last executing test programs: 6m59.115849768s ago: executing program 0 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x0, 0x3}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000180)=ANY=[@ANYBLOB="800000000802110000010802110000000000000002000000000000000000000064000100010003019d3c0401066c0c7206030303030303"], 0x37) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x760c, 0x9, 0x1ff, 0x8000, 0x3, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x40}}, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000c00)={0x4, 0x10ffff, 0xfffffffd}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c000100070c10000000000000000000", 0x58}], 0x1) r6 = dup(r0) r7 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r7, 0x891a, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000126bd7000fbdbdf256a00000008000300", @ANYRES32=r4, @ANYBLOB="050500d200010000000500d200ad001600fff2d10009000006"], 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20040000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000bc0)={&(0x7f0000000200), 0xc, &(0x7f0000000b80)={&(0x7f000001a240)=ANY=[@ANYBLOB="100800009876ba3a9a0ce163ad058055b13cbb9ac92228fe9b4d7e4f3522c64ae21f8a3a3d482626fb804724ec3f6eb2f6155f584a4896db5ab5ee57c4b345cbc6060531928d81878944f2c1ee53590f31a902f4a7aca36add22aa5884e4386519ce5e7eed235e445def87218912e4d1f15f5b7b442fe974dca763877abe49201516766f0211402c9b2d5355705f5cbf37814de8957879ed588c5631bc2a07cecb199f1f2bcceb480e58ec298b065b0fb021ae7ff10664ff0886a18c1a98a7de237bb3a5f7274618c089b8d3a8afe80be0d9534727dc8f8250aa", @ANYRES16=r2, @ANYBLOB="020028bd7000fedbdf258900000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x848}, 0x1, 0x0, 0x0, 0x2004c004}, 0x44016) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000000)=ANY=[]) 6m58.154375849s ago: executing program 0 (id=10): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001500192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 6m58.105468746s ago: executing program 0 (id=11): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2, 0x1}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x10000000000001ec}, 0x844) 6m57.94469968s ago: executing program 0 (id=12): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f00000000c0)=0x4, 0x4) 6m57.743155728s ago: executing program 0 (id=13): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x6f, 0xb6, 0x84, 0x40, 0x1de1, 0xc102, 0x7d08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x0, 0x57, 0xd4, 0x7d}}]}}]}}, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x10, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 6m56.051211944s ago: executing program 0 (id=20): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(r0, &(0x7f0000000000)=""/36, 0x24) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x5206, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) (async) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x8, 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xf7, 0xc8}}}, 0x6) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)={0xa0, 0x240, 0x320, 0x1e0, 0x7, 0x18ffe78d, 0x0, 0x1, {0x101, 0x6}, {0xfffffffa, 0x3}, {0xc, 0xadcf}, {0x4, 0x9, 0x40000001}, 0x0, 0x100, 0x106, 0x1, 0x0, 0x3, 0x1, 0x2, 0x7, 0xf066, 0x2, 0x97f4, 0x20, 0x100, 0x1, 0x4}) (async) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)={0xa0, 0x240, 0x320, 0x1e0, 0x7, 0x18ffe78d, 0x0, 0x1, {0x101, 0x6}, {0xfffffffa, 0x3}, {0xc, 0xadcf}, {0x4, 0x9, 0x40000001}, 0x0, 0x100, 0x106, 0x1, 0x0, 0x3, 0x1, 0x2, 0x7, 0xf066, 0x2, 0x97f4, 0x20, 0x100, 0x1, 0x4}) write$char_usb(r2, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xdd, 0x71, 0xc4, 0x40, 0x451, 0x505f, 0xa55f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x9, 0xf0, 0x1, [{{0x9, 0x4, 0x6b, 0x8c, 0x2, 0xff, 0x5d, 0x81, 0xb, [], [{{0x9, 0x5, 0xc, 0x4, 0x10, 0xa, 0x2b, 0x8}}, {{0x9, 0x5, 0x4, 0x1a, 0x40, 0x2, 0x5, 0x3}}]}}]}}]}}, &(0x7f00000031c0)={0xa, &(0x7f0000002c00)={0xa, 0x6, 0x250, 0x4, 0x8, 0xdf, 0x20, 0x9}, 0x12, &(0x7f0000002c40)={0x5, 0xf, 0x12, 0x2, [@generic={0x3, 0x10, 0xa}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0x8, 0x1}]}}) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xdd, 0x71, 0xc4, 0x40, 0x451, 0x505f, 0xa55f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x9, 0xf0, 0x1, [{{0x9, 0x4, 0x6b, 0x8c, 0x2, 0xff, 0x5d, 0x81, 0xb, [], [{{0x9, 0x5, 0xc, 0x4, 0x10, 0xa, 0x2b, 0x8}}, {{0x9, 0x5, 0x4, 0x1a, 0x40, 0x2, 0x5, 0x3}}]}}]}}]}}, &(0x7f00000031c0)={0xa, &(0x7f0000002c00)={0xa, 0x6, 0x250, 0x4, 0x8, 0xdf, 0x20, 0x9}, 0x12, &(0x7f0000002c40)={0x5, 0xf, 0x12, 0x2, [@generic={0x3, 0x10, 0xa}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0x8, 0x1}]}}) 6m40.949954933s ago: executing program 32 (id=20): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(r0, &(0x7f0000000000)=""/36, 0x24) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x5206, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) (async) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x8, 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xf7, 0xc8}}}, 0x6) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)={0xa0, 0x240, 0x320, 0x1e0, 0x7, 0x18ffe78d, 0x0, 0x1, {0x101, 0x6}, {0xfffffffa, 0x3}, {0xc, 0xadcf}, {0x4, 0x9, 0x40000001}, 0x0, 0x100, 0x106, 0x1, 0x0, 0x3, 0x1, 0x2, 0x7, 0xf066, 0x2, 0x97f4, 0x20, 0x100, 0x1, 0x4}) (async) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)={0xa0, 0x240, 0x320, 0x1e0, 0x7, 0x18ffe78d, 0x0, 0x1, {0x101, 0x6}, {0xfffffffa, 0x3}, {0xc, 0xadcf}, {0x4, 0x9, 0x40000001}, 0x0, 0x100, 0x106, 0x1, 0x0, 0x3, 0x1, 0x2, 0x7, 0xf066, 0x2, 0x97f4, 0x20, 0x100, 0x1, 0x4}) write$char_usb(r2, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xdd, 0x71, 0xc4, 0x40, 0x451, 0x505f, 0xa55f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x9, 0xf0, 0x1, [{{0x9, 0x4, 0x6b, 0x8c, 0x2, 0xff, 0x5d, 0x81, 0xb, [], [{{0x9, 0x5, 0xc, 0x4, 0x10, 0xa, 0x2b, 0x8}}, {{0x9, 0x5, 0x4, 0x1a, 0x40, 0x2, 0x5, 0x3}}]}}]}}]}}, &(0x7f00000031c0)={0xa, &(0x7f0000002c00)={0xa, 0x6, 0x250, 0x4, 0x8, 0xdf, 0x20, 0x9}, 0x12, &(0x7f0000002c40)={0x5, 0xf, 0x12, 0x2, [@generic={0x3, 0x10, 0xa}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0x8, 0x1}]}}) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xdd, 0x71, 0xc4, 0x40, 0x451, 0x505f, 0xa55f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x9, 0xf0, 0x1, [{{0x9, 0x4, 0x6b, 0x8c, 0x2, 0xff, 0x5d, 0x81, 0xb, [], [{{0x9, 0x5, 0xc, 0x4, 0x10, 0xa, 0x2b, 0x8}}, {{0x9, 0x5, 0x4, 0x1a, 0x40, 0x2, 0x5, 0x3}}]}}]}}]}}, &(0x7f00000031c0)={0xa, &(0x7f0000002c00)={0xa, 0x6, 0x250, 0x4, 0x8, 0xdf, 0x20, 0x9}, 0x12, &(0x7f0000002c40)={0x5, 0xf, 0x12, 0x2, [@generic={0x3, 0x10, 0xa}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0x8, 0x1}]}}) 6m7.879363595s ago: executing program 4 (id=279): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1c0000001d00780b000000000000fff8070000000d00000040000600", 0x1c) 6m7.799316982s ago: executing program 4 (id=281): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000540)=[0x0], &(0x7f0000000680)=[{}, {}], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x2, 0x5, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000540)=[0x0], &(0x7f0000000680)=[{}, {}], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x2, 0x5, 0x1}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) read$FUSE(r2, 0x0, 0x0) (async) read$FUSE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000940)={&(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x1, 0x7, 0x5, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000940)={&(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x1, 0x7, 0x5, 0x2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000900)={0xffffffffffffffff, r1, r3}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000900)={0xffffffffffffffff, r1, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r6 = open(&(0x7f0000000500)='./file0\x00', 0x123d82, 0x4) mmap(&(0x7f0000835000/0x2000)=nil, 0x2000, 0x2, 0x12, r6, 0x8000) ftruncate(r5, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="11002bbd7000fddbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c009900fbffffff2d00000008000500060000001400040070696d726567000000000000000000000c001780060004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvmsg(r10, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/241, 0xf1}, {&(0x7f0000000180)=""/38, 0x26}, {&(0x7f00000001c0)=""/40, 0x28}], 0x3, &(0x7f0000000240)=""/75, 0x4b}, 0x22) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r11, 0x50009418, &(0x7f0000001480)={{r10}, r12, 0x10, @inherit={0x60, &(0x7f0000000b80)={0x0, 0x3, 0x3, 0x3, {0x2, 0x9, 0x2, 0x2, 0x1}, [0x4, 0xc, 0xa]}}, @subvolid=0x9}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r9, 0xc1205531, &(0x7f0000000340)={0x0, 0x6, 0x0, 0x2, '\x00', '\x00', '\x00', 0x0, 0x0, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) r13 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r13, 0x0, 0x0) keyctl$search(0xa, r13, &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, r13) (async) keyctl$search(0xa, r13, &(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, r13) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x12000, 0x0) r15 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r15, 0xc01c64ae, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$TUNSETVNETLE(r14, 0x400454dc, &(0x7f0000000480)) 6m7.502310868s ago: executing program 4 (id=283): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001140), 0x4000) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r0, 0x54a6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000020000000000010510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000}, 0x0) (async) syz_usb_connect(0x4, 0x9cb, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0x7a, 0xc3, 0x5e, 0x40, 0x1adb, 0x1, 0xe0e2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9b9, 0x3, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x30, 0x7, 0x7, 0x13, 0x78, 0xaa, 0xd7, [@hid_hid={0x9, 0x21, 0x8001, 0xd, 0x1, {0x22, 0x8c}}], [{{0x9, 0x5, 0x2, 0x8, 0x200, 0x0, 0x5, 0x9, [@generic={0x18, 0xf, "6c6ee49b6b9ad97f963488522509eadeb97136ba6368"}, @generic={0x51, 0x5, "b929361a3a239dbea8e665d08a3eac3d3bc5372592dd34f9e70af6cb64b7dcdc916e29520076ae08e9713a8ec4b4edc5d0f6f1d343601ec2eef1da9b31e286beeee7237aa18358264533dd5fbd639b"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xb9, 0xf6, 0x3}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x3, 0xc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x81}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x3, 0x5, 0x23, [@generic={0x7c, 0xf, "cdabe5556bd3c80f8f32dad9ba1210ea6836d5b6c63338c5595504ed48d84105e2e39838c9882df7cf5e82f1b87c5a3383e25915cb0bff8a1973a36f02202e3749b7edb89c385e4436242184627209fa9a18b456f464a824eceab6f5be4c6df4eca01e3cfeb940027102827f86b8f1b8dee8ff0fcd3ef74355f3"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x6}]}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0x1, 0x0, 0x2, [@generic={0xc6, 0xa, "8d2eae88caae20e0d10e5b4ac36ec814e7dad9d149781a7c88a22a6c753834d4f190c28128af405666feb36b7387d564969eb6dcce4effb8535fd7c880c1100fa2d243f6a63ddad805a3962c0a42db0347dc24552d4e711dccb5ed6403d0047e5d13e8efb9d367f42f9b1a9ce7f26e57626d9f87fde8dbd0063baec48990e4c2a72c129a8b7753d219e5061f5ba035c924a9c6f61b9fc5ddabb09669d6b44c5f217b383da19c12cf7e8507148884a3a86e5e661cb7285b2e8c4e49eaf81b2ccfed2aca54"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x1, 0x8, 0x5}}, {{0x9, 0x5, 0x4, 0x14, 0x8, 0xf, 0x6, 0x6, [@generic={0x60, 0xd, "403efe4f676a39f9071f9dd8daca25cee8bb7f95d88823b6d9b7d1caa58cd8393f76940507a61abb93df77e6fcc932997dab3290cb30ea7043d6ba0c9dc8eddbfde3803ff91a38fd10798b5749e28d2e94b2a71faae5d55654867e3db3d9"}]}}]}}, {{0x9, 0x4, 0xd0, 0x3, 0xd, 0xe1, 0x38, 0xe, 0x5, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x9, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xd}]}}, {{0x9, 0x5, 0xd, 0x2, 0x50414d8de6c25e1f, 0x2, 0x9, 0x80}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x0, 0x4, 0x1}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x7, 0x4, 0x4, [@generic={0x90, 0x2c61ed005630ea9c, "00986b79134c11ad0f0e5739a1a442c17ed51f5cf2d8ef1faca519c16824dc391c6025d52658b3cf6c48641e1b7818db50474f863f774a0094164accc0bdf1fab4717e643e7d1b4f20cf9c0f44cf567f86c01545c62bbf0156066ac25f3cf0fc6b8e73f9bc302d58c7b5ce56f00a1aafb61d8212471c7b7849ed5d5744f68140a8070e9bf8afeb182ff5f684b65b"}, @generic={0xc5, 0xf, "a0f94be625df79270ab1e53b17afb6d5cd461f10763d1bbd17c608c90014bb1a62106894bd794d47d33df2f7fbb12d3104bebb675d37a6dcc71893045dc46c4e7a710bfe6535875764ee8b91b4a96bd46be5569fa4596f95f9d93175d0f44c7cd54191ae0360348bf505949f85079b49653ece8cc62296e41cc43b673e16665ec695b6421a77420790ad7eef518d438da00ec35485f865eb407d982c14d946583d80871afb641854767356ee1d5d383bec69368ef5c9cc19c090ded5ce502bed196fcf"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x7, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x2}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x81, 0xe, 0xb2}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0xff, 0x4, 0x3, [@generic={0x76, 0x2, "4e27335c5824fd66b9b4e1f20219c80d290fca0c278bc25bf3544a82fc5d38582916f25c2840d6afa7a7555ea0321f65c65d413183f5f13a63f05f634103268993a544b9237e34c660576e1959cab579f6ed3901198498ab15e5aa153bfbcafdb861640a59630694038659453df2bd94d2543aef"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xaa, 0x2, 0x3, [@generic={0xc6, 0x21, "107492444c7b064dede73b05753df5e2935d8754d9e5facad88386436e406273a980ae42ef6806e477b6f1272978bfe0e0b4c6eadc838a3d31fcfb1e89c7520827a2d81962d051748cacca64c51d70f98d64d095398d97069d3868195da3390526b929036e3eec0db5703b386c3f367384ffb8ab9b01941a2dfe134c8c4d1b811d158524078e9cc3f60dcf8761c7850d411934c3a9070f1e9340c6a931f686f5bf1de5701bb7f9282fc771fd4ce60659cf2069adab154119818e5771eb283def2dbe8e15"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x9, 0x40, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x8f, 0x80, 0xf9}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x39, 0x3, 0x1, [@generic={0x44, 0x24, "362158aa717d0052cb60c172766240e648a9a5a821556a2e3fc2d9113a6017b131419b8d584abacb772ab4dc059dad7f5f2d477327cab774f313fafd670b038531ed"}, @generic={0xea, 0x1, "ce587ce68d98f5adeddae733e8b6e7175855d6b314e12c350413d506da16254ce9efeac4d667260e90391363332a4a9041b4ebaf96e88ff6a40fb0902ebe2d0c584760d93112efe9f8f4fc1790a5f7136d81ca3310b573f005890581fbfa9c924b4bd3cd7c5d231b9b7c658370af54127a8bda23882dc4ba02e7c08a9a7c5f20aedae45ad072d2e5e03f4126d016dbe2e7a14acfe399ab4f3f905e93dffcae35e831dc6f42b51abfcbc6a4bb40d70d76544045ad463f02c304a8b748f889d6b893f87aad6150f54796eaefbef907a0b948fd78ec9f36c8dc072cfdfa3b65f817466055a8a07a24db"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x7, 0x8}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xc4, 0xa, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x40}]}}]}}, {{0x9, 0x4, 0x98, 0xd4, 0xb, 0xd4, 0x79, 0xfb, 0x3d, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, '\f)4'}, {0x5, 0x24, 0x0, 0xfff7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2, 0x6eb3, 0xfc}, {0x6, 0x24, 0x1a, 0x1, 0x48}, [@acm={0x4, 0x24, 0x2, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x6}, @dmm={0x7, 0x24, 0x14, 0x1, 0xa5}, @acm={0x4, 0x24, 0x2, 0x4}, @country_functional={0x6, 0x24, 0x7, 0x3, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x2, 0xf, 0x6}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x81, 0xd7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x5, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x7}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x6, 0x4, 0x3, [@generic={0x4e, 0x1a, "811f87d991472c4f685d3ae342098a8c8193aedbbcc10229222c75d88a1e24d53ab147deb00f705c120253bdced9eb1a2481dd071efc67fba15534673e3603acff34a57b15fcb3268fa4dddb"}, @generic={0x81, 0xd, "5aee632bbf14fa8e42f9517f2f15c7a7172acab4a78f517605747e428d60a4ad3a2f8f54f1f839c3d4e120e0136fa66f202f772562513ebc0572c1c9a116a747ba6678cda99aeb781b3fbd9f0b7d7789510dcff2bf52d946eb5b69ca2c9b34f129af64282e4f41481988f6eb32c101086350cdaf902a92beabd17ebbf1d843"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0xff, 0x6}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x5, 0x5d, 0x8, [@generic={0xf, 0xa, "31e49b852c62849f8f11fdcd25"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x9, 0x0, 0x8, [@generic={0x19, 0x4, "0d16164e18883b2ce6611bda4a573398f44cccb2b75c6d"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x7, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x74, 0xff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x5be, 0x40, 0x1, 0x95, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa8, 0x7}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3f7, 0x7, 0x7, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0xd9, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x1}, @generic={0xf3, 0xa, "538c49a49aa06b3a710b98af3bff7a6fe5a0544b66fda28d58421cde8f8d9483fcfc8ced94d3373fb62a1998cd6e8b704928ab99f42bf03fc122e25b7f59130ccfe67f035a07cb4f30c3e311ef0d3fdd75bf118127515a064666ff3042354318bb88c6eddf79361e80d27adca126a6467addc0528173fd769f07c31c57fe3f9382f74395310a5a2e55fbbe2302f96765cb7d8b0b7e85286dca56dec9574155ce2f058fe03f7df0f3e13c43b36f7120806bf489b1896fd93099a33deba60ec1c1d84b286c15389382c3f69f5cb1acb2ccfea98a86b61f10038cf6a4eef262adf0ec8b3513cc2116cf116b0b9232b31369a9"}]}}]}}]}}]}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00?'], 0xb8}, 0x1, 0xfffff000}, 0x0) syz_usb_connect(0x5, 0x15b, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0xa9, 0x19, 0xe7, 0x10, 0x1199, 0x68c0, 0x5d7c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x1, 0xb2, 0xf9, 0x95, 0x0, [], [{{0x9, 0x5, 0x7, 0x8, 0x20, 0x8c, 0x49, 0x3b, [@generic={0x8d, 0x37, "3134b9254ed9128055faa9ef8d6ce235f036e04b5c8c4cc092cdd25be763e6310a0c53625ae12c7592e51ab285189b7ea7f26f638910331f466dbca6a1f670c49fca4cb428e1332bd9b23e41fabc8146d3cb8380539fda55fe83648568616f17c38a2459ae1f0366325ae22a5939ad5dd8540c90a71bf40414ffcb30f058a3adeb40dd330bbdd68e6d2ce7"}, @generic={0xa1, 0x2, "b1850416fa688da5ce75b5ab7042dc678285a44fbb7636ab142748ea69d8419999c4e5e986134216ecabf69f10abad962835bfe54d8f055ca1c5d9576f8d88fce26201b823b159eb04e77802ae0d612ced5574af12db64b8f1e90ef0bee52bf4cfe39b5b6c6fc8ab7f38c8c1bcdce200d891ab060927b8a917c1f88def465a3abbef2188243b6619cc0a65346002dccbd786226344e10009dc0544869052f2"}]}}]}}]}}]}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) (async) syz_usb_connect(0x5, 0x8f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x96, 0x6d, 0xf, 0x8, 0x8087, 0xa5a, 0x5f2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0xa2, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0xf6, 0x4, 0x3, 0x7e, 0x84, 0xe5, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0x6000}]}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x27, 0x80}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x4, 0x37, 0xb0, 0x8b, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x2, 0xa39, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x0, 0xa, 0x9, 0xff, 0xdf}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0xc3, &(0x7f0000000d40)=@string={0xc3, 0x3, "d1d915b81ec8cb8afa72d0f2b488f731d04d4deca5a81fca120fb9d9fa14eb494a321b8c8a3317160084f292577210e99941d8037eb548506b6917c4fdaa1253524990d05490e47555387e0c2acd1dc292019366d30f4a9b359036cd1d6953dc534b5ecbd8af0b91cff7b6fd35e22805d7c552f17208a6a97f74280cd5321615089e809d51b002c2121a5123f5281ec0b913a5d4600143f77ea30cd7aba05dc166819b2aa529922d7719bc8b119da08113d876f43ee80517c85d9e1b16c73c3a58"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x440a}}, {0x9c, &(0x7f0000000e40)=@string={0x9c, 0x3, "e1bf7f9df14b7a2d7ba0efdbe06469b59bf104cfa38c7c9669409b0260f27f4582a547a03b2483e09a91872a4616e8c60499e34362c9171f7ebf20584b5ab5e1badc73d18953ea138a7b1864fccc108e6983081154d34bcab7447c84639c4dd17c8f4167dd6ef49b3aea728b95b93d0ddb314355ee988871d01ea6470b8da4e3c73ddc1390d0b95a20ccf52aa42d46498af4ada58975738775c9"}}, {0x2f, &(0x7f0000000140)=@string={0x2f, 0x3, "e434628073568eb8a166e520e399f8129a08caab10a933d271eac330655e9071da9048971b965f62615a14f4b3"}}, {0xc5, &(0x7f0000000f00)=@string={0xc5, 0x3, "bab9c7e2dc41b23f5e9c1beeaed8caf06ceca6e523ad03d9e3c72789d3bb83d73b5e9f11da91fa2cbd4a6e014f2b0e0e587be2b64063e377c693ad243c089b7490ed8d00010b6da0a4ecf7cca7eb932b90bf884eb41347a38ceb4ee1211576ca67acae4235f832350bd46109cb4e094d035376f072f9384a6b3d4cb718140be51aeb901641adb1109acda380bb9e9dc0e54a3854608792a75ebdd06fac58f6ea424b996a0789e81959120f5c6dd9c6d920391528fcd802da4790eada3fad5427a563ad"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x420}}]}) 6m7.155659859s ago: executing program 4 (id=287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30a", 0xf}], 0x1}}], 0x1, 0x40000d0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x100, 0x2, 0x0, 0xfc, "0000fa00ea8000"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x80000) ioctl$TIOCSETD(r5, 0x541b, &(0x7f0000000ec0)) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7f434170cd11d095d2aa42274363f668bde6b654b64658e0a460b83bd3e5627c0d154ba7e1f2c559bdcd666b7d0f1472bf0f32eaa9b7f232bfa685df80ae1d7b260130e4fd8ffc6d4afc832b79074549af0c027aca5edf261aed45e74f71dc59be036a345e9b105ab55e723e2114032360b0da021454a25074494b75b2f330c3", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x3, 0x2, 0x0, {0x5, 0xe9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x46}}]}, 0x48}}, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x4, 0x2, 0x7fffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xae6, 0x4) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r10) (async) mount$overlay(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x20810, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x4000)=nil) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) fchdir(r6) 6m6.772815609s ago: executing program 4 (id=291): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x62) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x40, 0xf, 0xa2, {0xa2, 0x22, "c9afe410bfdcc8f3ab7cae8a2a78e6569b2a4d46eff845b0551536837a7ab23af07aaddec9a1cbbb524c955fca72728e848ef182ffc27903e03bef0e3d4410289ad7837141219cceea6a0dc7983542049369681b430e801930ba58758e9bad07d0aa0f97a01f918e16aa28c37a68bccb8b59a8e29614c7e8dd4802ab4592ba118da82f7c2fa27575eaa6a1a8767079f874b453c4436912ce0c983877cfe7a1f5"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000240)={0x40, 0xf, 0x86, "caa83fc547b2907dac8876da8663f60109a9c34ce50341a7d3909486ea7f6f0b38fa76a7b980e92eb31b425296b59025eb168755e5eea48e47ec4922eed14455a48a7d7ad451fa8f1cc6e50ceb291037054ce3c19c87d242d73f49c1a5f176f12ac8333afbc2972696045aca993c74db4840d2bf3a37d306dbe3e9d9563bbd5028dc82ea7472"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0xd8e}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "84af98326af73f3c957a643d83bad1dc1503d43c62ca83f2256e9721eadff5ebf1bab01daf2dee04137137d6067e0d"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "5cd37607"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) (async) r5 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000000)={0x5, 0xe, 0x401, 0x8, "c400523a6f29960fce66e2e7aadce2988b5ec056b7577f87586a324b565ffcbb"}) (async) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000000)={0x5, 0xe, 0x401, 0x8, "c400523a6f29960fce66e2e7aadce2988b5ec056b7577f87586a324b565ffcbb"}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405514, &(0x7f0000000540)={{0x0, 0x2, 0x0, 0x1b8, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x1, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x8000000000000000, 0x200000000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x0, 0x507742dc, 0x45e3, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000, 0x2, 0x0, 0x0, 0x0, 0x3dc4, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800000000000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1, 0x1, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405514, &(0x7f0000000540)={{0x0, 0x2, 0x0, 0x1b8, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x1, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x8000000000000000, 0x200000000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x0, 0x507742dc, 0x45e3, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000, 0x2, 0x0, 0x0, 0x0, 0x3dc4, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800000000000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1, 0x1, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 