last executing test programs: 2m54.186773906s ago: executing program 1 (id=771): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket$caif_stream(0x25, 0x1, 0x0) (async) r1 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000040)=0x3ff, 0x4) connect$caif(r1, &(0x7f0000000100)=@rfm={0x25, 0x0, "d034e68fae880aca9de7751355b0eb74"}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a40)=ANY=[@ANYBLOB="981300003f000701feffffff00000000017c0000040042800c00018006000600800a0000741302807013148008000600"], 0x1398}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a40)=ANY=[@ANYBLOB="981300003f000701feffffff00000000017c0000040042800c00018006000600800a0000741302807013148008000600"], 0x1398}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_usb_connect$cdc_ecm(0x0, 0x82, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x80, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "0300000068d6"}, {0x5, 0x24, 0x0, 0xdc}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x4, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0xebd}, @mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf3, 0xb8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x10, 0x0, 0xc6}}}}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffd7e, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "1ae65a95", {0x1, 0xbf9, 0x6, 0x9c, 0x8}}) 2m53.476876401s ago: executing program 1 (id=773): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x414200, 0x12b) r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000064d564b", @ANYRESOCT=r5]) r8 = dup(r3) write$UHID_INPUT(r8, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b500987f70e06d038e7ff7fc6e5539b324b298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r9, 0x210, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) r10 = socket(0x22, 0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x80044942, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) ioctl$SG_BLKTRACETEARDOWN(r0, 0x5385, 0x1000000000000) r11 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x400) r13 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r13, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="8a", 0xfffd}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41, 0x9, 0x2000000}}, @sndrcv={0x30, 0x84, 0x1, {0x101, 0x9, 0x203, 0xdee1, 0x3, 0x5, 0x0, 0xb99}}], 0x50}, 0x0) write$binfmt_misc(r12, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f00000002c0)={r12, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000010) 2m52.502108384s ago: executing program 1 (id=774): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x8, 0x80000) fanotify_mark(r5, 0x105, 0x4800003a, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r8, 0x0, 0x0, 0x80000) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={'wlan0\x00', 0xd9, 0x6c}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r9, r10, 0x8f5, 0x100000000000000) (async) tee(r9, r10, 0x8f5, 0x100000000000000) write(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 2m52.090288422s ago: executing program 1 (id=776): socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000440)='./file1\x00', 0x82) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) close(r3) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_G_FBUF(r5, 0x8030560a, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0x80000300, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) 2m51.739420604s ago: executing program 1 (id=779): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000005200", 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x19, "d7624400000000152a776ad8d85fbe76e63747000000000000"}}) 2m51.565438268s ago: executing program 1 (id=780): creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f0000009780)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000140)={0x804, 0x0, 0x0, 0x0, 0x267a4e37}, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 2m37.810295726s ago: executing program 3 (id=827): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x41, 0x0) write$cgroup_freezer_state(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x15, &(0x7f0000000000)=@string={0x15, 0x3, "e7a67afaa6bd9a5f9970608d0eb214b1ded1ff"}}]}) 2m36.459742566s ago: executing program 32 (id=780): creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f0000009780)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000140)={0x804, 0x0, 0x0, 0x0, 0x267a4e37}, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 2m34.771658013s ago: executing program 3 (id=836): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) semtimedop(0x0, 0x0, 0x1f4, 0x0) r3 = syz_clone(0x20022180, 0x0, 0xfe02, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') setuid(0xee01) pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x1f0) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0xb00, &(0x7f0000000080)={0x11, 0x4305, r6, 0x1, 0x0, 0x6, @local}, 0x14) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000040)={0x20071026, r7}, &(0x7f0000000140)={0x0, 0x100, 0x8, 0x80, 0xfffffff9, 0x9}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="0ac5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000300)=0x3, 0x4) 2m34.590062496s ago: executing program 3 (id=837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x3, 0xfc, 0x4000000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) 2m34.423025413s ago: executing program 3 (id=838): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'nicvf0\x00'}}, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x18, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 2m34.055393572s ago: executing program 3 (id=839): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0), 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x810) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x42000) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x6) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905", @ANYRES32], 0x0) (async) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000002340)=""/4096, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "59d8497942c4b6d8fc96b237723535c4bf539fc5ec01bb743b8a49719044bd93", "c2154fdac443beb59c47e60cb088dc6c8ba2eb9b2f490c91d69b659e0d2ad975", "f77f347183a0a8e0751542b100797b498e4cadf1ff314c332647b8024cfdce87", "88bdf5370d14180a3c2cce964f541597f291482c79f7675d56c0bec589b3435e", "f00165386c64c2e449f0e6cb72c95ab8d86e02f4ed669b78c5a0af146d26bc2b", "009b1c2fc7f6b7188a0ef7f5", 0x4, 0x100, 0x9, 0x8, 0x1ca}}) 2m32.690049229s ago: executing program 3 (id=842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0xc0189436, &(0x7f0000000140)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x20040000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10040084}, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x69}}}}, [@NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x3}, {0x8, 0x2}, {0xda, 0x6}, {0x7, 0x7}, {0x3, 0x7}, {0x0, 0x6}, {0x33, 0x7}, {0x3, 0x1}, {0x2, 0x7}], "0546acf948e2c7d9"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x9, 0x4}, {0x9}, {0xa}, {0x5, 0x6}, {0x3, 0x6}, {0x8, 0x4}, {0x7, 0x2}, {0x40, 0x5}, {0x2a, 0x1}, {0x4}, {0x1, 0x4}, {0x9, 0x2}, {0xf, 0x7}, {0x5, 0x4}, {0x4e, 0x3}], "dc43e3844287e12e"}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x39be, 0xd000, 0x20}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, 0x0, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20040804) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a000000000109021b00010000000009040000012e6d0a000905ff", @ANYRES16], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x8c, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x3, 0x80, 0x9d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "98d9"}, {0x5, 0x24, 0x0, 0xdd6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x5, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @country_functional={0x12, 0x24, 0x7, 0x3, 0x4bed, [0x38, 0x8, 0x3, 0x0, 0xa209, 0x10]}, @obex={0x5, 0x24, 0x15, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x60, 0xe, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x600, 0xf3, 0x9, 0x8}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3, 0x4, 0xde, 0x40, 0x7f}, 0xb, &(0x7f0000000140)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}) 2m17.50368943s ago: executing program 33 (id=842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0xc0189436, &(0x7f0000000140)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x20040000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10040084}, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x69}}}}, [@NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x3}, {0x8, 0x2}, {0xda, 0x6}, {0x7, 0x7}, {0x3, 0x7}, {0x0, 0x6}, {0x33, 0x7}, {0x3, 0x1}, {0x2, 0x7}], "0546acf948e2c7d9"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x9, 0x4}, {0x9}, {0xa}, {0x5, 0x6}, {0x3, 0x6}, {0x8, 0x4}, {0x7, 0x2}, {0x40, 0x5}, {0x2a, 0x1}, {0x4}, {0x1, 0x4}, {0x9, 0x2}, {0xf, 0x7}, {0x5, 0x4}, {0x4e, 0x3}], "dc43e3844287e12e"}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x39be, 0xd000, 0x20}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, 0x0, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20040804) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a000000000109021b00010000000009040000012e6d0a000905ff", @ANYRES16], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x8c, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x3, 0x80, 0x9d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "98d9"}, {0x5, 0x24, 0x0, 0xdd6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x5, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @country_functional={0x12, 0x24, 0x7, 0x3, 0x4bed, [0x38, 0x8, 0x3, 0x0, 0xa209, 0x10]}, @obex={0x5, 0x24, 0x15, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x60, 0xe, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x600, 0xf3, 0x9, 0x8}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3, 0x4, 0xde, 0x40, 0x7f}, 0xb, &(0x7f0000000140)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}) 1m28.64115456s ago: executing program 0 (id=1094): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "592d2201accbcdee", "9f87662edf4c6faf5ac63b89ceedafc0", "9fe3c24d", "4a08813a7cef6004"}, 0x28) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x238, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x621}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2ce}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x33}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff4b}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES64=r4, @ANYRES64, @ANYRES64=0x2710, @ANYBLOB], 0x48}}, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 1m28.301915168s ago: executing program 0 (id=1098): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000001000)={'ip6gretap0\x00', @ifru_addrs=@isdn={0x22, 0x5, 0x1, 0x2e, 0x2}}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x805, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000001100)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={r5, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300400050050000000090a010400000000000000000700000018000840000000010900010073797a30000000000c0009800800014060000002080005400000002d08000a40000000000900020073797a3200000000140000001000010000000000000000000084000a42dc6f1c815a2833864a7405eab87da7615669c0a140a5e965f9f70a0c47ea42eb1e7ee571c2d6cafd3bfc9e8dd8fd8d5cdd59aed38868df46c227ed885509e209c44e137baadee4e0ebf4210f27f88f9e0b89a799af33af8c885e74865e86a0ebfbc0160b1c7bbd3ffdd7cd2f80ed982fdb024f3fbe1afd377d620574bc1d9540d044a4dc08b2dc6608"], 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000011c0)={0xb0, r7, 0x5, 0x0, 0x0, {{}, {@void, @val={0x0, 0x99, {0xf51, 0x67}}}}, [@NL80211_ATTR_PBSS, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x41, 0xc, @random=0xfffffffe}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x0, 0x7e, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x0, 0xa2, 0x2d}, @NL80211_ATTR_AUTH_TYPE={0x0, 0x35, 0x7}, @NL80211_ATTR_P2P_OPPPS]}, 0xb0}}, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0xeeee8000, 0x95, &(0x7f0000000040)=""/149}, {0xd000, 0x82, &(0x7f00000001c0)=""/130}]}) r9 = userfaultfd(0x1) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r10, 0x8905, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x5, 0x8001, 0x1}}) rt_tgsigqueueinfo(0x0, 0x0, 0x2d, &(0x7f0000000100)={0x1a, 0x1, 0xf}) 1m27.805952011s ago: executing program 0 (id=1101): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x10000, 0x5e, 0x1ffffffffffe, 0x0, 0x0, 0x6}) (async) ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f0000000000)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) (async) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000480)=0x8003e, 0x4) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) sendmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001340)="cb75c73a02d0cf76f049a9e91a3630c9e6cf515b03bf70d20134d1f5bfbaa339b9b931033431640e", 0x28}], 0x1}}], 0x1, 0x85c) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) (async) r5 = socket(0x2, 0x80805, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) (async) sendmmsg$inet(r5, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x0, 0x8000, 0x8001, r6}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r6, 0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000002c0)={r7, 0x6, 0x80, 0x3, 0x8000, 0x0, 0x5, 0x624f, {r6, @in6={{0xa, 0x4e20, 0x34d, @empty, 0x5}}, 0x4, 0x6, 0x8, 0xffff, 0x7fff}}, &(0x7f0000000380)=0xb0) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x40200) write$sndseq(r9, &(0x7f0000000400)=[{0x8, 0x80, 0xfb, 0x5, @tick=0xffff, {0xfa, 0x8}, {0xfb, 0x1f}, @note={0x9, 0x3, 0x7, 0x8a, 0x7}}, {0x0, 0x1, 0xf4, 0x2, @tick, {0x8, 0x4}, {0x9, 0x40}, @time=@time={0x40000000, 0x2}}], 0x38) sendto$inet6(r8, &(0x7f0000000140)="86", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x1, 0x0, @private2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) 1m27.805517955s ago: executing program 0 (id=1102): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) r1 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000240)='Z/{\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0xa, [0x8000, 0x0, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10000, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8000806d, 0x407, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x83ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x100000, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x1, 0x10001, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0xa, 0x4, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0xd, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x4, 0x5, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x9, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9f, 0x6, 0x0, 0x5, 0x6, 0xac8, 0xc3, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x2, 0xa, 0x0, 0x405, 0x1c, 0x120000, 0x2, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0xb, 0x6, 0x229, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xe, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1e, 0x5, @empty, 0x6}, 0x1c) 1m27.755059366s ago: executing program 0 (id=1103): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_pid(r0, &(0x7f0000000180), 0x12) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) 1m26.394128173s ago: executing program 0 (id=1108): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x143, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8}) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=ANY=[@ANYBLOB="980000001f0001002dbd7000fddbdf257f000001000000000000000000000000000004d202004600640101000000000000000000000000000c000000063500004c00120067636d2d6165732d63650000000000000000000000000000cceb772900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005907350000800000"], 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) close_range(r6, r0, 0x2) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r7, 0x80286722, &(0x7f0000000140)={&(0x7f00000001c0)=""/57, 0x39, 0x3, 0x8}) r8 = syz_pidfd_open(r5, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x40000000200, 0x101301) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x18, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE(r9, 0x50009401, &(0x7f00000003c0)={{r7}, "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"}) process_madvise(r8, 0x0, 0x0, 0x15, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) 1m11.124596952s ago: executing program 34 (id=1108): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x143, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8}) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=ANY=[@ANYBLOB="980000001f0001002dbd7000fddbdf257f000001000000000000000000000000000004d202004600640101000000000000000000000000000c000000063500004c00120067636d2d6165732d63650000000000000000000000000000cceb772900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005907350000800000"], 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) close_range(r6, r0, 0x2) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r7, 0x80286722, &(0x7f0000000140)={&(0x7f00000001c0)=""/57, 0x39, 0x3, 0x8}) r8 = syz_pidfd_open(r5, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x40000000200, 0x101301) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x18, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE(r9, 0x50009401, &(0x7f00000003c0)={{r7}, "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"}) process_madvise(r8, 0x0, 0x0, 0x15, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) 53.568285572s ago: executing program 2 (id=1220): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@volatile}]}) (async, rerun: 64) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x7f, 0x88}}]}}]}}, 0x0) (async, rerun: 64) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000000)) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40043d0d, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (rerun: 32) 52.589402067s ago: executing program 2 (id=1223): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x66, 0x84, 0x1e, 0x40, 0x7c4, 0xa109, 0x8a3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x8, 0x0, 0x0, [{{0x9, 0x4, 0x4, 0x0, 0x0, 0x11, 0xeb, 0xe7}}]}}]}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x35) 50.6742874s ago: executing program 2 (id=1228): mkdir(&(0x7f0000000440)='./file1\x00', 0x82) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (fail_nth: 15) 50.570908519s ago: executing program 2 (id=1229): r0 = socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xec, 0xcb, 0xc0, 0x10, 0x506, 0x11f8, 0xb628, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x52, 0x0, 0x0, 0x9a, 0x66, 0xd4}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000a00)={0x18, &(0x7f0000000800)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x3) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000180)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) r11 = openat$incfs(r10, &(0x7f0000000200)='.log\x00', 0x10d100, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r10, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r11, {0x10}}, './file0/file0\x00'}) flock(r10, 0x2) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r8, 0xc00464c9, &(0x7f00000001c0)={r9}) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x122, 0x0, 0x4}]}) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/280, 0x118}, {&(0x7f0000004c40)=""/4097, 0x1001}, {&(0x7f0000000700)=""/129, 0x81}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f00000002c0)=""/183, 0xb7}], 0x5}, 0x401}], 0x1, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000440), &(0x7f00000004c0)=0x80) 48.602435014s ago: executing program 2 (id=1232): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000800d240f0105000000000000000006241a0000000905810300040000000904010000020d00000904010102020d0000090582020000c301010905038fda"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x2, 0xa2) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x2, 0xa2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c3a0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x0, 0x9, 0x0, 0xfff8, 0x1000, 0x2f3, 0x7, 0x1, 0x81, 0x9, 0x6, 0x2}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x0, 0x9, 0x0, 0xfff8, 0x1000, 0x2f3, 0x7, 0x1, 0x81, 0x9, 0x6, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 47.648568534s ago: executing program 2 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x44000, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x8a883, 0xf) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x32) read(r2, &(0x7f00000019c0)=""/4107, 0x100b) 47.33970344s ago: executing program 35 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x44000, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x8a883, 0xf) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x32) read(r2, &(0x7f00000019c0)=""/4107, 0x100b) 8.3053053s ago: executing program 4 (id=1375): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$uac1(0x4, 0xd0, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x9, 0x0, 0x3c, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xed43, 0x55}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x4, 0x2, [0x7, 0x5], 0x7f}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x4, 0x0, 'c'}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x0, 0x2, "9f"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x5, 0x4, [0x9, 0x1, 0x3, 0x9]}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x3, "ed0f7c0baba3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xfe, 0x3, 0x81, 0x6, "8cfec9", "09c6a8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0xaf, 0xe, {0x7, 0x25, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x2, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x3, 0x6, 0x3}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x1, 0x3, 0x8, 0xb, "8004f8", "e78266"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x7, 0x9, {0x7, 0x25, 0x1, 0x0, 0x11, 0x4}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x0, 0x6, 0xa, 0x8, 0x4}, 0xb5, &(0x7f0000000240)={0x5, 0xf, 0xb5, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x6b, 0xff0f, 0xeabf, [0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xd, 0xc, 0x2ca3}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x2, 0xf, 0x9, [0x0, 0xffffff, 0xff3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x9, 0x80}, @generic={0x20, 0x10, 