f63357800c8c715dd93cc58b98a3183e88fefb659e1fcc1bcb24be314ff6bd44e9b8fcc95edb4151b9100d55327210bfa0d5da0eaacd189235357ac0e739f2027847cced3892034fb4011e66e92fec92cf4ce63f6ad442da89855f020130d36bed5e7737481de47b01a31f1c310ae19796d1acc199977e675af781027b4db3df73095531c00a9603853877ec10bd61c1fbe346791b77885caf6ac38409d4b73a7aad6990148e13e53e3ad9b91d0c471c65809dd5fd8a1d20ee5b79572feec1b629ca53ddc5fae0a4b10bc196a150fd8e35692c06f30bdee353511979986fad1b9d5c156e5c154ed86d7d2db7e6ce85bfa89f1fe7aa1e1f919dc641c824b29e7ba5df9867e1ff42ccb63093615c9173d8ed3aa2d760fd1fb6583466851fbcc700345ac2cdf323f4e5ac6bb647c333d06bd76ccd6650ab5e5119cd57f75fbdcbddfa55cd894e90142a39a37db579dda5beb8c86214208efdf1be4364643d6dc58da646d7965f9c388a60e740466be2619f6999b8e9f59831d8c42f307c7cdbdd7b195b25f08acb6a98a5d0b244d06da6012e356861d4bac61565be04ea2c857e2b6b6145f15c14d5bcf429d2a3ddb53e6f84ee9aefc14bca48ae3a684d2ac8fffabd5c5499d074810b9ed5d45aead913cbe7da124d1dfbd89ed21e3a8466eaa94c303d9c4be809ddea6341b7d0b0c2fb5204c1ca20aef69d1c88aaac4edb20601c7a2e1a155d845c58ac1cb9a410c144ab132aa1098ff297f25ba7d0bb1c04d6f282f3c239bf66438176a98a2f3305eb17cb3e01bffaa752b5079a95241cc7518f5d26864468f227e29b173fdf874d3c326df6586c535fbe8b3dcc07bc9e378fabf210487e9091dcd72e83defd1755ac4e8c91ac75a62ba803af1f18804d19375b48665307b546f9faf8c18462fe8d9b7e40f359c0bda35d9fde20a1998ed2601e48eb2290f3d80a8a267424fe0a19283d6841a0a0d5aeff5f42432bd3d4b1211bcdfc25e30da5b6dbfbbd5699581c5096dc6a2dee215eebebf32fd84fa8aeb896c54d1bd247a3ff6dc759fa4b41d8aca53f86a6b7c370568d5536d5b1a5680d65ff7e61deaeb2ebdb476263b95b123cc59d0804079f7ab54ab41563d992d2777e6576f87704609748fe1d3e720c09830c6bbf0ac5459e5996d29013229ee0217873d0ac5dd5398fc02225427bf2a2870a1e6d1e20628883b5a8dcdf649225c8e211f65e4a6b962c64cbd12d645e02006cd6a4e7a97bb058351b8508fea9de65e0a94f6fafa9ab01546f5556ebc41d750ec815dcb3b313a803c840b8e410ca6b85c41e8ca860d1cd87335bd62b67348128e6bb0f432ff1c9b8dd8ae8526bcfa6ce844fe8003d1e295036829997c646409aa576e62b8b4f7e8b0b2c39c375259779e2025aa8b98be781cca564b8ad4eafd6cc2daee09d1dc9652bdc4426d0bff418167577f2dc993d4ab727eaa376d3d782549a5e232a790b9a05afbf9e724b1cfa21e191d48c1076442098705eb2b69e6f4887b40662ecff796738a1a56cb545c34a080af2cf1388cce89a60c3e58a32264a4df14b546246187ace742dac52bef12838827bb4cee13fd25280e025e6d0dc0cc30fde4cf398780cac8c49693504936098dea71fbf31dede95b43bf494f6211eab0f5a570c5008ef048973b3259cd2354e6a45b5daf6331b081040215cfcc97c1c7adff82f5d0b533b087452f6d083393f299fe4fcd8f84cac87ffa8180e235020c59e2be511d86f5f12d6a0fda19901088eab72753a674c9f9f28411093e87d4bd3184c071bc5a26e4ef38b1d6cf8c1eecea2c89797efd940ca4e4ff8fd6c59b7164da1cbe87f9de30bcf5497ef958e7a7d5bc8e144f7476c4907bad2d1f9644fdfb33367fc7963f8e818fd6b4d63ac645a0bba624ac6d36173e37e196a7549f0cfce632590ddf3be4c163be2f021a4ac1ca00e404d9d7ade87cf4fe9285c093c4011e67a199545363c23c29d554653053a044ee44c86954b2e9842fc4170426b6e14356956147ef1b8431c160d7a01bb08d483d6cc823e31808c164a2fbb4f437eccce3990af1ffa6ca275fa4f0ecfda66e676148428dc80af66766363a73820e895403d31e48d459b31ce0df8b762cfd06f393d49812dc64ae6f4160c69aeddcc31cf1a7902a80573bfe2ac9667f6f9e433ea199e5f117889b6281c3643a3c131ee949250757ab193261de6c771bc41c7535bcb2c2f02277ac205a532951c6495f8ab476c5023812fce3d425cc3fbcef8994f2af9b92ed8b18567ad4219814b54f71973c7769317885493722170fab1f39c57a0605805de61c2ea137544cc02df471909da533d2a6d0a1a6ce34a4dab00dc326cce3a3db594feda60fc9dce070bacf14e6da3bf46e08b4d98bf8b785d6e2d37ce263eaeefc5addd4e4c57b7f3065d46d9ff3750a26f2cded54b57f3c1cf339baf69630190ea829956d64bc1dfb8a3da0e9c90d558ca089b8af6c44006d7f844821c107a31719fc6c43f1752621a276b99463885b73a0e0c90f841a80913721cc55d940ac855a50cef76128471d9ec634724e19a29fcdcacf89f7f82dd5116eb6d9a9d11f2a14b3e2c0a27a271dfe3487d939b8e150e1bcfa73e33ad9b00086dd5aea8efb2a970ded12aca0fced744906ae09c177dcc3ca2c49604085fee1d8eb153a0b76d65c85d90ee8b38010f955840100e3b119dc66ad9a8f3cf396e98286e0121bf763217ecfc56579a2d6e44342ee6223315de826a27d499022812b60f3c053105332a6e94b81df97c381bd142d8ac29fcfaf5f190dd7fe103d4a3049d84676a15d871af160721448433d3a5adb544be994dc4bd2fee9d29410be3f788169531ebf3f11d04ecfb493fae2b0d619a969b0232849da5d43e30c25b46ae0e381b746a063350483c4c379526d5e1bbad647d8e677acb9f5bfe45fceb584000f77001723980634000afc7a06b72a1542d4217d2bd347f5936d37ce772e1191081fec151d8fbf231cc10dd1179dcdf22e6d856ae53629c2d753911c3f402c16e3eba0214a123e448e91849d53a3e82bfef26de625a8373af15029accff646b50847f1235a5e3a36b9d7ec558653209ef84be24a2ef347f6a39b0521692b6ad6f2de8050ae4ab363fac3165e4571f3c39d6b2a8589d87cdd0c62908bb6fd47371b320a2085ecde01506123be3d31bbc1e77e7a49482e28c1bf9516eef950016026bef72743e3c9f1e1c8c6b305ca8d545e5ca5478cc8f4eb5b47873a69ddb62db97d9457ac7d061ebe22be623d8b88d77fd7f7c26c933122583843009545a71912500661e68fa041265a7b015a58f225e9d98456a3c422bfe46d4efde7863b723603dcc59544cfb43884e35eef19a4ca266ba74889bd708832a0db8e624ebe994807ae32f03f87f7ba387cd839dd076088320542c018dd0ece8589b27264129e04a8c48d11395c1afb93ca51cacd2bcd8e41ffd3733b1a35aa9c11c50686d9fdf9e2dadd75c6013408503c020fdd747084fca0f82d7214e0ac5b039b5d274adfd8d876a05ce55e55ebf415119baf53cb381c15bc3a62528b9bdf9e175427b342a1f99971ac6aacf786250eb9c4dd94444e89e229842c096b6f2b58e834312b8115b26df87932b23f6c3bde4bbb26f1e3b77c1c64060c9613f5bd33fbac6dd5611ef5785449878491956c81873ecf9f826e5d3a9b3d32619e2bf9ee8cbf9ad1748e3cf74395b594708f980149e0985d551c9fb4ffeedf1e2df81b91081259fa884cdeb247abbfc1f34df61a2efbc169796f8fe095a99cf97cb69e974a8dbedd16d7884928dbc74cde18cb008f", 0x2000, &(0x7f0000007500)={&(0x7f0000004300)={0x50, 0xffffffffffffffda, 0xa, {0x7, 0x2d, 0x4, 0x100000, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x2}}, &(0x7f0000004380)={0x18, 0xffffffffffffffda, 0x80000000, {0x7}}, &(0x7f00000043c0)={0x18, 0x0, 0x6, {0xfff}}, &(0x7f0000004400)={0x18, 0x0, 0x9, {0xdc9}}, &(0x7f0000004440)={0x18, 0xfffffffffffffffe, 0xfffffffffffffc01, {0xffffffbd}}, &(0x7f0000004480)={0x28, 0x0, 0x7, {{0x8000000000000000, 0x800, 0x2, 0xffffffffffffffff}}}, &(0x7f00000044c0)={0x60, 0x0, 0xb, {{0x5, 0xffffffffffffffff, 0x3, 0x0, 0x6, 0x8, 0x10001, 0xd}}}, &(0x7f0000004540)={0x18, 0x0, 0x100}, &(0x7f0000004580)={0x11, 0x0, 0x3, {'\x00'}}, &(0x7f00000045c0)={0x20, 0x0, 0x2, {0x0, 0x16}}, &(0x7f0000004600)={0x78, 0x0, 0x53, {0x0, 0x4, 0x0, {0x6, 0x80, 0x5, 0x1ff, 0xd, 0x0, 0x3, 0xc9f, 0x6, 0x8000, 0x7, 0xee01, 0x0, 0x3ff, 0x8}}}, &(0x7f0000004880)={0x90, 0x0, 0x0, {0x1, 0x1, 0x5, 0x6, 0x61980, 0xa, {0x5, 0x6, 0x6, 0x0, 0xda1, 0x100000000000, 0x0, 0x6, 0x3, 0x4000, 0x4, 0x0, 0x0, 0x5, 0xfffffff8}}}, &(0x7f0000004940)={0x80, 0x0, 0x0, [{0x0, 0xe, 0x2, 0x80, '-$'}, {0x2, 0x3, 0xb, 0x1, 'syzkaller0\x00'}, {0x0, 0x38, 0xe, 0x5, 'veth0_to_team\x00'}]}, &(0x7f0000006dc0)={0x3e0, 0x0, 0x5, [{{0x4, 0x0, 0x3, 0x1, 0x2, 0x46c, {0x2, 0x7, 0xd, 0x6, 0xe00000000000, 0x851d, 0x0, 0x6, 0x1, 0xc000, 0xfffffe01, 0xffffffffffffffff, 0x0, 0x6}}, {0x0, 0x80000001, 0x1, 0x8, '\x00'}}, {{0x0, 0x0, 0x0, 0x1, 0x1393, 0x404ab711, {0x3, 0x8000000000000000, 0x9, 0xfffffffffffffffc, 0x4, 0x5, 0x7, 0xfffffff9, 0x2, 0x1000, 0x5, 0x0, 0x0, 0x1000, 0x1000}}, {0x5, 0x3, 0xe, 0x32, 'veth0_to_team\x00'}}, {{0x6, 0x2, 0x401, 0x4, 0x2, 0x80, {0x0, 0xff, 0xffffffffffff9174, 0x6, 0x1, 0x5, 0x7, 0x3, 0xe75a, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x2}}, {0x1, 0x8000, 0xb, 0x1, 'syzkaller0\x00'}}, {{0x6, 0x3, 0xdaac, 0x6, 0x6758, 0xc6b, {0x2, 0x2, 0x1, 0x6, 0x5, 0x3, 0x89, 0x8000, 0xe2b3, 0x4000, 0x80000000, 0x0, 0x0, 0xbb3, 0xe2}}, {0x0, 0x1, 0x3, 0x1, '-[:'}}, {{0x4, 0x1, 0x1, 0x0, 0x3, 0x800, {0x0, 0xb, 0x6cf, 0x8, 0x80000000, 0x5, 0x2, 0x5, 0x4, 0x6000, 0xf, 0xffffffffffffffff, 0x0, 0x6, 0x400}}, {0x6, 0x8, 0x4, 0xfffffffb, '-:&#'}}, {{0x6, 0x2, 0x22f, 0x74f0, 0x5, 0xb, {0x5, 0x1ff, 0x1, 0x2, 0x4, 0x0, 0x9, 0x6, 0xffff0f7a, 0x4000, 0x8, 0x0, 0x0, 0x3, 0x8527}}, {0x1, 0x5, 0x2, 0x0, ',+'}}]}, &(0x7f0000007280)={0xa0, 0x0, 0x4, {{0x3, 0x0, 0xa, 0x9, 0x1000, 0x6, {0x1, 0xd, 0x5, 0x5bfc, 0x9, 0x6, 0xfffffffe, 0x5, 0x1ff, 0x8000, 0x3, 0x0, 0x0, 0xffffff85, 0x80000001}}, {0x0, 0x2}}}, &(0x7f0000007340)={0x20, 0x0, 0x0, {0xf, 0x0, 0x3}}, &(0x7f00000073c0)={0x130, 0xfffffffffffffffe, 0x1, {0x1, 0x3, 0x0, '\x00', {0x200, 0x3, 0x4, 0x5, 0xffffffffffffffff, r7, 0x0, '\x00', 0x6, 0x7fffffffffffffff, 0x2, 0x8001, {0xbe, 0x3}, {0xffffffffffff8000, 0x8}, {0x3, 0x7}, {0xfffffffffffffff7, 0x1000}, 0xd, 0x1, 0x1, 0x1}}}}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) 6.27571389s ago: executing program 2 (id=16926): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/31, 0x1f}, {0x0}], 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r4 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000006c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x8, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1, '\x00', 0x0}}) syz_io_uring_setup(0xf00, &(0x7f0000000480)={0x0, 0x0, 0x10000, 0x1000000, 0x55, 0x0, r4}, &(0x7f0000000380)=0x0, &(0x7f00000002c0), &(0x7f0000000080)) syz_ublk_add_dev(r4, r8, r6, r7, &(0x7f0000000540)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3b4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) 6.178163651s ago: executing program 0 (id=16927): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@mcast1, @in=@loopback, 0x0, 0x100}, {@in=@multicast2, 0x0, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0x41}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x8}, {0x40, 0x0, 0x2}, 0x2, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'morus640-generic\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) (fail_nth: 2) 5.995373403s ago: executing program 0 (id=16928): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x4c, 0x914fa, 0x3, 0x8000008, 0xfffff000, 0x4, 0x1000, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x22, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000080)={0x800100, 0x7, 0xfffffffe, 0x10000, 0x82, 0x80003}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xd7, &(0x7f0000000140)=ANY=[@ANYBLOB="31039ef70de96b2894cb3a7dd280b7ceb13c0757a81813bfcc56806150ddf8e103d9f30f538653c087479b1c4a2f102a4abe4e7913d8718ac2cf3a6cbf1e4f8a273238f2b5d97200c03f7306e01192b5000000000000000009aab36aa1edf7374523328f3bc1e0c119294215c4bda4615eaa15115f9f024951d7c6b269e7c035ba0db7a8c186ef39ed8f7a9b0d40788160fc7845b235a8f2f53e056cc010caf4e0bf7a88daa74d70fd749cbec57623c9b1feaa1134138e91722c38c056a108f0ae0df3d158c464dcebeeac73373a9d227ab472b66d900c"]}]}) r4 = fsopen(&(0x7f00000192c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000500)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000ef5435715412"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_ep_read(r3, 0x1, 0x6d, &(0x7f0000000080)=""/109) 5.317448372s ago: executing program 2 (id=16929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0xeeee0000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) recvmmsg(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/31, 0x1f}, {0x0}], 0x2}, 0x9528}], 0x1, 0x10022, 0x0) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000040), 0x4) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000880)={{r2}, "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"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.670489699s ago: executing program 2 (id=16930): r0 = epoll_create1(0x80000) r1 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x4000) r6 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x8000, @mcast1, 0x3fc}, 0x1c) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000340)=0x8) sendmmsg$inet6(r6, &(0x7f00000018c0)=[{{&(0x7f00000017c0)={0xa, 0x4e20, 0x8001, @remote, 0x8001}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000440)="b46de43c40375092c76f778f0080a01ac45b5a60daebc6fa4274c683112d918e48de7e0fc728eea8c5ce78d3d8b60b9779850674c2f939f51332bba2d3cb41f112850f13bc9350f8467402", 0x4b}, {&(0x7f00000004c0)="a79de01dde080203d117d7ccb04f1603fc49", 0x12}, {&(0x7f0000000500)="15d0f6591b20652a73b9fadf6c2e1ba7f805f014d3bf5e8b142243aad754a570bbecc81cb72cc930ae842b6d320c88212e54305d3f8c6a460165ab474bfba1dde46ee55121959fd7dc3c26a41fe1bc64648c740bd6e61174a1e4590b388011d2d5e7a602d185590036b6fada54087e69c247d417420a9ad139393361a6aa870c0f0f63ea2421a61fc3dea52baacd2244a07b3daf02e5f98290a21f6c26c34e52d5f7c15af2247b5143298572ff8cf6ee6dcf7a1b9fe748b2f57b480ae5f38751e4c47f4eb48fc7de9eea47789436fbbb", 0xd0}, {&(0x7f0000000600)="c5e0c4ae0753aa4c70d3884897c88b0cef54cd6edcb988db8061a648599740375c7710d1ab173c72ae3425500393e81ed70008031d8e9ce14d2181349dcd9fa586a8ce1bd1622d2f85f6a7cf5dac72d63c5a5561afcd9bfe1dacd7b8b4ad120a9a", 0x61}, {&(0x7f0000001680)="e0ae6a852eaa7004c55ddb9b3ade2f3c23e7632a25166898bf4444b37983b7d1b0507b92c104218f545f024dc49e78efddb9618f0db98626f3dfbe089c8a274eb5ecb96fb0dcc61206ef8a3988eb397978604f017bb24071a6c1a838ecbc82e7aac41165acab4dd0b525d2b8bb53f06e0e0929e099ac711789e329283fbcf582df4981fae1d1bec2b80b73c149f11287b6a93d5c81144affc8b81326bceca848f737e55ba18444b543d743c733aa5ff04c67cc2e3491996fca2677769bfa33febac9347bfe1d114ce3bf1e088a79", 0xce}], 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="c331ce71381be0db03d90df80be9172063f7942a45cf2dbf9f44855a0a359d423fdac1d2560fafbd3060019a40870d3de08b2efa216db9f904e198917e51ed15eb3a37b7b310e7200f19fcc50a98f8b21372d013edddd135010f47163e44bd87c22c3d425ad80709fee2098822115b7158be068d4837096df61e435689ce123b68fad6e654f5c0750eefa6ff0181"], 0xdc}}], 0x1, 0x811) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0xffffdffe}, {0xfffffff7}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x9, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xe000200c}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c000280050001000000000006000340000400002400028014001b4a14f5b7018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x6c}}, 0x0) 4.484875613s ago: executing program 3 (id=16931): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x1}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x2, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) (fail_nth: 2) 4.026988486s ago: executing program 3 (id=16932): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 4.003881234s ago: executing program 3 (id=16934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000090000001700000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="dbed", &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) socket$packet(0x11, 0x3, 0x300) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4901, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/238, 0xee) read$char_usb(r4, &(0x7f0000000100)=""/178, 0xb2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x400, 0x0, 0x1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r6, 0x0, 0x0, 0xdead, 0x8, &(0x7f0000000240)}) syz_usb_ep_write(r3, 0x81, 0x9, &(0x7f00000002c0)="28d36689fb2134111f") r8 = socket$inet6(0xa, 0x6, 0x7) setsockopt$inet6_int(r8, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x42, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 3.881655719s ago: executing program 4 (id=16935): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x25) 3.767049125s ago: executing program 1 (id=16936): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x3) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154b", 0xb9}, {&(0x7f0000000380)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604", 0xf4}, {&(0x7f0000000140)="641a6a2b863c0800", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af84202254eadfd12b56f2ebc32396500466e9f16d358dd5354ef69bb8caedf66a220372311a092a4f03a336f27222302c6364b738a58c3b8e99d1a40552dfad46ba272544c0b39ebbca7d1da95fc74f6010956a8bb3165ee8", 0xc6}], 0x1}}], 0x2, 0x4000900) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="ebae0000201a0100140003006e657464657673696d3000000000000018001680140001801000060000"], 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.625354048s ago: executing program 1 (id=16937): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x2, 0x0, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xb) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4e27, 0xfffc, 0x4e23, 0x8, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x6, 0x108, 0x2}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x1f, &(0x7f0000000380)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x438, 0xffffffff, 0x240, 0x240, 0x240, 0xfeffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @empty, [0x47e128f2bce82ddb, 0xff, 0x0, 0xffffffff], [0xff, 0xffffff00, 0xff, 0xffffff00], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x8, 0x1, 0x8}, 0x2f2, 0x138, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x5e, 0xd, 0x0, [0x1868, 0x8, 0xfffd, 0x7, 0x8, 0x3, 0x5, 0x1ff, 0x0, 0xffff, 0x6, 0x7ff, 0x7, 0x6, 0x81, 0x2], 0x5}}, @common=@dst={{0x48}, {0xffffff80, 0x2, 0x1, [0x6, 0x1, 0xd, 0xc, 0x81, 0x7fff, 0x5, 0x0, 0x81, 0xda8, 0x9, 0x1, 0x8, 0x2, 0x9, 0x2], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x4, 0x1}, {0x1, 0x6, 0x1}, {0x0, 0x2, 0x4}, 0x8ff, 0x3}}}, {{@ipv6={@private0, @loopback, [0xff], [0x0, 0xff, 0xff000000, 0xffffff00], 'veth1_virt_wifi\x00', 'batadv_slave_0\x00', {}, {}, 0xae, 0xe7, 0x4, 0x44}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc, 0x5c4274de50300c04}}, @common=@hl={{0x28}, {0x1, 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0x1}, {0x4, 0x0, 0x6}, 0x6, 0x817e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000030428bd78020000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.507187345s ago: executing program 4 (id=16938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 3.367742115s ago: executing program 4 (id=16939): unshare(0x6a040000) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902"], 0x0) syz_usb_connect$uac1(0x1, 0xaf, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x9f, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0xaa, 0x10, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x13}, [@feature_unit={0x9, 0x24, 0x6, 0x6, 0x4, 0x1, [0x5], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x12e2, 0x6, 0x7, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x2, 0x9, 0x81, "0e"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x7, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x10, 0x1e, {0x7, 0x25, 0x1, 0x0, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x16, 0x8, 0x33, 0x20, 0x81}, @as_header={0x7, 0x24, 0x1, 0x9, 0x9, 0x1002}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2e, 0x4, 0xd, "e4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x3, 0x87, {0x7, 0x25, 0x1, 0xc, 0x1, 0x8}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x8, 0x8f, 0x7, 0x10, 0x2}, 0xb5, &(0x7f00000003c0)=ANY=[@ANYBLOB="050fb5000303100b0a100302000002090800a310047465450cf3e0686ed3c004c08b10c79eb36051a8a7531746ae6cce07061907cd0f57831adf3cb0506facf0d751e747a573284cb757990755c2cacca73d5d9a97735449300efa3341c0e582afd5839e227c10004d54a78e197d485004fd278cfabc3a22b8137adedb9bc422458124fde669f36f44ab66aa8f750c9ccf9b149df48f8e0b56e4e762b1b72f2429e1210db4da86be313513ce85ead67d9aeecd4e5a8aa52912a68a2edb63e6cbdd20648ce054016c7563c1ee223bdd5327f37fd76ca275b023dffda0c3f7622d2e1b21c45dee1ec259f54319d0d151f6318bd6784393567edef62c4178109e796dad0ffe38342ac9b484071485e0158ef438b1967b597cc6f06c3834d4444aa342acb3b97c9e88ca75c37a40f7a0f83d397fad504fa8ef3b03b486d7430df7bf675ca914066d7dbac10939bce2021af5c2c3b627dbcd64c1282295"], 