6m4.457641583s ago: executing program 4 (id=307): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x93d0}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x2, 0x0) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_usb_disconnect(r0) 5m49.100525048s ago: executing program 33 (id=307): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x93d0}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x2, 0x0) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_usb_disconnect(r0) 5m0.706972836s ago: executing program 3 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = syz_open_dev$dri(&(0x7f0000000380), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x15}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="012b1a0001001021006200df26000000"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, 0x0, 0x0) r4 = socket(0x27, 0x6, 0x3) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "6ae23d5316b96d9abb88e8a882525680c2e334e30f2a87d9603ac546133f18af5b2586d42f18db04d179028729c7375cac9869a6574078d09b4b441b7ae09531", 0x2c}, 0x48, 0xfffffffffffffffe) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r6 = dup(r5) read$FUSE(r6, &(0x7f0000002400)={0x2020}, 0xfffffec2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$msr(r6, &(0x7f000001b000)=""/102391, 0x18ff7) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r8, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x4a}) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000300)=ANY=[@ANYBLOB="0f00e20300000800000062040000984c908c51ea80b36f40b11221c5d89522e93b9f970ff150495dd83abd6ed55cc15c997e9c693552e621d065cebe55fcd522ec0a2ad8499a7332f5a175b6f04463604b8016001f697c33617382c54fdcea03b592490a42b20dbb12ee000000"]) r11 = dup(r10) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000240)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x24) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f00000003c0)={r13, 0xed, "8a02cc23a3fed3bc740284d7524e86d188d30b89c7bd2f6f31ba49be782febe59ad52d7c322d921a610c9584518e9c6eef41a113e7d5d96420ab547bb92235a218e396a4ff0d8b628ea276a41a10ff42d2f7d646f0483f4773ef7268ef8ba650163a73d87b542c6ee29c02f9c881c212aa768ed68c6010f6d6c56630424347bd52b8b833d9682dae0ecdb998e82b89bf91d3d02d08354b2c1be48695374e509e055fe01e6861d38146164d2c3f76b2003f3d6ed6a0a601ba133dfd718ea289ca520c5ae79e023ce4ca0fc4e616c81a0ade35080dee27cd867d9fbfd7b4b687b37954773518ba0aa69757b2cc4e"}, &(0x7f00000002c0)=0xf5) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) 5m0.615223367s ago: executing program 3 (id=617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x0, 0xfffffffe, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6f9}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}}, @sadb_sa={0x2}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x80}, 0x1, 0x7}, 0x10010000) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) (async, rerun: 64) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000000240)=""/4096}) (async) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_getsetattr(r3, 0x0, &(0x7f0000000200)) (async) ioctl$TUNSETIFF(r0, 0x400454da, 0x0) 5m0.544174707s ago: executing program 3 (id=618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000000000002000000010000000000000000000000000000089188"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000000000002000000010000000000000000000000000000089188"]) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 5m0.383178572s ago: executing program 3 (id=620): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe}}, './file2\x00'}) getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000280)=0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2b, 0xb, 0x0, 0x0, {0x6}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x10, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) dup2(r4, r1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r7, r3) r8 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r8, 0x4c00, 0x3) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r9, 0x4008550c, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904"], 0x0) 5m0.33906677s ago: executing program 5 (id=622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-twofish-avx)\x00'}, 0x58) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(khazad)\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100254400000008000300", @ANYRES32=r3, @ANYBLOB="0500240096000000080026006c0900000a0018000303030303030000"], 0x38}, 0x1, 0x0, 0x0, 0x24004801}, 0x80) 4m59.971197508s ago: executing program 5 (id=624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000000080)="fb", 0x1, 0x4000001, 0x0, 0x0) 4m59.878933637s ago: executing program 5 (id=625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000000080)="fb", 0x1, 0x4000001, 0x0, 0x0) (fail_nth: 1) 4m59.431060759s ago: executing program 5 (id=626): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2442, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x37, 0x0, "0f69882b2172352cceb4604cd57d1d9727ca278d11a2f7a968215b70c073c55ff4badb359ee7b5a6812bf170c2f735d6af1af4e08dd15653251f7140693a0cbb4f16a60d75e087ccec00f0b5f356414b"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x37, 0x0, "0f69882b2172352cceb4604cd57d1d9727ca278d11a2f7a968215b70c073c55ff4badb359ee7b5a6812bf170c2f735d6af1af4e08dd15653251f7140693a0cbb4f16a60d75e087ccec00f0b5f356414b"}, 0xd8) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000180)={r1}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000001c0)=0xf) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000200)={0x28, "2bf14dab6a3255c8e03411dc4641d51fdf1cb2130a44221c3ce1238cacf8d77f466b2ce461f2ae005b55d9b94a408fdd8cf401c84e97cdf646e84641a13b74c8335ce088271b3d5978d23a3e0f9abbd2c405ddc69b0c515637b6da065e0e49d03284d1a2781da990deac84f6e5eb6bca99ac457571b34b9fed209801e7956f2e"}) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000002c0)=0x4, 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x1, 'sit0\x00', {}, 0x9}) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x1, 'sit0\x00', {}, 0x9}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x600, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000380)=0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) recvfrom$inet(r3, &(0x7f0000000400)=""/233, 0xe9, 0x10021, &(0x7f0000000500)={0x2, 0x4e24, @private=0xa010102}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x802) write$sndseq(r4, &(0x7f0000000580)=[{0x46, 0x49, 0x9, 0x6, @time={0xffffffce, 0x8}, {0x6, 0xf9}, {0x0, 0x5}, @addr={0x5, 0x7}}, {0x91, 0x10, 0x6, 0x3, @tick=0x401, {0x7, 0x3e}, {0x9, 0xe}, @note={0x4, 0x8, 0x2, 0x7}}, {0x80, 0x5, 0x4, 0xff, @tick=0x6, {0xa2, 0xf}, {0xfd, 0xf}, @control={0x2f, 0x5, 0x2}}, {0x4, 0x70, 0x7a, 0x5c, @tick=0x5, {0x0, 0x3}, {0xea, 0x7}, @time=@tick=0x4}], 0x70) (async) write$sndseq(r4, &(0x7f0000000580)=[{0x46, 0x49, 0x9, 0x6, @time={0xffffffce, 0x8}, {0x6, 0xf9}, {0x0, 0x5}, @addr={0x5, 0x7}}, {0x91, 0x10, 0x6, 0x3, @tick=0x401, {0x7, 0x3e}, {0x9, 0xe}, @note={0x4, 0x8, 0x2, 0x7}}, {0x80, 0x5, 0x4, 0xff, @tick=0x6, {0xa2, 0xf}, {0xfd, 0xf}, @control={0x2f, 0x5, 0x2}}, {0x4, 0x70, 0x7a, 0x5c, @tick=0x5, {0x0, 0x3}, {0xea, 0x7}, @time=@tick=0x4}], 0x70) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000600)) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000600)) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000640)) close_range(r4, r4, 0x2) (async) close_range(r4, r4, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000840)={&(0x7f0000000800)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000008c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000900)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000940)={0x0, 0x3, 0x0, 0xf7, 0x2, [0x0, 0x0, 0x0, 0x0], [0x4, 0x40, 0x60945db3, 0x8a], [0x800, 0x2, 0x101, 0x2], [0x1, 0x0, 0x8, 0x80]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000009c0)={r5, 0x9, 0xfffffff7, 0xdd8, 0x3, [r6, r7, r8], [0x3, 0x3, 0x5, 0x2], [0x1, 0x1, 0x7, 0x4], [0x2, 0x0, 0x2, 0x7fffffff]}) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000a40)=""/57) (async) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000a40)=""/57) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000a80)={r9, 0x80000}) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1e200) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1e200) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000b00), 0x113040, 0x0) (async) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000b00), 0x113040, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000b80)={0x0, 0x80000}) 4m59.360596624s ago: executing program 5 (id=627): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4010, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}]}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) sendto$inet6(r1, &(0x7f0000000080)="fb", 0x1, 0x4000001, 0x0, 0x0) 4m59.199147981s ago: executing program 5 (id=629): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x13c, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r6, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) bind$bt_hci(r2, &(0x7f0000000040), 0x6) sendmsg(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)="94278d8f", 0x4}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010141}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x21e, 0x1ff, 0x9}) write$tun(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, 0x0, &(0x7f0000000080)) r10 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r10, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x0, 0xc, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x8, 0x24, 0x2, 0x0}) 4m58.476225342s ago: executing program 3 (id=633): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) (async) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@loopback={0x0, 0xffff00000000}, 0x39, r2}) 4m58.158944169s ago: executing program 3 (id=635): socketpair(0x25, 0x2, 0x6291, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "ca622818fb82226ebac29a6a2d466e6213d3de2ac1e88b08924037b95183f006c4ab10a6d10237052b98e7e850e6e04929e6cafdf439359f324c009a19375dda", 0x2d}, 0x48, r2) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40002}, 0x40) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffc) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="051d48b7604faa3fac854148929bf5b8ac765ea3d1f888be67023a6a7353660a1ced38ad03c3abe56564ecf883e17d4e05fb90049e70a72a20b2153858443ba2b2d3661522a64dcc5b585de1e8de349ccef60dcc3546c1c72ea7fcfd651662b6f503373f8b2b1df95e9ff1474ec076d84ced6adc8ee6bb636a55df7a5b8d10910d5c11991bb5a2151c401d03c07945c97e91fe2d92b6394bb7dbf42b5410064bc7c6ab4941c3b52ae555a908bda8e30b1349b3957d20b4972ddd4cee2474933f9ad6d716ff081e6b4f3d911ab8c64484945f395121a9dff4f1ec089cd0768f1710a6fd654b5e8bd5abfa6fea6dfe1e", 0xef, r2) writev(r4, &(0x7f0000000600)=[{&(0x7f0000000540)="23d2653b6b2ada84d7e7c6e8d475df0ff764136ef3976337b523f1e91acaa6d63696523ebf8f0eb6ea23c2ad3f55494e5a0994858957e6b9f42ed8773a1163ef72b5f3f74889fc423538c2b0eedcb04620d2367a2b18945275fc8fdd340e1696d681fda137897e7578d91e90e7aa303795256a4d620518838c7f6c1d0d359ccb71486a0351b7c025ffe7e0828549fc8da21c0758a9fda44a9c9c7690120b5998e52f41ef477c", 0xa6}], 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) write$proc_mixer(r7, &(0x7f0000000680)=[{'BASS', @val={' \'', 'Capture'}}, {'SYNTH', @void}], 0x2a) r8 = add_key(&(0x7f00000006c0)='trusted\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="cb4fc5d7d083821bc893a2a887d91c334ff2fdc3b07122bccd56ebbd29bf24d9382621fcdc287e6181314602449419ba16770d83c44e2080b95b6d32736029fa0d5ea51404caa2500396ea8f5f4d2805cfa6b9a3dff8d4a67a8b88e13f80aba88592c850ba5927bb5be1c3a728c8ce36941195ca", 0x74, r3) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg(r9, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)="1f5733fb410ad0b24ffd9b640ace71199d393a3c19728bb567f019693b8a9355eb5f1f33f0e963b106df8d28d13945861fd78edfa7f66f96437a0b6db723018da6740c9a01a44f9c8a8fb73d5dc0b6b900f96adb889adc8e67aefe840f5b53f188391d25a0fc75446a9d28f12a7f390eb861233c8b087af246f76f1c49da", 0x7e}, {&(0x7f0000000840)="be0c137a01b6d92b24863b85b39a22d0c8cc13b25bdd4f6eaaf1cb7efcc395fbf0372e3f682c66107b39f88b86d9f3530c3821ec77b53a291c8ad1fc4a8406276059bc31e9afc5113a719409250a040d9d6f4e5417c7a3c92ee2f53bcfc0d2f94fa8652d8c2683013f32c98a8ffc3dad468b75a938057b63a4164adf53", 0x7d}, {&(0x7f00000008c0)="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", 0xfb}, {&(0x7f00000009c0)="b75325530e39f8598535be1149bd407dc914590ffc83ac3f50f849136e74d9b428606e27551c889b39a22591d308bd2db1080f55fdaa8938766f936ecd7af4baaf0317c749044d6a81dd6b48bf3df403010685450d4f42eda0ed0681d1c9c7c62a04f1da4c3cd50256524f7325051c936c2690098425d141548468f6e96ff8e7cdfb0d49cc2390a9ad5376dd0bfeae41b11bf62fed49ed119371a40b04002a60ef6b6286a45c5412", 0xa8}], 0x4, &(0x7f0000000ac0)=[{0x30, 0x101, 0x4, "9f61794bc0efebb8186505fb9db4908e1bfc891e63f57b896eec18f96da8"}], 0x30}}], 0x1, 0x1) r10 = add_key(&(0x7f0000000b40)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)="32438d97ef15e062ccb604130620144e8fdc15a82e63eb979de290ef8a414eb10d6dbc1b023e2b11bbe711fcc38c464086ef3283a2bf8f0d934246a4296d1640e63372518a69dd1c947eddc2c6d0bc7c6de32c6468851acda3c98f2701b0748289d00d3ab6a25cf85d773167f58f8d70820ac9cd26f3b528120cfbff6bee0426aa4f37a0cacc1b0d5dec578e99b62e6a13cffe9c5f4518b0a70e9f10f9d380", 0x9f, r2) keyctl$reject(0x13, r8, 0x5, 0x4, r10) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000c80)={@null, 0x1, 'veth1_vlan\x00'}) keyctl$get_persistent(0x16, 0xee01, r10) r11 = request_key(&(0x7f0000000d80)='asymmetric\x00', &(0x7f0000000dc0)={'syz', 0x3}, &(0x7f0000000e00)='D&}\x00', r10) keyctl$read(0xb, r11, &(0x7f0000000e40)=""/151, 0x97) r12 = add_key(&(0x7f0000000f40)='encrypted\x00', &(0x7f0000000f80)={'syz', 0x0}, &(0x7f0000000fc0)="d5f5c13389a5622ddf1bfcf496d521812a444f7188b801d85b18af3a191b4e9da3f551ff00f66783f9ffd7bc32c36203bb42a7679d84812639c898649a467255b6d89458126e3dd76a16052e858d499ec668db90fe8c373c736890d60f597aeb", 0x60, r3) keyctl$instantiate(0xc, r6, &(0x7f0000000f00)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'trusted\x00'}, 0x1e, r12) getresgid(&(0x7f0000001040), &(0x7f0000001080)=0x0, &(0x7f00000010c0)) getgroups(0x3, &(0x7f0000001100)=[0x0, r13, 0x0]) ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f0000001140)=0x5) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r14, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000001180)=0x1) keyctl$read(0xb, r12, &(0x7f00000011c0)=""/195, 0xc3) keyctl$negate(0xd, r11, 0xfffffffffffffff9, 0x0) 4m57.89816962s ago: executing program 34 (id=635): socketpair(0x25, 0x2, 0x6291, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "ca622818fb82226ebac29a6a2d466e6213d3de2ac1e88b08924037b95183f006c4ab10a6d10237052b98e7e850e6e04929e6cafdf439359f324c009a19375dda", 0x2d}, 0x48, r2) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40002}, 0x40) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffc) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="051d48b7604faa3fac854148929bf5b8ac765ea3d1f888be67023a6a7353660a1ced38ad03c3abe56564ecf883e17d4e05fb90049e70a72a20b2153858443ba2b2d3661522a64dcc5b585de1e8de349ccef60dcc3546c1c72ea7fcfd651662b6f503373f8b2b1df95e9ff1474ec076d84ced6adc8ee6bb636a55df7a5b8d10910d5c11991bb5a2151c401d03c07945c97e91fe2d92b6394bb7dbf42b5410064bc7c6ab4941c3b52ae555a908bda8e30b1349b3957d20b4972ddd4cee2474933f9ad6d716ff081e6b4f3d911ab8c64484945f395121a9dff4f1ec089cd0768f1710a6fd654b5e8bd5abfa6fea6dfe1e", 0xef, r2) writev(r4, &(0x7f0000000600)=[{&(0x7f0000000540)="23d2653b6b2ada84d7e7c6e8d475df0ff764136ef3976337b523f1e91acaa6d63696523ebf8f0eb6ea23c2ad3f55494e5a0994858957e6b9f42ed8773a1163ef72b5f3f74889fc423538c2b0eedcb04620d2367a2b18945275fc8fdd340e1696d681fda137897e7578d91e90e7aa303795256a4d620518838c7f6c1d0d359ccb71486a0351b7c025ffe7e0828549fc8da21c0758a9fda44a9c9c7690120b5998e52f41ef477c", 0xa6}], 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) write$proc_mixer(r7, &(0x7f0000000680)=[{'BASS', @val={' \'', 'Capture'}}, {'SYNTH', @void}], 0x2a) r8 = add_key(&(0x7f00000006c0)='trusted\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="cb4fc5d7d083821bc893a2a887d91c334ff2fdc3b07122bccd56ebbd29bf24d9382621fcdc287e6181314602449419ba16770d83c44e2080b95b6d32736029fa0d5ea51404caa2500396ea8f5f4d2805cfa6b9a3dff8d4a67a8b88e13f80aba88592c850ba5927bb5be1c3a728c8ce36941195ca", 0x74, r3) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg(r9, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)="1f5733fb410ad0b24ffd9b640ace71199d393a3c19728bb567f019693b8a9355eb5f1f33f0e963b106df8d28d13945861fd78edfa7f66f96437a0b6db723018da6740c9a01a44f9c8a8fb73d5dc0b6b900f96adb889adc8e67aefe840f5b53f188391d25a0fc75446a9d28f12a7f390eb861233c8b087af246f76f1c49da", 0x7e}, {&(0x7f0000000840)="be0c137a01b6d92b24863b85b39a22d0c8cc13b25bdd4f6eaaf1cb7efcc395fbf0372e3f682c66107b39f88b86d9f3530c3821ec77b53a291c8ad1fc4a8406276059bc31e9afc5113a719409250a040d9d6f4e5417c7a3c92ee2f53bcfc0d2f94fa8652d8c2683013f32c98a8ffc3dad468b75a938057b63a4164adf53", 0x7d}, {&(0x7f00000008c0)="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", 0xfb}, {&(0x7f00000009c0)="b75325530e39f8598535be1149bd407dc914590ffc83ac3f50f849136e74d9b428606e27551c889b39a22591d308bd2db1080f55fdaa8938766f936ecd7af4baaf0317c749044d6a81dd6b48bf3df403010685450d4f42eda0ed0681d1c9c7c62a04f1da4c3cd50256524f7325051c936c2690098425d141548468f6e96ff8e7cdfb0d49cc2390a9ad5376dd0bfeae41b11bf62fed49ed119371a40b04002a60ef6b6286a45c5412", 0xa8}], 0x4, &(0x7f0000000ac0)=[{0x30, 0x101, 0x4, "9f61794bc0efebb8186505fb9db4908e1bfc891e63f57b896eec18f96da8"}], 0x30}}], 0x1, 0x1) r10 = add_key(&(0x7f0000000b40)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)="32438d97ef15e062ccb604130620144e8fdc15a82e63eb979de290ef8a414eb10d6dbc1b023e2b11bbe711fcc38c464086ef3283a2bf8f0d934246a4296d1640e63372518a69dd1c947eddc2c6d0bc7c6de32c6468851acda3c98f2701b0748289d00d3ab6a25cf85d773167f58f8d70820ac9cd26f3b528120cfbff6bee0426aa4f37a0cacc1b0d5dec578e99b62e6a13cffe9c5f4518b0a70e9f10f9d380", 0x9f, r2) keyctl$reject(0x13, r8, 0x5, 0x4, r10) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000c80)={@null, 0x1, 'veth1_vlan\x00'}) keyctl$get_persistent(0x16, 0xee01, r10) r11 = request_key(&(0x7f0000000d80)='asymmetric\x00', &(0x7f0000000dc0)={'syz', 0x3}, &(0x7f0000000e00)='D&}\x00', r10) keyctl$read(0xb, r11, &(0x7f0000000e40)=""/151, 0x97) r12 = add_key(&(0x7f0000000f40)='encrypted\x00', &(0x7f0000000f80)={'syz', 0x0}, &(0x7f0000000fc0)="d5f5c13389a5622ddf1bfcf496d521812a444f7188b801d85b18af3a191b4e9da3f551ff00f66783f9ffd7bc32c36203bb42a7679d84812639c898649a467255b6d89458126e3dd76a16052e858d499ec668db90fe8c373c736890d60f597aeb", 0x60, r3) keyctl$instantiate(0xc, r6, &(0x7f0000000f00)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'trusted\x00'}, 0x1e, r12) getresgid(&(0x7f0000001040), &(0x7f0000001080)=0x0, &(0x7f00000010c0)) getgroups(0x3, &(0x7f0000001100)=[0x0, r13, 0x0]) ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f0000001140)=0x5) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r14, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000001180)=0x1) keyctl$read(0xb, r12, &(0x7f00000011c0)=""/195, 0xc3) keyctl$negate(0xd, r11, 0xfffffffffffffff9, 0x0) 4m43.829167863s ago: executing program 35 (id=629): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x13c, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r6, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) bind$bt_hci(r2, &(0x7f0000000040), 0x6) sendmsg(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)="94278d8f", 0x4}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010141}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x21e, 0x1ff, 0x9}) write$tun(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, 0x0, &(0x7f0000000080)) r10 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r10, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x0, 0xc, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x8, 0x24, 0x2, 0x0}) 3m22.244184755s ago: executing program 7 (id=1245): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008711e0e17000000000100090224000100000000090400000203000000092104000001220500090581030000000000"], 0x0) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002080), 0x80000, 0x0) (async) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (async) close(r2) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000700)={'8255\x00', [0x8, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c95239c, 0x1, 0x0, 0x6, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x10, 0x395, 0x8000008b, 0xfffffffe, 0xb, 0xfffffff5, 0x4, 0x3, 0x0, 0x0, 0x4, 0x2, 0xdffffffa]}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000321748"], 0x0}, 0x0) 3m21.987867779s ago: executing program 7 (id=1248): r0 = syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b240201030205000d240f0105000000090007000806241a7f000109050602ff030000000905820208d59c00000000001b000000000052d06b371f6063a9f0f825f47662ec052f23ff3da61f87fc39d008e57cc935ade1169c4fa448c45949ff5e543d05c4c7837fb8d6a8d707340ab4b90781ae6b6fb98eee7a82bcce515f6bda4e85c17aa008996b4e61e4e7bc2751773e59725186c8e97474169aab9fb550b75745110223c9f2dd6bcdc9a9adb97ea3890b78ac0a4f3a9f1f357313efd7af15d8853199bccce6590000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3m18.905444626s ago: executing program 7 (id=1274): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0xffffffff}, 0x10) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000000002000008000f40fe00000e", 0x24) set_mempolicy(0x3, &(0x7f0000001080)=0xfff, 0xfff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f0000000000), 0xc, 0x1, 0x0, 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xd1df57143cd83b25, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x6) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x1f8c) r3 = syz_open_dev$sg(&(0x7f0000007700), 0x20000, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x0, 0xff, @scatter={0x1, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/217, 0xd9}]}, 0x0, 0x0, 0x1, 0x26, 0xfffffffd, 0x0}) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0xffffffff}, 0x10) (async) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000000002000008000f40fe00000e", 0x24) (async) set_mempolicy(0x3, &(0x7f0000001080)=0xfff, 0xfff) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) futex(&(0x7f0000000000), 0xc, 0x1, 0x0, 0x0, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xd1df57143cd83b25, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x6) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x1f8c) (async) syz_open_dev$sg(&(0x7f0000007700), 0x20000, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x0, 0xff, @scatter={0x1, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/217, 0xd9}]}, 0x0, 0x0, 0x1, 0x26, 0xfffffffd, 0x0}) (async) 3m18.75127936s ago: executing program 7 (id=1275): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x1004040, 0x0) chroot(&(0x7f0000000180)='./file0/../file0\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00') 3m18.690912609s ago: executing program 7 (id=1278): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x7, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d105012000010000000009040000004d2f9c00"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="569b62da75443c3a448778d61e920e44e74cde31cedcff3ebb3b833ccc0eb659f2ece9ef449332ec8d5afc3773b5b925058210b5ec631a3c537d75a05e912777ab28ec4dd431b5dd00"/83], 0x0, 0x0}) ioctl$TCSETA(r1, 0x5406, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x0, 0xf, "62818683b5c8538d"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x3, &(0x7f0000000300)=[{0x6, 0x0, 0xe, 0x7fff7ff9}, {0x1, 0x9, 0x9, 0xc0}, {0x101, 0xb, 0xf, 0x5}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x659, @empty, 0xff}, 0xff6d) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000100), 0x4) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) ptrace(0x10, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x2000000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) r7 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x5) fchdir(r8) r9 = open(&(0x7f0000000180)='.