0x2, "0aeb5d0475259487e4adaff62e474ddc22cba6527ece0c421a67d0ee95"}, @generic={0x5a, 0x10, 0x1, "ddfb3a2a2b178882092585b1ed858f1eeee79cad71306c1605666ad950146309bc9a534bdc30905345afb31b36230428d513fe01aea84a0410698df3172a401504d74227e1cd13d11c80cf3f857ad5d268fff060b8c0a9"}]}, 0xa, [{0xb3, &(0x7f0000000300)=@string={0xb3, 0x3, "f997b74e2b70bc1216496096da35c873b583e2f8fb23d2643b82403c9b942c77ee0d4c07c5c4fb72d22960da277fd9d7f656dfb6e763c295b2d80537533e7b906e48a823901276b8ce4c12b23c9af7cb886e4450588c606023caee10dfa995ea72a51960a2e3df29d27d1317bfac3ea976e67bf89e4e01837e5a56b58ef846de3ce68d8f2861414395f3d1ca5eef3e758545bd417f2a3a805a185bd8ca053c19de6321442b1ffe2bd05903535f0019ba5e"}}, {0x8a, &(0x7f0000000440)=@string={0x8a, 0x3, "3802dc07df651ef496853fda7a1ff386de8c7c2e76291425c04dec3f03d165f2ef806bcf5a62c8222346cebe889184f36507547476b9c36c06a1d776c61dd36000cb8a22b0adc2394ccfa4e844d2b858a74878c4dec2ddcd41821617db7b74e0da00c43e5805ecf774747f64b88e7b8df5c2826f75c5248150012c1a241bd57e89dc7e4ad0224ef6"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3444}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x408}}, {0x40, &(0x7f0000000540)=@string={0x40, 0x3, "671ec473f16cb641e53890407d1fc71ad51b34d1d252e85b83529dbe0ddc5122efaaa102872689dd89791c37ec37901f09912263165fb23377da7c41dda1"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x408}}, {0x94, &(0x7f0000000600)=@string={0x94, 0x3, "04b8a0c3dff83b2d7730d86d97b396d4b74c2232b2fd708a27fda6d93e5ec14c599688cb94c9e1b6ace428adeb50e4b1b7fbae217a8d0ea3eecb384a4478f7fa7ad42e1ac689aa16ff45117511065f90367f6f24620b7ed023f2285b3d08fbcf9b2bf7a1aa33b6e7bffebc297862c0a0f555baa831f5c743371ad22b7ae5370e3425dcf4ceac4b9bab90aaa368e1648f8cf7"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xb5}}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002540)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0xa0031718561b10dc}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) syz_fuse_handle_req(r6, &(0x7f00000062c0)="5c6db8bf44c8ee7245f8e224c9af35b8b81666bec364e08fc57bd42d1450a0df9820d196188841149a425103c3f0dc6a981aa123adc0c3a31b13dbbddef9469c3ab008669c8f98b01007ae504f204c9b9c3dd18b5ab45c32bac2a4756e3b9a9c232d0fa1240e8a3a371c254aa1bb0bc4de5261de2ea9406f8d3ba445224dd3d42d618e9524b6ea51833a0a0427bc5b7d856c37af86ee858b6ab382fb33ecd59b6ad4313367baa92f75474bc1e9005882608f29d68ab73b80c02782bbc89151090abb13d806f20b7d3a474c7d785cdde2f9ab237c34fb3cae8678cf349f339ca74927aa91300d1485893752a73f0aa96bccb3b29aacd91be679ee0b546811e3447f6d85f3d98e1a9b99921f7a8ccdf8fa8bfee49c939a8eb183bf85be2be3853ec04c532e13bc56e1fc5e3408d799d1d6169efe2710bbf7e1d288ab0171d97c1542b290b15875ad4d7c8e3c03aee964c5f7edfebf2cb5aaa990dbdf9148e48e9020fc3b8aea9472cbe0476db2631b693d7ed93b7e2e22bc05714fb8995b11ff6c47fefa0fec4dfcb5c6151bcd678402afa811db96e42a262fb74b2cb33660fe01b1bfa76b10ca642e8da643b5567ab4a55476e329cf68fba30c117c23f25e0824e75f2a7aace3c229cacf2f76f19fd29b515ea074eeca94937dfd5365bc844780a50d1dbc7611fafb518783a26bff651f3107f8a252ab69c83e7f4c56f7c12477b0df334885131af439dc10876c5c731cd26a9c44bd55e938263f2b5e636caa800e6748fc0eee6830747de7e2b15f2603ca16648326c9aab0d21159be2bbf3f0a0f34e55f0ca011c77a35bba5f5c4d926c6d9717e6ad303a1be22f5d3472f1cc033b0ad42871b28efa172ffa9417d9c46a687baffeecb243747b475810204fb015d5070530670365647c2527c89387c9787e822a8d0aff018c9a2d2fac7ad203c60b17877267dda3736659c7cd482fc9b3f834a01206dfd1ff0311bb2f1f017d8d2641708375aa232bf325b1edffd22e676493e5824ed534f646f1451c3c573fffddff4c52ad81c18ce87027b211701cdecddbca4aafc9d65aed382b78e419bcff3623b605dfbdbde0f894036574f438506d9b5bd00c193db1bbb97d819bd667dd7e643a236c9d2237f73bca3ba404ea32c31e37cf84a9defa843b186154d076f2b74a895913b4e33e725b899c8d52b0cbdc1cf923927868bb5858a24b7d90958944ccc4b0c846e9c34dd9c82a1402aa8bf184d40dd16ccabaf26312b8dc7bb5c93f9b6cebc45ad20967bbc4c1ad3da11a05c77800efe5208dff3c3c455064ebe4a189a7a1e7dfd6ca606a580e32b73172a5e70a42cd0266a1216f7e46063121c977a0d35969338dd675ee37fcd5a2d95b10de2462af45f148178ccb630de6a69e571582aa521a219647f3d7bd5c6741c11d876d9ef5108d363fb3b38db2019b38c9449cd6f0f2a2b0bf288d93243e6f046d78c0bc9589ee8ef8bad33945f742ae4315462a1c2ea5eab4a318978eb59b8dc785b316dca5c4f21d3d8782802c0f4b14aed5a8ef246ee772ce61d867b6c39772316fa41fa038cb3347bb05aed4cdbebf00a54a5541bc067c50cf7812af5dcc330908aa0f6bc95db603cffee4bc0380f07145b2f464740289708e28ab3cb8573f77ddc9767f57f32ef3ae80c5adeea4686bb842120c5cc3e9b98b9892f2c1497bc96054e211fbb8f9cd9edb0ffeca6c8d8a1f8c054c0c7dd11bf3961fda9b8a4527afb00baca8092dcdfe683c95c8be62161e9b7614ba6d6d3f455efac76f252071929da95396cbc377a0429f603d5cd894f9c56ca883e39ff7710bad7bb5836d796693a6c2e1b5d26a479ca491bb9545edfc4656c8a5e1b4baa8c31b645eb742289794ff4124fcdbf9cf54eecea5698d13e860a89e22bd7234efa9029cfadd16eee98562c57f5c1fae4755f214b609bb38473f61cd81316f46ad2009d7253b5a0ae0a16382f377cfe9e26b5e7a8cdc307d2c753731a3c089803f7403cefec69f3840ca6cc36f084da1d1e309123f6fa1b8c0e18e69adda4eb8803bd37669cac1518f5aba8ab7b51c9bf4f929288c1606407a389bdbd54992b1e7a2edba8abbe15197f0e8c0070ee0e3c4c001d5a3cb25b213641addb60fc4e29faba5edbfce75ea270e809692b999a984a5c3d6bc00bec8237a7d702e07262b85d309c0d2e343d2e7c6c7d349b5431e4d873cdf452d3430d2cfc7349957941a572d4f7dfcdc637a409b8c5800bd6e702da6a9c202b5dcd4d2f9af10e77cf0b3b72bcc308fb2e0eaa2dd8125d4626125b2a1aaadd5c411a3b5ea7805862e74ad316b84512913728be4dcc9405c89ec328fe3274c85785090350cd0096db82ae8816110ea084461e394092b0c33b10e1102cf90131a036574d13ffecbbad1c6af8a49a9cca9a1a1016cd081b734e12209be2f00a13518cb66abd49c76813405ec0407a876f4bf1f1efa89a465299b4d62b0cc6ee13b7b3d37148c556cd2907f7f1c7ffcba3cd343037b99d362c0d4f3637355598482182a3e3c391add5a8c63253217a8852037ca1f1d159c693917c4b50695d1d43d506d535eed02d4511ad146a46d51d8599a44e3f0de6c7f3dc725927293b3083c6ef28215b6b046b57dfcb3df187e08f723376f627c5d35dcaaf490f6468bf98d5857eab01f7615197469e221602d5021334d78476cad69bb5898cc49d5fd4ff66ef16ec23ba56f32013494f59b578603c7a0e825245e04f649b1ea4d602fc64395584a543ca75dc9a5f5fdba156c9ae020e25efa34056e17da701df57c6e5fd664d9e840ceae12e8a437cf29c80635ec8f23bc180f679ffe412de84762822553253c4b9431bb4835b31b8cd6b49b5db7daa37df1715fb4651032515215923c19de8c13e509f3814d1f9d839f56dbb34f4369b988e6b3c2826718582e6b30249b36784457b8e161b2dbd9ac67e4406c801eb1f54447bd19d3320ea606a642f5938f4c68480bac127ef2a9b54e287162c6a2492980964d43005f27716992ef2a19a5fb5ae9dffc7b3d02c67a73f0176edcc13b3fa187e2cfca6c82b7695e3f728d657410481e9146c15f72eff98953ea2c59e9420a5e93a61ca081523baf6d5a3bd09c73d1c4353571e6fd691609a0bf7934800b17d5627bc03adbb89f64b3326f01d4a83972498b9c9c77b17989dd877348e0bec50a1f0a9cd4d6b7b241148bbe3d2f58c8e818c5481939af59584c8a79b518c044bf3dff0933c42e4c76d7a5612d4f74bdf04d1a963bcfccab0be24bddcaeff8f476c138726f194bb2a00810cc1aaa159e156d450698532c6fc6e234d3ba4572cdfc2e1afd003e8a68c6d58bd7cd55c681a9b48faa52a11b1603607fd8e682c7f22b7e7cf772662d1a97acf38af0e075629b73a7df6374698902280f51d3c518607649359301b7cd0055c454cf4a249a2cb45c33ea9ba32714cb26991cd24974feb48ddf0de6e1f583ac9180491eebff08ba9549240964507aa9b8548d63400ef03f0a11e06687e3bf92032e07d11f301a9dea8bf02a1d0d18ccc4e475bc8a1c04e6dc04d42558c19776c9c3f674b7b2fa6a79410bd169dc5309c718535f25547d16fd1f0ef9f3770f891e901fd1ff6cfcec1d07a4ff318e33a901b7c6538c49b8b35e64e51649b539095bb8b0a7a330b79289b9dcaa3e4313b8e5e49fefd6c214f5a55b9624809a8ee1fc355a1005e9a4894463ce088d054ef4248d568b4b4747e16e19afdcb40320b83f8a5e64fa77c1e5bccb8c8505f573e64afc46e4aa696c166e061ee7cba2c4c926c335da181cd151e80c116cae2fb150b25463714f78e1d9ce3f75e941b9dd57b0ca28593a9180aad70cc1b79c301df51f583292386c85560d95a84b8acdf359d3c1fa78be39eeecaa4714b6e0fbe3d6f0dfef3300c0b80d6da4e872d1765b583f4259e9dcc23aa63d9d645715425afb60f62ddfb6c2018e1085e19d33a58bb06402f8ffc30728b25c6f060c630970a03897c49fdd17326f67dd3270b7d0f2f6eb70c9aafbc5bc023eeb015cc7c34f0680def1a166783ac6ad268eb361e08428449421cf489fba2dbafd74cfc3d9f2db6c65fa62d04aa8d2785da79226d97c16a985baa60ff93784fbf4456f995f0f02f40d453e5dfefe932e3f2aa5d0b8a58c071716e0fa388ed96b649e62142b69a6fe0a7d8b4ce6190f6ce50c4ff706e686dc8a11b947c11296596892270467bd3dd789b0bb212ccd0f17ce8f27e4b6c7caf89a592317ab0808fddd092ca513d01b6925a5bf912eb028223d48dc83e141b82bc02a03cd3d75143148409b99f63181f14c14936ecb76b8753b74564c98feec7baa0509cebf8ca6d7349f45fdae5f3404f16638feb33622d43cd58de022ab73de3078e3dff7b51ceb58074f8dc09db7eb512d43b700ac880713106a2e6f3a18da7743b95460d2b417b907f89fb4fa5b3097e34713b5a6a73cc9f76836d353116b8c37f9cfdd36b5ea2d4cd9206a828dde7fd936ffb8ac95f9d10a9f24d2586acba4b4f86f0581884d0ae958e8e4618b70a706edb31f2e3434f1992f0ca30d55ec582a7364e16f5d632afd8955360b0b1433155d008fb270a00945463a351ffcc825febb32f31289caa453852d689d12b73f8ef38c73b1760f0cc4c4cf79dd06de9f0fbddc6270982433a9f6fc3531f41c9f31698cbf074353b7318245674df25c19a54f34ef664dc546f310865a9e1e34be4c4d7654158a4c7f802a13e10822f60f6a2462ddafd079f8f3b679d409ac53cd7389a487f522c1d3cae8b5d928dcfa354afa15f1b6da256b6a25ac795a9b0ef8570a7b55eef339f9463bae1b656e5e2987b65e3c67f30632c65a71b7738bb9302c1501023cae931cae04aa13516e0e981ad4fcabcaeb80fb3dd25263e8e949bd462b60a9dc3ebedbbe4b497d0ca61f92664f7d6d4ce921a9b15cf8ff7e79cbd6baface0dc3e7bb0acd2452d15cb490cee915564814ae74f578ee954948040a1d544caa218630b8e54a243dd2e4a439de20893c1b5d2ceaad7ee8e02910db115c2a4c93f561dd8d3083910de2cc1e8e2e58793a9f4560bbe5ee45ea02a5158c0cc4c67bf1fe8e1c447ed7c75e1586a88dd153e87e5d036745ac253de40c6158abcf0b531305d21dc2c577a7bb8c256c8dd140b729ac367b027f64def76b1a291ec8a9c59caa3c15a9b1a6ceab55d64513f225c9f80cc627d94f33e9fd4f7a5fc4628669846f3c3febb0b68d2d3b51cc2223fc0cc61f27f69a5c2bc537cb3cbf3bebd1d5a933c1fe91555c318c7cb3608d66aa8c436de3e7b6c45df033d84d4e02e97a05240479b31911f8205c10ea0603c08ac7f4c3ae0507e3ed9ee56f2b246a05d8ddf2ee0e7f7f84adc0eda403b8bf05c3523bb9c34b924e3318af6e554b30bbd3986a4f821e73cc7b9bed8f0d333bdf8f3e0352d5088ab9e8d708fdd041938b6908ed1fe569f12c187af9ff7d4b7ab7f7c98e7bb9227fc9ac406460dcb637816dd7a9f46c103c0a6baf1afaeb006859ab6dc3bb3a15b7b9c1bcd9af98c4ade75dffbe6cffedac94b4dc2ce9c723ce6e0d992bea7f7318ca48015cb98a8481616879df724945b7f36314f2204579c9e8c5541964d93523923a9a86c99f1f4fabc883f1e8e0fbc1831204fe14c571fa3601c39c83693d68c701c58c178babb797e1f07b3697ed2df2726955a23676c5b937b66d271abc897393bfa3d7ca2a2218d18d049356cab30c8df0f0436dc33f3f028498ee6f09ad41d701a9c6fdc10eea767d2e6a689f09dd87a025458df7a1803940d553612bdfd0b57b1a675ae3ee269d9cf1eb0defc5af1cba23cd8e9f2aa8e1a11d8b84eae2efb151c30df98aafb762294fcf34ae7c93f77f2508aabae6b0cd7924d6df098f14fa94cff60c372aa4fd90dfa1486a9958b7b478e82dc71d2711ed351f18d5dbf28ec7814265d3f894d9ff87aa06b3f1e0819626e3621865e559e6d6e2e98ee1dd3147215378e148c53be869fb729c0aab39e626bc361ce08052f2202853f37b26521960083dd44aa3fb9e7dc89902ff1f95bd1b525c9faddd51da0d416e713c51ec6fb8dff1fad95c22cc15a956f67d4ff0b0eaf5a3ec4e2e25a7ac2c99e126dec1c5bc3cf2a9bf0114abc85add005f0973538e5d277b37a976c9db12422f6357cdcb88629380d12b856d455f068a3dd7f1018bf46d5ea478fe9250aff005c3b34df2295ee1f8950376e48f1c0b046f80a0af05c6c6b89073099dd3030ac6ecafbc96dd8a53db66ba5927c8b6e552d60ab0e823cd294816b9e300e3b4b9c324722fc0b24939b15276200f0d2a891a01e47d88c6fe8de08bf05e587b30dc767d9e20f5f703a9a9a9d3bd03db32f315994d8c4c420c63d14ae4330fa394013a45cc581395cf70d3f43e80115f2016008830028ef3373c0c42483d1788ed4ba1cd3710f276a5e6edf10657215c468716749f76de800e49bbe3aea04c20fede8a98a7da878a7a04e39816a217908d285b6438d3bfea81aefcdfc0d4a12f219845d760cf0f7b0a08ef0319a9e200730f6011d5c1236dbee9693a18e1f284601b9ffdc187a4e9562e8f7785f5f335a76aa30251a43e359722113797880fc2fe15b85636924a65f387c59306e037f84ba214a4745fd1ec5b72056baffb3e7b39d2c5238b85cb4f7ea1176ea446d4fbe1948f72313c538e40e8645a34273d8a92056c09b3463086c0892d97fe19ae27afdf491a750d560e91be806a675ce1daba4c823a83e24c424e438e86487512b0ebfe9a930d80d10bb3869e0b162bc5207805e20306f783d1690b24a11c37c4c18f913d925ecd37d5e8ce4cc34afd2e0435c568f3a5e6982208ef82812f971a37a38ad925c29df133b086f573fb08d24fe4709381c65243c81865e990cb6f4279c82487556d1dea51c7a9a6bc64e3a7236ef44bc1fe3579f36fa9c2b56cd4f7abeb6688dffe7262aa9d427cbd9d3da22fdf988181d427606b3830e1225c43506aaffe74b1c99a20a79d7ebf7f19c0cb5a4a6b056c723fe8447fec5320e10d409d81b4109d149d11bfaccd55805d46a784ebf76832b03365b260498d67d118b659959674ecaa625c075d792990a18bfca13276cbf8c71bead0527d153ac39f1598b00d128cfb6c06096b865a48695968c76abf131cc2ce331a3574e9142b1528ffb99207d6708fbe825f4997150f74b2f59df61ecbc354c43b7f826810804ec861075b6eb67ff228a495ea3a66b42f3aae38edd0a58de623b0b4948b23f40c67f265f508c39455457af424a821dde2e82fb579f1be665f849038a59abd13963fedaa8568db48ccc5784d2b9d7165a8f5f68a65ff30ba760cdcbf70da836fa4ce3f482b0cca559401e20a3500a1f6fd7271f2e5d5d580d9052aa08c81c918fbc14e59aa7cdb2da5ad972dd9166c12d391a0a921a1d214c98667ee3c44eb86507c4eff9ef9c9d6fe78fcd4817124ffd0eba47f4decab7ef4c84f9f131c2080e9843843472b3058a908465257d8c535f21a4f7b7520ae12b6bb84ba72f50e8f4e454a6bea215459164c8402a9df2d3b68afbb0515abcb1cb1168f1b8ce1853ead9c62d4e70093d9295355e9ffecdf7d621972ad8995e2a8cc3476f8146082ebc6d026acd370ee365ee1e747429f914fc93ceff847f81fcb1826be8618d5b46992a467c0e31c407bae356d5e8568e5aa31aa65b313891ec1e0fece67dfacbd087fd0a981539bc1ceaba9bd63a4e4c59c31f4b2bfebbcc31ca95c2a47f3d5dc0149673aa68a3b32f36b2accd45748e6bcb02f3032957c7b10a7990d40f09e83411a7f7d1731f19054776413aa5af9d21928704be77110cdf14759b12dc5b3cd68404b8ba2e40fb6359fac65ce5e8225f15c33ce9358b39d7030ed8822a588c9d2768f9c038c12454b247668520ff3524536d32141d42ce197bed8bccd8001a045f1b235517a02562d68b873f8352d93012b5edee9a0efd7bfc3f9b5d30f3aa06e830ad97fc016815eaec5900d426cd9dc448e4ad5cff033ac7979275c3056cab668b8e672001e789f89aa86081d3dd5392c98426ddfbedfa54fd9b4ffc6a5e92462a2a1c111da0900ea8584b8a23660ec431e1987520929a7e26c6e51eec8e8d1f4345ab7b8bf51286224405ef025a3bee9692ca49848a19277fb63726f045c8cecadd9c5ab70b547d61fe628de61f42c4700f9e30662bc165154139484ee5986d767c876e44b7651f33963e63e67bacadac24e6178c9808f3aca5cf25017ab21c2aa9d691023d1331dd81b614911abad642738cdb55e270ec18c549496fb89a2c175c2b03b9e03d000abbd4e3ea5018121a621833e25814af5b847971465be7c8563a21604d13870b80a5c1dbbd460a278d2765ea06e29380a3380130250fc28119efa3507244959f8fd7bc13b5d92236623be0c1dcb3b29b608b602f9926c82d58f6d297e73880908a5c3b4dc96135b4de5503b670472c535617da919252227cc69cafcf8404f8899c9b3b0f18008a20ed43ca2afc88a794f20aa5924a48f4663512a0fb0e8c44fc7e559f8eb44ae9e275260fd5eba329646a487b5d59b6a640ce0825d8ed83157c01ec7b8795a7a8b7b9a17b433b7581fae2d7167cc0a78f4321568c8acbbbcfbba079ea43b46d46b4102ed32e59b3488dc2b190bffcc62b62ce13e6abf55b2ae62e536bf9e6904b2231d6d43d1098f4b39c1d972f20c1d41dcad491592f45b20f76b8696194a571aa053f6fac99241795e402cf1a675a6e73214e60260e5a95dae62859006549622fb42d0ce51e8bc0832a5bb0bd2eb9383e5ab75381e63e893e22a00fb308ca397e1a4691e0946235bf2be78d2ef8d04a65617651041e853219ad56ec005f30166b6074f8aed3becb8f1c125e407bc46715af5563cc128680413c528b79709edabdea5cf09be909e04297cd510aed4791130c91382c757bb2d2bdb5d29fc3677ad822667e466b88023c42e70a681622c6ecfd641d06384dfca43fe7c618d6fc9526d5eca01114e4e34f72d7a0da887c3b1092ac888a39ad31a98b243f76de3e8a9b726d444dd7b6c13f28679bb9de7efec19fb84418f475b8274adb807eabcd6f8041b1ec1df138395fb445dd6bdc46c29b53dcd172eaad56f4179a1661342131b1e6ad29b6087e47aea03071c8b90075798be030c5c55c8cca3eff3f9a0d46cb52a172eb35d9fbeee5c29b11550fef938fb93ca6dff41b6eb565edc24a7503f8d88dc76058e7b206d551ae86110f21b2305a03c46af3695e5a67d925131a9efac9519017407fc521e0cd9d81259f38cb33b4bdf3d8d469996a9ed31b1b6c22fc6f680f47a874a2cf08ea974765f1e6e34174d136024a63119ed77df62368a043b42fc78f198edfe1eeaee5791161cb62cb3976e7af9d59e161a412655524715eb137a181742e63119bf10682982d857f58a3974631d0ed32c22ba4ef31608636b8631afc7f8e75709aff605741253a1090d7ce3bb8d9c1f3d9d99e8891d822fbd2ca270a2a26323b18a5a75a13275f8300c4cd591f11326576010b2958590423a6505f1d415eba0f28e8d52e605ce264962732cb1b7b8c0b649d2cfda6fa809a98cf29e840040bb052b834082aa5e4761926eded6eb37c8dedfeaaafec5b7251665d66e9e3f6b3ec88b6179653cd53dd5581a411fe7e08034481dc5089efd8b7e679459e873a0a29c5512c0114ecb6885ee6ba14662ea7bb7d5fd798a695085143b56d7f0ac015f22eb136be72e8d0b6f30a9293a1a00f211e413a5ee9b03c884d272912d1b87d9b792ff61c539db5856b426fcef7f0e035ce50c4a545ffa85ea1bf21deb1b9d22974a9360c05532772331c802135cd8b19b081c6782e3dbb61e67c77df509dbc1166b17978100e14338d7e52b244d857dcc63de41e3951b1fbf56d081a30d5d2728dde9dc407d758c5c25f947811b716e259046953d92dcb63a6471450bd53b4ebbfa97a98d9ecbd1ced74a09bd3ee5a00c8edcf963c4cd6955dc74fa4f5edfb2b2d1e707368edd1ecdd478e2cae40827d2b87f5b2a49a99a67ec86dd9ebfa6ceec6e09231607982677022202492a2a9c08eb214767717e48e16254612fc19357d0d2be6e8a8c84738ac477ad772741e705a07d74ad810e39a088322d21266c2f0eebbc35ffd227b6f3c0a1a02e73b51e73a4c4a1188759925ee7b8a174299bfe920669829972be2ead372f6232914cb7101f2a05a75a697dba2fbab9ab014af79c895fbd8d9f9a0869a5c64267da97e1eb57817cf9d826cc56a2f00c7e0a7eaf2cecdbf7d4cbed10a9e8db33aeb1d08959e31cdcf248e0d1028dd5c14068727b1e1ba5baa78143d5b3a7482cd297f468ec45e310c70fce88fe6157ecbc1062973a67047e2bd9ccfd6592a206fb52852712d3848c8cc6c10773c3d64cf8a6950ab6600b6550e86fe2fceb19488547705d18bf2dd392ce0131a36990b61289e53fb78c3ba3f1b5b8efdb40412b5c679a6227bb8dad2441a19ae9613305ecd2561a726719e2a172ced381cad9520511b6a0671cb0c4d4ed6d961e982a8a23cf1641639664e5ffd3efef70ba890f146e9553c49f7ff3fbe9f7d269f40f101e43f07f92337b01242455d8ae6348e4d3abf35cdbb02f3e5881581edaec46e35dffa44f84eac946a6c5307d808d9fdf8b7c1ddb8439273057cf41d72cac06c64f3bd477d3fd43ed3224b01412da9fe91e191a0d832a8328ae8337523d7b254d26ae690ad403dd7421a852f760e39c7c2a319e3f0b08a8e80346f97c54462455144889ae04fcafd50a02532d3d7d0b57586a14ba9afcf549082d9e9a576e30152db0962c57a068ab726e9fd018fd735de4f839e1be94859f78bf2f0ebc504a808a2c1a4d341ec2b43c01506f6f5243fdf9e50a38c2f1c2343c5b1d26c008987801bbe0a30e604fd6cc6d13d4a8409a63b44e5b1f3c94edcc576e2cd151d52bb8c0a7b6662682fe0a80706d7296d1a18647503af6101fa81892226e0660d0807a1b4fcb024887e61f1080485bef8c9c6557030e27e4599be1ce00579f55493f13f9177abfe1fdcbc0a305fdef0e5c1e49578be2f486fdf2fb37aba27a33cd843afa6910b686d2e800c8388ba10803cd9d17be9054625570c74c4874a9aa50e01a76a8d0cb1be7007db3f057a3653f79c306e4d1e38121d9a22dfad355bb033e5bcfcae522d640b7acda5c0352419f9b02bd122982623ac12fbb30e79e4160da2f6e579f6448b302a17935bc94916e5735e31f432d10c89b5f8b0d08d423359f4ca48eefb098ce67231cac4e0a11d9411dcf721909523c43d2a4ddaec74e38f6bcfda98e129b6848df82005e0821930078105b09ee21a430224c321b46d3c9e79e689d7abd6d2a02599b5105efc13a22959bd1e0321f095ccb0c7e1666e40a16b0346d5471be493f8bc5bdffd849ee4843729e7b3f4f51f1b7aaaad857e30d6c2c9d57fb8527f20f172f9d8440ed8cb267d6fdb5ec76b61140822057668d4ee72b8ccc0e153f2b9c278c8cc5f5373a306b86948464f44317584cf5c7845f7c05c90edb5ca5d0d50f1bd6ee0ee6204afc5c74d9d8685d5969562001be40dd7", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = inotify_init() inotify_add_watch(r8, &(0x7f00000001c0)='./file0\x00', 0x4a9) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x5, 0x70, 0x16, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x264, 0x40, 0x2, 0x7}, {0x6, 0x24, 0x1a, 0x4, 0x21}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x5, 0x6, 0x5, 0xd733, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7a, 0x4a, 0xf7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x4, 0x11}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x94, 0x9}}}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x200, 0x0, 0x2, 0x8, 0x20, 0x3d}, 0x21, &(0x7f0000000d40)={0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x6, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x22, 0x32, 0x0, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x0, 0xc2, 0x144}]}, 0x1, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x82c}}]}) syz_usb_control_io$uac1(r1, &(0x7f00000008c0)={0x14, &(0x7f00000007c0)={0x20, 0x22, 0xa5, {0xa5, 0x21, "b413e25a495a12b7c9fd4940f5a88b1761ba80af7b83cad120dc5f1de0bd3f6080fa81ea682541e560dea6cdfadb9b6b8eb7956f4f26d8abe387c2184f1f8a7f844864db6ab1f0d8e5c362a27e86f7557ab4e01e9f45cabc1cc8d0738c5437fd0f4ddd15e3224a57d9fd8b210e3a7a7846f2fa91a1f345ebfde164507e0885f72135fb2f46769e53af531824759655327f8f6150c828b66b7feade51ab189e6733d277"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000900)={0x0, 0x27, 0xe0, "fde0d8278f9ff5375796ce6fe17a4f3234edd4c996e16be6e47ee6dc30e5bade742e9b1f784bd26ef920dc8c9e6ae0fc11da490de7cd2ff43e255d8deb96d26c02dab7208f54e361ec2bf56e6ebbc9dac89f6b2a769652d00f7f9307ca296365107d09a13d38cb7f9ed2c08a53a0ab3bdd5da36adeb4205bd339a40df8cd555615fa6ffe815573d66eea4c9d4f3d03fd87b0cafda30f7fb186e5c1aa37acbd26d024b6635606030d4ae7cc444252adfd05716ee947ddfd1e7444ad6d39afbe99e9b6bc55e8f50db6103cd5e28dc23f8aa5006dfcdad5bf0f3fb2cccbdf2b86bc"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a40)={0x0, 0x8, 0x1}, &(0x7f0000000a80)={0x20, 0x81, 0x1, '\n'}, &(0x7f0000000ac0)={0x20, 0x82, 0x3, "5b43c7"}, &(0x7f0000000b40)={0x20, 0x83, 0x3, "3195ac"}, &(0x7f0000000b80)={0x20, 0x84, 0x3, "9f9ada"}, &(0x7f0000000bc0)={0x20, 0x85, 0x3, "e90953"}}) eventfd(0xc) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r9, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x9, 0x6}) 8.27844427s ago: executing program 6 (id=1376): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) timer_settime(r3, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r4 = epoll_create1(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0xd279, 0x5, 0x7, 0x10001}, {0xab, 0x7, 0x5, 0x3ff}, {0x5, 0x6e, 0x0, 0x9f3}, {0x4, 0x6, 0xf2, 0x4}, {0x65, 0x7, 0x7f, 0xf6c}]}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r1, r6, 0x0) 7.361826936s ago: executing program 6 (id=1378): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r1 = dup(r0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x280}}, './file0\x00'}) 7.146195493s ago: executing program 6 (id=1379): syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c918020009050402100000fa00090582bea7"], 0x0) syz_usb_connect$hid(0x7, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x183d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x7e, {0x9, 0x21, 0x6, 0x30, 0x1, {0x22, 0x382}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x4, 0x3}}}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x40, 0xb4, 0x8, 0x2}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xfcc3}}]}) 6.529998064s ago: executing program 7 (id=1382): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000800d240f0105000000000000000006241a0000000905810300040000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0xc, 0x95, {0x95, 0x11, "2ee5fd6944e67ee63dc3c6d984e4b5bda56cdf2b53fafd1f2c8fbcd1330e7a8e22af4813b16bd6e1a3694a81b82f8f2b7fb24cd5293e89331f400916f2e11835348f9cfda68ba39e11be6aa629f91eba464f0c9e08d473cd23d731e3f82981b04fb1094b20e0b454815e2e28de2812e6590918ad0a0c49dc7cf5d787202230459c929a85e9cadb99d5b8122f606d71c64033f6"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x60, 