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2.846852645s ago: executing program 0 (id=16940): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x40000000000001, 0x282) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000080)={0x0, {0xff, 0xe}}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000000c0)=[{0x31, '\x00', @buffer={"8348883a39c09225399678207147af12dc401acf382c14448a2006902c480f4e", 0x20}, 0x7}, {0x1f, '\x00', @st={0x4, [{0x3}, {0x0, @svalue=0x54}, {0x1, @svalue=0x7f}, {0x1, @uvalue=0x5}]}, 0x6}, {0x12, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b5b913355f933502c0a9975e73566b90754fc08ec", 0x20}, 0x6}, {0x1e, '\x00', @data=0x400, 0x8}]}) r2 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89801) fchdir(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002600)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x20040011) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xffff, 0x20, 0x10001, 0x10001}, &(0x7f0000000200)=0x18) close(r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r6, 0x80084523, &(0x7f0000001f40)=""/231) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRESOCT=r7, @ANYRES32=0x0, @ANYBLOB="000000000000ea440000000000000000000000000000000000000000000000000100000000000000090000000000000000000000000000000000000000000000010000000200000002"], 0xb8}}, 0x0) ioctl$FE_SET_VOLTAGE(r1, 0x6f43, &(0x7f0000000240)) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSABS3F(r8, 0x401845ff, &(0x7f0000000000)={0x0, 0x8a, 0x1, 0xa01, 0x0, 0x9}) 2.117484539s ago: executing program 2 (id=16941): ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000180)={0x4, "260dfe9c29ac04362a4c158721f3e0403d7508a5cea57bacf5cc386560afef1e4f9fc432cc6b6a9928d2352b9eb9c1808d000249544c66998a65eedb7b2fdc0d", {0x6, 0x5e}}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="002428001000"], 0x0, 0x0, 0x0, 0x0}, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000140)=[&(0x7f0000003000/0x4000)=nil, &(0x7f0000168000/0x4000)=nil, &(0x7f00005d0000/0xf000)=nil], &(0x7f0000000100)=[0x1, 0x1], &(0x7f00000001c0), 0x2) 1.501407295s ago: executing program 1 (id=16942): syz_emit_ethernet(0x3ae, &(0x7f0000000940)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x378, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x300, [{0x3, 0x9, "a78ce54006598080a80300faffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27de3e347ccea6795ada70e97adac15084dbaf736b41e5af1802"}, {0x5, 0x1, "0000e10b0000000026086700"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x26, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x4, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e01000000be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (fail_nth: 2) 1.102259884s ago: executing program 1 (id=16943): r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'netdevsim0\x00', {0x2, 0x0, @private}}) 1.10085593s ago: executing program 1 (id=16944): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1.015061013s ago: executing program 1 (id=16945): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000f9b000/0x4000)=nil) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000005000000000000002020000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900001100000045090100002000009500000000000000bf9800000000000056090000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07daf57ebcfa3fd03477"], 0x1c}}, 0x0) recvmmsg$unix(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x34000, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x82802, 0x1ec541d9ca5bf0af) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) inotify_init() ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000000d80)=""/160) socket$netlink(0x10, 0x3, 0x5) syz_usb_connect(0x0, 0xa55, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000280)={0x28, 0x2, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000002c0)}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) 714.496924ms ago: executing program 3 (id=16946): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000004000)={0x2020}, 0x2020) 643.590221ms ago: executing program 3 (id=16947): mknod(0x0, 0x0, 0xffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xfbffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180b00, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {0x0, 0x9, 0x4}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) socket(0xa, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001a00)={0xf, {"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", 0x1000}}, 0x1006) 154.764917ms ago: executing program 4 (id=16948): r0 = socket$kcm(0x2, 0x5, 0x84) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffd, 0x4, 0x10, 0x3}, {0x10000002, 0x4, 0xf}], 0x10, 0xa}, 0x94) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7d6c, 0x8, 0x2, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r1, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000004000000000000000000018190000", @ANYRES32, @ANYRES32=r2], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0xfffffffd, 0x80800) fsetxattr$security_ima(r4, &(0x7f0000003980), 0x0, 0x0, 0x3) r5 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x40200) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000180)=0xda) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x7fffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x3b, &(0x7f00000000c0)=ANY=[]) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) io_setup(0x3fc, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) pwritev(r8, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) 0s ago: executing program 2 (id=16949): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, &(0x7f00000002c0)=0x1c, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000340)=0x28) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb0800010000000000080001000200000008000100000000000800010001000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x8, 0x13, "8e0a110800"}) write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) read$FUSE(r2, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000001800)=ANY=[@ANYBLOB="55000000ef000000bf"]) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000d0452e"], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) shmat(0xffffffffffffffff, &(0x7f0000745000/0x3000)=nil, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564dff, 0x0, 0x8000000000000000}]}) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000100021000000fc0600000025ff0100000000000000000000000000017f0000010000000000000000000000f937d27e0000000000000000000000a200219e82e0cbb370d1f6fffe476815e6c21892adb160af2a1f6ca63abb4c305cad3e1bf56c11309de304d67f750c827a0f4863686c65aaf2e654e8198639b47b36babf539e7dc309beef3f0c00fd397f665818d2da1b98f50b1596f21b10d87b1c9b501ea468efd1309f941cc5ff4add7181e598333c43ccc7ae14fb7887d68dbfc9bd8da4db79afe2443cb1ce", @ANYRES32=r9, @ANYBLOB="ae2b5b744a632429cd0f8a4faa51b25c7efd40ee142dcd86ab1792f6a524369ab3f057ba490699140874056ac755d236f3e6e00cc49197d63bd551d3aad1d3be3cdb23f5c7ef6a7a1a842dedeb825d00a6a6e801c3fbe05136ebbd752c6a98717aab7fdbfbacb88c16f5bd6995192f2f7c527f5f6d037f1444ea14a6afaddbb3b9c024ed996774e297a359d8", @ANYRES64=r3], 0x13c}}, 0x4) kernel console output (not intermixed with test programs): .657217][ T2319] m920x_read = error: -19 [ 2232.670742][ T2319] dvb-usb: error while querying for an remote control event. [ 2232.767733][T10613] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2232.822185][ T2319] m920x_read = error: -19 [ 2232.834234][ T2319] dvb-usb: error while querying for an remote control event. [ 2232.943929][T10613] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2232.993731][T10613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.005850][ T2319] m920x_read = error: -19 [ 2233.039803][ T2319] dvb-usb: error while querying for an remote control event. [ 2233.058788][T10613] usb 4-1: Product: syz [ 2233.072680][T10613] usb 4-1: Manufacturer: syz [ 2233.093296][T10613] usb 4-1: SerialNumber: syz [ 2233.187014][ T2319] m920x_read = error: -19 [ 2233.204751][ T2319] dvb-usb: error while querying for an remote control event. [ 2233.417064][ T2319] m920x_read = error: -19 [ 2233.422673][ T2319] dvb-usb: error while querying for an remote control event. [ 2233.532733][T10613] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2233.548037][ T2319] m920x_read = error: -19 [ 2233.559284][ T2319] dvb-usb: error while querying for an remote control event. [ 2233.578146][T10613] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2233.697028][ T2319] m920x_read = error: -19 [ 2233.701876][ T2319] dvb-usb: error while querying for an remote control event. [ 2233.826932][ T2319] m920x_read = error: -19 [ 2233.834949][ T2319] dvb-usb: error while querying for an remote control event. [ 2233.967420][T10610] m920x_read = error: -19 [ 2233.975339][T10610] dvb-usb: error while querying for an remote control event. [ 2234.007041][T10603] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2234.117770][T10610] m920x_read = error: -19 [ 2234.134195][T10610] dvb-usb: error while querying for an remote control event. [ 2234.171396][T10603] usb 2-1: Using ep0 maxpacket: 8 [ 2234.193176][T10603] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2234.210499][T10603] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2234.243130][T10603] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2234.266995][T10610] m920x_read = error: -19 [ 2234.273104][T10610] dvb-usb: error while querying for an remote control event. [ 2234.273959][T10603] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2234.299101][T10603] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2234.355158][T10603] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2234.381276][T10603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.437032][T10610] m920x_read = error: -19 [ 2234.454698][T10610] dvb-usb: error while querying for an remote control event. [ 2234.587022][T10610] m920x_read = error: -19 [ 2234.605015][T10610] dvb-usb: error while querying for an remote control event. [ 2234.615589][T10603] usb 2-1: GET_CAPABILITIES returned 0 [ 2234.639007][T10603] usbtmc 2-1:16.0: can't read capabilities [ 2234.746961][T10610] m920x_read = error: -19 [ 2234.763463][T10610] dvb-usb: error while querying for an remote control event. [ 2234.841133][T10603] usb 2-1: USB disconnect, device number 78 [ 2234.907005][T10610] m920x_read = error: -19 [ 2234.920330][T10610] dvb-usb: error while querying for an remote control event. [ 2235.010745][T22138] kvm: kvm [22134]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffffffff0000000a [ 2235.047032][T10610] m920x_read = error: -19 [ 2235.054567][T10610] dvb-usb: error while querying for an remote control event. [ 2235.085249][T10613] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 2235.112671][T10613] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 2235.177204][T10610] m920x_read = error: -19 [ 2235.187474][T10610] dvb-usb: error while querying for an remote control event. [ 2235.320044][T10610] m920x_read = error: -19 [ 2235.324710][T10610] dvb-usb: error while querying for an remote control event. [ 2235.391764][T10613] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 2235.417537][T10613] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2235.447127][T10610] m920x_read = error: -19 [ 2235.451697][T10610] dvb-usb: error while querying for an remote control event. [ 2235.461118][T10613] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2235.476304][T10613] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2235.498078][T10613] usb 4-1: USB disconnect, device number 6 [ 2235.547719][T20217] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2235.576918][T10610] m920x_read = error: -19 [ 2235.586182][T10610] dvb-usb: error while querying for an remote control event. [ 2235.706984][T20217] usb 3-1: Using ep0 maxpacket: 16 [ 2235.718148][T10613] m920x_read = error: -19 [ 2235.720283][T20217] usb 3-1: config index 0 descriptor too short (expected 67, got 36) [ 2235.730437][T10613] dvb-usb: error while querying for an remote control event. [ 2235.740397][T20217] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.762883][T20217] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2235.812902][T20217] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 2235.856936][T10613] m920x_read = error: -19 [ 2235.866207][T10613] dvb-usb: error while querying for an remote control event. [ 2235.873871][T20217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.886635][T20217] usb 3-1: config 0 descriptor?? [ 2235.987383][T10613] m920x_read = error: -19 [ 2235.994362][T10613] dvb-usb: error while querying for an remote control event. [ 2236.106984][T10613] m920x_read = error: -19 [ 2236.121909][T10613] dvb-usb: error while querying for an remote control event. [ 2236.247251][T10613] m920x_read = error: -19 [ 2236.258664][T10613] dvb-usb: error while querying for an remote control event. [ 2236.397924][ T2319] m920x_read = error: -19 [ 2236.412047][ T2319] dvb-usb: error while querying for an remote control event. [ 2236.558311][T22204] bridge_slave_0: left allmulticast mode [ 2236.567853][T10613] m920x_read = error: -19 [ 2236.579416][T10613] dvb-usb: error while querying for an remote control event. [ 2236.601772][T22204] bridge_slave_0: left promiscuous mode [ 2236.603943][T10603] usb 3-1: USB disconnect, device number 78 [ 2236.648641][T22204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2236.713324][T22204] bridge_slave_1: left promiscuous mode [ 2236.724631][T22204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2236.739330][T10613] m920x_read = error: -19 [ 2236.753275][T10613] dvb-usb: error while querying for an remote control event. [ 2236.771289][T22204] bond0: (slave bond_slave_0): Releasing backup interface [ 2236.798528][T22204] bond0: (slave bond_slave_1): Releasing backup interface [ 2236.839996][T22204] team0: Port device team_slave_0 removed [ 2236.861493][T22204] team0: Port device team_slave_1 removed [ 2236.881788][T22204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2236.927116][T10613] m920x_read = error: -19 [ 2236.932007][T10613] dvb-usb: error while querying for an remote control event. [ 2236.957526][T22204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2236.985035][T22204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2237.011362][T22204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2237.037229][T22204] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2237.077551][ T2319] m920x_read = error: -19 [ 2237.089272][ T2319] dvb-usb: error while querying for an remote control event. [ 2237.206915][ T2319] m920x_read = error: -19 [ 2237.242459][ T2319] dvb-usb: error while querying for an remote control event. [ 2237.409870][T10610] m920x_read = error: -19 [ 2237.414498][T10610] dvb-usb: error while querying for an remote control event. [ 2237.567320][T20503] m920x_read = error: -19 [ 2237.605621][T20503] dvb-usb: error while querying for an remote control event. [ 2237.637334][ T2319] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2237.740372][T20503] m920x_read = error: -19 [ 2237.746328][T20503] dvb-usb: error while querying for an remote control event. [ 2237.827105][ T2319] usb 3-1: Using ep0 maxpacket: 16 [ 2237.836209][ T2319] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2237.867937][T10613] m920x_read = error: -19 [ 2237.880364][T10613] dvb-usb: error while querying for an remote control event. [ 2237.889647][ T2319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2237.910996][ T2319] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 2237.932462][ T2319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.964420][ T2319] usb 3-1: config 0 descriptor?? [ 2238.036911][T20503] m920x_read = error: -19 [ 2238.041857][T20503] dvb-usb: error while querying for an remote control event. [ 2238.197837][T10610] m920x_read = error: -19 [ 2238.209621][T10610] dvb-usb: error while querying for an remote control event. [ 2238.281422][T22219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2238.328917][T10610] m920x_read = error: -19 [ 2238.337519][T10610] dvb-usb: error while querying for an remote control event. [ 2238.457320][T10611] m920x_read = error: -19 [ 2238.480876][T10611] dvb-usb: error while querying for an remote control event. [ 2238.598510][T10611] m920x_read = error: -19 [ 2238.611720][T10611] dvb-usb: error while querying for an remote control event. [ 2238.742640][ T2319] usbhid 3-1:0.0: can't add hid device: -71 [ 2238.751967][T10611] m920x_read = error: -19 [ 2238.762065][T10611] dvb-usb: error while querying for an remote control event. [ 2238.770900][ T2319] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2238.796665][ T2319] usb 3-1: USB disconnect, device number 79 [ 2238.886918][T10611] m920x_read = error: -19 [ 2238.894405][T10611] dvb-usb: error while querying for an remote control event. [ 2239.019032][ T2319] m920x_read = error: -19 [ 2239.031589][ T2319] dvb-usb: error while querying for an remote control event. [ 2239.157325][ T2319] m920x_read = error: -19 [ 2239.174898][ T2319] dvb-usb: error while querying for an remote control event. [ 2239.298135][ T2319] m920x_read = error: -19 [ 2239.314654][ T2319] dvb-usb: error while querying for an remote control event. [ 2239.421061][T22293] FAULT_INJECTION: forcing a failure. [ 2239.421061][T22293] name failslab, interval 1, probability 0, space 0, times 0 [ 2239.456973][ T2319] m920x_read = error: -19 [ 2239.462138][ T2319] dvb-usb: error while querying for an remote control event. [ 2239.472108][T22293] CPU: 1 UID: 0 PID: 22293 Comm: syz.2.16742 Tainted: G L syzkaller #0 PREEMPT(full) [ 2239.472136][T22293] Tainted: [L]=SOFTLOCKUP [ 2239.472143][T22293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2239.472155][T22293] Call Trace: [ 2239.472166][T22293] [ 2239.472172][T22293] dump_stack_lvl+0xe8/0x150 [ 2239.472197][T22293] should_fail_ex+0x40c/0x560 [ 2239.472217][T22293] should_failslab+0xa8/0x100 [ 2239.472239][T22293] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 2239.472257][T22293] ? local_lock_release+0x9c/0x160 [ 2239.472279][T22293] ? __alloc_skb+0x1d7/0x7a0 [ 2239.472289][T22293] ? __alloc_skb+0x1d7/0x7a0 [ 2239.472305][T22293] __alloc_skb+0x1d7/0x7a0 [ 2239.472325][T22293] netlink_sendmsg+0x5d4/0xb40 [ 2239.472348][T22293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2239.472365][T22293] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2239.472384][T22293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2239.472398][T22293] sock_sendmsg_nosec+0x13a/0x180 [ 2239.472419][T22293] ____sys_sendmsg+0x54e/0x850 [ 2239.472437][T22293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2239.472456][T22293] ? import_iovec+0x73/0xa0 [ 2239.472479][T22293] ___sys_sendmsg+0x2a5/0x360 [ 