\x00', 0x400, 0x14) flock(0xffffffffffffffff, 0x2) close(r9) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) 3m18.551396084s ago: executing program 7 (id=1280): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_usb_connect$uac1(0x3, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4e, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8bd, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x2, 0x6, {0x7, 0x25, 0x1, 0x80, 0x3f, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x80, 0x6, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000980)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f00000018c0)={0x14, 0x0, &(0x7f00000017c0)={0x0, 0x3, 0x18, @string={0x18, 0x3, "02e8343b9e98ce9499c9480563662e7c242fe11bfbaa"}}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4000000}, 0x1c) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000008e809000000ff0000f03ac7308b330000ffffffffffffffffffe70000000016000200000000000000", 0x58}], 0x1) 3m18.278713184s ago: executing program 36 (id=1280): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_usb_connect$uac1(0x3, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4e, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8bd, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x2, 0x6, {0x7, 0x25, 0x1, 0x80, 0x3f, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x80, 0x6, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000980)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f00000018c0)={0x14, 0x0, &(0x7f00000017c0)={0x0, 0x3, 0x18, @string={0x18, 0x3, "02e8343b9e98ce9499c9480563662e7c242fe11bfbaa"}}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4000000}, 0x1c) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000008e809000000ff0000f03ac7308b330000ffffffffffffffffffe70000000016000200000000000000", 0x58}], 0x1) 2m55.018725416s ago: executing program 8 (id=1429): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0501c00008005400000060ec97"], 0xfdef) setsockopt$sock_int(r2, 0x1, 0x32, &(0x7f0000000080)=0x4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002800c00028005000100000000002c0001"], 0x50}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001200110e0000000000000000cb00000097"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000180)={0x3, 0x6, 0x3, 0x0, 0x0, [{{r5}, 0x91}, {{r3}}, {{r2}, 0x7f}]}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x0) write$char_usb(r7, &(0x7f0000000100)='7', 0x1) 2m53.35129627s ago: executing program 8 (id=1438): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x20044884}, 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000005b40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x246, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xb0, 0x5, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0xa5fa, 0x9, 0x1, {0x22, 0xbd1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x8f, 0x76}}}}}]}}]}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000180)={{0xd66fcf4b7b8cfe97, 0x2, 0xd, 0x0, 0x9, 0x8, 0x0, 0x7, 0x17, 0xf8, 0x3, 0x2}, {0x4, 0xd000, 0xb, 0x9, 0x80, 0x3, 0x8, 0x7, 0x1, 0x40, 0x41, 0x4}, {0x1, 0x0, 0xd, 0x8, 0xcb, 0x0, 0x6, 0xc, 0x0, 0x0, 0xff, 0x4}, {0x10000, 0x6000, 0x4, 0x2, 0x9b, 0xe, 0xff, 0xfe, 0x5, 0x5, 0x2, 0x3}, {0x80a0000, 0x2000, 0xa, 0xc, 0xd7, 0x8, 0xd, 0x0, 0x2, 0x5, 0xb2, 0xa4}, {0x10000, 0x80a0000, 0x13, 0x80, 0x1, 0x8, 0xf9, 0x0, 0x81, 0x2, 0x6, 0x9}, {0x10000, 0x2000, 0xc, 0x5, 0xb, 0x7, 0x6d, 0xe, 0x8, 0x1, 0x3, 0x6}, {0x10000, 0x2000, 0xc, 0x6f, 0x8, 0x63, 0xf8, 0x8, 0x3, 0x93, 0x7, 0x3}, {0xdddd0000, 0x5}, {0xf000, 0x9}, 0x8, 0x0, 0xdddd1000, 0x20, 0x7, 0x1001, 0xd000, [0x7, 0xf4e, 0xaf7, 0x5]}) 2m52.12064338s ago: executing program 8 (id=1445): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc4, 0xe4, 0x7, 0x40, 0x14aa, 0x22b, 0x5619, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x0, 0xb1, 0x94, 0xd9}}]}}]}}, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc086, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0xeb7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x1, 0x5}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x3, 0x7, 0xe2, 0x40, 0x62}, 0x66, &(0x7f00000000c0)={0x5, 0xf, 0x66, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x1, 0x2, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "8bd0d34ac343f3a5a3856ec032d89106"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x0, 0xff00, 0x0, [0xc00f, 0xff0000]}, @ssp_cap={0x24, 0x10, 0xa, 0xf6, 0x6, 0x6, 0x0, 0x1, [0xc0, 0x7e0f, 0xc060, 0x30, 0xf, 0xd7]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xd6, 0xdd, 0x32b}]}, 0x1, [{0x4b, &(0x7f0000000140)=@string={0x4b, 0x3, "385ae1a9a654db7421013cd0235d3402d265f14853931c228f70a9f4a14d50ef308891809426e8a33199c644283b9eee88666c63a08250c2ad2811bc5ccfbe50e28763d82f4099ce70"}}]}) 2m50.690817256s ago: executing program 8 (id=1457): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) prctl$PR_SET_THP_DISABLE(0x41, 0x3) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x5) (async) syz_clone(0x24522980, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x20, 0x0) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x80) (async) clock_nanosleep(0x6, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000040)) 2m50.628809681s ago: executing program 8 (id=1459): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a010100000000000000000000000000000000002000000000002020", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a000107"], 0x144}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x2000000, &(0x7f0000002b00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB="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"]) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x48d}) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000340)) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001739e6108d90f2c006b06bc01020301090212000107d440000904650000be866d"], 0x0) dup(r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$vsock_stream(r7, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f7e49f2b15c6602a5b198449509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r8, 0x5421, &(0x7f0000000140)=0x1) shutdown(r8, 0x1) 2m47.446798389s ago: executing program 8 (id=1473): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x28, 0x50000) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200)) ppoll(&(0x7f00000000c0)=[{r1, 0x80}, {0xffffffffffffffff, 0x484}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x10000]}, 0x8) modify_ldt$write(0x1, &(0x7f0000000180)={0x4, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) 2m32.087102392s ago: executing program 37 (id=1473): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x28, 0x50000) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200)) ppoll(&(0x7f00000000c0)=[{r1, 0x80}, {0xffffffffffffffff, 0x484}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x10000]}, 0x8) modify_ldt$write(0x1, &(0x7f0000000180)={0x4, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) 6.043138965s ago: executing program 9 (id=2298): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004300)=ANY=[@ANYBLOB="1c0000001c000100000000000200000007"], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) vmsplice(r1, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031bf91710460d11208ae80102030109022400010304d0030904"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x2, 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x2, 0x7, 0x6}}) 4.434045245s ago: executing program 6 (id=2301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x19da00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000100)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x430200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31) 4.234181018s ago: executing program 6 (id=2303): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x18}}], 0x40001ce, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = syz_open_dev$video(&(0x7f0000000040), 0x100, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0x9, 0x0, 0x50313459, 0x8, 0x4, [{0x5, 0x1000614c}, {0x0, 0x3}, {0x80, 0xff}, {0x1000, 0x8000}, {0x9, 0x2}, {0x6, 0xffffffc0}, {0x7fffffff}, {0xe5ac, 0x401}], 0x6, 0x3, 0x2, 0x2, 0x7}}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8, 0xfffffffc}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.862966647s ago: executing program 6 (id=2307): prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x181) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) accept$inet6(r1, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x100000001, 0x6) r2 = socket$netlink(0x10, 0x3, 0x4) socket$key(0xf, 0x3, 0x2) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000001080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT=r0], 0x0) socket$inet(0x2, 0x2, 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x48, 0x4000046, 0x81, 0x6}, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r4], 0x1c}}, 0x804) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r3, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 3.535985867s ago: executing program 1 (id=2308): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x80000001) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x0, "c14550a1d52a3fb7e4f3c38b863916a9891176fde67165a062869e8732a3e79b1d"}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a0010000000400bb80060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0xc1bdf0ffffffffff, 0x0, 0x0, 0x0, 0x41, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4b}) clock_adjtime(0x4, &(0x7f0000000000)={0x5, 0x100, 0x0, 0x7fff, 0xffffffffffffcf52, 0xfffffffffffffffa, 0x2, 0x5, 0x7, 0xfffffffffffffff7, 0x3, 0x1, 0xb, 0x5, 0x0, 0x100000001, 0x8000000000000000, 0x4, 0x3ff, 0x1, 0x5, 0x8000000000000001, 0x2e, 0x3, 0x8, 0x8000}) 2.890331054s ago: executing program 9 (id=2311): clock_settime(0x9a039c6785899b50, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000000000100000000000300a8bd825ccedbdd061263d10203000000000000000b0007000005140000001100010000000000000000000300000a"], 0x3c}, 0x1, 0x0, 0x0, 0x2c004880}, 0x10000030) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0xc048aec8, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000000)) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2.535341208s ago: executing program 9 (id=2313): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl(r0, 0xfffff000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2.447195524s ago: executing program 9 (id=2314): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x27) 2.244971776s ago: executing program 9 (id=2315): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x27) 2.132391726s ago: executing program 9 (id=2316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="fde465744a", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x20028000}, {0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)}, {&(0x7f0000000200)="a86991b930e9f5081151853d768c0bd4b6d2ac8038cc7885b7695672455a90cc6a5017f4461e4c9e2cb7f38e6b6ed2fe597828d1309d9bce5b43a642f5081dcd445c81473dc52bd0f61f28cbf83b4544358d85548be478a5d51ec25adb7cf24ec1e5c1089d6e927c1deeb206c9e8f986b3ca515b9bb0a7a9dd99a975b3c66c4c3560e56c667c3587a11e405b9e434af548a07c83b48414ef13541e8bed97e29861b94c111583f7988aeb63b01b8e5fafbc91b7ff0c93b9af6709bdb92685a43b0f32cbfae5206cbab776", 0xca}], 0x2, 0x0, 0x0, 0x20000894}, {0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000600)=[@iv={0x28, 0x117, 0x2, 0x10, "bb1f671264cbad006ce65fb6d6332f93"}, @iv={0xe0, 0x117, 0x2, 0xca, "4a0a8be8786c748488059357db481784ea961f933de60a8c8f71d70f554bc275b8ef7f0d0c1bcb5eb391f453229804ee807ecad0fb047d061ada7e79f9fc3fea147db148fb6f9333eb42fa4ca6cf2d8108a9676d1eb0a02064cfdf74790693ad6054b2af0089b97ef956913519cb70db9c0a3991c1e71d735a46f63b4242f371ee3e66a275ada2ee8eeaa511cd86995ca2b89173780ec58cb4f0e331cabadfe288877e7781a2c0e6e56852e001fd8a24048e9ccdfd98f50ac68136f48edc96f9491df9d4e9a29ae1ed8e"}, @iv={0xe8, 0x117, 0x2, 0xce, "3c8f2fcbbdee1becaca6053b1ce414bcc3fc1fe6e5e1a0ac9e22e07f8f0ce2c1cad2023b27f8c38014d417235db006b0e24569f20678276a5bc179094f306d167c40cbc62b9842dbe6060bb4df941d7c98e6e070acafab2357f649905947ad5d8c7f319293e63a6ad165e743b18b937217428f696bb065d487fbc4b40e6a0b7a8153c7ca433fe69ab9df2eed575b82132e898d54e0e02b1377a15198eb1c6577e8cf8275231f5a189143e967ee5ea2879e08e667a8deef636e685640d2cbada499b438cb7e0bd1f28ca2e90dda88"}], 0x1f0, 0x571342ee8723a981}, {0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="4f80435818c544a2e53d0842b6e3c6c2ad6638afe652311701910a885cb417ae0001257146861c4163fd98899c374cc45b", 0x31}, {&(0x7f0000000080)="00d59edae1b76cd7fd01e7bb597a2c5b5926da54d493e6129f6e8efb263a520c6514e7bfdeef52db69fd14ff24348c36e436dd", 0x33}, {&(0x7f0000000800)="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", 0x1000}], 0x3, &(0x7f0000001b00)=[@assoc={0x18, 0x117, 0x4, 0x9e}, @iv={0x90, 0x117, 0x2, 0x7b, "bdd8a79716e3e0c44559a9aafd51b91e408dec8bb6975edb1e36e6ed2f4b216e39eb9512ed053411441c511e0131b6552299f7f903d2a51646a4f8709e9f6d113c2f9afc168e3976b2057094b6f766438571e8b3d787f93b5fb8491cf417ec2603458a126a2333df51374c349e0bbb656487d59999f5d863f88442"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xa8, 0x117, 0x2, 0x8f, "fa39c1bdea3fbbe9ccb394ee561bf04a7203361d9c12a8028f856f07a441a11aa35d67c0db9f8399a853c4b7162d67a72b602dfab9d664e2d2d82e0b93ccfe3c70a2f342e464bf663257dd64266a3cb04eaa3d326572615d54d8719659e98e24fc5fdd4dffbbff0eafd38b1012014919ec828023e6436c6c65c88d575a7fc2fcb07fb04051c78227af9e46cd3784eb"}, @iv={0xe8, 0x117, 0x2, 0xcd, "5ef30d195ae38bce4db36917f0841a68fa89ae74983dd5aff2ecc53bd0497c93529e574a5508cf36072a0e3876898ee47aec3038ab6ef4b9cf3325c8c5cc2c7a29e1ff70143ab9d802954aa17b33d296928be32858326d65d5386749fa853c556fb86ef51f438f8de53abfe4e05fa57c3eb98678622c6dc00761efa1163a186c0158d514705058d2bb69e6289c6e3a3e307bdf5904bc2122c1096f846c263e6f6e9df2750a322698e09c8a1702098f061f26e24d762679202d7e6798122d91eeef30db9679c95bf9be2e9761e6"}], 0x1250, 0x4000000}], 0x4, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_usb_connect(0x1, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0xc1, 0x19, 0x8c, 0x10, 0x2b73, 0xe, 0x293f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x5, 0x4, 0x0, 0x3e}}]}}, 0x0) 1.836669437s ago: executing program 1 (id=2317): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x300}}) 1.802366857s ago: executing program 1 (id=2318): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x300}}) (fail_nth: 2) 1.659454492s ago: executing program 2 (id=2319): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 1.407231271s ago: executing program 2 (id=2320): r0 = syz_open_dev$video4linux(&(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x4000000000000003, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x9}) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x5, 0x6, '\x00', &(0x7f0000000040)=0xd9}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x300}}) 1.406775993s ago: executing program 1 (id=2321): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="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") 1.33110569s ago: executing program 2 (id=2322): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x800000000000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05604, &(0x7f00000012c0)={0xa}) close(r3) 1.315351932s ago: executing program 1 (id=2323): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x27) 1.151531478s ago: executing program 2 (id=2324): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x27) 1.151157793s ago: executing program 1 (id=2325): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5414, &(0x7f0000000080)) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080)=0x8, 0x4) close(r2) syz_genetlink_get_family_id$devlink(&(0x7f0000011880), 0xffffffffffffffff) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xf0) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x40040) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x400, 0x1000, 0xbbba, 0x2, 0x0, 0x100, {0x0, 0x100}, {0x5, 0x2, 0x1}, {0xc0f}, {0x0, 0x8}, 0x1, 0x3f0, 0x1, 0xd613, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x2}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000200)=0xf0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, 0x0, &(0x7f0000002140)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x7}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x306, @multicast}, 0x18, {0x2, 0x4e24, @rand_addr=0x64010102}, 'ip6erspan0\x00'}) 1.043801927s ago: executing program 2 (id=2326): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000003640)=ANY=[@ANYBLOB="401300000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000200)=0x5) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="40eeb16e", 0x4}, {0x0}], 0x2) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000004300)={0x34, &(0x7f00000040c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 32) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x4010744d, &(0x7f0000000000)=0x20000002) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) r7 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000100)="daffc3fa80002cd21700000000025a91f64b007f046a680f6e787f76d5e86cf70af12c3ffa323fad", 0x28}], 0x1}, 0x4b00) (async, rerun: 32) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @default]}, 0x48) (async, rerun: 32) listen(r6, 0x1ad72f7) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="00108100000045"], 0x0, 0x0, 0x0, 0x0, 0x0}) 760.103913ms ago: executing program 6 (id=2327): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x20000000000) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt(r1, 0xd0e, 0x4d, &(0x7f00000001c0)="30fd6a6b4831b432011760c8df6fd20bb3b6abc98ae74769629eefda314799d9df8b43ee40983263279d5d4a1c4165e2a48d62b95cf178471e7dda8a2f782d278cc887667a634360283cb09bd39564c21639ba632f0023e4ae65235a3adfdf5fef384bc4b4219b78d77c5450af065145a0bf780b90bc0304899ac8adb6bcf3c56491c7a1f47ca83237984ad9abbbdb6ecb170d1766805796e8a4384f30619daf1cd14622a6ceab1f26286f05334d5a78530c8c6ba8cd4b409fb71c18b7d58005cc95f0", 0xc3) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) (async) r2 = semget(0x1, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "4bd92170f8c475a5", "ce1a42c4c09fb9eaab93f61d07cf31827bf1152b2b0865a300505d81f8dbab1b", 'w/.n', "82a9cb3a16240f91"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003a8000/0x1000)=nil, 0x1000}, 0x2}) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000080)=[{0x1, 0x7fff, 0x1000}, {0x0, 0x6, 0x800}, {0x3, 0xfffe, 0x1800}], 0x3, &(0x7f0000000180)={r5, r6+10000000}) (async) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) setsockopt$ax25_int(r7, 0x101, 0x7, &(0x7f0000000040)=0x371, 0x4) setsockopt$ax25_int(r7, 0x101, 0x1, &(0x7f00000002c0)=0x684e51b5, 0x4) (async) shutdown(r1, 0x1) 607.157199ms ago: executing program 6 (id=2328): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x300}}) 593.243249ms ago: executing program 6 (id=2329): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) r0 = syz_usb_connect(0x3, 0x1e1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44084) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) syz_usb_connect$hid(0x7, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc091, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0xe, {0x9, 0x21, 0x10, 0xd, 0x1, {0x22, 0xa81}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0x77, 0x3, 0x8, 0x9}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0xa}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x812}}, {0x53, &(0x7f0000000bc0)=@string={0x53, 0x3, "0ee95632987a2ac44364c2a72ecf82730a48a3e8bdc88b40f4d4d951f3856296898ccdd580de0e79972549d79968b812a6669dfa2c1a1f5989c71ca16a9099370127390d991a80d9ec6d5f0617c2c12918"}}, {0x7c, &(0x7f0000000340)=@string={0x7c, 0x3, "8276a2379a181b323b92a9c00b2b303c13ab1f80ced6a9d19c06c003cb35e433dfd3291ce69cb617aa574156ed60f22bf7fc58bc3fd9cdb764359bdd66dabbcc24dfb8618848c9e1475276736d7980e466d6b57654d32372f8398ba6201fe2e4ffcde6b88c889f155e4a5ab0360220125c51115b1996d0e87fd5"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x43f}}]}) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) sendmsg$netlink(r1, &(0x7f0000000d80)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000000b80)=[{&(0x7f0000000700)={0xd0, 0x38, 0x100, 0x70bd29, 0x25dfdbfe, "", [@generic="6dec5ee1483c3d96c3fc87df3395457183913cf784bf3fdf251d0e8409795785ef8aaa17aa62cbef2f740af25bd1f97ed4748506f85d5b7f28c24c", @generic="0d29c47814c01ed8d62831c9db4ac972d750efd9edd2d25a0b5d30c35b8445786bd685e7f8381b5a7906bffba2227c806190f9019796fc466dc05b0aa68f87b1be0b7c8a10586db8f2bde886211ecfeddfe5684e0d2ad715e291e7b4f7638b0c51399957ce1588d4e33d1e154b37ad51e20cfac351dc5169223aa77ce28d9158d7dc17705c", @generic]}, 0xd0}, {&(0x7f0000000800)={0xe8, 0x22, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@typed={0xd5, 0xcc, 0x0, 0x0, @binary="27c1b3eaf0490837484a82860f0d6fc071766d04e274d84ff8a0f18e2329ca81dccfb5bdc6b28ff172e0c9fcb602b763c8d68d8152f18bb8449177738b29a7e92bba7613bad9760fc7bcaa068cb22d7bc6c4ba0786fc0ef2efe55435bdd36768a7d4a02419b2267fb73dbef7872a45ea5f304dd89d092fb28299dbd692e7f2762b550502a499000fe428f832240335c4fa66906bfd34b6544f3fed430cb7dcb1467e2eb6b743706f3d001af01f254864683dbf3c60abe34d76298edbf8ec9543454c9139115b8424a72c6a0a60cad9ac8b"}]}, 0xe8}], 0x2, &(0x7f0000000e80)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1, r1, r1, r1, r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1, r2, r1]}}], 0xd8, 0x84}, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) writev(r4, &(0x7f0000001400)=[{&(0x7f0000000280)="7f9226a389", 0x5}], 0x1) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000440)={{0x4, 0x10000, 0xd, 0x7, 0xfd, 0x1, 0x8, 0x56, 0x8, 0x1, 0x59, 0x9}, {0x0, 0x4000, 0xe, 0xf3, 0x9, 0x0, 0x3, 0x5, 0x89, 0x3, 0x2, 0x6}, {0x10000, 0x5000, 0xf, 0x7, 0xaf, 0x8, 0x4, 0x9, 0x1, 0xff, 0x5, 0x5}, {0x3000, 0x1, 0xe, 0x8, 0x0, 0x0, 0xcd, 0x7, 0x9, 0x5, 0x7f, 0xe}, {0xdddd0000, 0xeeee8000, 0x8, 0x8, 0x0, 0x9, 0x3, 0x14, 0x1, 0x7, 0xd, 0xac}, {0xdddd1000, 0x109004, 0x0, 0xd5, 0xaa, 0x7, 0x1, 0x73, 0x3, 0x4, 0x5}, {0xdddd0000, 0x1, 0x10, 0x72, 0x1, 0xfb, 0x1, 0x5, 0x0, 0x0, 0x7, 0x9}, {0x0, 0x7bb2321291444997, 0xe, 0x9, 0x5, 0x4, 0xdb, 0x1, 0x8b, 0x3, 0xc5}, {0x2000, 0x8}, {0x80000}, 0x20010020, 0x0, 0x1000, 0x40000, 0x9, 0x1800, 0x4, [0x5, 0x147f, 0xffffffffffff8001, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'virt_wifi0\x00', @multicast}) 0s ago: executing program 2 (id=2330): syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xbb, 0x6d, 0x41, 0x40, 0x2c7c, 0x6008, 0x2e52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0xa0, 0x8, 0x160, 0x4, [{{0x9, 0x4, 0xbb, 0x1e, 0x1, 0xff, 0xff, 0x40, 0x9, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x4, 0x6, 0x9, [@generic={0x2, 0x21}, @generic={0xe, 0xf, "8353d7fa19b4fd2e5b8c7168"}]}}]}}]}}]}}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000001300)={0x6, 0xe}) sendmsg(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 2819][T13944] should_fail_ex+0x414/0x560 [ 484.002846][T13944] should_failslab+0xa8/0x100 [ 484.002870][T13944] __kmalloc_noprof+0xcb/0x7f0 [ 484.002889][T13944] ? tomoyo_encode+0x28b/0x550 [ 484.002923][T13944] tomoyo_encode+0x28b/0x550 [ 484.002955][T13944] tomoyo_realpath_from_path+0x58d/0x5d0 [ 484.002996][T13944] ? tomoyo_domain+0xd9/0x130 [ 484.003016][T13944] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 484.003040][T13944] tomoyo_path_number_perm+0x1e8/0x5a0 [ 484.003076][T13944] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 484.003125][T13944] ? __fget_files+0x2a/0x420 [ 484.003151][T13944] ? __fget_files+0x3a0/0x420 [ 484.003172][T13944] ? __fget_files+0x2a/0x420 [ 484.003196][T13944] security_file_ioctl+0xcb/0x2d0 [ 484.003218][T13944] __se_sys_ioctl+0x47/0x170 [ 484.003237][T13944] do_syscall_64+0xfa/0xfa0 [ 484.003251][T13944] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.003266][T13944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.003282][T13944] ? clear_bhb_loop+0x60/0xb0 [ 484.003302][T13944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.003317][T13944] RIP: 0033:0x7f3193d8ebe9 [ 484.003331][T13944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.003346][T13944] RSP: 002b:00007f3194bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.003368][T13944] RAX: ffffffffffffffda RBX: 00007f3193fc5fa0 RCX: 00007f3193d8ebe9 [ 484.003380][T13944] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000004 [ 484.003391][T13944] RBP: 00007f3194bee090 R08: 0000000000000000 R09: 0000000000000000 [ 484.003401][T13944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.003411][T13944] R13: 