last executing test programs: 2m43.475173268s ago: executing program 2 (id=235): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000d00)="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", 0x406}], 0x1}}], 0x1, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x8, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800080068], 0xdddd0000, 0x80cd4}) 2m43.321756074s ago: executing program 2 (id=238): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000200)={'syzkaller0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000740)="500000001800010601000000000000000a180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac71000000080ffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x2, 0x6, @remote}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000600)={0x4, {{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x88) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x5e202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="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", 0x241}], 0x1}}], 0x1, 0x4000001) shutdown(r6, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000340)={'syzkaller0\x00'}) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000000), 0x4) 2m43.196068702s ago: executing program 2 (id=240): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000023c0)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffffb2c9ed94, 0xfffc, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4, 0x3}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f0000002480)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004540)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2m43.077556211s ago: executing program 2 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='1', 0x1) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x80000}) 2m42.967003583s ago: executing program 2 (id=243): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x3f, 0xc8}}}, 0x6) 2m42.444785829s ago: executing program 2 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x110) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xc, 0x4, "d0b3ad0a"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000380)={0x40000000, 0x100, "e2ff868592605aba4b23dfa47ebf9a7da9fa0de37fbaf1f60804cb8d5b9619d7", 0xffff, 0x3, 0x800, 0xd2, 0x6, 0xee5, 0x80, 0x3, [0x6, 0xff, 0x53, 0xcf]}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='affs\x00', 0x0, &(0x7f0000000340)='grpquota') 2m27.31848593s ago: executing program 32 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x110) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xc, 0x4, "d0b3ad0a"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000380)={0x40000000, 0x100, "e2ff868592605aba4b23dfa47ebf9a7da9fa0de37fbaf1f60804cb8d5b9619d7", 0xffff, 0x3, 0x800, 0xd2, 0x6, 0xee5, 0x80, 0x3, [0x6, 0xff, 0x53, 0xcf]}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='affs\x00', 0x0, &(0x7f0000000340)='grpquota') 1m32.281453633s ago: executing program 1 (id=824): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) syz_open_procfs(0x0, &(0x7f0000000740)='fd/3\x00') ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 1m32.240892376s ago: executing program 1 (id=825): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x7ff}, 0xfe97) r2 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000000)=0x200, 0x4) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000b, 0x11, r2, 0x100000000) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @remote, 0x4}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) 1m30.802709031s ago: executing program 1 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys\x00', 0x1d9) mount(0x0, &(0x7f0000000180)='./mysys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000240)='1\x00', 0x2) socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r3 = syz_open_dev$vbi(&(0x7f0000000280), 0x1, 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) write$binfmt_script(r4, &(0x7f00000002c0), 0xfffffd9d) write$binfmt_script(r4, &(0x7f0000000300), 0xfffffd9d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x2, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x800100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f0000000a80)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r2, 0x1, &(0x7f00000000c0), &(0x7f0000000100)) write(r1, &(0x7f00000005c0)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) 1m29.859340059s ago: executing program 1 (id=847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0x40000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x7000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8e, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x19, 0x3}, {0xffffffff, 0x1ffe, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x2, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0xe, 0x6, 0xc2, 0x8, 0x72, 0x9, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x2, 0x6, 0xe]}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0x0, 0x3, 0x6, 0x6, 0xfffffffb, 0x2c0000}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x2008, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) 1m29.744097089s ago: executing program 1 (id=849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB='f'], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000001c0)=0x7f, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m29.492856683s ago: executing program 1 (id=853): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000005c0)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000340)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r4, 0x5, 0x80000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf25180000000c009900848f0000050000000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000000000a001a0008021100000100000a001a0008021100000100000a001a0008021100000100000a0006000802110000000000"], 0x74}}, 0x4000) 1m14.323421674s ago: executing program 33 (id=853): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000005c0)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000340)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r4, 0x5, 0x80000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf25180000000c009900848f0000050000000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000000000a001a0008021100000100000a001a0008021100000100000a001a0008021100000100000a0006000802110000000000"], 0x74}}, 0x4000) 1m9.993117779s ago: executing program 0 (id=992): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="40866f5bc90060423334b9fae3ea2ef670e1d128dde4c001c9251cbc7d9336aef026c1940934dfbfb0b71713d440045aeeabafbf2a0842d26672c38290f6cc31e84421bbd317dc6b1b32", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES32=r1], 0x7) 1m9.323052597s ago: executing program 0 (id=995): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) ioctl$TIOCGISO7816(r4, 0x80285442, 0x0) 1m9.229509069s ago: executing program 0 (id=997): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0xea, 0x1, 0x1, 0x81, 0x1, 0x4}, {0x200000, 0xffffffff, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xe000, 0x10, 0x3, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0xfc, 0x87}, {0xffe, 0xffe, 0xf, 0xfe, 0x1, 0x2, 0x21, 0x1, 0xc, 0x1}, {0xe000, 0xeeee0000, 0xd, 0x3, 0x1, 0x0, 0x4c, 0x1, 0x0, 0x1, 0x0, 0xfe}, {0x0, 0x2000, 0x10, 0x3, 0x1, 0x0, 0x0, 0x1, 0x48, 0x1}, {0x26000, 0x67, 0x18, 0x2, 0x1, 0x0, 0x0, 0x57, 0xa, 0x8}, {0x1ff8, 0x0, 0xc, 0x4, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x7b}, {0x8080000, 0x801}, 0xa000001b, 0x0, 0x30000, 0x0, 0xfffffffffffefffc, 0x0, 0x1, [0x0, 0xa, 0x0, 0xfffffffffffffffc]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0x7, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x41e2c0, 0x0, 0x40001, 0x0, 0x0}, {[0xe, 0xebd6, 0x9, 0xc7ee]}, 0xcf, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bind$netlink(r1, &(0x7f0000000900)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000200)={[0xfec00000, 0x50000, 0x30000, 0x25000], 0x7, 0x44, 0x8000000000000001}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x4000) r6 = syz_open_dev$hidraw(&(0x7f0000000680), 0x0, 0x14a042) r7 = dup3(r6, r5, 0x80000) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f00000006c0)={0x2, 0x2, @stop_pts=0x1}) r8 = socket$packet(0x11, 0xa, 0x300) recvmsg(r8, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x2) r9 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000500), 0x1, 0x40800) mount(&(0x7f0000000840)=@loop={'/dev/loop', 0x0}, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='pipefs\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) recvmsg$can_raw(r7, &(0x7f00000007c0)={&(0x7f0000000540)=@caif=@dbg, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/145, 0x91}], 0x1, &(0x7f0000000780)=""/54, 0x36}, 0x40000040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x100, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_mreqsrc(r11, 0x0, 0x53, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x8) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@x86={0x8, 0x5, 0x1, 0x0, 0x1, 0xc3, 0x4, 0x56, 0x5, 0xc, 0xf4, 0xc, 0x0, 0x6, 0xf, 0x0, 0x7, 0x1, 0x2e, '\x00', 0x4, 0x10008}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]}) 1m8.568808464s ago: executing program 0 (id=1003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000580)="8d522bd88978d6d9fa684ba45f4b6904000000000081a22d282b940c37da47000032fee1eafd787035349f20c099125068891e3cb5c6dbf58781", 0x3a}], 0x3}}], 0x1, 0x20d0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m8.350315198s ago: executing program 0 (id=1004): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = socket$inet6(0x10, 0x2, 0x4) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0x81}, 0xa) (async) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0x81}, 0xa) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x109002, 0x0) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x109002, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000140)=@random={'btrfs.', '^\b@-\x00'}, &(0x7f0000000180)='\x00', 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0xb4, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfffffff0}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc2}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'lo\x00'}}]}, @IPSET_ATTR_DATA={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80d4}, 0x4044000) syz_usb_connect(0x0, 0x3d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async) syz_usb_connect(0x0, 0x3d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000340)=""/31, 0x1f}], 0x1) (async) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000340)=""/31, 0x1f}], 0x1) gettid() (async) r5 = gettid() timer_create(0x2, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000003c0)) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000440)='\\', 0x1}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r4) (async) close(r4) openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 1m5.102845814s ago: executing program 0 (id=1023): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100), 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40010) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vga_arbiter(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="6c6f636b203460ed6e6f6e6500bd388e57b887c0384cc9dee6a17375c6cbdc9035c40b13c41d783c17d4cf1172000000aea2443e7ee8f791512249e300e66c5278752f"], 0xa) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000200)='./tracefs\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs/uprobe_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='p:p1 ./file0:0', 0xe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1', 0x1) 50.112162929s ago: executing program 34 (id=1023): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100), 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40010) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vga_arbiter(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="6c6f636b203460ed6e6f6e6500bd388e57b887c0384cc9dee6a17375c6cbdc9035c40b13c41d783c17d4cf1172000000aea2443e7ee8f791512249e300e66c5278752f"], 0xa) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000200)='./tracefs\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs/uprobe_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='p:p1 ./file0:0', 0xe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1', 0x1) 6.585798122s ago: executing program 3 (id=1263): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000880)={0x0, 0x3, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="20030400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000540)=""/95, 0x5f) 6.389264989s ago: executing program 5 (id=1265): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/5, 0x200000, 0x1000}, 0x20) r3 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000300)={"1b00", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6000000006906528640", "000000ff0000000000000020", "0000000000000000000100"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000380)={0xd, 0xfffffffffffffffa, 0x1, 0x0, 0x0, 0xfffffffd, "c1966a85ff00cb2cea0b000800", 0x0, 0x0, 0xfc, 0xc4}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000001c0)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000200)={0x2c, 0x0, r1, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="120110035f55d040cd0100010e3c01020301090212000101058009567818787278bec080"], &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) 4.237135276s ago: executing program 6 (id=1269): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB='f'], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000001c0)=0x7f, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.89223583s ago: executing program 3 (id=1270): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105042, 0x1ff) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000140)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000440)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000480)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x40000002, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000780)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff8, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000800)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) getpriority(0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x86}, 0x8) 3.825747431s ago: executing program 6 (id=1271): pipe2$9p(&(0x7f0000000280), 0x80000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200"/53], 0xfdef) 3.431942058s ago: executing program 4 (id=1272): r0 = socket(0x3, 0x3, 0x1000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={0x38, r2, 0x1, 0x70bd2d, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x400c8a4) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'veth1_macvtap\x00', 0x101}) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000240)="225df8cd3cbf6f8585a0addbc843315843045a87c69794863717f95d9ef1469d937365efa89eb8f6ac9aaaba9e07e66bb036b237c787d0a1e7642d9e9966a90f8e83e00196e0778fa17919a957d108706c517e2e9f044e8e991611693a35ed9dc3724a0ffa5d440ecd5d6ff637f2cdf729", 0x71}, {&(0x7f00000002c0)="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", 0x1000}], 0x3, 0x0, 0x0, 0x7400}, 0x14044801) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000100)={0x90000, 0x0, {[0xc, 0xd, 0x3, 0x2, 0x87c8, 0x4, 0x27b6, 0x6]}}) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000001300)=@in6={0xa, 0x4e23, 0x0, @remote, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) recvmsg$kcm(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/103, 0x67}], 0x1}, 0x40000040) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[], 0xfe33) 3.372814494s ago: executing program 6 (id=1273): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time\x00') open_by_handle_at(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) (fail_nth: 3) 3.307853252s ago: executing program 5 (id=1274): r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x3000, 0x2, 0x154}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001b80)={0xd, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f35006c090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07630936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) recvmsg(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/216, 0xd8}], 0x4}, 0x42) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 3.133607182s ago: executing program 6 (id=1275): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0xea, 0x1, 0x1, 0x81, 0x1, 0x4}, {0x200000, 0xffffffff, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xe000, 0x10, 0x3, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0xfc, 0x87}, {0xffe, 0xffe, 0xf, 0xfe, 0x1, 0x2, 0x21, 0x1, 0xc, 0x1}, {0xe000, 0xeeee0000, 0xd, 0x3, 0x1, 0x0, 0x4c, 0x1, 0x0, 0x1, 0x0, 0xfe}, {0x0, 0x2000, 0x10, 0x3, 0x1, 0x0, 0x0, 0x1, 0x48, 0x1}, {0x26000, 0x67, 0x18, 0x2, 0x1, 0x0, 0x0, 0x57, 0xa, 0x8}, {0x1ff8, 0x0, 0xc, 0x4, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x7b}, {0x8080000, 0x801}, 0xa000001b, 0x0, 0x30000, 0x0, 0xfffffffffffefffc, 0x0, 0x1, [0x0, 0xa, 0x0, 0xfffffffffffffffc]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0x7, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x41e2c0, 0x0, 0x40001, 0x0, 0x0}, {[0xe, 0xebd6, 0x9, 0xc7ee]}, 0xcf, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bind$netlink(r1, &(0x7f0000000900)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000200)={[0xfec00000, 0x50000, 0x30000, 0x25000], 0x7, 0x44, 0x8000000000000001}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x4000) r6 = syz_open_dev$hidraw(&(0x7f0000000680), 0x0, 0x14a042) r7 = dup3(r6, r5, 0x80000) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f00000006c0)={0x2, 0x2, @stop_pts=0x1}) r8 = socket$packet(0x11, 0xa, 0x300) recvmsg(r8, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x2) r9 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000500), 0x1, 0x40800) mount(&(0x7f0000000840)=@loop={'/dev/loop', 0x0}, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='pipefs\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) recvmsg$can_raw(r7, &(0x7f00000007c0)={&(0x7f0000000540)=@caif=@dbg, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/145, 0x91}], 0x1, &(0x7f0000000780)=""/54, 0x36}, 0x40000040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x100, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_mreqsrc(r11, 0x0, 0x53, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x8) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@x86={0x8, 0x5, 0x1, 0x0, 0x1, 0xc3, 0x4, 0x56, 0x5, 0xc, 0xf4, 0xc, 0x0, 0x6, 0xf, 0x0, 0x7, 0x1, 0x2e, '\x00', 0x4, 0x10008}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]}) 2.925323508s ago: executing program 4 (id=1276): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000200)=0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syncfs(0xffffffffffffffff) fcntl$lock(r2, 0x24, &(0x7f0000000240)={0x2, 0x0, 0x8000000000000000, 0xb}) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1982) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000003c0)={0x2, 0x3, 0xd9, &(0x7f00000002c0)=""/217}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x109440, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 2.857991939s ago: executing program 5 (id=1277): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x7, 0x10, 0x7, {0x77359400}, {r3, r4/1000+60000}, {0x3, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "1a5ea5bdf6c7d306"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000080) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e0b06"], 0xe) 2.744715373s ago: executing program 4 (id=1278): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.210509628s ago: executing program 5 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f00000003c0)={[0xdfffffffffdffffc]}, 0xfffffe0b) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000001000fc00000000000000000080546a9f000000000000100000000200200000000000f2a05a8cefcf903f171f438466a860d6bfd0df76a6dc7a469e75f8ccb6473596ca8ced78", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000ecea440000000000000000000000000000000000c3f4de82378d03f96be544d200000009000c"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x25dfdbfe, {{0x8}, {@val={0xfffffffffffffe61, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.210006472s ago: executing program 4 (id=1280): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x26}, {@loopback, 0x15, 0x0, 0x1, 0x0, 0x7}}, 0x44) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000480)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x8009, 0x0, 0x2, 0x0, 0x6, 0x0, 0x7}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="011000000000000000dc6d6b7e0008000300", @ANYRES32=r4], 0x2c}}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@my=0x1}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000005c0), 0x800, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r9, 0x5000aea5, &(0x7f0000000600)={[0x7f, 0xfff, 0x8, 0x7, 0x7, 0xfffffffc, 0x5, 0x3, 0x53, 0x0, 0x9b7d, 0x5, 0x2, 0x80000001, 0x1, 0x6, 0x8, 0x1a, 0x5, 0x8, 0x1000, 0x5, 0x0, 0x2, 0xffffffff, 0x6, 0x7, 0x80, 0x1, 0x8, 0x3, 0x1, 0x7, 0x7, 0x3f133285, 0xcf1, 0x1, 0xfffffffe, 0x4d, 0x8000, 0xc, 0x5, 0xe, 0x5, 0xaedd, 0x4, 0x394f, 0x6, 0x2, 0x6, 0x9, 0x0, 0x0, 0x5e, 0x80000000, 0x0, 0x81, 0x70be, 0x2, 0x1, 0x2, 0x6, 0x1, 0x8, 0x0, 0xe, 0x7, 0xfffffffa, 0x0, 0x9, 0x9, 0x22e3, 0xc5, 0x3, 0x765, 0xa535, 0x4, 0xed6, 0x0, 0x8, 0x8d, 0x7, 0x8001, 0x1, 0x9, 0x40, 0xf8c, 0xcd, 0x40, 0xffffffff, 0xa, 0x7, 0x7, 0xe0000000, 0x2, 0x1, 0x1ff, 0x4, 0xccad, 0x8000, 0x8, 0x10000, 0x80000000, 0x9, 0x4, 0x8000, 0x3, 0xc, 0xa, 0x1, 0x8, 0x5, 0x10, 0x2, 0x1, 0x7677487, 0xb, 0x777, 0xd0, 0x5, 0xfb56, 0x5, 0xc, 0xffffffff, 0x200, 0x1, 0x40, 0x5, 0x8, 0x7ff, 0x7, 0x2, 0x4, 0x7ff, 0x3, 0x6, 0x9, 0x6, 0x100, 0xf2b7, 0xffff, 0xe41b, 0x19a, 0x0, 0x7fffffff, 0xfffff07e, 0xc, 0x4, 0x9, 0x2, 0x1, 0x1, 0xebd, 0xe0000, 0x9, 0x6, 0xe5, 0x1, 0x81, 0x3, 0x10, 0xffff, 0x9, 0xf, 0x2, 0xa508, 0x10000, 0x6, 0xffff, 0x8, 0xf, 0x57a5, 0x81, 0x4, 0x58, 0x2, 0x7a, 0x10, 0xfff, 0x80, 0x4, 0x4, 0x0, 0x0, 0x8000, 0x9, 0xfffffffa, 0x9, 0xffffffc0, 0x6, 0x3, 0x10001, 0x3, 0x81, 0x1, 0x1, 0x9, 0x81, 0xc, 0x1, 0x6, 0x8, 0x4e6d, 0x0, 0x100, 0x3, 0xa73, 0x10001, 0xffffff38, 0x6, 0x1ff, 0x1ff, 0xfffffff8, 0x2, 0xc, 0x1c0000, 0x4, 0x80, 0x2, 0x10, 0xfffffffc, 0x2, 0xfffffffa, 0x3, 0x6, 0x5, 0xa6, 0x2, 0xfd, 0x40, 0x8, 0x9, 0x1, 0xb, 0x100, 0x4, 0x8, 0x2, 0x7, 0x7, 0x7, 0xffff7fff, 0x1, 0x80000001, 0xfffffe00, 0x4000000, 0x100, 0x18f9d15a, 0x3, 0x2, 0x5, 0xc6, 0xd4e6, 0x4, 0x2, 0x5, 0x1ff, 0xf5, 0x9, 0x1, 0x8, 0x6, 0x7f, 0x63, 0x8, 0x4a, 0x5, 0x3aa7, 0xd, 0xc6, 0x86, 0x8000, 0x1ff, 0x44e, 0x4, 0x1ff, 0x9, 0x1, 0x0, 0x1, 0x7f, 0x9, 0x6, 0xbc3, 0x6, 0x2, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x2, 0x8dc, 0x351c, 0x2d, 0xfffff800, 0x0, 0x5, 0x9, 0x3, 0x4, 0x8, 0xce73, 0x40, 0x0, 0x6, 0x9, 0x400, 0x2, 0x0, 0x5, 0x6, 0x9, 0xe86b, 0xa48, 0x2, 0x1, 0x8, 0x5, 0xbb, 0x23e, 0x5, 0x12d0, 0x8, 0x3, 0x1, 0xb, 0x3, 0x8, 0x10001, 0x7, 0x100, 0x7, 0x0, 0x1, 0x4, 0x5, 0x5, 0x9, 0x10, 0x3, 0x4c5f, 0x802000, 0x4, 0x5, 0xde5, 0x10, 0x0, 0x1, 0x40, 0x1, 0x9, 0xbfab, 0x400, 0xa, 0x1, 0x8, 0x101, 0x10, 0x51e, 0x4, 0x80000000, 0x80, 0x6ae0, 0x10000, 0x9, 0xfffffffd, 0xd4a7, 0x0, 0x0, 0x7, 0xcca, 0x2, 0x2, 0x4, 0x6, 0x2f9e, 0x9, 0xf5, 0xfffffffe, 0x100, 0x9, 0x9, 0x8001, 0xf, 0x9, 0x1000, 0xb, 0x8, 0x4, 0x4, 0x6, 0x2, 0x1, 0x1309, 0x9, 0x6, 0x3, 0x0, 0xd, 0xff, 0xe, 0x10, 0x5, 0x20000000, 0x0, 0xffff, 0x8, 0xd, 0x0, 0xffffffff, 0xffffffff, 0x4, 0x3, 0x0, 0xfffffff7, 0x80, 0xfffffffa, 0x80000001, 0xffff2e7e, 0x7, 0x3fc00000, 0x3ff, 0x9, 0x2, 0x80, 0x1ff, 0xd2, 0x402, 0xffff, 0x4, 0x10, 0x3, 0x6, 0xe60, 0x4, 0x4, 0x80000001, 0x0, 0xb27, 0x5, 0x1, 0x5, 0x5, 0x7, 0x6, 0xfffffff9, 0xb9d, 0x3ff, 0x8, 0xff, 0xe, 0x6, 0x1, 0xd7fe, 0x8, 0x4, 0x8000, 0x3, 0x5, 0x575, 0xd0d, 0x0, 0x5a5, 0xffffffff, 0xff, 0x8, 0x8, 0x80000001, 0x81, 0x800, 0x8, 0x9, 0x80, 0x1000, 0x4, 0x71, 0x6, 0x0, 0x1000, 0x6, 0x0, 0x1, 0xd0, 0xffffff9a, 0x6, 0x8, 0x0, 0xffffffff, 0x6, 0x8, 0x8, 0x9, 0xc, 0x31, 0x1, 0x5, 0x9, 0x5, 0x0, 0x4, 0x2, 0x8, 0xfffffffd, 0xffff, 0x2, 0x1, 0x7f, 0xfffffff7, 0x3, 0xac, 0xb, 0x12000, 0x7, 0x0, 0x4ae, 0x8, 0x3, 0x7, 0x20, 0x0, 0x339, 0x7, 0x5, 0xfffffffc, 0x1d14, 0x1, 0x81, 0x8, 0x4, 0x401, 0x10, 0x4924, 0xfffffffa, 0x9, 0x9, 0xfffffc01, 0x4, 0xfffff1ec, 0x5, 0x4, 0xfffffc01, 0x401, 0x101, 0x2, 0x4df, 0x3ff, 0x6, 0x0, 0x7, 0x9, 0x3, 0x4, 0x4, 0x9, 0x1, 0x19a, 0x4, 0x3, 0x2, 0x7, 0x1, 0x2, 0x3, 0x3ff, 0x9b8, 0x4c1, 0x339e3af6, 0x4, 0x6, 0x3, 0x4, 0x4, 0x6, 0x8, 0x2, 0x58c, 0x8, 0x7f, 0xb, 0x7, 0x4, 0x7, 0x1a8f, 0x2, 0xfff, 