0x0, 0x3a, "31094a37ed21bb315a4d537aa4302fce119ff4f633f67ea87c809f85f83e4507d92831d21d480a76f0dd855c3db64b498240a9001815e45cdd58"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x9, 0x1, 0x81, 0x2, 0x2, 0x9f, 0x1, 0x3, 0x1, 0x5, 0x1, 0x400}}, &(0x7f00000002c0)={0x20, 0x85, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) 5.20217959s ago: executing program 4 (id=1383): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31030000000000000000090000000800", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) setreuid(0x0, r1) r4 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) 5.186925725s ago: executing program 4 (id=1384): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getpid() r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000600)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa0101e0, @local}, @redirect={0x5, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, {0x10, 0x4, 0x3, 0x9, 0xfffe, 0x68, 0x2, 0x1, 0x89, 0x7, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x23, 0xb, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0xf}]}, @cipso={0x86, 0x6}]}}}}}, 0x6a) 4.482212202s ago: executing program 4 (id=1386): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 4.126644757s ago: executing program 6 (id=1387): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYBLOB="3e9720fad33a"], 0x0) 3.443320803s ago: executing program 7 (id=1388): r0 = timerfd_create(0x9, 0x80800) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000000c0)={{0x77359400}, {r1, r2+10000000}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20054004}, 0x48000) (async) fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x1}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x8000000000003, 0x10000}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x2, 0x4, 0x100000000000000, 0x8}) 2.522266136s ago: executing program 7 (id=1389): r0 = socket(0xa, 0x3, 0x3a) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0x6, 0x20, 0x3409ca1b}, 0x2f) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, 0xda, 0x3) 2.480993159s ago: executing program 7 (id=1390): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2000, 0x80) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000190001002bbd70000400000000000000000000000000000000000001fe800000000000000000000000000075a6673d26b872248a4daa000000000000081f0a00000000000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000007100000000000000000a000000000000feffffffff7f4000020000000000200800000000000000000101020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000005500)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x401, @remote, 0x6}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000180)='[', 0x1}], 0x1}}], 0x1, 0x0) write$rfkill(r0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x1}, 0x8) 2.391892093s ago: executing program 7 (id=1391): r0 = socket(0xa, 0x5, 0xffffffec) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x181000) fcntl$setlease(r3, 0x400, 0xf2d35e7ce30696e1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000300)=@req3={0x7f, 0x7, 0x7, 0xffffffff, 0x3fb4, 0x2, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) r6 = socket$kcm(0x10, 0x7, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000000)={0x3, 0xfffffffe}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="5c00000013006bcc9e3be35c6e17aa31076b836c1d0000007ea60864160af36514000cc008001b0007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d000106b062e585e4a85dc9b1335d1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendfile(r4, r5, 0x0, 0x8000002b) getsockopt$inet_tcp_buf(r1, 0x6, 0x3, &(0x7f0000000000)=""/2, &(0x7f0000000080)=0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0), 0x0) listen(r0, 0x407) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv2(r9, &(0x7f0000000140)=[{&(0x7f0000000000)=""/125, 0x7d}, {&(0x7f00000000c0)=""/125, 0x7d}], 0x2, 0x80000000, 0x7f, 0x39) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 2.214215953s ago: executing program 7 (id=1392): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f00000000c0)={0x40, 0xe, 0x5, {0x5, 0x11, "028cec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.088970686s ago: executing program 4 (id=1393): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, &(0x7f0000000480)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)=ANY=[@ANYBLOB="2000850000000083453d0df2d7ccfe4d894dc840e0550c80b400e78fc03fd95ddc9eb8489ccbb692834c7f05282e945bf243e9ac18f6cb333c72b7fbdbcd7cc118a8b9df2e04f73702725ee99b601d2e3125fb16d2a1791a8fdfc6c0394a81651419d667e86e1ae0141d5105bbd64ddfb9af090c1c325cfa77f1d63930e70c2a91a7b7535cc09d049f"], &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.548720166s ago: executing program 5 (id=1394): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getpid() r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000600)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010700, @local}, @redirect={0x5, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, {0x10, 0x4, 0x3, 0x9, 0xfffe, 0x68, 0x2, 0x1, 0x89, 0x7, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x23, 0xb, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0xf}]}, @cipso={0x86, 0x6}]}}}}}, 0x6a) 1.014034918s ago: executing program 6 (id=1395): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x2, 0x0, 0x3, 0x17, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_policy={0x8, 0x12, 0x1, 0x1, 0x0, 0x0, 0x100, {0x6, 0x33, 0xd5, 0xf7, 0x0, 0x8, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x6e6bbd, 0x811b, {0x6, 0x0, 0x71, 0xfb, 0x0, 0x1db7, 0x0, @in=@empty, @in6=@empty}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0xb8}, 0x1, 0x7}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @empty, r4}, 0xc) 993.56757ms ago: executing program 6 (id=1396): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000800d240f0105000000000000000006241a0000000905810300040000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0xc, 0x95, {0x95, 0x11, "2ee5fd6944e67ee63dc3c6d984e4b5bda56cdf2b53fafd1f2c8fbcd1330e7a8e22af4813b16bd6e1a3694a81b82f8f2b7fb24cd5293e89331f400916f2e11835348f9cfda68ba39e11be6aa629f91eba464f0c9e08d473cd23d731e3f82981b04fb1094b20e0b454815e2e28de2812e6590918ad0a0c49dc7cf5d787202230459c929a85e9cadb99d5b8122f606d71c64033f6"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x60, 0x0, 0x3a, "31094a37ed21bb315a4d537aa4302fce119ff4f633f67ea87c809f85f83e4507d92831d21d480a76f0dd855c3db64b498240a9001815e45cdd58"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x9, 0x1, 0x81, 0x2, 0x2, 0x9f, 0x1, 0x3, 0x1, 0x5, 0x1, 0x400}}, &(0x7f00000002c0)={0x20, 0x85, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) 849.434268ms ago: executing program 5 (id=1397): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000001}) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) dup3(r0, r1, 0x0) 738.088666ms ago: executing program 5 (id=1398): r0 = fanotify_init(0x8, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x3}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) syz_open_dev$usbmon(&(0x7f0000000cc0), 0x2, 0x2400) close(0x3) fanotify_mark(r2, 0x21, 0x8000008, r2, 0x0) fanotify_mark(r0, 0x22, 0x800101b, r2, 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2) 691.502762ms ago: executing program 5 (id=1399): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2000, 0x80) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000190001002bbd70000400000000000000000000000000000000000001fe800000000000000000000000000075a6673d26b872248a4daa000000000000081f0a00000000000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000007100000000000000000a000000000000feffffffff7f4000020000000000200800000000000000000101020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000005500)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x401, @remote, 0x6}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000180)='[', 0x1}], 0x1}}], 0x1, 0x0) write$rfkill(r0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x1}, 0x8) 611.339514ms ago: executing program 5 (id=1400): r0 = socket(0x11, 0x3, 0x0) mmap(&(0x7f0000731000/0x1000)=nil, 0x1000, 0x2, 0x812, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='stat\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r4, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r5}}], 0x20, 0x4c004}], 0x1, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0xb143, 0x800, 0x0, 0xe, 0x8000, 0x5, 0x8, 0x9, r4}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={r4, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e20, 0x10, @empty, 0x5}}, 0xfff5, 0x691}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r6, 0x7, 0x6, 0x1, 0x8, 0x2}, &(0x7f0000000080)=0x14) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x21, 0x1, 0xdeed) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x2d84, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}], 0x2c) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000730000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, r10, 0xc414a000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a00010000000000ffdbdf250200fc003a2a5e247b00000008001c80579d06ab3d77bdea0c5872b296a14470992a821be6ffdbf32c3269b628a93e0fdf5d483ff95366d1e30fbdf4979f70e20902e6e0f48ff8ed24c90325a8f94f1c8d11dd08335526a4f561cfdf1fc39ae95c46a024609cad47db6dcfba01fbcf916493691b8d325fe6f58df14d663c15c1f7d39b145a4dffc7b06a7436e1860dd3e79f92001f61533c1e8532eadd35ab431b9fb17e15f49c2c6d8e7bb7391a8176114715ffe6bd962931685f408da6838fdaabe6195385c42bdc50fb6fe001e243447d50137c008bdc633905fa76440efc5879959a49baddb0e1f00d60b49c3f2703cbfa06bda57b64e77c4e019223418bad77a73a3a1a62db80cdad68dd04162d777875fc786f3c1207ab65c4df1da70100000000000000f9b5ad9c485c77a9f84a09bfdba3d5ab7f01decd1d28242ce8d55d56a98d51477c451a85fb4e3b77c99f83fe9c901fdd240184de0f07e3eccac028ae41494911104609361d4c97323cd438a651a2bb8e70db305664e53d4a0e8a61ec53c122637121e65d7074292992ed7efc50ca1cd94fd99973618fc97e4000"/448], 0x24}], 0x1}, 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) ioctl$EXT4_IOC_GETSTATE(r12, 0x4008af24, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 430.018581ms ago: executing program 5 (id=1401): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x208542, 0x80) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) fanotify_mark(r1, 0x441, 0x103f, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) r3 = openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r4], 0x141) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000080010a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000080000000000000000000000000000000000a00000000000000000000008040000000000000000008000000008ec30000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000030000000000000000000000000080"], 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x11) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r11 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$uac1(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="5fba2000a8df"], 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r13) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000) 0s ago: executing program 4 (id=1402): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0xfffffffffffffffe) r1 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) (async) ioctl$VT_DISALLOCATE(r0, 0x5608) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x6) (async) sendmmsg$inet6(r2, &(0x7f0000007000)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5b4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000040)="df", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x100, 0x6, 0xfffffff8}, 0x10) (async) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xd, @vbi}) (async, rerun: 32) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) kernel console output (not intermixed with test programs): e MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.653526][ T5954] m920x_read = error: -19 [ 375.653558][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 375.677768][ T5927] m920x_read = error: -19 [ 375.692327][ T5927] dvb-usb: error while querying for an remote control event. [ 375.751976][T10016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.808901][ T5954] m920x_read = error: -19 [ 375.811155][ T52] Bluetooth: hci3: command tx timeout [ 375.814409][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 375.828950][ T5927] m920x_read = error: -19 [ 375.834391][ T5927] dvb-usb: error while querying for an remote control event. [ 375.885454][ T36] IPVS: stop unused estimator thread 0... [ 375.913547][T10083] netlink: 'syz.5.1246': attribute type 21 has an invalid length. [ 375.926316][T10083] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1246'. [ 375.959372][ T5972] m920x_read = error: -19 [ 375.963788][ T5972] dvb-usb: error while querying for an remote control event. [ 375.981395][ T10] usb 5-1: USB disconnect, device number 60 [ 375.981721][T10084] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1246'. [ 376.049171][ T5954] m920x_read = error: -19 [ 376.057451][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 376.082718][T10084] openvswitch: netlink: Message has 512 unknown bytes. [ 376.090458][ T5972] m920x_read = error: -19 [ 376.095376][ T5972] dvb-usb: error while querying for an remote control event. [ 376.129049][ T5927] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 376.220017][ T5866] m920x_read = error: -19 [ 376.224708][ T5866] dvb-usb: error while querying for an remote control event. [ 376.268075][T10016] hsr_slave_0: entered promiscuous mode [ 376.276420][ T10] m920x_read = error: -19 [ 376.288819][ T10] dvb-usb: error -19 while querying for an remote control event. [ 376.313659][T10016] hsr_slave_1: entered promiscuous mode [ 376.328841][ T5927] usb 7-1: Using ep0 maxpacket: 32 [ 376.344995][T10016] debugfs: 'hsr0' already exists in 'hsr' [ 376.355493][ T5927] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.366710][ T5972] m920x_read = error: -19 [ 376.374532][T10016] Cannot create hsr debugfs directory [ 376.385889][ T5972] dvb-usb: error while querying for an remote control event. [ 376.392723][T10091] syzkaller1: entered promiscuous mode [ 376.403550][T10095] sctp: [Deprecated]: syz.5.1248 (pid 10095) Use of int in max_burst socket option deprecated. [ 376.403550][T10095] Use struct sctp_assoc_value instead [ 376.406203][ T5927] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.429523][T10091] syzkaller1: entered allmulticast mode [ 376.478175][ T5927] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.492933][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.498278][ T5954] m920x_read = error: -19 [ 376.505788][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 376.508839][ T5927] usb 7-1: Product: syz [ 376.539056][ T5972] m920x_read = error: -19 [ 376.546200][ T5972] dvb-usb: error while querying for an remote control event. [ 376.558986][ T5927] usb 7-1: Manufacturer: syz [ 376.563690][ T5927] usb 7-1: SerialNumber: syz [ 376.588889][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 376.681371][ T5972] m920x_read = error: -19 [ 376.689962][ T982] m920x_read = error: -19 [ 376.696226][ T5972] dvb-usb: error while querying for an remote control event. [ 376.705095][ T982] dvb-usb: error -19 while querying for an remote control event. [ 376.762065][ T10] usb 5-1: device descriptor read/64, error -71 [ 376.839395][ T5972] m920x_read = error: -19 [ 376.843843][ T5972] dvb-usb: error while querying for an remote control event. [ 376.900148][ T5954] m920x_read = error: -19 [ 376.906742][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 376.989122][ T5866] m920x_read = error: -19 [ 376.993573][ T5866] dvb-usb: error while querying for an remote control event. [ 376.998951][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 377.099463][ T6040] m920x_read = error: -19 [ 377.104808][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 377.149012][ T10] usb 5-1: device descriptor read/64, error -71 [ 377.158910][ T5866] m920x_read = error: -19 [ 377.163379][ T5866] dvb-usb: error while querying for an remote control event. [ 377.261942][ T10] usb usb5-port1: attempt power cycle [ 377.288944][ T5954] m920x_read = error: -19 [ 377.294312][T10016] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 377.301505][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 377.309045][ T5866] m920x_read = error: -19 [ 377.313693][ T5866] dvb-usb: error while querying for an remote control event. [ 377.331202][T10016] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 377.347438][T10016] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 377.366390][T10016] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 377.448891][ T5866] m920x_read = error: -19 [ 377.453373][ T5866] dvb-usb: error while querying for an remote control event. [ 377.469853][ T6040] m920x_read = error: -19 [ 377.474271][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 377.571252][T10016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.599805][ T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 377.599859][ T5972] m920x_read = error: -19 [ 377.620879][T10016] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.623507][ T5972] dvb-usb: error while querying for an remote control event. [ 377.644521][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.651909][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.660509][ T982] m920x_read = error: -19 [ 377.664889][ T982] dvb-usb: error -19 while querying for an remote control event. [ 377.673316][ T10] usb 5-1: device descriptor read/8, error -71 [ 377.680440][ T5927] cdc_ncm 7-1:1.0: bind() failure [ 377.703852][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.711181][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.712302][ T5927] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 377.748919][ T5972] m920x_read = error: -19 [ 377.754540][ T5972] dvb-usb: error while querying for an remote control event. [ 377.766044][ T5927] cdc_ncm 7-1:1.1: bind() failure [ 377.839554][ T6040] m920x_read = error: -19 [ 377.844150][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 377.879030][ T52] Bluetooth: hci3: command tx timeout [ 377.904762][ T5927] m920x_read = error: -19 [ 377.915569][ T5866] usb 7-1: USB disconnect, device number 8 [ 377.919227][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 377.925608][ T5927] dvb-usb: error while querying for an remote control event. [ 377.973222][ T10] usb 5-1: device descriptor read/8, error -71 [ 378.038971][ T982] m920x_read = error: -19 [ 378.043387][ T982] dvb-usb: error -19 while querying for an remote control event. [ 378.062038][ T5972] m920x_read = error: -19 [ 378.066470][ T5972] dvb-usb: error while querying for an remote control event. [ 378.089583][ T10] usb usb5-port1: unable to enumerate USB device [ 378.199940][ T5866] m920x_read = error: -19 [ 378.204394][ T5866] dvb-usb: error while querying for an remote control event. [ 378.219780][ T10] m920x_read = error: -19 [ 378.224244][ T10] dvb-usb: error -19 while querying for an remote control event. [ 378.253024][T10016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.331038][ T5866] m920x_read = error: -19 [ 378.335601][ T5866] dvb-usb: error while querying for an remote control event. [ 378.398995][ T982] m920x_read = error: -19 [ 378.403440][ T982] dvb-usb: error -19 while querying for an remote control event. [ 378.458919][ T5866] m920x_read = error: -19 [ 378.473610][ T5866] dvb-usb: error while querying for an remote control event. [ 378.569084][ T982] m920x_read = error: -19 [ 378.573502][ T982] dvb-usb: error -19 while querying for an remote control event. [ 378.599566][ T5866] m920x_read = error: -19 [ 378.604068][ T5866] dvb-usb: error while querying for an remote control event. [ 378.731161][ T5866] m920x_read = error: -19 [ 378.738780][ T5866] dvb-usb: error while querying for an remote control event. [ 378.757968][ T5954] m920x_read = error: -19 [ 378.779443][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 378.845936][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.862434][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.869548][ T5972] m920x_read = error: -19 [ 378.873936][ T5972] dvb-usb: error while querying for an remote control event. [ 378.939816][ T982] m920x_read = error: -19 [ 378.944672][T10016] veth0_vlan: entered promiscuous mode [ 378.958671][T10016] veth1_vlan: entered promiscuous mode [ 378.967466][ T982] dvb-usb: error -19 while querying for an remote control event. [ 379.002734][ T5866] m920x_read = error: -19 [ 379.015969][ T5866] dvb-usb: error while querying for an remote control event. [ 379.082076][T10016] veth0_macvtap: entered promiscuous mode [ 379.112101][T10016] veth1_macvtap: entered promiscuous mode [ 379.139592][ T982] m920x_read = error: -19 [ 379.144108][ T982] dvb-usb: error -19 while querying for an remote control event. [ 379.146052][T10016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.162059][ T5866] m920x_read = error: -19 [ 379.166457][ T5866] dvb-usb: error while querying for an remote control event. [ 379.207560][T10016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.281246][ T5866] m920x_read = error: -19 [ 379.285708][ T5866] dvb-usb: error while querying for an remote control event. [ 379.304616][ T1102] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.325594][ T1102] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.350892][ T982] m920x_read = error: -19 [ 379.368992][ T982] dvb-usb: error -19 while querying for an remote control event. [ 379.369539][ T1102] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.393107][ T1102] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.440314][ T5866] m920x_read = error: -19 [ 379.448573][ T5866] dvb-usb: error while querying for an remote control event. [ 379.549853][ T982] m920x_read = error: -19 [ 379.563862][ T982] dvb-usb: error -19 while querying for an remote control event. [ 379.591667][T10163] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.608958][ T5866] m920x_read = error: -19 [ 379.613533][ T5866] dvb-usb: error while querying for an remote control event. [ 379.654269][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.673672][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.738932][ T5972] m920x_read = error: -19 [ 379.738977][ T982] m920x_read = error: -19 [ 379.743428][ T5972] dvb-usb: error while querying for an remote control event. [ 379.782426][ T6085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.807637][ T982] dvb-usb: error -19 while querying for an remote control event. [ 379.825862][ T6085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.852353][ T5972] m920x_read = error: -19 [ 379.856877][ T5972] dvb-usb: error while querying for an remote control event. [ 379.876536][T10163] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.967894][ T52] Bluetooth: hci3: command tx timeout [ 380.000402][ T6040] m920x_read = error: -19 [ 380.006635][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 380.019086][ T5972] m920x_read = error: -19 [ 380.023494][ T5972] dvb-usb: error while querying for an remote control event. [ 380.045702][T10163] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.148853][ T5972] m920x_read = error: -19 [ 380.153356][ T5972] dvb-usb: error while querying for an remote control event. [ 380.223601][ T6040] m920x_read = error: -19 [ 380.240867][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 380.292208][T10163] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.298864][ T5927] m920x_read = error: -19 [ 380.307022][ T5927] dvb-usb: error while querying for an remote control event. [ 380.418907][ T5866] m920x_read = error: -19 [ 380.423784][ T5866] dvb-usb: error while querying for an remote control event. [ 380.437696][ T1102] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.448980][ T5954] m920x_read = error: -19 [ 380.453388][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 380.488864][ T5972] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 380.496651][ T6052] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.530590][ T6052] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.540935][ T5866] m920x_read = error: -19 [ 380.545324][ T5866] dvb-usb: error while querying for an remote control event. [ 380.578283][ T1168] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.619233][ T6040] m920x_read = error: -19 [ 380.623985][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 380.658922][ T5866] m920x_read = error: -19 [ 380.663444][ T5866] dvb-usb: error while querying for an remote control event. [ 380.671327][ T5972] usb 8-1: Using ep0 maxpacket: 8 [ 380.700394][ T5972] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.732496][ T5972] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.761328][ T5972] usb 8-1: New USB device found, idVendor=046d, idProduct=c14f, bcdDevice=ff.ff [ 380.782874][ T5972] usb 8-1: New USB device strings: Mfr=237, Product=0, SerialNumber=0 [ 380.794251][ T5972] usb 8-1: Manufacturer: syz [ 380.800755][ T982] m920x_read = error: -19 [ 380.804329][ T5972] usb 8-1: config 0 descriptor?? [ 380.811966][ T982] dvb-usb: error -19 while querying for an remote control event. [ 380.826106][T10179] tipc: Resetting bearer [ 380.839206][ T5866] m920x_read = error: -19 [ 380.847368][ T5866] dvb-usb: error while querying for an remote control event. [ 380.901421][ T982] syzkaller0 speed is unknown, defaulting to 1000 [ 380.910145][ T982] sLò2: Port: 1 Link DOWN [ 380.968980][ T982] m920x_read = error: -19 [ 380.973514][ T6040] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 380.981387][ T982] dvb-usb: error -19 while querying for an remote control event. [ 380.999353][ T45] m920x_read = error: -19 [ 381.003913][ T45] dvb-usb: error while querying for an remote control event. [ 381.029821][ T982] usb 8-1: USB disconnect, device number 2 [ 381.119117][ T45] m920x_read = error: -19 [ 381.123600][ T45] dvb-usb: error while querying for an remote control event. [ 381.138872][ T6040] usb 5-1: Using ep0 maxpacket: 32 [ 381.147002][ T6040] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.157811][ T5913] m920x_read = error: -19 [ 381.167379][ T6040] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.178590][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 381.192811][ T6040] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.202004][ T6040] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.210203][ T6040] usb 5-1: Product: syz [ 381.214510][ T6040] usb 5-1: Manufacturer: syz [ 381.219442][ T6040] usb 5-1: SerialNumber: syz [ 381.232345][ T6040] usb 5-1: selecting invalid altsetting 1 [ 381.249698][ T45] m920x_read = error: -19 [ 381.257038][ T45] dvb-usb: error while querying for an remote control event. [ 381.348978][ T5954] m920x_read = error: -19 [ 381.353480][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 381.369974][ T45] m920x_read = error: -19 [ 381.374789][ T45] dvb-usb: error while querying for an remote control event. [ 381.500270][ T45] m920x_read = error: -19 [ 381.504701][ T45] dvb-usb: error while querying for an remote control event. [ 381.519097][ T5954] m920x_read = error: -19 [ 381.527330][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 381.619497][ T45] m920x_read = error: -19 [ 381.625279][ T45] dvb-usb: error while querying for an remote control event. [ 381.633022][T10179] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 381.642908][ T6040] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 381.652615][T10179] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 381.653814][ T6040] cdc_ncm 5-1:1.0: bind() failure [ 381.689074][ T982] m920x_read = error: -19 [ 381.705246][ T982] dvb-usb: error -19 while querying for an remote control event. [ 381.713550][ T6040] cdc_ncm 5-1:1.1: skipping garbage [ 381.741157][ T6040] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 381.755414][ T6040] cdc_ncm 5-1:1.1: bind() failure [ 381.782306][T10179] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 381.803102][T10179] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 381.810953][ T45] m920x_read = error: -19 [ 381.810984][ T45] dvb-usb: error while querying for an remote control event. [ 381.910861][ T6040] m920x_read = error: -19 [ 381.920061][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 381.921048][ T953] m920x_read = error: -19 [ 381.944476][ T953] dvb-usb: error while querying for an remote control event. [ 381.986730][T10179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.001988][T10179] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 382.059230][ T5972] m920x_read = error: -19 [ 382.068451][ T5972] dvb-usb: error while querying for an remote control event. [ 382.099994][ T982] m920x_read = error: -19 [ 382.104411][ T982] dvb-usb: error -19 while querying for an remote control event. [ 382.128822][ T45] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 382.188918][ T953] m920x_read = error: -19 [ 382.193533][ T953] dvb-usb: error while querying for an remote control event. [ 382.251973][T10202] FAULT_INJECTION: forcing a failure. [ 382.251973][T10202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.265762][T10202] CPU: 1 UID: 0 PID: 10202 Comm: syz.6.1261 Not tainted syzkaller #0 PREEMPT(full) [ 382.265792][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.265805][T10202] Call Trace: [ 382.265815][T10202] [ 382.265824][T10202] dump_stack_lvl+0x189/0x250 [ 382.265850][T10202] ? __pfx____ratelimit+0x10/0x10 [ 382.265880][T10202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.265902][T10202] ? __pfx__printk+0x10/0x10 [ 382.265951][T10202] should_fail_ex+0x414/0x560 [ 382.265982][T10202] copy_folio_from_iter_atomic+0x325/0x1910 [ 382.266015][T10202] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 382.266058][T10202] ? shmem_get_folio_gfp+0x6bc/0x1660 [ 382.266100][T10202] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 382.266142][T10202] ? shmem_write_begin+0x15f/0x2b0 [ 382.266171][T10202] generic_perform_write+0x5df/0x900 [ 382.266219][T10202] ? __pfx_generic_perform_write+0x10/0x10 [ 382.266247][T10202] ? down_write+0x162/0x1f0 [ 382.266276][T10202] ? file_update_time+0x2da/0x490 [ 382.266303][T10202] shmem_file_write_iter+0xf8/0x120 [ 382.266330][T10202] vfs_write+0x5c6/0xb30 [ 382.266362][T10202] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 382.266387][T10202] ? __pfx_vfs_write+0x10/0x10 [ 382.266424][T10202] ? __fget_files+0x2a/0x420 [ 382.266462][T10202] ksys_write+0x145/0x250 [ 382.266489][T10202] ? __pfx_ksys_write+0x10/0x10 [ 382.266518][T10202] ? do_syscall_64+0xbe/0xfa0 [ 382.266553][T10202] do_syscall_64+0xfa/0xfa0 [ 382.266581][T10202] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.266612][T10202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.266633][T10202] ? clear_bhb_loop+0x60/0xb0 [ 382.266661][T10202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.266680][T10202] RIP: 0033:0x7f5c16b8eba9 [ 382.266700][T10202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.266727][T10202] RSP: 002b:00007f5c179a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.266750][T10202] RAX: ffffffffffffffda RBX: 00007f5c16dd5fa0 RCX: 00007f5c16b8eba9 [ 382.266766][T10202] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 382.266780][T10202] RBP: 00007f5c179a3090 R08: 0000000000000000 R09: 0000000000000000 [ 382.266793][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.266806][T10202] R13: 00007f5c16dd6038 R14: 00007f5c16dd5fa0 R15: 00007ffc38b2bcd8 [ 382.266845][T10202] [ 382.285547][ T10] m920x_read = error: -19 [ 382.330919][ T45] usb 8-1: unable to get BOS descriptor or descriptor too short [ 382.337615][ T10] dvb-usb: error -19 while querying for an remote control event. [ 382.343581][ T953] m920x_read = error: -19 [ 382.509063][ T10] m920x_read = error: -19 [ 382.517130][ T953] dvb-usb: error while querying for an remote control event. [ 382.548889][ T10] dvb-usb: error -19 while querying for an remote control event. [ 382.564613][ T45] usb 8-1: config 1 has an invalid interface number: 61 but max is 0 [ 382.573211][ T45] usb 8-1: config 1 has no interface number 0 [ 382.579401][ T45] usb 8-1: config 1 interface 61 has no altsetting 0 [ 382.593391][ T45] usb 8-1: string descriptor 0 read error: -22 [ 382.599906][ T45] usb 8-1: New USB device found, idVendor=12d1, idProduct=3605, bcdDevice=e4.b0 [ 382.609458][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.652590][ T45] huawei_cdc_ncm 8-1:1.61: CDC Union missing and no IAD found [ 382.661606][ T953] m920x_read = error: -19 [ 382.666086][ T953] dvb-usb: error while querying for an remote control event. [ 382.677998][ T45] huawei_cdc_ncm 8-1:1.61: bind() failure [ 382.769903][ T10] m920x_read = error: -19 [ 382.774453][ T10] dvb-usb: error -19 while querying for an remote control event. [ 382.789496][ T45] m920x_read = error: -19 [ 382.793913][ T45] dvb-usb: error while querying for an remote control event. [ 382.859331][ T45] usb 8-1: USB disconnect, device number 3 [ 382.909075][ T5900] m920x_read = error: -19 [ 382.913683][ T5900] dvb-usb: error while querying for an remote control event. [ 382.939845][ T10] m920x_read = error: -19 [ 382.945981][ T10] dvb-usb: error -19 while querying for an remote control event. [ 383.039035][ T5900] m920x_read = error: -19 [ 383.043466][ T5900] dvb-usb: error while querying for an remote control event. [ 383.119040][ T10] m920x_read = error: -19 [ 383.123471][ T10] dvb-usb: error -19 while querying for an remote control event. [ 383.139133][ T953] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 383.169312][ T5972] m920x_read = error: -19 [ 383.173719][ T5972] dvb-usb: error while querying for an remote control event. [ 383.289213][ T5972] m920x_read = error: -19 [ 383.289355][ T10] m920x_read = error: -19 [ 383.296817][ T5972] dvb-usb: error while querying for an remote control event. [ 383.298192][ T10] dvb-usb: error -19 while querying for an remote control event. [ 383.314443][ T953] usb 7-1: Using ep0 maxpacket: 32 [ 383.334869][ T953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.350040][ T953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.374584][ T953] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 383.395055][ T953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.434955][ T953] usb 7-1: config 0 descriptor?? [ 383.449617][ T10] m920x_read = error: -19 [ 383.454037][ T10] dvb-usb: error -19 while querying for an remote control event. [ 383.456015][ T953] hub 7-1:0.0: USB hub found [ 383.466882][ T5972] m920x_read = error: -19 [ 383.472239][ T5972] dvb-usb: error while querying for an remote control event. [ 383.612034][ T5972] m920x_read = error: -19 [ 383.616753][ T5972] dvb-usb: error while querying for an remote control event. [ 383.654698][ T953] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 383.675218][ T982] m920x_read = error: -19 [ 383.689059][ T982] dvb-usb: error -19 while querying for an remote control event. [ 383.759207][ T5972] m920x_read = error: -19 [ 383.764005][ T5972] dvb-usb: error while querying for an remote control event. [ 383.781031][ T982] usb 5-1: USB disconnect, device number 65 [ 383.860008][ T953] usbhid 7-1:0.0: can't add hid device: -71 [ 383.879970][ T953] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 383.889619][ T10] m920x_read = error: -19 [ 383.891299][ T5972] m920x_read = error: -19 [ 383.911753][ T10] dvb-usb: error -19 while querying for an remote control event. [ 383.931093][ T5972] dvb-usb: error while querying for an remote control event. [ 383.966820][ T953] usb 7-1: USB disconnect, device number 9 [ 384.068885][ T5972] m920x_read = error: -19 [ 384.073300][ T5972] dvb-usb: error while querying for an remote control event. [ 384.091501][ T10] m920x_read = error: -19 [ 384.101565][ T10] dvb-usb: error -19 while querying for an remote control event. [ 384.203046][ T953] m920x_read = error: -19 [ 384.207480][ T953] dvb-usb: error while querying for an remote control event. [ 384.269743][ T10] m920x_read = error: -19 [ 384.274262][ T10] dvb-usb: error -19 while querying for an remote control event. [ 384.288853][ T982] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 384.349451][ T953] m920x_read = error: -19 [ 384.353867][ T953] dvb-usb: error while querying for an remote control event. [ 384.429873][ T982] usb 5-1: device descriptor read/64, error -71 [ 384.459326][ T10] m920x_read = error: -19 [ 384.466732][ T10] dvb-usb: error -19 while querying for an remote control event. [ 384.482816][ T953] m920x_read = error: -19 [ 384.487250][ T953] dvb-usb: error while querying for an remote control event. [ 384.599066][ T953] m920x_read = error: -19 [ 384.603466][ T953] dvb-usb: error while querying for an remote control event. [ 384.629983][ T10] m920x_read = error: -19 [ 384.634504][ T10] dvb-usb: error -19 while querying for an remote control event. [ 384.669045][ T982] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 384.719027][ T5927] m920x_read = error: -19 [ 384.723453][ T5927] dvb-usb: error while querying for an remote control event. [ 384.799036][ T982] usb 5-1: device descriptor read/64, error -71 [ 384.805488][ T10] m920x_read = error: -19 [ 384.810215][ T10] dvb-usb: error -19 while querying for an remote control event. [ 384.838979][ T5927] m920x_read = error: -19 [ 384.843742][ T5927] dvb-usb: error while querying for an remote control event. [ 384.909425][ T982] usb usb5-port1: attempt power cycle [ 384.959001][ T5927] m920x_read = error: -19 [ 384.963824][ T5927] dvb-usb: error while querying for an remote control event. [ 384.968993][ T10] m920x_read = error: -19 [ 384.975824][ T10] dvb-usb: error -19 while querying for an remote control event. [ 385.079808][ T5927] m920x_read = error: -19 [ 385.084254][ T5927] dvb-usb: error while querying for an remote control event. [ 385.139762][ T10] m920x_read = error: -19 [ 385.151545][ T10] dvb-usb: error -19 while querying for an remote control event. [ 385.198959][ T5927] m920x_read = error: -19 [ 385.203534][ T5927] dvb-usb: error while querying for an remote control event. [ 385.249089][ T982] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 385.280529][ T982] usb 5-1: device descriptor read/8, error -71 [ 385.319550][ T10] m920x_read = error: -19 [ 385.323978][ T10] dvb-usb: error -19 while querying for an remote control event. [ 385.329543][ T953] m920x_read = error: -19 [ 385.337440][ T953] dvb-usb: error while querying for an remote control event. [ 385.385045][T10270] FAULT_INJECTION: forcing a failure. [ 385.385045][T10270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.400964][T10270] CPU: 0 UID: 0 PID: 10270 Comm: syz.7.1271 Not tainted syzkaller #0 PREEMPT(full) [ 385.400993][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 385.401005][T10270] Call Trace: [ 385.401014][T10270] [ 385.401024][T10270] dump_stack_lvl+0x189/0x250 [ 385.401051][T10270] ? __pfx____ratelimit+0x10/0x10 [ 385.401081][T10270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.401102][T10270] ? __pfx__printk+0x10/0x10 [ 385.401151][T10270] should_fail_ex+0x414/0x560 [ 385.401183][T10270] copy_folio_from_iter_atomic+0x325/0x1910 [ 385.401214][T10270] ? irqentry_exit+0x74/0x90 [ 385.401254][T10270] ? shmem_get_folio_gfp+0x6bc/0x1660 [ 385.401298][T10270] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 385.401342][T10270] ? shmem_write_begin+0x15f/0x2b0 [ 385.401371][T10270] generic_perform_write+0x5df/0x900 [ 385.401418][T10270] ? __pfx_generic_perform_write+0x10/0x10 [ 385.401444][T10270] ? down_write+0x162/0x1f0 [ 385.401474][T10270] ? file_update_time+0x2da/0x490 [ 385.401503][T10270] shmem_file_write_iter+0xf8/0x120 [ 385.401529][T10270] vfs_write+0x5c6/0xb30 [ 385.401562][T10270] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 385.401587][T10270] ? __pfx_vfs_write+0x10/0x10 [ 385.401626][T10270] ? __fget_files+0x2a/0x420 [ 385.401666][T10270] ksys_write+0x145/0x250 [ 385.401702][T10270] ? __pfx_ksys_write+0x10/0x10 [ 385.401731][T10270] ? do_syscall_64+0xbe/0xfa0 [ 385.401767][T10270] do_syscall_64+0xfa/0xfa0 [ 385.401795][T10270] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.401824][T10270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.401845][T10270] ? clear_bhb_loop+0x60/0xb0 [ 385.401871][T10270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.401891][T10270] RIP: 0033:0x7fa48c78eba9 [ 385.401909][T10270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.401926][T10270] RSP: 002b:00007fa48d63b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 385.401950][T10270] RAX: ffffffffffffffda RBX: 00007fa48c9d5fa0 RCX: 00007fa48c78eba9 [ 385.401965][T10270] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 385.401978][T10270] RBP: 00007fa48d63b090 R08: 0000000000000000 R09: 0000000000000000 [ 385.401991][T10270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.402005][T10270] R13: 00007fa48c9d6038 R14: 00007fa48c9d5fa0 R15: 00007ffe3adabe28 [ 385.402043][T10270] [ 385.459347][ T953] m920x_read = error: -19 [ 385.522464][ T10] m920x_read = error: -19 [ 385.528143][ T953] dvb-usb: error while querying for an remote control event. [ 385.528565][ T10] dvb-usb: error -19 while querying for an remote control event. [ 385.651508][ T5927] m920x_read = error: -19 [ 385.655484][ T982] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 385.660258][ T5927] dvb-usb: error while querying for an remote control event. [ 385.689353][ T982] usb 5-1: device descriptor read/8, error -71 [ 385.799027][ T953] m920x_read = error: -19 [ 385.803466][ T953] dvb-usb: error while querying for an remote control event. [ 385.819397][ T982] usb usb5-port1: unable to enumerate USB device [ 385.825938][ T5913] m920x_read = error: -19 [ 385.831530][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 385.913089][ T30] audit: type=1326 audit(1757537855.526:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.6.1273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c16b8eba9 code=0x0 [ 385.944939][ T953] m920x_read = error: -19 [ 385.955073][ T953] dvb-usb: error while querying for an remote control event. [ 386.001999][T10277] overlayfs: missing 'workdir' [ 386.008937][ T5913] m920x_read = error: -19 [ 386.014586][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 386.022616][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 386.079505][ T953] m920x_read = error: -19 [ 386.084312][ T953] dvb-usb: error while querying for an remote control event. [ 386.184989][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.196402][ T5913] m920x_read = error: -19 [ 386.202082][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 386.209303][ T953] m920x_read = error: -19 [ 386.212904][ T10] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 386.214583][ T953] dvb-usb: error while querying for an remote control event. [ 386.231567][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.241208][ T10] usb 8-1: Product: syz [ 386.245376][ T10] usb 8-1: Manufacturer: syz [ 386.250494][ T10] usb 8-1: SerialNumber: syz [ 386.257865][ T10] usb 8-1: config 0 descriptor?? [ 386.267260][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in cold state, will try to load a firmware [ 386.281395][ T10] usb 8-1: Direct firmware load for dvb-usb-digivox-02.fw failed with error -2 [ 386.291234][ T10] usb 8-1: Falling back to sysfs fallback for: dvb-usb-digivox-02.fw [ 386.349315][ T5972] m920x_read = error: -19 [ 386.353855][ T5972] dvb-usb: error while querying for an remote control event. [ 386.369186][ T5913] m920x_read = error: -19 [ 386.373989][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 386.469719][ T5972] m920x_read = error: -19 [ 386.474492][ T5972] dvb-usb: error while querying for an remote control event. [ 386.539085][ T5913] m920x_read = error: -19 [ 386.543548][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 386.590213][ T5972] m920x_read = error: -19 [ 386.594790][ T5972] dvb-usb: error while querying for an remote control event. [ 386.709137][ T5972] m920x_read = error: -19 [ 386.709283][ T5913] m920x_read = error: -19 [ 386.713674][ T5972] dvb-usb: error while querying for an remote control event. [ 386.726670][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 386.819122][ T5972] m920x_read = error: -19 [ 386.823532][ T5972] dvb-usb: error while querying for an remote control event. [ 386.894081][ T5913] m920x_read = error: -19 [ 386.898569][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 386.938974][ T5972] m920x_read = error: -19 [ 386.943680][ T5972] dvb-usb: error while querying for an remote control event. [ 387.059878][ T5913] m920x_read = error: -19 [ 387.062981][ T5972] m920x_read = error: -19 [ 