00007f3193fc6038 R14: 00007f3193fc5fa0 R15: 00007ffd445f4d68 [ 484.003437][T13944] [ 484.019491][T13944] ERROR: Out of memory at tomoyo_realpath_from_path. [ 484.056096][ T8754] m920x_read = error: -19 [ 484.118598][ T8768] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 484.120584][ T5916] m920x_read = error: -19 [ 484.125224][ T8768] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 484.129825][ T5916] dvb-usb: error while querying for an remote control event. [ 484.141108][ T8768] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 484.190652][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.246441][ T9] m920x_read = error: -19 [ 484.324591][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 484.356926][T13950] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2152'. [ 484.372033][ T9] dvb-usb: error while querying for an remote control event. [ 484.379862][T13953] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2152'. [ 484.386085][ T8768] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 484.389918][T13954] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2152'. [ 484.443027][ T8768] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 484.495434][ T8768] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 484.496690][ T9] m920x_read = error: -19 [ 484.509743][ T8754] m920x_read = error: -19 [ 484.516313][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 484.525060][ T9] dvb-usb: error while querying for an remote control event. [ 484.533190][T13958] FAULT_INJECTION: forcing a failure. [ 484.533190][T13958] name failslab, interval 1, probability 0, space 0, times 0 [ 484.556398][T13958] CPU: 0 UID: 0 PID: 13958 Comm: syz.9.2154 Not tainted syzkaller #0 PREEMPT(full) [ 484.556429][T13958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 484.556444][T13958] Call Trace: [ 484.556453][T13958] [ 484.556463][T13958] dump_stack_lvl+0x189/0x250 [ 484.556489][T13958] ? __pfx____ratelimit+0x10/0x10 [ 484.556522][T13958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.556543][T13958] ? __pfx__printk+0x10/0x10 [ 484.556582][T13958] ? __pfx___might_resched+0x10/0x10 [ 484.556615][T13958] ? fs_reclaim_acquire+0x7d/0x100 [ 484.556646][T13958] should_fail_ex+0x414/0x560 [ 484.556678][T13958] should_failslab+0xa8/0x100 [ 484.556708][T13958] __kmalloc_noprof+0xcb/0x7f0 [ 484.556731][T13958] ? tomoyo_encode+0x28b/0x550 [ 484.556771][T13958] tomoyo_encode+0x28b/0x550 [ 484.556828][T13958] tomoyo_realpath_from_path+0x58d/0x5d0 [ 484.556877][T13958] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 484.556908][T13958] tomoyo_path_number_perm+0x1e8/0x5a0 [ 484.556941][T13958] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 484.557015][T13958] ? __fget_files+0x2a/0x420 [ 484.557052][T13958] ? __fget_files+0x3a0/0x420 [ 484.557081][T13958] ? __fget_files+0x2a/0x420 [ 484.557116][T13958] security_file_ioctl+0xcb/0x2d0 [ 484.557147][T13958] __se_sys_ioctl+0x47/0x170 [ 484.557174][T13958] do_syscall_64+0xfa/0xfa0 [ 484.557195][T13958] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.557216][T13958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.557239][T13958] ? clear_bhb_loop+0x60/0xb0 [ 484.557267][T13958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.557289][T13958] RIP: 0033:0x7fbb1b38ebe9 [ 484.557309][T13958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.557329][T13958] RSP: 002b:00007fbb1c124038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.557353][T13958] RAX: ffffffffffffffda RBX: 00007fbb1b5c5fa0 RCX: 00007fbb1b38ebe9 [ 484.557370][T13958] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 484.557386][T13958] RBP: 00007fbb1c124090 R08: 0000000000000000 R09: 0000000000000000 [ 484.557401][T13958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.557415][T13958] R13: 00007fbb1b5c6038 R14: 00007fbb1b5c5fa0 R15: 00007ffd449d4278 [ 484.557476][T13958] [ 484.557808][ T8768] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 484.558534][T13958] ERROR: Out of memory at tomoyo_realpath_from_path. [ 484.588948][ T8768] usb 3-1: Product: syz [ 484.656141][ T9] m920x_read = error: -19 [ 484.674534][ T8768] usb 3-1: Manufacturer: syz [ 484.679532][ T8754] m920x_read = error: -19 [ 484.758805][ T8768] cdc_wdm 3-1:1.0: skipping garbage [ 484.769580][ T9] dvb-usb: error while querying for an remote control event. [ 484.799659][ T8768] cdc_wdm 3-1:1.0: skipping garbage [ 484.808897][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 484.890119][ T8768] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 484.900270][ T8768] cdc_wdm 3-1:1.0: Unknown control protocol [ 484.916131][ T9] m920x_read = error: -19 [ 484.920687][ T9] dvb-usb: error while querying for an remote control event. [ 484.965315][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 484.976220][ T9] m920x_read = error: -19 [ 484.980612][ T9] dvb-usb: error -19 while querying for an remote control event. [ 484.999542][T13924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2143'. [ 485.019458][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 485.035846][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 485.036977][ T9] m920x_read = error: -19 [ 485.089551][ T9] dvb-usb: error while querying for an remote control event. [ 485.146122][ T8754] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 485.166047][T13927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2143'. [ 485.166142][ T9] m920x_read = error: -19 [ 485.183428][T13927] nbd: device at index 64 is going down [ 485.198275][ T9] dvb-usb: error -19 while querying for an remote control event. [ 485.206465][ T5916] m920x_read = error: -19 [ 485.210855][ T5916] dvb-usb: error while querying for an remote control event. [ 485.306132][ T8754] usb 7-1: Using ep0 maxpacket: 16 [ 485.318344][ T8754] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 485.336937][ T9] m920x_read = error: -19 [ 485.338506][ T5870] udevd[5870]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 485.341672][ T9] dvb-usb: error while querying for an remote control event. [ 485.379942][ T8754] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 485.390504][ T5868] m920x_read = error: -19 [ 485.394912][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 485.412864][ T8754] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 485.434780][ T8754] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 485.457570][ C0] cdc_wdm 3-1:1.0: unknown notification 2 received: index 8192 len 0 [ 485.471770][ T8754] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 485.481392][ T8754] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.493076][ T8754] usb 7-1: Product: syz [ 485.497994][ T8754] usb 7-1: Manufacturer: syz [ 485.502862][ T8754] usb 7-1: SerialNumber: syz [ 485.536121][ T5916] m920x_read = error: -19 [ 485.540655][ T5916] dvb-usb: error while querying for an remote control event. [ 485.586188][ T5916] m920x_read = error: -19 [ 485.590736][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 485.666337][ T5916] m920x_read = error: -19 [ 485.670805][ T5916] dvb-usb: error while querying for an remote control event. [ 485.688822][T13990] FAULT_INJECTION: forcing a failure. [ 485.688822][T13990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.702263][T13990] CPU: 1 UID: 0 PID: 13990 Comm: syz.9.2164 Not tainted syzkaller #0 PREEMPT(full) [ 485.702284][T13990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.702299][T13990] Call Trace: [ 485.702309][T13990] [ 485.702320][T13990] dump_stack_lvl+0x189/0x250 [ 485.702348][T13990] ? __pfx____ratelimit+0x10/0x10 [ 485.702381][T13990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.702402][T13990] ? __pfx__printk+0x10/0x10 [ 485.702426][T13990] ? __might_fault+0xb0/0x130 [ 485.702455][T13990] should_fail_ex+0x414/0x560 [ 485.702488][T13990] _copy_from_user+0x2d/0xb0 [ 485.702513][T13990] sock_do_ioctl+0x182/0x300 [ 485.702554][T13990] ? __pfx_sock_do_ioctl+0x10/0x10 [ 485.702600][T13990] sock_ioctl+0x576/0x790 [ 485.702628][T13990] ? __pfx_sock_ioctl+0x10/0x10 [ 485.702662][T13990] ? __fget_files+0x3a0/0x420 [ 485.702691][T13990] ? __fget_files+0x2a/0x420 [ 485.702723][T13990] ? bpf_lsm_file_ioctl+0x9/0x20 [ 485.702738][T13990] ? __pfx_sock_ioctl+0x10/0x10 [ 485.702758][T13990] __se_sys_ioctl+0xf9/0x170 [ 485.702783][T13990] do_syscall_64+0xfa/0xfa0 [ 485.702805][T13990] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.702826][T13990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.702848][T13990] ? clear_bhb_loop+0x60/0xb0 [ 485.702875][T13990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.702892][T13990] RIP: 0033:0x7fbb1b38ebe9 [ 485.702906][T13990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.702920][T13990] RSP: 002b:00007fbb1c124038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.702944][T13990] RAX: ffffffffffffffda RBX: 00007fbb1b5c5fa0 RCX: 00007fbb1b38ebe9 [ 485.702962][T13990] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000004 [ 485.702977][T13990] RBP: 00007fbb1c124090 R08: 0000000000000000 R09: 0000000000000000 [ 485.703003][T13990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.703017][T13990] R13: 00007fbb1b5c6038 R14: 00007fbb1b5c5fa0 R15: 00007ffd449d4278 [ 485.703061][T13990] [ 485.743595][ T8754] usb 7-1: unit 4 not found! [ 485.922631][ T5916] m920x_read = error: -19 [ 485.927103][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 485.934957][ T5916] m920x_read = error: -19 [ 485.939607][ T5916] dvb-usb: error while querying for an remote control event. [ 485.986398][ T8754] usb 7-1: USB disconnect, device number 96 [ 486.049695][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.056624][ T5868] m920x_read = error: -19 [ 486.081720][ T5868] dvb-usb: error while querying for an remote control event. [ 486.089372][ T5916] m920x_read = error: -19 [ 486.093789][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 486.108108][T13996] FAULT_INJECTION: forcing a failure. [ 486.108108][T13996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.124383][T13996] CPU: 0 UID: 0 PID: 13996 Comm: syz.9.2168 Not tainted syzkaller #0 PREEMPT(full) [ 486.124411][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.124424][T13996] Call Trace: [ 486.124433][T13996] [ 486.124442][T13996] dump_stack_lvl+0x189/0x250 [ 486.124468][T13996] ? __pfx____ratelimit+0x10/0x10 [ 486.124505][T13996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.124536][T13996] ? __pfx__printk+0x10/0x10 [ 486.124567][T13996] ? __might_fault+0xb0/0x130 [ 486.124600][T13996] should_fail_ex+0x414/0x560 [ 486.124631][T13996] _copy_from_user+0x2d/0xb0 [ 486.124654][T13996] set_selection_user+0x8e/0x140 [ 486.124684][T13996] ? __pfx_set_selection_user+0x10/0x10 [ 486.124718][T13996] ? tioclinux+0x38b/0x530 [ 486.124759][T13996] vt_ioctl+0x81a/0x1f00 [ 486.124788][T13996] ? __pfx_vt_ioctl+0x10/0x10 [ 486.124827][T13996] ? __fget_files+0x2a/0x420 [ 486.124859][T13996] ? tty_jobctrl_ioctl+0x369/0xb70 [ 486.124882][T13996] ? __fget_files+0x3a0/0x420 [ 486.124908][T13996] ? __fget_files+0x2a/0x420 [ 486.124938][T13996] tty_ioctl+0x926/0xde0 [ 486.124986][T13996] ? __pfx_tty_ioctl+0x10/0x10 [ 486.125017][T13996] __se_sys_ioctl+0xf9/0x170 [ 486.125043][T13996] do_syscall_64+0xfa/0xfa0 [ 486.125062][T13996] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.125082][T13996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.125104][T13996] ? clear_bhb_loop+0x60/0xb0 [ 486.125130][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.125150][T13996] RIP: 0033:0x7fbb1b38ebe9 [ 486.125170][T13996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.125188][T13996] RSP: 002b:00007fbb1c124038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.125212][T13996] RAX: ffffffffffffffda RBX: 00007fbb1b5c5fa0 RCX: 00007fbb1b38ebe9 [ 486.125229][T13996] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 486.125243][T13996] RBP: 00007fbb1c124090 R08: 0000000000000000 R09: 0000000000000000 [ 486.125257][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.125271][T13996] R13: 00007fbb1b5c6038 R14: 00007fbb1b5c5fa0 R15: 00007ffd449d4278 [ 486.125306][T13996] [ 486.371575][T13998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.383363][T13998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.390237][ T8754] m920x_read = error: -19 [ 486.395987][ T8754] dvb-usb: error while querying for an remote control event. [ 486.404642][ T8754] m920x_read = error: -19 [ 486.409091][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 486.421788][T14001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.434622][T14001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.511329][ T5868] m920x_read = error: -19 [ 486.515786][ T5868] dvb-usb: error while querying for an remote control event. [ 486.576396][ T5868] m920x_read = error: -19 [ 486.580871][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 486.627076][ T5868] m920x_read = error: -19 [ 486.631529][ T5868] dvb-usb: error while querying for an remote control event. [ 486.745850][ T8768] usb 3-1: USB disconnect, device number 58 [ 486.750188][ T5868] m920x_read = error: -19 [ 486.776865][ T5868] dvb-usb: error while querying for an remote control event. [ 486.802212][ T5868] m920x_read = error: -19 [ 486.815136][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 486.910010][ T5868] m920x_read = error: -19 [ 486.926784][ T5868] dvb-usb: error while querying for an remote control event. [ 486.991916][ T5868] m920x_read = error: -19 [ 487.001852][T14029] FAULT_INJECTION: forcing a failure. [ 487.001852][T14029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.015679][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 487.017203][T14029] CPU: 1 UID: 0 PID: 14029 Comm: syz.2.2177 Not tainted syzkaller #0 PREEMPT(full) [ 487.017259][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 487.017276][T14029] Call Trace: [ 487.017287][T14029] [ 487.017298][T14029] dump_stack_lvl+0x189/0x250 [ 487.017329][T14029] ? __pfx____ratelimit+0x10/0x10 [ 487.017368][T14029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.017393][T14029] ? __pfx__printk+0x10/0x10 [ 487.017445][T14029] should_fail_ex+0x414/0x560 [ 487.017484][T14029] _copy_to_user+0x31/0xb0 [ 487.017511][T14029] simple_read_from_buffer+0xe1/0x170 [ 487.017551][T14029] proc_fail_nth_read+0x1b3/0x220 [ 487.017580][T14029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 487.017609][T14029] ? rw_verify_area+0x2a6/0x4d0 [ 487.017636][T14029] ? __lock_acquire+0xab9/0xd20 [ 487.017662][T14029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 487.017698][T14029] vfs_read+0x200/0xa30 [ 487.017725][T14029] ? fdget_pos+0x247/0x320 [ 487.017763][T14029] ? __pfx___mutex_lock+0x10/0x10 [ 487.017790][T14029] ? __pfx_vfs_read+0x10/0x10 [ 487.017822][T14029] ? __fget_files+0x2a/0x420 [ 487.017861][T14029] ? __fget_files+0x3a0/0x420 [ 487.017894][T14029] ? __fget_files+0x2a/0x420 [ 487.017939][T14029] ksys_read+0x145/0x250 [ 487.017966][T14029] ? __fget_files+0x2a/0x420 [ 487.018002][T14029] ? __pfx_ksys_read+0x10/0x10 [ 487.018034][T14029] ? do_syscall_64+0xbe/0xfa0 [ 487.018064][T14029] do_syscall_64+0xfa/0xfa0 [ 487.018085][T14029] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.018109][T14029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.018133][T14029] ? clear_bhb_loop+0x60/0xb0 [ 487.018165][T14029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.018190][T14029] RIP: 0033:0x7f803558d5fc [ 487.018211][T14029] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 487.018233][T14029] RSP: 002b:00007f80364cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 487.018260][T14029] RAX: ffffffffffffffda RBX: 00007f80357c5fa0 RCX: 00007f803558d5fc [ 487.018279][T14029] RDX: 000000000000000f RSI: 00007f80364cf0a0 RDI: 0000000000000005 [ 487.018296][T14029] RBP: 00007f80364cf090 R08: 0000000000000000 R09: 0000000000000000 [ 487.018313][T14029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.018328][T14029] R13: 00007f80357c6038 R14: 00007f80357c5fa0 R15: 00007ffc95cdf7e8 [ 487.018369][T14029] [ 487.141444][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.146366][ T8754] m920x_read = error: -19 [ 487.188226][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.192032][ T8754] dvb-usb: error while querying for an remote control event. [ 487.406798][ T8754] m920x_read = error: -19 [ 487.412000][ T8754] dvb-usb: error while querying for an remote control event. [ 487.457222][ T8754] m920x_read = error: -19 [ 487.461640][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 487.536565][ T5868] m920x_read = error: -19 [ 487.541109][ T5868] dvb-usb: error while querying for an remote control event. [ 487.666277][ T8754] m920x_read = error: -19 [ 487.670708][ T8754] dvb-usb: error while querying for an remote control event. [ 487.678393][ T5916] m920x_read = error: -19 [ 487.682771][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 487.690670][ T5868] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 487.806085][ T8754] m920x_read = error: -19 [ 487.810511][ T8754] dvb-usb: error while querying for an remote control event. [ 487.847023][ T8754] m920x_read = error: -19 [ 487.851821][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 487.861400][ T5868] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 487.870676][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.886035][ T5868] usb 3-1: config 0 descriptor?? [ 487.936360][ T8754] m920x_read = error: -19 [ 487.940904][ T8754] dvb-usb: error while querying for an remote control event. [ 488.026693][ T8754] m920x_read = error: -19 [ 488.031098][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 488.061375][T14045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.071779][T14045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.086762][ T8754] m920x_read = error: -19 [ 488.091381][T14045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2182'. [ 488.102020][ T8754] dvb-usb: error while querying for an remote control event. [ 488.141948][T14046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2182'. [ 488.155481][T14046] nbd: device at index 64 is going down [ 488.197579][ T8754] m920x_read = error: -19 [ 488.202019][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 488.229847][ T8754] m920x_read = error: -19 [ 488.234393][ T8754] dvb-usb: error while querying for an remote control event. [ 488.274060][ T5870] udevd[5870]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 488.294762][ T5870] udevd[5870]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 488.303435][T14036] tmpfs: Unknown parameter 'siz' [ 488.317449][ T5868] ath6kl: Failed to submit usb control message: -71 [ 488.327699][ T5868] ath6kl: unable to send the bmi data to the device: -71 [ 488.338094][ T5868] ath6kl: Unable to send get target info: -71 [ 488.354966][ T8754] m920x_read = error: -19 [ 488.359566][ T5868] ath6kl: Failed to init ath6kl core: -71 [ 488.365716][ T8754] dvb-usb: error while querying for an remote control event. [ 488.373756][ T5916] m920x_read = error: -19 [ 488.379704][ T5868] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 488.396830][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 488.415798][ T5868] usb 3-1: USB disconnect, device number 59 [ 488.506515][ T5916] m920x_read = error: -19 [ 488.511268][ T5916] dvb-usb: error while querying for an remote control event. [ 488.566101][ T5188] Bluetooth: hci1: command 0x0c1a tx timeout [ 488.567891][ T5916] m920x_read = error: -19 [ 488.576892][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 488.626742][ T5868] m920x_read = error: -19 [ 488.631171][ T5868] dvb-usb: error while querying for an remote control event. [ 488.749416][T14053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.753186][ T5868] m920x_read = error: -19 [ 488.766691][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 488.774824][ T5868] m920x_read = error: -19 [ 488.783354][ T5868] dvb-usb: error while querying for an remote control event. [ 488.906718][ T5916] m920x_read = error: -19 [ 488.912339][ T5916] dvb-usb: error while querying for an remote control event. [ 488.939441][ T5916] m920x_read = error: -19 [ 488.944063][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 489.055437][ T5916] m920x_read = error: -19 [ 489.067246][ T5916] dvb-usb: error while querying for an remote control event. [ 489.127588][ T5916] m920x_read = error: -19 [ 489.131996][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 489.180065][ T8754] m920x_read = error: -19 [ 489.187426][ T8754] dvb-usb: error while querying for an remote control event. [ 489.318594][ T8754] m920x_read = error: -19 [ 489.327650][ T8754] dvb-usb: error while querying for an remote control event. [ 489.347595][ T8754] m920x_read = error: -19 [ 489.366680][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 489.392532][T14065] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2188'. [ 489.468305][ T8754] m920x_read = error: -19 [ 489.473908][ T8754] dvb-usb: error while querying for an remote control event. [ 489.555206][ T8754] m920x_read = error: -19 [ 489.586616][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 489.614512][ T8754] m920x_read = error: -19 [ 489.659450][ T8754] dvb-usb: error while querying for an remote control event. [ 489.668052][ T5936] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 489.766095][ T8754] m920x_read = error: -19 [ 489.773373][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 489.800903][ T8754] m920x_read = error: -19 [ 489.806499][ T8754] dvb-usb: error while querying for an remote control event. [ 489.846112][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 489.867672][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.892179][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 489.916585][ T8754] m920x_read = error: -19 [ 489.921007][ T8754] dvb-usb: error while querying for an remote control event. [ 489.926823][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 489.946217][ T5868] m920x_read = error: -19 [ 489.956118][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 489.966068][ T5936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 489.975756][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.988860][ T5929] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 490.057129][ T5936] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 490.070218][ T5936] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 490.086327][ T5936] usb 3-1: Manufacturer: syz [ 490.092950][ T5868] m920x_read = error: -19 [ 490.110870][ T5868] dvb-usb: error while querying for an remote control event. [ 490.118489][ T5936] usb 3-1: config 0 descriptor?? [ 490.137345][ T8754] m920x_read = error: -19 [ 490.141827][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 490.158699][ T5929] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 490.168584][ T5929] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 490.204200][ T5929] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 490.237322][ T5929] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 490.266696][ T5929] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 490.289511][ T8754] m920x_read = error: -19 [ 490.298890][ T5929] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 490.300307][ T8754] dvb-usb: error while querying for an remote control event. [ 490.326771][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 490.336404][ T5868] m920x_read = error: -19 [ 490.349087][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 490.364153][ T5929] usb 7-1: Product: syz [ 490.376937][ T5929] usb 7-1: Manufacturer: syz [ 490.418198][ T5929] cdc_wdm 7-1:1.0: skipping garbage [ 490.423540][ T5929] cdc_wdm 7-1:1.0: skipping garbage [ 490.449166][ T5929] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 490.475664][ T5929] cdc_wdm 7-1:1.0: Unknown control protocol [ 490.483002][ T5936] rc_core: IR keymap rc-hauppauge not found [ 490.486299][ T5868] m920x_read = error: -19 [ 490.508338][ T5868] dvb-usb: error while querying for an remote control event. [ 490.510036][ T5936] Registered IR keymap rc-empty [ 490.542348][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.552556][ T5868] m920x_read = error: -19 [ 