0x8, 0xe, 0x9, 0xfffffffe, 0x81, 0x10, 0x0, 0x2, 0x7, 0xaf8a, 0x3a3, 0xf, 0x8, 0x200, 0x400, 0xa2, 0x1000, 0x0, 0x8df, 0xf3, 0xd, 0x10, 0x80000001, 0x1, 0xf, 0x7, 0x9, 0x80000000, 0xfff, 0xab, 0x0, 0x0, 0x6, 0x10, 0x4800, 0x1, 0x5, 0x8, 0x1, 0x3, 0x2, 0xa00, 0x6, 0x3, 0x0, 0x6, 0x5, 0x695, 0xefe1, 0x80000001, 0x8000, 0x3, 0x6, 0x2, 0xfff, 0xab, 0x20000, 0x7, 0x3, 0x5, 0x9, 0x85f, 0xd, 0x0, 0x3, 0x1, 0xfed5, 0x2, 0x8, 0x200, 0x5, 0x58, 0x80, 0x4, 0x80000000, 0xf80, 0x9, 0xbe, 0x4, 0xfffffff8, 0x7, 0x1, 0x5, 0x7, 0x6, 0x8, 0x2, 0xbf54, 0x9, 0x0, 0x3, 0x8, 0x9, 0x1, 0x3, 0x6, 0x151e, 0x5, 0x5, 0x304e, 0x3, 0xffffffff, 0x2, 0x35, 0x7, 0x7, 0xfffffff7, 0xb172, 0x1ff, 0xfff, 0x0, 0x3, 0x1000, 0x3, 0xa00000, 0xa, 0x500, 0x9, 0x3ff, 0xf, 0x9c, 0x7ff, 0x9, 0x8, 0x7fffffff, 0x5ab, 0x1a6d76b4, 0x5, 0x8, 0x9, 0x10001, 0x0, 0x2, 0x5, 0xb, 0x7f, 0x7f, 0x5, 0x9, 0x81, 0xfffffffc, 0xf, 0xfd7, 0x1ff, 0x1, 0x1, 0x80000000, 0x4, 0xa, 0x7, 0x2, 0x9, 0x8, 0x3, 0xfffff801, 0x8, 0x401, 0x7, 0xb, 0x482, 0x8, 0x3ff, 0x5, 0x8000, 0x4cb, 0x57, 0x9, 0x8c, 0x6, 0x2, 0xa502, 0xfffffffc, 0xfb, 0x0, 0x8, 0x1ff, 0x1, 0x7, 0x339a, 0x7a, 0x3, 0x1, 0x0, 0x7, 0x1000, 0x17a, 0x2, 0x7, 0x0, 0x4, 0x0, 0x8, 0x2, 0x0, 0x5, 0x7, 0x3, 0x80, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x8, 0x40, 0x9, 0xff, 0x10001, 0x40, 0x1, 0x4, 0x9, 0xb, 0x8, 0x6, 0x80000001, 0x2, 0x8000, 0xff, 0x80, 0x5, 0x9, 0x4, 0xb6f, 0x2, 0x8, 0x1, 0x7, 0x2, 0x3, 0xd3a4, 0x3, 0x9, 0x8, 0xf, 0x10, 0x0, 0x7a7, 0x0, 0x5, 0x3, 0xfff, 0x8000, 0x2, 0x7ff, 0x2, 0x100, 0x6a4d, 0x9, 0x3, 0x4, 0xffff, 0x401, 0x5, 0x2d27, 0x8, 0x6, 0x6, 0xc8b, 0x0, 0x501, 0xb, 0x9, 0x8, 0x7ff, 0x7, 0x0, 0xfffffffe, 0x9, 0xc, 0x9, 0x7, 0x4, 0xc8, 0x400, 0x4, 0x3, 0x7, 0x8, 0x7, 0x7, 0x8, 0x6, 0x7fffffff, 0x76b08ad2, 0x8, 0x8, 0x0, 0x8, 0x2, 0xfffffffa, 0xfffffff0, 0x3, 0x9, 0xd6fd, 0x0, 0x0, 0x400, 0xfff, 0x2, 0x1, 0xd0e, 0x7, 0x2, 0x6, 0x9, 0x2, 0xffffffc8, 0x6944, 0x8, 0x2, 0x5, 0x80000001, 0x4f, 0x3, 0x6, 0x6, 0xed94, 0x0, 0xfffffff8, 0x2, 0xfffffffd, 0x9, 0xaf7e, 0xffff, 0x80000000, 0x8, 0xcdb80, 0x4, 0xa918, 0x7, 0x0, 0x5, 0x3, 0xed9f, 0xfffffffc, 0x5, 0x0, 0x80000, 0x5, 0x9, 0x7, 0x5, 0x8, 0x2, 0x3, 0x3, 0x4, 0xe, 0x4, 0x6, 0x2, 0x73f, 0xfffff800, 0x2, 0x0, 0xfff, 0xcb, 0x2, 0x8, 0xabf, 0x5, 0x81, 0x4, 0x101, 0x30000000, 0x5, 0x506a, 0xfffffffb, 0x0, 0x6b, 0x2, 0x6, 0x81e, 0x40000, 0xfffffff7, 0x1, 0x8, 0x30c3, 0x5, 0x9, 0xc3d9, 0x7, 0x7, 0x80, 0x3, 0x2, 0x8a45, 0x80000000, 0x4, 0x3, 0x1, 0x9, 0x63, 0xc7184d1, 0x4, 0xd, 0x100, 0xc, 0x3, 0x3ff, 0x7, 0x7, 0x4, 0x8, 0x6, 0x7, 0x4b2a, 0x8001, 0x7, 0x3, 0xdb, 0x5d, 0xffffff00, 0x8, 0x10, 0x5, 0x81, 0x6, 0x7fffffff, 0x2f127dd6, 0x6, 0x8, 0x1000, 0x2, 0x401, 0x1a14, 0x101, 0x9b98, 0x1, 0x7ff, 0x8, 0x100, 0xb55, 0x9, 0x9, 0x9]}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) execve(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000580)={r11, 0x1}, 0x8) setsockopt(r0, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r3, 0x0, 0x7, &(0x7f0000000340)="060000007f00000100150000000000006d68000000000000000000000000000000000000000000000000faff7e00000100"/68, 0x44) 2.209083562s ago: executing program 3 (id=1287): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20, 0x10}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01040000000000000000070000000900010073797a300000000040000000030a01010000000000000000070000000900010073797a30000000000900030073797a310000000014000480080001000000000008000200000000006c000000060a01040000000000000000070000000900010073797a30000000000900020073797a3100000000400004803c0001800b00010072656a656374000028000280080001400000000205000200010000001400000011000100000000000000000000000a00"], 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.981450634s ago: executing program 5 (id=1281): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xa, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES16=r1]) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xcb, 0x0, 0xffb4) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000007700)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x63e6}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000007b00)={0x3, &(0x7f0000007ac0)=[{0x0, 0x5, 0xd, 0x2}, {0x9835, 0x8, 0x80, 0xb5d6}, {0x5, 0x2, 0x2, 0x4bb1}]}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002) connect$inet6(r6, &(0x7f0000007740)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents64(r7, &(0x7f00000066c0)=""/4124, 0x101c) write$FUSE_INIT(r1, &(0x7f0000002340)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000023c0)="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", 0x2000, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0xfffffffffffffffe, 0x9, {0x3, 0x1, 0xfffffeffffffffff, 0x9, 0x1, 0x0, {0x0, 0x3, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xc000, 0x0, r3, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007780), 0x20002, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f00000077c0)={0x1, 0x0, @pic={0x2, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x3e, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000007a00)={[0x4, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106a, 0x100, 0x8000000000000, 0x8000000400007f, 0x1c00000, 0x6, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000240)=@hci={0x1f, 0x4788, 0x9}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000006680)='8', 0x1}], 0x1}, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004540)="b298ee692615637312c5ca6ae1b90f9dce35cda4325b13708012d45b68af5ea61d196195ff5dc9a2a267a3251b2723f1ccb8e19c33ad53f52cd41891242b3e858bd12d6ddb96a516176f607be68da20c6e7bff4dab8632debdbe3cc6f5c00c706ddc501f79c24892f5dbc80a0a0cce2d74ca5e0133338d972f38d6dfb98a8f4abf7a33be4e30e31d1cb381e38e7f3865fe2198a1511cd922670c5a372113dcdb448e5b784a59131d98cacfdccbdb872bb2c48c56c1402ef9a2d3cb1d08a6a74bd58d4a33ed0a0f9e662386e23795e959e1e3e49855466cd9f81fc23ffe6be29c40635d62185bda40d6d8b661b5560573b010fb15f92d8a786a30bddeaa6514a5f89b8636c79f028651c642b8880ccc53d58fec9597faf05dc75e239d214bc381524a2ab6cda875b4e7a04d5e995c827780576a0b7ca29908e924ce09041427b268357bc7fab0f89fb75be7b1e1a1b6bfd8239217ffeced26e09d99bf9548d4ded17bcd0de849b25cc0ba96cc03598c60104d7fb566d2e9214d1bece0b5771428e5682cf8485d23f5aa58a1018f8b37c939d94b102451c1b35179eefce49799be51eed16019c4a3e6df3006ddf9686e33a7e6170bc5d998e00790c5a9a3dfe2a5d74ee97412d0b2fab01a8f2072cecfabfb76e508bb4951ef07cfbae79eb4145758815e5b5fa611d7547198f7e19be69f148ff03aab10242c9e542cc867b17dc4d1956bbd5223b08ab70b3d2e6fb1380079928b83c9200cdd23a2a6733bd3f346bb27e95991fe4539ead94de993e0a6e242019776949e6f5ee7b198fdadd0c4a898bcf902ea0999f0572dd666096ee90b77f27eb0b619e7470c57f2194061dc6857c78db92d6260ffecab087b78a5e5a2139e1f0069fbb9336e9515fe7b62ffaa7a72e27f132f748b88f0410707d969e1e1c7045fa69c5250cac2eac62ccd10c39a664727a6c967d822b1f4d48986a30739503c7de74ca360a41cf6fb9e05d9db0ff80691ce0e6b8dbbd09acfb5710c576f35501da89f68e23287fa48ab01198e252e3433389e666da389b34866d7191279f022af7838c878e3afa9ba0bbe772a2d70073a94be2ebdf66d30f8a4eedc2f885dec2cfe811c535d832945d417fd0e8ec4c5798dd9bf7201aa84de09242cd529a0c03ea0fed83d58ad194c55757de7459f64b0d26edf45369e124d54b34475b993d1f33075810421140b80cb1d13e2a6fd29464fb99f390e4f107b260cb5b2f7445d24b31dc0285d0f4829c63c2637ed3d55eda8deafa0d3bcf4ae5bfeda8001e47e5f21ac385daf57f9451b2f8bd1175c8eff109f3b09abb174cc68e28ce9e62d7e471393ef4876bc718a1c5d657482075d24c799a9641a3be8fa542b65ea288fae6c63b730b8a9a7b15047ca9af2bf9c2e997acc95123ad3888ad3e2cb5268713e5885f951b8e7918597df00956a014a513c741b1fa8a8ea8ca22279f11f11457bcd142c9e364ebc16d3d78794b37d72d2fffdb17bcd6deca39b14a3c2f88474cd80c2dec9c641bc9122921e7c845688fc1fe5b1d52caff1a5fbe83b15917636d90fc1f69b7e9a63667affd177150a24512416e1ff390f5e427b32031e8d743280f2665b96c3dbb5c24b4e195371dae19dee23f956ab01abf9dc0a6d1e693985b4e98c173c97526bb9a17f20a7723cfbe76868ba9d8f8b86bd02b3053a02c4960c4519f7e747619dcbb52d444ae4b174e6acaa7493dcf47e37ea2f02007812a208c61f80cc18f92f39645c54d5df5c0b0ec19cd842b8a9eaafb929b0ab7bb9c4fcd435cd1c5fd42499b557e4a565b9b098e521edd2736adc660f1e8307cfbb3dc83889177bc4c49fe62ba8fc54011717d649dc80ba5a07e88bcc45e4de04e9ce8f7b9e6593ae5468354e9d2e32e826b8a8051f294c6c50f405f8faac31f57479387458ad29b9dc58abb0b95f6643017d716ecdefb491ebcb5c0a69dc000072f7514fa533345cbc38a417922f11ad523aab0ecc26ce986d5f93cb707aef7d119a1f3decfb36af581bf84f52875464089d3586576c5d733565b90e55c39560050eef17dde9bfbea397068820c7e7e1ffeddc5cfeb931f5977118f1c1e3f642290e9899c96a9cf1eb3da8fe26563aedb66790b1a4cf219fd4edde956336d4d7c4da6a2f6ed436f20fa230cae8b582c3d848c40c7470d7c71149f00197e4ce8c9238f7ac781135492fdc66836c83f78ad718628fd2327b96ffad993b560de67d90c5833a000c396402b839d296e0d69ea017670a473377cd81ddf2083168819b5965102dff70e234fed58ce5f88f173240c6b6ac8f7855d2a468fbce29ab7f77887c4b859a6c26024e029e3491fd907e7345f64e012100a24960d4b9ba552895211fbb6dec95ed0f55ff8226eaedff45050dba05eec228e6a1fd16e18b6818cb9ae2adf77df2eaf7d79bdfb9dfccd8a084563205f9dd22ce1de612398b3f545c1380e043b7957c0cab59bd660b1554d123c6fdbc9320159e9de519b36c45bf73726a501cc8e166730b8e8f5db50aa911d2ab43d3ea0c63c178cda5e4cf22b74759e58ddd045bb83864ddfe1e46e2c9800079e5a1200ced29c767c696856dfb092ddfde82109f4b74c63911f6902ced43889f87201243c4e24eb1716383425c90639cec9cd763934cf21b924aedd7ce3b4bf14a321ad2e44c1064e4aa68005fd27009fe3fc30b3d1a728a94a3ca7eac968e5fc5270655c72debd9cfe4187001794d03c094b494cf550b7faf71e7ec3d4f4dc925da9739023d045bf87cd31be274be3d8213b2187c043f4caecf40f1ab1a490b507ae73184d5c233a64895dfcd4b97d6a6d8392d3adf07c1fda5699deca697bf8ead69852eea6b3e252de1fa92656b4304eab7cad06db996346c3ac1aac811a8f1a88826549bd8c59ce4204a6aae1fc1c221bda9cb07587f55c6abb703b73436418c9735514faa7dcfc0013d25f28f9913ae0bbcfdd9667065ededbf5bb171be908351313f1f62a4cf742d6503b21ef3cef6f54835d4857f7c5918050634d827a9610dae2aa596e31d2a2ebb636173439dc3444f1b142877e7512e5f8b36ebd298d1723ea13dc70cc6eab1b1fb3d5c1299c6333fb9c9e524ac66c4ef0ea291b40d07c82b625133fe87e0d9688896b45ef6244b796d00129140f10ceb4d233a75e9118b08eb206d3a1ad77ac06834969491ebe70d34d2d861673846265e40918d25a7fa3ad0833fdc7bb8fa91320dc5522d7b43569583eaee650f1ae04098732548f3ace0b0716bcf77bfd4538c44abbe9f6f9b721d2c37b77e7bb1f9eaef0552c7bcfedf78e8ee6bb8e105001317381579f9211342fca967e4dad5560e49b88c55a6cf215a9abe8023d232ac33cd1cc2da5965b8a44aadf102847ed676d65d62c6b902580aaea22b644b7cd04c5f1a6605aebcc6e68f829401630df73b64da59e5bdcf3179e37bef0d6dbf2969b916ca55a970bdb36776d80256179ff484dce332ac09f822087a57882fa8207f723f7e51e46b5c78546dc54875b7a8a3d387fe9110f72fc57d64f73ba9f16cbdbd2c39b5ad1cc8225dab01dde5562756f6945cbb9740ae3a1faca7467fa9489fab435122d93cca8fdb02ee4d62a537e080d7eb2dc4b445939adee26b382afd54ffd6f538fb0b29e5efbe199eb8b0806dd550fb3886a01f48e05fde00135b7e4481c5ac2b01e938bf80aaeb11217ff2a6abd6c7c2e27f4ffeae3bcf95c5d568bc798dbd760d70a08f1331f2ed5e93dc7544750d6a637fba547c1049d623cee985969820838363ce60632df7f11003808881955bf29ce40d16910d515503a133e9cafeed08f17acc0be054e1dcfb2d1adbdb77a74ea7dab0dd150c454d30bb1b511378abd927f43fcca788f6b0a035ae55589ae9df5f9396010e378af077311b09171725c1d5601344eef44c4969097da3a990c50a27ebbe05ea6972ec8e965264b2092e23eed7fa782044580d0a6fb8ea31605159eb059e1cc2d98acf27ca2dce94dfcd0f783d2145a62b1fd4782477208e74c007c404f6495229d9f1197818b50469e2e72093d5f22141c617463ababfd60feb53263bb9bcfe5c25a30cb2b2006cfd0342053914d3e99ca0deafa615012f9fd6b023ee2011fae2a8b1c2b120212002157c06d69de68c348ec5871cb9d88be960dc8263dbb64ecee6d9f7101797c1960f5513b0270abff8f12c2b59af7ca2575493d712d467c96177b40fa860e7f89d5201b35f7ffb8a070ecacc0732f1ae753f65dc80ffee6ed3ec422d71820e6fbea0989b257a2583a339eefd6f6c80e370fce39007d9f7bfdd02ba08937336ba73e56e7be59f257cc26cc8042d8bd741963cda2de6f902f377cc88b62bee2a2aafb235c5487df28988220087cf6e01569371de07a8039faa9e67c9c5e5e2354cc8296d248d2753f55407be4841ce0f4961257927cfcef49ec98746c08ed965032732c490f0ca95bfeca98849449333d7572bc8f74acdafb2cb08d909adfa15d725d8d1bb4cd30fd014816062421ff5721b3b9b1d261f7d456a34a22006613b9e371461c5ba225c613ae00758e9b7c26e8859f2d463afd5458e8db7019316290a5fce610378a1e898bb4ed647ec1da45d0508b5816db4fb0bd4dd3198b58cc88acef8c3c8aae1621b66c5fc46adfa04a4cbb03c7da93b0b32d5f83d8f3059377ed078ed5d5d12ba4ba1bafde7226f4ead61c18d482bc2b531c2109c841f7f9f50ed6f63cf6db3a18aea286cbe658147c4138e11c95b498b2a14789931a2d885187b55463e1aecf294f7e7d1d243888bc611d25158e29211bd674195559aa58119788413512148ee38f7d692b678790bc654811ec92e0d8d6f4abbd15376122812a567a406199074dbd1a080fd81cd8989972c9dd6b2962639a9069bd87af8235f54025b2ff21840bf0c827bdcdbc5374a898b3b9c7f7721b887deecba0aea23c072cb5e2be9369872e66d3d5d179446c9e00ff150248a9cca406d1087670d3da672820e8c1e5440309999654d528d17b1ebaa7b27a4612f300140bc0d5d45bb9bb320c4eda4b4fb03240123973fadfb8fd364500032c4db1bc355c9a5470967eb006375ecc7264dbc408cdca3b6112d148f524ce4ce5b2275762c55de4173f10564ab2a374381cd2e640276089e23bcf6155fe54d1812acd097b2ef65457942feab804e37f8070fd4293045c3e172e7175552b1fa4b233b6504808dbea4a3a3ba788a466646219616914a42a0c17768bb83836f4c0ab93b12429a6565dfb61a51b304502afd068b7a40674fdca68a428485ce2a2bfde7b7094753430ab640c85f7d4e1b2b6715360e620f27304d3ec17beb3ac3a9f998e9647ac076ea582c6c6ba2b2cb3d23345ab14ca0cf53a75d8059e10ea034ab9c9aab653bba6baf8d2c4fc64c70354a00c269110999a6c41fb444f4a6f5279c79fa8a91db02b7ad68b75b5d3468c8a11a5d976a999db5c3eb676df4b5e4e2a1c331229a712592307f9bfb0d531af6c53076883a737303d84518bcb5a128d4734eb4a226a192a661d6a28d6f03bc4360d25d4e8a949912d49427a4c038c87afaad39d1e4c5b5644280c2d487b9221eaeecae258e713ff23feb67b6498a53a2afd24bab8f2a7be5794790e410cac18939fc4d33fa146da8ee6b7c2c24045d33bd0ec3f3bcd6bde98228a3ba0999204c73eb20afe0d909bc83c1071ce09b184938f58480ca33629d43765066e38f41dc3a6d74bb04fbbef7b8e2b603983f887ed3496d03b8e7794a4bcbbdd55c3d3d934dec5ca62de1189531e6d7b5da01e9efac6bb84a47fdc3a490e8df261052d2de5e35ebe0f7cf381a4cf332976b4e858c523ee49e047b2105c30092daf002410337e1f4cbbb00bf7720483186a6887abe57f56178c9f780d04894e0ccdd7a8fcc896f52d8a34a38d1535d6575f1bf03ee083bee21a4543ae01c3c802707352590a047697a5ec1696b7670955226d39df079d0612552e350806630f1cc6274c296237c00afae05331909363ea543f618d99ce6cce4e5ea79b322316a28ac733b553acce2ec24029a9e5c693ff80dba936b6fae51242f6d98ae5f277c80a727015f6bcf0b15cb0dd42415ac31d4e952dc4b957580b7566a619eaed2346907e96985845fc4ae6b07c320d58e4f42a386683a7b04f6a3fa70ebced6fa465504f52d5104e3791a596e2e11e25263cb61d4fbcb77489966a16eb99147b85fd44a378ca8c0acef313fd3cec863445973e89137ed9fd18c5906766b6e044c97f7d316bec5be1a5e7281629d44effdd9d472d2a22b4683f9e3b3a601e63a0bb9c3aa5988a50865d258ba410afecc83a974ddec18c654d26904eb83539aeb116ba2a541c96321f0599c98c5e629c57feda76d8b4935e4d81f275140ab95efabc3ada8003978acf93457797ffc4e474ad52a6175ed3503749ec7b2d967dd1f1e3dc6b22fd941581ed4df966e60d79ac7dec50bfacab131b67a9a4046f34e6ba590429fabdc1647e3a97bcbc3134f092bff596d651c27944753808528f04548794859dbc4d2dc269bb3d67d042d6f8fde1727f01c3f66478964444ebc0c718733b8465ba2b13639eb039d615f667173fdbbf713d2b560f12db0a718b81e1a932019b6b1252484d9fb77ba3a1e0b9d55dc0272f8bd066b317764a67045062e2dcf24ea2744b101613164f1b2ecc04dd96ca324112fe6dae3ed03d7d3dc46cdfe5e5d99761fef4fa8489d2504abfa73e21c98122b20ff21588269229319952fbea64bca21fc57d2a437b0c3718a12fff35521b56cacef42b49b1ad8abb45f188ac771dd6087068e7d6ceefc881b45dd4db470649a4f205312ba4326c3e6eec7088b93403acd90ee2e326628a07460fc84a94bd439b78578fd14c78e65457735817354abcca9ba57f3763478821fc74caf877256146f2f428b77c0e34415b28c970b5ebe4ff27baa35539e2f5122e0211eb907a29837ee47abbaa25907c2fe1444a767c3e07d5839c0b5dc1baedcd8f3a8e363bd3c1a60a089cf9f722b26ede2979b310668250f0b4eaa91be149e57e880909a85be230f2849fa9705606c7d08053841ed5b9ed7a687d31f42aba2a4a91158d2462aae0c8f2035a2a49b701affbf7a136b28e9e5be3cb6f5eb84315e852d977bbd9dc3289d569e1b646973704d0aac18cc0ff551f8a786f4d51ab5b22c9b343b4eca794e5a60e671da7fdcb531eeb95716a663b241436b56dcecaa0fb446f63301cc840275c64e59b8694c0950a84757f4d573303171316c410d6194be7f569eb521b9debdcc923ee652eafce66bed4e2485edb1876160575651a5ed4d5375d169b819a4ac61b0eedf7644714cc7affca74d754e362a55356e1d1b1207404300d428fda5ec81143661449f22206cf13d3f810ff6863b3ca61c7658957cc0aec22223a78c5694b2eee07a2110df1b39d7f5286f5949144c98f965c6def105c13055c010ffc9d4377b37fbc9bd38ca2b0e836b4f32e68b98efdcc3a70e70dcc2ed0c292e541635a15c65318a5f8b555182a3024ec48acfba90cd512ac14abaadd02afbf5cf35e6ab5ec8b16083b08bf9ceb26eb9c8f6a3fe0c76857a4f984d87cb8236a5850bc4ad8de9f582dacd5b91c154fe2457a7ac7711cb427c4bfda5cafdc3a1c5b5e4cd8c0a18f56d791e86f134ff3d27475b2aba8ec70197c74a9bdb51e873a540c341a4861a3d406cf6d8e7b60c364907d3dec8d98e53d640f5f51383355fd2ed4b4af2e49ab39450937b94efcc7ee3549863b58cb9810becd1a7de4751aeb05282fefb1feb3129e52c881e6d11159e52c1a933e140025b432e9823db702d17b60503b6a59fbc63da22986c8411d3184abf7fb0532914d3bd651c2de84b9dccf0bbb62a0a1b02b089a50b0dc855323839a3c1c75f71048873e01befd740c612760d8467c0f03acf32c683fb9a2cc9d39b570905ee096a560a95095d40f8617a49e92b45a3a7e6a07a0f1361f3f36c1c64c1c1b998111b53070765d64f5e1827c2ad45c7db7a3fb2c956a9be960cb8f2bd5d6bc16124cea79a1553c240fe788b82a8429c950ea3b7c9b503f2f2f74c26e7842f988173c44df5b2ec0be9829039bfce21388042da5d27e93d4d0759a88f045f7db733f1fc4852d0ea194910865ca1202ba29bdfa37ef257bef502cd3e6038b3e2555271901e7639a25988252bb94bb4729712578473a70add94ca29e57c4de15a3824c2bbcf6b1b669941ac0e7805cbd4b61297c936f32957596c695b94522bf85c478173982d4954ce30ecfdbe8ecd55b0a7da9315678f19f3e500b0205b8a5a1c6026b618c03887b3505b3dc89d6f8f843de9d3278fd4c018e1ac489460d5821b22674ef41056d2006e1c21c13399631e1fc99c7adf5c58e77951acdcb19168d5952da500fc83037ae891018828a308c98913855258250f2175aeb8418226a74f121b89f350163dce75289dd131ab32bc8277f59e1b5044ad60e7a6e7e06b453204c2bf255accb33a10a81e5d73d1eb87cf285f7667d9c21f188738ceb8ccdbb9699d776ac88e3310dd76727f24795869708fb1fd154f205865be6f338c2a7c4b25662ec5699d1e61c92afcd2c798d33ed3d8560b62e6af5566bf9062116980616f93a3b5089b089faa1b19ad165027184878aa58c5b567c1e0468a5080370137f0aa35d64300b2f563131767255e41ffbc1c8a913b59a50cc5237387881c20e2ad52bd918dac02a9647f78384f17008d362417d79a1c649a55a0545b64f561c2902352105afa4c2f28406323ea35f828c5cffcd7c67f7e9ea7b1659de031a9f7d3f3698fe762834f1ad629012aae6b4af6f9bb0303637830c1e1450293f364cace9dcbfca68027930b780f6894263321ac4374887c048b4947c99bdcbade934dac9dd0fa8cba9b031d9112bb77fb6871c70c544020cb802508299c5a045311d9dc35dda7b0015b0adbf5f82e01ae63fc8e00c455aea6ea25bb72b90031444f0630cf20a9dc4d00f866ed1c31833c0b1c401211960dc6910b6ce97c5161f9a67989d9972092670fefe70c00d604f2cf138e751edce121957d1e498f64487f9766c277ebf5aca1f2e6b9d39b79535cd2327a7788b1bae5056f12bf13ca644873470eaabd4521efeb9586535fe329b9a6089c2438ba9f74ed322fd860beae4452594f7ce8bd104e33cff9e47a020d6fb5e7e1a61bf964a87a65fb636a8ad7acca8db245edcb5ad564e64ce3a3799cf61284946b17aa59fe68a1e4b855c0fafcfcc94e5143710c7f7e74db4952c480c3a81c6032ef291f9bdb10b1d5d295e11e4a7a8c5100a5565d99f64ea6fbce05360f9350d1d4f8f7f5aebbf281ddd89a46e067bf4d261f2261e1fbcedad02dd21dcc1f2f904587829f6c19809fbbd5fd5ef574b9b77dd92440d76f81df68a0cbb96216093bd6ad6fb2bf74ae573f8d00813df57abc3a877aff835fa71a1b57fc1bbe6a3e19834edc5bf759a64936ace2d4bd42c61e2c914cc384b08a2c6d2a1b8b61bcc0b80382fb88b0cbdb11a3df1b2af197b3d2fa7cba51695145473f851df0440f76d90d2416b55bf8f26d6c021f2e5163399e37a9a56652dee4739bbaa1d73900b2ca1d88e8be70ba86a13e076ffdb9a2a7e77b72a4a62d90e148dc40f6f325c2994b290af08b1e252541e632f629bb7b10cac2d78ba3ebf5e6dbd7fc434d69417348540408ce8d5bd894a88fc16a01dd301bce7a781f88ba3401ea71ffce688caa33d6a223adab29c56ab68a0c656a79bd008ad1411ea28aaa925b32d065d0bd810ef79ea4a565e0991e396df3dd923f4be6e287aecabd9a6aa686403b637dccf53f12e82e64253ed1611b4d9b4c22ee395fc3609cdd545e46c37ab9e8edf0fe55d7b43a57ddcef099077ece24c105eb9558d995e90a7898d8dbe7a7d2ea3e7f0cd1afdb9d50cf879ad4ab8705b456078662cfbac5099c14cb8ee7bf5ef260ccdac150f28eabd5649ef83e0003151e48ab6f0f3e77d354f70de68468c1150555c6e0a11ae792d85d6842068b85494c743e81083a59235a180a9f43f4a1ab109d222cc326800508e7585165aea90dda1b866114afd96db5da3e7b0d4485d3ee964948c52878e1c06d738ac2e56efb97b7deeea4e322a2218672172e364eb482cbabad29aa6d1d2e545f7c273c511be05c0e81b34efb3e9bb48694ec3ea30371e31120dfda7c5d86af1c477f20871bcb3d1a1b5e344a1060f318a18eed6b686b527f7fe746ff08f6d4fe02987718de61aab5d2b1d87a2f4c50cf02a74a8786d70f266c054948a97f27ef1768e82810dfb83c465829db21af77a2b62ba8a3c41f95210ab0ac15bd62435d023ac9941c3427ea07529cb6125b60910b23598c64d1df01aef10ac7289f2f09b0c59f92b2adb828c15c5c6c50e41da4a8c8247bca58c24e4ca51eefb41b4d8677a16322f30f4a3c5ad5698dd2e4ec5af40b0686e30e8ce5a4eafc6d4a273b7b7d837d413e76967dc4bb6acea671a2b54fcab9d894be300208f9956e40c847c7594a24600a3093966d84b44d5812152f37796b89bb5c54a46385bc1d899973482f23ada9a5e1a2ffdf9a58f90518bbb107b97feeefa87671f1bd82e2f539255ecf2c9a53d6e2295209512864a192a067593468dde89be3b8ac71567ee00fe56e086f9b281ac623f609f3b3130544eace7558a44ca6dcd4f84f2f878e006081d8bd04c7f5c6b259f4e46a4c896a1ca906d7bb23b6841a89fe9e42aa7a8502f56710da471a924f6737da44db153fc0770bf1589789d032b98ad79dfaac3bd87ef25030cdd8d1d1df241d066b288cc9e7db6d36005583bfea0c8c4d6314623783e599f50e1ba52cbafcf5e261cfc1413421ffe5459347943d761edea2fda604dae4bcda50032508fcb20a4252b9c959d2e70b4debd071a752bf5a9405ba563f6b6794e6237964d6e3b5b9125f29d263d8ef5673a981973b2aebc4081339ba738b4573ec287b86a6866516d4df25047cab3d8d057b4fd6a18ed67cb3be4693f5f21c8f968684bd45aa646cfa6c941994967a5a47139e99fed743d5e470119ab560324e96dfbf17e4f6f056837997eef4792267ab6f30611931d8db2a69557f3e1aab9e4fd401182ecf5cb077bcdac7d5d1f80f5a62cef2a176d33c238c849467b08f74d981a769896f00e301781b5bb27a351ef8d391f867f2ead5c91c298bcf26e91636cb1c89aaa9f25e2804756fc3c88f08f28172ed842d69ee00a9896ff14ae5e79e77f74000bdffd27a4af2e1c4a982ace0561a5ce7574958293207d517df4a896e70dfe0bbe4ad94c321d79f439a60729b6c0788f1bc879fb580a9500edf5572d3b5e8f82eb8eea62fd6baaa5c29db102dc4bc39b7a98f5eab4320ed4b430487b266857f6938fb5a30011759a9242a96fa2041e011ea0eea2918f62d8ddcc59e08f0b87f3bfdb6de2dde7529556668ebcd85cf678e55e7add9666ed01453484f01ff45128a6c3b29048e0ae81fa674e0072cbd9dfbe77ccd06f59de9ad43da67aa827d94159780c7f03792c87e3526e7182628843d81be2f6a90797cdc8a3839e6ee9a44515bd7542252864534d5fea5", 0x2000, &(0x7f0000006540)={&(0x7f0000006600)={0x50, 0xfffffffffffffffe, 0x6, {0x7, 0x2d, 0xffff, 0x1080484, 0x31dd, 0x7, 0x6, 0x12000000, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.981226885s ago: executing program 3 (id=1282): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) ioctl$TIOCGISO7816(r4, 0x80285442, 0x0) 1.864340119s ago: executing program 6 (id=1283): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_disconnect(r4) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x10000f, 0x3e, 0x7, 0x7, 0x0, "b1771a00000000000000e7a33f100ffe0af09f"}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.814239229s ago: executing program 4 (id=1284): r0 = socket(0x3, 0x3, 0x1000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={0x38, r2, 0x1, 0x70bd2d, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x400c8a4) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'veth1_macvtap\x00', 0x101}) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000001c0)="71b3efc76bde4152abb0472ea1245c016c645e9fdf4197cccaa5f18c281fa0cacdad7fe50e", 0x25}, {&(0x7f0000000240)="225df8cd3cbf6f8585a0addbc843315843045a87c69794863717f95d9ef1469d937365efa89eb8f6ac9aaaba9e07e66bb036b237c787d0a1e7642d9e9966a90f8e83e00196e0778fa17919a957d108706c517e2e9f044e8e991611693a35ed9dc3724a0ffa5d440ecd5d6ff637f2cdf729", 