387.071581][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 387.073979][ T5972] dvb-usb: error while querying for an remote control event. [ 387.189638][ T5972] m920x_read = error: -19 [ 387.194221][ T5972] dvb-usb: error while querying for an remote control event. [ 387.248969][ T5913] m920x_read = error: -19 [ 387.253567][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 387.309488][ T5972] m920x_read = error: -19 [ 387.314163][ T5972] dvb-usb: error while querying for an remote control event. [ 387.419181][ T5913] m920x_read = error: -19 [ 387.423597][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 387.439162][ T5972] m920x_read = error: -19 [ 387.443847][ T5972] dvb-usb: error while querying for an remote control event. [ 387.562085][ T5972] m920x_read = error: -19 [ 387.566668][ T5972] dvb-usb: error while querying for an remote control event. [ 387.588983][ T5913] m920x_read = error: -19 [ 387.593491][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 387.678895][ T5972] m920x_read = error: -19 [ 387.683337][ T5972] dvb-usb: error while querying for an remote control event. [ 387.763500][ T5913] m920x_read = error: -19 [ 387.768000][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 387.808992][ T5927] m920x_read = error: -19 [ 387.813394][ T5927] dvb-usb: error while querying for an remote control event. [ 387.928927][ T5927] m920x_read = error: -19 [ 387.929438][ T5913] m920x_read = error: -19 [ 387.933562][ T5927] dvb-usb: error while querying for an remote control event. [ 387.937662][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 388.059114][ T5927] m920x_read = error: -19 [ 388.063530][ T5927] dvb-usb: error while querying for an remote control event. [ 388.089750][ T5913] m920x_read = error: -19 [ 388.095435][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 388.148483][T10296] FAULT_INJECTION: forcing a failure. [ 388.148483][T10296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 388.162439][T10296] CPU: 1 UID: 0 PID: 10296 Comm: syz.4.1280 Not tainted syzkaller #0 PREEMPT(full) [ 388.162469][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.162481][T10296] Call Trace: [ 388.162490][T10296] [ 388.162500][T10296] dump_stack_lvl+0x189/0x250 [ 388.162526][T10296] ? __pfx____ratelimit+0x10/0x10 [ 388.162563][T10296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.162584][T10296] ? __pfx__printk+0x10/0x10 [ 388.162617][T10296] ? fs_reclaim_acquire+0x7d/0x100 [ 388.162654][T10296] should_fail_ex+0x414/0x560 [ 388.162695][T10296] prepare_alloc_pages+0x213/0x610 [ 388.162731][T10296] __alloc_frozen_pages_noprof+0x123/0x370 [ 388.162763][T10296] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 388.162801][T10296] ? policy_nodemask+0x27c/0x720 [ 388.162832][T10296] alloc_pages_mpol+0x232/0x4a0 [ 388.162865][T10296] folio_alloc_mpol_noprof+0x39/0x70 [ 388.162892][T10296] shmem_alloc_and_add_folio+0x447/0xf60 [ 388.162921][T10296] ? filemap_get_entry+0xad/0x2f0 [ 388.162947][T10296] ? filemap_get_entry+0xad/0x2f0 [ 388.162970][T10296] ? filemap_get_entry+0xad/0x2f0 [ 388.162998][T10296] ? filemap_get_entry+0x28f/0x2f0 [ 388.163028][T10296] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 388.163056][T10296] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 388.163112][T10296] shmem_get_folio_gfp+0x59d/0x1660 [ 388.163184][T10296] shmem_write_begin+0xf7/0x2b0 [ 388.163215][T10296] generic_perform_write+0x2c5/0x900 [ 388.163262][T10296] ? __pfx_generic_perform_write+0x10/0x10 [ 388.163290][T10296] ? down_write+0x162/0x1f0 [ 388.163319][T10296] ? file_update_time+0x2da/0x490 [ 388.163346][T10296] shmem_file_write_iter+0xf8/0x120 [ 388.163373][T10296] vfs_write+0x5c6/0xb30 [ 388.163421][T10296] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 388.163452][T10296] ? __pfx_vfs_write+0x10/0x10 [ 388.163491][T10296] ? __fget_files+0x2a/0x420 [ 388.163530][T10296] ksys_write+0x145/0x250 [ 388.163559][T10296] ? __pfx_ksys_write+0x10/0x10 [ 388.163588][T10296] ? do_syscall_64+0xbe/0xfa0 [ 388.163623][T10296] do_syscall_64+0xfa/0xfa0 [ 388.163651][T10296] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.163688][T10296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.163709][T10296] ? clear_bhb_loop+0x60/0xb0 [ 388.163735][T10296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.163754][T10296] RIP: 0033:0x7f47ce58eba9 [ 388.163774][T10296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.163791][T10296] RSP: 002b:00007f47cf4d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 388.163814][T10296] RAX: ffffffffffffffda RBX: 00007f47ce7d5fa0 RCX: 00007f47ce58eba9 [ 388.163830][T10296] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 388.163844][T10296] RBP: 00007f47cf4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 388.163856][T10296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.163869][T10296] R13: 00007f47ce7d6038 R14: 00007f47ce7d5fa0 R15: 00007fff95e07468 [ 388.163907][T10296] [ 388.258947][ T5913] m920x_read = error: -19 [ 388.264147][ T5927] m920x_read = error: -19 [ 388.289890][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 388.290014][ T5927] dvb-usb: error while querying for an remote control event. [ 388.451916][ T982] m920x_read = error: -19 [ 388.540926][ T982] dvb-usb: error -19 while querying for an remote control event. [ 388.578338][T10298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.585785][ T5927] m920x_read = error: -19 [ 388.597209][ T5927] dvb-usb: error while querying for an remote control event. [ 388.712389][ T5927] m920x_read = error: -19 [ 388.716985][ T5927] dvb-usb: error while querying for an remote control event. [ 388.719557][ T6040] m920x_read = error: -19 [ 388.737750][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 388.767729][T10304] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1283'. [ 388.842892][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.854463][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.862637][ T5972] m920x_read = error: -19 [ 388.867039][ T5972] dvb-usb: error while querying for an remote control event. [ 388.890355][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.908941][ T6040] m920x_read = error: -19 [ 388.914066][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 388.923036][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.934063][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.955748][T10311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.971969][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.989087][ T5972] m920x_read = error: -19 [ 388.989291][T10311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.993658][ T5972] dvb-usb: error while querying for an remote control event. [ 389.028396][T10314] netlink: 'syz.6.1286': attribute type 10 has an invalid length. [ 389.038015][T10314] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1286'. [ 389.047106][T10314] dummy0: entered promiscuous mode [ 389.055922][T10314] bridge0: port 2(dummy0) entered blocking state [ 389.062842][T10314] bridge0: port 2(dummy0) entered disabled state [ 389.070237][T10314] dummy0: entered allmulticast mode [ 389.078240][T10314] bridge0: port 2(dummy0) entered blocking state [ 389.084873][T10314] bridge0: port 2(dummy0) entered forwarding state [ 389.090629][ T5927] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 389.095611][ T6040] m920x_read = error: -19 [ 389.103640][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 389.129147][ T5972] m920x_read = error: -19 [ 389.135605][ T5972] dvb-usb: error while querying for an remote control event. [ 389.139131][ T6040] hid_parser_main: 82 callbacks suppressed [ 389.139154][ T6040] hid-generic 0009:0001:0AED.001B: unknown main item tag 0x0 [ 389.150014][T10314] syzkaller1: entered promiscuous mode [ 389.157188][ T6040] hid-generic 0009:0001:0AED.001B: unknown main item tag 0x0 [ 389.168133][T10314] syzkaller1: entered allmulticast mode [ 389.170928][ T6040] hid-generic 0009:0001:0AED.001B: unknown main item tag 0x0 [ 389.183958][ T6040] hid-generic 0009:0001:0AED.001B: unknown main item tag 0x0 [ 389.195561][ T6040] hid-generic 0009:0001:0AED.001B: unknown main item tag 0x0 [ 389.203305][ T6040] hid-generic 0009:0001:0AED.001B: unknown main item tag 0x0 [ 389.211038][ T6040] hid-generic 0009:0001:0AED.001B: unknown main item tag 0x0 [ 389.218501][ T6040] hid-generic 0009:0001:0AED.001B: unknown main item tag 0x0 [ 389.226283][ T6040] hid-generic 0009:0001:0AED.001B: unknown main item tag 0x0 [ 389.233796][ T6040] hid-generic 0009:0001:0AED.001B: unknown main item tag 0x0 [ 389.243052][ T6040] hid-generic 0009:0001:0AED.001B: collection stack underflow [ 389.251758][ T6040] hid-generic 0009:0001:0AED.001B: item 0 0 0 12 parsing failed [ 389.258949][ T5972] m920x_read = error: -19 [ 389.260189][ T6040] hid-generic 0009:0001:0AED.001B: probe with driver hid-generic failed with error -22 [ 389.264526][ T5972] dvb-usb: error while querying for an remote control event. [ 389.278860][ T982] m920x_read = error: -19 [ 389.281573][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 389.285888][ T982] dvb-usb: error -19 while querying for an remote control event. [ 389.293966][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.311868][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.330281][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 389.340716][ T5927] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 389.350860][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.365743][ T5927] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 389.375425][ T5927] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 389.383517][ T5927] usb 5-1: Manufacturer: syz [ 389.391612][ T5927] usb 5-1: config 0 descriptor?? [ 389.399117][ T5972] m920x_read = error: -19 [ 389.403502][ T5972] dvb-usb: error while querying for an remote control event. [ 389.459538][ T982] m920x_read = error: -19 [ 389.463944][ T982] dvb-usb: error -19 while querying for an remote control event. [ 389.519318][ T5972] m920x_read = error: -19 [ 389.523947][ T5972] dvb-usb: error while querying for an remote control event. [ 389.632081][ T982] m920x_read = error: -19 [ 389.636974][ T982] dvb-usb: error -19 while querying for an remote control event. [ 389.655414][ T5972] m920x_read = error: -19 [ 389.668777][ T5927] rc_core: IR keymap rc-hauppauge not found [ 389.674927][ T5927] Registered IR keymap rc-empty [ 389.691623][ T5972] dvb-usb: error while querying for an remote control event. [ 389.693255][T10318] tmpfs: Bad value for 'mpol' [ 389.709222][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.710230][T10318] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 389.732765][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.762007][ T5927] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 389.782473][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input73 [ 389.798976][ T6040] m920x_read = error: -19 [ 389.803546][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 389.819777][ T5972] m920x_read = error: -19 [ 389.825006][ T5972] dvb-usb: error while querying for an remote control event. [ 389.843192][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.869015][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.910917][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.959462][ T5972] m920x_read = error: -19 [ 389.967575][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.979664][ T5972] dvb-usb: error while querying for an remote control event. [ 389.993838][ T6040] m920x_read = error: -19 [ 389.998244][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 390.008975][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 390.017165][T10327] FAULT_INJECTION: forcing a failure. [ 390.017165][T10327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.034959][T10327] CPU: 1 UID: 0 PID: 10327 Comm: syz.6.1290 Not tainted syzkaller #0 PREEMPT(full) [ 390.034988][T10327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.035001][T10327] Call Trace: [ 390.035010][T10327] [ 390.035019][T10327] dump_stack_lvl+0x189/0x250 [ 390.035045][T10327] ? __pfx____ratelimit+0x10/0x10 [ 390.035075][T10327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.035093][T10327] ? __pfx__printk+0x10/0x10 [ 390.035123][T10327] ? shmem_alloc_and_add_folio+0xcb3/0xf60 [ 390.035154][T10327] ? filemap_get_entry+0xad/0x2f0 [ 390.035177][T10327] ? filemap_get_entry+0xad/0x2f0 [ 390.035206][T10327] should_fail_ex+0x414/0x560 [ 390.035238][T10327] copy_folio_from_iter_atomic+0x325/0x1910 [ 390.035269][T10327] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 390.035311][T10327] ? shmem_get_folio_gfp+0x1432/0x1660 [ 390.035352][T10327] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 390.035395][T10327] ? shmem_write_begin+0x15f/0x2b0 [ 390.035425][T10327] generic_perform_write+0x5df/0x900 [ 390.035472][T10327] ? __pfx_generic_perform_write+0x10/0x10 [ 390.035500][T10327] ? do_raw_spin_unlock+0x122/0x240 [ 390.035531][T10327] ? mnt_put_write_access_file+0xc0/0x100 [ 390.035554][T10327] ? file_update_time+0x416/0x490 [ 390.035579][T10327] shmem_file_write_iter+0xf8/0x120 [ 390.035608][T10327] vfs_write+0x5c6/0xb30 [ 390.035640][T10327] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 390.035666][T10327] ? __pfx_vfs_write+0x10/0x10 [ 390.035704][T10327] ? __fget_files+0x2a/0x420 [ 390.035754][T10327] ksys_write+0x145/0x250 [ 390.035783][T10327] ? __pfx_ksys_write+0x10/0x10 [ 390.035812][T10327] ? do_syscall_64+0xbe/0xfa0 [ 390.035849][T10327] do_syscall_64+0xfa/0xfa0 [ 390.035877][T10327] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.035907][T10327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.035929][T10327] ? clear_bhb_loop+0x60/0xb0 [ 390.035954][T10327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.035973][T10327] RIP: 0033:0x7f5c16b8eba9 [ 390.035993][T10327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.036011][T10327] RSP: 002b:00007f5c179a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 390.036035][T10327] RAX: ffffffffffffffda RBX: 00007f5c16dd5fa0 RCX: 00007f5c16b8eba9 [ 390.036051][T10327] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 390.036065][T10327] RBP: 00007f5c179a3090 R08: 0000000000000000 R09: 0000000000000000 [ 390.036078][T10327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.036090][T10327] R13: 00007f5c16dd6038 R14: 00007f5c16dd5fa0 R15: 00007ffc38b2bcd8 [ 390.036130][T10327] [ 390.303280][ T6040] m920x_read = error: -19 [ 390.307686][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 390.318610][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 390.329629][ T5972] m920x_read = error: -19 [ 390.334044][ T5972] dvb-usb: error while querying for an remote control event. [ 390.342624][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 390.369913][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 390.389797][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 390.409224][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 390.431477][ T5927] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 390.441839][ T5927] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 390.455149][ T5972] m920x_read = error: -19 [ 390.459639][ T5972] dvb-usb: error while querying for an remote control event. [ 390.467346][ T5927] usb 5-1: USB disconnect, device number 70 [ 390.470131][ T982] m920x_read = error: -19 [ 390.508350][ T982] dvb-usb: error -19 while querying for an remote control event. [ 390.569185][ T5866] m920x_read = error: -19 [ 390.573602][ T5866] dvb-usb: error while querying for an remote control event. [ 390.699129][ T5866] m920x_read = error: -19 [ 390.705388][ T5866] dvb-usb: error while querying for an remote control event. [ 390.759035][ T5913] m920x_read = error: -19 [ 390.763460][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 390.843322][ T5866] m920x_read = error: -19 [ 390.847759][ T5866] dvb-usb: error while querying for an remote control event. [ 390.920838][ T982] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 390.939858][ T5954] m920x_read = error: -19 [ 390.944262][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 391.010083][ T5866] m920x_read = error: -19 [ 391.014517][ T5866] dvb-usb: error while querying for an remote control event. [ 391.092933][ T982] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.112872][ T982] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 391.124032][ T982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.142934][ T982] usb 7-1: Product: syz [ 391.147162][ T982] usb 7-1: Manufacturer: syz [ 391.153245][ T5954] m920x_read = error: -19 [ 391.157628][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 391.169067][ T953] m920x_read = error: -19 [ 391.173460][ T953] dvb-usb: error while querying for an remote control event. [ 391.175561][ T982] usb 7-1: SerialNumber: syz [ 391.204223][ T982] usb 7-1: config 0 descriptor?? [ 391.235569][ T982] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in cold state, will try to load a firmware [ 391.249244][ T5927] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 391.329224][ T953] m920x_read = error: -19 [ 391.329498][ T5954] m920x_read = error: -19 [ 391.333707][ T953] dvb-usb: error while querying for an remote control event. [ 391.347338][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 391.448615][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 391.455961][ T5927] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.479411][ T953] m920x_read = error: -19 [ 391.487716][ T953] dvb-usb: error while querying for an remote control event. [ 391.498285][ T5927] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.521726][ T5927] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.529352][ T5954] m920x_read = error: -19 [ 391.535452][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 391.536909][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.577192][ T5927] usb 5-1: Product: syz [ 391.583695][ T5927] usb 5-1: Manufacturer: syz [ 391.588681][ T5927] usb 5-1: SerialNumber: syz [ 391.616117][ T5927] usb 5-1: selecting invalid altsetting 1 [ 391.625902][ T5866] m920x_read = error: -19 [ 391.630367][ T5866] dvb-usb: error while querying for an remote control event. [ 391.709239][ T5913] m920x_read = error: -19 [ 391.713667][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 391.749086][ T953] m920x_read = error: -19 [ 391.753607][ T953] dvb-usb: error while querying for an remote control event. [ 391.889028][ T953] m920x_read = error: -19 [ 391.893607][ T953] dvb-usb: error while querying for an remote control event. [ 391.901674][ T5913] m920x_read = error: -19 [ 391.906063][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 392.025706][ T5927] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 392.032645][ T953] m920x_read = error: -19 [ 392.046790][ T953] dvb-usb: error while querying for an remote control event. [ 392.069082][ T5927] cdc_ncm 5-1:1.0: bind() failure [ 392.101313][ T5954] m920x_read = error: -19 [ 392.116126][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 392.181943][ T5927] cdc_ncm 5-1:1.1: skipping garbage [ 392.187225][ T5927] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 392.203948][ T5927] cdc_ncm 5-1:1.1: bind() failure [ 392.209899][ T5866] m920x_read = error: -19 [ 392.214280][ T5866] dvb-usb: error while querying for an remote control event. [ 392.259533][T10372] FAULT_INJECTION: forcing a failure. [ 392.259533][T10372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.288842][T10372] CPU: 1 UID: 0 PID: 10372 Comm: syz.5.1300 Not tainted syzkaller #0 PREEMPT(full) [ 392.288875][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.288889][T10372] Call Trace: [ 392.288912][T10372] [ 392.288923][T10372] dump_stack_lvl+0x189/0x250 [ 392.288950][T10372] ? __pfx____ratelimit+0x10/0x10 [ 392.288978][T10372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.288998][T10372] ? __pfx__printk+0x10/0x10 [ 392.289044][T10372] should_fail_ex+0x414/0x560 [ 392.289074][T10372] copy_folio_from_iter_atomic+0x325/0x1910 [ 392.289104][T10372] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 392.289144][T10372] ? shmem_get_folio_gfp+0x1432/0x1660 [ 392.289183][T10372] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 392.289221][T10372] ? shmem_write_begin+0x15f/0x2b0 [ 392.289248][T10372] generic_perform_write+0x5df/0x900 [ 392.289294][T10372] ? __pfx_generic_perform_write+0x10/0x10 [ 392.289323][T10372] ? do_raw_spin_unlock+0x122/0x240 [ 392.289355][T10372] ? mnt_put_write_access_file+0xc0/0x100 [ 392.289378][T10372] ? file_update_time+0x416/0x490 [ 392.289404][T10372] shmem_file_write_iter+0xf8/0x120 [ 392.289430][T10372] vfs_write+0x5c6/0xb30 [ 392.289461][T10372] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 392.289485][T10372] ? __pfx_vfs_write+0x10/0x10 [ 392.289521][T10372] ? __fget_files+0x2a/0x420 [ 392.289559][T10372] ksys_write+0x145/0x250 [ 392.289586][T10372] ? __pfx_ksys_write+0x10/0x10 [ 392.289610][T10372] ? do_syscall_64+0xbe/0xfa0 [ 392.289638][T10372] do_syscall_64+0xfa/0xfa0 [ 392.289659][T10372] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.289686][T10372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.289707][T10372] ? clear_bhb_loop+0x60/0xb0 [ 392.289742][T10372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.289761][T10372] RIP: 0033:0x7f2b3458eba9 [ 392.289780][T10372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.289798][T10372] RSP: 002b:00007f2b353e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 392.289821][T10372] RAX: ffffffffffffffda RBX: 00007f2b347d5fa0 RCX: 00007f2b3458eba9 [ 392.289837][T10372] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 392.289850][T10372] RBP: 00007f2b353e9090 R08: 0000000000000000 R09: 0000000000000000 [ 392.289863][T10372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.289876][T10372] R13: 00007f2b347d6038 R14: 00007f2b347d5fa0 R15: 00007ffca0c81b48 [ 392.289914][T10372] [ 392.308999][ T5954] m920x_read = error: -19 [ 392.369046][ T5927] m920x_read = error: -19 [ 392.410813][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 392.508888][ T5927] dvb-usb: error while querying for an remote control event. [ 392.678411][T10386] sctp: [Deprecated]: syz.7.1301 (pid 10386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.678411][T10386] Use struct sctp_sack_info instead [ 392.709884][ T5913] m920x_read = error: -19 [ 392.714294][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 392.780391][ T5927] m920x_read = error: -19 [ 392.784888][ T5927] dvb-usb: error while querying for an remote control event. [ 392.888917][ T5913] m920x_read = error: -19 [ 392.893332][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 392.909622][ T5927] m920x_read = error: -19 [ 392.918866][ T5927] dvb-usb: error while querying for an remote control event. [ 393.051556][ T5927] m920x_read = error: -19 [ 393.060113][ T5927] dvb-usb: error while querying for an remote control event. [ 393.062137][ T5913] m920x_read = error: -19 [ 393.072270][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 393.169403][ T5927] m920x_read = error: -19 [ 393.174087][ T5927] dvb-usb: error while querying for an remote control event. [ 393.259755][ T5913] m920x_read = error: -19 [ 393.264838][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 393.329059][ T5866] m920x_read = error: -19 [ 393.333985][ T5866] dvb-usb: error while querying for an remote control event. [ 393.439969][ T5913] m920x_read = error: -19 [ 393.459004][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 393.472109][ T5866] m920x_read = error: -19 [ 393.476706][ T5866] dvb-usb: error while querying for an remote control event. [ 393.591113][ T5866] m920x_read = error: -19 [ 393.595663][ T5866] dvb-usb: error while querying for an remote control event. [ 393.619044][ T5913] m920x_read = error: -19 [ 393.633688][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 393.709086][ T5866] m920x_read = error: -19 [ 393.715501][ T5866] dvb-usb: error while querying for an remote control event. [ 393.819014][ T5954] m920x_read = error: -19 [ 393.823531][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 393.840265][ T5866] m920x_read = error: -19 [ 393.844913][ T5866] dvb-usb: error while querying for an remote control event. [ 393.911286][ T5913] usb 5-1: USB disconnect, device number 71 [ 393.999089][ T5866] m920x_read = error: -19 [ 394.010290][ T5954] m920x_read = error: -19 [ 394.011268][ T5866] dvb-usb: error while querying for an remote control event. [ 394.025878][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 394.160110][ T5866] m920x_read = error: -19 [ 394.172346][ T5866] dvb-usb: error while querying for an remote control event. [ 394.220450][ T2346] pvrusb2: request_firmware fatal error with code=-110 [ 394.237981][ T2346] pvrusb2: Failure uploading firmware1 [ 394.239919][ T5913] m920x_read = error: -19 [ 394.247850][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 394.277105][ T2346] pvrusb2: Device initialization was not successful. [ 394.316172][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 394.336141][ T5866] m920x_read = error: -19 [ 394.348835][ T5866] dvb-usb: error while querying for an remote control event. [ 394.358384][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 394.410925][ T2346] usb 6-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 394.411966][ T9] pvrusb2: Device being rendered inoperable [ 394.439178][ T2346] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 394.470407][ T5954] m920x_read = error: -19 [ 394.474832][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 394.503769][T10425] FAULT_INJECTION: forcing a failure. [ 394.503769][T10425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.517111][ T5866] m920x_read = error: -19 [ 394.539615][ T5866] dvb-usb: error while querying for an remote control event. [ 394.589319][T10425] CPU: 0 UID: 0 PID: 10425 Comm: syz.7.1310 Not tainted syzkaller #0 PREEMPT(full) [ 394.589351][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.589363][T10425] Call Trace: [ 394.589373][T10425] [ 394.589383][T10425] dump_stack_lvl+0x189/0x250 [ 394.589409][T10425] ? __pfx____ratelimit+0x10/0x10 [ 394.589436][T10425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.589456][T10425] ? __pfx__printk+0x10/0x10 [ 394.589513][T10425] should_fail_ex+0x414/0x560 [ 394.589544][T10425] copy_folio_from_iter_atomic+0x325/0x1910 [ 394.589576][T10425] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 394.589620][T10425] ? shmem_get_folio_gfp+0x6bc/0x1660 [ 394.589663][T10425] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 394.589706][T10425] ? shmem_write_begin+0x15f/0x2b0 [ 394.589734][T10425] generic_perform_write+0x5df/0x900 [ 394.589781][T10425] ? __pfx_generic_perform_write+0x10/0x10 [ 394.589808][T10425] ? down_write+0x162/0x1f0 [ 394.589838][T10425] ? file_update_time+0x2da/0x490 [ 394.589865][T10425] shmem_file_write_iter+0xf8/0x120 [ 394.589893][T10425] vfs_write+0x5c6/0xb30 [ 394.589926][T10425] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 394.589951][T10425] ? __pfx_vfs_write+0x10/0x10 [ 394.589989][T10425] ? __fget_files+0x2a/0x420 [ 394.590029][T10425] ksys_write+0x145/0x250 [ 394.590057][T10425] ? __pfx_ksys_write+0x10/0x10 [ 394.590086][T10425] ? do_syscall_64+0xbe/0xfa0 [ 394.590121][T10425] do_syscall_64+0xfa/0xfa0 [ 394.590149][T10425] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.590178][T10425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.590199][T10425] ? clear_bhb_loop+0x60/0xb0 [ 394.590225][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.590244][T10425] RIP: 0033:0x7fa48c78eba9 [ 394.590264][T10425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.590282][T10425] RSP: 002b:00007fa48d63b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 394.590305][T10425] RAX: ffffffffffffffda RBX: 00007fa48c9d5fa0 RCX: 00007fa48c78eba9 [ 394.590320][T10425] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 394.590334][T10425] RBP: 00007fa48d63b090 R08: 0000000000000000 R09: 0000000000000000 [ 394.590347][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.590360][T10425] R13: 00007fa48c9d6038 R14: 00007fa48c9d5fa0 R15: 00007ffe3adabe28 [ 394.590399][T10425] [ 394.842370][ T5866] m920x_read = error: -19 [ 394.846768][ T5866] dvb-usb: error while querying for an remote control event. [ 394.866846][ T5954] m920x_read = error: -19 [ 394.871408][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 395.004064][ T5972] m920x_read = error: -19 [ 395.019012][ T5972] dvb-usb: error while querying for an remote control event. [ 395.098947][ T5954] m920x_read = error: -19 [ 395.103360][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 395.174081][ T5866] m920x_read = error: -19 [ 395.178500][ T5866] dvb-usb: error while querying for an remote control event. [ 395.269297][ T5954] m920x_read = error: -19 [ 395.275361][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 395.349734][ T5866] m920x_read = error: -19 [ 395.354150][ T5866] dvb-usb: error while querying for an remote control event. [ 395.448925][ T6046] m920x_read = error: -19 [ 395.453480][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 395.461882][ T5913] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 395.499447][ T5866] m920x_read = error: -19 [ 395.503867][ T5866] dvb-usb: error while querying for an remote control event. [ 395.625377][ T5913] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.635811][ T6046] m920x_read = error: -19 [ 395.640503][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 395.648441][ T5913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.649124][ T5866] m920x_read = error: -19 [ 395.660595][ T5913] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 395.669772][ T5866] dvb-usb: error while querying for an remote control event. [ 395.679298][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 395.689829][ T5913] usb 5-1: SerialNumber: syz [ 395.778893][ T5866] m920x_read = error: -19 [ 395.783403][ T5866] dvb-usb: error while querying for an remote control event. [ 395.799427][ T6046] m920x_read = error: -19 [ 395.809467][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 395.917860][ T5913] usb 5-1: 0:2 : does not exist [ 395.931427][ T5866] m920x_read = error: -19 [ 395.942072][ T5866] dvb-usb: error while querying for an remote control event. [ 395.969659][ T5913] usb 5-1: USB disconnect, device number 72 [ 395.988927][ T6040] m920x_read = error: -19 [ 395.993637][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 396.043114][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.079268][ T5866] m920x_read = error: -19 [ 396.083851][ T5866] dvb-usb: error while querying for an remote control event. [ 396.169056][ T6040] m920x_read = error: -19 [ 396.173516][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 396.199141][ T5866] m920x_read = error: -19 [ 396.203701][ T5866] dvb-usb: error while querying for an remote control event. [ 396.319398][ T5866] m920x_read = error: -19 [ 396.323973][ T5866] dvb-usb: error while querying for an remote control event. [ 396.342108][ T6040] m920x_read = error: -19 [ 396.346696][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 396.449003][ T5866] m920x_read = error: -19 [ 396.453867][ T5866] dvb-usb: error while querying for an remote control event. [ 396.509162][ T6040] m920x_read = error: -19 [ 396.513686][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 396.568916][ T5866] m920x_read = error: -19 [ 396.573409][ T5866] dvb-usb: error while querying for an remote control event. [ 396.681899][ T5913] m920x_read = error: -19 [ 396.686509][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 396.719043][ T5866] m920x_read = error: -19 [ 396.723661][ T5866] dvb-usb: error while querying for an remote control event. [ 396.832013][ T6040] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 396.849006][ T5866] m920x_read = error: -19 [ 396.849182][ T5913] m920x_read = error: -19 [ 396.853981][ T5866] dvb-usb: error while querying for an remote control event. [ 396.857791][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 396.981116][ T5866] m920x_read = error: -19 [ 396.985581][ T5866] dvb-usb: error while querying for an remote control event. [ 396.999828][ T6040] usb 5-1: Using ep0 maxpacket: 32 [ 397.007613][ T6040] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.018241][ T5913] m920x_read = error: -19 [ 397.024067][ T6040] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.035218][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 397.043356][ T6040] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 397.054267][ T6040] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.063667][ T6040] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.071726][ T6040] usb 5-1: Product: syz [ 397.075948][ T6040] usb 5-1: Manufacturer: syz [ 397.081090][ T6040] usb 5-1: SerialNumber: syz [ 397.092082][ T6040] usb 5-1: selecting invalid altsetting 1 [ 397.099277][ T5866] m920x_read = error: -19 [ 397.104557][ T5866] dvb-usb: error while querying for an remote control event. [ 397.198943][ T6046] m920x_read = error: -19 [ 397.209831][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 397.219776][ T5866] m920x_read = error: -19 [ 397.224277][ T5866] dvb-usb: error while querying for an remote control event. [ 397.298300][T10454] netlink: 840 bytes leftover after parsing attributes in process `syz.6.1317'. [ 397.311505][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1317'. [ 397.320871][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'. [ 397.329992][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1317'. [ 397.339723][ T5866] m920x_read = error: -19 [ 397.344117][ T5866] dvb-usb: error while querying for an remote control event. [ 397.353589][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1317'. [ 397.363885][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'. [ 397.372974][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'. [ 397.382195][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'. [ 397.389140][ T6046] m920x_read = error: -19 [ 397.391692][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'. [ 397.396875][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 397.405536][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'. [ 397.489073][ T5972] m920x_read = error: -19 [ 397.492476][ T6040] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 397.493642][ T5972] dvb-usb: error while querying for an remote control event. [ 397.502938][ T6040] cdc_ncm 5-1:1.0: bind() failure [ 397.537934][ T6040] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 397.559691][ T6040] cdc_ncm 5-1:1.1: bind() failure [ 397.577045][ T6046] m920x_read = error: -19 [ 397.589936][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 397.609026][ T5972] m920x_read = error: -19 [ 397.613432][ T5972] dvb-usb: error while querying for an remote control event. [ 397.749012][ T5972] m920x_read = error: -19 [ 397.749568][ T6046] m920x_read = error: -19 [ 397.753553][ T5972] dvb-usb: error while querying for an remote control event. [ 397.757844][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 397.868894][ T5972] m920x_read = error: -19 [ 397.873268][ T5972] dvb-usb: error while querying for an remote control event. [ 397.929599][ T6046] m920x_read = error: -19 [ 397.934067][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 397.998988][ T5972] m920x_read = error: -19 [ 398.003519][ T5972] dvb-usb: error while querying for an remote control event. [ 398.099278][ T6046] m920x_read = error: -19 [ 398.103677][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 398.119497][ T5972] m920x_read = error: -19 [ 398.124072][ T5972] dvb-usb: error while querying for an remote control event. [ 398.238955][ T5972] m920x_read = error: -19 [ 398.243398][ T5972] dvb-usb: error while querying for an remote control event. [ 398.268979][ T6046] m920x_read = error: -19 [ 398.273461][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 398.316651][T10463] FAULT_INJECTION: forcing a failure. [ 398.316651][T10463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.330175][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.7.1320 Not tainted syzkaller #0 PREEMPT(full) [ 398.330204][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.330215][T10463] Call Trace: [ 398.330223][T10463] [ 398.330229][T10463] dump_stack_lvl+0x189/0x250 [ 398.330247][T10463] ? __pfx____ratelimit+0x10/0x10 [ 398.330266][T10463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.330278][T10463] ? __pfx__printk+0x10/0x10 [ 398.330305][T10463] should_fail_ex+0x414/0x560 [ 398.330324][T10463] copy_folio_from_iter_atomic+0x325/0x1910 [ 398.330343][T10463] ? irqentry_exit+0x74/0x90 [ 398.330367][T10463] ? shmem_get_folio_gfp+0x6bc/0x1660 [ 398.330393][T10463] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 398.330417][T10463] ? shmem_write_begin+0x15f/0x2b0 [ 398.330433][T10463] generic_perform_write+0x5df/0x900 [ 398.330460][T10463] ? __pfx_generic_perform_write+0x10/0x10 [ 398.330486][T10463] ? down_write+0x162/0x1f0 [ 398.330503][T10463] ? file_update_time+0x2da/0x490 [ 398.330519][T10463] shmem_file_write_iter+0xf8/0x120 [ 398.330535][T10463] vfs_write+0x5c6/0xb30 [ 398.330553][T10463] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 398.330567][T10463] ? __pfx_vfs_write+0x10/0x10 [ 398.330588][T10463] ? __fget_files+0x2a/0x420 [ 398.330611][T10463] ksys_write+0x145/0x250 [ 398.330627][T10463] ? __pfx_ksys_write+0x10/0x10 [ 398.330644][T10463] ? do_syscall_64+0xbe/0xfa0 [ 398.330664][T10463] do_syscall_64+0xfa/0xfa0 [ 398.330682][T10463] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.330699][T10463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.330712][T10463] ? clear_bhb_loop+0x60/0xb0 [ 398.330730][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.330741][T10463] RIP: 0033:0x7fa48c78eba9 [ 398.330754][T10463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.330765][T10463] RSP: 002b:00007fa48d63b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 398.330780][T10463] RAX: ffffffffffffffda RBX: 00007fa48c9d5fa0 RCX: 00007fa48c78eba9 [ 398.330789][T10463] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 398.330797][T10463] RBP: 00007fa48d63b090 R08: 0000000000000000 R09: 0000000000000000 [ 398.330805][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.330812][T10463] R13: 00007fa48c9d6038 R14: 00007fa48c9d5fa0 R15: 00007ffe3adabe28 [ 398.330834][T10463] [ 398.389158][ T5972] m920x_read = error: -19 [ 398.449015][ T6046] m920x_read = error: -19 [ 398.454055][ T5972] dvb-usb: error while querying for an remote control event. [ 398.457907][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 398.588126][T10465] syzkaller1: entered promiscuous mode [ 398.612382][T10465] syzkaller1: entered allmulticast mode [ 398.612492][ T6046] m920x_read = error: -19 [ 398.622554][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 398.699886][ T5972] m920x_read = error: -19 [ 398.704312][ T5972] dvb-usb: error while querying for an remote control event. [ 398.789229][ T6046] m920x_read = error: -19 [ 398.793886][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 398.819088][ T5972] m920x_read = error: -19 [ 398.823563][ T5972] dvb-usb: error while querying for an remote control event. [ 398.900847][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 398.908185][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 398.908336][T10467] usb 4-1: control msg error: -32 [ 398.915753][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 398.927796][ C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 398.939334][ T5972] m920x_read = error: -19 [ 398.943835][ T5972] dvb-usb: error while querying for an remote control event. [ 398.959131][ T6046] m920x_read = error: -19 [ 398.965755][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 399.061005][ T5972] m920x_read = error: -19 [ 399.065419][ T5972] dvb-usb: error while querying for an remote control event. [ 399.128947][ T6040] m920x_read = error: -19 [ 399.133535][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 399.208978][ T5972] m920x_read = error: -19 [ 399.213388][ T5972] dvb-usb: error while querying for an remote control event. [ 399.301722][ T6040] m920x_read = error: -19 [ 399.306866][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 399.339370][ T5866] m920x_read = error: -19 [ 399.344273][ T5866] dvb-usb: error while querying for an remote control event. [ 399.458934][ T5866] m920x_read = error: -19 [ 399.463397][ T5866] dvb-usb: error while querying for an remote control event. [ 399.479316][ T6040] m920x_read = error: -19 [ 399.483823][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 399.588980][ T5866] m920x_read = error: -19 [ 399.593601][ T5866] dvb-usb: error while querying for an remote control event. [ 399.616327][ T5866] usb 5-1: USB disconnect, device number 73 [ 399.648949][ T6040] m920x_read = error: -19 [ 399.653448][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 399.710742][ T5972] m920x_read = error: -19 [ 399.715245][ T5972] dvb-usb: error while querying for an remote control event. [ 399.838964][ T6040] m920x_read = error: -19 [ 399.843390][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 399.848942][ T5866] m920x_read = error: -19 [ 399.856986][ T5866] dvb-usb: error while querying for an remote control event. [ 399.969544][ T5866] m920x_read = error: -19 [ 399.975109][ T5866] dvb-usb: error while querying for an remote control event. [ 400.008985][ T6046] m920x_read = error: -19 [ 400.013535][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 400.089024][ T5866] m920x_read = error: -19 [ 400.093631][ T5866] dvb-usb: error while querying for an remote control event. [ 400.179024][ T6040] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 400.186929][ T5913] m920x_read = error: -19 [ 400.191659][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 400.209328][ T5866] m920x_read = error: -19 [ 400.213842][ T5866] dvb-usb: error while querying for an remote control event. [ 400.329192][ T5866] m920x_read = error: -19 [ 400.333628][ T5866] dvb-usb: error while querying for an remote control event. [ 400.354123][ T6040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.365382][ T5913] m920x_read = error: -19 [ 400.370099][ T6040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.379954][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 400.387730][ T6040] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 400.397203][ T6040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.407763][ T6040] usb 5-1: config 0 descriptor?? [ 400.449662][ T5866] m920x_read = error: -19 [ 400.454131][ T5866] dvb-usb: error while querying for an remote control event. [ 400.539873][ T5913] m920x_read = error: -19 [ 400.544343][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 400.569105][ T5866] m920x_read = error: -19 [ 400.573603][ T5866] dvb-usb: error while querying for an remote control event. [ 400.689082][ T5866] m920x_read = error: -19 [ 400.693554][ T5866] dvb-usb: error while querying for an remote control event. [ 400.709168][ T5913] m920x_read = error: -19 [ 400.713671][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 400.737452][T10483] FAULT_INJECTION: forcing a failure. [ 400.737452][T10483] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 400.752223][T10483] CPU: 1 UID: 0 PID: 10483 Comm: syz.6.1329 Not tainted syzkaller #0 PREEMPT(full) [ 400.752251][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.752264][T10483] Call Trace: [ 400.752273][T10483] [ 400.752283][T10483] dump_stack_lvl+0x189/0x250 [ 400.752310][T10483] ? __pfx____ratelimit+0x10/0x10 [ 400.752341][T10483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.752361][T10483] ? __pfx__printk+0x10/0x10 [ 400.752392][T10483] ? fs_reclaim_acquire+0x7d/0x100 [ 400.752429][T10483] should_fail_ex+0x414/0x560 [ 400.752460][T10483] prepare_alloc_pages+0x213/0x610 [ 400.752503][T10483] __alloc_frozen_pages_noprof+0x123/0x370 [ 400.752536][T10483] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 400.752578][T10483] ? policy_nodemask+0x27c/0x720 [ 400.752610][T10483] alloc_pages_mpol+0x232/0x4a0 [ 400.752642][T10483] folio_alloc_mpol_noprof+0x39/0x70 [ 400.752670][T10483] shmem_alloc_and_add_folio+0x447/0xf60 [ 400.752698][T10483] ? filemap_get_entry+0xad/0x2f0 [ 400.752724][T10483] ? filemap_get_entry+0xad/0x2f0 [ 400.752747][T10483] ? filemap_get_entry+0xad/0x2f0 [ 400.752772][T10483] ? filemap_get_entry+0x28f/0x2f0 [ 400.752801][T10483] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 400.752829][T10483] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 