2239.472494][T22293] ? __lock_acquire+0x683/0x2cf0 [ 2239.472516][T22293] ? __pfx____sys_sendmsg+0x10/0x10 [ 2239.472551][T22293] ? __fget_files+0x2a/0x420 [ 2239.472569][T22293] ? __fget_files+0x3a2/0x420 [ 2239.472594][T22293] __x64_sys_sendmsg+0x1b1/0x290 [ 2239.472610][T22293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2239.472636][T22293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.472650][T22293] do_syscall_64+0x174/0x580 [ 2239.472665][T22293] ? trace_irq_disable+0x3b/0x140 [ 2239.472683][T22293] ? clear_bhb_loop+0x40/0x90 [ 2239.472699][T22293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.472712][T22293] RIP: 0033:0x7f0671d9de99 [ 2239.472725][T22293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2239.472737][T22293] RSP: 002b:00007f0672c88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2239.472751][T22293] RAX: ffffffffffffffda RBX: 00007f0672025fa0 RCX: 00007f0671d9de99 [ 2239.472761][T22293] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 2239.472770][T22293] RBP: 00007f0672c88090 R08: 0000000000000000 R09: 0000000000000000 [ 2239.472778][T22293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2239.472787][T22293] R13: 00007f0672026038 R14: 00007f0672025fa0 R15: 00007f067214fa48 [ 2239.472806][T22293] [ 2239.970158][T10611] m920x_read = error: -19 [ 2239.988219][T10611] dvb-usb: error while querying for an remote control event. [ 2240.127106][T10611] m920x_read = error: -19 [ 2240.138183][T10611] dvb-usb: error while querying for an remote control event. [ 2240.190975][T22306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16746'. [ 2240.266897][T10611] m920x_read = error: -19 [ 2240.272154][T10611] dvb-usb: error while querying for an remote control event. [ 2240.407281][T10611] m920x_read = error: -19 [ 2240.419484][T22316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16749'. [ 2240.423821][T10611] dvb-usb: error while querying for an remote control event. [ 2240.587424][T10611] m920x_read = error: -19 [ 2240.598827][T10611] dvb-usb: error while querying for an remote control event. [ 2240.649950][T22353] netlink: 164 bytes leftover after parsing attributes in process `syz.2.16752'. [ 2240.728722][T10611] m920x_read = error: -19 [ 2240.735245][T10611] dvb-usb: error while querying for an remote control event. [ 2240.766970][T10603] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2240.856904][T10611] m920x_read = error: -19 [ 2240.863505][T10611] dvb-usb: error while querying for an remote control event. [ 2240.930742][T10603] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2240.953333][T10603] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2240.978011][T10603] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2240.987749][T10611] m920x_read = error: -19 [ 2240.995049][T10611] dvb-usb: error while querying for an remote control event. [ 2241.016584][T10603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.041281][T10603] usb 2-1: config 0 descriptor?? [ 2241.060133][T10603] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2241.137126][ T2319] m920x_read = error: -19 [ 2241.146480][ T2319] dvb-usb: error while querying for an remote control event. [ 2241.258951][T10613] m920x_read = error: -19 [ 2241.279780][T10613] dvb-usb: error while querying for an remote control event. [ 2241.408928][T10613] m920x_read = error: -19 [ 2241.416116][T10613] dvb-usb: error while querying for an remote control event. [ 2241.439284][T10603] usb 2-1: USB disconnect, device number 79 [ 2241.538563][T10613] m920x_read = error: -19 [ 2241.549905][T10613] dvb-usb: error while querying for an remote control event. [ 2241.676993][T10613] m920x_read = error: -19 [ 2241.688359][T10613] dvb-usb: error while querying for an remote control event. [ 2241.827077][T10613] m920x_read = error: -19 [ 2241.837182][T10613] dvb-usb: error while querying for an remote control event. [ 2241.969054][T10613] m920x_read = error: -19 [ 2241.981458][T10613] dvb-usb: error while querying for an remote control event. [ 2242.117372][ T2319] m920x_read = error: -19 [ 2242.126495][ T2319] dvb-usb: error while querying for an remote control event. [ 2242.266941][ T2319] m920x_read = error: -19 [ 2242.272804][ T2319] dvb-usb: error while querying for an remote control event. [ 2242.397945][ T2319] m920x_read = error: -19 [ 2242.406138][ T2319] dvb-usb: error while querying for an remote control event. [ 2242.537172][ T2319] m920x_read = error: -19 [ 2242.542690][ T2319] dvb-usb: error while querying for an remote control event. [ 2242.657129][ T2319] m920x_read = error: -19 [ 2242.662626][ T2319] dvb-usb: error while querying for an remote control event. [ 2242.786995][T10611] m920x_read = error: -19 [ 2242.792415][T10611] dvb-usb: error while querying for an remote control event. [ 2242.906970][T10611] m920x_read = error: -19 [ 2242.911394][T10611] dvb-usb: error while querying for an remote control event. [ 2243.016991][ T2319] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2243.026965][T10611] m920x_read = error: -19 [ 2243.031818][T10611] dvb-usb: error while querying for an remote control event. [ 2243.159340][T10611] m920x_read = error: -19 [ 2243.169647][T10611] dvb-usb: error while querying for an remote control event. [ 2243.177465][ T2319] usb 4-1: Using ep0 maxpacket: 32 [ 2243.185806][ T2319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2243.194961][ T2319] usb 4-1: config 4 has an invalid interface number: 224 but max is 0 [ 2243.205033][ T2319] usb 4-1: config 4 has no interface number 0 [ 2243.211289][ T2319] usb 4-1: config 4 interface 224 has no altsetting 0 [ 2243.220592][ T2319] usb 4-1: New USB device found, idVendor=2040, idProduct=b210, bcdDevice=bc.da [ 2243.229851][ T2319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.246889][ T2319] usb 4-1: Product: syz [ 2243.254777][ T2319] usb 4-1: Manufacturer: syz [ 2243.261879][ T2319] usb 4-1: SerialNumber: syz [ 2243.297376][T10611] m920x_read = error: -19 [ 2243.302576][T10611] dvb-usb: error while querying for an remote control event. [ 2243.426956][T10611] m920x_read = error: -19 [ 2243.437109][T10611] dvb-usb: error while querying for an remote control event. [ 2243.556962][T10613] m920x_read = error: -19 [ 2243.561451][T10613] dvb-usb: error while querying for an remote control event. [ 2243.686940][T10613] m920x_read = error: -19 [ 2243.693123][ T2319] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in warm state. [ 2243.701185][T10613] dvb-usb: error while querying for an remote control event. [ 2243.709199][T10611] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2243.721052][ T2319] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2243.732297][ T2319] dvbdev: DVB: registering new adapter (Hauppauge ATSC MiniCard (B210)) [ 2243.741680][ T2319] usb 4-1: media controller created [ 2243.759533][ T2319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2243.827728][T10610] m920x_read = error: -19 [ 2243.832342][T10610] dvb-usb: error while querying for an remote control event. [ 2243.889589][T10611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2243.900888][T10611] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2243.907254][T22400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2243.911404][T10611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.928665][T22400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2243.937822][T10611] usb 3-1: config 0 descriptor?? [ 2243.946968][T10610] m920x_read = error: -19 [ 2243.951390][T10610] dvb-usb: error while querying for an remote control event. [ 2243.979783][T22400] netlink: 72 bytes leftover after parsing attributes in process `syz.3.16765'. [ 2244.089650][T10610] m920x_read = error: -19 [ 2244.094140][T10610] dvb-usb: error while querying for an remote control event. [ 2244.172254][T10611] usbhid 3-1:0.0: can't add hid device: -71 [ 2244.184457][T10611] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2244.205737][T10611] usb 3-1: USB disconnect, device number 80 [ 2244.227903][T10613] m920x_read = error: -19 [ 2244.237195][T10613] dvb-usb: error while querying for an remote control event. [ 2244.272623][ T2319] DVB: Unable to find symbol lgdt3305_attach() [ 2244.279038][ T2319] dvb-usb: no frontend was attached by 'Hauppauge ATSC MiniCard (B210)' [ 2244.287739][ T2319] dvb-usb: Hauppauge ATSC MiniCard (B210) successfully initialized and connected. [ 2244.315319][ T2319] usb 4-1: USB disconnect, device number 7 [ 2244.358286][T10613] m920x_read = error: -19 [ 2244.369086][T10613] dvb-usb: error while querying for an remote control event. [ 2244.402794][ T2319] dvb-usb: Hauppauge ATSC MiniCard (B210) successfully deinitialized and disconnected. [ 2244.506978][T10610] m920x_read = error: -19 [ 2244.513420][T10610] dvb-usb: error while querying for an remote control event. [ 2244.627483][ T2319] m920x_read = error: -19 [ 2244.633034][ T2319] dvb-usb: error while querying for an remote control event. [ 2244.687217][T10611] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2244.747969][T10610] m920x_read = error: -19 [ 2244.755896][T10610] dvb-usb: error while querying for an remote control event. [ 2244.789774][T22483] bridge0: port 2(bridge_slave_1) entered disabled state [ 2244.858169][T10611] usb 3-1: Using ep0 maxpacket: 32 [ 2244.867858][T10611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2244.879371][T20503] m920x_read = error: -19 [ 2244.885215][T20503] dvb-usb: error while querying for an remote control event. [ 2244.897619][T10611] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2244.907254][T10611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.918582][T10611] usb 3-1: config 0 descriptor?? [ 2244.939866][T22483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2244.956174][T10611] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2244.972417][T22483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2244.986728][T10611] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2245.017588][T10611] m920x_read = error: -19 [ 2245.022007][T10611] dvb-usb: error while querying for an remote control event. [ 2245.137143][T10610] m920x_read = error: -19 [ 2245.153767][T10610] dvb-usb: error while querying for an remote control event. [ 2245.254072][T22494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2245.277178][T10610] m920x_read = error: -19 [ 2245.283710][T10610] dvb-usb: error while querying for an remote control event. [ 2245.408763][T10610] m920x_read = error: -19 [ 2245.423100][T10610] dvb-usb: error while querying for an remote control event. [ 2245.557156][T10610] m920x_read = error: -19 [ 2245.581212][T10610] dvb-usb: error while querying for an remote control event. [ 2245.653998][T10603] usb 3-1: USB disconnect, device number 81 [ 2245.665622][T22511] FAULT_INJECTION: forcing a failure. [ 2245.665622][T22511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2245.678676][T10603] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 2245.685849][T22511] CPU: 1 UID: 0 PID: 22511 Comm: syz.3.16778 Tainted: G L syzkaller #0 PREEMPT(full) [ 2245.685874][T22511] Tainted: [L]=SOFTLOCKUP [ 2245.685881][T22511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2245.685890][T22511] Call Trace: [ 2245.685897][T22511] [ 2245.685908][T22511] dump_stack_lvl+0xe8/0x150 [ 2245.685937][T22511] should_fail_ex+0x40c/0x560 [ 2245.685970][T22511] _copy_to_iter+0x404/0x1810 [ 2245.686004][T22511] ? __pfx__copy_to_iter+0x10/0x10 [ 2245.686028][T22511] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2245.686055][T22511] ? lockdep_hardirqs_on+0x7a/0x110 [ 2245.686073][T22511] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2245.686099][T22511] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 2245.686123][T22511] __skb_datagram_iter+0xf8/0x980 [ 2245.686142][T22511] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 2245.686165][T22511] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 2245.686194][T22511] skb_copy_datagram_iter+0xb5/0x240 [ 2245.686220][T22511] netlink_recvmsg+0x2b9/0xa50 [ 2245.686251][T22511] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2245.686277][T22511] ? __lock_acquire+0x683/0x2cf0 [ 2245.686302][T22511] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2245.686324][T22511] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2245.686344][T22511] ? security_socket_recvmsg+0x7e/0x2c0 [ 2245.686368][T22511] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2245.686390][T22511] sock_recvmsg+0x196/0x1e0 [ 2245.686417][T22511] ____sys_recvmsg+0x1e6/0x4a0 [ 2245.686447][T22511] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2245.686482][T22511] ? import_iovec+0x73/0xa0 [ 2245.686530][T22511] ___sys_recvmsg+0x213/0x5a0 [ 2245.686558][T22511] ? __pfx____sys_recvmsg+0x10/0x10 [ 2245.686584][T22511] ? __fget_files+0x2a/0x420 [ 2245.686628][T22511] ? __fget_files+0x3a2/0x420 [ 2245.686664][T22511] do_recvmmsg+0x31a/0x7f0 [ 2245.686696][T22511] ? __pfx_do_recvmmsg+0x10/0x10 [ 2245.686730][T22511] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2245.686754][T22511] ? __fget_files+0x3a2/0x420 [ 2245.686790][T22511] __x64_sys_recvmmsg+0x198/0x250 [ 2245.686816][T22511] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2245.686848][T22511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2245.686869][T22511] do_syscall_64+0x174/0x580 [ 2245.686890][T22511] ? trace_irq_disable+0x3b/0x140 [ 2245.686916][T22511] ? clear_bhb_loop+0x40/0x90 [ 2245.686940][T22511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2245.686968][T22511] RIP: 0033:0x7ff40939de99 [ 2245.686985][T22511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2245.687002][T22511] RSP: 002b:00007ff40a1e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2245.687023][T22511] RAX: ffffffffffffffda RBX: 00007ff409625fa0 RCX: 00007ff40939de99 [ 2245.687038][T22511] RDX: 0000000000000300 RSI: 0000200000001640 RDI: 0000000000000003 [ 2245.687050][T22511] RBP: 00007ff40a1e3090 R08: 0000000000000000 R09: 0000000000000000 [ 2245.687063][T22511] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000001 [ 2245.687074][T22511] R13: 00007ff409626038 R14: 00007ff409625fa0 R15: 00007ff40974fa48 [ 2245.687104][T22511] [ 2245.750038][T10610] m920x_read = error: -19 [ 2245.837176][T10601] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2245.841481][T10610] dvb-usb: error while querying for an remote control event. [ 2246.010273][T10601] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2246.022388][T10601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.031660][T10601] usb 2-1: Product: syz [ 2246.035999][T10601] usb 2-1: Manufacturer: syz [ 2246.040771][T10601] usb 2-1: SerialNumber: syz [ 2246.067013][T10603] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2246.117237][T10610] m920x_read = error: -19 [ 2246.121754][T10610] dvb-usb: error while querying for an remote control event. [ 2246.241532][T10610] m920x_read = error: -19 [ 2246.252542][T10610] dvb-usb: error while querying for an remote control event. [ 2246.382205][T10611] m920x_read = error: -19 [ 2246.386817][T10611] dvb-usb: error while querying for an remote control event. [ 2246.509709][T10611] m920x_read = error: -19 [ 2246.514347][T10611] dvb-usb: error while querying for an remote control event. [ 2246.631822][T10611] m920x_read = error: -19 [ 2246.652895][T10611] dvb-usb: error while querying for an remote control event. [ 2246.778269][ T2319] m920x_read = error: -19 [ 2246.790153][ T2319] dvb-usb: error while querying for an remote control event. [ 2246.801911][T22503] syzkaller0: entered promiscuous mode [ 2246.814527][T22503] syzkaller0: entered allmulticast mode [ 2246.917002][T10610] m920x_read = error: -19 [ 2246.921574][T10610] dvb-usb: error while querying for an remote control event. [ 2247.046909][T10610] m920x_read = error: -19 [ 2247.052566][T10610] dvb-usb: error while querying for an remote control event. [ 2247.085603][T10610] usb 2-1: USB disconnect, device number 80 [ 2247.113518][T22556] kvm: kvm [22555]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffffffff0000000a [ 2247.177457][ T2319] m920x_read = error: -19 [ 2247.185022][ T2319] dvb-usb: error while querying for an remote control event. [ 2247.307770][ T2319] m920x_read = error: -19 [ 2247.315566][ T2319] dvb-usb: error while querying for an remote control event. [ 2247.407116][T10603] usb 2-1: Service connection timeout for: 256 [ 2247.414327][T10603] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2247.437040][ T2319] m920x_read = error: -19 [ 2247.447355][ T2319] dvb-usb: error while querying for an remote control event. [ 2247.452952][T10603] ath9k_htc: Failed to initialize the device [ 2247.479946][T10610] usb 2-1: ath9k_htc: USB layer deinitialized [ 2247.577703][ T2319] m920x_read = error: -19 [ 2247.586823][ T2319] dvb-usb: error while querying for an remote control event. [ 2247.718438][T22575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16786'. [ 2247.733757][T10610] m920x_read = error: -19 [ 2247.742446][T10610] dvb-usb: error while querying for an remote control event. [ 2247.869518][T10610] m920x_read = error: -19 [ 2247.892684][T10610] dvb-usb: error while querying for an remote control event. [ 2248.057870][T10611] m920x_read = error: -19 [ 2248.072808][T10611] dvb-usb: error while querying for an remote control event. [ 2248.197193][ T2319] m920x_read = error: -19 [ 2248.201690][ T2319] dvb-usb: error while querying for an remote control event. [ 2248.236976][T10610] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 2248.327636][ T2319] m920x_read = error: -19 [ 2248.332054][ T2319] dvb-usb: error while querying for an remote control event. [ 2248.366897][T10610] usb 2-1: device descriptor read/64, error -71 [ 2248.457499][T10611] m920x_read = error: -19 [ 2248.476310][T10611] dvb-usb: error while querying for an remote control event. [ 2248.597323][T10611] m920x_read = error: -19 [ 2248.601792][T10611] dvb-usb: error while querying for an remote control event. [ 2248.637214][T10610] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 2248.738992][T10611] m920x_read = error: -19 [ 2248.763532][T10611] dvb-usb: error while querying for an remote control event. [ 2248.806928][T10610] usb 2-1: device descriptor read/64, error -71 [ 2248.887047][ T2319] m920x_read = error: -19 [ 2248.887073][ T2319] dvb-usb: error while querying for an remote control event. [ 2248.927249][T10610] usb usb2-port1: attempt power cycle [ 2249.007048][ T2319] m920x_read = error: -19 [ 2249.012580][ T2319] dvb-usb: error while querying for an remote control event. [ 2249.146974][ T2319] m920x_read = error: -19 [ 2249.170183][ T2319] dvb-usb: error while querying for an remote control event. [ 2249.307437][T10610] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 2249.387598][T10610] usb 2-1: device descriptor read/8, error -71 [ 2249.426931][T10611] m920x_read = error: -19 [ 2249.439285][T10611] dvb-usb: error while querying for an remote control event. [ 