0x71}, {&(0x7f00000002c0)="055da439de57ea9e9dbbc15ca469ba427fa7107f0304179140259619b3bd69d21dbc7feaad4e4a300f1bacb4653b80d2d65835830d92b87b08cd2b3d0eee4026e92bf85b24d12f0e67eeb3ea8c1cac65d5196d619a134e71c1fa6b473039a531c1bf705cc107e93c3d793a30392ef0c3281a150370d51ff0bf2bb432bf419e930d1ca46247dab39f48ce03aa688e3801e8ebcb0e2d409278ecbfa8479e5f6cb4fbc60eb244e8850684259f6d40e05a32da75dea273cd46ba36e20d28c209d37ad2e868aea572b4a01b7665f356a6ab90d35b56c9daca5df44ff72c7e7062ce97d0e698b521a1ef4e6358bc1440277861f115804677fb28da2a8d089ecf1d925006dd70d2855f89a50a3203604391a8d157d6874b41e60f612d51f6e60fbfca9d8451357df0cb3f7527ea789a477b4cb73360b4f8664f6979728227ced6d2b300d3a3ad466252db08a60d9e4e3c9b9382678674180b337626694a4e2b069f404baa2f9fe76531c191a8fc41ad013be40fe0c87612c75fc4855435a55b99440e0ccc65beef7184743dcffff071a3108f708c918f73604eb1306aacfcec92b300ebf0b056aa507fec42c01b60cca3a0ccd0139aa6504a10b32af8104dbf0e0bad07b2c0834c15a80f4789f9b1cf8957d30ee4ee0622bad9591409738091c4d64d740a5c8668f5ec7c3d745a684edc68300b57406c1e55ce7db89295b100189baf3ef8869bb85e7159c6cc712a9b12350d3aeebed31d6c301927acf19eb397f5c8705827786fb06e84a8c7d7608569f0c0617dfbe0d6f70a7496472f5ae5ecc6aaebbb81ee4d0e77b9a3af6020ea4020e1ad5e18b27ba3d14912fb7405c8a4160298df0cbf536ff6d213e12ba7f295c1e2bff3bbaea3ec7cc202b63e16f46a6b0e02cb5fb223601190d4a101e90a961917e46501e9cb822a007c0bfb3dfe60e436789c84edb444905d181f1e9688093e18d5055e12f1bd9ef1ad3d2b62910649d18d9083f66757334df1a4324187edfecfd622c7c4f4213599cf733d2c711028ebe12b89504dfc6e79a2e30d1de91ffdd83660d66bb4a9886569fd1ca207ad491d2bd166f2b007dad501de3102f2e072ce8ab3d6280e85a52b8fa9d999eda5e5afe023576d788f21d1349e12e4f45a43859ccbaff152390e63d39ff355d1e83887904816b00177e658d7ef04449b0d64279b003cc866493752e330b7fef008d270e78bceea38da2d775345ffd549594ce7596f665701397f57ff64d812b7b1605f671128389f6e2bf2e9ec2fd85d6fb722416280571973c98b0256c8cfc0dc4a1aeb8713474b1e5d32a78aa9497999f3679dff119cf8e7bbb7c6636d4a9d284a8ac304a54577227f3099a97ed964cceb59b2560696bec71bb8a126498ddbccfb0a9c3ce0b73679957368cf63afcf81a0997772bbfcb19cae9fe44fdff9b09c1fe9c8e6b680bb3495cb25845ee945a7791930c677b63cc1ba05cd122bf010fe8e7a804b37233eb795ecb4895ba8234478f394ce29792852e936daa81ea3a9cba8b890f95218e73fb64cd82e084232391843dfd0b43506d0f49fea6da0045d36bca220219cf427d7a2fd1e545b531025160d5ea65eec5768f3542345e3b36c3e22bd4081e8d6086fbd271fd7c55d7ba771c1dd62f1fe30a9e2c13a194715c42319a2ddc350ce66902c6c3a6277b30fe0bef878033a8eeb1d67702e1b9072ed909c8c46a9bf640ceeb9ce99f20a5fe05f0a097d7fb34832f4e481e7d8bf7244cfdbed2511082af6cf58f05aa2105423f4e3df6f9e25ac3a6079127e630d620fb4b81835fc606f4142fac7be03e66803efb5f5ee26f9a73e5925420851e6efef8e7807a9b4bddf0d700eabaaff53b3de0fcd649c480f2c457450655ff2b5ccb94b305a1e1d1f777696cc8b1ae7c508c3a7a3df18676407c16fa41f49f5d00fef7b57441545c3643ce1a5f67d1c6f93e4d0044656f74aaa7acc0232a7f8ee48f8f5d5f630b613d77b793928f2352ad70db0c4be89ef723a0f17d391c7122d9645b42e0209f313f3761601bab03e5ee222294bb5a3198cb6189de3109df26167bbe251a68347ee72681894bbb52df0d9cb3a78f5fcad01c09e8b46b9337104c11140be711ba6b852b75de7ce6e16b01de2fbf21d4fa569219dbf5b5b462372d0306e0ece6782e670ca9793209d28ac87fb031b561847995856fcf9c12a2b4d84904d7978f9936c71cabe8abfec872a4abcdbe82b5db04a7ba72928b0d2f48d2e7fd9196aa07c0045a5dbe7b934c2a1854e59e4a7ccda1ad0142435b0dbfae175a4e3916cc6cfe71f3b563bcaa3a7de15b66995870a8cfb0025f7e77208a80d8091734a85918e1b88620fb9b7bb03a1128d71e969c45a2f3b2a64af13d011d9d4a2b66854b7dc08597ac563abbfd0555fd05ef80dd3bd2919c36ab5ec275142bb19dfcb6cd73f0eb38eba9b0264f946728cd1f0b04ce23446da5c6db70199e15d18edf7b876e4830a305cb36590f8cf806883019bd40ca5e8fb991e21e8b52c7541fc9ecfe0a074cfb2c92c96bebdd681b0ee6687d2a110d28d3208c13c2e9a9917988f62ffd7aca54710cb92b3348b2ee39b57f7f7acdc9e65ae3f7197acfa6e1a97c80d3c66da404bff198352e248b02363b98908c5283aa61eee661c4124b13906721aa32c495c130eebf4b3c262e4645ad88092bf7726796199441b8a97cea42f713f3cc86c097034a391725b5ceb905ed7e6cda1ba60fcb37418a970cf5a5dbdcb0887e3d1a5d2f6f0cafb95199c7c469580bb1ce3c9c91ee5aca08fdf44db27a20d53962266fb6861320997e4278b1d26226421ea888090ed43fa53413f6761c8216660b9afbf138460ed2b70ef0ddcab80a8e91f932103ed7b78bd8f143497850b8fe7ff1bfefd54cf5f46984e9e8db242e96d578c6d96d9ca881f2591640194e9cfc01479ea22edbeef2d0766d38f8d8c1001974a318dc9fe04b7f69d6ea10d729dafff93fc4d7dae8848c9dd6a0cb517b3a6887700a65a60a6c4b2791e3232210cee36f3d2393f8b8fc8c820b5555c8a613d85a0580ccf151f0146f331ddd3d114ff3041e4032086cb46d453a98d5acfef8643143299e47586ff8adcc4aac87863cde75f3ce46ca9db4bf61eb4426598e2a1b4e6ca08a6cbc4dc0bbe7f0db25c4fa33b1e2004e988547fa596ae70afad9a4f97475de2db69db1617759ad6a3b8b180a94c973947a8469b65cfb051cb8c7b959be3136f275571c70013a57531635cb042995984aeac4bcd1d5f732ca559c8b801c386b4ea7b21a202b12d6afa8981f720e54708983ec3cf91b16354b2e1cc0307eed558d9ee57d08a2054cb480470930bc7a6e5f25af7d3375f21703de17e4297fa2d1b6e6563b4be0bd909db96b827763b402d3d191e7c46636785ba04c31dc0c425dafb7cba2a62e0b844b85c620ee3ccb0249f834aab2f298f89d5ca7ef09e96f02475b732c6b5eeeb729a9735cac78f134b1c3757ceafad407e33d13e8c088d7e2a4b88ea00fd3024275c09c52bfdc7f4b5fc5a8e27c16f19578d451bc6c9b57fba480412eb4e4ac520b0eb750658087c00744dc53801a8d472bc70596be1a6000c51f01916f6c38d7c5a52704d3b6ed9043923eb8b637c593bf6ec7f407a0bb83e314f3c2b12f886163af8efea1efd2ce7e7f31205c98ecf538d5fab6c7fa175344b9391050ef9132b76184185b3c6025ab8c71ac7bf98fc004bf1ed8f272cca93616a1786e86cf6a67bccc97e5e96f781eaceacfc035c988c4bc5030fb4e3d11af8c638430eab65fc6f89c5d796abe61398eba9c290366f46d1c85dfa5815597a22a43b41489dcb9cfb727a7d849ae36dd2fd00fca31ffaa0894d3dbe41c8366eacc3fc0a47cedf729f40bf747fdac6beb6da51b320b28581b2be464acc56d4c4cb1c5bd41bf34dec29a1444c07aeb9a040144ae73ef8d720efa072b91a8aa16075fa4c4f14c6529deb203e40cb1d8b6cb52d3c0f34ab05f2143cf42433057680d0fd00f64ae3890b974590bb5e9b10a1c685cfe2c1c06836c3d44787327bdf0751c3092a7b6464730c3edf54b917dabddd912ff6d5be4bdfb8f1aedd69c7352aaf298e1bdb650e2d63a8a1302980b07940ad3835e55b999c004484cb42e54be2fc0b71afae30c79215cdbd23f4fceb6a58bc95caf4720017dd3b8dccc56c03c002efbc34e2e501b84b415c68c1fffa4cd41a7772a1690e087e7ab51278b1b552d336b1be077d29d6364275b4f982f57387ca3f426daf539a77625d7f39a5b4c23b7005b393d9f73dde14cc29177c7a744816c88bfeaa7c22b7a892e3e2f7d22e5872daffd62a6a72b8256a39482ed6be97cdc9fcfd5544856e29ac46cd4a47d6f5a02d393f59d262fbda68f2ec28bb73da5e25c166633a1750b30c5a71de5558a6d9701d2d87e1192139dba08faf7c545516fb0ad24fd721e365aac0fbb9232caef6a825ba623ba532283fe94b42cb6f4d9ab5f29734a1041ae3e81c3ce1bee1c97dd84a2d6c71d395ef2fa3c86ecc32d50f113b3d7e8455f2c0393dc56a3136fdeac1a3c4089d762f1fc04093c8c6bc881cb77cccdee54da939d183958c935cb7eca05fdf971089d447f913a97033a0218033b41ba009759c39512997cb9dee39c00d4eeed3acc2233d39f42b1fb84dade43296ea0320c8063b0e253e71f69d1883581029c94778953126167ec665a52b586f7d1fd1caf4bff5e3ab017e9d838193d811cbddc7e3c62d9e2c209409fdb146544eebc5db842042253448c0ed8790363240b4b44f64b895ff13082a7f956df1c0af1504a7d0b993f3f62a310ff24fa26610d024ecc24122a576dd8626d959ea06dcd1bf5550e2264d73efc2c39b6d4d91ffd52140394aab9f47b74c838567985f9a0b96a235a7dc77621fa7751df5de398c9fa2f19094d115f2559f280ec82de197620fe75668ddfc2907c9f276e5163792e2da0c48f54a69fa034606d309f02186bb783410ce59123bf8f45230ac922fe1e5e3331e425a5d46268235f5aace8b02c0eeea8afdb10aff612ee0ba3d6a18147becbb6c0a62a4d02439becab790f5f97a37d2c6f34a449ec8341938dcdd1676fa49a8013634aadd2ef7f1254dc1d646c01f773f4623add7d1d557446db6fae828e302b999ec6b3cb1c335359d58c230eb31d7060d4b79e10bdb58d70847f196da7f775ff523cd3b2401efa7c0189f646515aa5aebee6973c1245c1b7a86244535a321512a4a19399caa369ef9920ff8620f3891ec560510260ca5295ed8b58c21ecafc46f827c06119bfccb34f1e90cdb76c3d5f63e9111ac79cbd60570539bfa9db4197fa8c7486cd33840119b09cfc783de272cde67a6dcc228cf51e13a4ef22d4bc900fdfcdbaac527273fbdcd6d5f6a3825df7c9722b157b933e06c714f0b5e651aa9bef29dc828ea68d7f4e6e4f3603964a5dbe5395db89575b758f0d4918bc1a60eec5eed0ffcd43ab80f92311603be443b885e41a9cbe52be65b10c4196de29b7c7f18d8f78a2305289f4ce5eb48ab08f5a812aaaea7614eb8f669ebfa33a96c373361f7a87081832f78c51067a4733655d9cecebac284713b98296a412df870888a1a8a08ca220e62ced4100a112841934f7f62fa8931c6d52bd3c3acb174f127eb6a0e3aa5a2131a1f88cb91c9bd68586278a737208e4b6d9a02ba30c83905f79cb56e97d25225c10b4d245a4fed9640cc1bb60a306ea58ea29adef008bc29d2cb251ef35f478f68b07b46e49563f3a6785f1b8220e31d0679496d0f51fbccf6f56f", 0x1000}], 0x3, 0x0, 0x0, 0x7400}, 0x14044801) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000100)={0x90000, 0x0, {[0xc, 0xd, 0x3, 0x2, 0x87c8, 0x4, 0x27b6, 0x6]}}) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000001300)=@in6={0xa, 0x4e23, 0x0, @remote, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) recvmsg$kcm(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/103, 0x67}], 0x1}, 0x40000040) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[], 0xfe33) 1.666791298s ago: executing program 5 (id=1285): landlock_create_ruleset(&(0x7f0000000100)={0x7f6e}, 0x18, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYRES64=r0], 0x7) 1.664702609s ago: executing program 3 (id=1294): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x1800}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000300)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.49123176s ago: executing program 4 (id=1286): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000040)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_connect$uac2(0x5, 0xed, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x1, 0xb0, 0x1, {0x8, 0xb, 0x2, 0x2, 0x1, 0xb, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xb30, 0x8, 0x23, 0x9}, [@effect_unit={0x13, 0x24, 0x7, 0x5, 0x2, 0x2, [0x0, 0x1, 0x3, 0x0, 0x3, 0x1]}, @multiply_unit={0x7, 0x24, 0xc, 0x0, 0x1, 0x7, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x6c3, 0x0, "fd57a49e685ac149"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x3, 0xd, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x3, 0x2, {0x8, 0x25, 0x1, 0x80, 0xc, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x5, 0x2, "e496a61c0652702602"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x60, 0x4, 0x5, 0x0, "9f7a29", "16"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x4, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x40, 0x7, 0x9, 0x4, 0x2}, @as_header={0x10, 0x24, 0x1, 0x6, 0x96, 0x0, 0x5, 0x6, 0x800, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0xf, 0xc5, {0x8, 0x25, 0x1, 0x3, 0x30, 0xa, 0xbdd}}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x250, 0x80, 0x8, 0x8, 0xff, 0x7f}, 0x1f, &(0x7f0000000a40)={0x5, 0xf, 0x1f, 0x2, [@generic={0x13, 0x10, 0x2, "f44adff327498bf435ddba0bc4c5f5c5"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x9, 0xc0}]}, 0x1, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)={0x0, 0x17, 0x1, "fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x2, "ab01"}, 0x0, 0x0}) syz_usb_connect(0x2, 0x1e9, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x47, 0x92, 0x89, 0x8, 0x1e2d, 0x82, 0x68d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d7, 0x2, 0x4, 0x7, 0x20, 0x5, "", [{{0x9, 0x4, 0x4, 0x6, 0x4, 0xeb, 0x4b, 0x6b, 0x9, [], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0x1, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xe, 0x0, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x5, 0xf5, 0x3}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0xba, 0x2, 0x5}}]}}, {{0x9, 0x4, 0x88, 0x5, 0x7, 0x51, 0x15, 0x57, 0xc0, [@cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8d, 0x3, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x7}}, @uac_control={{0xa, 0x24, 0x1, 0x1ff, 0x2d}, [@processing_unit={0x9, 0x24, 0x7, 0x6, 0x5, 0x8, "cd8f"}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x8, 0x9, '9V'}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x2, 'm'}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0x1, "22dc7ce7"}]}], [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7f, 0x5d, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x0, 0xb, 0x8}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x3, 0x4, 0x40, [@generic={0x33, 0xf, "d943e43bff33976d43897f786efb4174880b96f27f30dfb3c3edd34d7ed71f05f008e80c9d95a111814016dc7c49795142"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x4, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x2, 0x5, 0x3}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0x1, 0x4, 0x4, [@generic={0x8d, 0xb, "d94fcca924d3e93e59ac81b8955a3bb8d17e9732a2445e3fa7c455739dfd99cdaf5e80e8216c3a3cfd9d4d09b200935a2bae39f7d9d57b9e84d937cb7363f43292203fda8dd0e2655b125ee64a3e7626ef921f1b144a9e3dc56bdb9eab1a6523bbaee3a4f844b7892e85c7b4eb8e3bc4adfb5a6a54b013e6be89262bb938b86d31c0aed6ea150760339a51"}, @generic={0x3a, 0x23, "3ddc15b4da36f5f1dc30bfc27c5ba2c9602868d72835fbba3e0ca2e8524d08d4642a34af39692e32017af9378e2449daf9592c2ad53b730c"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x5, 0xe, 0xf4}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x201, 0x5, 0xf, 0x1, 0x8, 0x3}, 0x123, &(0x7f0000000840)={0x5, 0xf, 0x123, 0x6, [@generic={0xee, 0x10, 0x1, "567f75ee3e1ae5678a8a01f49b26066812541c0226aa9e1d076774d2f58f3bd6daa706bc54a0a1c160561f4edf9f7cbf58f8e45c114b872e1513e2e00102b5a5108fa5c8f531c3afcddee7fb69b9772d4fa8ff9ca4d435ac2a8ad3395b374066a7b31aad2854c252640229c47a5e85180f54e8e32d743afa2d977eff9b01efcbae448e57dc6de1180f38d5172ff359ea9e2c49d99763189dbd0650318bd2c70511f6a7b1a90bcf3f59371b0d178fd9a0a68af1d6d675a4267efb421cf2ccb7c2c043dbb3431d83eb04f971790b5ed7ed9c9309101b9182ecd7f1b5bb4c1b51ede5cd60db8f82b842ea46d8"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "2179af3250324c7f9bf5b68ab2e0c21c"}, @ssp_cap={0xc, 0x10, 0xa, 0xf, 0x0, 0x2, 0xf000, 0x8001}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x65}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x29, 0x1a, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x84, 0x2, "0600"}, 0x0}) 277.537µs ago: executing program 6 (id=1288): r0 = memfd_create(&(0x7f00000000c0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x8, 0x4) socket(0x10, 0x803, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00222200000096010006010083000000002a74a08538b3c83e25038a39942bb09ea54983"], 0x0}, 0x0) read(r0, &(0x7f0000000440)=""/221, 0xdd) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101002) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xa, @mcast2, 0x4}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x1000, @empty}, 0x1c) ioctl$FITHAW(r4, 0xc0045878) mmap(&(0x7f000075e000/0x3000)=nil, 0x3000, 0x0, 0x810, r3, 0xfffdc000) 0s ago: executing program 3 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x62, 0x5, 0x80000001, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1, 0x7800, 0x1, 0xdb}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x34, r3, 0x10, 0x8004000, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xfe}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0xfffffffffffffe3c}]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x0) read(r1, &(0x7f00000001c0)=""/100, 0x64) syz_usb_connect(0x2, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904"], 0x0) kernel console output (not intermixed with test programs): 0 has an invalid interface number: 51 but max is 0 [ 260.605738][ T27] usb 7-1: config 0 has no interface number 0 [ 260.607639][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.607653][ T27] usb 7-1: Product: syz [ 260.607661][ T27] usb 7-1: Manufacturer: syz [ 260.607669][ T27] usb 7-1: SerialNumber: syz [ 260.609491][ T27] usb 7-1: config 0 descriptor?? [ 260.617155][ T27] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 260.634353][ T5680] m920x_read = error: -19 [ 260.634393][ T5680] dvb-usb: error while querying for an remote control event. [ 260.634506][ T5680] m920x_read = error: -19 [ 260.634526][ T5680] dvb-usb: error while querying for an remote control event. [ 260.681730][ T5688] m920x_read = error: -19 [ 260.681754][ T5688] dvb-usb: error while querying for an remote control event. [ 260.681863][ T5688] m920x_read = error: -19 [ 260.681881][ T5688] dvb-usb: error while querying for an remote control event. [ 260.741044][ T5680] m920x_read = error: -19 [ 260.741071][ T5680] dvb-usb: error while querying for an remote control event. [ 260.741147][ T5680] m920x_read = error: -19 [ 260.741166][ T5680] dvb-usb: error while querying for an remote control event. [ 260.791773][ T5688] m920x_read = error: -19 [ 260.791813][ T5688] dvb-usb: error while querying for an remote control event. [ 260.791865][ T5688] m920x_read = error: -19 [ 260.791875][ T5688] dvb-usb: error while querying for an remote control event. [ 260.822094][ T27] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 260.827269][ T27] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 260.851096][ T5680] m920x_read = error: -19 [ 260.851121][ T5680] dvb-usb: error while querying for an remote control event. [ 260.851225][ T5680] m920x_read = error: -19 [ 260.851244][ T5680] dvb-usb: error while querying for an remote control event. [ 260.901063][ T27] m920x_read = error: -19 [ 260.901088][ T27] dvb-usb: error while querying for an remote control event. [ 260.901196][ T27] m920x_read = error: -19 [ 260.901214][ T27] dvb-usb: error while querying for an remote control event. [ 260.961219][ T5680] m920x_read = error: -19 [ 260.961244][ T5680] dvb-usb: error while querying for an remote control event. [ 260.961328][ T5680] m920x_read = error: -19 [ 260.961346][ T5680] dvb-usb: error while querying for an remote control event. [ 261.010965][ T27] m920x_read = error: -19 [ 261.010983][ T27] dvb-usb: error while querying for an remote control event. [ 261.011048][ T27] m920x_read = error: -19 [ 261.011059][ T27] dvb-usb: error while querying for an remote control event. [ 261.017651][ C1] quatech-serial ttyUSB1: qt2_process_read_urb - unsupported command 13 [ 261.071652][ T5680] m920x_read = error: -19 [ 261.071684][ T5680] dvb-usb: error while querying for an remote control event. [ 261.071764][ T5680] m920x_read = error: -19 [ 261.071775][ T5680] dvb-usb: error while querying for an remote control event. [ 261.120996][ T27] m920x_read = error: -19 [ 261.121023][ T27] dvb-usb: error while querying for an remote control event. [ 261.121144][ T27] m920x_read = error: -19 [ 261.121161][ T27] dvb-usb: error while querying for an remote control event. [ 261.181281][ T5680] m920x_read = error: -19 [ 261.181300][ T5680] dvb-usb: error while querying for an remote control event. [ 261.181390][ T5680] m920x_read = error: -19 [ 261.181408][ T5680] dvb-usb: error while querying for an remote control event. [ 261.192964][ T52] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 261.193227][ T52] ath9k_htc: Failed to initialize the device [ 261.194801][ T5743] usb 5-1: ath9k_htc: USB layer deinitialized [ 261.231351][ T27] m920x_read = error: -19 [ 261.231377][ T27] dvb-usb: error while querying for an remote control event. [ 261.231483][ T27] m920x_read = error: -19 [ 261.231500][ T27] dvb-usb: error while querying for an remote control event. [ 261.291070][ T5680] m920x_read = error: -19 [ 261.291096][ T5680] dvb-usb: error while querying for an remote control event. [ 261.291195][ T5680] m920x_read = error: -19 [ 261.291214][ T5680] dvb-usb: error while querying for an remote control event. [ 261.310206][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 261.310705][ T5713] usb 7-1: USB disconnect, device number 12 [ 261.322570][ T5713] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 261.331193][ T5713] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 261.331909][ T5713] quatech2 7-1:0.51: device disconnected [ 261.341072][ T27] m920x_read = error: -19 [ 261.341096][ T27] dvb-usb: error while querying for an remote control event. [ 261.341174][ T27] m920x_read = error: -19 [ 261.341191][ T27] dvb-usb: error while querying for an remote control event. [ 261.411067][ T5680] m920x_read = error: -19 [ 261.411096][ T5680] dvb-usb: error while querying for an remote control event. [ 261.411199][ T5680] m920x_read = error: -19 [ 261.411217][ T5680] dvb-usb: error while querying for an remote control event. [ 261.450962][ T52] m920x_read = error: -19 [ 261.450988][ T52] dvb-usb: error while querying for an remote control event. [ 261.451036][ T52] m920x_read = error: -19 [ 261.451052][ T52] dvb-usb: error while querying for an remote control event. [ 261.490483][ T52] usb 4-1: USB disconnect, device number 51 [ 261.521387][ T5680] m920x_read = error: -19 [ 261.521451][ T5680] dvb-usb: error while querying for an remote control event. [ 261.521564][ T5680] m920x_read = error: -19 [ 261.521583][ T5680] dvb-usb: error while querying for an remote control event. [ 261.560988][ T5743] m920x_read = error: -19 [ 261.561004][ T5743] dvb-usb: error while querying for an remote control event. [ 261.561059][ T5743] m920x_read = error: -19 [ 261.561069][ T5743] dvb-usb: error while querying for an remote control event. [ 261.632054][ T5680] m920x_read = error: -19 [ 261.632080][ T5680] dvb-usb: error while querying for an remote control event. [ 261.632185][ T5680] m920x_read = error: -19 [ 261.632203][ T5680] dvb-usb: error while querying for an remote control event. [ 261.671948][ T52] m920x_read = error: -19 [ 261.671965][ T52] dvb-usb: error while querying for an remote control event. [ 261.672011][ T52] m920x_read = error: -19 [ 261.672020][ T52] dvb-usb: error while querying for an remote control event. [ 261.766139][ T5680] m920x_read = error: -19 [ 261.766158][ T5680] dvb-usb: error while querying for an remote control event. [ 261.766220][ T5680] m920x_read = error: -19 [ 261.766229][ T5680] dvb-usb: error while querying for an remote control event. [ 261.786038][ T52] m920x_read = error: -19 [ 261.786068][ T52] dvb-usb: error while querying for an remote control event. [ 261.786161][ T52] m920x_read = error: -19 [ 261.786178][ T52] dvb-usb: error while querying for an remote control event. [ 261.871101][ T5680] m920x_read = error: -19 [ 261.871130][ T5680] dvb-usb: error while querying for an remote control event. [ 261.871224][ T5680] m920x_read = error: -19 [ 261.871240][ T5680] dvb-usb: error while querying for an remote control event. [ 261.898876][ T5743] m920x_read = error: -19 [ 261.898900][ T5743] dvb-usb: error while querying for an remote control event. [ 261.898983][ T5743] m920x_read = error: -19 [ 261.899000][ T5743] dvb-usb: error while querying for an remote control event. [ 261.981132][ T5680] m920x_read = error: -19 [ 261.981159][ T5680] dvb-usb: error while querying for an remote control event. [ 261.981255][ T5680] m920x_read = error: -19 [ 261.981273][ T5680] dvb-usb: error while querying for an remote control event. [ 262.009644][ T9912] FAULT_INJECTION: forcing a failure. [ 262.009644][ T9912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.009674][ T9912] CPU: 1 UID: 0 PID: 9912 Comm: syz.6.