400.752871][T10483] shmem_get_folio_gfp+0x59d/0x1660 [ 400.752926][T10483] shmem_write_begin+0xf7/0x2b0 [ 400.752957][T10483] generic_perform_write+0x2c5/0x900 [ 400.753004][T10483] ? __pfx_generic_perform_write+0x10/0x10 [ 400.753031][T10483] ? down_write+0x162/0x1f0 [ 400.753060][T10483] ? file_update_time+0x2da/0x490 [ 400.753086][T10483] shmem_file_write_iter+0xf8/0x120 [ 400.753113][T10483] vfs_write+0x5c6/0xb30 [ 400.753144][T10483] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 400.753169][T10483] ? __pfx_vfs_write+0x10/0x10 [ 400.753206][T10483] ? __fget_files+0x2a/0x420 [ 400.753243][T10483] ksys_write+0x145/0x250 [ 400.753271][T10483] ? __pfx_ksys_write+0x10/0x10 [ 400.753301][T10483] ? do_syscall_64+0xbe/0xfa0 [ 400.753336][T10483] do_syscall_64+0xfa/0xfa0 [ 400.753362][T10483] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.753392][T10483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.753412][T10483] ? clear_bhb_loop+0x60/0xb0 [ 400.753438][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.753457][T10483] RIP: 0033:0x7f5c16b8eba9 [ 400.753478][T10483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.753503][T10483] RSP: 002b:00007f5c179a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 400.753526][T10483] RAX: ffffffffffffffda RBX: 00007f5c16dd5fa0 RCX: 00007f5c16b8eba9 [ 400.753541][T10483] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 400.753555][T10483] RBP: 00007f5c179a3090 R08: 0000000000000000 R09: 0000000000000000 [ 400.753568][T10483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.753580][T10483] R13: 00007f5c16dd6038 R14: 00007f5c16dd5fa0 R15: 00007ffc38b2bcd8 [ 400.753619][T10483] [ 401.067237][ T5866] m920x_read = error: -19 [ 401.068872][ T5913] m920x_read = error: -19 [ 401.071669][ T5866] dvb-usb: error while querying for an remote control event. [ 401.076037][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 401.128535][ T6040] usbhid 5-1:0.0: can't add hid device: -71 [ 401.138194][ T6040] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 401.188940][ T5866] m920x_read = error: -19 [ 401.193438][ T5866] dvb-usb: error while querying for an remote control event. [ 401.198516][ T6040] usb 5-1: USB disconnect, device number 74 [ 401.259184][ T5913] m920x_read = error: -19 [ 401.263924][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 401.273250][T10489] syzkaller1: entered promiscuous mode [ 401.279483][T10489] syzkaller1: entered allmulticast mode [ 401.288154][T10487] syzkaller1: entered promiscuous mode [ 401.294338][T10487] syzkaller1: entered allmulticast mode [ 401.309337][ T5972] m920x_read = error: -19 [ 401.313883][ T5972] dvb-usb: error while querying for an remote control event. [ 401.429202][ T6040] m920x_read = error: -19 [ 401.429638][ T5866] m920x_read = error: -19 [ 401.433668][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 401.438304][ T5866] dvb-usb: error while querying for an remote control event. [ 401.562934][ T5866] m920x_read = error: -19 [ 401.567424][ T5866] dvb-usb: error while querying for an remote control event. [ 401.598998][ T6040] m920x_read = error: -19 [ 401.603399][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 401.689104][ T5866] m920x_read = error: -19 [ 401.693991][ T5866] dvb-usb: error while querying for an remote control event. [ 401.769683][ T6040] m920x_read = error: -19 [ 401.774143][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 401.822016][ T5866] m920x_read = error: -19 [ 401.826571][ T5866] dvb-usb: error while querying for an remote control event. [ 401.939088][ T6040] m920x_read = error: -19 [ 401.943588][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 401.947907][ T5972] m920x_read = error: -19 [ 401.955772][ T5972] dvb-usb: error while querying for an remote control event. [ 402.079024][ T5866] m920x_read = error: -19 [ 402.088829][ T5866] dvb-usb: error while querying for an remote control event. [ 402.119279][ T6040] m920x_read = error: -19 [ 402.127325][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 402.210979][ T953] m920x_read = error: -19 [ 402.215361][ T953] dvb-usb: error while querying for an remote control event. [ 402.268840][ T5972] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 402.310111][ T6040] m920x_read = error: -19 [ 402.314535][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 402.329330][ T953] m920x_read = error: -19 [ 402.335981][ T953] dvb-usb: error while querying for an remote control event. [ 402.449157][ T953] m920x_read = error: -19 [ 402.453686][ T953] dvb-usb: error while querying for an remote control event. [ 402.463099][ T5972] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 402.474729][ T5972] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 402.479122][ T6040] m920x_read = error: -19 [ 402.484297][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.488973][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 402.497555][ T5972] usb 5-1: Product: syz [ 402.508760][ T5972] usb 5-1: Manufacturer: syz [ 402.513385][ T5972] usb 5-1: SerialNumber: syz [ 402.524286][ T5972] usb 5-1: config 0 descriptor?? [ 402.569052][ T5972] m920x_read = error: -19 [ 402.573648][ T5972] dvb-usb: error while querying for an remote control event. [ 402.659003][ T5913] m920x_read = error: -19 [ 402.667322][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 402.688911][ T5972] m920x_read = error: -19 [ 402.693369][ T5972] dvb-usb: error while querying for an remote control event. [ 402.809381][ T5972] m920x_read = error: -19 [ 402.813829][ T5972] dvb-usb: error while querying for an remote control event. [ 402.828998][ T5913] m920x_read = error: -19 [ 402.833385][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 402.939786][ T5972] m920x_read = error: -19 [ 402.944216][ T5972] dvb-usb: error while querying for an remote control event. [ 403.000178][ T5913] m920x_read = error: -19 [ 403.004686][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 403.059125][ T5972] m920x_read = error: -19 [ 403.063703][ T5972] dvb-usb: error while querying for an remote control event. [ 403.169404][ T5913] m920x_read = error: -19 [ 403.173832][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 403.188980][ T5972] m920x_read = error: -19 [ 403.193400][ T5972] dvb-usb: error while querying for an remote control event. [ 403.309716][ T5972] m920x_read = error: -19 [ 403.314316][ T5972] dvb-usb: error while querying for an remote control event. [ 403.339020][ T6046] m920x_read = error: -19 [ 403.343534][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 403.439149][ T5972] m920x_read = error: -19 [ 403.443567][ T5972] dvb-usb: error while querying for an remote control event. [ 403.510148][ T6046] m920x_read = error: -19 [ 403.514836][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 403.572207][ T5972] m920x_read = error: -19 [ 403.576705][ T5972] dvb-usb: error while querying for an remote control event. [ 403.682106][ T6046] m920x_read = error: -19 [ 403.686631][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 403.699144][ T5972] m920x_read = error: -19 [ 403.703548][ T5972] dvb-usb: error while querying for an remote control event. [ 403.819139][ T5972] m920x_read = error: -19 [ 403.823945][ T5972] dvb-usb: error while querying for an remote control event. [ 403.849033][ T6046] m920x_read = error: -19 [ 403.853473][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 403.940092][ T5972] m920x_read = error: -19 [ 403.945337][ T5972] dvb-usb: error while querying for an remote control event. [ 404.029822][ T6046] m920x_read = error: -19 [ 404.034272][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 404.059758][ T5972] m920x_read = error: -19 [ 404.064336][ T5972] dvb-usb: error while querying for an remote control event. [ 404.190496][ T5972] m920x_read = error: -19 [ 404.194913][ T5972] dvb-usb: error while querying for an remote control event. [ 404.199184][ T6046] m920x_read = error: -19 [ 404.208506][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 404.311197][ T953] m920x_read = error: -19 [ 404.315600][ T953] dvb-usb: error while querying for an remote control event. [ 404.380173][ T6046] m920x_read = error: -19 [ 404.384769][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 404.429085][ T953] m920x_read = error: -19 [ 404.433788][ T953] dvb-usb: error while querying for an remote control event. [ 404.550325][ T953] m920x_read = error: -19 [ 404.554749][ T953] dvb-usb: error while querying for an remote control event. [ 404.559118][ T6046] m920x_read = error: -19 [ 404.567811][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 404.678947][ T953] m920x_read = error: -19 [ 404.683374][ T953] dvb-usb: error while querying for an remote control event. [ 404.728954][ T6046] m920x_read = error: -19 [ 404.733785][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 404.799805][ T953] m920x_read = error: -19 [ 404.804274][ T953] dvb-usb: error while querying for an remote control event. [ 404.898955][ T6046] m920x_read = error: -19 [ 404.903509][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 404.918953][ T953] m920x_read = error: -19 [ 404.923366][ T953] dvb-usb: error while querying for an remote control event. [ 405.027486][ T6046] usb 5-1: USB disconnect, device number 75 [ 405.039259][ T953] m920x_read = error: -19 [ 405.052329][ T953] dvb-usb: error while querying for an remote control event. [ 405.068915][ T6040] m920x_read = error: -19 [ 405.073330][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 405.103994][T10509] FAULT_INJECTION: forcing a failure. [ 405.103994][T10509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.118544][T10509] CPU: 0 UID: 0 PID: 10509 Comm: syz.4.1338 Not tainted syzkaller #0 PREEMPT(full) [ 405.118573][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 405.118586][T10509] Call Trace: [ 405.118595][T10509] [ 405.118604][T10509] dump_stack_lvl+0x189/0x250 [ 405.118629][T10509] ? __pfx____ratelimit+0x10/0x10 [ 405.118660][T10509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.118680][T10509] ? __pfx__printk+0x10/0x10 [ 405.118717][T10509] ? shmem_alloc_and_add_folio+0xcb3/0xf60 [ 405.118748][T10509] ? filemap_get_entry+0xad/0x2f0 [ 405.118770][T10509] ? filemap_get_entry+0xad/0x2f0 [ 405.118799][T10509] should_fail_ex+0x414/0x560 [ 405.118831][T10509] copy_folio_from_iter_atomic+0x325/0x1910 [ 405.118861][T10509] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 405.118902][T10509] ? shmem_get_folio_gfp+0x1432/0x1660 [ 405.118946][T10509] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 405.118990][T10509] ? shmem_write_begin+0x15f/0x2b0 [ 405.119018][T10509] generic_perform_write+0x5df/0x900 [ 405.119067][T10509] ? __pfx_generic_perform_write+0x10/0x10 [ 405.119095][T10509] ? down_write+0x162/0x1f0 [ 405.119126][T10509] ? file_update_time+0x2da/0x490 [ 405.119154][T10509] shmem_file_write_iter+0xf8/0x120 [ 405.119181][T10509] vfs_write+0x5c6/0xb30 [ 405.119211][T10509] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 405.119236][T10509] ? __pfx_vfs_write+0x10/0x10 [ 405.119274][T10509] ? __fget_files+0x2a/0x420 [ 405.119313][T10509] ksys_write+0x145/0x250 [ 405.119341][T10509] ? __pfx_ksys_write+0x10/0x10 [ 405.119371][T10509] ? do_syscall_64+0xbe/0xfa0 [ 405.119406][T10509] do_syscall_64+0xfa/0xfa0 [ 405.119434][T10509] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.119464][T10509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.119484][T10509] ? clear_bhb_loop+0x60/0xb0 [ 405.119518][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.119538][T10509] RIP: 0033:0x7f47ce58eba9 [ 405.119558][T10509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.119576][T10509] RSP: 002b:00007f47cf4d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.119598][T10509] RAX: ffffffffffffffda RBX: 00007f47ce7d5fa0 RCX: 00007f47ce58eba9 [ 405.119614][T10509] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 405.119628][T10509] RBP: 00007f47cf4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 405.119641][T10509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.119653][T10509] R13: 00007f47ce7d6038 R14: 00007f47ce7d5fa0 R15: 00007fff95e07468 [ 405.119692][T10509] [ 405.378847][ T953] m920x_read = error: -19 [ 405.383334][ T953] dvb-usb: error while querying for an remote control event. [ 405.391390][ T6040] m920x_read = error: -19 [ 405.395816][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 405.499884][ T953] m920x_read = error: -19 [ 405.504484][ T953] dvb-usb: error while querying for an remote control event. [ 405.559315][ T6040] m920x_read = error: -19 [ 405.563996][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 405.686914][T10516] syzkaller1: entered promiscuous mode [ 405.700170][ T953] m920x_read = error: -19 [ 405.701002][T10516] syzkaller1: entered allmulticast mode [ 405.704567][ T953] dvb-usb: error while querying for an remote control event. [ 405.729656][ T6040] m920x_read = error: -19 [ 405.734279][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 405.829256][ T953] m920x_read = error: -19 [ 405.834295][ T953] dvb-usb: error while querying for an remote control event. [ 405.868879][ T6046] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 405.908917][ T6040] m920x_read = error: -19 [ 405.913360][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 405.949146][ T953] m920x_read = error: -19 [ 405.953903][ T953] dvb-usb: error while querying for an remote control event. [ 406.021086][ T6046] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 406.030608][ T6046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.048594][ T6046] pvrusb2: Hardware description: Terratec Grabster AV400 [ 406.060944][ T6046] pvrusb2: ********** [ 406.069028][ T6046] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 406.085718][ T6046] pvrusb2: Important functionality might not be entirely working. [ 406.089276][ T5972] m920x_read = error: -19 [ 406.094284][ T6046] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 406.098434][ T5972] dvb-usb: error while querying for an remote control event. [ 406.109751][ T6040] m920x_read = error: -19 [ 406.131881][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 406.145477][ T6046] pvrusb2: ********** [ 406.229390][ T5972] m920x_read = error: -19 [ 406.233810][ T5972] dvb-usb: error while querying for an remote control event. [ 406.310896][ T6040] m920x_read = error: -19 [ 406.315412][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 406.346109][T10535] binder: 10534:10535 ioctl c018620c 200000000080 returned -22 [ 406.360245][ T5972] m920x_read = error: -19 [ 406.364749][ T5972] dvb-usb: error while querying for an remote control event. [ 406.405647][ T6046] usb 5-1: USB disconnect, device number 76 [ 406.423531][ T6046] pvrusb2: Device being rendered inoperable [ 406.490229][ T953] m920x_read = error: -19 [ 406.492939][ T6040] m920x_read = error: -19 [ 406.494640][ T953] dvb-usb: error while querying for an remote control event. [ 406.516510][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 406.609031][ T953] m920x_read = error: -19 [ 406.613456][ T953] dvb-usb: error while querying for an remote control event. [ 406.689189][ T6046] m920x_read = error: -19 [ 406.693683][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 406.739545][ T953] m920x_read = error: -19 [ 406.744022][ T953] dvb-usb: error while querying for an remote control event. [ 406.859297][ T953] m920x_read = error: -19 [ 406.859926][ T6046] m920x_read = error: -19 [ 406.863987][ T953] dvb-usb: error while querying for an remote control event. [ 406.873836][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 406.972637][T10540] FAULT_INJECTION: forcing a failure. [ 406.972637][T10540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.988478][T10540] CPU: 1 UID: 0 PID: 10540 Comm: syz.4.1348 Not tainted syzkaller #0 PREEMPT(full) [ 406.988509][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 406.988522][T10540] Call Trace: [ 406.988531][T10540] [ 406.988542][T10540] dump_stack_lvl+0x189/0x250 [ 406.988568][T10540] ? __pfx____ratelimit+0x10/0x10 [ 406.988599][T10540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.988620][T10540] ? __pfx__printk+0x10/0x10 [ 406.988668][T10540] should_fail_ex+0x414/0x560 [ 406.988705][T10540] copy_folio_from_iter_atomic+0x325/0x1910 [ 406.988735][T10540] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 406.988787][T10540] ? shmem_get_folio_gfp+0x1432/0x1660 [ 406.988830][T10540] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 406.988871][T10540] ? shmem_write_begin+0x15f/0x2b0 [ 406.988900][T10540] generic_perform_write+0x5df/0x900 [ 406.988946][T10540] ? __pfx_generic_perform_write+0x10/0x10 [ 406.988974][T10540] ? down_write+0x162/0x1f0 [ 406.989004][T10540] ? file_update_time+0x2da/0x490 [ 406.989032][T10540] shmem_file_write_iter+0xf8/0x120 [ 406.989059][T10540] vfs_write+0x5c6/0xb30 [ 406.989091][T10540] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 406.989117][T10540] ? __pfx_vfs_write+0x10/0x10 [ 406.989155][T10540] ? __fget_files+0x2a/0x420 [ 406.989195][T10540] ksys_write+0x145/0x250 [ 406.989221][T10540] ? __pfx_ksys_write+0x10/0x10 [ 406.989249][T10540] ? do_syscall_64+0xbe/0xfa0 [ 406.989282][T10540] do_syscall_64+0xfa/0xfa0 [ 406.989309][T10540] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.989337][T10540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.989358][T10540] ? clear_bhb_loop+0x60/0xb0 [ 406.989384][T10540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.989404][T10540] RIP: 0033:0x7f47ce58eba9 [ 406.989424][T10540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.989442][T10540] RSP: 002b:00007f47cf4d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 406.989466][T10540] RAX: ffffffffffffffda RBX: 00007f47ce7d5fa0 RCX: 00007f47ce58eba9 [ 406.989482][T10540] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 406.989495][T10540] RBP: 00007f47cf4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 406.989508][T10540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.989521][T10540] R13: 00007f47ce7d6038 R14: 00007f47ce7d5fa0 R15: 00007fff95e07468 [ 406.989560][T10540] [ 407.039700][ T6046] m920x_read = error: -19 [ 407.041831][ T953] m920x_read = error: -19 [ 407.046005][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 407.199582][ T6040] m920x_read = error: -19 [ 407.207163][ T953] dvb-usb: error while querying for an remote control event. [ 407.223273][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 407.383309][ T6040] m920x_read = error: -19 [ 407.408887][ T953] m920x_read = error: -19 [ 407.413390][ T953] dvb-usb: error while querying for an remote control event. [ 407.415262][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 407.535549][T10553] __nla_validate_parse: 3 callbacks suppressed [ 407.535570][T10553] netlink: 3850 bytes leftover after parsing attributes in process `syz.7.1352'. [ 407.551373][ T953] m920x_read = error: -19 [ 407.555863][ T953] dvb-usb: error while querying for an remote control event. [ 407.599079][ T6040] m920x_read = error: -19 [ 407.603634][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 407.678107][T10558] syzkaller1: entered promiscuous mode [ 407.684243][ T5900] m920x_read = error: -19 [ 407.685631][T10558] syzkaller1: entered allmulticast mode [ 407.688608][ T5900] dvb-usb: error while querying for an remote control event. [ 407.779039][ T6040] m920x_read = error: -19 [ 407.783725][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 407.800160][ T5900] m920x_read = error: -19 [ 407.810095][ T5900] dvb-usb: error while querying for an remote control event. [ 407.948108][ T5900] m920x_read = error: -19 [ 407.948929][ T6040] m920x_read = error: -19 [ 407.953251][ T5900] dvb-usb: error while querying for an remote control event. [ 407.960890][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 408.078913][ T5900] m920x_read = error: -19 [ 408.083320][ T5900] dvb-usb: error while querying for an remote control event. [ 408.129025][ T6040] m920x_read = error: -19 [ 408.133527][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 408.198924][ T5900] m920x_read = error: -19 [ 408.211382][ T5900] dvb-usb: error while querying for an remote control event. [ 408.309182][ T6046] m920x_read = error: -19 [ 408.313595][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 408.328951][ T5900] m920x_read = error: -19 [ 408.346277][ T5900] dvb-usb: error while querying for an remote control event. [ 408.469783][ T5900] m920x_read = error: -19 [ 408.469816][ T5900] dvb-usb: error while querying for an remote control event. [ 408.491771][ T6046] m920x_read = error: -19 [ 408.491834][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 408.589594][ T5900] m920x_read = error: -19 [ 408.594060][ T5900] dvb-usb: error while querying for an remote control event. [ 408.637982][T10593] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1365'. [ 408.649238][ T6046] m920x_read = error: -19 [ 408.653633][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 408.719580][ T5900] m920x_read = error: -19 [ 408.728457][ T5900] dvb-usb: error while querying for an remote control event. [ 408.819272][ T6046] m920x_read = error: -19 [ 408.827663][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 408.840095][ T5900] m920x_read = error: -19 [ 408.844610][ T5900] dvb-usb: error while querying for an remote control event. [ 408.969431][ T5900] m920x_read = error: -19 [ 408.982484][ T5900] dvb-usb: error while querying for an remote control event. [ 408.989239][ T6046] m920x_read = error: -19 [ 408.996289][ T6046] dvb-usb: error -19 while querying for an remote control event. [ 409.049470][T10606] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1368'. [ 409.105223][ T5866] m920x_read = error: -19 [ 409.115408][ T5866] dvb-usb: error while querying for an remote control event. [ 409.180738][ T6040] m920x_read = error: -19 [ 409.185185][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 409.254046][ T5900] m920x_read = error: -19 [ 409.258472][ T5900] dvb-usb: error while querying for an remote control event. [ 409.293237][T10617] syzkaller1: entered promiscuous mode [ 409.298875][T10617] syzkaller1: entered allmulticast mode [ 409.359794][ T6040] m920x_read = error: -19 [ 409.364334][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 409.379091][ T5900] m920x_read = error: -19 [ 409.383790][ T5900] dvb-usb: error while querying for an remote control event. [ 409.505949][ T5866] m920x_read = error: -19 [ 409.510894][ T5866] dvb-usb: error while querying for an remote control event. [ 409.529633][ T6040] m920x_read = error: -19 [ 409.543174][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 409.618914][ T5866] m920x_read = error: -19 [ 409.623419][ T5866] dvb-usb: error while querying for an remote control event. [ 409.738903][ T5913] m920x_read = error: -19 [ 409.756731][T10624] autofs4:pid:10624:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc0189377) [ 409.768951][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 409.770799][ T5900] m920x_read = error: -19 [ 409.789409][T10624] autofs4:pid:10624:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 409.850057][ T5900] dvb-usb: error while querying for an remote control event. [ 409.940039][ T5913] m920x_read = error: -19 [ 409.949591][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 409.961959][ T5900] m920x_read = error: -19 [ 409.967556][ T5900] dvb-usb: error while querying for an remote control event. [ 410.089094][ T5900] m920x_read = error: -19 [ 410.093645][ T5900] dvb-usb: error while querying for an remote control event. [ 410.130990][ T6040] m920x_read = error: -19 [ 410.136027][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 410.209107][ T5913] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 410.209805][ T5900] m920x_read = error: -19 [ 410.221678][ T5900] dvb-usb: error while querying for an remote control event. [ 410.299013][ T6040] m920x_read = error: -19 [ 410.303614][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 410.339135][ T5900] m920x_read = error: -19 [ 410.344950][ T5900] dvb-usb: error while querying for an remote control event. [ 410.382846][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.394032][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.405102][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 410.418185][ T5913] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 410.427766][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.439156][ T5913] usb 5-1: config 0 descriptor?? [ 410.459235][ T5900] m920x_read = error: -19 [ 410.463647][ T5900] dvb-usb: error while querying for an remote control event. [ 410.479201][ T6040] m920x_read = error: -19 [ 410.483628][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 410.583127][ T5900] m920x_read = error: -19 [ 410.593335][ T5900] dvb-usb: error while querying for an remote control event. [ 410.649640][ T6040] m920x_read = error: -19 [ 410.654633][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 410.719655][ T5900] m920x_read = error: -19 [ 410.724095][ T5900] dvb-usb: error while querying for an remote control event. [ 410.819378][ T6040] m920x_read = error: -19 [ 410.823987][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 410.840515][ T5900] m920x_read = error: -19 [ 410.845616][ T5900] dvb-usb: error while querying for an remote control event. [ 410.868269][ T5913] plantronics 0003:047F:FFFF.001C: reserved main item tag 0xd [ 410.905399][ T5913] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 410.969450][ T5900] m920x_read = error: -19 [ 410.979566][ T5900] dvb-usb: error while querying for an remote control event. [ 410.996997][ T5913] m920x_read = error: -19 [ 411.016414][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 411.089213][ T5900] m920x_read = error: -19 [ 411.106764][ T5900] dvb-usb: error while querying for an remote control event. [ 411.190931][ T5913] m920x_read = error: -19 [ 411.195598][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 411.218935][ T5900] m920x_read = error: -19 [ 411.224811][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.234753][ T5900] dvb-usb: error while querying for an remote control event. [ 411.236997][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.350113][ T5900] m920x_read = error: -19 [ 411.354796][ T5900] dvb-usb: error while querying for an remote control event. [ 411.359123][ T5913] m920x_read = error: -19 [ 411.367004][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 411.469943][ T5900] m920x_read = error: -19 [ 411.474358][ T5900] dvb-usb: error while querying for an remote control event. [ 411.529010][ T5913] m920x_read = error: -19 [ 411.533461][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 411.589520][ T5900] m920x_read = error: -19 [ 411.599833][ T5900] dvb-usb: error while querying for an remote control event. [ 411.698899][ T5954] m920x_read = error: -19 [ 411.709077][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 411.709122][ T5900] m920x_read = error: -19 [ 411.734250][ T5900] dvb-usb: error while querying for an remote control event. [ 411.848940][ T5900] m920x_read = error: -19 [ 411.853605][ T5900] dvb-usb: error while querying for an remote control event. [ 411.868955][ T5954] m920x_read = error: -19 [ 411.873336][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 411.968954][ T5900] m920x_read = error: -19 [ 411.973601][ T5900] dvb-usb: error while querying for an remote control event. [ 412.039877][ T5954] m920x_read = error: -19 [ 412.044388][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 412.088969][ T5900] m920x_read = error: -19 [ 412.093594][ T5900] dvb-usb: error while querying for an remote control event. [ 412.212343][ T5900] m920x_read = error: -19 [ 412.216827][ T5900] dvb-usb: error while querying for an remote control event. [ 412.224343][ T5913] m920x_read = error: -19 [ 412.224371][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 412.340221][ T5900] m920x_read = error: -19 [ 412.344739][ T5900] dvb-usb: error while querying for an remote control event. [ 412.388967][ T5954] m920x_read = error: -19 [ 412.393483][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 412.460372][ T5900] m920x_read = error: -19 [ 412.464760][ T5900] dvb-usb: error while querying for an remote control event. [ 412.478883][ T5913] usb 5-1: reset high-speed USB device number 77 using dummy_hcd [ 412.560702][ T6040] m920x_read = error: -19 [ 412.565154][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 412.580229][ T5900] m920x_read = error: -19 [ 412.584841][ T5900] dvb-usb: error while querying for an remote control event. [ 412.709648][ T953] m920x_read = error: -19 [ 412.714073][ T953] dvb-usb: error while querying for an remote control event. [ 412.729054][ T6040] m920x_read = error: -19 [ 412.733597][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 412.829258][ T953] m920x_read = error: -19 [ 412.833679][ T953] dvb-usb: error while querying for an remote control event. [ 412.911554][ T6040] m920x_read = error: -19 [ 412.916078][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 412.949122][ T953] m920x_read = error: -19 [ 412.953615][ T953] dvb-usb: error while querying for an remote control event. [ 413.069679][ T953] m920x_read = error: -19 [ 413.074703][ T953] dvb-usb: error while querying for an remote control event. [ 413.089081][ T6040] m920x_read = error: -19 [ 413.093782][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 413.094521][T10657] syzkaller1: entered promiscuous mode [ 413.108376][T10657] syzkaller1: entered allmulticast mode [ 413.189352][ T953] m920x_read = error: -19 [ 413.193927][ T953] dvb-usb: error while querying for an remote control event. [ 413.258874][ T6040] m920x_read = error: -19 [ 413.263295][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 413.309523][ T953] m920x_read = error: -19 [ 413.314354][ T953] dvb-usb: error while querying for an remote control event. [ 413.429131][ T6040] m920x_read = error: -19 [ 413.433596][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 413.438995][ T953] m920x_read = error: -19 [ 413.446210][ T953] dvb-usb: error while querying for an remote control event. [ 413.563877][ T953] m920x_read = error: -19 [ 413.568255][ T953] dvb-usb: error while querying for an remote control event. [ 413.598935][ T6040] m920x_read = error: -19 [ 413.603477][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 413.679515][ T953] m920x_read = error: -19 [ 413.689003][ T953] dvb-usb: error while querying for an remote control event. [ 413.770298][T10653] m920x_read = error: -19 [ 413.774731][T10653] dvb-usb: error -19 while querying for an remote control event. [ 413.809170][ T5900] m920x_read = error: -19 [ 413.813701][ T5900] dvb-usb: error while querying for an remote control event. [ 413.930956][ T5900] m920x_read = error: -19 [ 413.935516][ T5900] dvb-usb: error while querying for an remote control event. [ 413.938907][T10653] m920x_read = error: -19 [ 413.947266][T10653] dvb-usb: error -19 while querying for an remote control event. [ 414.019951][ T5954] usb 5-1: USB disconnect, device number 77 [ 414.049469][ T5900] m920x_read = error: -19 [ 414.054036][ T5900] dvb-usb: error while querying for an remote control event. [ 414.111476][ T5913] m920x_read = error: -19 [ 414.115981][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 414.178931][ T5954] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 414.179886][ T5866] m920x_read = error: -19 [ 414.192082][ T5866] dvb-usb: error while querying for an remote control event. [ 414.289077][ T5913] m920x_read = error: -19 [ 414.293592][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 414.309261][ T5866] m920x_read = error: -19 [ 414.313674][ T5866] dvb-usb: error while querying for an remote control event. [ 414.344042][ T5954] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 414.354529][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.362741][ T5954] usb 5-1: Product: syz [ 414.366937][ T5954] usb 5-1: Manufacturer: syz [ 414.371652][ T5954] usb 5-1: SerialNumber: syz [ 414.378161][ T5954] usb 5-1: config 0 descriptor?? [ 414.430941][ T5866] m920x_read = error: -19 [ 414.435511][ T5866] dvb-usb: error while querying for an remote control event. [ 414.458950][ T5913] m920x_read = error: -19 [ 414.463392][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 414.548901][ T5866] m920x_read = error: -19 [ 414.553290][ T5866] dvb-usb: error while querying for an remote control event. [ 414.593356][ T5954] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 414.629019][ T5913] m920x_read = error: -19 [ 414.633683][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 414.687949][ T5866] m920x_read = error: -19 [ 414.692517][ T5866] dvb-usb: error while querying for an remote control event. [ 414.806536][ T5913] m920x_read = error: -19 [ 414.816996][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 414.822067][ T5900] m920x_read = error: -19 [ 414.837834][ T5900] dvb-usb: error while querying for an remote control event. [ 414.949058][ T5900] m920x_read = error: -19 [ 414.953693][ T5900] dvb-usb: error while querying for an remote control event. [ 414.999144][ T6040] m920x_read = error: -19 [ 415.003669][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 415.070418][ T5900] m920x_read = error: -19 [ 415.075114][ T5900] dvb-usb: error while querying for an remote control event. [ 415.168969][ T6040] m920x_read = error: -19 [ 415.173622][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 415.189126][ T5900] m920x_read = error: -19 [ 415.193716][ T5900] dvb-usb: error while querying for an remote control event. [ 415.309290][ T5900] m920x_read = error: -19 [ 415.313972][ T5900] dvb-usb: error while querying for an remote control event. [ 415.339012][ T6040] m920x_read = error: -19 [ 415.343580][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 415.429084][ T5900] m920x_read = error: -19 [ 415.434087][ T5900] dvb-usb: error while querying for an remote control event. [ 415.509032][ T6040] m920x_read = error: -19 [ 415.514255][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 415.549080][ T5900] m920x_read = error: -19 [ 415.553508][ T5900] dvb-usb: error while querying for an remote control event. [ 415.608479][ T5954] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 415.626086][ T5954] usb 5-1: USB disconnect, device number 78 [ 415.675843][ T5900] m920x_read = error: -19 [ 415.678904][ T6040] m920x_read = error: -19 [ 415.687850][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 415.695692][ T5900] dvb-usb: error while querying for an remote control event. [ 415.809144][ T5900] m920x_read = error: -19 [ 415.813759][ T5900] dvb-usb: error while querying for an remote control event. [ 415.879017][ T5954] m920x_read = error: -19 [ 415.883519][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 415.948970][ T953] m920x_read = error: -19 [ 415.953538][ T953] dvb-usb: error while querying for an remote control event. [ 416.049077][ T5954] m920x_read = error: -19 [ 416.053493][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 416.069159][ T953] m920x_read = error: -19 [ 416.073946][ T953] dvb-usb: error while querying for an remote control event. [ 416.189156][ T5866] m920x_read = error: -19 [ 416.193591][ T5866] dvb-usb: error while querying for an remote control event. [ 416.219966][ T5954] m920x_read = error: -19 [ 416.224479][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 416.319838][ T5866] m920x_read = error: -19 [ 416.324303][ T5866] dvb-usb: error while querying for an remote control event. [ 416.389063][ T5954] m920x_read = error: -19 [ 416.393556][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 416.408852][ T953] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 416.438934][ T5866] m920x_read = error: -19 [ 416.443547][ T5866] dvb-usb: error while querying for an remote control event. [ 416.558931][ T5866] m920x_read = error: -19 [ 416.563631][ T5866] dvb-usb: error while querying for an remote control event. [ 416.564047][ T5954] m920x_read = error: -19 [ 416.574132][ T953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.576092][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 416.594478][ T953] usb 5-1: config 0 interface 0 has no altsetting 0 [ 416.605705][ T953] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 416.614961][ T953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.624255][ T953] usb 5-1: Product: syz [ 416.628582][ T953] usb 5-1: Manufacturer: syz [ 416.633291][ T953] usb 5-1: SerialNumber: syz [ 416.643247][ T953] usb 5-1: config 0 descriptor?? [ 416.652636][ T953] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 416.669866][ T953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.679768][ T5866] m920x_read = error: -19 [ 416.684893][ T5866] dvb-usb: error while querying for an remote control event. [ 416.701253][ T953] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 416.718870][ T953] usb 5-1: media controller created [ 416.749037][ T5954] m920x_read = error: -19 [ 416.756224][ T953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.757174][ T5954] dvb-usb: error -19 while querying for an remote control event. [ 416.771329][T10679] syzkaller1: entered promiscuous mode [ 416.778667][T10679] syzkaller1: entered allmulticast mode [ 416.829163][ T5866] m920x_read = error: -19 [ 416.833579][ T5866] dvb-usb: error while querying for an remote control event. [ 416.848499][ T953] DVB: Unable to find symbol tda10046_attach() [ 416.858007][ T953] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 416.866952][ T953] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 416.929426][ T6040] m920x_read = error: -19 [ 416.933928][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 416.968931][ T5866] m920x_read = error: -19 [ 416.973610][ T5866] dvb-usb: error while querying for an remote control event. [ 417.088990][ T5866] m920x_read = error: -19 [ 417.093579][ T5866] dvb-usb: error while querying for an remote control event. [ 417.109234][ T6040] m920x_read = error: -19 [ 417.115436][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 417.209022][ T5866] m920x_read = error: -19 [ 417.221346][ T5866] dvb-usb: error while querying for an remote control event. [ 417.280906][ T6040] m920x_read = error: -19 [ 417.290019][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 417.338944][ T5866] m920x_read = error: -19 [ 417.343450][ T5866] dvb-usb: error while querying for an remote control event. [ 417.449222][ T6040] m920x_read = error: -19 [ 417.453721][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 417.459112][ T5866] m920x_read = error: -19 [ 417.494356][ T5866] dvb-usb: error while querying for an remote control event. [ 417.609603][ T5866] m920x_read = error: -19 [ 417.626473][ T5866] dvb-usb: error while querying for an remote control event. [ 417.639154][ T6040] m920x_read = error: -19 [ 417.643582][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 417.674989][T10692] netlink: 'syz.5.1400': attribute type 28 has an invalid length. [ 417.688994][ T953] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 417.712278][ T953] usb 5-1: USB disconnect, device number 79 [ 417.756289][ T5866] m920x_read = error: -19 [ 417.775198][ T5866] dvb-usb: error while querying for an remote control event. [ 417.829190][ T6040] m920x_read = error: -19 [ 417.833841][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 417.899041][ T5900] m920x_read = error: -19 [ 417.903490][ T5900] dvb-usb: error while querying for an remote control event. [ 418.000884][ T6040] m920x_read = error: -19 [ 418.005376][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 418.019220][ T5900] m920x_read = error: -19 [ 418.023890][ T5900] dvb-usb: error while querying for an remote control event. [ 418.139141][ T5900] m920x_read = error: -19 [ 418.143748][ T5900] dvb-usb: error while querying for an remote control event. [ 418.168965][ T6040] m920x_read = error: -19 [ 418.173665][ T6040] dvb-usb: error -19 while querying for an remote control event. [ 418.259026][ T5900] m920x_read = error: -19 [ 418.263540][ T5900] dvb-usb: error while querying for an remote control event. [ 418.295186][T10697] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000b2: 0000 [#1] SMP KASAN PTI [ 418.295215][T10697] KASAN: null-ptr-deref in range [0x0000000000000590-0x0000000000000597] [ 418.295235][T10697] CPU: 0 UID: 0 PID: 10697 Comm: syz.4.1402 Not tainted syzkaller #0 PREEMPT(full) [ 418.295258][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 418.295271][T10697] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 418.295301][T10697] Code: e8 52 5e cf fc 49 c7 07 00 00 00 00 eb 0e e8 84 56 6b fc eb 05 e8 7d 56 6b fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 2e 5d cf fc 4d 8b 3e 4d 85 ff 74 [ 418.295320][T10697] RSP: 0018:ffffc9000e09f9e0 EFLAGS: 00010206 [ 418.295343][T10697] RAX: ffffffff8554a6c3 RBX: 0000000000000000 RCX: ffff888020b1dac0 [ 418.295360][T10697] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000003f [ 418.295373][T10697] RBP: ffffc9000e09fa90 R08: ffffffff8fe50ccf R09: 1ffffffff1fca199 [ 418.295389][T10697] R10: dffffc0000000000 R11: fffffbfff1fca19a R12: 00000000000000b2 [ 418.295404][T10697] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a274cc0 [ 418.295419][T10697] FS: 00007f47cf4d66c0(0000) GS:ffff8881257b1000(0000) knlGS:0000000000000000 [ 418.295438][T10697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.295452][T10697] CR2: 00007f47ce571fe0 CR3: 000000007a958000 CR4: 00000000003526f0 [ 418.295473][T10697] DR0: 0000000000000000 DR1: 0000000000000b5f DR2: 0000000000003706 [ 418.295487][T10697] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 418.295500][T10697] Call Trace: [ 418.295508][T10697] [ 418.295517][T10697] ? vt_disallocate_all+0x3b/0xe0 [ 418.295542][T10697] ? __pfx_vc_deallocate+0x10/0x10 [ 418.295567][T10697] ? is_console_locked+0x9/0x20 [ 418.295595][T10697] vt_disallocate_all+0x60/0xe0 [ 418.295636][T10697] vt_ioctl+0x1adc/0x1f20 [ 418.295660][T10697] ? __pfx_vt_ioctl+0x10/0x10 [ 418.295688][T10697] ? __fget_files+0x2a/0x420 [ 418.295715][T10697] ? tty_jobctrl_ioctl+0x369/0xb70 [ 418.295737][T10697] ? __fget_files+0x3a0/0x420 [ 418.295772][T10697] ? __fget_files+0x2a/0x420 [ 418.295799][T10697] tty_ioctl+0x926/0xde0 [ 418.295826][T10697] ? __pfx_tty_ioctl+0x10/0x10 [ 418.295853][T10697] __se_sys_ioctl+0xfc/0x170 [ 418.295873][T10697] do_syscall_64+0xfa/0xfa0 [ 418.295902][T10697] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.295930][T10697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.295949][T10697] ? clear_bhb_loop+0x60/0xb0 [ 418.295972][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.295991][T10697] RIP: 0033:0x7f47ce58eba9 [ 418.296009][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.296025][T10697] RSP: 002b:00007f47cf4d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.296047][T10697] RAX: ffffffffffffffda RBX: 00007f47ce7d5fa0 RCX: 00007f47ce58eba9 [ 418.296062][T10697] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003 [ 418.296075][T10697] RBP: 00007f47ce611e19 R08: 0000000000000000 R09: 0000000000000000 [ 418.296089][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.296103][T10697] R13: 00007f47ce7d6038 R14: 00007f47ce7d5fa0 R15: 00007fff95e07468 [ 418.296125][T10697] [ 418.296133][T10697] Modules linked in: [ 418.296150][T10697] ---[ end trace 0000000000000000 ]--- [ 418.296162][T10697] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 418.296186][T10697] Code: e8 52 5e cf fc 49 c7 07 00 00 00 00 eb 0e e8 84 56 6b fc eb 05 e8 7d 56 6b fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 2e 5d cf fc 4d 8b 3e 4d 85 ff 74 [ 418.296204][T10697] RSP: 0018:ffffc9000e09f9e0 EFLAGS: 00010206 [ 418.296225][T10697] RAX: ffffffff8554a6c3 RBX: 0000000000000000 RCX: ffff888020b1dac0 [ 418.296241][T10697] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000003f [ 418.296254][T10697] RBP: ffffc9000e09fa90 R08: ffffffff8fe50ccf R09: 1ffffffff1fca199 [ 418.296270][T10697] R10: dffffc0000000000 R11: fffffbfff1fca19a R12: 00000000000000b2 [ 418.296286][T10697] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a274cc0 [ 418.296301][T10697] FS: 00007f47cf4d66c0(0000) GS:ffff8881257b1000(0000) knlGS:0000000000000000 [ 418.296319][T10697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.296334][T10697] CR2: 00007f47ce571fe0 CR3: 000000007a958000 CR4: 00000000003526f0 [ 418.296354][T10697] DR0: 0000000000000000 DR1: 0000000000000b5f DR2: 0000000000003706 [ 418.296367][T10697] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 418.296383][T10697] Kernel panic - not syncing: Fatal exception [ 418.296800][T10697] Kernel Offset: disabled