last executing test programs: 8.56653866s ago: executing program 3 (id=1106): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={0x0, 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100b}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x48, 0xb, 0xe9, 0x40, 0x5fc9, 0x61, 0xcd47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd4, 0xa3, 0xc0, 0xfc, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0x4e, 0x7, 0x3}}]}}]}}]}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) close(0xffffffffffffffff) 8.32371641s ago: executing program 0 (id=1109): r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x46, &(0x7f0000000cc0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x5, 0x1, 0x5}}}}}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001900)={'sit0\x00', &(0x7f0000001880)={'tunl0\x00', 0x0, 0x80, 0x0, 0x1ff, 0x2, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x65, 0x400, 0x6, 0x29, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x4, 0x5a}]}}}}}) 8.13430153s ago: executing program 0 (id=1110): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002540)='/sys/kernel/rcu_normal', 0x8001, 0x10) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r0, 0x0, 0x0, 0x148, 0x543, 0x23456}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x16) 6.6253275s ago: executing program 3 (id=1112): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='t=\x00\x00\x00\x00\x00\x00/\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX, @ANYBLOB=',\x00']) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) chdir(&(0x7f00000000c0)='./file1\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x2000, 0x0) wait4(r0, &(0x7f0000000340), 0x8, &(0x7f0000000380)) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.548656101s ago: executing program 0 (id=1113): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) socket(0x11, 0x80802, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x80000000, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 6.474214741s ago: executing program 4 (id=1114): r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="41c2b1", 0x3}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r5, 0x101, 0xfffffffb}, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x773d, &(0x7f0000000a40)={0x0, 0x0, 0x1000, 0x2, 0x3bc}) close(r0) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x1, 0xffeffc03}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfff, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}) io_uring_enter(r6, 0x3516, 0x483, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.756245483s ago: executing program 0 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xd, 0x42, 0x44, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r0}, 0x38) (fail_nth: 3) 4.753489253s ago: executing program 3 (id=1117): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x7, 0x4, 0x8, 0x100, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.703693079s ago: executing program 4 (id=1119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x27}, 0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) 4.431086835s ago: executing program 0 (id=1120): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="290a0000db00fedbdf250100070008000100", @ANYRES32, @ANYBLOB="2400030000000000000000000027000700000000"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) open(0x0, 0x14927e, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 4.377521606s ago: executing program 2 (id=1121): inotify_rm_watch(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x4000, 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 4.377295596s ago: executing program 3 (id=1122): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) r2 = fcntl$dupfd(r0, 0x406, r0) syz_genetlink_get_family_id$ethtool(0x0, r2) 3.559227451s ago: executing program 4 (id=1123): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002540)='/sys/kernel/rcu_normal', 0x8001, 0x10) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r0, 0x0, 0x0, 0x148, 0x543, 0x23456}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x16) 2.78452949s ago: executing program 3 (id=1124): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='t=\x00\x00\x00\x00\x00\x00/\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX, @ANYBLOB=',\x00']) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) chdir(&(0x7f00000000c0)='./file1\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x2000, 0x0) wait4(r0, &(0x7f0000000340), 0x8, &(0x7f0000000380)) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.777478554s ago: executing program 2 (id=1125): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) keyctl$reject(0x13, 0x0, 0x7ff, 0x897, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004cc2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 2.684428324s ago: executing program 1 (id=1126): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) socket(0x11, 0x80802, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x80000000, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 2.68363124s ago: executing program 0 (id=1127): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="14010000220001000000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 2.524224928s ago: executing program 2 (id=1128): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0xec9f0000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r1, 0x0, 0x400, 0x10, &(0x7f0000000380)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, "1f00000800"}) r4 = dup3(r3, r2, 