490.566687][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 490.596090][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.603445][T14092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.615523][T14092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.626523][ T8754] m920x_read = error: -19 [ 490.631011][ T8754] dvb-usb: error while querying for an remote control event. [ 490.635418][ T5936] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 490.665267][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout [ 490.677482][T14072] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2192'. [ 490.694432][ T5936] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input54 [ 490.727888][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.739636][ T8754] m920x_read = error: -19 [ 490.744234][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 490.756341][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.780335][ T5916] m920x_read = error: -19 [ 490.784870][ T5916] dvb-usb: error while querying for an remote control event. [ 490.795282][T14073] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2192'. [ 490.806477][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.826204][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.856078][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.876378][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.876397][ T5868] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 490.919249][ T5916] m920x_read = error: -19 [ 490.935881][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 490.936146][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.943826][ T5916] m920x_read = error: -19 [ 490.966087][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.986785][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 491.009340][ T5916] dvb-usb: error while querying for an remote control event. [ 491.026140][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 491.036150][ T5868] usb 10-1: Using ep0 maxpacket: 32 [ 491.049801][ T5868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.056353][ T5936] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 491.081544][ T5936] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 491.086957][ T5868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.100485][ T8754] m920x_read = error: -19 [ 491.104861][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 491.135998][ T5868] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 491.136068][ T5936] usb 3-1: USB disconnect, device number 60 [ 491.147085][ T8754] m920x_read = error: -19 [ 491.160393][ T5988] udevd[5988]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 491.170478][ T8754] dvb-usb: error while querying for an remote control event. [ 491.178225][ T5868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.194017][ C0] cdc_wdm 7-1:1.0: unknown notification 2 received: index 8192 len 0 [ 491.248333][ T5868] usb 10-1: config 0 descriptor?? [ 491.269592][ T5868] hub 10-1:0.0: USB hub found [ 491.287498][ T8754] m920x_read = error: -19 [ 491.291918][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 491.300112][ T5916] m920x_read = error: -19 [ 491.304540][ T5916] dvb-usb: error while querying for an remote control event. [ 491.466259][ T8754] m920x_read = error: -19 [ 491.476663][ T5868] hub 10-1:0.0: config failed, can't read hub descriptor (err -90) [ 491.486151][ T8754] dvb-usb: error while querying for an remote control event. [ 491.496182][ T8765] usb 2-1: USB disconnect, device number 77 [ 491.510496][ T8754] m920x_read = error: -19 [ 491.529749][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 491.620207][ T8754] m920x_read = error: -19 [ 491.624713][ T8754] dvb-usb: error while querying for an remote control event. [ 491.726143][ T5916] m920x_read = error: -19 [ 491.731365][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 491.767648][ T5916] m920x_read = error: -19 [ 491.782484][ T5916] dvb-usb: error while querying for an remote control event. [ 491.906639][ T5916] m920x_read = error: -19 [ 491.911083][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 491.921900][ T8754] m920x_read = error: -19 [ 491.940998][ T5868] hid-generic 0003:046D:C31C.0028: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.9-1/input0 [ 491.954502][ T8754] dvb-usb: error while querying for an remote control event. [ 492.026208][ T8765] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 492.087186][ T5868] m920x_read = error: -19 [ 492.091637][ T5868] dvb-usb: error while querying for an remote control event. [ 492.106066][T14093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.126759][T14093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.129335][ T8754] m920x_read = error: -19 [ 492.146047][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 492.198031][ T8765] usb 3-1: Using ep0 maxpacket: 32 [ 492.246071][ T8754] m920x_read = error: -19 [ 492.246447][ T8765] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 492.250517][ T8754] dvb-usb: error while querying for an remote control event. [ 492.288639][ T5936] usb 10-1: USB disconnect, device number 65 [ 492.308929][ T5188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.322298][ T8765] usb 3-1: config 4 has no interface number 0 [ 492.335716][ T5188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.337539][ T8754] m920x_read = error: -19 [ 492.359862][ T8765] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.367212][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 492.372764][ T5188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.387127][ T8765] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.407092][ T8765] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 492.419528][ T8765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.454434][ T5188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.464633][ T5188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.499402][ T8754] m920x_read = error: -19 [ 492.503857][ T8754] dvb-usb: error while querying for an remote control event. [ 492.518108][ T8765] hub 3-1:4.128: USB hub found [ 492.616452][ T5868] m920x_read = error: -19 [ 492.620981][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 492.629327][ T8754] m920x_read = error: -19 [ 492.643916][ T8754] dvb-usb: error while querying for an remote control event. [ 492.717760][ T8754] usb 7-1: USB disconnect, device number 97 [ 492.736007][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout [ 492.751513][ T8765] hub 3-1:4.128: 2 ports detected [ 492.776819][ T8765] hub 3-1:4.128: Using single TT (err -22) [ 492.786134][ T5868] m920x_read = error: -19 [ 492.796195][ T5868] dvb-usb: error while querying for an remote control event. [ 492.803676][ T5868] m920x_read = error: -19 [ 492.826575][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 492.906815][ T5868] m920x_read = error: -19 [ 492.911245][ T5868] dvb-usb: error while querying for an remote control event. [ 492.967328][ T8765] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 492.974688][ T8765] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 492.990988][ T5868] m920x_read = error: -19 [ 492.995395][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 493.004145][T14115] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2205'. [ 493.087393][ T8765] usb 3-1: USB disconnect, device number 61 [ 493.088304][ T5868] m920x_read = error: -19 [ 493.100416][T14106] chnl_net:caif_netlink_parms(): no params data found [ 493.119923][ T5868] dvb-usb: error while querying for an remote control event. [ 493.176250][ T5868] m920x_read = error: -19 [ 493.186282][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 493.236220][ T5868] m920x_read = error: -19 [ 493.250832][ T5868] dvb-usb: error while querying for an remote control event. [ 493.338599][T14106] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.356767][T14106] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.364217][T14106] bridge_slave_0: entered allmulticast mode [ 493.370537][ T8754] m920x_read = error: -19 [ 493.374923][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 493.383123][ T5916] m920x_read = error: -19 [ 493.388101][ T5916] dvb-usb: error while querying for an remote control event. [ 493.397881][T14106] bridge_slave_0: entered promiscuous mode [ 493.406934][T14106] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.417061][T14106] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.424767][T14106] bridge_slave_1: entered allmulticast mode [ 493.433301][T14106] bridge_slave_1: entered promiscuous mode [ 493.496051][ T5868] m920x_read = error: -19 [ 493.500541][ T5868] dvb-usb: error while querying for an remote control event. [ 493.512723][T14106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.536764][T14106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.566366][ T5868] m920x_read = error: -19 [ 493.570773][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 493.636680][ T5868] m920x_read = error: -19 [ 493.642768][T14106] team0: Port device team_slave_0 added [ 493.648484][ T5868] dvb-usb: error while querying for an remote control event. [ 493.679332][T14106] team0: Port device team_slave_1 added [ 493.746107][ T5868] m920x_read = error: -19 [ 493.756205][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 493.781950][T14123] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2206'. [ 493.796028][ T5868] m920x_read = error: -19 [ 493.800422][ T5868] dvb-usb: error while querying for an remote control event. [ 493.828508][T14106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.856025][T14106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.912322][T14106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.936404][ T5868] m920x_read = error: -19 [ 493.941234][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 493.966096][ T5868] m920x_read = error: -19 [ 493.970585][ T5868] dvb-usb: error while querying for an remote control event. [ 493.982067][T14106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.996045][T14106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.054604][T14106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.075466][T14123] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2206'. [ 494.116176][ T5868] m920x_read = error: -19 [ 494.120581][ T5868] dvb-usb: error while querying for an remote control event. [ 494.128219][ T5916] m920x_read = error: -19 [ 494.132585][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 494.136491][ T5936] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 494.246369][ T5916] m920x_read = error: -19 [ 494.250885][ T5916] dvb-usb: error while querying for an remote control event. [ 494.282418][T14106] hsr_slave_0: entered promiscuous mode [ 494.289618][T14106] hsr_slave_1: entered promiscuous mode [ 494.296142][ T5916] m920x_read = error: -19 [ 494.300529][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 494.301846][T14106] debugfs: 'hsr0' already exists in 'hsr' [ 494.326472][T14106] Cannot create hsr debugfs directory [ 494.346025][ T5936] usb 7-1: Using ep0 maxpacket: 16 [ 494.364226][ T5936] usb 7-1: unable to get BOS descriptor or descriptor too short [ 494.383505][ T5936] usb 7-1: config 255 has an invalid interface number: 48 but max is 0 [ 494.393325][ T5936] usb 7-1: config 255 has no interface number 0 [ 494.396156][ T5916] m920x_read = error: -19 [ 494.409735][ T5936] usb 7-1: config 255 interface 48 has no altsetting 0 [ 494.424447][ T5916] dvb-usb: error while querying for an remote control event. [ 494.444305][ T5936] usb 7-1: New USB device found, idVendor=2013, idProduct=024f, bcdDevice=e8.70 [ 494.453644][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.461942][ T5936] usb 7-1: Product: syz [ 494.466623][ T5936] usb 7-1: Manufacturer: syz [ 494.471244][ T5936] usb 7-1: SerialNumber: syz [ 494.476763][ T5916] m920x_read = error: -19 [ 494.481210][ T5868] usb 10-1: new full-speed USB device number 66 using dummy_hcd [ 494.491426][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 494.556410][ T5188] Bluetooth: hci2: command tx timeout [ 494.556860][ T5916] m920x_read = error: -19 [ 494.570139][ T5916] dvb-usb: error while querying for an remote control event. [ 494.645369][T14106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.658091][ T5916] m920x_read = error: -19 [ 494.662667][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 494.672461][ T5868] usb 10-1: not running at top speed; connect to a high speed hub [ 494.681952][ T5868] usb 10-1: config index 0 descriptor too short (expected 2322, got 18) [ 494.690057][T14125] bpf: Bad value for 'gid' [ 494.691286][ T5868] usb 10-1: config 95 has an invalid interface number: 1 but max is 0 [ 494.699076][T14125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.709026][ T5916] m920x_read = error: -19 [ 494.721218][ T5916] dvb-usb: error while querying for an remote control event. [ 494.721852][T14125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.736201][ T5868] usb 10-1: config 95 has no interface number 0 [ 494.745631][ T5868] usb 10-1: config 95 interface 1 has no altsetting 0 [ 494.749027][ T5936] em28xx 7-1:255.48: audio device (2013:024f): interface 48, class 1 [ 494.759652][ T5868] usb 10-1: string descriptor 0 read error: -22 [ 494.772346][ T5868] usb 10-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 494.777421][ T5936] usb 7-1: USB disconnect, device number 98 [ 494.796761][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.837713][ T5916] m920x_read = error: -19 [ 494.842113][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 494.845806][T14106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.866456][ T9] m920x_read = error: -19 [ 494.870843][ T9] dvb-usb: error while querying for an remote control event. [ 494.979984][T14106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.997059][ T9] m920x_read = error: -19 [ 495.001473][ T9] dvb-usb: error while querying for an remote control event. [ 495.036574][ T9] m920x_read = error: -19 [ 495.042012][ T9] dvb-usb: error -19 while querying for an remote control event. [ 495.091558][T14106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.126389][ T9] m920x_read = error: -19 [ 495.130884][ T9] dvb-usb: error while querying for an remote control event. [ 495.226161][ T5868] m920x_read = error: -19 [ 495.230559][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 495.242276][T14131] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2208'. [ 495.256244][ T5868] m920x_read = error: -19 [ 495.261609][ T5936] usb 10-1: USB disconnect, device number 66 [ 495.268318][ T5868] dvb-usb: error while querying for an remote control event. [ 495.276156][ T5238] Dev loop7: unable to read RDB block 3 [ 495.276803][ T5238] loop7: unable to read partition table [ 495.277035][ T5238] loop7: partition table beyond EOD, truncated [ 495.282541][T14106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 495.365101][T14106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.388030][T14106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.400144][T14106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 495.409171][ T9] m920x_read = error: -19 [ 495.413552][ T9] dvb-usb: error while querying for an remote control event. [ 495.421466][ T5868] m920x_read = error: -19 [ 495.425839][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 495.511187][T14106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.531209][T14106] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.546659][ T5868] m920x_read = error: -19 [ 495.551668][ T5868] dvb-usb: error while querying for an remote control event. [ 495.561721][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.568966][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.579000][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.586266][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.596300][ T5916] m920x_read = error: -19 [ 495.600705][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 495.686153][ T9] m920x_read = error: -19 [ 495.690632][ T9] dvb-usb: error while querying for an remote control event. [ 495.766493][ T9] m920x_read = error: -19 [ 495.770897][ T9] dvb-usb: error -19 while querying for an remote control event. [ 495.806223][ T9] m920x_read = error: -19 [ 495.813549][ T9] dvb-usb: error while querying for an remote control event. [ 495.826255][T14106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.925198][T14106] veth0_vlan: entered promiscuous mode [ 495.931837][ T9] m920x_read = error: -19 [ 495.941934][ T9] dvb-usb: error while querying for an remote control event. [ 495.950123][ T5916] m920x_read = error: -19 [ 495.954500][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 495.984075][T14106] veth1_vlan: entered promiscuous mode [ 496.049713][T14106] veth0_macvtap: entered promiscuous mode [ 496.063453][T14106] veth1_macvtap: entered promiscuous mode [ 496.089751][ T9] m920x_read = error: -19 [ 496.094281][ T9] dvb-usb: error while querying for an remote control event. [ 496.108141][T14106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.123423][T14106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.142164][ T3596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.151516][ T9] m920x_read = error: -19 [ 496.155899][ T9] dvb-usb: error -19 while querying for an remote control event. [ 496.170462][ T3596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.188700][ T3596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.213073][ T3492] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.226764][ T9] m920x_read = error: -19 [ 496.234433][ T9] dvb-usb: error while querying for an remote control event. [ 496.288663][ T8765] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 496.304976][T14156] netlink: 'syz.2.2214': attribute type 10 has an invalid length. [ 496.322091][T14156] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2214'. [ 496.336128][ T5916] usb 7-1: new full-speed USB device number 99 using dummy_hcd [ 496.345203][ T8754] m920x_read = error: -19 [ 496.350353][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 496.386616][ T8754] m920x_read = error: -19 [ 496.391278][ T8754] dvb-usb: error while querying for an remote control event. [ 496.457366][ T8765] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 496.478520][ T8765] usb 10-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 496.490052][ T8765] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 496.499467][ T8765] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 496.511274][ T8765] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 496.516199][ T8754] m920x_read = error: -19 [ 496.532899][ T8759] m920x_read = error: -19 [ 496.540111][ T5916] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 496.540913][ T8765] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 496.554460][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 496.562569][ T8765] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 496.570764][ T8754] dvb-usb: error while querying for an remote control event. [ 496.582285][ T5916] usb 7-1: config 0 has no interface number 0 [ 496.599710][ T5916] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 496.609006][ T8765] usb 10-1: Product: syz [ 496.609030][ T8765] usb 10-1: Manufacturer: syz [ 496.619748][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.629323][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.636226][ T5916] usb 7-1: Product: syz [ 496.640226][ T5188] Bluetooth: hci2: command tx timeout [ 496.641364][ T5916] usb 7-1: Manufacturer: syz [ 496.641385][ T5916] usb 7-1: SerialNumber: syz [ 496.662419][ T8765] cdc_wdm 10-1:1.0: skipping garbage [ 496.673316][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.691217][ T5916] usb 7-1: config 0 descriptor?? [ 496.694643][ T8765] cdc_wdm 10-1:1.0: skipping garbage [ 496.714284][ T8765] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 496.716490][ T8759] m920x_read = error: -19 [ 496.724793][ T8765] cdc_wdm 10-1:1.0: Unknown control protocol [ 496.731657][ T8759] dvb-usb: error while querying for an remote control event. [ 496.764149][ T8759] m920x_read = error: -19 [ 496.769852][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 496.784063][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.792366][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.878034][ T8759] m920x_read = error: -19 [ 496.893101][ T8759] dvb-usb: error while querying for an remote control event. [ 496.915186][T14149] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2210'. [ 496.924642][T14158] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 496.937374][ T8759] m920x_read = error: -19 [ 496.941770][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 496.953140][ T5916] usb 7-1: Firmware version (0.0) predates our first public release. [ 496.972491][ T5916] usb 7-1: Please update to version 0.2 or newer [ 497.016064][ T8759] m920x_read = error: -19 [ 497.046739][ T8759] dvb-usb: error while querying for an remote control event. [ 497.072802][T14152] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2210'. [ 497.083212][T14152] nbd: nbd64 already in use [ 497.146393][ T8759] m920x_read = error: -19 [ 497.157935][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 497.187865][ T8759] m920x_read = error: -19 [ 497.192301][ T8759] dvb-usb: error while querying for an remote control event. [ 497.326928][ T8759] m920x_read = error: -19 [ 497.337993][ T8759] dvb-usb: error while querying for an remote control event. [ 497.353261][ T5870] udevd[5870]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 497.374138][ T8759] m920x_read = error: -19 [ 497.391045][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 497.405163][ C0] cdc_wdm 10-1:1.0: unknown notification 2 received: index 8192 len 0 [ 497.486151][ T10] m920x_read = error: -19 [ 497.490702][ T10] dvb-usb: error while querying for an remote control event. [ 497.576116][ T10] m920x_read = error: -19 [ 497.582244][ T10] dvb-usb: error -19 while querying for an remote control event. [ 497.616443][ T10] m920x_read = error: -19 [ 497.622153][ T10] dvb-usb: error while querying for an remote control event. [ 497.728611][ T8759] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 497.737380][ T10] m920x_read = error: -19 [ 497.743393][ T10] dvb-usb: error while querying for an remote control event. [ 497.751910][ T8754] m920x_read = error: -19 [ 497.757491][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 497.866218][ T8754] m920x_read = error: -19 [ 497.870762][ T8759] usb 2-1: device descriptor read/64, error -71 [ 497.877450][ T8754] dvb-usb: error while querying for an remote control event. [ 497.918008][ T8754] m920x_read = error: -19 [ 497.927089][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 497.997954][ T10] m920x_read = error: -19 [ 498.004778][ T10] dvb-usb: error while querying for an remote control event. [ 498.097211][ T5916] m920x_read = error: -19 [ 498.101757][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 498.129004][ T5916] m920x_read = error: -19 [ 498.133505][ T5916] dvb-usb: error while querying for an remote control event. [ 498.141747][ T8759] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 498.256601][ T5916] m920x_read = error: -19 [ 498.262624][ T5916] dvb-usb: error while querying for an remote control event. [ 498.270299][ T8754] m920x_read = error: -19 [ 498.275144][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 498.283119][ T8759] usb 2-1: device descriptor read/64, error -71 [ 498.306099][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 498.377580][ T8754] m920x_read = error: -19 [ 498.382124][ T8754] dvb-usb: error while querying for an remote control event. [ 498.407459][ T8759] usb usb2-port1: attempt power cycle [ 498.446828][ T8754] m920x_read = error: -19 [ 498.451308][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 498.481618][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 498.489956][ T10] usb 3-1: config 0 has no interface number 0 [ 498.496331][ T5916] m920x_read = error: -19 [ 498.500941][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.511971][ T5916] dvb-usb: error while querying for an remote control event. [ 498.519470][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.529434][ T10] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.542329][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 498.551951][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.564165][ T10] usb 3-1: config 0 descriptor?? [ 498.626160][ T5916] m920x_read = error: -19 [ 498.630655][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 498.638731][ T8754] m920x_read = error: -19 [ 498.643157][ T8754] dvb-usb: error while querying for an remote control event. [ 498.716171][ T5188] Bluetooth: hci2: command tx timeout [ 498.766127][ T8759] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 498.774259][ T8754] m920x_read = error: -19 [ 498.778795][ T8754] dvb-usb: error while querying for an remote control event. [ 498.810564][ T8754] m920x_read = error: -19 [ 498.815186][ T8759] usb 2-1: device descriptor read/8, error -71 [ 498.821567][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 498.896422][ T8754] m920x_read = error: -19 [ 498.901075][ T8754] dvb-usb: error while querying for an remote control event. [ 498.970645][ T5929] usb 10-1: USB disconnect, device number 67 [ 498.986294][ T8754] m920x_read = error: -19 [ 498.996014][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 499.028380][ T8754] m920x_read = error: -19 [ 499.043086][ T8754] dvb-usb: error while querying for an remote control event. [ 499.067816][T14183] netlink: 'syz.9.2222': attribute type 12 has an invalid length. [ 499.096454][ T8759] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 499.099519][ T8768] usb 7-1: USB disconnect, device number 99 [ 499.128081][ T8759] usb 2-1: device descriptor read/8, error -71 [ 499.176154][ T8754] m920x_read = error: -19 [ 499.181054][ T8754] dvb-usb: error while querying for an remote control event. [ 499.189456][ T10] usbhid 3-1:0.1: can't add hid device: -71 [ 499.199508][ T5916] m920x_read = error: -19 [ 499.203898][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 499.222392][ T10] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 499.267181][ T8759] usb usb2-port1: unable to enumerate USB device [ 499.307616][ T10] usb 3-1: USB disconnect, device number 62 [ 499.321160][ T5916] hid-generic 0005:16BF:5505.0029: unknown main item tag 0x0 [ 499.350712][ T8759] m920x_read = error: -19 [ 499.361009][ T8759] dvb-usb: error while querying for an remote control event. [ 499.386662][ T8754] m920x_read = error: -19 [ 499.394557][ T5916] hid-generic 0005:16BF:5505.0029: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 499.405842][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 499.516444][ T5916] m920x_read = error: -19 [ 499.521081][ T5916] dvb-usb: error while querying for an remote control event. [ 499.576231][ T5916] m920x_read = error: -19 [ 499.583902][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 499.636416][ T5916] m920x_read = error: -19 [ 499.640995][ T5916] dvb-usb: error while querying for an remote control event. [ 499.646310][ T5929] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 499.756203][ T8754] m920x_read = error: -19 [ 499.775278][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 499.783420][ T10] m920x_read = error: -19 [ 499.792093][ T10] dvb-usb: error while querying for an remote control event. [ 499.821969][ T5929] usb 10-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 499.856036][ T5929] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.887919][ T5929] usb 10-1: config 0 descriptor?? [ 499.906755][ T10] m920x_read = error: -19 [ 499.911153][ T10] dvb-usb: error while querying for an remote control event. [ 499.931914][ T5916] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 499.966267][ T10] m920x_read = error: -19 [ 499.970669][ T10] dvb-usb: error -19 while querying for an remote control event. [ 500.066301][ T10] m920x_read = error: -19 [ 500.070711][ T10] dvb-usb: error while querying for an remote control event. [ 500.101134][ T5929] hid (null): invalid report_size 134283244 [ 500.117016][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 500.148869][ T5916] usb 7-1: unable to get BOS descriptor or descriptor too short [ 500.169249][ T5929] uclogic 0003:5543:0003.002A: invalid report_size 134283244 [ 500.185704][ T10] m920x_read = error: -19 [ 500.195035][ T10] dvb-usb: error -19 while querying for an remote control event. [ 500.202310][ T5929] uclogic 0003:5543:0003.002A: item 0 4 1 7 parsing failed [ 500.216487][ T8759] m920x_read = error: -19 [ 500.221580][ T8759] dvb-usb: error while querying for an remote control event. [ 500.231443][ T5929] uclogic 0003:5543:0003.002A: parse failed [ 500.236101][ T5916] usb 7-1: config 2 has an invalid interface number: 151 but max is 0 [ 500.261170][ T5929] uclogic 0003:5543:0003.002A: probe with driver uclogic failed with error -22 [ 500.276156][ T5916] usb 7-1: config 2 has no interface number 0 [ 500.282349][ T5916] usb 7-1: config 2 interface 151 has no altsetting 0 [ 500.316340][ T5916] usb 7-1: string descriptor 0 read error: -22 [ 500.322680][ T5916] usb 7-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=40.1f [ 500.324761][ T5929] usb 10-1: USB disconnect, device number 68 [ 500.352357][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.386251][ T8759] m920x_read = error: -19 [ 500.394612][ T8759] dvb-usb: error while querying for an remote control event. [ 500.422219][ T10] m920x_read = error: -19 [ 500.427013][ T10] dvb-usb: error -19 while querying for an remote control event. [ 500.546216][ T8754] m920x_read = error: -19 [ 500.551141][ T8754] dvb-usb: error while querying for an remote control event. [ 500.590184][ T8754] m920x_read = error: -19 [ 500.597019][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 500.660700][ T5916] mos7840 7-1:2.151: required endpoints missing [ 500.671371][ T5916] usb 7-1: USB disconnect, device number 100 [ 500.697396][ T8754] m920x_read = error: -19 [ 500.702687][ T8754] dvb-usb: error while querying for an remote control event. [ 500.757243][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 500.776187][ T5929] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 500.776258][ T8754] m920x_read = error: -19 [ 500.797004][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 500.799155][ T5188] Bluetooth: hci2: command tx timeout [ 500.826548][ T8754] m920x_read = error: -19 [ 500.830957][ T8754] dvb-usb: error while querying for an remote control event. [ 500.919659][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 500.931224][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.938635][ T5929] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 500.948054][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 500.957607][ T5929] usb 10-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 500.959586][ T5916] m920x_read = error: -19 [ 500.979599][ T5929] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 500.982900][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.996154][ T5929] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 501.004429][ T5916] dvb-usb: error while querying for an remote control event. [ 501.019171][ T8754] m920x_read = error: -19 [ 501.023650][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 501.034265][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 501.044160][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 501.052374][ T5929] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 501.064092][ T10] usb 3-1: Product: syz [ 501.064268][ T5929] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 501.068688][ T10] usb 3-1: Manufacturer: syz [ 501.096700][ T5929] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 501.102829][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 501.111616][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 501.115202][ T5929] usb 10-1: Product: syz [ 501.122263][ T5929] usb 10-1: Manufacturer: syz [ 501.123296][ T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 501.139277][ T5929] cdc_wdm 10-1:1.0: skipping garbage [ 501.142091][ T5916] m920x_read = error: -19 [ 501.149829][ T5929] cdc_wdm 10-1:1.0: skipping garbage [ 501.150489][ T5916] dvb-usb: error while querying for an remote control event. [ 501.177032][ T5929] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 501.196488][ T10] m920x_read = error: -19 [ 501.201104][ T5929] cdc_wdm 10-1:1.0: Unknown control protocol [ 501.204541][ T10] dvb-usb: error -19 while querying for an remote control event. [ 501.286311][ T10] m920x_read = error: -19 [ 501.295998][ T10] dvb-usb: error while querying for an remote control event. [ 501.318103][ T5929] usb 3-1: USB disconnect, device number 63 [ 501.354275][T14221] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2231'. [ 501.388067][ T10] m920x_read = error: -19 [ 501.392482][ T10] dvb-usb: error -19 while querying for an remote control event. [ 501.423427][ T5916] m920x_read = error: -19 [ 501.434042][T14235] syzkaller1: entered promiscuous mode [ 501.440343][ T5916] dvb-usb: error while querying for an remote control event. [ 501.479481][T14223] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2231'. [ 501.488802][T14235] syzkaller1: entered allmulticast mode [ 501.522868][T14235] sctp: [Deprecated]: syz.1.2243 (pid 14235) Use of int in maxseg socket option. [ 501.522868][T14235] Use struct sctp_assoc_value instead [ 501.546664][T14223] nbd: device at index 64 is going down [ 501.576313][ T5916] m920x_read = error: -19 [ 501.580715][ T5916] dvb-usb: error while querying for an remote control event. [ 501.588714][ T10] m920x_read = error: -19 [ 501.593098][ T10] dvb-usb: error -19 while querying for an remote control event. [ 501.723407][ T5916] m920x_read = error: -19 [ 501.731001][ T5916] dvb-usb: error while querying for an remote control event. [ 501.785770][ T5870] udevd[5870]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 501.796414][ T5916] m920x_read = error: -19 [ 501.800826][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 501.886375][ T5916] m920x_read = error: -19 [ 501.890785][ T5916] dvb-usb: error while querying for an remote control event. [ 501.900032][ C0] cdc_wdm 10-1:1.0: unknown notification 2 received: index 8192 len 0 [ 501.948451][T14248] tipc: Started in network mode [ 501.953579][T14248] tipc: Node identity ac1414aa, cluster identity 4711 [ 501.969212][T14248] tipc: Enabled bearer , priority 10 [ 501.986074][ T5916] m920x_read = error: -19 [ 501.990513][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 502.006641][ T5929] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 502.038498][ T5916] m920x_read = error: -19 [ 502.042967][ T5916] dvb-usb: error while querying for an remote control event. [ 502.166332][ T5916] m920x_read = error: -19 [ 502.170848][ T5916] dvb-usb: error while querying for an remote control event. [ 502.178402][ T10] m920x_read = error: -19 [ 502.181820][ T5929] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 502.182795][ T10] dvb-usb: error -19 while querying for an remote control event. [ 502.213908][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.242791][ T5929] usb 7-1: Product: syz [ 502.253607][ T5929] usb 7-1: Manufacturer: syz [ 502.269961][ T5929] usb 7-1: SerialNumber: syz [ 502.322138][ T5929] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 502.355525][ T10] m920x_read = error: -19 [ 502.365997][ T10] dvb-usb: error while querying for an remote control event. [ 502.418404][ T5916] m920x_read = error: -19 [ 502.422899][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 502.475423][ T8765] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 502.516668][ T5916] m920x_read = error: -19 [ 502.521109][ T5916] dvb-usb: error while querying for an remote control event. [ 502.622125][ T5916] m920x_read = error: -19 [ 502.630511][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 502.656327][ T8754] m920x_read = error: -19 [ 502.660832][ T8754] dvb-usb: error while querying for an remote control event. [ 502.686256][ T10] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 502.767374][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.789091][ T8754] m920x_read = error: -19 [ 502.794500][ T8754] dvb-usb: error while querying for an remote control event. [ 502.810537][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.826341][ T8754] m920x_read = error: -19 [ 502.836397][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 502.883133][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 502.902595][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 502.926446][ T8754] m920x_read = error: -19 [ 502.930935][ T8754] dvb-usb: error while querying for an remote control event. [ 502.938728][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 502.948109][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 502.960448][ T10] usb 2-1: SerialNumber: syz [ 502.999162][ T10] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 503.008051][ T8754] m920x_read = error: -19 [ 503.016082][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 503.041857][ T10] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 503.066446][ T8754] m920x_read = error: -19 [ 503.073116][ T8754] dvb-usb: error while querying for an remote control event. [ 503.086391][ T8768] tipc: Node number set to 2886997162 [ 503.200783][ T10] m920x_read = error: -19 [ 503.211826][ T10] dvb-usb: error -19 while querying for an remote control event. [ 503.220976][ T5916] m920x_read = error: -19 [ 503.225382][ T5916] dvb-usb: error while querying for an remote control event. [ 503.268505][ T8754] usb 2-1: USB disconnect, device number 82 [ 503.347928][ T5929] usb 7-1: USB disconnect, device number 101 [ 503.416252][ T5916] m920x_read = error: -19 [ 503.420688][ T5916] dvb-usb: error while querying for an remote control event. [ 503.446429][ T5916] m920x_read = error: -19 [ 503.450979][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 503.469037][ T5916] usb 10-1: USB disconnect, device number 69 [ 503.516328][ T8765] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 503.523561][ T8765] ath9k_htc: Failed to initialize the device [ 503.556105][ T8754] m920x_read = error: -19 [ 503.560653][ T8754] dvb-usb: error while querying for an remote control event. [ 503.560743][ T5929] usb 7-1: ath9k_htc: USB layer deinitialized [ 503.606023][ T5936] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 503.616150][ T8754] m920x_read = error: -19 [ 503.620544][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 503.696777][ T8754] m920x_read = error: -19 [ 503.701601][ T8754] dvb-usb: error while querying for an remote control event. [ 503.756253][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 503.763385][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.783207][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.793451][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 503.804714][ T8754] m920x_read = error: -19 [ 503.811112][ T5936] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 503.818150][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 503.827920][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.846477][ T10] m920x_read = error: -19 [ 503.851013][ T10] dvb-usb: error while querying for an remote control event. [ 503.862585][ T5936] usb 3-1: config 0 descriptor?? [ 503.966333][ T10] m920x_read = error: -19 [ 503.970790][ T10] dvb-usb: error while querying for an remote control event. [ 504.006224][ T5916] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 504.016185][ T8754] m920x_read = error: -19 [ 504.021093][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 504.096505][ T8754] m920x_read = error: -19 [ 504.102015][ T8754] dvb-usb: error while querying for an remote control event. [ 504.156125][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 504.186268][ T8754] m920x_read = error: -19 [ 504.190678][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 504.198593][ T5916] usb 10-1: Using ep0 maxpacket: 32 [ 504.211227][ T5916] usb 10-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.228188][ T8754] m920x_read = error: -19 [ 504.232588][ T8754] dvb-usb: error while querying for an remote control event. [ 504.241523][ T5916] usb 10-1: config 1 interface 0 has no altsetting 0 [ 504.254030][ T5916] usb 10-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 504.264024][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.269140][T14287] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2253'. [ 504.272418][ T5916] usb 10-1: Product: syz [ 504.291111][ T5916] usb 10-1: Manufacturer: syz [ 504.295852][ T5916] usb 10-1: SerialNumber: syz [ 504.322374][ T5936] hid-multitouch 0003:0457:07DA.002B: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 504.336058][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 504.354533][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.365729][ T5868] m920x_read = error: -19 [ 504.373567][ T5868] dvb-usb: error while querying for an remote control event. [ 504.381876][ T8759] m920x_read = error: -19 [ 504.387389][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 504.395414][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.405618][ T10] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 504.414996][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.427795][ T10] usb 2-1: config 0 descriptor?? [ 504.496377][ T8759] usb 3-1: USB disconnect, device number 64 [ 504.503597][ T5868] m920x_read = error: -19 [ 504.528506][ T5868] dvb-usb: error while querying for an remote control event. [ 504.567022][ T5868] m920x_read = error: -19 [ 504.571450][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 504.594077][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input55 [ 504.604706][ T8754] usb 7-1: new full-speed USB device number 102 using dummy_hcd [ 504.614364][ T5223] bcm5974 10-1:1.0: could not read from device [ 504.624787][ T5223] bcm5974 10-1:1.0: could not read from device [ 504.639916][ T5916] usb 10-1: USB disconnect, device number 70 [ 504.652599][ T5868] m920x_read = error: -19 [ 504.660610][ T5868] dvb-usb: error while querying for an remote control event. [ 504.747277][ T5868] m920x_read = error: -19 [ 504.751720][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 504.776209][ T5868] m920x_read = error: -19 [ 504.781232][ T5868] dvb-usb: error while querying for an remote control event. [ 504.789410][ T8754] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.800100][ T8754] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.810595][ T8754] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 504.820003][ T8754] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 504.828154][ T8754] usb 7-1: SerialNumber: syz [ 504.845451][ T8754] usb 7-1: 0:2 : does not exist [ 504.856808][ T10] glorious 0003:258A:0033.002C: reserved main item tag 0xe [ 504.873053][ T10] glorious 0003:258A:0033.002C: hidraw1: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.1-1/input0 [ 504.906094][ T10] m920x_read = error: -19 [ 504.910582][ T10] dvb-usb: error while querying for an remote control event. [ 504.918745][ T5916] m920x_read = error: -19 [ 504.923151][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 505.036603][ T5916] m920x_read = error: -19 [ 505.044389][ T5916] dvb-usb: error while querying for an remote control event. [ 505.096231][ T8754] m920x_read = error: -19 [ 505.115072][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 505.187111][ T8754] m920x_read = error: -19 [ 505.191513][ T8754] dvb-usb: error while querying for an remote control event. [ 505.257869][ T5936] usb 7-1: USB disconnect, device number 102 [ 505.296418][ T8754] m920x_read = error: -19 [ 505.300837][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 505.327274][ T5916] m920x_read = error: -19 [ 505.331790][ T5916] dvb-usb: error while querying for an remote control event. [ 505.457514][ T8754] m920x_read = error: -19 [ 505.461911][ T8754] dvb-usb: error while querying for an remote control event. [ 505.506413][ T8754] m920x_read = error: -19 [ 505.511415][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 505.556194][ T8765] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 505.580552][ T8754] m920x_read = error: -19 [ 505.585105][ T8754] dvb-usb: error while querying for an remote control event. [ 505.593096][ T10] usb 2-1: USB disconnect, device number 83 [ 505.666343][ T5916] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 505.676096][ T8754] m920x_read = error: -19 [ 505.680485][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 505.706380][ T8754] m920x_read = error: -19 [ 505.710926][ T8754] dvb-usb: error while querying for an remote control event. [ 505.728837][ T8765] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 505.743489][ T8765] usb 10-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 505.753973][ T8765] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 505.775762][ T8765] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 505.791007][ T8765] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 505.801949][T14309] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2261'. [ 505.804835][ T8765] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 505.811752][T14309] unsupported nla_type 224 [ 505.827138][ T8765] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 505.835267][ T8765] usb 10-1: Product: syz [ 505.836294][ T10] m920x_read = error: -19 [ 505.844089][ T10] dvb-usb: error while querying for an remote control event. [ 505.846164][ T8765] usb 10-1: Manufacturer: syz [ 505.852849][ T8754] m920x_read = error: -19 [ 505.868807][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.869154][ T8765] cdc_wdm 10-1:1.0: skipping garbage [ 505.884091][ T8765] cdc_wdm 10-1:1.0: skipping garbage [ 505.888986][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 505.899152][ T5916] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 505.911742][ T8765] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 505.918472][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.947988][ T5916] usb 3-1: config 0 descriptor?? [ 505.950454][ T8765] cdc_wdm 10-1:1.0: Unknown control protocol [ 505.991462][ T8754] m920x_read = error: -19 [ 505.995889][ T8754] dvb-usb: error while querying for an remote control event. [ 506.055412][ T30] audit: type=1804 audit(1757145896.468:123): pid=14313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2263" name="/newroot/14/bus/file0" dev="overlay" ino=99 res=1 errno=0 [ 506.076196][ T8754] m920x_read = error: -19 [ 506.086333][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 506.111818][T14296] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2256'. [ 506.118042][T14313] netlink: 'syz.1.2263': attribute type 10 has an invalid length. [ 506.134675][T14313] lo: entered promiscuous mode [ 506.147538][ T8754] m920x_read = error: -19 [ 506.151973][ T8754] dvb-usb: error while querying for an remote control event. [ 506.153624][T14313] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 506.199648][T14299] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2256'. [ 506.256138][ T8754] m920x_read = error: -19 [ 506.260578][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 506.269041][ T10] m920x_read = error: -19 [ 506.273448][ T10] dvb-usb: error while querying for an remote control event. [ 506.388071][ T10] m920x_read = error: -19 [ 506.392542][ T10] dvb-usb: error while querying for an remote control event. [ 506.436112][ T10] m920x_read = error: -19 [ 506.440598][ T10] dvb-usb: error -19 while querying for an remote control event. [ 506.470827][ T5870] udevd[5870]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 506.516307][ T8754] m920x_read = error: -19 [ 506.520788][ T8754] dvb-usb: error while querying for an remote control event. [ 506.590404][ T5916] usbhid 3-1:0.0: can't add hid device: -71 [ 506.606691][ T5916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 506.606716][ C1] cdc_wdm 10-1:1.0: unknown notification 2 received: index 8192 len 0 [ 506.624632][ T5916] usb 3-1: USB disconnect, device number 65 [ 506.639304][ T10] m920x_read = error: -19 [ 506.643763][ T10] dvb-usb: error while querying for an remote control event. [ 506.651894][ T8754] m920x_read = error: -19 [ 506.659987][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 