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.009700][ T9912] Tainted: [L]=SOFTLOCKUP [ 262.009708][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.009719][ T9912] Call Trace: [ 262.009727][ T9912] [ 262.009736][ T9912] dump_stack_lvl+0xe8/0x150 [ 262.009767][ T9912] should_fail_ex+0x3eb/0x540 [ 262.009802][ T9912] _copy_from_user+0x2d/0xb0 [ 262.009824][ T9912] wext_handle_ioctl+0xc7/0x1d0 [ 262.009858][ T9912] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 262.009900][ T9912] sock_ioctl+0x159/0x7e0 [ 262.009921][ T9912] ? __fget_files+0x2a/0x420 [ 262.009948][ T9912] ? __pfx_sock_ioctl+0x10/0x10 [ 262.009967][ T9912] ? __fget_files+0x2a/0x420 [ 262.009994][ T9912] ? __fget_files+0x2a/0x420 [ 262.010022][ T9912] ? bpf_lsm_file_ioctl+0x9/0x20 [ 262.010042][ T9912] ? __pfx_sock_ioctl+0x10/0x10 [ 262.010061][ T9912] __se_sys_ioctl+0xfc/0x170 [ 262.010084][ T9912] do_syscall_64+0x166/0x520 [ 262.010106][ T9912] ? trace_irq_disable+0x3b/0x140 [ 262.010125][ T9912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.010145][ T9912] ? clear_bhb_loop+0x70/0xc0 [ 262.010169][ T9912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.010188][ T9912] RIP: 0033:0x7fdecc39e2d9 [ 262.010206][ T9912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.010230][ T9912] RSP: 002b:00007fdecd2eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.010250][ T9912] RAX: ffffffffffffffda RBX: 00007fdecc625fa0 RCX: 00007fdecc39e2d9 [ 262.010265][ T9912] RDX: 0000200000000540 RSI: 0000000000008b24 RDI: 0000000000000003 [ 262.010279][ T9912] RBP: 00007fdecd2eb090 R08: 0000000000000000 R09: 0000000000000000 [ 262.010291][ T9912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.010303][ T9912] R13: 00007fdecc626038 R14: 00007fdecc625fa0 R15: 00007ffe8daeebe8 [ 262.010333][ T9912] [ 262.011779][ T5743] m920x_read = error: -19 [ 262.011800][ T5743] dvb-usb: error while querying for an remote control event. [ 262.011878][ T5743] m920x_read = error: -19 [ 262.011895][ T5743] dvb-usb: error while querying for an remote control event. [ 262.091862][ T52] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 262.094417][ T5680] m920x_read = error: -19 [ 262.094438][ T5680] dvb-usb: error while querying for an remote control event. [ 262.094538][ T5680] m920x_read = error: -19 [ 262.094555][ T5680] dvb-usb: error while querying for an remote control event. [ 262.120978][ T5713] m920x_read = error: -19 [ 262.121002][ T5713] dvb-usb: error while querying for an remote control event. [ 262.121081][ T5713] m920x_read = error: -19 [ 262.121098][ T5713] dvb-usb: error while querying for an remote control event. [ 262.211197][ T870] m920x_read = error: -19 [ 262.211222][ T870] dvb-usb: error while querying for an remote control event. [ 262.211828][ T870] m920x_read = error: -19 [ 262.211848][ T870] dvb-usb: error while querying for an remote control event. [ 262.231964][ T5713] m920x_read = error: -19 [ 262.231988][ T5713] dvb-usb: error while querying for an remote control event. [ 262.232188][ T5713] m920x_read = error: -19 [ 262.232206][ T5713] dvb-usb: error while querying for an remote control event. [ 262.252588][ T52] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 262.253608][ T52] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 262.255628][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.255650][ T52] usb 5-1: Product: syz [ 262.255664][ T52] usb 5-1: Manufacturer: syz [ 262.255678][ T52] usb 5-1: SerialNumber: syz [ 262.313439][ T5743] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 262.325159][ T5680] m920x_read = error: -19 [ 262.325181][ T5680] dvb-usb: error while querying for an remote control event. [ 262.325267][ T5680] m920x_read = error: -19 [ 262.325283][ T5680] dvb-usb: error while querying for an remote control event. [ 262.343936][ T52] m920x_read = error: -19 [ 262.344006][ T52] dvb-usb: error while querying for an remote control event. [ 262.344087][ T52] m920x_read = error: -19 [ 262.344105][ T52] dvb-usb: error while querying for an remote control event. [ 262.430927][ T5713] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 262.433208][ T5680] m920x_read = error: -19 [ 262.433230][ T5680] dvb-usb: error while querying for an remote control event. [ 262.433327][ T5680] m920x_read = error: -19 [ 262.433345][ T5680] dvb-usb: error while querying for an remote control event. [ 262.451047][ T52] m920x_read = error: -19 [ 262.451112][ T52] dvb-usb: error while querying for an remote control event. [ 262.451198][ T52] m920x_read = error: -19 [ 262.451215][ T52] dvb-usb: error while querying for an remote control event. [ 262.523423][ T9910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.526918][ T9910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.531764][ T870] usb 5-1: USB disconnect, device number 39 [ 262.541903][ T5680] m920x_read = error: -19 [ 262.541928][ T5680] dvb-usb: error while querying for an remote control event. [ 262.542031][ T5680] m920x_read = error: -19 [ 262.542048][ T5680] dvb-usb: error while querying for an remote control event. [ 262.554008][ T5688] m920x_read = error: -19 [ 262.554033][ T5688] dvb-usb: error while querying for an remote control event. [ 262.554115][ T5688] m920x_read = error: -19 [ 262.554134][ T5688] dvb-usb: error while querying for an remote control event. [ 262.630974][ T5713] usb 7-1: Using ep0 maxpacket: 8 [ 262.631695][ T5713] usb 7-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 262.632578][ T5713] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.632592][ T5713] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.632620][ T5713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.637240][ T5713] hub 7-1:1.0: bad descriptor, ignoring hub [ 262.637263][ T5713] hub 7-1:1.0: probe with driver hub failed with error -5 [ 262.651139][ T5680] m920x_read = error: -19 [ 262.651164][ T5680] dvb-usb: error while querying for an remote control event. [ 262.651260][ T5680] m920x_read = error: -19 [ 262.651277][ T5680] dvb-usb: error while querying for an remote control event. [ 262.675459][ T5688] m920x_read = error: -19 [ 262.675485][ T5688] dvb-usb: error while querying for an remote control event. [ 262.675560][ T5688] m920x_read = error: -19 [ 262.675578][ T5688] dvb-usb: error while querying for an remote control event. [ 262.761305][ T5680] m920x_read = error: -19 [ 262.761330][ T5680] dvb-usb: error while querying for an remote control event. [ 262.761429][ T5680] m920x_read = error: -19 [ 262.761446][ T5680] dvb-usb: error while querying for an remote control event. [ 262.783361][ T5688] m920x_read = error: -19 [ 262.783379][ T5688] dvb-usb: error while querying for an remote control event. [ 262.783461][ T5688] m920x_read = error: -19 [ 262.783478][ T5688] dvb-usb: error while querying for an remote control event. [ 262.846581][ T9914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.859825][ T9914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.871199][ T5680] m920x_read = error: -19 [ 262.871223][ T5680] dvb-usb: error while querying for an remote control event. [ 262.871324][ T5680] m920x_read = error: -19 [ 262.871342][ T5680] dvb-usb: error while querying for an remote control event. [ 262.892829][ T5688] m920x_read = error: -19 [ 262.892855][ T5688] dvb-usb: error while querying for an remote control event. [ 262.892940][ T5688] m920x_read = error: -19 [ 262.892960][ T5688] dvb-usb: error while querying for an remote control event. [ 262.981439][ T5713] usb 7-1: USB disconnect, device number 13 [ 262.981507][ T9] m920x_read = error: -19 [ 262.981536][ T9] dvb-usb: error while querying for an remote control event. [ 262.981636][ T9] m920x_read = error: -19 [ 262.981654][ T9] dvb-usb: error while querying for an remote control event. [ 263.028437][ T5713] m920x_read = error: -19 [ 263.028461][ T5713] dvb-usb: error while querying for an remote control event. [ 263.028541][ T5713] m920x_read = error: -19 [ 263.028559][ T5713] dvb-usb: error while querying for an remote control event. [ 263.091420][ T9] m920x_read = error: -19 [ 263.091447][ T9] dvb-usb: error while querying for an remote control event. [ 263.091556][ T9] m920x_read = error: -19 [ 263.091574][ T9] dvb-usb: error while querying for an remote control event. [ 263.141288][ T5688] m920x_read = error: -19 [ 263.141317][ T5688] dvb-usb: error while querying for an remote control event. [ 263.141402][ T5688] m920x_read = error: -19 [ 263.141420][ T5688] dvb-usb: error while querying for an remote control event. [ 263.197727][ T9939] FAULT_INJECTION: forcing a failure. [ 263.197727][ T9939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.197758][ T9939] CPU: 1 UID: 0 PID: 9939 Comm: syz.3.1223 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.197784][ T9939] Tainted: [L]=SOFTLOCKUP [ 263.197791][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.197802][ T9939] Call Trace: [ 263.197811][ T9939] [ 263.197820][ T9939] dump_stack_lvl+0xe8/0x150 [ 263.197850][ T9939] should_fail_ex+0x3eb/0x540 [ 263.197888][ T9939] _copy_from_user+0x2d/0xb0 [ 263.197911][ T9939] cache_write+0xf8/0x210 [ 263.197931][ T9939] ? cache_write_procfs+0x26/0x80 [ 263.197953][ T9939] ? __pfx_cache_write_procfs+0x10/0x10 [ 263.197971][ T9939] proc_reg_write+0x1e9/0x2e0 [ 263.197999][ T9939] ? __pfx_proc_reg_write+0x10/0x10 [ 263.198025][ T9939] vfs_write+0x296/0xba0 [ 263.198062][ T9939] ? __pfx_vfs_write+0x10/0x10 [ 263.198093][ T9939] ? __fget_files+0x2a/0x420 [ 263.198118][ T9939] ? __fget_files+0x3a2/0x420 [ 263.198143][ T9939] ? __fget_files+0x2a/0x420 [ 263.198174][ T9939] ? fdget+0x1ac/0x250 [ 263.198207][ T9939] ksys_write+0x150/0x270 [ 263.198238][ T9939] ? __pfx_ksys_write+0x10/0x10 [ 263.198279][ T9939] do_syscall_64+0x166/0x520 [ 263.198302][ T9939] ? trace_irq_disable+0x3b/0x140 [ 263.198322][ T9939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.198343][ T9939] ? clear_bhb_loop+0x70/0xc0 [ 263.198368][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.198388][ T9939] RIP: 0033:0x7fbed419e2d9 [ 263.198406][ T9939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.198424][ T9939] RSP: 002b:00007fbed50ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.198446][ T9939] RAX: ffffffffffffffda RBX: 00007fbed4425fa0 RCX: 00007fbed419e2d9 [ 263.198461][ T9939] RDX: 000000000000001c RSI: 0000200000000640 RDI: 0000000000000004 [ 263.198475][ T9939] RBP: 00007fbed50ae090 R08: 0000000000000000 R09: 0000000000000000 [ 263.198488][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.198500][ T9939] R13: 00007fbed4426038 R14: 00007fbed4425fa0 R15: 00007ffd975d2718 [ 263.198527][ T9939] [ 263.201883][ T9] m920x_read = error: -19 [ 263.201906][ T9] dvb-usb: error while querying for an remote control event. [ 263.202017][ T9] m920x_read = error: -19 [ 263.202036][ T9] dvb-usb: error while querying for an remote control event. [ 263.274572][ T5688] m920x_read = error: -19 [ 263.274597][ T5688] dvb-usb: error while querying for an remote control event. [ 263.274683][ T5688] m920x_read = error: -19 [ 263.274701][ T5688] dvb-usb: error while querying for an remote control event. [ 263.312552][ T9] m920x_read = error: -19 [ 263.312577][ T9] dvb-usb: error while querying for an remote control event. [ 263.312681][ T9] m920x_read = error: -19 [ 263.312698][ T9] dvb-usb: error while querying for an remote control event. [ 263.359212][ T5743] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 263.359387][ T5743] ath9k_htc: Failed to initialize the device [ 263.362183][ T870] usb 5-1: ath9k_htc: USB layer deinitialized [ 263.421712][ T9] m920x_read = error: -19 [ 263.421737][ T9] dvb-usb: error while querying for an remote control event. [ 263.421838][ T9] m920x_read = error: -19 [ 263.421855][ T9] dvb-usb: error while querying for an remote control event. [ 263.429613][ T5688] m920x_read = error: -19 [ 263.429637][ T5688] dvb-usb: error while querying for an remote control event. [ 263.429722][ T5688] m920x_read = error: -19 [ 263.429740][ T5688] dvb-usb: error while querying for an remote control event. [ 263.531341][ T5680] m920x_read = error: -19 [ 263.531366][ T5680] dvb-usb: error while querying for an remote control event. [ 263.531464][ T5680] m920x_read = error: -19 [ 263.531481][ T5680] dvb-usb: error while querying for an remote control event. [ 263.539804][ T5688] m920x_read = error: -19 [ 263.539827][ T5688] dvb-usb: error while querying for an remote control event. [ 263.539915][ T5688] m920x_read = error: -19 [ 263.539932][ T5688] dvb-usb: error while querying for an remote control event. [ 263.641087][ T5713] m920x_read = error: -19 [ 263.641089][ T5680] m920x_read = error: -19 [ 263.641113][ T5713] dvb-usb: error while querying for an remote control event. [ 263.641113][ T5680] dvb-usb: error while querying for an remote control event. [ 263.641195][ T5713] m920x_read = error: -19 [ 263.641213][ T5713] dvb-usb: error while querying for an remote control event. [ 263.641215][ T5680] m920x_read = error: -19 [ 263.641232][ T5680] dvb-usb: error while querying for an remote control event. [ 263.682715][ T870] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 263.751655][ T5680] m920x_read = error: -19 [ 263.751844][ T5713] m920x_read = error: -19 [ 263.751878][ T5713] dvb-usb: error while querying for an remote control event. [ 263.751972][ T5713] m920x_read = error: -19 [ 263.751989][ T5713] dvb-usb: error while querying for an remote control event. [ 263.753420][ T5680] dvb-usb: error while querying for an remote control event. [ 263.753538][ T5680] m920x_read = error: -19 [ 263.753556][ T5680] dvb-usb: error while querying for an remote control event. [ 263.833321][ T870] usb 5-1: Using ep0 maxpacket: 8 [ 263.833974][ T870] usb 5-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=1.08 [ 263.835078][ T870] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 263.838365][ T870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.838390][ T870] usb 5-1: Product: syz [ 263.838404][ T870] usb 5-1: Manufacturer: syz [ 263.838419][ T870] usb 5-1: SerialNumber: syz [ 263.861440][ T5680] m920x_read = error: -19 [ 263.861472][ T5680] dvb-usb: error while querying for an remote control event. [ 263.861594][ T5680] m920x_read = error: -19 [ 263.861611][ T5680] dvb-usb: error while querying for an remote control event. [ 263.871094][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 263.898580][ T5713] m920x_read = error: -19 [ 263.898605][ T5713] dvb-usb: error while querying for an remote control event. [ 263.898691][ T5713] m920x_read = error: -19 [ 263.898710][ T5713] dvb-usb: error while querying for an remote control event. [ 263.971751][ T5680] m920x_read = error: -19 [ 263.971798][ T5680] dvb-usb: error while querying for an remote control event. [ 263.972016][ T5680] m920x_read = error: -19 [ 263.972035][ T5680] dvb-usb: error while querying for an remote control event. [ 264.006680][ T5713] m920x_read = error: -19 [ 264.006707][ T5713] dvb-usb: error while querying for an remote control event. [ 264.006790][ T5713] m920x_read = error: -19 [ 264.006807][ T5713] dvb-usb: error while querying for an remote control event. [ 264.022623][ T9] usb 7-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 264.024294][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.024340][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.032682][ T9] usb 7-1: config 0 descriptor?? [ 264.082071][ T5680] m920x_read = error: -19 [ 264.082123][ T5680] dvb-usb: error while querying for an remote control event. [ 264.082226][ T5680] m920x_read = error: -19 [ 264.082272][ T5680] dvb-usb: error while querying for an remote control event. [ 264.111396][ T5713] m920x_read = error: -19 [ 264.111419][ T5713] dvb-usb: error while querying for an remote control event. [ 264.111497][ T5713] m920x_read = error: -19 [ 264.111514][ T5713] dvb-usb: error while querying for an remote control event. [ 264.191223][ T5708] m920x_read = error: -19 [ 264.191279][ T5708] dvb-usb: error while querying for an remote control event. [ 264.191419][ T5708] m920x_read = error: -19 [ 264.191438][ T5708] dvb-usb: error while querying for an remote control event. [ 264.226550][ T5713] m920x_read = error: -19 [ 264.226574][ T5713] dvb-usb: error while querying for an remote control event. [ 264.226657][ T5713] m920x_read = error: -19 [ 264.226676][ T5713] dvb-usb: error while querying for an remote control event. [ 264.289226][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 264.289361][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 264.294793][ T9] usb 7-1: USB disconnect, device number 14 [ 264.305433][ T5708] m920x_read = error: -19 [ 264.305455][ T5708] dvb-usb: error while querying for an remote control event. [ 264.305578][ T5708] m920x_read = error: -19 [ 264.305595][ T5708] dvb-usb: error while querying for an remote control event. [ 264.335897][ T5713] m920x_read = error: -19 [ 264.335925][ T5713] dvb-usb: error while querying for an remote control event. [ 264.336001][ T5713] m920x_read = error: -19 [ 264.336019][ T5713] dvb-usb: error while querying for an remote control event. [ 264.411754][ T5708] m920x_read = error: -19 [ 264.411783][ T5708] dvb-usb: error while querying for an remote control event. [ 264.411897][ T5708] m920x_read = error: -19 [ 264.411916][ T5708] dvb-usb: error while querying for an remote control event. [ 264.447022][ T5713] m920x_read = error: -19 [ 264.447048][ T5713] dvb-usb: error while querying for an remote control event. [ 264.447132][ T5713] m920x_read = error: -19 [ 264.447150][ T5713] dvb-usb: error while querying for an remote control event. [ 264.492720][ T9960] netlink: NAT attribute has 8 unknown bytes [ 264.492745][ T9960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.521440][ T9] m920x_read = error: -19 [ 264.521462][ T9] dvb-usb: error while querying for an remote control event. [ 264.521567][ T9] m920x_read = error: -19 [ 264.521581][ T9] dvb-usb: error while querying for an remote control event. [ 264.559638][ T5688] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 264.569404][ T27] m920x_read = error: -19 [ 264.569430][ T27] dvb-usb: error while querying for an remote control event. [ 264.569517][ T27] m920x_read = error: -19 [ 264.569535][ T27] dvb-usb: error while querying for an remote control event. [ 264.616334][ T5713] hid-generic 0005:4C4A:4155.000D: unknown main item tag 0x0 [ 264.631247][ T9] m920x_read = error: -19 [ 264.631272][ T9] dvb-usb: error while querying for an remote control event. [ 264.631378][ T9] m920x_read = error: -19 [ 264.631395][ T9] dvb-usb: error while querying for an remote control event. [ 264.667267][ T5713] hid-generic 0005:4C4A:4155.000D: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 264.682943][ T27] m920x_read = error: -19 [ 264.682967][ T27] dvb-usb: error while querying for an remote control event. [ 264.683047][ T27] m920x_read = error: -19 [ 264.683061][ T27] dvb-usb: error while querying for an remote control event. [ 264.710954][ T5688] usb 4-1: device descriptor read/64, error -71 [ 264.720919][ T52] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 264.744039][ T5708] m920x_read = error: -19 [ 264.744093][ T5708] dvb-usb: error while querying for an remote control event. [ 264.744158][ T5708] m920x_read = error: -19 [ 264.744168][ T5708] dvb-usb: error while querying for an remote control event. [ 264.790982][ T5713] m920x_read = error: -19 [ 264.791008][ T5713] dvb-usb: error while querying for an remote control event. [ 264.791087][ T5713] m920x_read = error: -19 [ 264.791104][ T5713] dvb-usb: error while querying for an remote control event. [ 264.855403][ T9] m920x_read = error: -19 [ 264.855435][ T9] dvb-usb: error while querying for an remote control event. [ 264.855502][ T9] m920x_read = error: -19 [ 264.855511][ T9] dvb-usb: error while querying for an remote control event. [ 264.892210][ T52] usb 7-1: New USB device found: idVendor=0458, idProduct=5013, bcdDevice=0.40 [ 264.893192][ T52] usb 7-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 264.893235][ T52] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 264.893263][ T52] usb 7-1: config 1 interface 0 has no altsetting 0 [ 264.895907][ T52] usb 7-1: string descriptor 0 read error: -22 [ 264.896058][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.958387][ T5688] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 264.960726][ T5713] m920x_read = error: -19 [ 264.960748][ T5713] dvb-usb: error while querying for an remote control event. [ 264.960962][ T5713] m920x_read = error: -19 [ 264.960982][ T5713] dvb-usb: error while querying for an remote control event. [ 264.963965][ T9] m920x_read = error: -19 [ 264.963985][ T9] dvb-usb: error while querying for an remote control event. [ 264.964135][ T9] m920x_read = error: -19 [ 264.964152][ T9] dvb-usb: error while querying for an remote control event. [ 265.049306][ T870] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input23 [ 265.080340][ T870] m920x_read = error: -19 [ 265.080366][ T870] dvb-usb: error while querying for an remote control event. [ 265.080500][ T870] m920x_read = error: -19 [ 265.080520][ T870] dvb-usb: error while querying for an remote control event. [ 265.094593][ T5688] usb 4-1: device descriptor read/64, error -71 [ 265.113620][ T5743] m920x_read = error: -19 [ 265.113642][ T5743] dvb-usb: error while querying for an remote control event. [ 265.113710][ T5743] m920x_read = error: -19 [ 265.113723][ T5743] dvb-usb: error while querying for an remote control event. [ 265.183200][ T870] m920x_read = error: -19 [ 265.183226][ T870] dvb-usb: error while querying for an remote control event. [ 265.183372][ T870] m920x_read = error: -19 [ 265.183392][ T870] dvb-usb: error while querying for an remote control event. [ 265.203666][ T5688] usb usb4-port1: attempt power cycle [ 265.224006][ T5713] m920x_read = error: -19 [ 265.224030][ T5713] dvb-usb: error while querying for an remote control event. [ 265.224111][ T5713] m920x_read = error: -19 [ 265.224153][ T5713] dvb-usb: error while querying for an remote control event. [ 265.254715][ C0] keyspan_remote 5-1:1.0: keyspan_check_data - Unknown sequence found in system data. [ 265.292254][ T870] m920x_read = error: -19 [ 265.292325][ T870] dvb-usb: error while querying for an remote control event. [ 265.292436][ T870] m920x_read = error: -19 [ 265.292479][ T870] dvb-usb: error while querying for an remote control event. [ 265.352362][ T5743] m920x_read = error: -19 [ 265.352389][ T5743] dvb-usb: error while querying for an remote control event. [ 265.352476][ T5743] m920x_read = error: -19 [ 265.352495][ T5743] dvb-usb: error while querying for an remote control event. [ 265.401122][ T870] m920x_read = error: -19 [ 265.401182][ T870] dvb-usb: error while querying for an remote control event. [ 265.401265][ T870] m920x_read = error: -19 [ 265.401296][ T870] dvb-usb: error while querying for an remote control event. [ 265.437474][ T52] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:0458:5013.000E/input/input24 [ 265.456603][ T870] usb 5-1: USB disconnect, device number 40 [ 265.456709][ C0] keyspan_remote 5-1:1.0: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 265.479069][ T5743] m920x_read = error: -19 [ 265.479095][ T5743] dvb-usb: error while querying for an remote control event. [ 265.479176][ T5743] m920x_read = error: -19 [ 265.479195][ T5743] dvb-usb: error while querying for an remote control event. [ 265.517738][ T9] m920x_read = error: -19 [ 265.517764][ T9] dvb-usb: error while querying for an remote control event. [ 265.517889][ T9] m920x_read = error: -19 [ 265.517909][ T9] dvb-usb: error while querying for an remote control event. [ 265.519925][ T52] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:0458:5013.000E/input/input25 [ 265.560920][ T5688] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 265.581607][ T5743] m920x_read = error: -19 [ 265.581631][ T5743] dvb-usb: error while querying for an remote control event. [ 265.581715][ T5743] m920x_read = error: -19 [ 265.581733][ T5743] dvb-usb: error while querying for an remote control event. [ 265.582648][ T5688] usb 4-1: device descriptor read/8, error -71 [ 265.621127][ T5708] m920x_read = error: -19 [ 265.621152][ T5708] dvb-usb: error while querying for an remote control event. [ 265.621281][ T5708] m920x_read = error: -19 [ 265.621299][ T5708] dvb-usb: error while querying for an remote control event. [ 265.676231][ T52] kye 0003:0458:5013.000E: input,hiddev0,hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.6-1/input0 [ 265.693484][ T5743] m920x_read = error: -19 [ 265.693506][ T5743] dvb-usb: error while querying for an remote control event. [ 265.693569][ T5743] m920x_read = error: -19 [ 265.693582][ T5743] dvb-usb: error while querying for an remote control event. [ 265.734384][ T5708] m920x_read = error: -19 [ 265.734434][ T5708] dvb-usb: error while querying for an remote control event. [ 265.734531][ T5708] m920x_read = error: -19 [ 265.734570][ T5708] dvb-usb: error while querying for an remote control event. [ 265.803146][ T52] m920x_read = error: -19 [ 265.803173][ T52] dvb-usb: error while querying for an remote control event. [ 265.803271][ T52] m920x_read = error: -19 [ 265.803289][ T52] dvb-usb: error while querying for an remote control event. [ 265.841084][ T5708] m920x_read = error: -19 [ 265.841102][ T5708] dvb-usb: error while querying for an remote control event. [ 265.841179][ T5708] m920x_read = error: -19 [ 265.841189][ T5708] dvb-usb: error while querying for an remote control event. [ 265.862796][ T5688] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 265.902832][ T5688] usb 4-1: device descriptor read/8, error -71 [ 265.911841][ T52] m920x_read = error: -19 [ 265.911869][ T52] dvb-usb: error while querying for an remote control event. [ 265.911953][ T52] m920x_read = error: -19 [ 265.911971][ T52] dvb-usb: error while querying for an remote control event. [ 265.951138][ T870] m920x_read = error: -19 [ 265.951207][ T870] dvb-usb: error while querying for an remote control event. [ 265.951335][ T870] m920x_read = error: -19 [ 265.951347][ T870] dvb-usb: error while querying for an remote control event. [ 266.011680][ T5688] usb usb4-port1: unable to enumerate USB device [ 266.027431][ T5688] m920x_read = error: -19 [ 266.027464][ T5688] dvb-usb: error while querying for an remote control event. [ 266.027552][ T5688] m920x_read = error: -19 [ 266.027570][ T5688] dvb-usb: error while querying for an remote control event. [ 266.052889][ T5688] usb 7-1: USB disconnect, device number 15 [ 266.062438][ T5708] m920x_read = error: -19 [ 266.062461][ T5708] dvb-usb: error while querying for an remote control event. [ 266.062587][ T5708] m920x_read = error: -19 [ 266.062604][ T5708] dvb-usb: error while querying for an remote control event. [ 266.131660][ T52] m920x_read = error: -19 [ 266.131687][ T52] dvb-usb: error while querying for an remote control event. [ 266.131774][ T52] m920x_read = error: -19 [ 266.131792][ T52] dvb-usb: error while querying for an remote control event. [ 266.136787][ T9977] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.1235'. [ 266.171809][ T9] m920x_read = error: -19 [ 266.171834][ T9] dvb-usb: error while querying for an remote control event. [ 266.171941][ T9] m920x_read = error: -19 [ 266.171958][ T9] dvb-usb: error while querying for an remote control event. [ 266.241455][ T5713] m920x_read = error: -19 [ 266.241479][ T5713] dvb-usb: error while querying for an remote control event. [ 266.241554][ T5713] m920x_read = error: -19 [ 266.241572][ T5713] dvb-usb: error while querying for an remote control event. [ 266.281104][ T9] m920x_read = error: -19 [ 266.281129][ T9] dvb-usb: error while querying for an remote control event. [ 266.281195][ T9] m920x_read = error: -19 [ 266.281210][ T9] dvb-usb: error while querying for an remote control event. [ 266.352176][ T5688] m920x_read = error: -19 [ 266.352195][ T5688] dvb-usb: error while querying for an remote control event. [ 266.352250][ T5688] m920x_read = error: -19 [ 266.352260][ T5688] dvb-usb: error while querying for an remote control event. [ 266.370916][ T5708] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 266.392123][ T9] m920x_read = error: -19 [ 266.392148][ T9] dvb-usb: error while querying for an remote control event. [ 266.392248][ T9] m920x_read = error: -19 [ 266.392265][ T9] dvb-usb: error while querying for an remote control event. [ 266.461317][ T5688] m920x_read = error: -19 [ 266.461346][ T5688] dvb-usb: error while querying for an remote control event. [ 266.461449][ T5688] m920x_read = error: -19 [ 266.461467][ T5688] dvb-usb: error while querying for an remote control event. [ 266.502706][ T9] m920x_read = error: -19 [ 266.502723][ T9] dvb-usb: error while querying for an remote control event. [ 266.502822][ T9] m920x_read = error: -19 [ 266.502833][ T9] dvb-usb: error while querying for an remote control event. [ 266.520914][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 266.521918][ T5708] usb 5-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 266.523131][ T5708] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 266.523155][ T5708] usb 5-1: config 0 has no interface number 0 [ 266.525697][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.525721][ T5708] usb 5-1: Product: syz [ 266.525735][ T5708] usb 5-1: Manufacturer: syz [ 266.525750][ T5708] usb 5-1: SerialNumber: syz [ 266.528450][ T5708] usb 5-1: config 0 descriptor?? [ 266.572036][ T5688] m920x_read = error: -19 [ 266.572062][ T5688] dvb-usb: error while querying for an remote control event. [ 266.572145][ T5688] m920x_read = error: -19 [ 266.572163][ T5688] dvb-usb: error while querying for an remote control event. [ 266.611257][ T870] m920x_read = error: -19 [ 266.611282][ T870] dvb-usb: error while querying for an remote control event. [ 266.611404][ T870] m920x_read = error: -19 [ 266.611422][ T870] dvb-usb: error while querying for an remote control event. [ 266.646464][ T9979] FAULT_INJECTION: forcing a failure. [ 266.646464][ T9979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.646496][ T9979] CPU: 1 UID: 0 PID: 9979 Comm: syz.6.1236 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.646512][ T9979] Tainted: [L]=SOFTLOCKUP [ 266.646516][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.646522][ T9979] Call Trace: [ 266.646527][ T9979] [ 266.646532][ T9979] dump_stack_lvl+0xe8/0x150 [ 266.646552][ T9979] should_fail_ex+0x3eb/0x540 [ 266.646586][ T9979] _copy_from_user+0x2d/0xb0 [ 266.646609][ T9979] hidp_sock_ioctl+0x2dc/0x650 [ 266.646639][ T9979] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 266.646685][ T9979] ? do_vfs_ioctl+0x116f/0x1530 [ 266.646703][ T9979] sock_do_ioctl+0x101/0x320 [ 266.646726][ T9979] ? __pfx_sock_do_ioctl+0x10/0x10 [ 266.646763][ T9979] sock_ioctl+0x57a/0x7e0 [ 266.646784][ T9979] ? __fget_files+0x2a/0x420 [ 266.646805][ T9979] ? __pfx_sock_ioctl+0x10/0x10 [ 266.646816][ T9979] ? __fget_files+0x2a/0x420 [ 266.646830][ T9979] ? __fget_files+0x2a/0x420 [ 266.646846][ T9979] ? bpf_lsm_file_ioctl+0x9/0x20 [ 266.646857][ T9979] ? __pfx_sock_ioctl+0x10/0x10 [ 266.646876][ T9979] __se_sys_ioctl+0xfc/0x170 [ 266.646899][ T9979] do_syscall_64+0x166/0x520 [ 266.646922][ T9979] ? trace_irq_disable+0x3b/0x140 [ 266.646942][ T9979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.646957][ T9979] ? clear_bhb_loop+0x70/0xc0 [ 266.646970][ T9979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.646980][ T9979] RIP: 0033:0x7fdecc39e2d9 [ 266.646991][ T9979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.647001][ T9979] RSP: 002b:00007fdecd2eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.647016][ T9979] RAX: ffffffffffffffda RBX: 00007fdecc625fa0 RCX: 00007fdecc39e2d9 [ 266.647031][ T9979] RDX: 0000200000000040 RSI: 00000000400448c8 RDI: 0000000000000005 [ 266.647045][ T9979] RBP: 00007fdecd2eb090 R08: 0000000000000000 R09: 0000000000000000 [ 266.647059][ T9979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.647071][ T9979] R13: 00007fdecc626038 R14: 00007fdecc625fa0 R15: 00007ffe8daeebe8 [ 266.647102][ T9979] [ 266.696050][ T5688] m920x_read = error: -19 [ 266.696076][ T5688] dvb-usb: error while querying for an remote control event. [ 266.696159][ T5688] m920x_read = error: -19 [ 266.696176][ T5688] dvb-usb: error while querying for an remote control event. [ 266.721427][ T870] m920x_read = error: -19 [ 266.721451][ T870] dvb-usb: error while querying for an remote control event. [ 266.721547][ T870] m920x_read = error: -19 [ 266.721564][ T870] dvb-usb: error while querying for an remote control event. [ 266.806338][ T52] m920x_read = error: -19 [ 266.806364][ T52] dvb-usb: error while querying for an remote control event. [ 266.806452][ T52] m920x_read = error: -19 [ 266.806471][ T52] dvb-usb: error while querying for an remote control event. [ 266.831340][ T870] m920x_read = error: -19 [ 266.831366][ T870] dvb-usb: error while querying for an remote control event. [ 266.831493][ T870] m920x_read = error: -19 [ 266.831512][ T870] dvb-usb: error while querying for an remote control event. [ 266.914138][ T52] m920x_read = error: -19 [ 266.914165][ T52] dvb-usb: error while querying for an remote control event. [ 266.914231][ T52] m920x_read = error: -19 [ 266.914241][ T52] dvb-usb: error while querying for an remote control event. [ 266.942811][ T5708] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 266.942841][ T5708] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 266.945367][ T870] m920x_read = error: -19 [ 266.945389][ T870] dvb-usb: error while querying for an remote control event. [ 266.945494][ T870] m920x_read = error: -19 [ 266.945510][ T870] dvb-usb: error while querying for an remote control event. [ 267.030426][ T52] m920x_read = error: -19 [ 267.030443][ T52] dvb-usb: error while querying for an remote control event. [ 267.030528][ T52] m920x_read = error: -19 [ 267.030544][ T52] dvb-usb: error while querying for an remote control event. [ 267.051127][ T9] m920x_read = error: -19 [ 267.051158][ T9] dvb-usb: error while querying for an remote control event. [ 267.051282][ T9] m920x_read = error: -19 [ 267.051300][ T9] dvb-usb: error while querying for an remote control event. [ 267.131186][ T52] m920x_read = error: -19 [ 267.131216][ T52] dvb-usb: error while querying for an remote control event. [ 267.131297][ T52] m920x_read = error: -19 [ 267.131320][ T52] dvb-usb: error while querying for an remote control event. [ 267.161201][ T9] m920x_read = error: -19 [ 267.161230][ T9] dvb-usb: error while querying for an remote control event. [ 267.161358][ T9] m920x_read = error: -19 [ 267.161376][ T9] dvb-usb: error while querying for an remote control event. [ 267.241585][ T52] m920x_read = error: -19 [ 267.241615][ T52] dvb-usb: error while querying for an remote control event. [ 267.241700][ T52] m920x_read = error: -19 [ 267.241716][ T52] dvb-usb: error while querying for an remote control event. [ 267.271554][ T9] m920x_read = error: -19 [ 267.271579][ T9] dvb-usb: error while querying for an remote control event. [ 267.271687][ T9] m920x_read = error: -19 [ 267.271703][ T9] dvb-usb: error while querying for an remote control event. [ 267.354926][ T52] m920x_read = error: -19 [ 267.354955][ T52] dvb-usb: error while querying for an remote control event. [ 267.355035][ T52] m920x_read = error: -19 [ 267.355053][ T52] dvb-usb: error while querying for an remote control event. [ 267.381483][ T870] m920x_read = error: -19 [ 267.381508][ T870] dvb-usb: error while querying for an remote control event. [ 267.381628][ T870] m920x_read = error: -19 [ 267.381645][ T870] dvb-usb: error while querying for an remote control event. [ 267.461032][ T5688] m920x_read = error: -19 [ 267.461060][ T5688] dvb-usb: error while querying for an remote control event. [ 267.461141][ T5688] m920x_read = error: -19 [ 267.461158][ T5688] dvb-usb: error while querying for an remote control event. [ 267.496622][ T870] m920x_read = error: -19 [ 267.496673][ T870] dvb-usb: error while querying for an remote control event. [ 267.496778][ T870] m920x_read = error: -19 [ 267.496821][ T870] dvb-usb: error while querying for an remote control event. [ 267.525867][ T9] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 267.547242][ T870] hid-generic 0005:4C4A:4155.000F: unknown main item tag 0x0 [ 267.569430][ T870] hid-generic 0005:4C4A:4155.000F: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 267.583037][ T5688] m920x_read = error: -19 [ 267.583064][ T5688] dvb-usb: error while querying for an remote control event. [ 267.583157][ T5688] m920x_read = error: -19 [ 267.583172][ T5688] dvb-usb: error while querying for an remote control event. [ 267.609124][ T5054] m920x_read = error: -19 [ 267.609150][ T5054] dvb-usb: error while querying for an remote control event. [ 267.609292][ T5054] m920x_read = error: -19 [ 267.609311][ T5054] dvb-usb: error while querying for an remote control event. [ 267.691866][ T5688] m920x_read = error: -19 [ 267.691895][ T5688] dvb-usb: error while querying for an remote control event. [ 267.691976][ T5688] m920x_read = error: -19 [ 267.691995][ T5688] dvb-usb: error while querying for an remote control event. [ 267.721049][ T870] m920x_read = error: -19 [ 267.721074][ T870] dvb-usb: error while querying for an remote control event. [ 267.721179][ T870] m920x_read = error: -19 [ 267.721196][ T870] dvb-usb: error while querying for an remote control event. [ 267.741690][ T9] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 267.743691][ T9] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 267.743720][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 267.748152][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 267.748179][ T9] usb 7-1: Product: syz [ 267.748194][ T9] usb 7-1: Manufacturer: syz [ 267.748209][ T9] usb 7-1: SerialNumber: syz [ 267.752922][ T9] usb 7-1: config 0 descriptor?? [ 267.763279][ T9] usb 7-1: selecting invalid altsetting 0 [ 267.818090][ T52] m920x_read = error: -19 [ 267.818115][ T52] dvb-usb: error while querying for an remote control event. [ 267.818200][ T52] m920x_read = error: -19 [ 267.818218][ T52] dvb-usb: error while querying for an remote control event. [ 267.833460][ T5054] m920x_read = error: -19 [ 267.833485][ T5054] dvb-usb: error while querying for an remote control event. [ 267.833609][ T5054] m920x_read = error: -19 [ 267.833627][ T5054] dvb-usb: error while querying for an remote control event. [ 267.921183][ T5688] m920x_read = error: -19 [ 267.921209][ T5688] dvb-usb: error while querying for an remote control event. [ 267.921289][ T5688] m920x_read = error: -19 [ 267.921308][ T5688] dvb-usb: error while querying for an remote control event. [ 267.942903][ T9] m920x_read = error: -19 [ 267.942926][ T9] dvb-usb: error while querying for an remote control event. [ 267.943054][ T9] m920x_read = error: -19 [ 267.943187][ T9] dvb-usb: error while querying for an remote control event. [ 267.974071][ T9987] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1239'. [ 267.993650][ T5688] usb 7-1: USB disconnect, device number 16 [ 268.032034][ T52] m920x_read = error: -19 [ 268.032053][ T52] dvb-usb: error while querying for an remote control event. [ 268.032142][ T52] m920x_read = error: -19 [ 268.032156][ T52] dvb-usb: error while querying for an remote control event. [ 268.052506][ T9] m920x_read = error: -19 [ 268.052556][ T9] dvb-usb: error while querying for an remote control event. [ 268.052690][ T9] m920x_read = error: -19 [ 268.052707][ T9] dvb-usb: error while querying for an remote control event. [ 268.070337][T10004] FAULT_INJECTION: forcing a failure. [ 268.070337][T10004] name failslab, interval 1, probability 0, space 0, times 0 [ 268.070393][T10004] CPU: 0 UID: 0 PID: 10004 Comm: syz.3.1243 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.070421][T10004] Tainted: [L]=SOFTLOCKUP [ 268.070428][T10004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.070440][T10004] Call Trace: [ 268.070448][T10004] [ 268.070457][T10004] dump_stack_lvl+0xe8/0x150 [ 268.070487][T10004] should_fail_ex+0x3eb/0x540 [ 268.070526][T10004] should_failslab+0xa8/0x100 [ 268.070549][T10004] __kmalloc_noprof+0xf9/0x710 [ 268.070582][T10004] ? do_sys_poll+0x2c3/0x1150 [ 268.070605][T10004] ? do_sys_poll+0x2c3/0x1150 [ 268.070634][T10004] do_sys_poll+0x2c3/0x1150 [ 268.070669][T10004] ? __lock_acquire+0x747/0x2de0 [ 268.070700][T10004] ? __pfx_do_sys_poll+0x10/0x10 [ 268.070729][T10004] ? lock_acquire+0x115/0x350 [ 268.070844][T10004] ? set_user_sigmask+0xc6/0x230 [ 268.070865][T10004] ? __pfx_set_user_sigmask+0x10/0x10 [ 268.070884][T10004] ? __fget_files+0x3a2/0x420 [ 268.070910][T10004] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 268.070942][T10004] __se_sys_ppoll+0x209/0x2b0 [ 268.070965][T10004] ? fput+0xa0/0xd0 [ 268.070990][T10004] ? __pfx___se_sys_ppoll+0x10/0x10 [ 268.071014][T10004] ? __pfx_ksys_write+0x10/0x10 [ 268.071047][T10004] ? __x64_sys_ppoll+0x20/0xc0 [ 268.071072][T10004] do_syscall_64+0x166/0x520 [ 268.071094][T10004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.071115][T10004] ? clear_bhb_loop+0x70/0xc0 [ 268.071138][T10004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.071157][T10004] RIP: 0033:0x7fbed419e2d9 [ 268.071175][T10004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.071191][T10004] RSP: 002b:00007fbed50ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 268.071212][T10004] RAX: ffffffffffffffda RBX: 00007fbed4425fa0 RCX: 00007fbed419e2d9 [ 268.071227][T10004] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 0000200000000640 [ 268.071241][T10004] RBP: 00007fbed50ae090 R08: 0000000000000000 R09: 0000000000000000 [ 268.071254][T10004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.071266][T10004] R13: 00007fbed4426038 R14: 00007fbed4425fa0 R15: 00007ffd975d2718 [ 268.071295][T10004] [ 268.161148][ T9] m920x_read = error: -19 [ 268.161175][ T9] dvb-usb: error while querying for an remote control event. [ 268.161297][ T9] m920x_read = error: -19 [ 268.161315][ T9] dvb-usb: error while querying for an remote control event. [ 268.272791][ T9] m920x_read = error: -19 [ 268.272841][ T9] dvb-usb: error while querying for an remote control event. [ 268.272948][ T9] m920x_read = error: -19 [ 268.272986][ T9] dvb-usb: error while querying for an remote control event. [ 268.337082][ T52] m920x_read = error: -19 [ 268.337110][ T52] dvb-usb: error while querying for an remote control event. [ 268.337188][ T52] m920x_read = error: -19 [ 268.337206][ T52] dvb-usb: error while querying for an remote control event. [ 268.434225][ T9] m920x_read = error: -19 [ 268.434253][ T9] dvb-usb: error while querying for an remote control event. [ 268.434362][ T9] m920x_read = error: -19 [ 268.434380][ T9] dvb-usb: error while querying for an remote control event. [ 268.473631][ T5713] m920x_read = error: -19 [ 268.473661][ T5713] dvb-usb: error while querying for an remote control event. [ 268.473718][ T5713] m920x_read = error: -19 [ 268.473728][ T5713] dvb-usb: error while querying for an remote control event. [ 268.541531][ T9] m920x_read = error: -19 [ 268.541558][ T9] dvb-usb: error while querying for an remote control event. [ 268.541684][ T9] m920x_read = error: -19 [ 268.541703][ T9] dvb-usb: error while querying for an remote control event. [ 268.583767][ T52] m920x_read = error: -19 [ 268.583793][ T52] dvb-usb: error while querying for an remote control event. [ 268.583876][ T52] m920x_read = error: -19 [ 268.583894][ T52] dvb-usb: error while querying for an remote control event. [ 268.651156][ T5054] m920x_read = error: -19 [ 268.651183][ T5054] dvb-usb: error while querying for an remote control event. [ 268.651285][ T5054] m920x_read = error: -19 [ 268.651303][ T5054] dvb-usb: error while querying for an remote control event. [ 268.691112][ T5713] m920x_read = error: -19 [ 268.691138][ T5713] dvb-usb: error while querying for an remote control event. [ 268.691205][ T5713] m920x_read = error: -19 [ 268.691215][ T5713] dvb-usb: error while querying for an remote control event. [ 268.744804][T10020] FAULT_INJECTION: forcing a failure. [ 268.744804][T10020] name failslab, interval 1, probability 0, space 0, times 0 [ 268.744839][T10020] CPU: 1 UID: 0 PID: 10020 Comm: syz.5.1245 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.744866][T10020] Tainted: [L]=SOFTLOCKUP [ 268.744873][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.744886][T10020] Call Trace: [ 268.744894][T10020] [ 268.744903][T10020] dump_stack_lvl+0xe8/0x150 [ 268.744934][T10020] should_fail_ex+0x3eb/0x540 [ 268.744971][T10020] should_failslab+0xa8/0x100 [ 268.744990][T10020] ? do_getname+0x2e/0x250 [ 268.745013][T10020] kmem_cache_alloc_noprof+0x9c/0x600 [ 268.745041][T10020] ? do_getname+0x2e/0x250 [ 268.745068][T10020] do_getname+0x2e/0x250 [ 268.745094][T10020] __se_sys_rename+0x3a/0x2c0 [ 268.745122][T10020] do_syscall_64+0x166/0x520 [ 268.745145][T10020] ? trace_irq_disable+0x3b/0x140 [ 268.745166][T10020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.745187][T10020] ? clear_bhb_loop+0x70/0xc0 [ 268.745211][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.745230][T10020] RIP: 0033:0x7fcc59f9e2d9 [ 268.745249][T10020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.745265][T10020] RSP: 002b:00007fcc581b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 268.745287][T10020] RAX: ffffffffffffffda RBX: 00007fcc5a226180 RCX: 00007fcc59f9e2d9 [ 268.745301][T10020] RDX: 0000000000000000 RSI: 0000200000008c80 RDI: 0000200000008c40 [ 268.745314][T10020] RBP: 00007fcc581b4090 R08: 0000000000000000 R09: 0000000000000000 [ 268.745327][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.745337][T10020] R13: 00007fcc5a226218 R14: 00007fcc5a226180 R15: 00007ffd897f2558 [ 268.745365][T10020] [ 268.765933][ T5054] m920x_read = error: -19 [ 268.765987][ T5054] dvb-usb: error while querying for an remote control event. [ 268.766122][ T5054] m920x_read = error: -19 [ 268.766142][ T5054] dvb-usb: error while querying for an remote control event. [ 268.802772][ T5688] m920x_read = error: -19 [ 268.802794][ T5688] dvb-usb: error while querying for an remote control event. [ 268.802876][ T5688] m920x_read = error: -19 [ 268.802894][ T5688] dvb-usb: error while querying for an remote control event. [ 268.895344][ T9] m920x_read = error: -19 [ 268.895371][ T9] dvb-usb: error while querying for an remote control event. [ 268.895499][ T9] m920x_read = error: -19 [ 268.895518][ T9] dvb-usb: error while querying for an remote control event. [ 268.921187][ T5713] m920x_read = error: -19 [ 268.921211][ T5713] dvb-usb: error while querying for an remote control event. [ 268.922225][ T5713] m920x_read = error: -19 [ 268.922243][ T5713] dvb-usb: error while querying for an remote control event. [ 269.002147][ T9] m920x_read = error: -19 [ 269.002171][ T9] dvb-usb: error while querying for an remote control event. [ 269.002274][ T9] m920x_read = error: -19 [ 269.002291][ T9] dvb-usb: error while querying for an remote control event. [ 269.030989][ T5713] m920x_read = error: -19 [ 269.031016][ T5713] dvb-usb: error while querying for an remote control event. [ 269.031096][ T5713] m920x_read = error: -19 [ 269.031113][ T5713] dvb-usb: error while querying for an remote control event. [ 269.111228][ T5054] m920x_read = error: -19 [ 269.111256][ T5054] dvb-usb: error while querying for an remote control event. [ 269.111380][ T5054] m920x_read = error: -19 [ 269.111397][ T5054] dvb-usb: error while querying for an remote control event. [ 269.143717][ T5688] m920x_read = error: -19 [ 269.143744][ T5688] dvb-usb: error while querying for an remote control event. [ 269.143828][ T5688] m920x_read = error: -19 [ 269.143845][ T5688] dvb-usb: error while querying for an remote control event. [ 269.221243][ T5680] m920x_read = error: -19 [ 269.221271][ T5680] dvb-usb: error while querying for an remote control event. [ 269.221400][ T5680] m920x_read = error: -19 [ 269.221419][ T5680] dvb-usb: error while querying for an remote control event. [ 269.251745][ T5688] m920x_read = error: -19 [ 269.251769][ T5688] dvb-usb: error while querying for an remote control event. [ 269.251849][ T5688] m920x_read = error: -19 [ 269.251866][ T5688] dvb-usb: error while querying for an remote control event. [ 269.331501][ T5680] m920x_read = error: -19 [ 269.331529][ T5680] dvb-usb: error while querying for an remote control event. [ 269.331666][ T5680] m920x_read = error: -19 [ 269.331685][ T5680] dvb-usb: error while querying for an remote control event. [ 269.363493][ T5713] m920x_read = error: -19 [ 269.363521][ T5713] dvb-usb: error while querying for an remote control event. [ 269.363604][ T5713] m920x_read = error: -19 [ 269.363622][ T5713] dvb-usb: error while querying for an remote control event. [ 269.441122][ T9] m920x_read = error: -19 [ 269.441175][ T9] dvb-usb: error while querying for an remote control event. [ 269.441283][ T9] m920x_read = error: -19 [ 269.441324][ T9] dvb-usb: error while querying for an remote control event. [ 269.475158][ T5054] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 269.481120][ T5688] m920x_read = error: -19 [ 269.481146][ T5688] dvb-usb: error while querying for an remote control event. [ 269.481226][ T5688] m920x_read = error: -19 [ 269.481242][ T5688] dvb-usb: error while querying for an remote control event. [ 269.561013][ T5680] m920x_read = error: -19 [ 269.561050][ T5680] dvb-usb: error while querying for an remote control event. [ 269.561182][ T5680] m920x_read = error: -19 [ 269.561201][ T5680] dvb-usb: error while querying for an remote control event. [ 269.583803][ T52] m920x_read = error: -19 [ 269.583829][ T52] dvb-usb: error while querying for an remote control event. [ 269.583913][ T52] m920x_read = error: -19 [ 269.583932][ T52] dvb-usb: error while querying for an remote control event. [ 269.632565][ T5054] usb 7-1: New USB device found: idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 269.637464][ T5054] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 269.637496][ T5054] usb 7-1: Product: syz [ 269.637505][ T5054] usb 7-1: Manufacturer: syz [ 269.637515][ T5054] usb 7-1: SerialNumber: syz [ 269.649044][ T5054] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 269.682441][ T9] m920x_read = error: -19 [ 269.682504][ T9] dvb-usb: error while querying for an remote control event. [ 269.682638][ T9] m920x_read = error: -19 [ 269.682655][ T9] dvb-usb: error while querying for an remote control event. [ 269.697913][ T5688] m920x_read = error: -19 [ 269.697941][ T5688] dvb-usb: error while querying for an remote control event. [ 269.698033][ T5688] m920x_read = error: -19 [ 269.698052][ T5688] dvb-usb: error while querying for an remote control event. [ 269.791403][ T9] m920x_read = error: -19 [ 269.791441][ T9] dvb-usb: error while querying for an remote control event. [ 269.791512][ T9] m920x_read = error: -19 [ 269.791522][ T9] dvb-usb: error while querying for an remote control event. [ 269.825928][ T5688] m920x_read = error: -19 [ 269.825953][ T5688] dvb-usb: error while querying for an remote control event. [ 269.826039][ T5688] m920x_read = error: -19 [ 269.826057][ T5688] dvb-usb: error while querying for an remote control event. [ 269.826594][ T9977] netlink: NAT attribute has 8 unknown bytes [ 269.826650][ T9977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.901525][ T9] m920x_read = error: -19 [ 269.901559][ T9] dvb-usb: error while querying for an remote control event. [ 269.901641][ T9] m920x_read = error: -19 [ 269.901659][ T9] dvb-usb: error while querying for an remote control event. [ 269.935090][ T5688] m920x_read = error: -19 [ 269.935119][ T5688] dvb-usb: error while querying for an remote control event. [ 269.935174][ T5688] m920x_read = error: -19 [ 269.935198][ T5688] dvb-usb: error while querying for an remote control event. [ 270.011027][ T5680] m920x_read = error: -19 [ 270.011053][ T5680] dvb-usb: error while querying for an remote control event. [ 270.011143][ T5680] m920x_read = error: -19 [ 270.011154][ T5680] dvb-usb: error while querying for an remote