2249.618340][ T2319] m920x_read = error: -19 [ 2249.624242][ T2319] dvb-usb: error while querying for an remote control event. [ 2249.674283][T22631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2249.686956][T10610] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 2249.719400][T10610] usb 2-1: device descriptor read/8, error -71 [ 2249.760931][ T2319] m920x_read = error: -19 [ 2249.780472][ T2319] dvb-usb: error while querying for an remote control event. [ 2249.852806][T10610] usb usb2-port1: unable to enumerate USB device [ 2249.907782][T10610] m920x_read = error: -19 [ 2249.912251][T10610] dvb-usb: error while querying for an remote control event. [ 2250.036979][T10610] m920x_read = error: -19 [ 2250.041405][T10610] dvb-usb: error while querying for an remote control event. [ 2250.114679][T22640] FAULT_INJECTION: forcing a failure. [ 2250.114679][T22640] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.128583][T22640] CPU: 0 UID: 0 PID: 22640 Comm: syz.2.16796 Tainted: G L syzkaller #0 PREEMPT(full) [ 2250.128614][T22640] Tainted: [L]=SOFTLOCKUP [ 2250.128621][T22640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2250.128633][T22640] Call Trace: [ 2250.128641][T22640] [ 2250.128650][T22640] dump_stack_lvl+0xe8/0x150 [ 2250.128684][T22640] should_fail_ex+0x40c/0x560 [ 2250.128715][T22640] should_failslab+0xa8/0x100 [ 2250.128747][T22640] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 2250.128772][T22640] ? local_lock_release+0x9c/0x160 [ 2250.128804][T22640] ? __alloc_skb+0x1d7/0x7a0 [ 2250.128824][T22640] ? __alloc_skb+0x1d7/0x7a0 [ 2250.128848][T22640] __alloc_skb+0x1d7/0x7a0 [ 2250.128871][T22640] netlink_sendmsg+0x5d4/0xb40 [ 2250.128904][T22640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2250.128931][T22640] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2250.128959][T22640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2250.128980][T22640] sock_sendmsg_nosec+0x13a/0x180 [ 2250.129011][T22640] ____sys_sendmsg+0x54e/0x850 [ 2250.129038][T22640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2250.129075][T22640] ? import_iovec+0x73/0xa0 [ 2250.129109][T22640] ___sys_sendmsg+0x2a5/0x360 [ 2250.129130][T22640] ? __lock_acquire+0x683/0x2cf0 [ 2250.129162][T22640] ? __pfx____sys_sendmsg+0x10/0x10 [ 2250.129218][T22640] ? __fget_files+0x2a/0x420 [ 2250.129244][T22640] ? __fget_files+0x3a2/0x420 [ 2250.129280][T22640] __x64_sys_sendmsg+0x1b1/0x290 [ 2250.129305][T22640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2250.129353][T22640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2250.129374][T22640] do_syscall_64+0x174/0x580 [ 2250.129394][T22640] ? trace_irq_disable+0x3b/0x140 [ 2250.129419][T22640] ? clear_bhb_loop+0x40/0x90 [ 2250.129442][T22640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2250.129461][T22640] RIP: 0033:0x7f0671d9de99 [ 2250.129479][T22640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2250.129496][T22640] RSP: 002b:00007f0672c88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2250.129515][T22640] RAX: ffffffffffffffda RBX: 00007f0672025fa0 RCX: 00007f0671d9de99 [ 2250.129530][T22640] RDX: 0000000000004004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 2250.129542][T22640] RBP: 00007f0672c88090 R08: 0000000000000000 R09: 0000000000000000 [ 2250.129554][T22640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2250.129564][T22640] R13: 00007f0672026038 R14: 00007f0672025fa0 R15: 00007f067214fa48 [ 2250.129594][T22640] [ 2250.239579][T22536] Set syz1 is full, maxelem 65536 reached [ 2250.257296][T10610] m920x_read = error: -19 [ 2250.394801][T10610] dvb-usb: error while querying for an remote control event. [ 2250.470462][T22644] fuse: Unknown parameter 'Fe' [ 2250.506983][T10610] m920x_read = error: -19 [ 2250.511511][T10610] dvb-usb: error while querying for an remote control event. [ 2250.636962][T10610] m920x_read = error: -19 [ 2250.641448][T10610] dvb-usb: error while querying for an remote control event. [ 2250.757235][T10610] m920x_read = error: -19 [ 2250.761695][T10610] dvb-usb: error while querying for an remote control event. [ 2250.782017][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16803'. [ 2250.787227][T10603] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 2250.851545][T22667] ipvlan2: entered promiscuous mode [ 2250.858597][T22667] ipvlan2: entered allmulticast mode [ 2250.864306][T22667] bridge0: entered allmulticast mode [ 2250.876953][T10610] m920x_read = error: -19 [ 2250.881399][T10610] dvb-usb: error while querying for an remote control event. [ 2250.949240][T10603] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2250.960250][T10603] usb 4-1: not running at top speed; connect to a high speed hub [ 2250.970141][T10603] usb 4-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 2250.980874][T10603] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2250.992476][T10603] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2251.008048][T10610] m920x_read = error: -19 [ 2251.013482][T10603] usb 4-1: string descriptor 0 read error: -22 [ 2251.020296][T10603] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 2251.022683][T10610] dvb-usb: error while querying for an remote control event. [ 2251.037235][T10603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.167088][T10611] m920x_read = error: -19 [ 2251.176907][T10611] dvb-usb: error while querying for an remote control event. [ 2251.297086][T10610] m920x_read = error: -19 [ 2251.301576][T10610] dvb-usb: error while querying for an remote control event. [ 2251.416919][T10610] m920x_read = error: -19 [ 2251.423237][T10610] dvb-usb: error while querying for an remote control event. [ 2251.454613][T22650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16801'. [ 2251.465870][T10603] usb 4-1: unable to issue vendor read request (ret = -71) [ 2251.486985][T10611] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 2251.495406][T10603] usb 4-1: unable to issue vendor read request (ret = -71) [ 2251.513680][T10603] usb 4-1: unable to issue vendor read request (ret = -71) [ 2251.538696][T10610] m920x_read = error: -19 [ 2251.544081][T10610] dvb-usb: error while querying for an remote control event. [ 2251.635126][T10603] usb 4-1: USB disconnect, device number 8 [ 2251.667181][T10610] m920x_read = error: -19 [ 2251.673538][T10610] dvb-usb: error while querying for an remote control event. [ 2251.686149][T10611] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 2251.702793][T10611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2251.713741][T10611] usb 2-1: config 0 has no interface number 0 [ 2251.723561][T10611] usb 2-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2251.745274][T10611] usb 2-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2251.773902][T10611] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 2251.791119][T10611] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 2251.805440][T10611] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 2251.807114][T10610] m920x_read = error: -19 [ 2251.823708][T10611] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2251.834949][T10610] dvb-usb: error while querying for an remote control event. [ 2251.844083][T10611] usb 2-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 2251.863683][T10611] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 2251.901857][T10611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.935352][T10611] usb 2-1: config 0 descriptor?? [ 2251.947719][T22682] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2251.967245][T10610] m920x_read = error: -19 [ 2251.971697][T10610] dvb-usb: error while querying for an remote control event. [ 2252.097105][T10610] m920x_read = error: -19 [ 2252.102652][T10610] dvb-usb: error while querying for an remote control event. [ 2252.147324][T22714] program syz.3.16809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2252.169872][T10611] usb 2-1: string descriptor 0 read error: -71 [ 2252.204876][T10611] cypress_m8 2-1:0.244: DeLorme Earthmate USB converter detected [ 2252.227164][T10610] m920x_read = error: -19 [ 2252.231678][T10610] dvb-usb: error while querying for an remote control event. [ 2252.243244][T10611] earthmate ttyUSB0: required endpoint is missing [ 2252.278936][T10611] usb 2-1: USB disconnect, device number 85 [ 2252.307722][T10611] cypress_m8 2-1:0.244: device disconnected [ 2252.366943][T10610] m920x_read = error: -19 [ 2252.377821][T10610] dvb-usb: error while querying for an remote control event. [ 2252.472247][T22731] netlink: 'syz.3.16811': attribute type 1 has an invalid length. [ 2252.506959][T10610] m920x_read = error: -19 [ 2252.524669][T10610] dvb-usb: error while querying for an remote control event. [ 2252.586686][T22761] netlink: 'syz.3.16811': attribute type 10 has an invalid length. [ 2252.599001][T22761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16811'. [ 2252.644835][T22731] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2252.658965][T10610] m920x_read = error: -19 [ 2252.682807][T10610] dvb-usb: error while querying for an remote control event. [ 2252.807350][T10610] m920x_read = error: -19 [ 2252.822348][T10610] dvb-usb: error while querying for an remote control event. [ 2252.956998][T10610] m920x_read = error: -19 [ 2252.961633][T10610] dvb-usb: error while querying for an remote control event. [ 2253.078838][T20217] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2253.087155][T10610] m920x_read = error: -19 [ 2253.095038][T10610] dvb-usb: error while querying for an remote control event. [ 2253.227416][T10610] m920x_read = error: -19 [ 2253.233513][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2253.235265][T10610] dvb-usb: error while querying for an remote control event. [ 2253.258402][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2253.267493][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2253.276470][T20217] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2253.289158][T20217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.298068][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2253.305659][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2253.315242][T20217] usb 2-1: config 0 descriptor?? [ 2253.367054][T10610] m920x_read = error: -19 [ 2253.371611][T10610] dvb-usb: error while querying for an remote control event. [ 2253.496979][T10610] m920x_read = error: -19 [ 2253.509610][T10610] dvb-usb: error while querying for an remote control event. [ 2253.605477][T22856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16814'. [ 2253.628559][T10610] m920x_read = error: -19 [ 2253.641839][T10610] dvb-usb: error while querying for an remote control event. [ 2253.706095][T20217] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2253.715792][T20217] [drm:udl_init] *ERROR* Selecting channel failed [ 2253.778265][T10610] m920x_read = error: -19 [ 2253.784652][T20217] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 2253.792854][T20217] [drm] Initialized udl on minor 2 [ 2253.798584][T10610] dvb-usb: error while querying for an remote control event. [ 2253.817590][T20217] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2253.875323][T20217] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2253.924382][T20217] usb 2-1: USB disconnect, device number 86 [ 2253.931342][T10604] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 2253.937582][T10610] m920x_read = error: -19 [ 2253.960452][T10610] dvb-usb: error while querying for an remote control event. [ 2253.968613][T10604] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2254.087993][T10610] m920x_read = error: -19 [ 2254.105633][T10610] dvb-usb: error while querying for an remote control event. [ 2254.169355][T22812] bridge0: port 1(bridge_slave_0) entered blocking state [ 2254.176757][T22812] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.184135][T22812] bridge_slave_0: entered allmulticast mode [ 2254.192656][T22812] bridge_slave_0: entered promiscuous mode [ 2254.209808][T22812] bridge0: port 2(bridge_slave_1) entered blocking state [ 2254.217877][T22812] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.225058][T22812] bridge_slave_1: entered allmulticast mode [ 2254.232934][T22812] bridge_slave_1: entered promiscuous mode [ 2254.246938][ T2319] m920x_read = error: -19 [ 2254.252814][ T2319] dvb-usb: error while querying for an remote control event. [ 2254.332368][T22812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2254.352474][T22812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2254.387362][T10610] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2254.423367][T10611] m920x_read = error: -19 [ 2254.445858][T10611] dvb-usb: error while querying for an remote control event. [ 2254.530342][T22812] team0: Port device team_slave_0 added [ 2254.540101][T22812] team0: Port device team_slave_1 added [ 2254.561746][T10610] usb 3-1: device descriptor read/64, error -71 [ 2254.610518][ T2319] m920x_read = error: -19 [ 2254.629232][ T2319] dvb-usb: error while querying for an remote control event. [ 2254.685381][T22812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2254.704248][T22812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2254.747627][T22812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2254.768095][T10611] m920x_read = error: -19 [ 2254.772511][T10611] dvb-usb: error while querying for an remote control event. [ 2254.790324][T23029] ipvlan2: entered promiscuous mode [ 2254.799127][T23029] ipvlan2: entered allmulticast mode [ 2254.809614][T23029] bridge0: entered allmulticast mode [ 2254.845723][T22812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2254.853228][T22812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2254.879412][T10610] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2254.887408][T22812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2254.898456][T10611] m920x_read = error: -19 [ 2254.903814][T10611] dvb-usb: error while querying for an remote control event. [ 2255.016140][T22812] hsr_slave_0: entered promiscuous mode [ 2255.027348][T10611] m920x_read = error: -19 [ 2255.031913][T10610] usb 3-1: device descriptor read/64, error -71 [ 2255.038381][T10611] dvb-usb: error while querying for an remote control event. [ 2255.046058][T22812] hsr_slave_1: entered promiscuous mode [ 2255.157702][T10610] usb usb3-port1: attempt power cycle [ 2255.173091][T10611] m920x_read = error: -19 [ 2255.193077][T10611] dvb-usb: error while querying for an remote control event. [ 2255.327035][ T2319] m920x_read = error: -19 [ 2255.384083][ T2319] dvb-usb: error while querying for an remote control event. [ 2255.418509][ T51] Bluetooth: hci0: command tx timeout [ 2255.507659][ T2319] m920x_read = error: -19 [ 2255.518415][T10610] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2255.526642][ T2319] dvb-usb: error while querying for an remote control event. [ 2255.557601][T10610] usb 3-1: device descriptor read/8, error -71 [ 2255.657173][ T2319] m920x_read = error: -19 [ 2255.665742][ T2319] dvb-usb: error while querying for an remote control event. [ 2255.797050][T20503] m920x_read = error: -19 [ 2255.803898][T20503] dvb-usb: error while querying for an remote control event. [ 2255.817168][T10610] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2255.878047][T10610] usb 3-1: device descriptor read/8, error -71 [ 2255.946950][T20503] m920x_read = error: -19 [ 2255.954845][T20503] dvb-usb: error while querying for an remote control event. [ 2255.998139][T10610] usb usb3-port1: unable to enumerate USB device [ 2256.086975][T10610] m920x_read = error: -19 [ 2256.100344][T10610] dvb-usb: error while querying for an remote control event. [ 2256.226917][T10610] m920x_read = error: -19 [ 2256.234528][T10610] dvb-usb: error while querying for an remote control event. [ 2256.345648][T22812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2256.357220][T10610] m920x_read = error: -19 [ 2256.365913][T10610] dvb-usb: error while querying for an remote control event. [ 2256.371015][T22812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2256.383713][T22812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2256.398337][T22812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2256.412366][T22812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2256.433729][T22812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2256.449088][T22812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2256.466157][T22812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2256.496963][T10610] m920x_read = error: -19 [ 2256.506185][T10610] dvb-usb: error while querying for an remote control event. [ 2256.638678][T22812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2256.647587][T10610] m920x_read = error: -19 [ 2256.666711][T10610] dvb-usb: error while querying for an remote control event. [ 2256.692386][T22812] 8021q: adding VLAN 0 to HW filter on device team0 [ 2256.715896][T17277] bridge0: port 1(bridge_slave_0) entered blocking state [ 2256.723090][T17277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2256.734991][T17277] bridge0: port 2(bridge_slave_1) entered blocking state [ 2256.742111][T17277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2256.837484][T10610] m920x_read = error: -19 [ 2256.846405][T10610] dvb-usb: error while querying for an remote control event. [ 2256.905822][T22812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2256.977087][T10610] m920x_read = error: -19 [ 2256.993142][T10610] dvb-usb: error while querying for an remote control event. [ 2257.063674][T22812] veth0_vlan: entered promiscuous mode [ 2257.108769][T23182] FAULT_INJECTION: forcing a failure. [ 2257.108769][T23182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2257.117426][T10610] m920x_read = error: -19 [ 2257.133803][T22812] veth1_vlan: entered promiscuous mode [ 2257.166704][T10610] dvb-usb: error while querying for an remote control event. [ 2257.179856][T23182] CPU: 1 UID: 0 PID: 23182 Comm: syz.1.16828 Tainted: G L syzkaller #0 PREEMPT(full) [ 2257.179887][T23182] Tainted: [L]=SOFTLOCKUP [ 2257.179895][T23182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2257.179907][T23182] Call Trace: [ 2257.179915][T23182] [ 2257.179924][T23182] dump_stack_lvl+0xe8/0x150 [ 2257.179960][T23182] should_fail_ex+0x40c/0x560 [ 2257.179991][T23182] _copy_from_iter+0x1d3/0x1660 [ 2257.180029][T23182] ? rcu_is_watching+0x15/0xb0 [ 2257.180050][T23182] ? __pfx__copy_from_iter+0x10/0x10 [ 2257.180076][T23182] ? trace_kmalloc+0x2a/0xf0 [ 2257.180105][T23182] ? __kmalloc_noprof+0x396/0x720 [ 2257.180130][T23182] ? vfs_write+0x22b/0xba0 [ 2257.180147][T23182] ? __kmalloc_noprof+0x1ad/0x720 [ 2257.180173][T23182] ? kernfs_fop_write_iter+0x157/0x540 [ 2257.180203][T23182] kernfs_fop_write_iter+0x19a/0x540 [ 2257.180231][T23182] vfs_write+0x612/0xba0 [ 2257.180259][T23182] ? __pfx_vfs_write+0x10/0x10 [ 2257.180289][T23182] ? __fget_files+0x2a/0x420 [ 2257.180334][T23182] ksys_write+0x150/0x270 [ 