506.777134][ T10] m920x_read = error: -19 [ 506.781596][ T10] dvb-usb: error while querying for an remote control event. [ 506.801930][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.826783][ T5916] m920x_read = error: -19 [ 506.831366][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 506.896083][ T5916] m920x_read = error: -19 [ 506.903575][ T5916] dvb-usb: error while querying for an remote control event. [ 506.966042][ T10] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 506.999533][ T5916] m920x_read = error: -19 [ 507.003941][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 507.018607][ T5916] m920x_read = error: -19 [ 507.022998][ T5916] dvb-usb: error while querying for an remote control event. [ 507.130695][ T10] usb 7-1: config 0 has an invalid interface number: 139 but max is 0 [ 507.140199][ T10] usb 7-1: config 0 has no interface number 0 [ 507.150876][ T5916] m920x_read = error: -19 [ 507.155268][ T5916] dvb-usb: error while querying for an remote control event. [ 507.165550][ T10] usb 7-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 507.177370][ T8754] m920x_read = error: -19 [ 507.181768][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 507.191721][ T10] usb 7-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 507.204576][ T10] usb 7-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 507.216856][ T10] usb 7-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 507.232285][ T10] usb 7-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 507.241561][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.255279][ T10] usb 7-1: Product: syz [ 507.259703][ T10] usb 7-1: Manufacturer: syz [ 507.264330][ T10] usb 7-1: SerialNumber: syz [ 507.274942][ T10] usb 7-1: config 0 descriptor?? [ 507.281774][T14333] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 507.294214][T14333] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 507.301683][ T5868] m920x_read = error: -19 [ 507.306333][ T5868] dvb-usb: error while querying for an remote control event. [ 507.359725][ T5868] m920x_read = error: -19 [ 507.364240][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 507.416079][ T849] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 507.417542][ T5868] m920x_read = error: -19 [ 507.428633][ T5868] dvb-usb: error while querying for an remote control event. [ 507.515366][ T10] mct_u232 7-1:0.139: MCT U232 converter detected [ 507.528829][ T10] usb 7-1: MCT U232 converter now attached to ttyUSB0 [ 507.536104][ T5868] m920x_read = error: -19 [ 507.540485][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 507.550933][ T8754] m920x_read = error: -19 [ 507.555315][ T8754] dvb-usb: error while querying for an remote control event. [ 507.565266][ T10] usb 7-1: USB disconnect, device number 103 [ 507.576580][ T849] usb 3-1: Using ep0 maxpacket: 32 [ 507.576981][ T10] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 507.598182][ T10] mct_u232 7-1:0.139: device disconnected [ 507.600837][ T849] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 507.614309][ T849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.638595][ T849] usb 3-1: config 0 descriptor?? [ 507.676145][ T5868] m920x_read = error: -19 [ 507.680581][ T5868] dvb-usb: error while querying for an remote control event. [ 507.726779][ T5868] m920x_read = error: -19 [ 507.731190][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 507.796258][ T10] m920x_read = error: -19 [ 507.800761][ T10] dvb-usb: error while querying for an remote control event. [ 507.849622][ T849] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 507.859667][ T849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 507.870793][ T849] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 507.878254][ T849] usb 3-1: media controller created [ 507.896337][ T10] m920x_read = error: -19 [ 507.900765][ T10] dvb-usb: error -19 while querying for an remote control event. [ 507.907020][ T849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.926660][ T10] m920x_read = error: -19 [ 507.935182][ T10] dvb-usb: error while querying for an remote control event. [ 508.060780][ T10] m920x_read = error: -19 [ 508.065256][ T10] dvb-usb: error while querying for an remote control event. [ 508.074000][ T8754] m920x_read = error: -19 [ 508.084957][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 508.186476][ T8754] m920x_read = error: -19 [ 508.190896][ T8754] dvb-usb: error while querying for an remote control event. [ 508.266048][ T8754] m920x_read = error: -19 [ 508.270482][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 508.291070][ T5936] usb 10-1: USB disconnect, device number 71 [ 508.317200][ T8754] m920x_read = error: -19 [ 508.321590][ T8754] dvb-usb: error while querying for an remote control event. [ 508.403790][ T30] audit: type=1804 audit(1757145898.818:124): pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2275" name="/newroot/183/bus/file0" dev="overlay" ino=976 res=1 errno=0 [ 508.431210][T14345] netlink: 'syz.9.2275': attribute type 10 has an invalid length. [ 508.440001][T14345] lo: entered promiscuous mode [ 508.444985][T14345] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 508.459483][T14335] netlink: 'syz.2.2270': attribute type 25 has an invalid length. [ 508.466648][ T8754] m920x_read = error: -19 [ 508.473069][ T849] az6027: usb out operation failed. (-71) [ 508.473106][ T849] stb0899_attach: Driver disabled by Kconfig [ 508.473119][ T849] az6027: no front-end attached [ 508.473119][ T849] [ 508.474345][ T8754] dvb-usb: error while querying for an remote control event. [ 508.474432][ T8754] m920x_read = error: -19 [ 508.474456][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 508.476166][ T849] az6027: usb out operation failed. (-71) [ 508.476187][ T849] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 508.478477][ T849] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input56 [ 508.480869][ T849] dvb-usb: schedule remote query interval to 400 msecs. [ 508.480892][ T849] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 508.496370][ T849] usb 3-1: USB disconnect, device number 66 [ 508.576167][ T8754] m920x_read = error: -19 [ 508.592425][ T8754] dvb-usb: error while querying for an remote control event. [ 508.626144][ T8754] m920x_read = error: -19 [ 508.630574][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 508.685468][ T849] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 508.718380][ T8754] m920x_read = error: -19 [ 508.722791][ T8754] dvb-usb: error while querying for an remote control event. [ 508.827093][ T8754] m920x_read = error: -19 [ 508.831586][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 508.858062][ T8754] m920x_read = error: -19 [ 508.866189][ T8754] dvb-usb: error while querying for an remote control event. [ 508.946039][ T5936] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 508.986549][ T8754] m920x_read = error: -19 [ 508.991472][ T8754] dvb-usb: error while querying for an remote control event. [ 509.010296][ T10] m920x_read = error: -19 [ 509.014727][ T10] dvb-usb: error -19 while querying for an remote control event. [ 509.097881][ T5936] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 509.136360][ T8754] m920x_read = error: -19 [ 509.140781][ T8754] dvb-usb: error while querying for an remote control event. [ 509.140891][ T5936] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 509.164904][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.180294][ T8754] m920x_read = error: -19 [ 509.190830][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 509.208958][ T5936] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 509.276480][ T10] m920x_read = error: -19 [ 509.280878][ T10] dvb-usb: error while querying for an remote control event. [ 509.376277][ T5868] m920x_read = error: -19 [ 509.380688][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 509.416164][ T10] m920x_read = error: -19 [ 509.420529][ T10] dvb-usb: error while querying for an remote control event. [ 509.526241][ T8754] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 509.546092][ T10] m920x_read = error: -19 [ 509.550477][ T10] dvb-usb: error while querying for an remote control event. [ 509.557991][ T5916] m920x_read = error: -19 [ 509.562367][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 509.570267][ T5868] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 509.686743][ T8759] m920x_read = error: -19 [ 509.691349][ T8759] dvb-usb: error while querying for an remote control event. [ 509.700530][ T8754] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 509.710072][ T8754] usb 10-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 509.720630][ T8754] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 509.730166][ T8754] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 509.741585][ T8759] m920x_read = error: -19 [ 509.746794][ T8754] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 509.758281][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 509.764199][T14376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.776360][ T8754] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 509.778420][T14376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.790568][ T8754] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 509.803969][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.814748][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.822877][ T8754] usb 10-1: Product: syz [ 509.829355][ T8759] m920x_read = error: -19 [ 509.833737][ T8759] dvb-usb: error while querying for an remote control event. [ 509.841806][ T8754] usb 10-1: Manufacturer: syz [ 509.846996][ T5868] usb 3-1: Product: syz [ 509.851197][ T5868] usb 3-1: Manufacturer: syz [ 509.858226][ T5868] usb 3-1: SerialNumber: syz [ 509.878988][ T8754] cdc_wdm 10-1:1.0: skipping garbage [ 509.884340][ T8754] cdc_wdm 10-1:1.0: skipping garbage [ 509.914996][ T8754] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 509.924699][ T8754] cdc_wdm 10-1:1.0: Unknown control protocol [ 509.931060][ T8759] m920x_read = error: -19 [ 509.935549][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 509.962791][ T30] audit: type=1804 audit(1757145900.378:125): pid=14380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2287" name="/newroot/338/bus/file0" dev="overlay" ino=1790 res=1 errno=0 [ 509.991052][T14380] netlink: 'syz.6.2287': attribute type 10 has an invalid length. [ 509.992037][ T8759] m920x_read = error: -19 [ 510.001471][T14380] ªªªªªª: entered promiscuous mode [ 510.009856][T14380] bond0: (slave ªªªªªª): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 510.016466][ T8759] dvb-usb: error while querying for an remote control event. [ 510.087152][T14369] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2284'. [ 510.117992][ T8759] m920x_read = error: -19 [ 510.122466][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 510.151307][ T8759] m920x_read = error: -19 [ 510.158634][ T8759] dvb-usb: error while querying for an remote control event. [ 510.177537][T14387] program syz.6.2289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.191339][T14387] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 510.202507][T14389] program syz.6.2289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.211983][T14372] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2284'. [ 510.224033][ T8754] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 510.233533][T14389] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 510.244587][ T5936] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 510.253250][ T5936] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 510.257742][T14372] nbd: device at index 64 is going down [ 510.265306][ T5936] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 510.283803][ T5936] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 510.296446][ T8759] m920x_read = error: -19 [ 510.300874][ T8759] dvb-usb: error while querying for an remote control event. [ 510.303279][ T5936] usb 7-1: USB disconnect, device number 104 [ 510.308602][ T5916] m920x_read = error: -19 [ 510.336598][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 510.416567][ T8754] usb 2-1: Using ep0 maxpacket: 16 [ 510.429551][ T8754] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 510.463031][ T8754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 510.474346][ T5916] m920x_read = error: -19 [ 510.481976][ T5916] dvb-usb: error while querying for an remote control event. [ 510.509410][T14399] loop6: detected capacity change from 0 to 63 [ 510.519756][ T8754] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 510.533247][ T8705] buffer_io_error: 54 callbacks suppressed [ 510.533266][ T8705] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.535972][ T8754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.558274][ T5916] m920x_read = error: -19 [ 510.561428][T14399] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.562707][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 510.578800][ C1] cdc_wdm 10-1:1.0: unknown notification 2 received: index 8192 len 0 [ 510.593914][ T8705] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.614446][ T8705] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.623867][T14401] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.626162][ T8759] m920x_read = error: -19 [ 510.638197][ T8754] usb 2-1: Product: syz [ 510.642452][ T8754] usb 2-1: Manufacturer: syz [ 510.657518][ T8759] dvb-usb: error while querying for an remote control event. [ 510.660432][ T8705] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.672966][ T5870] udevd[5870]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 510.685003][ T8754] usb 2-1: SerialNumber: syz [ 510.693079][ T8705] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.716856][ T8754] usb 2-1: config 0 descriptor?? [ 510.719629][T14399] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.732936][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.742145][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.763772][T14399] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.772134][ T8754] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 510.772175][ T8754] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 510.776146][ T8759] m920x_read = error: -19 [ 510.792411][T14399] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.794958][ T8759] dvb-usb: error while querying for an remote control event. [ 510.814265][ T5916] m920x_read = error: -19 [ 510.818915][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 510.965517][ T8759] m920x_read = error: -19 [ 510.974004][ T8759] dvb-usb: error while querying for an remote control event. [ 510.996083][ T8759] m920x_read = error: -19 [ 511.000691][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 511.012927][ T5868] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 511.019553][ T5868] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 511.096620][ T8759] m920x_read = error: -19 [ 511.105968][ T8759] dvb-usb: error while querying for an remote control event. [ 511.176107][ T8759] m920x_read = error: -19 [ 511.180566][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 511.230077][ T8759] m920x_read = error: -19 [ 511.234543][ T8759] dvb-usb: error while querying for an remote control event. [ 511.299878][T14404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.311165][T14404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.337051][T14404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.345872][T14404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.359737][ T8759] m920x_read = error: -19 [ 511.364156][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 511.376187][ T5916] m920x_read = error: -19 [ 511.380575][ T5916] dvb-usb: error while querying for an remote control event. [ 511.391840][ T8754] em28xx 2-1:0.0: chip ID is em2874 [ 511.417071][ T5868] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 511.526879][ T5916] usb 3-1: USB disconnect, device number 67 [ 511.534973][ T5916] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 511.546100][ T5868] m920x_read = error: -19 [ 511.551006][ T5868] dvb-usb: error while querying for an remote control event. [ 511.596581][ T8754] m920x_read = error: -19 [ 511.601067][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 511.601131][T14382] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 511.684407][ T849] usb 2-1: USB disconnect, device number 84 [ 511.703357][ T849] em28xx 2-1:0.0: Disconnecting em28xx [ 511.725403][ T849] em28xx 2-1:0.0: Freeing device [ 511.757988][ T8754] m920x_read = error: -19 [ 511.763402][ T8754] dvb-usb: error while querying for an remote control event. [ 511.806151][ T8754] m920x_read = error: -19 [ 511.812654][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 511.909569][ T8754] m920x_read = error: -19 [ 511.915167][ T8754] dvb-usb: error while querying for an remote control event. [ 511.996654][ T8754] m920x_read = error: -19 [ 512.001062][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 512.057034][ T8759] m920x_read = error: -19 [ 512.061482][ T8759] dvb-usb: error while querying for an remote control event. [ 512.191951][ T8759] m920x_read = error: -19 [ 512.196516][ T8759] dvb-usb: error while querying for an remote control event. [ 512.204056][ T8759] m920x_read = error: -19 [ 512.210695][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 512.226098][ T5916] usb 10-1: USB disconnect, device number 72 [ 512.266797][ T8754] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 512.313643][T14426] program syz.1.2299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.316517][ T8759] m920x_read = error: -19 [ 512.329290][ T8759] dvb-usb: error while querying for an remote control event. [ 512.416187][ T8754] usb 3-1: device descriptor read/64, error -71 [ 512.423255][ T8759] m920x_read = error: -19 [ 512.427718][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 512.456334][ T5868] m920x_read = error: -19 [ 512.461284][ T5868] dvb-usb: error while querying for an remote control event. [ 512.576098][ T5868] m920x_read = error: -19 [ 512.580597][ T5868] dvb-usb: error while querying for an remote control event. [ 512.596039][ T8759] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 512.603763][ T5868] m920x_read = error: -19 [ 512.608318][ T5916] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 512.616612][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 512.676192][ T8754] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 512.696731][ T5868] m920x_read = error: -19 [ 512.701100][ T5868] dvb-usb: error while querying for an remote control event. [ 512.766035][ T8759] usb 2-1: Using ep0 maxpacket: 32 [ 512.772595][ T5916] usb 10-1: Using ep0 maxpacket: 16 [ 512.778441][ T5868] m920x_read = error: -19 [ 512.783792][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 512.792498][ T8759] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 512.802284][ T8759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.813138][ T5916] usb 10-1: unable to get BOS descriptor or descriptor too short [ 512.822305][ T8759] usb 2-1: config 0 descriptor?? [ 512.827477][ T8754] usb 3-1: device descriptor read/64, error -71 [ 512.835331][ T5868] m920x_read = error: -19 [ 512.846785][ T5868] dvb-usb: error while querying for an remote control event. [ 512.854557][ T5916] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 512.881199][ T5916] usb 10-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 512.891111][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.899541][ T5916] usb 10-1: Product: syz [ 512.903852][ T5916] usb 10-1: Manufacturer: syz [ 512.908679][ T5916] usb 10-1: SerialNumber: syz [ 512.939533][ T8754] usb usb3-port1: attempt power cycle [ 512.956284][ T5868] m920x_read = error: -19 [ 512.960721][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 512.986695][ T5868] m920x_read = error: -19 [ 512.991144][ T5868] dvb-usb: error while querying for an remote control event. [ 513.055881][ T8759] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 513.068246][ T8759] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 513.080152][ T8759] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 513.088347][ T8759] usb 2-1: media controller created [ 513.106450][ T5868] m920x_read = error: -19 [ 513.116015][ T5868] dvb-usb: error while querying for an remote control event. [ 513.123811][ T8759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 513.132730][ T5868] m920x_read = error: -19 [ 513.145978][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 513.226528][ T5868] m920x_read = error: -19 [ 513.232396][ T5868] dvb-usb: error while querying for an remote control event. [ 513.296080][ T8754] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 513.316175][ T5868] m920x_read = error: -19 [ 513.321516][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 513.329607][ T8754] usb 3-1: device descriptor read/8, error -71 [ 513.346506][ T5868] m920x_read = error: -19 [ 513.351105][ T5868] dvb-usb: error while querying for an remote control event. [ 513.459348][ T8759] az6027: usb out operation failed. (-71) [ 513.465275][ T8759] stb0899_attach: Driver disabled by Kconfig [ 513.471946][ T5868] m920x_read = error: -19 [ 513.476424][ T8759] az6027: no front-end attached [ 513.476424][ T8759] [ 513.483593][ T5868] dvb-usb: error while querying for an remote control event. [ 513.491676][ T8759] az6027: usb out operation failed. (-71) [ 513.498407][ T8759] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 513.506032][ T5868] m920x_read = error: -19 [ 513.510444][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 513.523842][ T8759] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input57 [ 513.545110][ T8759] dvb-usb: schedule remote query interval to 400 msecs. [ 513.552228][ T8759] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 513.569376][ T8759] usb 2-1: USB disconnect, device number 85 [ 513.587018][ T8754] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 513.601582][ T5868] m920x_read = error: -19 [ 513.606890][ T8754] usb 3-1: device descriptor read/8, error -71 [ 513.614689][ T5868] dvb-usb: error while querying for an remote control event. [ 513.652277][ T8759] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 513.686338][ T5868] m920x_read = error: -19 [ 513.691927][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 513.736597][ T5868] m920x_read = error: -19 [ 513.741210][ T8754] usb usb3-port1: unable to enumerate USB device [ 513.747771][ T5868] dvb-usb: error while querying for an remote control event. [ 513.796551][T14428] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 513.870995][ T8759] m920x_read = error: -19 [ 513.875450][ T8759] dvb-usb: error while querying for an remote control event. [ 513.883404][ T8754] m920x_read = error: -19 [ 513.888976][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 514.016179][ T8754] m920x_read = error: -19 [ 514.022998][ T8754] dvb-usb: error while querying for an remote control event. [ 514.061663][T14444] netlink: 'syz.6.2303': attribute type 4 has an invalid length. [ 514.066291][ T8754] m920x_read = error: -19 [ 514.074673][T14444] netlink: 'syz.6.2303': attribute type 4 has an invalid length. [ 514.082024][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 514.157814][ T8754] m920x_read = error: -19 [ 514.165440][ T8754] dvb-usb: error while querying for an remote control event. [ 514.296934][ T8754] m920x_read = error: -19 [ 514.301972][ T8754] dvb-usb: error while querying for an remote control event. [ 514.311342][ T8759] m920x_read = error: -19 [ 514.317793][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 514.425512][T14450] FAULT_INJECTION: forcing a failure. [ 514.425512][T14450] name failslab, interval 1, probability 0, space 0, times 0 [ 514.443048][T14450] CPU: 1 UID: 0 PID: 14450 Comm: syz.1.2306 Not tainted syzkaller #0 PREEMPT(full) [ 514.443079][T14450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.443094][T14450] Call Trace: [ 514.443104][T14450] [ 514.443114][T14450] dump_stack_lvl+0x189/0x250 [ 514.443141][T14450] ? __pfx____ratelimit+0x10/0x10 [ 514.443176][T14450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.443197][T14450] ? __pfx__printk+0x10/0x10 [ 514.443245][T14450] ? __pfx___might_resched+0x10/0x10 [ 514.443279][T14450] should_fail_ex+0x414/0x560 [ 514.443311][T14450] should_failslab+0xa8/0x100 [ 514.443340][T14450] __kmalloc_noprof+0xcb/0x7f0 [ 514.443362][T14450] ? kfree+0x4d/0x6d0 [ 514.443380][T14450] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 514.443424][T14450] tomoyo_realpath_from_path+0xe3/0x5d0 [ 514.443473][T14450] ? tomoyo_domain+0xd9/0x130 [ 514.443505][T14450] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 514.443535][T14450] tomoyo_path_number_perm+0x1e8/0x5a0 [ 514.443567][T14450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 514.443637][T14450] ? __fget_files+0x2a/0x420 [ 514.443672][T14450] ? __fget_files+0x3a0/0x420 [ 514.443701][T14450] ? __fget_files+0x2a/0x420 [ 514.443735][T14450] security_file_ioctl+0xcb/0x2d0 [ 514.443766][T14450] __se_sys_ioctl+0x47/0x170 [ 514.443792][T14450] do_syscall_64+0xfa/0xfa0 [ 514.443812][T14450] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.443833][T14450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.443857][T14450] ? clear_bhb_loop+0x60/0xb0 [ 514.443884][T14450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.443905][T14450] RIP: 0033:0x7f293058ebe9 [ 514.443924][T14450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.443943][T14450] RSP: 002b:00007f2931430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.443968][T14450] RAX: ffffffffffffffda RBX: 00007f29307c5fa0 RCX: 00007f293058ebe9 [ 514.443985][T14450] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 514.444000][T14450] RBP: 00007f2931430090 R08: 0000000000000000 R09: 0000000000000000 [ 514.444014][T14450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.444027][T14450] R13: 00007f29307c6038 R14: 00007f29307c5fa0 R15: 00007fff6a9f1c18 [ 514.444062][T14450] [ 514.444072][T14450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 514.447953][ T8759] m920x_read = error: -19 [ 514.688304][ T8754] m920x_read = error: -19 [ 514.688351][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 514.688697][ T8759] dvb-usb: error while querying for an remote control event. [ 514.776100][ T849] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 514.806572][ T8759] m920x_read = error: -19 [ 514.811031][ T8759] dvb-usb: error while querying for an remote control event. [ 514.856205][ T8759] m920x_read = error: -19 [ 514.860848][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 514.930650][ T8759] m920x_read = error: -19 [ 514.932881][ T849] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 514.935178][ T8759] dvb-usb: error while querying for an remote control event. [ 514.944776][ T849] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 514.962011][ T849] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 514.971248][ T849] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 514.982647][ T849] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 514.996068][ T5936] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 515.003820][ T849] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 515.013197][ T849] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 515.022745][ T849] usb 7-1: Product: syz [ 515.036213][ T8759] m920x_read = error: -19 [ 515.038034][ T849] usb 7-1: Manufacturer: syz [ 515.040678][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 515.066850][ T8759] m920x_read = error: -19 [ 515.075109][ T8759] dvb-usb: error while querying for an remote control event. [ 515.079375][ T849] cdc_wdm 7-1:1.0: skipping garbage [ 515.093050][ T849] cdc_wdm 7-1:1.0: skipping garbage [ 515.104022][ T849] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 515.113260][ T849] cdc_wdm 7-1:1.0: Unknown control protocol [ 515.166977][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 515.176900][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 515.188434][ T5936] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 515.196425][ T5868] m920x_read = error: -19 [ 515.203943][ T5868] dvb-usb: error while querying for an remote control event. [ 515.205646][ T5936] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 515.220693][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.228902][ T5868] m920x_read = error: -19 [ 515.233485][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 515.236498][ T5936] usb 2-1: Product: syz [ 515.256094][ T5936] usb 2-1: Manufacturer: syz [ 515.260828][ T5936] usb 2-1: SerialNumber: syz [ 515.268853][ T5936] usb 2-1: config 0 descriptor?? [ 515.326804][T14452] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2307'. [ 515.336074][ T5868] m920x_read = error: -19 [ 515.351021][ T5868] dvb-usb: error while querying for an remote control event. [ 515.360141][ T5916] kobil_sct 10-1:3.0: required endpoints missing [ 515.385636][ T5916] usb 10-1: USB disconnect, device number 73 [ 515.416922][ T5868] m920x_read = error: -19 [ 515.421393][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 515.476283][ T5868] m920x_read = error: -19 [ 515.478605][T14453] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2307'. [ 515.480793][ T5868] dvb-usb: error while querying for an remote control event. [ 515.508929][T14453] nbd: nbd64 already in use [ 515.509478][T14463] netlink: 'syz.9.2311': attribute type 83 has an invalid length. [ 515.596217][ T5916] m920x_read = error: -19 [ 515.612192][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 515.624798][ T5868] m920x_read = error: -19 [ 515.634104][ T5868] dvb-usb: error while querying for an remote control event. [ 515.762214][T14468] ÿÿÿÿÿÿ: renamed from xfrm0 (while UP) [ 515.768598][ T5868] m920x_read = error: -19 [ 515.773026][ T5868] dvb-usb: error while querying for an remote control event. [ 515.788636][T14470] overlayfs: failed to clone lowerpath [ 515.806763][ T5868] m920x_read = error: -19 [ 515.811165][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 515.823096][ T5916] usb 2-1: USB disconnect, device number 86 [ 515.860287][ C0] cdc_wdm 7-1:1.0: unknown notification 2 received: index 8192 len 0 [ 515.890821][ T5868] m920x_read = error: -19 [ 515.895265][ T5868] dvb-usb: error while querying for an remote control event. [ 515.994970][ T5868] m920x_read = error: -19 [ 516.002556][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 516.026804][ T8759] m920x_read = error: -19 [ 516.031267][ T8759] dvb-usb: error while querying for an remote control event. [ 516.181298][ T8759] m920x_read = error: -19 [ 516.187346][ T8759] dvb-usb: error while querying for an remote control event. [ 516.226567][ T8759] m920x_read = error: -19 [ 516.248472][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 516.337334][ T5868] m920x_read = error: -19 [ 516.349722][ T5868] dvb-usb: error while querying for an remote control event. [ 516.426205][ T5916] m920x_read = error: -19 [ 516.431533][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 516.497190][ T5916] m920x_read = error: -19 [ 516.501707][ T5916] dvb-usb: error while querying for an remote control event. [ 516.529515][T14480] FAULT_INJECTION: forcing a failure. [ 516.529515][T14480] name failslab, interval 1, probability 0, space 0, times 0 [ 516.544816][T14480] CPU: 1 UID: 0 PID: 14480 Comm: syz.1.2318 Not tainted syzkaller #0 PREEMPT(full) [ 516.544854][T14480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.544881][T14480] Call Trace: [ 516.544890][T14480] [ 516.544901][T14480] dump_stack_lvl+0x189/0x250 [ 516.544927][T14480] ? __pfx____ratelimit+0x10/0x10 [ 516.544961][T14480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.544982][T14480] ? __pfx__printk+0x10/0x10 [ 516.545021][T14480] ? __pfx___might_resched+0x10/0x10 [ 516.545046][T14480] ? fs_reclaim_acquire+0x7d/0x100 [ 516.545078][T14480] should_fail_ex+0x414/0x560 [ 516.545111][T14480] should_failslab+0xa8/0x100 [ 516.545139][T14480] __kmalloc_noprof+0xcb/0x7f0 [ 516.545162][T14480] ? tomoyo_encode+0x28b/0x550 [ 516.545203][T14480] tomoyo_encode+0x28b/0x550 [ 516.545243][T14480] tomoyo_realpath_from_path+0x58d/0x5d0 [ 516.545290][T14480] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 516.545319][T14480] tomoyo_path_number_perm+0x1e8/0x5a0 [ 516.545351][T14480] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 516.545423][T14480] ? __fget_files+0x2a/0x420 [ 516.545458][T14480] ? __fget_files+0x3a0/0x420 [ 516.545486][T14480] ? __fget_files+0x2a/0x420 [ 516.545521][T14480] security_file_ioctl+0xcb/0x2d0 [ 516.545551][T14480] __se_sys_ioctl+0x47/0x170 [ 516.545577][T14480] do_syscall_64+0xfa/0xfa0 [ 516.545597][T14480] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.545617][T14480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.545640][T14480] ? clear_bhb_loop+0x60/0xb0 [ 516.545667][T14480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.545688][T14480] RIP: 0033:0x7f293058ebe9 [ 516.545707][T14480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.545727][T14480] RSP: 002b:00007f2931430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.545750][T14480] RAX: ffffffffffffffda RBX: 00007f29307c5fa0 RCX: 00007f293058ebe9 [ 516.545767][T14480] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 516.545782][T14480] RBP: 00007f2931430090 R08: 0000000000000000 R09: 0000000000000000 [ 516.545796][T14480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.545810][T14480] R13: 00007f29307c6038 R14: 00007f29307c5fa0 R15: 00007fff6a9f1c18 [ 516.545853][T14480] [ 516.545876][T14480] ERROR: Out of memory at tomoyo_realpath_from_path. [ 516.546322][ T8759] usb 10-1: new low-speed USB device number 74 using dummy_hcd [ 516.656098][T14482] netlink: 'syz.2.2319': attribute type 2 has an invalid length. [ 516.660545][ T5916] m920x_read = error: -19 [ 516.694287][T14482] netlink: 'syz.2.2319': attribute type 1 has an invalid length. [ 516.698359][ T5916] dvb-usb: error while querying for an remote control event. [ 516.824108][ T5868] m920x_read = error: -19 [ 516.828602][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 516.969038][ T5916] m920x_read = error: -19 [ 516.973464][ T5916] dvb-usb: error while querying for an remote control event. [ 516.999707][ T5916] m920x_read = error: -19 [ 517.004248][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 517.029494][ T8759] usb 10-1: Invalid ep0 maxpacket: 16 [ 517.103666][ T5916] m920x_read = error: -19 [ 517.108158][ T5916] dvb-usb: error while querying for an remote control event. [ 517.160832][ T8759] usb 10-1: new low-speed USB device number 75 using dummy_hcd [ 517.170689][ T5916] m920x_read = error: -19 [ 517.178633][ T5916] dvb-usb: error -19 while querying for an remote control event. [ 517.251594][ T5916] m920x_read = error: -19 [ 517.256636][ T5916] dvb-usb: error while querying for an remote control event. [ 517.332412][ T8759] usb 10-1: Invalid ep0 maxpacket: 16 [ 517.339647][ T8759] usb usb10-port1: attempt power cycle [ 517.383023][ T8754] m920x_read = error: -19 [ 517.387557][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 517.396070][ T10] m920x_read = error: -19 [ 517.400870][ T10] dvb-usb: error while querying for an remote control event. [ 517.488883][ T10] usb 7-1: USB disconnect, device number 105 [ 517.516451][ T8754] m920x_read = error: -19 [ 517.524396][ T8754] dvb-usb: error while querying for an remote control event. [ 517.543557][ T5916] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 517.565311][ T8754] m920x_read = error: -19 [ 517.569703][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 517.644581][ T8754] m920x_read = error: -19 [ 517.649000][ T8754] dvb-usb: error while querying for an remote control event. [ 517.695810][ T8759] usb 10-1: new low-speed USB device number 76 using dummy_hcd [ 517.736677][ T8759] usb 10-1: Invalid ep0 maxpacket: 16 [ 517.746307][ T5916] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 517.755702][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.763727][ T5916] usb 3-1: Product: syz [ 517.768610][ T10] m920x_read = error: -19 [ 517.773163][ T5916] usb 3-1: Manufacturer: syz [ 517.777908][ T10] dvb-usb: error -19 while querying for an remote control event. [ 517.785885][ T8754] m920x_read = error: -19 [ 517.790254][ T8754] dvb-usb: error while querying for an remote control event. [ 517.797717][ T5916] usb 3-1: SerialNumber: syz [ 517.876303][ T8759] usb 10-1: new low-speed USB device number 77 using dummy_hcd [ 517.896905][ T8759] usb 10-1: Invalid ep0 maxpacket: 16 [ 517.902641][ T8759] usb usb10-port1: unable to enumerate USB device [ 517.909323][ T8754] m920x_read = error: -19 [ 517.914090][ T8754] dvb-usb: error while querying for an remote control event. [ 517.956797][ T5936] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 517.957820][ T8754] m920x_read = error: -19 [ 517.970040][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 518.027343][ T8754] m920x_read = error: -19 [ 518.031796][ T8754] dvb-usb: error while querying for an remote control event. [ 518.117890][ T5936] usb 7-1: Using ep0 maxpacket: 32 [ 518.125027][ T5936] usb 7-1: config 0 has an invalid interface number: 122 but max is 0 [ 518.133609][ T5936] usb 7-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 518.143983][ T5936] usb 7-1: config 0 has no interface number 0 [ 518.148977][ T8754] m920x_read = error: -19 [ 518.150253][ T5936] usb 7-1: config 0 interface 122 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 518.165541][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 518.165681][ T8754] m920x_read = error: -19 [ 518.179781][ T5936] usb 7-1: config 0 interface 122 has no altsetting 0 [ 518.184768][ T8754] dvb-usb: error while querying for an remote control event. [ 518.189546][ T5936] usb 7-1: New USB device found, idVendor=0413, idProduct=6a05, bcdDevice=7f.0e [ 518.203229][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.211457][ T5936] usb 7-1: Product: syz [ 518.215916][ T5936] usb 7-1: Manufacturer: syz [ 518.226566][ T5936] usb 7-1: SerialNumber: syz [ 518.234394][ T5936] usb 7-1: config 0 descriptor?? [ 518.253922][ T5916] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 518.270107][ T5916] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 518.293874][ T5916] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 518.303058][ T8754] m920x_read = error: -19 [ 518.307452][ T8754] dvb-usb: error while querying for an remote control event. [ 518.319774][ T8759] m920x_read = error: -19 [ 518.324671][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 518.341124][ T5916] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 518.357432][ T5916] usb 3-1: USB disconnect, device number 72 [ 518.440734][ T8759] m920x_read = error: -19 [ 518.445143][ T8759] dvb-usb: error while querying for an remote control event. [ 518.491223][ T8759] m920x_read = error: -19 [ 518.495629][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 518.561695][ T8759] m920x_read = error: -19 [ 518.566104][ T8759] dvb-usb: error while querying for an remote control event. [ 518.662133][ T8759] m920x_read = error: -19 [ 518.666547][ T8759] dvb-usb: error -19 while querying for an remote control event. [ 518.674468][ T5916] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 518.682489][ T8754] m920x_read = error: -19 [ 518.686965][ T8754] dvb-usb: error while querying for an remote control event. [ 518.806653][ T8754] m920x_read = error: -19 [ 518.811079][ T8754] dvb-usb: error while querying for an remote control event. [ 518.833984][T14505] netlink: 'syz.6.2329': attribute type 10 has an invalid length. [ 518.843266][T14505] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2329'. [ 518.850011][ T5916] usb 3-1: config 160 has an invalid interface number: 187 but max is 0 [ 518.853069][T14505] dummy0: entered promiscuous mode [ 518.861053][ T8754] m920x_read = error: -19 [ 518.881094][T14505] bridge0: port 4(dummy0) entered blocking state [ 518.881788][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 518.897235][T14512] ------------[ cut here ]------------ [ 518.900878][ T5916] usb 3-1: config 160 has no interface number 0 [ 518.902855][T14512] WARNING: mm/vmalloc.c:538 at __vmap_pages_range_noflush+0xdf1/0xf30, CPU#1: syz.6.2329/14512 [ 518.909173][ T5916] usb 3-1: config 160 interface 187 has no altsetting 0 [ 518.909637][T14505] bridge0: port 4(dummy0) entered disabled state [ 518.919803][T14512] Modules linked in: [ 518.919830][T14512] CPU: 1 UID: 0 PID: 14512 Comm: syz.6.2329 Not tainted syzkaller #0 PREEMPT(full) [ 518.919858][T14512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.919876][T14512] RIP: 0010:__vmap_pages_range_noflush+0xdf1/0xf30 [ 518.919946][T14512] Code: eb 7b e8 92 1e ad ff eb 2f e8 8b 1e ad ff eb 6d e8 84 1e ad ff 31 ed eb 64 e8 7b 1e ad ff 90 0f 0b 90 eb 14 e8 70 1e ad ff 90 <0f> 0b 90 eb 09 e8 65 1e ad ff 90 0f 0b 90 bd f4 ff ff ff 44 8b 74 [ 518.919969][T14512] RSP: 0018:ffffc900041af950 EFLAGS: 00010287 [ 518.919993][T14512] RAX: ffffffff8213e750 RBX: dffffc0000000000 RCX: 0000000000080000 [ 518.933035][T14505] dummy0: entered allmulticast mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 518.933396][T14512] RDX: ffffc9000ce1e000 RSI: 000000000000380b RDI: 000000000000380c [ 518.944531][ T8754] m920x_read = error: -19 [ 518.947251][T14512] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8213e9c5 [ 518.967307][ T5916] usb 3-1: New USB device found, idVendor=2c7c, idProduct=6008, bcdDevice=2e.52 [ 518.983990][T14512] R10: fffff52001ac4000 R11: ffffed10170e7fa9 R12: ffff88805f2ee828 [ 518.997940][ T8754] dvb-usb: error while querying for an remote control event. [ 519.043081][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.048946][T14512] R13: ffff888032e1e928 R14: 0000000000000000 R15: 1ffff110065c3d25 [ 519.065188][T14512] FS: 00007f3194bac6c0(0000) GS:ffff8881258ba000(0000) knlGS:0000000000000000 [ 519.067400][ T8754] m920x_read = error: -19 [ 519.074189][T14512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.085165][T14512] CR2: 00007f3194bacd58 CR3: 0000000035096000 CR4: 00000000003526f0 [ 519.088932][ T5916] usb 3-1: Product: syz [ 519.093245][T14512] Call Trace: [ 519.100727][ T8754] dvb-usb: error -19 while querying for an remote control event. [ 519.100783][T14512] [ 519.109395][ T10] m920x_read = error: -19 [ 519.111567][T14512] vmap+0x1ca/0x310 [ 519.119732][T14512] io_region_init_ptr+0x24d/0x350 [ 519.124822][T14512] ? __pfx_io_region_init_ptr+0x10/0x10 [ 519.130495][T14512] ? io_pin_pages+0xd4/0x1b0 [ 519.135161][T14512] ? io_region_pin_pages+0xbe/0x190 [ 519.137081][ T10] dvb-usb: error while querying for an remote control event. [ 519.140472][T14512] io_create_region+0x3a4/0x480 [ 519.153739][T14512] io_allocate_scq_urings+0x2b0/0x870 [ 519.159475][T14512] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 519.165471][T14512] ? bpf_lsm_capable+0x9/0x20 [ 519.169319][ T5916] usb 3-1: Manufacturer: syz [ 519.170309][T14512] ? security_capable+0x7e/0x2e0 [ 519.174777][ T5916] usb 3-1: SerialNumber: syz [ 519.184432][T14512] io_uring_create+0x591/0xba0 [ 519.189392][T14512] __se_sys_io_uring_setup+0x264/0x270 [ 519.194935][T14512] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 519.201046][T14512] ? do_syscall_64+0xbe/0xfa0 [ 519.205811][T14512] do_syscall_64+0xfa/0xfa0 [ 519.210526][T14512] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.215794][T14512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.222034][T14512] ? clear_bhb_loop+0x60/0xb0 [ 519.226824][T14512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.232890][T14512] RIP: 0033:0x7f3193d8ebe9 [ 519.234710][T14505] bridge0: port 4(dummy0) entered blocking state [ 519.237439][T14512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.243847][T14505] bridge0: port 4(dummy0) entered forwarding state [ 519.263734][T14512] RSP: 002b:00007f3194babfc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 519.278791][T14512] RAX: ffffffffffffffda RBX: 00007f3193fc6180 RCX: 00007f3193d8ebe9 [ 519.286852][T14512] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000007688 [ 519.294974][T14512] RBP: 0000200000000040 R08: 0000000000000000 R09: 0000000000000000 [ 519.303057][T14512] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 519.311199][T14512] R13: 0000000000000000 R14: 0000000000007688 R15: 0000000000000000 [ 519.319314][ T10] m920x_read = error: -19 [ 519.319322][T14512] [ 519.319351][T14512] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 519.319373][T14512] CPU: 1 UID: 0 PID: 14512 Comm: syz.6.2329 Not tainted syzkaller #0 PREEMPT(full) [ 519.319404][T14512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.319428][T14512] Call Trace: [ 519.319441][T14512] [ 519.319453][T14512] dump_stack_lvl+0x99/0x250 [ 519.319485][T14512] ? __asan_memcpy+0x40/0x70 [ 519.319512][T14512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.319539][T14512] ? __pfx__printk+0x10/0x10 [ 519.319603][T14512] vpanic+0x237/0x6d0 [ 519.319637][T14512] ? __pfx_vpanic+0x10/0x10 [ 519.319667][T14512] ? is_bpf_text_address+0x26/0x2b0 [ 519.319712][T14512] panic+0xb9/0xc0 [ 519.319744][T14512] ? __pfx_panic+0x10/0x10 [ 519.319795][T14512] __warn+0x334/0x4c0 [ 519.319826][T14512] ? __vmap_pages_range_noflush+0xdf1/0xf30 [ 519.319873][T14512] ? __vmap_pages_range_noflush+0xdf1/0xf30 [ 519.319917][T14512] report_bug+0x2be/0x4f0 [ 519.319956][T14512] ? __vmap_pages_range_noflush+0xdf1/0xf30 [ 519.319999][T14512] ? __vmap_pages_range_noflush+0xdf1/0xf30 [ 519.320042][T14512] ? __vmap_pages_range_noflush+0xdf3/0xf30 [ 519.320085][T14512] handle_bug+0x84/0x160 [ 519.320116][T14512] exc_invalid_op+0x1a/0x50 [ 519.320145][T14512] asm_exc_invalid_op+0x1a/0x20 [ 519.320171][T14512] RIP: 0010:__vmap_pages_range_noflush+0xdf1/0xf30 [ 519.320216][T14512] Code: eb 7b e8 92 1e ad ff eb 2f e8 8b 1e ad ff eb 6d e8 84 1e ad ff 31 ed eb 64 e8 7b 1e ad ff 90 0f 0b 90 eb 14 e8 70 1e ad ff 90 <0f> 0b 90 eb 09 e8 65 1e ad ff 90 0f 0b 90 bd f4 ff ff ff 44 8b 74 [ 519.320241][T14512] RSP: 0018:ffffc900041af950 EFLAGS: 00010287 [ 519.320267][T14512] RAX: ffffffff8213e750 RBX: dffffc0000000000 RCX: 0000000000080000 [ 519.320287][T14512] RDX: ffffc9000ce1e000 RSI: 000000000000380b RDI: 000000000000380c [ 519.320307][T14512] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8213e9c5 [ 519.320325][T14512] R10: fffff52001ac4000 R11: ffffed10170e7fa9 R12: ffff88805f2ee828 [ 519.320346][T14512] R13: ffff888032e1e928 R14: 0000000000000000 R15: 1ffff110065c3d25 [ 519.320374][T14512] ? pfn_valid+0x125/0x4d0 [ 519.320414][T14512] ? __vmap_pages_range_noflush+0xdf0/0xf30 [ 519.320495][T14512] vmap+0x1ca/0x310 [ 519.320527][T14512] io_region_init_ptr+0x24d/0x350 [ 519.320570][T14512] ? __pfx_io_region_init_ptr+0x10/0x10 [ 519.320602][T14512] ? io_pin_pages+0xd4/0x1b0 [ 519.320632][T14512] ? io_region_pin_pages+0xbe/0x190 [ 519.320667][T14512] io_create_region+0x3a4/0x480 [ 519.320708][T14512] io_allocate_scq_urings+0x2b0/0x870 [ 519.320759][T14512] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 519.320804][T14512] ? bpf_lsm_capable+0x9/0x20 [ 519.320832][T14512] ? security_capable+0x7e/0x2e0 [ 519.320881][T14512] io_uring_create+0x591/0xba0 [ 519.320930][T14512] __se_sys_io_uring_setup+0x264/0x270 [ 519.320970][T14512] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 519.321029][T14512] ? do_syscall_64+0xbe/0xfa0 [ 519.321059][T14512] do_syscall_64+0xfa/0xfa0 [ 519.321083][T14512] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.321109][T14512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.321134][T14512] ? clear_bhb_loop+0x60/0xb0 [ 519.321168][T14512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.321194][T14512] RIP: 0033:0x7f3193d8ebe9 [ 519.321219][T14512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.321242][T14512] RSP: 002b:00007f3194babfc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 519.321270][T14512] RAX: ffffffffffffffda RBX: 00007f3193fc6180 RCX: 00007f3193d8ebe9 [ 519.321291][T14512] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000007688 [ 519.321308][T14512] RBP: 0000200000000040 R08: 0000000000000000 R09: 0000000000000000 [ 519.321326][T14512] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 519.321344][T14512] R13: 0000000000000000 R14: 0000000000007688 R15: 0000000000000000 [ 519.321383][T14512] [ 519.324024][T14512] Kernel Offset: disabled