control event. [ 270.045238][ T5688] m920x_read = error: -19 [ 270.045262][ T5688] dvb-usb: error while querying for an remote control event. [ 270.045342][ T5688] m920x_read = error: -19 [ 270.045359][ T5688] dvb-usb: error while querying for an remote control event. [ 270.070586][ T5054] vp7045: USB control message 'out' went wrong. [ 270.070598][ T5054] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 270.070651][ T5054] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 270.091281][ T5054] usb 7-1: USB disconnect, device number 17 [ 270.121792][ T9] m920x_read = error: -19 [ 270.121818][ T9] dvb-usb: error while querying for an remote control event. [ 270.121966][ T9] m920x_read = error: -19 [ 270.121984][ T9] dvb-usb: error while querying for an remote control event. [ 270.155229][ T5688] m920x_read = error: -19 [ 270.155254][ T5688] dvb-usb: error while querying for an remote control event. [ 270.155336][ T5688] m920x_read = error: -19 [ 270.155354][ T5688] dvb-usb: error while querying for an remote control event. [ 270.231067][ T9] m920x_read = error: -19 [ 270.231096][ T9] dvb-usb: error while querying for an remote control event. [ 270.231170][ T9] m920x_read = error: -19 [ 270.231180][ T9] dvb-usb: error while querying for an remote control event. [ 270.264617][ T5688] m920x_read = error: -19 [ 270.264636][ T5688] dvb-usb: error while querying for an remote control event. [ 270.264721][ T5688] m920x_read = error: -19 [ 270.264735][ T5688] dvb-usb: error while querying for an remote control event. [ 270.343214][ T9] m920x_read = error: -19 [ 270.343241][ T9] dvb-usb: error while querying for an remote control event. [ 270.343346][ T9] m920x_read = error: -19 [ 270.343364][ T9] dvb-usb: error while querying for an remote control event. [ 270.375224][ T5688] m920x_read = error: -19 [ 270.375241][ T5688] dvb-usb: error while querying for an remote control event. [ 270.375303][ T5688] m920x_read = error: -19 [ 270.375322][ T5688] dvb-usb: error while querying for an remote control event. [ 270.451033][ T9] m920x_read = error: -19 [ 270.451053][ T9] dvb-usb: error while querying for an remote control event. [ 270.451132][ T9] m920x_read = error: -19 [ 270.451143][ T9] dvb-usb: error while querying for an remote control event. [ 270.486198][ T5688] m920x_read = error: -19 [ 270.486216][ T5688] dvb-usb: error while querying for an remote control event. [ 270.486278][ T5688] m920x_read = error: -19 [ 270.487537][ T5688] dvb-usb: error while querying for an remote control event. [ 270.561025][ T9] m920x_read = error: -19 [ 270.561044][ T9] dvb-usb: error while querying for an remote control event. [ 270.561119][ T9] m920x_read = error: -19 [ 270.561130][ T9] dvb-usb: error while querying for an remote control event. [ 270.570928][ T5054] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 270.597689][ T52] m920x_read = error: -19 [ 270.597716][ T52] dvb-usb: error while querying for an remote control event. [ 270.597803][ T52] m920x_read = error: -19 [ 270.597821][ T52] dvb-usb: error while querying for an remote control event. [ 270.671142][ T9] m920x_read = error: -19 [ 270.671172][ T9] dvb-usb: error while querying for an remote control event. [ 270.671259][ T9] m920x_read = error: -19 [ 270.671270][ T9] dvb-usb: error while querying for an remote control event. [ 270.707298][ T52] m920x_read = error: -19 [ 270.707323][ T52] dvb-usb: error while querying for an remote control event. [ 270.707399][ T52] m920x_read = error: -19 [ 270.707417][ T52] dvb-usb: error while querying for an remote control event. [ 270.723890][ T5054] usb 4-1: Using ep0 maxpacket: 32 [ 270.725676][ T5054] usb 4-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 270.728950][ T5054] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 270.728976][ T5054] usb 4-1: config 0 has no interface number 0 [ 270.729040][ T5054] usb 4-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 270.729066][ T5054] usb 4-1: config 0 interface 184 has no altsetting 0 [ 270.740636][ T5054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.740663][ T5054] usb 4-1: Product: syz [ 270.740677][ T5054] usb 4-1: Manufacturer: syz [ 270.740691][ T5054] usb 4-1: SerialNumber: syz [ 270.748506][ T5054] usb 4-1: config 0 descriptor?? [ 270.751904][T10046] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 270.790247][ T9] m920x_read = error: -19 [ 270.790293][ T9] dvb-usb: error while querying for an remote control event. [ 270.790436][ T9] m920x_read = error: -19 [ 270.790453][ T9] dvb-usb: error while querying for an remote control event. [ 270.815822][ T52] m920x_read = error: -19 [ 270.815849][ T52] dvb-usb: error while querying for an remote control event. [ 270.815940][ T52] m920x_read = error: -19 [ 270.815957][ T52] dvb-usb: error while querying for an remote control event. [ 270.874790][ T5708] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71 [ 270.875116][ T5708] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 270.893514][ T5708] usb 5-1: USB disconnect, device number 41 [ 270.914790][ T9] m920x_read = error: -19 [ 270.914816][ T9] dvb-usb: error while querying for an remote control event. [ 270.914918][ T9] m920x_read = error: -19 [ 270.914992][ T9] dvb-usb: error while querying for an remote control event. [ 270.921150][ T5688] m920x_read = error: -19 [ 270.921175][ T5688] dvb-usb: error while querying for an remote control event. [ 270.921258][ T5688] m920x_read = error: -19 [ 270.921277][ T5688] dvb-usb: error while querying for an remote control event. [ 270.978603][T10046] usbcore.quirks: string doesn't fit in 127 chars. [ 270.980658][T10046] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 271.021175][ T9] m920x_read = error: -19 [ 271.021206][ T9] dvb-usb: error while querying for an remote control event. [ 271.021332][ T9] m920x_read = error: -19 [ 271.021350][ T9] dvb-usb: error while querying for an remote control event. [ 271.031120][ T5688] m920x_read = error: -19 [ 271.031151][ T5688] dvb-usb: error while querying for an remote control event. [ 271.031238][ T5688] m920x_read = error: -19 [ 271.031257][ T5688] dvb-usb: error while querying for an remote control event. [ 271.071036][ T5680] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 271.131148][ T5708] m920x_read = error: -19 [ 271.131207][ T5708] dvb-usb: error while querying for an remote control event. [ 271.131352][ T5708] m920x_read = error: -19 [ 271.131372][ T5708] dvb-usb: error while querying for an remote control event. [ 271.160443][ T5688] m920x_read = error: -19 [ 271.160470][ T5688] dvb-usb: error while querying for an remote control event. [ 271.160559][ T5688] m920x_read = error: -19 [ 271.160577][ T5688] dvb-usb: error while querying for an remote control event. [ 271.221687][ T5680] usb 7-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=9.00 [ 271.224298][ T5680] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 271.224326][ T5680] usb 7-1: Product: syz [ 271.227901][ T5680] usb 7-1: config 0 descriptor?? [ 271.232104][ T5680] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 271.233490][ T5680] usb 7-1: Detected FT232H [ 271.241103][ T5708] m920x_read = error: -19 [ 271.241126][ T5708] dvb-usb: error while querying for an remote control event. [ 271.241257][ T5708] m920x_read = error: -19 [ 271.241275][ T5708] dvb-usb: error while querying for an remote control event. [ 271.269817][ T5688] m920x_read = error: -19 [ 271.269860][ T5688] dvb-usb: error while querying for an remote control event. [ 271.269953][ T5688] m920x_read = error: -19 [ 271.269971][ T5688] dvb-usb: error while querying for an remote control event. [ 271.352018][ T9] m920x_read = error: -19 [ 271.352073][ T9] dvb-usb: error while querying for an remote control event. [ 271.352204][ T9] m920x_read = error: -19 [ 271.352223][ T9] dvb-usb: error while querying for an remote control event. [ 271.386284][ T5688] m920x_read = error: -19 [ 271.386311][ T5688] dvb-usb: error while querying for an remote control event. [ 271.386400][ T5688] m920x_read = error: -19 [ 271.386418][ T5688] dvb-usb: error while querying for an remote control event. [ 271.461095][ T9] m920x_read = error: -19 [ 271.461114][ T9] dvb-usb: error while querying for an remote control event. [ 271.461196][ T9] m920x_read = error: -19 [ 271.461207][ T9] dvb-usb: error while querying for an remote control event. [ 271.496123][ T5688] m920x_read = error: -19 [ 271.496141][ T5688] dvb-usb: error while querying for an remote control event. [ 271.496217][ T5688] m920x_read = error: -19 [ 271.496236][ T5688] dvb-usb: error while querying for an remote control event. [ 271.571646][ T9] m920x_read = error: -19 [ 271.571674][ T9] dvb-usb: error while querying for an remote control event. [ 271.571813][ T9] m920x_read = error: -19 [ 271.571832][ T9] dvb-usb: error while querying for an remote control event. [ 271.605961][ T5688] m920x_read = error: -19 [ 271.605987][ T5688] dvb-usb: error while querying for an remote control event. [ 271.606071][ T5688] m920x_read = error: -19 [ 271.606089][ T5688] dvb-usb: error while querying for an remote control event. [ 271.681019][ T9] m920x_read = error: -19 [ 271.681040][ T9] dvb-usb: error while querying for an remote control event. [ 271.681102][ T9] m920x_read = error: -19 [ 271.681112][ T9] dvb-usb: error while querying for an remote control event. [ 271.695329][ T52] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 271.725147][ T5688] m920x_read = error: -19 [ 271.725175][ T5688] dvb-usb: error while querying for an remote control event. [ 271.725243][ T5688] m920x_read = error: -19 [ 271.725254][ T5688] dvb-usb: error while querying for an remote control event. [ 271.791157][ T9] m920x_read = error: -19 [ 271.791184][ T9] dvb-usb: error while querying for an remote control event. [ 271.791304][ T9] m920x_read = error: -19 [ 271.791320][ T9] dvb-usb: error while querying for an remote control event. [ 271.796107][T10046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.796791][T10046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.797963][ T5054] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 271.797989][ T5054] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 271.836017][ T5688] m920x_read = error: -19 [ 271.836034][ T5688] dvb-usb: error while querying for an remote control event. [ 271.836258][ T5688] m920x_read = error: -19 [ 271.836277][ T5688] dvb-usb: error while querying for an remote control event. [ 271.864177][ T52] usb 5-1: device descriptor read/64, error -71 [ 271.901031][ T9] m920x_read = error: -19 [ 271.901057][ T9] dvb-usb: error while querying for an remote control event. [ 271.901140][ T9] m920x_read = error: -19 [ 271.901150][ T9] dvb-usb: error while querying for an remote control event. [ 271.941000][ T5713] m920x_read = error: -19 [ 271.941025][ T5713] dvb-usb: error while querying for an remote control event. [ 271.941109][ T5713] m920x_read = error: -19 [ 271.941128][ T5713] dvb-usb: error while querying for an remote control event. [ 271.950732][ T5680] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 271.952111][ T5680] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 271.952602][ T5680] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 271.965314][ T5680] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 271.972140][ T5680] usb 7-1: USB disconnect, device number 18 [ 271.983828][ T5680] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 271.984602][ T5680] ftdi_sio 7-1:0.0: device disconnected [ 272.011161][ T5708] m920x_read = error: -19 [ 272.011186][ T5708] dvb-usb: error while querying for an remote control event. [ 272.011306][ T5708] m920x_read = error: -19 [ 272.011324][ T5708] dvb-usb: error while querying for an remote control event. [ 272.059807][ T5713] m920x_read = error: -19 [ 272.059833][ T5713] dvb-usb: error while querying for an remote control event. [ 272.059912][ T5713] m920x_read = error: -19 [ 272.059931][ T5713] dvb-usb: error while querying for an remote control event. [ 272.101833][T10055] FAULT_INJECTION: forcing a failure. [ 272.101833][T10055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.101854][T10055] CPU: 0 UID: 0 PID: 10055 Comm: syz.6.1257 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.101872][T10055] Tainted: [L]=SOFTLOCKUP [ 272.101876][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.101883][T10055] Call Trace: [ 272.101887][T10055] [ 272.101893][T10055] dump_stack_lvl+0xe8/0x150 [ 272.101912][T10055] should_fail_ex+0x3eb/0x540 [ 272.101933][T10055] _copy_from_user+0x2d/0xb0 [ 272.101945][T10055] do_bnep_sock_ioctl+0x293/0x650 [ 272.101961][T10055] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 272.101976][T10055] ? tomoyo_path_number_perm+0x219/0x5f0 [ 272.101999][T10055] sock_do_ioctl+0x101/0x320 [ 272.102013][T10055] ? __pfx_sock_do_ioctl+0x10/0x10 [ 272.102038][T10055] sock_ioctl+0x57a/0x7e0 [ 272.102049][T10055] ? __fget_files+0x2a/0x420 [ 272.102065][T10055] ? __pfx_sock_ioctl+0x10/0x10 [ 272.102076][T10055] ? __fget_files+0x2a/0x420 [ 272.102090][T10055] ? __fget_files+0x2a/0x420 [ 272.102106][T10055] ? bpf_lsm_file_ioctl+0x9/0x20 [ 272.102116][T10055] ? __pfx_sock_ioctl+0x10/0x10 [ 272.102127][T10055] __se_sys_ioctl+0xfc/0x170 [ 272.102139][T10055] do_syscall_64+0x166/0x520 [ 272.102152][T10055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.102163][T10055] ? clear_bhb_loop+0x70/0xc0 [ 272.102176][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.102187][T10055] RIP: 0033:0x7fdecc39e2d9 [ 272.102197][T10055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.102207][T10055] RSP: 002b:00007fdecd2eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.102219][T10055] RAX: ffffffffffffffda RBX: 00007fdecc625fa0 RCX: 00007fdecc39e2d9 [ 272.102227][T10055] RDX: 0000200000000480 RSI: 00000000400442c8 RDI: 0000000000000005 [ 272.102235][T10055] RBP: 00007fdecd2eb090 R08: 0000000000000000 R09: 0000000000000000 [ 272.102242][T10055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.102248][T10055] R13: 00007fdecc626038 R14: 00007fdecc625fa0 R15: 00007ffe8daeebe8 [ 272.102264][T10055] [ 272.122440][ T5708] m920x_read = error: -19 [ 272.122480][ T5708] dvb-usb: error while querying for an remote control event. [ 272.122605][ T5708] m920x_read = error: -19 [ 272.122623][ T5708] dvb-usb: error while querying for an remote control event. [ 272.165903][ T5743] m920x_read = error: -19 [ 272.165929][ T5743] dvb-usb: error while querying for an remote control event. [ 272.166012][ T5743] m920x_read = error: -19 [ 272.166029][ T5743] dvb-usb: error while querying for an remote control event. [ 272.216207][ T5054] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 272.216239][ T5054] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 272.216270][ T5054] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 272.216521][ T5054] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 272.233559][ T9] m920x_read = error: -19 [ 272.233584][ T9] dvb-usb: error while querying for an remote control event. [ 272.233705][ T9] m920x_read = error: -19 [ 272.233722][ T9] dvb-usb: error while querying for an remote control event. [ 272.243531][ T52] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 272.251310][ T5054] usb 4-1: USB disconnect, device number 56 [ 272.308846][ T5713] m920x_read = error: -19 [ 272.308881][ T5713] dvb-usb: error while querying for an remote control event. [ 272.308965][ T5713] m920x_read = error: -19 [ 272.308984][ T5713] dvb-usb: error while querying for an remote control event. [ 272.347367][ T9] m920x_read = error: -19 [ 272.347392][ T9] dvb-usb: error while querying for an remote control event. [ 272.347511][ T9] m920x_read = error: -19 [ 272.347529][ T9] dvb-usb: error while querying for an remote control event. [ 272.401398][ T52] usb 5-1: device descriptor read/64, error -71 [ 272.421373][ T5713] m920x_read = error: -19 [ 272.421400][ T5713] dvb-usb: error while querying for an remote control event. [ 272.421478][ T5713] m920x_read = error: -19 [ 272.421496][ T5713] dvb-usb: error while querying for an remote control event. [ 272.474807][ T5680] m920x_read = error: -19 [ 272.474832][ T5680] dvb-usb: error while querying for an remote control event. [ 272.474933][ T5680] m920x_read = error: -19 [ 272.474950][ T5680] dvb-usb: error while querying for an remote control event. [ 272.511183][ T52] usb usb5-port1: attempt power cycle [ 272.532387][ T27] m920x_read = error: -19 [ 272.532412][ T27] dvb-usb: error while querying for an remote control event. [ 272.532494][ T27] m920x_read = error: -19 [ 272.532511][ T27] dvb-usb: error while querying for an remote control event. [ 272.581740][ T5680] m920x_read = error: -19 [ 272.581766][ T5680] dvb-usb: error while querying for an remote control event. [ 272.581932][ T5680] m920x_read = error: -19 [ 272.581949][ T5680] dvb-usb: error while querying for an remote control event. [ 272.616857][ T5743] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 272.635633][ T5713] m920x_read = error: -19 [ 272.635651][ T5713] dvb-usb: error while querying for an remote control event. [ 272.635698][ T5713] m920x_read = error: -19 [ 272.635707][ T5713] dvb-usb: error while querying for an remote control event. [ 272.691101][ T5680] m920x_read = error: -19 [ 272.691130][ T5680] dvb-usb: error while querying for an remote control event. [ 272.691235][ T5680] m920x_read = error: -19 [ 272.691252][ T5680] dvb-usb: error while querying for an remote control event. [ 272.741228][ T27] m920x_read = error: -19 [ 272.741256][ T27] dvb-usb: error while querying for an remote control event. [ 272.741332][ T27] m920x_read = error: -19 [ 272.741350][ T27] dvb-usb: error while querying for an remote control event. [ 272.801078][ T5054] m920x_read = error: -19 [ 272.801105][ T5054] dvb-usb: error while querying for an remote control event. [ 272.801255][ T5054] m920x_read = error: -19 [ 272.801274][ T5054] dvb-usb: error while querying for an remote control event. [ 272.804664][ T5743] usb 7-1: unable to get BOS descriptor or descriptor too short [ 272.804716][ T5743] usb 7-1: New USB device found: idVendor=1235, idProduct=800c, bcdDevice=0.40 [ 272.805742][ T5743] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.861044][ T5713] m920x_read = error: -19 [ 272.861070][ T5713] dvb-usb: error while querying for an remote control event. [ 272.861170][ T5713] m920x_read = error: -19 [ 272.861188][ T5713] dvb-usb: error while querying for an remote control event. [ 272.892600][ T52] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 272.911184][ T5680] m920x_read = error: -19 [ 272.911211][ T5680] dvb-usb: error while querying for an remote control event. [ 272.911319][ T5680] m920x_read = error: -19 [ 272.911338][ T5680] dvb-usb: error while querying for an remote control event. [ 272.933679][ T52] usb 5-1: device descriptor read/8, error -71 [ 272.962133][ T5713] m920x_read = error: -19 [ 272.962158][ T5713] dvb-usb: error while querying for an remote control event. [ 272.962264][ T5713] m920x_read = error: -19 [ 272.962280][ T5713] dvb-usb: error while querying for an remote control event. [ 273.021176][ T5680] m920x_read = error: -19 [ 273.021218][ T5680] dvb-usb: error while querying for an remote control event. [ 273.021340][ T5680] m920x_read = error: -19 [ 273.021361][ T5680] dvb-usb: error while querying for an remote control event. [ 273.072358][ T27] m920x_read = error: -19 [ 273.072383][ T27] dvb-usb: error while querying for an remote control event. [ 273.072489][ T27] m920x_read = error: -19 [ 273.072506][ T27] dvb-usb: error while querying for an remote control event. [ 273.131162][ T9] m920x_read = error: -19 [ 273.131190][ T9] dvb-usb: error while querying for an remote control event. [ 273.131290][ T9] m920x_read = error: -19 [ 273.131301][ T9] dvb-usb: error while querying for an remote control event. [ 273.135255][T10075] FAULT_INJECTION: forcing a failure. [ 273.135255][T10075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.135283][T10075] CPU: 1 UID: 0 PID: 10075 Comm: syz.5.1264 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.135297][T10075] Tainted: [L]=SOFTLOCKUP [ 273.135302][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.135309][T10075] Call Trace: [ 273.135313][T10075] [ 273.135319][T10075] dump_stack_lvl+0xe8/0x150 [ 273.135340][T10075] should_fail_ex+0x3eb/0x540 [ 273.135363][T10075] _copy_to_user+0x31/0xb0 [ 273.135375][T10075] simple_read_from_buffer+0xe1/0x170 [ 273.135394][T10075] proc_fail_nth_read+0x1bb/0x230 [ 273.135407][T10075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.135420][T10075] ? rw_verify_area+0x24a/0x4c0 [ 273.135437][T10075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.135448][T10075] vfs_read+0x213/0xa80 [ 273.135466][T10075] ? __pfx___mutex_lock+0x10/0x10 [ 273.135480][T10075] ? __pfx_vfs_read+0x10/0x10 [ 273.135496][T10075] ? __fget_files+0x2a/0x420 [ 273.135511][T10075] ? __fget_files+0x3a2/0x420 [ 273.135524][T10075] ? __fget_files+0x2a/0x420 [ 273.135540][T10075] ? fdget+0x1ac/0x250 [ 273.135558][T10075] ksys_read+0x150/0x270 [ 273.135574][T10075] ? __pfx_ksys_read+0x10/0x10 [ 273.135595][T10075] do_syscall_64+0x166/0x520 [ 273.135608][T10075] ? trace_irq_disable+0x3b/0x140 [ 273.135619][T10075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.135630][T10075] ? clear_bhb_loop+0x70/0xc0 [ 273.135643][T10075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.135654][T10075] RIP: 0033:0x7fcc59f5eb0e [ 273.135665][T10075] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.135674][T10075] RSP: 002b:00007fcc581f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.135687][T10075] RAX: ffffffffffffffda RBX: 00007fcc581f66c0 RCX: 00007fcc59f5eb0e [ 273.135694][T10075] RDX: 000000000000000f RSI: 00007fcc581f60a0 RDI: 0000000000000004 [ 273.135702][T10075] RBP: 00007fcc581f6090 R08: 0000000000000000 R09: 0000000000000000 [ 273.135709][T10075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.135715][T10075] R13: 00007fcc5a226038 R14: 00007fcc5a225fa0 R15: 00007ffd897f2558 [ 273.135732][T10075] [ 273.201584][ T27] m920x_read = error: -19 [ 273.201613][ T27] dvb-usb: error while querying for an remote control event. [ 273.201716][ T27] m920x_read = error: -19 [ 273.201733][ T27] dvb-usb: error while querying for an remote control event. [ 273.202787][ T52] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 273.222643][ T52] usb 5-1: device descriptor read/8, error -71 [ 273.245669][ T9] m920x_read = error: -19 [ 273.245693][ T9] dvb-usb: error while querying for an remote control event. [ 273.245801][ T9] m920x_read = error: -19 [ 273.245819][ T9] dvb-usb: error while querying for an remote control event. [ 273.316824][ T27] m920x_read = error: -19 [ 273.316866][ T27] dvb-usb: error while querying for an remote control event. [ 273.316983][ T27] m920x_read = error: -19 [ 273.317000][ T27] dvb-usb: error while querying for an remote control event. [ 273.320941][ T5680] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 273.322362][ T52] usb usb5-port1: unable to enumerate USB device [ 273.353814][ T9] m920x_read = error: -19 [ 273.353841][ T9] dvb-usb: error while querying for an remote control event. [ 273.353978][ T9] m920x_read = error: -19 [ 273.353995][ T9] dvb-usb: error while querying for an remote control event. [ 273.421060][ T52] m920x_read = error: -19 [ 273.421087][ T52] dvb-usb: error while querying for an remote control event. [ 273.421191][ T52] m920x_read = error: -19 [ 273.421209][ T52] dvb-usb: error while querying for an remote control event. [ 273.468353][ T9] m920x_read = error: -19 [ 273.468372][ T9] dvb-usb: error while querying for an remote control event. [ 273.468457][ T9] m920x_read = error: -19 [ 273.468475][ T9] dvb-usb: error while querying for an remote control event. [ 273.506180][ T5680] usb 4-1: Using ep0 maxpacket: 32 [ 273.508224][ T5680] usb 4-1: unable to get BOS descriptor or descriptor too short [ 273.508268][ T5680] usb 4-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 273.509202][ T5680] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 273.509226][ T5680] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 273.509245][ T5680] usb 4-1: config 14 has no interface number 0 [ 273.509262][ T5680] usb 4-1: config 14 has no interface number 1 [ 273.509322][ T5680] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 273.509347][ T5680] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 273.509372][ T5680] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 273.509399][ T5680] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 273.509425][ T5680] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 273.509450][ T5680] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.509477][ T5680] usb 4-1: config 14 interface 57 has no altsetting 0 [ 273.509494][ T5680] usb 4-1: config 14 interface 228 has no altsetting 0 [ 273.512093][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.512117][ T5680] usb 4-1: Product: syz [ 273.512132][ T5680] usb 4-1: Manufacturer: syz [ 273.512145][ T5680] usb 4-1: SerialNumber: syz [ 273.536719][ T52] m920x_read = error: -19 [ 273.536745][ T52] dvb-usb: error while querying for an remote control event. [ 273.536915][ T52] m920x_read = error: -19 [ 273.536933][ T52] dvb-usb: error while querying for an remote control event. [ 273.571268][ T9] m920x_read = error: -19 [ 273.571292][ T9] dvb-usb: error while querying for an remote control event. [ 273.571392][ T9] m920x_read = error: -19 [ 273.571408][ T9] dvb-usb: error while querying for an remote control event. [ 273.641037][ T52] m920x_read = error: -19 [ 273.641064][ T52] dvb-usb: error while querying for an remote control event. [ 273.641143][ T52] m920x_read = error: -19 [ 273.641161][ T52] dvb-usb: error while querying for an remote control event. [ 273.682710][ T9] m920x_read = error: -19 [ 273.682758][ T9] dvb-usb: error while querying for an remote control event. [ 273.716517][ T9] m920x_read = error: -19 [ 273.716546][ T9] dvb-usb: error while querying for an remote control event. [ 273.755379][ T27] m920x_read = error: -19 [ 273.755432][ T27] dvb-usb: error while querying for an remote control event. [ 273.755515][ T27] m920x_read = error: -19 [ 273.755534][ T27] dvb-usb: error while querying for an remote control event. [ 273.801151][ T9] m920x_read = error: -19 [ 273.801176][ T9] dvb-usb: error while querying for an remote control event. [ 273.830970][ T9] m920x_read = error: -19 [ 273.830996][ T9] dvb-usb: error while querying for an remote control event. [ 273.868095][ T52] m920x_read = error: -19 [ 273.869319][ T52] dvb-usb: error while querying for an remote control event. [ 273.869413][ T52] m920x_read = error: -19 [ 273.869453][ T52] dvb-usb: error while querying for an remote control event. [ 273.912079][ T9] m920x_read = error: -19 [ 273.912104][ T9] dvb-usb: error while querying for an remote control event. [ 273.941021][ T9] m920x_read = error: -19 [ 273.941089][ T9] dvb-usb: error while querying for an remote control event. [ 273.950280][ T5680] legousbtower 4-1:14.57: interrupt endpoints not found [ 273.973792][ T52] m920x_read = error: -19 [ 273.973820][ T52] dvb-usb: error while querying for an remote control event. [ 273.973933][ T52] m920x_read = error: -19 [ 273.973950][ T52] dvb-usb: error while querying for an remote control event. [ 274.011264][ T9] m920x_read = error: -19 [ 274.011292][ T9] dvb-usb: error while querying for an remote control event. [ 274.051087][ T9] m920x_read = error: -19 [ 274.051120][ T9] dvb-usb: error while querying for an remote control event. [ 274.081063][ T52] m920x_read = error: -19 [ 274.081090][ T52] dvb-usb: error while querying for an remote control event. [ 274.081163][ T52] m920x_read = error: -19 [ 274.081179][ T52] dvb-usb: error while querying for an remote control event. [ 274.131104][ T9] m920x_read = error: -19 [ 274.131132][ T9] dvb-usb: error while querying for an remote control event. [ 274.171222][ T9] m920x_read = error: -19 [ 274.171252][ T9] dvb-usb: error while querying for an remote control event. [ 274.191134][ T27] m920x_read = error: -19 [ 274.191161][ T27] dvb-usb: error while querying for an remote control event. [ 274.191241][ T27] m920x_read = error: -19 [ 274.191258][ T27] dvb-usb: error while querying for an remote control event. [ 274.251535][ T9] m920x_read = error: -19 [ 274.251563][ T9] dvb-usb: error while querying for an remote control event. [ 274.281437][ T9] m920x_read = error: -19 [ 274.281463][ T9] dvb-usb: error while querying for an remote control event. [ 274.301106][ T27] m920x_read = error: -19 [ 274.301131][ T27] dvb-usb: error while querying for an remote control event. [ 274.301218][ T27] m920x_read = error: -19 [ 274.301235][ T27] dvb-usb: error while querying for an remote control event. [ 274.354284][ T5680] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 274.355986][ T5680] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 274.380073][ T5680] m920x_read = error: -19 [ 274.380098][ T5680] dvb-usb: error while querying for an remote control event. [ 274.392882][ T9] m920x_read = error: -19 [ 274.392922][ T9] dvb-usb: error while querying for an remote control event. [ 274.411075][ T27] m920x_read = error: -19 [ 274.411098][ T27] dvb-usb: error while querying for an remote control event. [ 274.411200][ T27] m920x_read = error: -19 [ 274.411218][ T27] dvb-usb: error while querying for an remote control event. [ 274.491059][ T9] m920x_read = error: -19 [ 274.491079][ T9] dvb-usb: error while querying for an remote control event. [ 274.502673][ T9] m920x_read = error: -19 [ 274.502712][ T9] dvb-usb: error while querying for an remote control event. [ 274.521108][ T27] m920x_read = error: -19 [ 274.521131][ T27] dvb-usb: error while querying for an remote control event. [ 274.521232][ T27] m920x_read = error: -19 [ 274.521257][ T27] dvb-usb: error while querying for an remote control event. [ 274.601347][ T9] m920x_read = error: -19 [ 274.601377][ T9] dvb-usb: error while querying for an remote control event. [ 274.615821][ T9] m920x_read = error: -19 [ 274.615857][ T9] dvb-usb: error while querying for an remote control event. [ 274.631356][ T27] m920x_read = error: -19 [ 274.631404][ T27] dvb-usb: error while querying for an remote control event. [ 274.631482][ T27] m920x_read = error: -19 [ 274.631499][ T27] dvb-usb: error while querying for an remote control event. [ 274.712580][ T5680] m920x_read = error: -19 [ 274.712606][ T5680] dvb-usb: error while querying for an remote control event. [ 274.720966][ T9] m920x_read = error: -19 [ 274.720987][ T9] dvb-usb: error while querying for an remote control event. [ 274.741044][ T27] m920x_read = error: -19 [ 274.741109][ T27] dvb-usb: error while querying for an remote control event. [ 274.741192][ T27] m920x_read = error: -19 [ 274.741232][ T27] dvb-usb: error while querying for an remote control event. [ 274.821030][ T9] m920x_read = error: -19 [ 274.821055][ T9] dvb-usb: error while querying for an remote control event. [ 274.830993][ T9] m920x_read = error: -19 [ 274.831014][ T9] dvb-usb: error while querying for an remote control event. [ 274.855087][ T27] m920x_read = error: -19 [ 274.855139][ T27] dvb-usb: error while querying for an remote control event. [ 274.855224][ T27] m920x_read = error: -19 [ 274.855242][ T27] dvb-usb: error while querying for an remote control event. [ 274.931766][ T9] m920x_read = error: -19 [ 274.931795][ T9] dvb-usb: error while querying for an remote control event. [ 274.934034][T10083] FAULT_INJECTION: forcing a failure. [ 274.934034][T10083] name failslab, interval 1, probability 0, space 0, times 0 [ 274.934064][T10083] CPU: 0 UID: 0 PID: 10083 Comm: syz.4.1267 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.934092][T10083] Tainted: [L]=SOFTLOCKUP [ 274.934100][T10083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.934112][T10083] Call Trace: [ 274.934120][T10083] [ 274.934125][T10083] dump_stack_lvl+0xe8/0x150 [ 274.934144][T10083] should_fail_ex+0x3eb/0x540 [ 274.934180][T10083] should_failslab+0xa8/0x100 [ 274.934203][T10083] __kmalloc_noprof+0xf9/0x710 [ 274.934238][T10083] ? copy_splice_read+0x16f/0xaa0 [ 274.934253][T10083] ? copy_splice_read+0x16f/0xaa0 [ 274.934271][T10083] copy_splice_read+0x16f/0xaa0 [ 274.934290][T10083] ? rcu_is_watching+0x16/0xb0 [ 274.934308][T10083] ? __pfx_copy_splice_read+0x10/0x10 [ 274.934334][T10083] ? trace_kmalloc+0x2a/0xf0 [ 274.934361][T10083] ? look_up_lock_class+0x57/0x110 [ 274.934385][T10083] ? register_lock_class+0x31/0x2e0 [ 274.934405][T10083] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 274.934419][T10083] ? alloc_pipe_info+0x358/0x4c0 [ 274.934430][T10083] ? __pfx_copy_splice_read+0x10/0x10 [ 274.934445][T10083] splice_direct_to_actor+0x48b/0xcb0 [ 274.934489][T10083] ? __pfx_direct_splice_actor+0x10/0x10 [ 274.934518][T10083] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 274.934549][T10083] do_splice_direct+0x195/0x290 [ 274.934566][T10083] ? __pfx_do_splice_direct+0x10/0x10 [ 274.934581][T10083] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 274.934594][T10083] ? rw_verify_area+0x203/0x4c0 [ 274.934616][T10083] ? fdget+0x1ac/0x250 [ 274.934646][T10083] do_sendfile+0x52e/0x7c0 [ 274.934677][T10083] ? __pfx_do_sendfile+0x10/0x10 [ 274.934697][T10083] ? fdget+0x1ac/0x250 [ 274.934715][T10083] __se_sys_sendfile64+0x144/0x1a0 [ 274.934730][T10083] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 274.934747][T10083] do_syscall_64+0x166/0x520 [ 274.934766][T10083] ? trace_irq_disable+0x3b/0x140 [ 274.934787][T10083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.934807][T10083] ? clear_bhb_loop+0x70/0xc0 [ 274.934832][T10083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.934847][T10083] RIP: 0033:0x7f7e8d19e2d9 [ 274.934858][T10083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.934867][T10083] RSP: 002b:00007f7e8e087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 274.934879][T10083] RAX: ffffffffffffffda RBX: 00007f7e8d425fa0 RCX: 00007f7e8d19e2d9 [ 274.934887][T10083] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 274.934894][T10083] RBP: 00007f7e8e087090 R08: 0000000000000000 R09: 0000000000000000 [ 274.934900][T10083] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 274.934912][T10083] R13: 00007f7e8d426038 R14: 00007f7e8d425fa0 R15: 00007ffe9c143c48 [ 274.934943][T10083] [ 274.941043][ T9] m920x_read = error: -19 [ 274.941064][ T9] dvb-usb: error while querying for an remote control event. [ 274.966678][ T52] m920x_read = error: -19 [ 274.966695][ T52] dvb-usb: error while querying for an remote control event. [ 274.966802][ T52] m920x_read = error: -19 [ 274.966821][ T52] dvb-usb: error while querying for an remote control event. [ 275.051254][ T9] m920x_read = error: -19 [ 275.051278][ T9] dvb-usb: error while querying for an remote control event. [ 275.061167][ T9] m920x_read = error: -19 [ 275.061190][ T9] dvb-usb: error while querying for an remote control event. [ 275.073381][ T27] m920x_read = error: -19 [ 275.073429][ T27] dvb-usb: error while querying for an remote control event. [ 275.073504][ T27] m920x_read = error: -19 [ 275.073521][ T27] dvb-usb: error while querying for an remote control event. [ 275.129906][ T9] usb 4-1: USB disconnect, device number 57 [ 275.162284][ T5680] m920x_read = error: -19 [ 275.162334][ T5680] dvb-usb: error while querying for an remote control event. [ 275.176384][ T9] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 275.183498][ T5680] m920x_read = error: -19 [ 275.183523][ T5680] dvb-usb: error while querying for an remote control event. [ 275.203273][ T27] m920x_read = error: -19 [ 275.203299][ T27] dvb-usb: error while querying for an remote control event. [ 275.203378][ T27] m920x_read = error: -19 [ 275.203394][ T27] dvb-usb: error while querying for an remote control event. [ 275.271444][ T5708] m920x_read = error: -19 [ 275.271470][ T5708] dvb-usb: error while querying for an remote control event. [ 275.302405][ T5680] m920x_read = error: -19 [ 275.302431][ T5680] dvb-usb: error while querying for an remote control event. [ 275.313309][ T52] m920x_read = error: -19 [ 275.313334][ T52] dvb-usb: error while querying for an remote control event. [ 275.313443][ T52] m920x_read = error: -19 [ 275.313462][ T52] dvb-usb: error while querying for an remote control event. [ 275.332415][ T2438] blk_print_req_error: 1151 callbacks suppressed [ 275.332435][ T2438] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.332464][ T2438] buffer_io_error: 1343 callbacks suppressed [ 275.332474][ T2438] Buffer I/O error on dev nbd4, logical block 0, async page read [ 275.334133][ T2438] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.334161][ T2438] Buffer I/O error on dev nbd4, logical block 1, async page read [ 275.334283][ T2438] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.334307][ T2438] Buffer I/O error on dev nbd4, logical block 2, async page read [ 275.334419][ T2438] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.334441][ T2438] Buffer I/O error on dev nbd4, logical block 3, async page read [ 275.334625][ T2438] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.334649][ T2438] Buffer I/O error on dev nbd4, logical block 0, async page read [ 275.335487][ T2438] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.335513][ T2438] Buffer I/O error on dev nbd4, logical block 1, async page read [ 275.335611][ T2438] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.335633][ T2438] Buffer I/O error on dev nbd4, logical block 2, async page read [ 275.335812][ T2438] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.335835][ T2438] Buffer I/O error on dev nbd4, logical block 3, async page read [ 275.335942][ T2438] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.335965][ T2438] Buffer I/O error on dev nbd4, logical block 0, async page read [ 275.336055][ T2438] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.336079][ T2438] Buffer I/O error on dev nbd4, logical block 1, async page read [ 275.339149][T10090] ldm_validate_partition_table(): Disk read failed. [ 275.345039][T10090] Dev nbd4: unable to read RDB block 0 [ 275.349842][T10090] nbd4: unable to read partition table [ 275.388860][ T5680] m920x_read = error: -19 [ 275.388886][ T5680] dvb-usb: error while querying for an remote control event. [ 275.394881][ T5743] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.408020][T10090] FAT-fs (nbd4): unable to read boot sector [ 275.421840][ T5680] m920x_read = error: -19 [ 275.421864][ T5680] dvb-usb: error while querying for an remote control event. [ 275.502826][ T5680] m920x_read = error: -19 [ 275.502862][ T5680] dvb-usb: error while querying for an remote control event. [ 275.531707][ T5708] m920x_read = error: -19 [ 275.531732][ T5708] dvb-usb: error while querying for an remote control event. [ 275.570497][ T52] m920x_read = error: -19 [ 275.570522][ T52] dvb-usb: error while querying for an remote control event. [ 275.570606][ T52] m920x_read = error: -19 [ 275.570622][ T52] dvb-usb: error while querying for an remote control event. [ 275.571515][ T5743] usb 7-1: can't set config #1, error -71 [ 275.572942][ T5743] usb 7-1: USB disconnect, device number 19 [ 275.611220][ T5708] m920x_read = error: -19 [ 275.611246][ T5708] dvb-usb: error while querying for an remote control event. [ 275.648123][ T5680] m920x_read = error: -19 [ 275.648148][ T5680] dvb-usb: error while querying for an remote control event. [ 275.672228][ T27] m920x_read = error: -19 [ 275.672252][ T27] dvb-usb: error while querying for an remote control event. [ 275.672332][ T27] m920x_read = error: -19 [ 275.672348][ T27] dvb-usb: error while querying for an remote control event. [ 275.733083][ T5680] m920x_read = error: -19 [ 275.733106][ T5680] dvb-usb: error while querying for an remote control event. [ 275.758473][ T5680] m920x_read = error: -19 [ 275.758499][ T5680] dvb-usb: error while querying for an remote control event. [ 275.781052][ T27] m920x_read = error: -19 [ 275.781078][ T27] dvb-usb: error while querying for an remote control event. [ 275.781168][ T27] m920x_read = error: -19 [ 275.781185][ T27] dvb-usb: error while querying for an remote control event. [ 275.843608][ T5708] m920x_read = error: -19 [ 275.843633][ T5708] dvb-usb: error while querying for an remote control event. [ 275.884370][ T5708] m920x_read = error: -19 [ 275.884395][ T5708] dvb-usb: error while querying for an remote control event. [ 275.891487][ T27] m920x_read = error: -19 [ 275.891509][ T27] dvb-usb: error while querying for an remote control event. [ 275.891588][ T27] m920x_read = error: -19 [ 275.891604][ T27] dvb-usb: error while querying for an remote control event. [ 275.951061][ T5680] m920x_read = error: -19 [ 275.951090][ T5680] dvb-usb: error while querying for an remote control event. [ 275.991710][ T5680] m920x_read = error: -19 [ 275.991737][ T5680] dvb-usb: error while querying for an remote control event. [ 276.008207][ T5743] m920x_read = error: -19 [ 276.008235][ T5743] dvb-usb: error while querying for an remote control event. [ 276.008318][ T5743] m920x_read = error: -19 [ 276.008334][ T5743] dvb-usb: error while querying for an remote control event. [ 276.061348][ T5680] m920x_read = error: -19 [ 276.061381][ T5680] dvb-usb: error while querying for an remote control event. [ 276.111439][ T5743] m920x_read = error: -19 [ 276.111472][ T5743] dvb-usb: error while querying for an remote control event. [ 276.111578][ T5743] m920x_read = error: -19 [ 276.111615][ T5743] dvb-usb: error while querying for an remote control event. [ 276.111837][ T5708] m920x_read = error: -19 [ 276.111856][ T5708] dvb-usb: error while querying for an remote control event. [ 276.171089][ T5680] m920x_read = error: -19 [ 276.171118][ T5680] dvb-usb: error while querying for an remote control event. [ 276.221024][ T5680] m920x_read = error: -19 [ 276.221024][ T5743] m920x_read = error: -19 [ 276.221051][ T5680] dvb-usb: error while querying for an remote control event. [ 276.221051][ T5743] dvb-usb: error while querying for an remote control event. [ 276.221138][ T5743] m920x_read = error: -19 [ 276.221157][ T5743] dvb-usb: error while querying for an remote control event. [ 276.281140][ T5680] m920x_read = error: -19 [ 276.281169][ T5680] dvb-usb: error while querying for an remote control event. [ 276.304527][T10107] FAULT_INJECTION: forcing a failure. [ 276.304527][T10107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.304548][T10107] CPU: 1 UID: 0 PID: 10107 Comm: syz.6.1273 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.304570][T10107] Tainted: [L]=SOFTLOCKUP [ 276.304576][T10107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.304586][T10107] Call Trace: [ 276.304594][T10107] [ 276.304602][T10107] dump_stack_lvl+0xe8/0x150 [ 276.304633][T10107] should_fail_ex+0x3eb/0x540 [ 276.304668][T10107] _copy_from_user+0x2d/0xb0 [ 276.304689][T10107] do_handle_open+0x56e/0xb10 [ 276.304715][T10107] ? __pfx_do_handle_open+0x10/0x10 [ 276.304743][T10107] ? ksys_write+0x242/0x270 [ 276.304773][T10107] ? __pfx_ksys_write+0x10/0x10 [ 276.304810][T10107] do_syscall_64+0x166/0x520 [ 276.304833][T10107] ? trace_irq_disable+0x3b/0x140 [ 276.304853][T10107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.304872][T10107] ? clear_bhb_loop+0x70/0xc0 [ 276.304894][T10107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.304913][T10107] RIP: 0033:0x7fdecc39e2d9 [ 276.304932][T10107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.304949][T10107] RSP: 002b:00007fdecd2eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 276.304971][T10107] RAX: ffffffffffffffda RBX: 00007fdecc625fa0 RCX: 00007fdecc39e2d9 [ 276.304985][T10107] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 276.304997][T10107] RBP: 00007fdecd2eb090 R08: 0000000000000000 R09: 0000000000000000 [ 276.305009][T10107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.305021][T10107] R13: 00007fdecc626038 R14: 00007fdecc625fa0 R15: 00007ffe8daeebe8 [ 276.305052][T10107] [ 276.331032][ T5743] m920x_read = error: -19 [ 276.331060][ T5743] dvb-usb: error while querying for an remote control event. [ 276.331141][ T5743] m920x_read = error: -19 [ 276.331158][ T5743] dvb-usb: error while querying for an remote control event. [ 276.336503][ T5680] m920x_read = error: -19 [ 276.336529][ T5680] dvb-usb: error while querying for an remote control event. [ 276.393265][ T5680] m920x_read = error: -19 [ 276.393292][ T5680] dvb-usb: error while querying for an remote control event. [ 276.441121][ T5743] m920x_read = error: -19 [ 276.441150][ T5743] dvb-usb: error while querying for an remote control event. [ 276.441233][ T5743] m920x_read = error: -19 [ 276.441250][ T5743] dvb-usb: error while querying for an remote control event. [ 276.551180][ T5743] m920x_read = error: -19 [ 276.551208][ T5743] dvb-usb: error while querying for an remote control event. [ 276.551286][ T5743] m920x_read = error: -19 [ 276.551303][ T5743] dvb-usb: error while querying for an remote control event. [ 276.599933][ T5708] m920x_read = error: -19 [ 276.599961][ T5708] dvb-usb: error while querying for an remote control event. [ 276.600106][ T5708] m920x_read = error: -19 [ 276.600123][ T5708] dvb-usb: error while querying for an remote control event. [ 276.662171][ T27] m920x_read = error: -19 [ 276.662198][ T27] dvb-usb: error while querying for an remote control event. [ 276.662284][ T27] m920x_read = error: -19 [ 276.662302][ T27] dvb-usb: error while querying for an remote control event. [ 276.701250][ T5680] m920x_read = error: -19 [ 276.701277][ T5680] dvb-usb: error while querying for an remote control event. [ 276.701381][ T5680] m920x_read = error: -19 [ 276.701399][ T5680] dvb-usb: error while querying for an remote control event. [ 276.773077][ T27] m920x_read = error: -19 [ 276.773094][ T27] dvb-usb: error while querying for an remote control event. [ 276.773145][ T27] m920x_read = error: -19 [ 276.773156][ T27] dvb-usb: error while querying for an remote control event. [ 276.811426][ T5680] m920x_read = error: -19 [ 276.811453][ T5680] dvb-usb: error while querying for an remote control event. [ 276.811568][ T5680] m920x_read = error: -19 [ 276.811588][ T5680] dvb-usb: error while querying for an remote control event. [ 276.880974][ T27] m920x_read = error: -19 [ 276.880992][ T27] dvb-usb: error while querying for an remote control event. [ 276.881040][ T27] m920x_read = error: -19 [ 276.881049][ T27] dvb-usb: error while querying for an remote control event. [ 276.923657][ T5680] m920x_read = error: -19 [ 276.923696][ T5680] dvb-usb: error while querying for an remote control event. [ 276.923806][ T5680] m920x_read = error: -19 [ 276.923825][ T5680] dvb-usb: error while querying for an remote control event. [ 276.991047][ T5743] m920x_read = error: -19 [ 276.991077][ T5743] dvb-usb: error while querying for an remote control event. [ 276.991161][ T5743] m920x_read = error: -19 [ 276.991179][ T5743] dvb-usb: error while querying for an remote control event. [ 277.031989][ T5708] m920x_read = error: -19 [ 277.032023][ T5708] dvb-usb: error while querying for an remote control event. [ 277.032156][ T5708] m920x_read = error: -19 [ 277.032178][ T5708] dvb-usb: error while querying for an remote control event. [ 277.100997][ T27] m920x_read = error: -19 [ 277.101016][ T27] dvb-usb: error while querying for an remote control event. [ 277.101064][ T27] m920x_read = error: -19 [ 277.101075][ T27] dvb-usb: error while querying for an remote control event. [ 277.151201][ T5708] m920x_read = error: -19 [ 277.151231][ T5708] dvb-usb: error while querying for an remote control event. [ 277.151335][ T5708] m920x_read = error: -19 [ 277.151353][ T5708] dvb-usb: error while querying for an remote control event. [ 277.211308][ T5743] m920x_read = error: -19 [ 277.211327][ T5743] dvb-usb: error while querying for an remote control event. [ 277.211377][ T5743] m920x_read = error: -19 [ 277.211386][ T5743] dvb-usb: error while querying for an remote control event. [ 277.261066][ T5708] m920x_read = error: -19 [ 277.261095][ T5708] dvb-usb: error while querying for an remote control event. [ 277.261208][ T5708] m920x_read = error: -19 [ 277.261225][ T5708] dvb-usb: error while querying for an remote control event. [ 277.320955][ T5743] m920x_read = error: -19 [ 277.320975][ T5743] dvb-usb: error while querying for an remote control event. [ 277.321023][ T5743] m920x_read = error: -19 [ 277.321033][ T5743] dvb-usb: error while querying for an remote control event. [ 277.371036][ T5708] m920x_read = error: -19 [ 277.371074][ T5708] dvb-usb: error while querying for an remote control event. [ 277.371189][ T5708] m920x_read = error: -19 [ 277.371207][ T5708] dvb-usb: error while querying for an remote control event. [ 277.422264][T10123] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 