2257.180368][T23182] ? __pfx_ksys_write+0x10/0x10 [ 2257.180394][T23182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2257.180416][T23182] do_syscall_64+0x174/0x580 [ 2257.180437][T23182] ? trace_irq_disable+0x3b/0x140 [ 2257.180460][T23182] ? clear_bhb_loop+0x40/0x90 [ 2257.180484][T23182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2257.180503][T23182] RIP: 0033:0x7f1fc779de99 [ 2257.180521][T23182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2257.180537][T23182] RSP: 002b:00007f1fc59f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2257.180556][T23182] RAX: ffffffffffffffda RBX: 00007f1fc7a25fa0 RCX: 00007f1fc779de99 [ 2257.180570][T23182] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000005 [ 2257.180581][T23182] RBP: 00007f1fc59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2257.180593][T23182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2257.180604][T23182] R13: 00007f1fc7a26038 R14: 00007f1fc7a25fa0 R15: 00007f1fc7b4fa48 [ 2257.180637][T23182] [ 2257.460750][T23187] FAULT_INJECTION: forcing a failure. [ 2257.460750][T23187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2257.489193][ T51] Bluetooth: hci0: command tx timeout [ 2257.507016][T23187] CPU: 0 UID: 0 PID: 23187 Comm: syz.2.16829 Tainted: G L syzkaller #0 PREEMPT(full) [ 2257.507043][T23187] Tainted: [L]=SOFTLOCKUP [ 2257.507050][T23187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2257.507060][T23187] Call Trace: [ 2257.507068][T23187] [ 2257.507076][T23187] dump_stack_lvl+0xe8/0x150 [ 2257.507113][T23187] should_fail_ex+0x40c/0x560 [ 2257.507134][T23187] _copy_from_user+0x2d/0xb0 [ 2257.507148][T23187] __copy_msghdr+0x390/0x590 [ 2257.507167][T23187] ___sys_sendmsg+0x213/0x360 [ 2257.507182][T23187] ? __lock_acquire+0x683/0x2cf0 [ 2257.507204][T23187] ? __pfx____sys_sendmsg+0x10/0x10 [ 2257.507240][T23187] ? __fget_files+0x2a/0x420 [ 2257.507258][T23187] ? __fget_files+0x3a2/0x420 [ 2257.507283][T23187] __x64_sys_sendmsg+0x1b1/0x290 [ 2257.507299][T23187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2257.507325][T23187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2257.507342][T23187] do_syscall_64+0x174/0x580 [ 2257.507356][T23187] ? trace_irq_disable+0x3b/0x140 [ 2257.507374][T23187] ? clear_bhb_loop+0x40/0x90 [ 2257.507390][T23187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2257.507403][T23187] RIP: 0033:0x7f0671d9de99 [ 2257.507417][T23187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2257.507428][T23187] RSP: 002b:00007f0672c88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2257.507443][T23187] RAX: ffffffffffffffda RBX: 00007f0672025fa0 RCX: 00007f0671d9de99 [ 2257.507452][T23187] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2257.507461][T23187] RBP: 00007f0672c88090 R08: 0000000000000000 R09: 0000000000000000 [ 2257.507469][T23187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2257.507477][T23187] R13: 00007f0672026038 R14: 00007f0672025fa0 R15: 00007f067214fa48 [ 2257.507497][T23187] [ 2257.703553][T10610] m920x_read = error: -19 [ 2257.707983][T10610] dvb-usb: error while querying for an remote control event. [ 2257.774383][T22812] veth0_macvtap: entered promiscuous mode [ 2257.821924][T10610] m920x_read = error: -19 [ 2257.826347][T10610] dvb-usb: error while querying for an remote control event. [ 2257.842597][T22812] veth1_macvtap: entered promiscuous mode [ 2257.879329][T23192] netlink: 'syz.2.16831': attribute type 1 has an invalid length. [ 2257.937197][ T2319] m920x_read = error: -19 [ 2257.941734][ T2319] dvb-usb: error while querying for an remote control event. [ 2258.003606][T23192] bond3: entered promiscuous mode [ 2258.020661][T23192] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2258.057040][ T2319] m920x_read = error: -19 [ 2258.066557][ T2319] dvb-usb: error while querying for an remote control event. [ 2258.103379][T23228] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2258.146943][T23228] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 2258.202946][T23228] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 2258.212566][ T2319] m920x_read = error: -19 [ 2258.218834][ T2319] dvb-usb: error while querying for an remote control event. [ 2258.324102][T23214] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2258.345003][ T2319] m920x_read = error: -19 [ 2258.355079][ T2319] dvb-usb: error while querying for an remote control event. [ 2258.368993][T23214] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 2258.428581][T22812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2258.487158][ T2319] m920x_read = error: -19 [ 2258.500916][ T2319] dvb-usb: error while querying for an remote control event. [ 2258.530152][T22812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2258.582394][T17274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.613331][T17274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.651348][T17274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.666967][ T2319] m920x_read = error: -19 [ 2258.679304][T17274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.688550][ T2319] dvb-usb: error while querying for an remote control event. [ 2258.807446][ T2319] m920x_read = error: -19 [ 2258.834293][ T2319] dvb-usb: error while querying for an remote control event. [ 2258.979120][T10611] m920x_read = error: -19 [ 2258.983733][T10611] dvb-usb: error while querying for an remote control event. [ 2259.016962][T10610] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2259.107253][T10611] m920x_read = error: -19 [ 2259.122767][T23274] trusted_key: encrypted_key: master key parameter 'äefault' is invalid [ 2259.127323][T17274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2259.141089][T10611] dvb-usb: error while querying for an remote control event. [ 2259.161673][T17274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2259.197040][T10610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2259.222717][T10610] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2259.235929][T10610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.254521][T10610] usb 3-1: config 0 descriptor?? [ 2259.267411][T10611] m920x_read = error: -19 [ 2259.273556][T17268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2259.280807][T10611] dvb-usb: error while querying for an remote control event. [ 2259.282696][T17268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2259.417058][T23257] m920x_read = error: -19 [ 2259.421575][T23257] dvb-usb: error while querying for an remote control event. [ 2259.477726][T10610] usbhid 3-1:0.0: can't add hid device: -71 [ 2259.485447][T10610] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2259.499976][T10610] usb 3-1: USB disconnect, device number 86 [ 2259.537027][T23257] m920x_read = error: -19 [ 2259.541493][T23257] dvb-usb: error while querying for an remote control event. [ 2259.567237][ T51] Bluetooth: hci0: command tx timeout [ 2259.629638][T10611] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 2259.659007][T23257] m920x_read = error: -19 [ 2259.663629][T23257] dvb-usb: error while querying for an remote control event. [ 2259.766931][T10611] usb 4-1: device descriptor read/64, error -71 [ 2259.777326][T10610] m920x_read = error: -19 [ 2259.781715][T10610] dvb-usb: error while querying for an remote control event. [ 2259.896992][T10610] m920x_read = error: -19 [ 2259.901393][T10610] dvb-usb: error while querying for an remote control event. [ 2259.916934][T23257] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2260.007652][T10611] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 2260.028232][T10610] m920x_read = error: -19 [ 2260.033071][T10610] dvb-usb: error while querying for an remote control event. [ 2260.048781][T23338] FAULT_INJECTION: forcing a failure. [ 2260.048781][T23338] name failslab, interval 1, probability 0, space 0, times 0 [ 2260.063019][T23338] CPU: 1 UID: 0 PID: 23338 Comm: syz.1.16846 Tainted: G L syzkaller #0 PREEMPT(full) [ 2260.063043][T23338] Tainted: [L]=SOFTLOCKUP [ 2260.063055][T23338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2260.063065][T23338] Call Trace: [ 2260.063071][T23338] [ 2260.063078][T23338] dump_stack_lvl+0xe8/0x150 [ 2260.063106][T23338] should_fail_ex+0x40c/0x560 [ 2260.063131][T23338] should_failslab+0xa8/0x100 [ 2260.063172][T23338] __kmalloc_noprof+0xfe/0x720 [ 2260.063193][T23338] ? tomoyo_encode+0x2ad/0x570 [ 2260.063220][T23338] ? tomoyo_encode+0x2ad/0x570 [ 2260.063240][T23338] tomoyo_encode+0x2ad/0x570 [ 2260.063263][T23338] tomoyo_realpath_from_path+0x5fa/0x640 [ 2260.063286][T23338] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2260.063326][T23338] tomoyo_path_number_perm+0x246/0x5f0 [ 2260.063371][T23338] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2260.063396][T23338] ? __lock_acquire+0x683/0x2cf0 [ 2260.063431][T23338] ? hook_file_ioctl+0x1f0/0x5f0 [ 2260.063460][T23338] ? __fget_files+0x2a/0x420 [ 2260.063485][T23338] ? __fget_files+0x2a/0x420 [ 2260.063506][T23338] ? __fget_files+0x3a2/0x420 [ 2260.063526][T23338] ? __fget_files+0x2a/0x420 [ 2260.063552][T23338] security_file_ioctl+0xc3/0x2a0 [ 2260.063578][T23338] __se_sys_ioctl+0x47/0x170 [ 2260.063595][T23338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.063612][T23338] do_syscall_64+0x174/0x580 [ 2260.063629][T23338] ? trace_irq_disable+0x3b/0x140 [ 2260.063651][T23338] ? clear_bhb_loop+0x40/0x90 [ 2260.063670][T23338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.063686][T23338] RIP: 0033:0x7f1fc779de99 [ 2260.063701][T23338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2260.063715][T23338] RSP: 002b:00007f1fc59f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2260.063731][T23338] RAX: ffffffffffffffda RBX: 00007f1fc7a25fa0 RCX: 00007f1fc779de99 [ 2260.063743][T23338] RDX: 00002000000001c0 RSI: 000000004020565b RDI: 0000000000000003 [ 2260.063754][T23338] RBP: 00007f1fc59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2260.063764][T23338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2260.063773][T23338] R13: 00007f1fc7a26038 R14: 00007f1fc7a25fa0 R15: 00007f1fc7b4fa48 [ 2260.063797][T23338] [ 2260.064139][T23338] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2260.067148][T23257] usb 3-1: Using ep0 maxpacket: 32 [ 2260.307110][T10610] m920x_read = error: -19 [ 2260.311522][T10610] dvb-usb: error while querying for an remote control event. [ 2260.321836][T23257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2260.335230][T23257] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2260.344461][T23257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2260.355608][T23257] usb 3-1: config 0 descriptor?? [ 2260.365646][T23257] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2260.376858][T10611] usb 4-1: device descriptor read/64, error -71 [ 2260.383622][T23257] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2260.427329][T23257] m920x_read = error: -19 [ 2260.436945][T23257] dvb-usb: error while querying for an remote control event. [ 2260.487214][T10611] usb usb4-port1: attempt power cycle [ 2260.546912][T23257] m920x_read = error: -19 [ 2260.551521][T23257] dvb-usb: error while querying for an remote control event. [ 2260.562382][T23350] IPVS: You probably need to specify IP address on multicast interface. [ 2260.578878][T23350] IPVS: Error connecting to the multicast addr [ 2260.666918][T23257] m920x_read = error: -19 [ 2260.671552][T23257] dvb-usb: error while querying for an remote control event. [ 2260.696066][T23376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2260.787028][ T2319] m920x_read = error: -19 [ 2260.791492][ T2319] dvb-usb: error while querying for an remote control event. [ 2260.827990][T10611] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 2260.857546][T10611] usb 4-1: device descriptor read/8, error -71 [ 2260.912994][T23257] m920x_read = error: -19 [ 2260.917840][T23257] dvb-usb: error while querying for an remote control event. [ 2261.047119][T23257] m920x_read = error: -19 [ 2261.065660][T23257] dvb-usb: error while querying for an remote control event. [ 2261.106925][T10611] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 2261.117460][T10604] usb 3-1: USB disconnect, device number 87 [ 2261.128068][T10611] usb 4-1: device descriptor read/8, error -71 [ 2261.138131][T10604] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 2261.186919][T23257] m920x_read = error: -19 [ 2261.191396][T23257] dvb-usb: error while querying for an remote control event. [ 2261.237359][T10611] usb usb4-port1: unable to enumerate USB device [ 2261.307034][T10611] m920x_read = error: -19 [ 2261.311453][T10611] dvb-usb: error while querying for an remote control event. [ 2261.428393][T10611] m920x_read = error: -19 [ 2261.436972][T10611] dvb-usb: error while querying for an remote control event. [ 2261.547096][T23257] m920x_read = error: -19 [ 2261.551791][T23257] dvb-usb: error while querying for an remote control event. [ 2261.657714][ T51] Bluetooth: hci0: command tx timeout [ 2261.666985][T23257] m920x_read = error: -19 [ 2261.671530][T23257] dvb-usb: error while querying for an remote control event. [ 2261.689763][T10611] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2261.787394][T23257] m920x_read = error: -19 [ 2261.791933][T23257] dvb-usb: error while querying for an remote control event. [ 2261.848656][T10611] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 2261.866900][T10611] usb 2-1: config 2 has no interface number 0 [ 2261.875188][T10611] usb 2-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 2261.894045][T10611] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 2261.904942][T10611] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 2261.915589][T23257] m920x_read = error: -19 [ 2261.920173][T23257] dvb-usb: error while querying for an remote control event. [ 2261.930582][T10611] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2261.940062][T10611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.948491][T10611] usb 2-1: Product: syz [ 2261.954394][T10611] usb 2-1: Manufacturer: syz [ 2261.959655][T10611] usb 2-1: SerialNumber: syz [ 2261.974656][T23401] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2261.983876][T23401] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2262.037011][T23257] m920x_read = error: -19 [ 2262.041511][T23257] dvb-usb: error while querying for an remote control event. [ 2262.157010][T23257] m920x_read = error: -19 [ 2262.171177][T23257] dvb-usb: error while querying for an remote control event. [ 2262.184665][T23424] netlink: 164 bytes leftover after parsing attributes in process `syz.2.16854'. [ 2262.287466][T23257] m920x_read = error: -19 [ 2262.297107][T23257] dvb-usb: error while querying for an remote control event. [ 2262.332103][T23401] create_pit_timer: 16 callbacks suppressed [ 2262.332119][T23401] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2262.400577][T23401] kvm: pic: level sensitive irq not supported [ 2262.403444][T23437] netlink: 'syz.4.16855': attribute type 1 has an invalid length. [ 2262.423618][T23401] kvm: pic: non byte read [ 2262.427379][T23257] m920x_read = error: -19 [ 2262.480389][T23257] dvb-usb: error while querying for an remote control event. [ 2262.548026][T23401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2262.578682][T23401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2262.619579][T20503] m920x_read = error: -19 [ 2262.648490][T20503] dvb-usb: error while querying for an remote control event. [ 2262.787012][T23257] m920x_read = error: -19 [ 2262.816699][T23257] dvb-usb: error while querying for an remote control event. [ 2262.852657][T23458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2262.963315][T23437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2262.976354][T10611] usb 2-1: probing VID:PID(0424:012C) [ 2263.009909][T20503] m920x_read = error: -19 [ 2263.014581][T10611] usb 2-1: vub300 testing BULK IN EndPoint(0) 8E [ 2263.029676][T20503] dvb-usb: error while querying for an remote control event. [ 2263.045354][T10611] usb 2-1: vub300 testing BULK IN EndPoint(1) 82 [ 2263.102870][T10611] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 2263.149166][T23447] bond1: (slave geneve2): making interface the new active one [ 2263.163381][T10611] vub300 2-1:2.174: probe with driver vub300 failed with error -22 [ 2263.179555][ T2319] m920x_read = error: -19 [ 2263.189984][ T2319] dvb-usb: error while querying for an remote control event. [ 2263.200345][T10611] usb 2-1: USB disconnect, device number 87 [ 2263.227857][T23447] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2263.327283][ T2319] m920x_read = error: -19 [ 2263.338727][ T2319] dvb-usb: error while querying for an remote control event. [ 2263.467028][T10611] m920x_read = error: -19 [ 2263.474767][T10611] dvb-usb: error while querying for an remote control event. [ 2263.597141][T10611] m920x_read = error: -19 [ 2263.614702][T10611] dvb-usb: error while querying for an remote control event. [ 2263.766912][T10611] m920x_read = error: -19 [ 2263.780175][T10611] dvb-usb: error while querying for an remote control event. [ 2263.906976][T10611] m920x_read = error: -19 [ 2263.921159][T10611] dvb-usb: error while querying for an remote control event. [ 2264.097040][T10611] m920x_read = error: -19 [ 2264.109793][T10611] dvb-usb: error while querying for an remote control event. [ 2264.248450][T10611] m920x_read = error: -19 [ 2264.253062][T10611] dvb-usb: error while querying for an remote control event. [ 2264.301298][T23558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16859'. [ 2264.325276][T23558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16859'. [ 2264.359625][T23558] C: renamed from veth1_to_team (while UP) [ 2264.369296][T23558] netlink: 'syz.2.16859': attribute type 2 has an invalid length. [ 2264.377563][T23558] netlink: 116 bytes leftover after parsing attributes in process `syz.2.16859'. [ 2264.387256][T10611] m920x_read = error: -19 [ 2264.389175][T23558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2264.391753][T10611] dvb-usb: error while querying for an remote control event. [ 2264.536480][T10611] m920x_read = error: -19 [ 2264.562828][T10611] dvb-usb: error while querying for an remote control event. [ 2264.597297][T23567] syzkaller0: entered promiscuous mode [ 2264.614043][T23567] syzkaller0: entered allmulticast mode [ 2264.698115][T20503] m920x_read = error: -19 [ 2264.703367][T20503] dvb-usb: error while querying for an remote control event. [ 2264.827202][T20503] m920x_read = error: -19 [ 2264.835253][T20503] dvb-usb: error while querying for an remote control event. [ 2264.957308][T20503] m920x_read = error: -19 [ 2264.966966][T20503] dvb-usb: error while querying for an remote control event. [ 2265.087013][T10611] m920x_read = error: -19 [ 2265.092889][T10611] dvb-usb: error while querying for an remote control event. [ 2265.206914][T20503] m920x_read = error: -19 [ 2265.212228][T20503] dvb-usb: error while