277.427927][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1280'. [ 277.451259][ T5743] m920x_read = error: -19 [ 277.451285][ T5743] dvb-usb: error while querying for an remote control event. [ 277.451372][ T5743] m920x_read = error: -19 [ 277.451390][ T5743] dvb-usb: error while querying for an remote control event. [ 277.493225][ T5708] m920x_read = error: -19 [ 277.493242][ T5708] dvb-usb: error while querying for an remote control event. [ 277.493303][ T5708] m920x_read = error: -19 [ 277.493312][ T5708] dvb-usb: error while querying for an remote control event. [ 277.558175][T10127] netlink: 'syz.5.1279': attribute type 12 has an invalid length. [ 277.558200][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1279'. [ 277.568888][ T5743] m920x_read = error: -19 [ 277.568913][ T5743] dvb-usb: error while querying for an remote control event. [ 277.568998][ T5743] m920x_read = error: -19 [ 277.569016][ T5743] dvb-usb: error while querying for an remote control event. [ 277.576762][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1279'. [ 277.613651][ T5708] m920x_read = error: -19 [ 277.613668][ T5708] dvb-usb: error while querying for an remote control event. [ 277.614017][ T5708] m920x_read = error: -19 [ 277.614029][ T5708] dvb-usb: error while querying for an remote control event. [ 277.624362][T10123] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 277.671826][ T5743] m920x_read = error: -19 [ 277.671855][ T5743] dvb-usb: error while querying for an remote control event. [ 277.671985][ T5743] m920x_read = error: -19 [ 277.672004][ T5743] dvb-usb: error while querying for an remote control event. [ 277.713252][T10131] fuse: Bad value for 'fd' [ 277.732485][ T5708] m920x_read = error: -19 [ 277.732510][ T5708] dvb-usb: error while querying for an remote control event. [ 277.732607][ T5708] m920x_read = error: -19 [ 277.732625][ T5708] dvb-usb: error while querying for an remote control event. [ 277.782393][ T27] m920x_read = error: -19 [ 277.782436][ T27] dvb-usb: error while querying for an remote control event. [ 277.782522][ T27] m920x_read = error: -19 [ 277.782540][ T27] dvb-usb: error while querying for an remote control event. [ 277.843783][ T5680] m920x_read = error: -19 [ 277.843808][ T5680] dvb-usb: error while querying for an remote control event. [ 277.843910][ T5680] m920x_read = error: -19 [ 277.843929][ T5680] dvb-usb: error while querying for an remote control event. [ 277.891090][ T27] m920x_read = error: -19 [ 277.891117][ T27] dvb-usb: error while querying for an remote control event. [ 277.891199][ T27] m920x_read = error: -19 [ 277.891218][ T27] dvb-usb: error while querying for an remote control event. [ 277.951126][ T5708] m920x_read = error: -19 [ 277.951151][ T5708] dvb-usb: error while querying for an remote control event. [ 277.951252][ T5708] m920x_read = error: -19 [ 277.951270][ T5708] dvb-usb: error while querying for an remote control event. [ 278.001016][ T5743] m920x_read = error: -19 [ 278.001040][ T5743] dvb-usb: error while querying for an remote control event. [ 278.001120][ T5743] m920x_read = error: -19 [ 278.001137][ T5743] dvb-usb: error while querying for an remote control event. [ 278.061241][ T5708] m920x_read = error: -19 [ 278.061269][ T5708] dvb-usb: error while querying for an remote control event. [ 278.061372][ T5708] m920x_read = error: -19 [ 278.061389][ T5708] dvb-usb: error while querying for an remote control event. [ 278.111161][ T5743] m920x_read = error: -19 [ 278.111184][ T5743] dvb-usb: error while querying for an remote control event. [ 278.111266][ T5743] m920x_read = error: -19 [ 278.111284][ T5743] dvb-usb: error while querying for an remote control event. [ 278.130004][ T5680] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 278.171566][ T9] m920x_read = error: -19 [ 278.171593][ T9] dvb-usb: error while querying for an remote control event. [ 278.171690][ T9] m920x_read = error: -19 [ 278.171701][ T9] dvb-usb: error while querying for an remote control event. [ 278.221046][ T5743] m920x_read = error: -19 [ 278.221073][ T5743] dvb-usb: error while querying for an remote control event. [ 278.221156][ T5743] m920x_read = error: -19 [ 278.221175][ T5743] dvb-usb: error while querying for an remote control event. [ 278.291249][ T5054] m920x_read = error: -19 [ 278.291281][ T5054] dvb-usb: error while querying for an remote control event. [ 278.291387][ T5054] m920x_read = error: -19 [ 278.291404][ T5054] dvb-usb: error while querying for an remote control event. [ 278.331037][ T5680] usb 7-1: Using ep0 maxpacket: 8 [ 278.331419][ T5743] m920x_read = error: -19 [ 278.331441][ T5743] dvb-usb: error while querying for an remote control event. [ 278.331522][ T5743] m920x_read = error: -19 [ 278.331538][ T5743] dvb-usb: error while querying for an remote control event. [ 278.332477][ T5680] usb 7-1: New USB device found: idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 278.333407][ T5680] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 278.335306][ T5680] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.335330][ T5680] usb 7-1: Product: syz [ 278.335344][ T5680] usb 7-1: Manufacturer: syz [ 278.335359][ T5680] usb 7-1: SerialNumber: syz [ 278.337181][ T5680] usb 7-1: config 0 descriptor?? [ 278.341394][ T5680] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 278.404300][ T5054] m920x_read = error: -19 [ 278.404330][ T5054] dvb-usb: error while querying for an remote control event. [ 278.404479][ T5054] m920x_read = error: -19 [ 278.404496][ T5054] dvb-usb: error while querying for an remote control event. [ 278.404587][ T5708] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 278.443344][ T5743] m920x_read = error: -19 [ 278.443389][ T5743] dvb-usb: error while querying for an remote control event. [ 278.443476][ T5743] m920x_read = error: -19 [ 278.443494][ T5743] dvb-usb: error while querying for an remote control event. [ 278.512166][ T5054] m920x_read = error: -19 [ 278.512220][ T5054] dvb-usb: error while querying for an remote control event. [ 278.512349][ T5054] m920x_read = error: -19 [ 278.512368][ T5054] dvb-usb: error while querying for an remote control event. [ 278.542858][ T5680] gspca_zc3xx: reg_w_i err -71 [ 278.551053][ T5743] m920x_read = error: -19 [ 278.551076][ T5743] dvb-usb: error while querying for an remote control event. [ 278.551158][ T5743] m920x_read = error: -19 [ 278.551177][ T5743] dvb-usb: error while querying for an remote control event. [ 278.593026][ T5708] usb 5-1: unable to get BOS descriptor or descriptor too short [ 278.593495][ T5708] usb 5-1: not running at top speed; connect to a high speed hub [ 278.593527][ T5708] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 278.594480][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.594502][ T5708] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.597204][ T5708] usb 5-1: string descriptor 0 read error: -22 [ 278.597325][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.607152][ T5708] usb 5-1: 0:2 : does not exist [ 278.631190][ T5054] m920x_read = error: -19 [ 278.631214][ T5054] dvb-usb: error while querying for an remote control event. [ 278.631337][ T5054] m920x_read = error: -19 [ 278.631355][ T5054] dvb-usb: error while querying for an remote control event. [ 278.667136][ T5743] m920x_read = error: -19 [ 278.667161][ T5743] dvb-usb: error while querying for an remote control event. [ 278.667213][ T5743] m920x_read = error: -19 [ 278.667228][ T5743] dvb-usb: error while querying for an remote control event. [ 278.741173][ T5054] m920x_read = error: -19 [ 278.741228][ T5054] dvb-usb: error while querying for an remote control event. [ 278.741329][ T5054] m920x_read = error: -19 [ 278.741372][ T5054] dvb-usb: error while querying for an remote control event. [ 278.774725][ T5743] m920x_read = error: -19 [ 278.774751][ T5743] dvb-usb: error while querying for an remote control event. [ 278.774821][ T5743] m920x_read = error: -19 [ 278.774832][ T5743] dvb-usb: error while querying for an remote control event. [ 278.811247][T10146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.811923][T10146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.852522][ T5054] m920x_read = error: -19 [ 278.852552][ T5054] dvb-usb: error while querying for an remote control event. [ 278.852683][ T5054] m920x_read = error: -19 [ 278.852701][ T5054] dvb-usb: error while querying for an remote control event. [ 278.873584][ T4926] Bluetooth: hci5: command tx timeout [ 278.890163][ T52] m920x_read = error: -19 [ 278.890192][ T52] dvb-usb: error while querying for an remote control event. [ 278.890299][ T52] m920x_read = error: -19 [ 278.890309][ T52] dvb-usb: error while querying for an remote control event. [ 278.972263][ T5054] m920x_read = error: -19 [ 278.972307][ T5054] dvb-usb: error while querying for an remote control event. [ 278.972387][ T5054] m920x_read = error: -19 [ 278.972398][ T5054] dvb-usb: error while querying for an remote control event. [ 279.001072][ T52] m920x_read = error: -19 [ 279.001101][ T52] dvb-usb: error while querying for an remote control event. [ 279.001183][ T52] m920x_read = error: -19 [ 279.001201][ T52] dvb-usb: error while querying for an remote control event. [ 279.081220][ T9] m920x_read = error: -19 [ 279.081276][ T9] dvb-usb: error while querying for an remote control event. [ 279.081385][ T9] m920x_read = error: -19 [ 279.081426][ T9] dvb-usb: error while querying for an remote control event. [ 279.103335][ T5743] m920x_read = error: -19 [ 279.103367][ T5743] dvb-usb: error while querying for an remote control event. [ 279.103455][ T5743] m920x_read = error: -19 [ 279.103472][ T5743] dvb-usb: error while querying for an remote control event. [ 279.121322][ T5680] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 279.121459][ T5680] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 279.130309][ T5680] usb 7-1: USB disconnect, device number 20 [ 279.192313][ T10] m920x_read = error: -19 [ 279.192335][ T10] dvb-usb: error while querying for an remote control event. [ 279.192402][ T10] m920x_read = error: -19 [ 279.192412][ T10] dvb-usb: error while querying for an remote control event. [ 279.212986][ T52] m920x_read = error: -19 [ 279.213015][ T52] dvb-usb: error while querying for an remote control event. [ 279.213093][ T52] m920x_read = error: -19 [ 279.213104][ T52] dvb-usb: error while querying for an remote control event. [ 279.220162][T10146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.220724][T10146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.301137][ T5680] m920x_read = error: -19 [ 279.301190][ T5680] dvb-usb: error while querying for an remote control event. [ 279.301324][ T5680] m920x_read = error: -19 [ 279.301343][ T5680] dvb-usb: error while querying for an remote control event. [ 279.322828][ T52] m920x_read = error: -19 [ 279.322854][ T52] dvb-usb: error while querying for an remote control event. [ 279.322939][ T52] m920x_read = error: -19 [ 279.322957][ T52] dvb-usb: error while querying for an remote control event. [ 279.411109][ T5680] m920x_read = error: -19 [ 279.411139][ T5680] dvb-usb: error while querying for an remote control event. [ 279.411267][ T5680] m920x_read = error: -19 [ 279.411285][ T5680] dvb-usb: error while querying for an remote control event. [ 279.434042][ T52] m920x_read = error: -19 [ 279.434069][ T52] dvb-usb: error while querying for an remote control event. [ 279.434163][ T52] m920x_read = error: -19 [ 279.434182][ T52] dvb-usb: error while querying for an remote control event. [ 279.444611][ T5708] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 279.444739][ T5708] usb 5-1: Warning! Unlikely big volume step count (=427), linear volume or wrong cval->res? [ 279.444759][ T5708] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/427/1 [ 279.450006][ T5708] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 279.456152][ T5708] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 279.522759][ T5680] m920x_read = error: -19 [ 279.522784][ T5680] dvb-usb: error while querying for an remote control event. [ 279.522943][ T5680] m920x_read = error: -19 [ 279.522961][ T5680] dvb-usb: error while querying for an remote control event. [ 279.526011][ T5708] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 279.535563][ T5708] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 279.547239][ T52] m920x_read = error: -19 [ 279.547264][ T52] dvb-usb: error while querying for an remote control event. [ 279.547348][ T52] m920x_read = error: -19 [ 279.547366][ T52] dvb-usb: error while querying for an remote control event. [ 279.558945][ T5708] usb 5-1: USB disconnect, device number 46 [ 279.594344][ T34] INFO: task syz.2.251:6580 blocked for more than 143 seconds. [ 279.594371][ T34] Tainted: G L syzkaller #0 [ 279.594383][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.594392][ T34] task:syz.2.251 state:D stack:25256 ** replaying previous printk message ** [ 279.594392][ T34] task:syz.2.251 state:D stack:25256 pid:6580 tgid:6579 ppid:5611 task_flags:0x400140 flags:0x00080002 [ 279.594448][ T34] Call Trace: [ 279.594456][ T34] [ 279.594469][ T34] __schedule+0x17dd/0x5820 [ 279.594542][ T34] ? __pfx___schedule+0x10/0x10 [ 279.594573][ T34] ? schedule+0x90/0x2b0 [ 279.594596][ T34] schedule+0x164/0x2b0 [ 279.594619][ T34] schedule_preempt_disabled+0x13/0x30 [ 279.594640][ T34] __mutex_lock+0x7c4/0x15a0 [ 279.594668][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 279.594695][ T34] ? bdev_open+0xde/0xd70 [ 279.594719][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 279.594743][ T34] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 279.594767][ T34] ? file_init_path+0x43c/0x5a0 [ 279.594795][ T34] ? disk_block_events+0xab/0x120 [ 279.594822][ T34] ? bdev_open+0xbe/0xd70 [ 279.594845][ T34] bdev_open+0xde/0xd70 [ 279.594877][ T34] bdev_file_open_by_dev+0x1be/0x240 [ 279.594902][ T34] setup_bdev_super+0x5a/0x680 [ 279.594936][ T34] get_tree_bdev_flags+0x388/0x4f0 [ 279.594964][ T34] ? __pfx_affs_fill_super+0x10/0x10 [ 279.594991][ T34] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 279.595031][ T34] vfs_get_tree+0x92/0x2a0 [ 279.595052][ T34] do_new_mount+0x325/0xb00 [ 279.595084][ T34] ? __pfx_do_new_mount+0x10/0x10 [ 279.595111][ T34] ? ns_capable+0x84/0xe0 [ 279.595134][ T34] ? path_mount+0x647/0x1050 [ 279.595163][ T34] ? user_path_at+0xd4/0x160 [ 279.597596][ T34] __se_sys_mount+0x31d/0x420 [ 279.597638][ T34] ? __pfx___se_sys_mount+0x10/0x10 [ 279.597672][ T34] ? __x64_sys_mount+0x20/0xc0 [ 279.597700][ T34] do_syscall_64+0x166/0x520 [ 279.597723][ T34] ? trace_irq_disable+0x3b/0x140 [ 279.597744][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.597765][ T34] ? clear_bhb_loop+0x70/0xc0 [ 279.597790][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.597810][ T34] RIP: 0033:0x7fa8f4f9e2d9 [ 279.597828][ T34] RSP: 002b:00007fa8f5f39028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 279.597850][ T34] RAX: ffffffffffffffda RBX: 00007fa8f5225fa0 RCX: 00007fa8f4f9e2d9 [ 279.597866][ T34] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000240 [ 279.597880][ T34] RBP: 00007fa8f5035888 R08: 0000200000000340 R09: 0000000000000000 [ 279.597892][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.597903][ T34] R13: 00007fa8f5226038 R14: 00007fa8f5225fa0 R15: 00007ffd9bf747e8 [ 279.597933][ T34] [ 279.597992][ T34] [ 279.597992][ T34] Showing all locks held in the system: [ 279.598003][ T34] locks held by pr/ttyS0/16: 2, last CPU#1: [ 279.598033][ T34] #0: ffffffff90033a78 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 279.598100][ T34] #1: ffffffff9c205d18 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 279.598164][ T34] locks held by kworker/1:1/32: 6, on CPU#1: [ 279.598179][ T34] #0: ffff888021efcd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 279.598233][ T34] #1: ffffc90000a77c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 279.598285][ T34] #2: ffff88802adbe1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 279.598338][ T34] #3: ffff8880213861d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 279.598384][ T34] #4: ffff8880213871a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 279.598440][ T34] #5: ffff888058210180 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x4f0 [ 279.598497][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 279.598511][ T34] #0: ffffffff90159f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 279.598576][ T34] locks held by pvrusb2-context/2351: 2, last CPU#1: [ 279.598590][ T34] #0: ffff888058210180 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xe4/0x3c60 [ 279.598642][ T34] #1: ffffffff8fff4148 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2b0 [ 279.598714][ T34] locks held by getty/5366: 2, on CPU#0: [ 279.598727][ T34] #0: ffff888032e740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 279.598773][ T34] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 279.598832][ T34] locks held by kworker/0:7/5708: 10, last CPU#0: [ 279.598846][ T34] #0: ffff888021efcd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 279.598895][ T34] #1: ffffc900043efc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 279.598942][ T34] #2: ffff88802ad481d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 279.598990][ T34] #3: ffff88803649f1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 279.599034][ T34] #4: ffff888023ebe1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 279.616313][ T34] #5: ffffffff915eb180 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_disconnect+0x71/0x2c0 [ 279.616382][ T34] #6: ffffffff915c7200 (sound_mutex){+.+.}-{4:4}, at: snd_unregister_device+0x35/0x210 [ 279.616436][ T34] #7: ffffffff9000e760 (sched_map-wait-type-override){+.+.}-{3:3}, at: schedule+0x90/0x2b0 [ 279.616482][ T34] #8: ffff8880b823c0a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 279.616543][ T34] #9: ffff8880b82246c8 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 279.616593][ T34] locks held by udevd/5874: 1, on CPU#0: [ 279.616608][ T34] #0: ffff8880280a1350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 279.616656][ T34] locks held by udevd/6245: 1, last CPU#0: [ 279.616670][ T34] #0: ffff888036a82460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 279.616722][ T34] locks held by udevd/6250: 1, on CPU#0: [ 279.616735][ T34] #0: ffff8880280a5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 279.616781][ T34] locks held by udevd/6251: 4, on CPU#0: [ 279.616794][ T34] #0: ffff88802baca878 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 279.616841][ T34] #1: ffff888027bac880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 279.616897][ T34] #2: ffff888026f560f8 (kn->active#33){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 279.616951][ T34] #3: ffff8880213861d8 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 279.617002][ T34] locks held by syz.2.251/6580: 2, on CPU#1: [ 279.617016][ T34] #0: ffff88807e6520e8 (&type->s_umount_key#65/1){+.+.}-{4:4}, at: sget_fc+0x9cf/0x1a60 [ 279.617094][ T34] #1: ffff8880280a5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 279.617149][ T34] locks held by syz-executor/9492: 1, last CPU#0: [ 279.617163][ T34] #0: ffff88807cf6a460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 279.620191][ T34] [ 279.620215][ T34] ============================================= [ 279.620215][ T34] [ 279.620230][ T34] NMI backtrace for cpu 0 [ 279.620248][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 279.620274][ T34] Tainted: [L]=SOFTLOCKUP [ 279.620281][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.620292][ T34] Call Trace: [ 279.620301][ T34] [ 279.620309][ T34] dump_stack_lvl+0xe8/0x150 [ 279.620339][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 279.620360][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 279.620392][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 279.620424][ T34] sys_info+0x135/0x170 [ 279.620449][ T34] watchdog+0x1073/0x10f0 [ 279.620477][ T34] ? watchdog+0x209/0x10f0 [ 279.620502][ T34] kthread+0x38b/0x480 [ 279.620538][ T34] ? __pfx_watchdog+0x10/0x10 [ 279.620555][ T34] ? __pfx_kthread+0x10/0x10 [ 279.620583][ T34] ret_from_fork+0x514/0xb70 [ 279.620613][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 279.620640][ T34] ? __switch_to+0xc78/0x1410 [ 279.620667][ T34] ? __pfx_kthread+0x10/0x10 [ 279.620695][ T34] ret_from_fork_asm+0x1a/0x30 [ 279.620737][ T34] [ 279.620758][ T34] Sending NMI from CPU 0 to CPUs 1: [ 279.621048][ C1] NMI backtrace for cpu 1 [ 279.621064][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.621090][ C1] Tainted: [L]=SOFTLOCKUP [ 279.621096][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.621108][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 279.621139][ C1] Code: e8 1e a4 3f fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 5d b5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 279.621155][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 279.621171][ C1] RAX: 1ffffffff3840b00 RBX: 00000000000003fd RCX: 0000000000000000 [ 279.621185][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 279.621196][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 279.621209][ C1] R10: dffffc0000000000 R11: ffffffff85891ca0 R12: dffffc0000000000 [ 279.621223][ C1] R13: 0000000000000000 R14: ffffffff9c205d40 R15: 0000000000000000 [ 279.621236][ C1] FS: 0000000000000000(0000) GS:ffff888123508000(0000) knlGS:0000000000000000 [ 279.621252][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.621265][ C1] CR2: 0000001b2ef20ff8 CR3: 000000007eada000 CR4: 00000000003526f0 [ 279.621281][ C1] Call Trace: [ 279.621289][ C1] [ 279.621297][ C1] wait_for_lsr+0x184/0x2f0 [ 279.621321][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 279.621352][ C1] serial8250_console_write+0xa7e/0x1200 [ 279.621374][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 279.621400][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 279.621421][ C1] ? __schedule+0x17f3/0x5820 [ 279.621449][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 279.621477][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 279.621499][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 279.621536][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 279.621557][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 279.621589][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 279.621618][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 279.621650][ C1] ? __kthread_parkme+0x71/0x1f0 [ 279.621673][ C1] ? __kthread_parkme+0x199/0x1f0 [ 279.621699][ C1] kthread+0x38b/0x480 [ 279.621724][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 279.621752][ C1] ? __pfx_kthread+0x10/0x10 [ 279.621779][ C1] ret_from_fork+0x514/0xb70 [ 279.621806][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 279.621832][ C1] ? __switch_to+0xc78/0x1410 [ 279.621856][ C1] ? __pfx_kthread+0x10/0x10 [ 279.621883][ C1] ret_from_fork_asm+0x1a/0x30 [ 279.621916][ C1] [ 279.632099][ T9] m920x_read = error: -19 [ 279.632121][ T9] dvb-usb: error while querying for an remote control event. [ 279.632220][ T9] m920x_read = error: -19 [ 279.632237][ T9] dvb-usb: error while querying for an remote control event. [ 279.636425][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 280.685641][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 280.696412][ T34] Tainted: [L]=SOFTLOCKUP [ 280.700744][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.710799][ T34] Call Trace: [ 280.714087][ T34] [ 280.717027][ T34] vpanic+0x26f/0x710 [ 280.721027][ T34] panic+0xc5/0xd0 [ 280.724766][ T34] ? __pfx_panic+0x10/0x10 [ 280.729198][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 280.734662][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 280.740044][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 280.746226][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 280.752400][ T34] watchdog+0x10e7/0x10f0 [ 280.756750][ T34] ? watchdog+0x209/0x10f0 [ 280.761176][ T34] kthread+0x38b/0x480 [ 280.765257][ T34] ? __pfx_watchdog+0x10/0x10 [ 280.769933][ T34] ? __pfx_kthread+0x10/0x10 [ 280.774534][ T34] ret_from_fork+0x514/0xb70 [ 280.779140][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 280.784289][ T34] ? __switch_to+0xc78/0x1410 [ 280.788976][ T34] ? __pfx_kthread+0x10/0x10 [ 280.793579][ T34] ret_from_fork_asm+0x1a/0x30 [ 280.798363][ T34] [ 280.801533][ T34] Kernel Offset: disabled [ 280.805861][ T34] Rebooting in 86400 seconds..