querying for an remote control event. [ 2265.316092][T23589] FAULT_INJECTION: forcing a failure. [ 2265.316092][T23589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2265.340578][T20503] m920x_read = error: -19 [ 2265.346130][T20503] dvb-usb: error while querying for an remote control event. [ 2265.365035][T23589] CPU: 1 UID: 0 PID: 23589 Comm: syz.2.16865 Tainted: G L syzkaller #0 PREEMPT(full) [ 2265.365069][T23589] Tainted: [L]=SOFTLOCKUP [ 2265.365081][T23589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2265.365090][T23589] Call Trace: [ 2265.365096][T23589] [ 2265.365102][T23589] dump_stack_lvl+0xe8/0x150 [ 2265.365129][T23589] should_fail_ex+0x40c/0x560 [ 2265.365152][T23589] _copy_to_user+0x31/0xb0 [ 2265.365167][T23589] simple_read_from_buffer+0xe1/0x170 [ 2265.365192][T23589] proc_fail_nth_read+0x1bb/0x230 [ 2265.365215][T23589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2265.365238][T23589] ? rw_verify_area+0x24a/0x4c0 [ 2265.365261][T23589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2265.365281][T23589] vfs_read+0x213/0xa80 [ 2265.365298][T23589] ? __pfx___mutex_lock+0x10/0x10 [ 2265.365315][T23589] ? __pfx_vfs_read+0x10/0x10 [ 2265.365330][T23589] ? __fget_files+0x2a/0x420 [ 2265.365352][T23589] ? __fget_files+0x3a2/0x420 [ 2265.365371][T23589] ? __fget_files+0x2a/0x420 [ 2265.365396][T23589] ksys_read+0x150/0x270 [ 2265.365410][T23589] ? __pfx_ksys_read+0x10/0x10 [ 2265.365429][T23589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.365445][T23589] do_syscall_64+0x174/0x580 [ 2265.365462][T23589] ? clear_bhb_loop+0x40/0x90 [ 2265.365479][T23589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.365493][T23589] RIP: 0033:0x7f0671d5e6ce [ 2265.365507][T23589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2265.365519][T23589] RSP: 002b:00007f0672c87fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2265.365534][T23589] RAX: ffffffffffffffda RBX: 00007f0672c886c0 RCX: 00007f0671d5e6ce [ 2265.365545][T23589] RDX: 000000000000000f RSI: 00007f0672c880a0 RDI: 0000000000000006 [ 2265.365554][T23589] RBP: 00007f0672c88090 R08: 0000000000000000 R09: 0000000000000000 [ 2265.365563][T23589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2265.365571][T23589] R13: 00007f0672026038 R14: 00007f0672025fa0 R15: 00007f067214fa48 [ 2265.365595][T23589] [ 2265.572490][T20503] m920x_read = error: -19 [ 2265.577019][T20503] dvb-usb: error while querying for an remote control event. [ 2265.687002][T20503] m920x_read = error: -19 [ 2265.691445][T20503] dvb-usb: error while querying for an remote control event. [ 2265.817657][T20503] m920x_read = error: -19 [ 2265.822091][T20503] dvb-usb: error while querying for an remote control event. [ 2265.880316][T23599] ipvlan2: entered promiscuous mode [ 2265.905644][T23599] ipvlan2: entered allmulticast mode [ 2265.947260][T20503] m920x_read = error: -19 [ 2265.951741][T20503] dvb-usb: error while querying for an remote control event. [ 2266.077233][T20503] m920x_read = error: -19 [ 2266.081649][T20503] dvb-usb: error while querying for an remote control event. [ 2266.197557][T10611] m920x_read = error: -19 [ 2266.202029][T10611] dvb-usb: error while querying for an remote control event. [ 2266.274743][T23620] FAULT_INJECTION: forcing a failure. [ 2266.274743][T23620] name failslab, interval 1, probability 0, space 0, times 0 [ 2266.291371][T23620] CPU: 0 UID: 0 PID: 23620 Comm: syz.1.16870 Tainted: G L syzkaller #0 PREEMPT(full) [ 2266.291393][T23620] Tainted: [L]=SOFTLOCKUP [ 2266.291398][T23620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2266.291406][T23620] Call Trace: [ 2266.291412][T23620] [ 2266.291417][T23620] dump_stack_lvl+0xe8/0x150 [ 2266.291442][T23620] should_fail_ex+0x40c/0x560 [ 2266.291463][T23620] should_failslab+0xa8/0x100 [ 2266.291503][T23620] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2266.291527][T23620] ? dst_alloc+0x105/0x170 [ 2266.291612][T23620] ? dst_alloc+0x105/0x170 [ 2266.291634][T23620] dst_alloc+0x105/0x170 [ 2266.291654][T23620] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 2266.291707][T23620] ? ip_route_output_key_hash+0xd8/0x2a0 [ 2266.291730][T23620] ip_route_output_key_hash+0x18d/0x2a0 [ 2266.291754][T23620] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2266.291788][T23620] ip_route_output_flow+0x2a/0x150 [ 2266.291808][T23620] ? security_sk_classify_flow+0x6d/0x150 [ 2266.291830][T23620] raw_sendmsg+0x110d/0x1a20 [ 2266.291861][T23620] ? __pfx_raw_sendmsg+0x10/0x10 [ 2266.291880][T23620] ? __lock_acquire+0x683/0x2cf0 [ 2266.291924][T23620] ? aa_sk_perm+0x6d5/0x900 [ 2266.291945][T23620] ? sock_rps_record_flow+0x19/0x350 [ 2266.291967][T23620] ? inet_sendmsg+0x298/0x320 [ 2266.291989][T23620] ? __pfx_inet_sendmsg+0x10/0x10 [ 2266.292009][T23620] sock_sendmsg_nosec+0x10e/0x180 [ 2266.292034][T23620] __sys_sendto+0x408/0x5a0 [ 2266.292046][T23620] ? ksys_write+0x1e6/0x270 [ 2266.292061][T23620] ? __pfx___sys_sendto+0x10/0x10 [ 2266.292072][T23620] ? __mutex_unlock_slowpath+0x731/0x900 [ 2266.292105][T23620] ? __pfx_ksys_write+0x10/0x10 [ 2266.292121][T23620] __x64_sys_sendto+0xde/0x100 [ 2266.292135][T23620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2266.292149][T23620] do_syscall_64+0x174/0x580 [ 2266.292163][T23620] ? trace_irq_disable+0x3b/0x140 [ 2266.292181][T23620] ? clear_bhb_loop+0x40/0x90 [ 2266.292197][T23620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2266.292211][T23620] RIP: 0033:0x7f1fc779de99 [ 2266.292223][T23620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2266.292234][T23620] RSP: 002b:00007f1fc59f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2266.292248][T23620] RAX: ffffffffffffffda RBX: 00007f1fc7a25fa0 RCX: 00007f1fc779de99 [ 2266.292258][T23620] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000003 [ 2266.292266][T23620] RBP: 00007f1fc59f6090 R08: 0000200000000100 R09: 0000000000000010 [ 2266.292274][T23620] R10: 0000000000048890 R11: 0000000000000246 R12: 0000000000000001 [ 2266.292282][T23620] R13: 00007f1fc7a26038 R14: 00007f1fc7a25fa0 R15: 00007f1fc7b4fa48 [ 2266.292320][T23620] [ 2266.867409][T10611] m920x_read = error: -19 [ 2266.872241][T10611] dvb-usb: error while querying for an remote control event. [ 2266.938877][T20503] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2266.970236][T23622] netlink: 'syz.1.16871': attribute type 29 has an invalid length. [ 2266.995287][T23622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16871'. [ 2267.007872][T10611] m920x_read = error: -19 [ 2267.018128][T10611] dvb-usb: error while querying for an remote control event. [ 2267.110432][T20503] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2267.119896][T20503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.128351][T20503] usb 3-1: Product: syz [ 2267.132729][T20503] usb 3-1: Manufacturer: syz [ 2267.138397][T10611] m920x_read = error: -19 [ 2267.146164][T20503] usb 3-1: SerialNumber: syz [ 2267.152717][T10611] dvb-usb: error while querying for an remote control event. [ 2267.258028][T10604] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2267.277003][T10611] m920x_read = error: -19 [ 2267.281428][T10611] dvb-usb: error while querying for an remote control event. [ 2267.354325][T23635] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16874'. [ 2267.397205][T10611] m920x_read = error: -19 [ 2267.403698][T10611] dvb-usb: error while querying for an remote control event. [ 2267.417368][T10604] usb 2-1: Using ep0 maxpacket: 16 [ 2267.424220][T10604] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 2267.432508][T10604] usb 2-1: config 0 has no interface number 0 [ 2267.438890][T10604] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2267.449089][T10604] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2267.461105][T10604] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2267.470238][T10604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.478351][T10604] usb 2-1: Product: syz [ 2267.482518][T10604] usb 2-1: Manufacturer: syz [ 2267.488104][T10604] usb 2-1: SerialNumber: syz [ 2267.496225][T10604] usb 2-1: config 0 descriptor?? [ 2267.504027][T23623] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2267.511615][T23623] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2267.527176][T10611] m920x_read = error: -19 [ 2267.531618][T10611] dvb-usb: error while querying for an remote control event. [ 2267.576300][T20503] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2267.588536][T20503] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2267.616941][T10603] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2267.646953][T10611] m920x_read = error: -19 [ 2267.653215][T10611] dvb-usb: error while querying for an remote control event. [ 2267.766853][T10603] usb 4-1: Using ep0 maxpacket: 8 [ 2267.768062][T10611] m920x_read = error: -19 [ 2267.776474][T10611] dvb-usb: error while querying for an remote control event. [ 2267.783243][T10603] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2267.792799][T23623] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2267.801078][T23623] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2267.808771][T10603] usb 4-1: config 179 has no interface number 0 [ 2267.815469][T10603] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2267.829618][T10603] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2267.845388][T10603] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2267.858435][T10603] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2267.870757][T10603] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2267.884431][T10603] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2267.895826][T10603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.908609][T23635] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 2267.917275][T10611] m920x_read = error: -19 [ 2267.927193][T10611] dvb-usb: error while querying for an remote control event. [ 2268.057347][T10611] m920x_read = error: -19 [ 2268.076858][T10611] dvb-usb: error while querying for an remote control event. [ 2268.199753][T10611] m920x_read = error: -19 [ 2268.205726][T10611] dvb-usb: error while querying for an remote control event. [ 2268.229235][T10603] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input202 [ 2268.327122][ T2319] m920x_read = error: -19 [ 2268.332125][ T2319] dvb-usb: error while querying for an remote control event. [ 2268.376271][ T2319] usb 4-1: USB disconnect, device number 13 [ 2268.376406][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2268.390671][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2268.456995][T10611] m920x_read = error: -19 [ 2268.465334][T10611] dvb-usb: error while querying for an remote control event. [ 2268.587583][T10611] m920x_read = error: -19 [ 2268.592041][T10611] dvb-usb: error while querying for an remote control event. [ 2268.706950][ T2319] m920x_read = error: -19 [ 2268.711401][ T2319] dvb-usb: error while querying for an remote control event. [ 2268.827039][ T2319] m920x_read = error: -19 [ 2268.836872][ T2319] dvb-usb: error while querying for an remote control event. [ 2268.967057][ T2319] m920x_read = error: -19 [ 2268.977041][ T2319] dvb-usb: error while querying for an remote control event. [ 2269.096960][ T2319] m920x_read = error: -19 [ 2269.104853][ T2319] dvb-usb: error while querying for an remote control event. [ 2269.157719][T20503] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 2269.182324][T20503] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2269.205920][T20503] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2269.218605][T20503] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2269.228791][ T2319] m920x_read = error: -19 [ 2269.235889][ T2319] dvb-usb: error while querying for an remote control event. [ 2269.248313][T20503] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2269.262528][T20503] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2269.282181][T20503] usb 3-1: USB disconnect, device number 88 [ 2269.358687][T10611] m920x_read = error: -19 [ 2269.363308][T10611] dvb-usb: error while querying for an remote control event. [ 2269.476880][T10611] m920x_read = error: -19 [ 2269.485765][T10611] dvb-usb: error while querying for an remote control event. [ 2269.606890][T10611] m920x_read = error: -19 [ 2269.613834][T10611] dvb-usb: error while querying for an remote control event. [ 2269.737087][T10611] m920x_read = error: -19 [ 2269.746020][T10611] dvb-usb: error while querying for an remote control event. [ 2269.866918][T10611] m920x_read = error: -19 [ 2269.880574][T10611] dvb-usb: error while querying for an remote control event. [ 2269.973351][T10604] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2269.998508][T10611] m920x_read = error: -19 [ 2269.999151][T10604] asix 2-1:0.34: probe with driver asix failed with error -71 [ 2270.012590][T10611] dvb-usb: error while querying for an remote control event. [ 2270.047118][T10604] usb 2-1: USB disconnect, device number 88 [ 2270.136998][T10611] m920x_read = error: -19 [ 2270.151717][T10611] dvb-usb: error while querying for an remote control event. [ 2270.277024][T10611] m920x_read = error: -19 [ 2270.284848][T10611] dvb-usb: error while querying for an remote control event. [ 2270.407866][T20503] m920x_read = error: -19 [ 2270.442434][T20503] dvb-usb: error while querying for an remote control event. [ 2270.583263][T23751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16888'. [ 2270.677114][T20503] m920x_read = error: -19 [ 2270.686968][T20503] dvb-usb: error while querying for an remote control event. [ 2270.767378][ T2319] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 2270.815257][T20503] m920x_read = error: -19 [ 2270.828438][T20503] dvb-usb: error while querying for an remote control event. [ 2270.947358][T20503] m920x_read = error: -19 [ 2270.966854][T20503] dvb-usb: error while querying for an remote control event. [ 2270.974927][ T2319] usb 4-1: device descriptor read/64, error -71 [ 2271.159880][T20503] m920x_read = error: -19 [ 2271.166880][T20503] dvb-usb: error while querying for an remote control event. [ 2271.291972][T20503] m920x_read = error: -19 [ 2271.297658][T20503] dvb-usb: error while querying for an remote control event. [ 2271.428784][T10606] m920x_read = error: -19 [ 2271.433357][T10606] dvb-usb: error while querying for an remote control event. [ 2271.451373][ T2319] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 2271.567858][T10606] m920x_read = error: -19 [ 2271.575768][T10606] dvb-usb: error while querying for an remote control event. [ 2271.599157][ T2319] usb 4-1: device descriptor read/64, error -71 [ 2271.653584][T23789] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16890'. [ 2271.697209][T10606] m920x_read = error: -19 [ 2271.706869][T10606] dvb-usb: error while querying for an remote control event. [ 2271.738883][ T2319] usb usb4-port1: attempt power cycle [ 2271.847132][T10606] m920x_read = error: -19 [ 2271.857969][T10606] dvb-usb: error while querying for an remote control event. [ 2271.989863][T10606] m920x_read = error: -19 [ 2272.012287][T10606] dvb-usb: error while querying for an remote control event. [ 2272.099823][ T2319] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 2272.147186][T10606] m920x_read = error: -19 [ 2272.160968][ T2319] usb 4-1: device descriptor read/8, error -71 [ 2272.169057][T10606] dvb-usb: error while querying for an remote control event. [ 2272.291203][T10606] m920x_read = error: -19 [ 2272.295607][T10606] dvb-usb: error while querying for an remote control event. [ 2272.427213][ T2319] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 2272.445415][T23257] m920x_read = error: -19 [ 2272.450425][T23257] dvb-usb: error while querying for an remote control event. [ 2272.477791][ T2319] usb 4-1: device descriptor read/8, error -71 [ 2272.597465][T23257] m920x_read = error: -19 [ 2272.604529][ T2319] usb usb4-port1: unable to enumerate USB device [ 2272.613335][T23257] dvb-usb: error while querying for an remote control event. [ 2272.760254][T23257] m920x_read = error: -19 [ 2272.770109][T23257] dvb-usb: error while querying for an remote control event. [ 2272.967826][ T2319] m920x_read = error: -19 [ 2272.974931][ T2319] dvb-usb: error while querying for an remote control event. [ 2272.995826][T10601] hid_parser_main: 45 callbacks suppressed [ 2272.995848][T10601] hid-generic 0000:0000:0000.0045: unknown main item tag 0x1 [ 2273.117897][ T2319] m920x_read = error: -19 [ 2273.122717][ T2319] dvb-usb: error while querying for an remote control event. [ 2273.146005][T10601] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2273.176383][T10601] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2273.211948][T10601] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2273.247163][T10601] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2273.451099][T10601] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2273.483081][ T2319] m920x_read = error: -19 [ 2273.493653][ T2319] dvb-usb: error while querying for an remote control event. [ 2273.518603][T10601] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2273.559631][T10601] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2273.595977][T10601] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2273.624097][T10601] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2273.627837][T23257] m920x_read = error: -19 [ 2273.647930][T23811] FAULT_INJECTION: forcing a failure. [ 2273.647930][T23811] name failslab, interval 1, probability 0, space 0, times 0 [ 2273.664486][T23257] dvb-usb: error while querying for an remote control event. [ 2273.686578][T10601] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.04 Device [syz1] on syz1 [ 2273.707165][T23811] CPU: 1 UID: 0 PID: 23811 Comm: syz.3.16893 Tainted: G L syzkaller #0 PREEMPT(full) [ 2273.707186][T23811] Tainted: [L]=SOFTLOCKUP [ 2273.707191][T23811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2273.707199][T23811] Call Trace: [ 2273.707205][T23811] [ 2273.707211][T23811] dump_stack_lvl+0xe8/0x150 [ 2273.707236][T23811] should_fail_ex+0x40c/0x560 [ 2273.707259][T23811] should_failslab+0xa8/0x100 [ 2273.707282][T23811] __kmalloc_cache_noprof+0xa8/0x660 [ 2273.707302][T23811] ? drm_atomic_commit_alloc+0xa9/0x100 [ 2273.707319][T23811] ? drm_atomic_commit_alloc+0xa9/0x100 [ 2273.707340][T23811] drm_atomic_commit_alloc+0xa9/0x100 [ 2273.707357][T23811] drm_client_modeset_commit_atomic+0x122/0x7e0 [ 2273.707378][T23811] ? rcu_is_watching+0x15/0xb0 [ 2273.707392][T23811] ? trace_contention_end+0x3d/0x140 [ 2273.707408][T23811] ? __mutex_lock+0x30d/0x1550 [ 2273.707425][T23811] ? __mutex_lock+0x30d/0x1550 [ 2273.707439][T23811] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 2273.707483][T23811] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 2273.707506][T23811] drm_client_modeset_commit+0x4a/0x70 [ 2273.707525][T23811] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9c/0x1c0 [ 2273.707572][T23811] drm_fbdev_client_restore+0x1b/0x30 [ 2273.707586][T23811] drm_client_dev_restore+0x14c/0x290 [ 2273.707610][T23811] drm_release+0x32d/0x400 [ 2273.707631][T23811] ? __pfx_drm_release+0x10/0x10 [ 2273.707648][T23811] __fput+0x418/0xa50 [ 2273.707672][T23811] fput_close_sync+0x11f/0x240 [ 2273.707691][T23811] ? __pfx_fput_close_sync+0x10/0x10 [ 2273.707712][T23811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2273.707728][T23811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2273.707742][T23811] __x64_sys_close+0x7e/0x110 [ 2273.707762][T23811] do_syscall_64+0x174/0x580 [ 2273.707778][T23811] ? clear_bhb_loop+0x40/0x90 [ 2273.707795][T23811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2273.707809][T23811] RIP: 0033:0x7f498359de99 [ 2273.707822][T23811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2273.707833][T23811] RSP: 002b:00007f4984388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2273.707865][T23811] RAX: ffffffffffffffda RBX: 00007f4983825fa0 RCX: 00007f498359de99 [ 2273.707900][T23811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2273.707909][T23811] RBP: 00007f4984388090 R08: 0000000000000000 R09: 0000000000000000 [ 2273.707918][T23811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2273.707926][T23811] R13: 00007f4983826038 R14: 00007f4983825fa0 R15: 00007f498394fa48 [ 2273.707955][T23811] [ 2274.089578][T23257] m920x_read = error: -19 [ 2274.130738][T23257] dvb-usb: error while querying for an remote control event. [ 2274.296934][T23257] m920x_read = error: -19 [ 2274.306582][T23257] dvb-usb: error while querying for an remote control event. [ 2274.405265][T23257] IPVS: starting estimator thread 0... [ 2274.429703][T23257] m920x_read = error: -19 [ 2274.446873][T23257] dvb-usb: error while querying for an remote control event. [ 2274.507174][T23827] IPVS: using max 37 ests per chain, 88800 per kthread [ 2274.528585][T23830] syzkaller0: entered promiscuous mode [ 2274.534167][T23830] syzkaller0: entered allmulticast mode [ 2274.577253][T23257] m920x_read = error: -19 [ 2274.584805][T23257] dvb-usb: error while querying for an remote control event. [ 2274.638474][T23836] kvm: kvm [23835]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x1 [ 2274.706919][T10606] m920x_read = error: -19 [ 2274.711348][T10606] dvb-usb: error while querying for an remote control event. [ 2274.827338][T10606] m920x_read = error: -19 [ 2274.836885][T10606] dvb-usb: error while querying for an remote control event. [ 2274.850485][T23858] binder: BINDER_SET_CONTEXT_MGR already set [ 2274.871614][T23858] binder: 23850:23858 ioctl 4018620d 200000004a80 returned -16 [ 2274.938724][T23851] kvm: kvm [23850]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffffffff0000000a [ 2274.966978][T10606] m920x_read = error: -19 [ 2274.971751][T10606] dvb-usb: error while querying for an remote control event. [ 2275.086941][T10606] m920x_read = error: -19 [ 2275.091398][T10606] dvb-usb: error while querying for an remote control event. [ 2275.206910][T10606] m920x_read = error: -19 [ 2275.211325][T10606] dvb-usb: error while querying for an remote control event. [ 2275.236255][T23872] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16906'. [ 2275.326921][T10606] m920x_read = error: -19 [ 2275.333213][T10606] dvb-usb: error while querying for an remote control event. [ 2275.459449][T10606] m920x_read = error: -19 [ 2275.464510][T10606] dvb-usb: error while querying for an remote control event. [ 2275.582639][T23257] m920x_read = error: -19 [ 2275.595220][T23257] dvb-usb: error while querying for an remote control event. [ 2275.727418][T23257] m920x_read = error: -19 [ 2275.735882][T23257] dvb-usb: error while querying for an remote control event. [ 2275.858711][T23257] m920x_read = error: -19 [ 2275.870826][T23257] dvb-usb: error while querying for an remote control event. [ 2275.997362][T23257] m920x_read = error: -19 [ 2276.014588][T23894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2276.025225][T23257] dvb-usb: error while querying for an remote control event. [ 2276.047335][T10603] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2276.157409][T23257] m920x_read = error: -19 [ 2276.176070][T23257] dvb-usb: error while querying for an remote control event. [ 2276.218412][T10603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2276.234585][T10603] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2276.255462][T10603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.267266][T23901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16910'. [ 2276.278282][T10603] usb 2-1: config 0 descriptor?? [ 2276.292105][T23901] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 2276.310121][T23257] m920x_read = error: -19 [ 2276.325268][T23257] dvb-usb: error while querying for an remote control event. [ 2276.470295][T23257] m920x_read = error: -19 [ 2276.483508][T23257] dvb-usb: error while querying for an remote control event. [ 2276.513618][T10603] usbhid 2-1:0.0: can't add hid device: -71 [ 2276.527610][T23915] fuse: Bad value for 'fd' [ 2276.532276][T10603] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2276.577045][T10603] usb 2-1: USB disconnect, device number 89 [ 2276.647655][T23257] m920x_read = error: -19 [ 2276.668355][T23257] dvb-usb: error while querying for an remote control event. [ 2276.808839][T23257] m920x_read = error: -19 [ 2276.835183][T23257] dvb-usb: error while querying for an remote control event. [ 2276.976985][T23257] m920x_read = error: -19 [ 2276.988991][T23257] dvb-usb: error while querying for an remote control event. [ 2277.017478][T10603] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2277.117032][T23257] m920x_read = error: -19 [ 2277.123591][T23257] dvb-usb: error while querying for an remote control event. [ 2277.187222][T10603] usb 2-1: Using ep0 maxpacket: 32 [ 2277.223076][T10603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2277.256913][T23257] m920x_read = error: -19 [ 2277.265635][T23257] dvb-usb: error while querying for an remote control event. [ 2277.266562][T10603] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2277.354227][T10603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.390212][T10603] usb 2-1: config 0 descriptor?? [ 2277.432707][T10603] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2277.453918][T23257] m920x_read = error: -19 [ 2277.475241][T23257] dvb-usb: error while querying for an remote control event. [ 2277.493533][T10603] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2277.626914][T23257] m920x_read = error: -19 [ 2277.651895][T23257] dvb-usb: error while querying for an remote control event. [ 2277.755651][T23951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2277.818278][T23257] m920x_read = error: -19 [ 2277.842588][T23257] dvb-usb: error while querying for an remote control event. [ 2277.987237][T23257] m920x_read = error: -19 [ 2278.000943][T23257] dvb-usb: error while querying for an remote control event. [ 2278.056426][T23962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16919'. [ 2278.141501][T23257] m920x_read = error: -19 [ 2278.158907][T23257] dvb-usb: error while querying for an remote control event. [ 2278.297898][T23257] m920x_read = error: -19 [ 2278.316119][T23257] dvb-usb: error while querying for an remote control event. [ 2278.457224][T23257] m920x_read = error: -19 [ 2278.479951][T23257] dvb-usb: error while querying for an remote control event. [ 2278.515693][T10603] usb 2-1: USB disconnect, device number 90 [ 2278.543115][T10603] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 2278.616967][T23257] m920x_read = error: -19 [ 2278.638021][T23257] dvb-usb: error while querying for an remote control event. [ 2278.710656][T23981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2278.777516][T23257] m920x_read = error: -19 [ 2278.792212][T23257] dvb-usb: error while querying for an remote control event. [ 2278.927558][T10606] m920x_read = error: -19 [ 2278.942212][T10606] dvb-usb: error while querying for an remote control event. [ 2279.029501][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16922'. [ 2279.062209][T23998] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 2279.079194][T10606] m920x_read = error: -19 [ 2279.105994][T10606] dvb-usb: error while querying for an remote control event. [ 2279.119397][T23257] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2279.247815][T10606] m920x_read = error: -19 [ 2279.260641][T10606] dvb-usb: error while querying for an remote control event. [ 2279.296892][T23257] usb 4-1: Using ep0 maxpacket: 16 [ 2279.303913][T23257] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2279.320325][T23257] usb 4-1: config 7 has an invalid interface number: 106 but max is 3 [ 2279.331687][T23257] usb 4-1: config 7 has an invalid interface number: 182 but max is 3 [ 2279.351995][T23257] usb 4-1: config 7 has an invalid interface number: 148 but max is 3 [ 2279.361124][T23257] usb 4-1: config 7 has an invalid interface number: 227 but max is 3 [ 2279.369982][T23257] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2279.388284][T10606] m920x_read = error: -19 [ 2279.394095][T24013] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16924'. [ 2279.420410][T10606] dvb-usb: error while querying for an remote control event. [ 2279.431066][T23257] usb 4-1: config 7 has no interface number 0 [ 2279.488617][T23257] usb 4-1: config 7 has no interface number 1 [ 2279.508657][T23257] usb 4-1: config 7 has no interface number 2 [ 2279.514918][T23257] usb 4-1: config 7 has no interface number 3 [ 2279.521956][T23257] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2279.550647][T23257] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 2279.562616][T10606] m920x_read = error: -19 [ 2279.567496][T24028] netlink: 164 bytes leftover after parsing attributes in process `syz.4.16925'. [ 2279.578420][T10606] dvb-usb: error while querying for an remote control event. [ 2279.585849][T23257] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 2279.598288][T23257] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2279.610567][T23257] usb 4-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 2279.624235][T23257] usb 4-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2279.635661][T23257] usb 4-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 2279.646930][T23257] usb 4-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 2279.658940][T23257] usb 4-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 2279.667260][T10603] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2279.670788][T23257] usb 4-1: config 7 interface 148 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2279.698594][T23257] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2279.709614][T10606] m920x_read = error: -19 [ 2279.715013][T10606] dvb-usb: error while querying for an remote control event. [ 2279.734786][T23257] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 2279.749096][T23257] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 2279.764951][T23257] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 2279.775926][T23257] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2279.788187][T23257] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 2279.801713][T23257] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 2279.816445][T23257] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 2279.830028][T20503] m920x_read = error: -19 [ 2279.834412][T20503] dvb-usb: error while querying for an remote control event. [ 2279.842092][T23257] usb 4-1: config 7 interface 148 altsetting 5 has an endpoint descriptor with address 0x52, changing to 0x2 [ 2279.846967][T10603] usb 2-1: Using ep0 maxpacket: 8 [ 2279.858895][T23257] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 2279.878074][T23257] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 2279.894393][T10603] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2279.903807][T10603] usb 2-1: config 179 has no interface number 0 [ 2279.903835][T23257] usb 4-1: config 7 interface 148 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 2279.925344][T10603] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2279.938881][T10603] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2279.940350][T23257] usb 4-1: config 7 interface 227 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2279.963591][T10606] m920x_read = error: -19 [ 2279.968212][T10606] dvb-usb: error while querying for an remote control event. [ 2279.977953][T10603] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2279.991607][T10603] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2279.991632][T23257] usb 4-1: config 7 interface 106 has no altsetting 0 [ 2279.991703][T23257] usb 4-1: config 7 interface 182 has no altsetting 0 [ 2280.017586][T23257] usb 4-1: config 7 interface 148 has no altsetting 0 [ 2280.024442][T23257] usb 4-1: config 7 interface 227 has no altsetting 0 [ 2280.031538][T10603] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2280.045341][T10603] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2280.049122][T23257] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 2280.064110][T23257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.072258][T23257] usb 4-1: Product: syz [ 2280.076600][T23257] usb 4-1: Manufacturer: syz [ 2280.081343][T20503] m920x_read = error: -19 [ 2280.085942][T20503] dvb-usb: error while querying for an remote control event. [ 2280.096733][T23257] usb 4-1: SerialNumber: syz [ 2280.129838][T10603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.165953][T24013] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2280.196974][T20503] m920x_read = error: -19 [ 2280.201428][T20503] dvb-usb: error while querying for an remote control event. [ 2280.322125][T20503] m920x_read = error: -19 [ 2280.327732][T20503] dvb-usb: error while querying for an remote control event. [ 2280.428404][T10604] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input203 [ 2280.500432][T20503] m920x_read = error: -19 [ 2280.520244][T20503] dvb-usb: error while querying for an remote control event. [ 2280.626524][T20503] usb 2-1: USB disconnect, device number 91 [ 2280.626594][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2280.640829][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2280.678898][T10606] m920x_read = error: -19 [ 2280.704696][T10606] dvb-usb: error while querying for an remote control event. [ 2280.776942][T23257] usb 4-1: USB disconnect, device number 18 [ 2280.907012][ T2319] m920x_read = error: -19 [ 2280.915519][ T2319] dvb-usb: error while querying for an remote control event. [ 2281.056978][ T2319] m920x_read = error: -19 [ 2281.068523][ T2319] dvb-usb: error while querying for an remote control event. [ 2281.096718][T24102] FAULT_INJECTION: forcing a failure. [ 2281.096718][T24102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2281.146526][T24102] CPU: 0 UID: 0 PID: 24102 Comm: syz.3.16931 Tainted: G L syzkaller #0 PREEMPT(full) [ 2281.146558][T24102] Tainted: [L]=SOFTLOCKUP [ 2281.146567][T24102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2281.146579][T24102] Call Trace: [ 2281.146587][T24102] [ 2281.146597][T24102] dump_stack_lvl+0xe8/0x150 [ 2281.146633][T24102] should_fail_ex+0x40c/0x560 [ 2281.146664][T24102] _copy_from_user+0x2d/0xb0 [ 2281.146685][T24102] __copy_msghdr+0x390/0x590 [ 2281.146714][T24102] ___sys_sendmsg+0x213/0x360 [ 2281.146744][T24102] ? __lock_acquire+0x683/0x2cf0 [ 2281.146781][T24102] ? __pfx____sys_sendmsg+0x10/0x10 [ 2281.146835][T24102] ? __fget_files+0x2a/0x420 [ 2281.146872][T24102] ? __fget_files+0x3a2/0x420 [ 2281.146913][T24102] __x64_sys_sendmsg+0x1b1/0x290 [ 2281.146938][T24102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2281.146975][T24102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.146997][T24102] do_syscall_64+0x174/0x580 [ 2281.147017][T24102] ? trace_irq_disable+0x3b/0x140 [ 2281.147042][T24102] ? clear_bhb_loop+0x40/0x90 [ 2281.147066][T24102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.147085][T24102] RIP: 0033:0x7f498359de99 [ 2281.147103][T24102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2281.147120][T24102] RSP: 002b:00007f4984388028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2281.147140][T24102] RAX: ffffffffffffffda RBX: 00007f4983825fa0 RCX: 00007f498359de99 [ 2281.147154][T24102] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 2281.147166][T24102] RBP: 00007f4984388090 R08: 0000000000000000 R09: 0000000000000000 [ 2281.147177][T24102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2281.147189][T24102] R13: 00007f4983826038 R14: 00007f4983825fa0 R15: 00007f498394fa48 [ 2281.147218][T24102] [ 2281.336675][T23257] m920x_read = error: -19 [ 2281.341097][T23257] dvb-usb: error while querying for an remote control event. [ 2281.457532][T23257] m920x_read = error: -19 [ 2281.461926][T23257] dvb-usb: error while querying for an remote control event. [ 2281.578301][T23257] m920x_read = error: -19 [ 2281.586596][T23257] dvb-usb: error while querying for an remote control event. [ 2281.721407][T23257] m920x_read = error: -19 [ 2281.727974][T23257] dvb-usb: error while querying for an remote control event. [ 2281.777585][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16936'. [ 2281.787073][T24118] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2281.847498][T23257] m920x_read = error: -19 [ 2281.869419][T23257] dvb-usb: error while querying for an remote control event. [ 2281.877045][T10604] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2281.890520][T24122] netlink: 148 bytes leftover after parsing attributes in process `syz.2.16930'. [ 2281.999297][T24122] netlink: 148 bytes leftover after parsing attributes in process `syz.2.16930'. [ 2282.031262][T23257] m920x_read = error: -19 [ 2282.039753][T10604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2282.053010][T23257] dvb-usb: error while querying for an remote control event. [ 2282.067443][T10604] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2282.099976][T10604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2282.135930][T24132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16930'. [ 2282.148401][T10604] usb 4-1: config 0 descriptor?? [ 2282.165341][T24132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16930'. [ 2282.176965][T23257] m920x_read = error: -19 [ 2282.183939][T23257] dvb-usb: error while querying for an remote control event. [ 2282.196938][T10603] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2282.306935][T23257] m920x_read = error: -19 [ 2282.314026][T23257] dvb-usb: error while querying for an remote control event. [ 2282.360435][T10604] usbhid 4-1:0.0: can't add hid device: -71 [ 2282.376715][T10604] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2282.401027][T10603] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2282.417863][T10604] usb 4-1: USB disconnect, device number 19 [ 2282.430621][T10603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.437699][T23257] m920x_read = error: -19 [ 2282.445399][T23257] dvb-usb: error while querying for an remote control event. [ 2282.464452][T10603] usb 2-1: Product: syz [ 2282.483438][T10603] usb 2-1: Manufacturer: syz [ 2282.498343][T10603] usb 2-1: SerialNumber: syz [ 2282.539057][T20217] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2282.567241][T23257] m920x_read = error: -19 [ 2282.571743][T23257] dvb-usb: error while querying for an remote control event. [ 2282.686917][T23257] m920x_read = error: -19 [ 2282.693086][T23257] dvb-usb: error while querying for an remote control event. [ 2282.765337][T24183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16940'. [ 2282.807020][T23257] m920x_read = error: -19 [ 2282.813184][T23257] dvb-usb: error while querying for an remote control event. [ 2282.916997][T10604] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2282.946944][T23257] m920x_read = error: -19 [ 2282.956853][T23257] dvb-usb: error while querying for an remote control event. [ 2283.076950][ T2319] m920x_read = error: -19 [ 2283.082632][ T2319] dvb-usb: error while querying for an remote control event. [ 2283.098443][T10604] usb 4-1: Using ep0 maxpacket: 32 [ 2283.108729][T10604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2283.130135][T10604] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2283.146912][T10604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2283.162539][T10604] usb 4-1: config 0 descriptor?? [ 2283.172010][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.178474][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.206712][T10604] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2283.210037][ T2319] m920x_read = error: -19 [ 2283.233609][T24124] syzkaller0: entered promiscuous mode [ 2283.248522][T10604] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2283.251205][ T2319] dvb-usb: error while querying for an remote control event. [ 2283.265194][T24124] syzkaller0: entered allmulticast mode [ 2283.394471][T23257] usb 2-1: USB disconnect, device number 92 [ 2283.407587][T20503] m920x_read = error: -19 [ 2283.412558][T20503] dvb-usb: error while querying for an remote control event. [ 2283.522346][T24208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2283.527295][T20503] m920x_read = error: -19 [ 2283.535566][T20503] dvb-usb: error while querying for an remote control event. [ 2283.626949][T10604] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2283.647012][T20503] m920x_read = error: -19 [ 2283.651428][T20503] dvb-usb: error while querying for an remote control event. [ 2283.766971][T20503] m920x_read = error: -19 [ 2283.771863][T20503] dvb-usb: error while querying for an remote control event. [ 2283.807532][T20217] usb 2-1: Service connection timeout for: 256 [ 2283.813918][T10604] usb 3-1: Using ep0 maxpacket: 16 [ 2283.819204][T20217] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2283.829632][T10604] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2283.843429][T20217] ath9k_htc: Failed to initialize the device [ 2283.850088][T10604] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2283.850952][T23257] usb 2-1: ath9k_htc: USB layer deinitialized [ 2283.856791][T10604] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 2283.856817][T10604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2283.894068][T20503] m920x_read = error: -19 [ 2283.907832][T20503] dvb-usb: error while querying for an remote control event. [ 2283.910715][T10604] usb 3-1: config 0 descriptor?? [ 2283.941957][T10603] usb 4-1: USB disconnect, device number 20 [ 2283.969432][T10603] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 2284.005066][T24233] FAULT_INJECTION: forcing a failure. [ 2284.005066][T24233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2284.020336][T24233] CPU: 0 UID: 0 PID: 24233 Comm: syz.1.16942 Tainted: G L syzkaller #0 PREEMPT(full) [ 2284.020364][T24233] Tainted: [L]=SOFTLOCKUP [ 2284.020371][T24233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2284.020382][T24233] Call Trace: [ 2284.020390][T24233] [ 2284.020399][T24233] dump_stack_lvl+0xe8/0x150 [ 2284.020432][T24233] should_fail_ex+0x40c/0x560 [ 2284.020461][T24233] _copy_from_iter+0x1d3/0x1660 [ 2284.020496][T24233] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2284.020527][T24233] ? __pfx_policy_nodemask+0x10/0x10 [ 2284.020555][T24233] ? unwind_next_frame+0x8f/0x2550 [ 2284.020577][T24233] ? __pfx__copy_from_iter+0x10/0x10 [ 2284.020604][T24233] ? alloc_pages_mpol+0x24a/0x380 [ 2284.020640][T24233] copy_page_from_iter+0x219/0x2d0 [ 2284.020663][T24233] tun_get_user+0x1bf1/0x4370 [ 2284.020703][T24233] ? tun_get_user+0x6e7/0x4370 [ 2284.020744][T24233] ? aa_file_perm+0x4ed/0x15f0 [ 2284.020765][T24233] ? __pfx_tun_get_user+0x10/0x10 [ 2284.020794][T24233] ? __lock_acquire+0x683/0x2cf0 [ 2284.020823][T24233] ? ref_tracker_alloc+0x341/0x4b0 [ 2284.020840][T24233] ? get_pid_task+0x20/0x1f0 [ 2284.020880][T24233] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2284.020905][T24233] ? tun_get+0x1c/0x2f0 [ 2284.020930][T24233] ? tun_get+0x1c/0x2f0 [ 2284.020957][T24233] ? tun_get+0x1c/0x2f0 [ 2284.020977][T24233] ? tun_get+0x1c/0x2f0 [ 2284.021009][T24233] tun_chr_write_iter+0x113/0x200 [ 2284.021038][T24233] vfs_write+0x612/0xba0 [ 2284.021063][T24233] ? __pfx_vfs_write+0x10/0x10 [ 2284.021091][T24233] ? __fget_files+0x2a/0x420 [ 2284.021115][T24233] ksys_write+0x150/0x270 [ 2284.021130][T24233] ? __pfx_ksys_write+0x10/0x10 [ 2284.021148][T24233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2284.021179][T24233] do_syscall_64+0x174/0x580 [ 2284.021198][T24233] ? trace_irq_disable+0x3b/0x140 [ 2284.021222][T24233] ? clear_bhb_loop+0x40/0x90 [ 2284.021246][T24233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2284.021260][T24233] RIP: 0033:0x7f1fc775e6ce [ 2284.021272][T24233] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2284.021284][T24233] RSP: 002b:00007f1fc59f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2284.021299][T24233] RAX: ffffffffffffffda RBX: 00007f1fc59f66c0 RCX: 00007f1fc775e6ce [ 2284.021323][T24233] RDX: 00000000000003ae RSI: 0000200000000940 RDI: 00000000000000c8 [ 2284.021336][T24233] RBP: 00007f1fc59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2284.021347][T24233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2284.021358][T24233] R13: 00007f1fc7a26038 R14: 00007f1fc7a25fa0 R15: 00007f1fc7b4fa48 [ 2284.021385][T24233] [ 2284.297527][T20503] m920x_read = error: -19 [ 2284.301911][T20503] dvb-usb: error while querying for an remote control event. [ 2284.417243][T23257] m920x_read = error: -19 [ 2284.422194][T23257] dvb-usb: error while querying for an remote control event. [ 2284.448138][T24239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2284.536922][T23257] m920x_read = error: -19 [ 2284.541355][T23257] dvb-usb: error while querying for an remote control event. [ 2284.659309][T23257] m920x_read = error: -19 [ 2284.663809][T23257] dvb-usb: error while querying for an remote control event. [ 2284.776939][T23257] m920x_read = error: -19 [ 2284.781375][T23257] dvb-usb: error while querying for an remote control event. [ 2284.800502][T10604] usbhid 3-1:0.0: can't add hid device: -71 [ 2284.816959][T10604] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2284.824762][T20217] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2284.839251][T10604] usb 3-1: USB disconnect, device number 89 [ 2284.896907][T23257] m920x_read = error: -19 [ 2284.906215][T23257] dvb-usb: error while querying for an remote control event. [ 2285.017020][T23257] m920x_read = error: -19 [ 2285.017184][T20217] usb 2-1: Using ep0 maxpacket: 16 [ 2285.021762][T23257] dvb-usb: error while querying for an remote control event. [ 2285.034201][T20217] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2285.037194][T20217] usb 2-1: config 7 has an invalid interface number: 106 but max is 3 [ 2285.050778][T20217] usb 2-1: config 7 has an invalid interface number: 182 but max is 3 [ 2285.059623][T20217] usb 2-1: config 7 has an invalid interface number: 148 but max is 3 [ 2285.068514][T20217] usb 2-1: config 7 has an invalid interface number: 227 but max is 3 [ 2285.076715][T20217] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2285.089116][T20217] usb 2-1: config 7 has no interface number 0 [ 2285.095273][T20217] usb 2-1: config 7 has no interface number 1 [ 2285.103802][T20217] usb 2-1: config 7 has no interface number 2 [ 2285.110362][T20217] usb 2-1: config 7 has no interface number 3 [ 2285.116554][T20217] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2285.127689][T23644] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2285.135320][T20217] usb 2-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 2285.146926][T23257] m920x_read = error: -19 [ 2285.155779][T23257] dvb-usb: error while querying for an remote control event. [ 2285.165658][T20217] usb 2-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 2285.176907][T20217] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2285.187950][T20217] usb 2-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 2285.201269][T20217] usb 2-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2285.215060][T20217] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 2285.233586][T20217] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 2285.246044][T20217] usb 2-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 2285.257758][T20217] usb 2-1: config 7 interface 148 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2285.270439][T23257] m920x_read = error: -19 [ 2285.276837][T20217] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2285.285053][T23257] dvb-usb: error while querying for an remote control event. [ 2285.308841][T20217] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 2285.322128][T23644] usb 4-1: Using ep0 maxpacket: 16 [ 2285.349906][T23644] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 2285.358135][T20217] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 2285.369040][T23644] usb 4-1: config 0 has no interface number 0 [ 2285.375434][T23644] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2285.386628][T20217] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 2285.408043][T23644] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 1866, setting to 1024 [ 2285.418934][T20503] m920x_read = error: -19 [ 2285.421138][T20217] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2285.436307][T20217] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 2285.447404][T20503] dvb-usb: error while querying for an remote control event. [ 2285.460465][T20217] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 2285.472416][T23644] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2285.481757][T23644] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2285.491128][T23644] usb 4-1: Product: syz [ 2285.496530][T23644] usb 4-1: SerialNumber: syz [ 2285.501457][T20217] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 2285.514445][T20217] usb 2-1: config 7 interface 148 altsetting 5 has an endpoint descriptor with address 0x52, changing to 0x2 [ 2285.529098][T20217] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 2285.540255][T20217] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 2285.541426][T23644] usb 4-1: config 0 descriptor?? [ 2285.557392][T20503] m920x_read = error: -19 [ 2285.557452][T20503] dvb-usb: error while querying for an remote control event. [ 2285.570059][T20217] usb 2-1: config 7 interface 148 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 2285.583871][T20217] usb 2-1: config 7 interface 227 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2285.597801][T24265] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2285.605472][T20217] usb 2-1: config 7 interface 106 has no altsetting 0 [ 2285.615986][T23644] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 2285.626334][T23644] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input204 [ 2285.641103][T20217] usb 2-1: config 7 interface 182 has no altsetting 0 [ 2285.675147][T23644] list_add double add: new=ffff88802b586c18, prev=ffff88802b586c18, next=ffff888026eee078. [ 2285.675778][T23644] ------------[ cut here ]------------ [ 2285.675788][T23644] kernel BUG at lib/list_debug.c:37! [ 2285.675823][T23644] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 2285.675915][T23644] CPU: 1 UID: 0 PID: 23644 Comm: kworker/1:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 2285.675936][T23644] Tainted: [L]=SOFTLOCKUP [ 2285.675943][T23644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2285.675961][T23644] Workqueue: usb_hub_wq hub_event [ 2285.676010][T23644] RIP: 0010:__list_add_valid_or_report+0xa5/0x130 [ 2285.676039][T23644] Code: 74 12 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 c7 60 df 4b 8c 4c 89 fe 4c 89 f2 48 89 d9 e8 ac d6 48 fc 90 <0f> 0b 48 c7 c7 40 dd 4b 8c e8 9d d6 48 fc 90 0f 0b 48 c7 c7 00 de [ 2285.676055][T23644] RSP: 0018:ffffc90004176b18 EFLAGS: 00010046 [ 2285.676089][T23644] RAX: 0000000000000058 RBX: ffff888026eee078 RCX: a3670ca93d95c300 [ 2285.676103][T23644] RDX: ffffc90011393000 RSI: 000000000002a5ed RDI: 000000000002a5ee [ 2285.676116][T23644] RBP: 1ffff11004dddc10 R08: ffffc900041768a7 R09: 1ffff9200082ed14 [ 2285.676131][T23644] R10: dffffc0000000000 R11: fffff5200082ed15 R12: 1ffff110056b0d83 [ 2285.676145][T23644] R13: dffffc0000000000 R14: ffff88802b586c18 R15: ffff88802b586c18 [ 2285.676159][T23644] FS: 0000000000000000(0000) GS:ffff888125051000(0000) knlGS:0000000000000000 [ 2285.676176][T23644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2285.676188][T23644] CR2: 00007f49835eb580 CR3: 000000005b49c000 CR4: 00000000003526f0 [ 2285.676205][T23644] Call Trace: [ 2285.676212][T23644] [ 2285.676222][T23644] usb_hcd_link_urb_to_ep+0x1d2/0x330 [ 2285.676244][T23644] dummy_urb_enqueue+0x2ad/0x780 [ 2285.676338][T23644] ? usb_hcd_map_urb_for_dma+0x3c2/0xc50 [ 2285.676361][T23644] usb_hcd_submit_urb+0x328/0x1b60 [ 2285.676385][T23644] cm109_input_open+0x1fb/0x460 [ 2285.676440][T23644] input_open_device+0x1f9/0x3b0 [ 2285.676463][T23644] kbd_connect+0xf6/0x150 [ 2285.676502][T23644] input_register_device+0xd08/0x1150 [ 2285.676527][T23644] cm109_usb_probe+0x11d2/0x16e0 [ 2285.676558][T23644] usb_probe_interface+0x653/0xc60 [ 2285.676581][T23644] ? __pfx_usb_probe_interface+0x10/0x10 [ 2285.676599][T23644] really_probe+0x254/0xae0 [ 2285.676623][T23644] __driver_probe_device+0x1e8/0x360 [ 2285.676645][T23644] driver_probe_device+0x4f/0x240 [ 2285.676668][T23644] __device_attach_driver+0x270/0x410 [ 2285.676692][T23644] bus_for_each_drv+0x258/0x2f0 [ 2285.676719][T23644] ? __pfx___device_attach_driver+0x10/0x10 [ 2285.676742][T23644] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2285.676768][T23644] ? lockdep_hardirqs_on+0x7a/0x110 [ 2285.676788][T23644] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2285.676818][T23644] __device_attach+0x2c4/0x450 [ 2285.676840][T23644] ? __pfx___device_attach+0x10/0x10 [ 2285.676860][T23644] ? do_raw_spin_unlock+0xf5/0x210 [ 2285.676882][T23644] ? _raw_spin_unlock+0x28/0x50 [ 2285.676910][T23644] device_initial_probe+0xa1/0xd0 [ 2285.676930][T23644] bus_probe_device+0x12a/0x220 [ 2285.676958][T23644] device_add+0x7d7/0xb80 [ 2285.676977][T23644] usb_set_configuration+0x1ad8/0x2180 [ 2285.677016][T23644] usb_generic_driver_probe+0x8d/0x150 [ 2285.677045][T23644] usb_probe_device+0x1c3/0x3b0 [ 2285.677063][T23644] ? __pfx_usb_probe_device+0x10/0x10 [ 2285.677080][T23644] really_probe+0x254/0xae0 [ 2285.677103][T23644] __driver_probe_device+0x1e8/0x360 [ 2285.677125][T23644] driver_probe_device+0x4f/0x240 [ 2285.677148][T23644] __device_attach_driver+0x270/0x410 [ 2285.677172][T23644] bus_for_each_drv+0x258/0x2f0 [ 2285.677198][T23644] ? __pfx___device_attach_driver+0x10/0x10 [ 2285.677233][T23644] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2285.677275][T23644] ? lockdep_hardirqs_on+0x7a/0x110 [ 2285.677299][T23644] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2285.677322][T23644] __device_attach+0x2c4/0x450 [ 2285.677345][T23644] ? __pfx___device_attach+0x10/0x10 [ 2285.677362][T23644] ? do_raw_spin_unlock+0xf5/0x210 [ 2285.677379][T23644] ? _raw_spin_unlock+0x28/0x50 [ 2285.677401][T23644] device_initial_probe+0xa1/0xd0 [ 2285.677419][T23644] bus_probe_device+0x12a/0x220 [ 2285.677441][T23644] device_add+0x7d7/0xb80 [ 2285.677457][T23644] usb_new_device+0x99d/0x1620 [ 2285.677478][T23644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2285.677495][T23644] ? __pfx_usb_new_device+0x10/0x10 [ 2285.677515][T23644] ? _raw_spin_unlock_irq+0x23/0x50 [ 2285.677538][T23644] hub_event+0x28e8/0x4d30 [ 2285.677559][T23644] ? do_raw_spin_unlock+0xf5/0x210 [ 2285.677590][T23644] ? __pfx_hub_event+0x10/0x10 [ 2285.677611][T23644] ? process_scheduled_works+0xa20/0x14e0 [ 2285.677630][T23644] ? rcu_is_watching+0x15/0xb0 [ 2285.677645][T23644] ? process_scheduled_works+0xa20/0x14e0 [ 2285.677661][T23644] process_scheduled_works+0xa8e/0x14e0 [ 2285.677687][T23644] ? __pfx_process_scheduled_works+0x10/0x10 [ 2285.677705][T23644] ? assign_work+0x3cf/0x5d0 [ 2285.677722][T23644] worker_thread+0xa47/0xfb0 [ 2285.677748][T23644] kthread+0x388/0x470 [ 2285.677769][T23644] ? __pfx_worker_thread+0x10/0x10 [ 2285.677786][T23644] ? __pfx_kthread+0x10/0x10 [ 2285.677806][T23644] ret_from_fork+0x514/0xb70 [ 2285.677830][T23644] ? __pfx_ret_from_fork+0x10/0x10 [ 2285.677853][T23644] ? __switch_to+0xc89/0x1420 [ 2285.677889][T23644] ? __pfx_kthread+0x10/0x10 [ 2285.677932][T23644] ret_from_fork_asm+0x1a/0x30 [ 2285.677953][T23644] [ 2285.677965][T23644] Modules linked in: [ 2285.677985][T23644] ---[ end trace 0000000000000000 ]--- [ 2285.677994][T23644] RIP: 0010:__list_add_valid_or_report+0xa5/0x130 [ 2285.678017][T23644] Code: 74 12 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 c7 60 df 4b 8c 4c 89 fe 4c 89 f2 48 89 d9 e8 ac d6 48 fc 90 <0f> 0b 48 c7 c7 40 dd 4b 8c e8 9d d6 48 fc 90 0f 0b 48 c7 c7 00 de [ 2285.678031][T23644] RSP: 0018:ffffc90004176b18 EFLAGS: 00010046 [ 2285.678045][T23644] RAX: 0000000000000058 RBX: ffff888026eee078 RCX: a3670ca93d95c300 [ 2285.678058][T23644] RDX: ffffc90011393000 RSI: 000000000002a5ed RDI: 000000000002a5ee [ 2285.678069][T23644] RBP: 1ffff11004dddc10 R08: ffffc900041768a7 R09: 1ffff9200082ed14 [ 2285.678081][T23644] R10: dffffc0000000000 R11: fffff5200082ed15 R12: 1ffff110056b0d83 [ 2285.678093][T23644] R13: dffffc0000000000 R14: ffff88802b586c18 R15: ffff88802b586c18 [ 2285.678105][T23644] FS: 0000000000000000(0000) GS:ffff888125051000(0000) knlGS:0000000000000000 [ 2285.678118][T23644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2285.678129][T23644] CR2: 00007f49835eb580 CR3: 000000005b49c000 CR4: 00000000003526f0 [ 2285.678178][T23644] Kernel panic - not syncing: Fatal exception [ 2286.826506][T23644] Shutting down cpus with NMI [ 2286.827150][T23644] Kernel Offset: disabled