0x0) read$rfkill(r4, &(0x7f00000002c0), 0x8) (fail_nth: 1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) read(r3, &(0x7f0000000e00)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = userfaultfd(0x800) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000661000/0x2000)=nil, 0x2000}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc20000907800004efbfc19fdb729195d5b4e9dd81ad27dca1bde22d443519284c640d20a55df904a000000000000000000000036ad959ef7ada15477aff475c8bf8e1dc8dccefee2af1b03c90843f6760ddcfb956546792778e1f0b383094a32ca9f8eaa5f50b0c9152c380db4df50c92e9893e599c5411aa8371720b10436d611b3e2434d7833df665ae061627f8ce7fe0c40083c90338164a3ca73455b1ac19aa996a422c66b2477"], 0x0) 2.274023547s ago: executing program 1 (id=1129): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0xec9f0000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r1, 0x0, 0x400, 0x10, &(0x7f0000000380)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, "1f00000800"}) r4 = dup3(r3, r2, 0x0) read$rfkill(r4, &(0x7f00000002c0), 0x8) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) read(r3, &(0x7f0000000e00)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = userfaultfd(0x800) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000661000/0x2000)=nil, 0x2000}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="140000001000410000000000000000000500000a48000000060a0b0400000000000000e670f98d57bf94dc7b0480180001800e000100627974656172646572000000040002800900010073797a30000000000900020073797a3200000000140000001100010080000000000000000700"], 0x70}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc20000907800004efbfc19fdb729195d5b4e9dd81ad27dca1bde22d443519284c640d20a55df904a000000000000000000000036ad959ef7ada15477aff475c8bf8e1dc8dccefee2af1b03c90843f6760ddcfb956546792778e1f0b383094a32ca9f8eaa5f50b0c9152c380db4df50c92e9893e599c5411aa8371720b10436d611b3e2434d7833df665ae061627f8ce7fe0c40083c90338164a3ca73455b1ac19aa996a422c66b2477"], 0x0) 1.762688911s ago: executing program 2 (id=1130): socketpair(0x2, 0x1, 0x20000000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1.626914205s ago: executing program 2 (id=1131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x13) 1.374544478s ago: executing program 1 (id=1132): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket(0xa, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex, 0xffffffffffffffff, 0x37, 0x6018, 0x0, @value}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x1}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x3d, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000700), 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=ANY=[]}, 0x78) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) 1.177615125s ago: executing program 1 (id=1133): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8dddc851d5920d7f, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8dddc851d5920d7f, 0x0) unshare(0x40400) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') setns(r0, 0x0) (async) setns(r0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000440)={0x0, r2}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) (async) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000700)={'wlan0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r6, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r8, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) readv(r8, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/221, 0xdd}], 0x1) r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x3c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_NET_NS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x24008004) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r9, 0x29, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40040) (async) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r9, 0x29, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40040) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @c}}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @c}}) close_range(r1, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 1.176270711s ago: executing program 4 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) iopl(0x3) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b78, 0x400, 0x1, 0x237}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r5, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_emit_ethernet(0xb0, &(0x7f0000000400)={@broadcast, @multicast, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@mpls_uc={0x8847, {[{0x3472}, {0xd}, {0x68800, 0x0, 0x1}, {0x7}, {0x2}], @llc={@snap={0x1, 0x0, "df79", "27d8f8", 0x2, "309a8fc88961f0bd537a095a939c80174f7b4d715527a5b0191962595e4469dd0d2bea38456668465cfc8b8fe34e626f1dd79d8207cd739ffd24c4d9252bf3bd7e0c18c981c757098b7f718573e03fd40489572c9d9bfb541a9bb403243f86a81d60cc6f0e51c31e34023d0f7a706071becb86901785958c7a00b26b524e10fbe2"}}}}}}, &(0x7f0000000000)={0x0, 0x2, [0xc35, 0x3c8, 0x4ed, 0x5db]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2000, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) chdir(&(0x7f00000003c0)='./bus\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@reiserfs_5={0x46, 0x5, {0x4, 0x7, 0x6, 0x8, 0x80000001}}, 0x0, 0x1200) 846.424906ms ago: executing program 1 (id=1135): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000440)='wg0\x00', 0xab) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) (fail_nth: 3) 794.464322ms ago: executing program 4 (id=1136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) 553.624181ms ago: executing program 1 (id=1137): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r2, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r4, &(0x7f0000006140)={0x2020}, 0x2020) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x1c, 0x35, 0xb, 0x0, 0x0, {0x5}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d5924506"]}]}, 0x1c}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe3, 0x16, 0x60, 0x40, 0x586, 0x102, 0x140a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x1, 0x5f, 0xb9, 0x4d, 0x0, [], [{{0x9, 0x5, 0x1c277d69f7841ba1, 0x3, 0x400, 0x5, 0x2, 0x8}}]}}]}}]}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 516.989636ms ago: executing program 4 (id=1138): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000008ac05730200000000000109022400010000f0000904000401030002000921"], 0x0) ioprio_set$uid(0x3, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009042000010300000009210000000122050009058103"], 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xd7, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x88, 0x1, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x96, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xff, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x5, 0x3, 0x0, 0x40, 0x2}, 0x12a, &(0x7f0000000140)={0x5, 0xf, 0x12a, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x4, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "02b795438887b0a418d5851e637bf4ec"}, @generic={0xdc, 0x10, 0x0, "b0d6f891e434ef8af52b06660eef032c49595d07f9d5668b045b111b4df914843b74546a263141523348e2d876c15c3e12e376f7f218218d9fbb02e84f3b67a1bfb8c9c51d8266c4b4ee5dee3605c499c6524007b99137abe89feed26af818820ba3a5aaee7940c5aaa72900166ad22c520ac308fbd44886d2f9d599f0e26c5bbac9bb445eb2ec592c8423f9b669597d805d2c283d177263c46148ed755656b70ec21ff4ec199fe69c533fee5394e017066be5afbcb8946dedfdf9a7f247ff1a95a66975d61905c964ff0262d5ecea6e2fa788b33ea1b32f39"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "57bc5897aa8c9f302e2c426ef4584383"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x6, 0x2, 0x3}]}, 0x7, [{0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x480a}}, {0xe4, &(0x7f0000000400)=@string={0xe4, 0x3, "80cacba891e6d9140db7472c5e237a8d8db45515383623b318303f5ac566aba0389087854aef8fcd77c3d70c94dd4f179f18b1385b8f8c19f034205f86cecdd63eb07243e84ea8c459206413f5d9b94ac8027d798dabfbdedb33e413573a7edeb4edf193232634549fde874d67aa350a55df9e4b842884894d4722e15c59d3875f9f86f9a1172c2c2d2993765b3e0c9c613f0cd89f974ea9b0f57c061ab77d4abd215dba74c91c21e95278a34095816ce32d14c13af6d48b0e7ecd67b22acb4d301e5b0bceaa36535b2a192c7d3f9bc47ee4e72c649b50cabad8ae600ec5bf0d5706"}}, {0x58, &(0x7f0000000580)=@string={0x58, 0x3, "8f83b6515ed1c2147e8946fbe2f537804cdf68154687939ddf7e1bce5acf94c5773cc72907d2b43c0c79420c8dce9c20c5b261440337e418735a3e7b0bbec9b26ada69ee47196fe19053b71937f36e6b0c2d6c2ae8c5"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2c09}}, {0xb5, &(0x7f0000000680)=@string={0xb5, 0x3, "1509b7d4c5b6e4ccd13c32363f9993927e9ea7e1f5f23168b21482f5c939a41b47776418be35c3e87a037e17a6bc9c53819d0f5d4650e4c0b5bdf7e51cc01c2d5009d9e7c4fc236364f22453c94a64bd9f38f1310d0a102630a73eff7ad8efa2de0ce7fd0fc8aa9660005e356e279595039e89fa264e0839fade08f56d94bdcf1479f781724abc61ee72ea579de19c0882201cc516956b68ba46123e05a0661a2ba55d726036656dec82c5a7696a8e101cd9e5"}}]}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000000)={0x0, 0x43, 0x3f, 0x30315559, 0x1, [], [0x3f, 0x0, 0x80, 0x1fffe], [0x0, 0xdaf, 0xfffffffe], [0x2]}) syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x400002) syz_usb_control_io$hid(r1, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000800)={'mangle\x00', 0x0, [0x9, 0x4f2, 0x6, 0x1, 0x8001]}, &(0x7f0000000880)=0x54) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 515.992251ms ago: executing program 3 (id=1139): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000000c0)={r4}, &(0x7f0000000500)=0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x44, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007ec0)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r6, @ANYBLOB="07df2c06264d6239f1d6927ad366a50b610a6633ea25c74f31aabc87b472211dc5e2e0a23ced1ca80e2329007420dc0b2421b1a8610d4165cb02c431b76b12"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) clock_gettime(0x0, &(0x7f0000007e40)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000007cc0)=[{{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/3, 0x3}], 0x1}, 0x7a9}, {{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000940)=[{&(0x7f0000000500)=""/24, 0x18}, {&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/232, 0xe8}, {&(0x7f0000000680)=""/182, 0xb6}, {&(0x7f0000000740)=""/139, 0x8b}, {&(0x7f0000000800)=""/7, 0x7}, {&(0x7f0000000880)=""/185, 0xb9}], 0x7}, 0x6}, {{&(0x7f00000009c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/67, 0x43}, {&(0x7f0000000ac0)=""/165, 0xa5}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/172, 0xac}, {&(0x7f0000001c40)=""/91, 0x5b}], 0x6}, 0xf0}, {{&(0x7f0000001d40)=@qipcrtr, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003300)=""/131, 0x83}, {&(0x7f0000001e40)=""/214, 0xd6}, {&(0x7f0000003240)=""/161, 0xa1}, {&(0x7f0000001f80)=""/239, 0xef}, {&(0x7f00000030c0)=""/119, 0x77}, {&(0x7f0000003140)=""/244, 0xf4}, {&(0x7f00000034c0)=""/234, 0xea}, {&(0x7f0000001dc0)=""/74, 0x4a}, {&(0x7f00000033c0)=""/244, 0xf4}, {&(0x7f0000001f40)}, {&(0x7f0000004a40)=""/214, 0xd6}, {&(0x7f0000004b40)=""/223, 0xdf}], 0xc, &(0x7f0000003680)=""/187, 0xbb}, 0x8}, {{&(0x7f0000003740)=@vsock, 0x80, &(0x7f0000004940)=[{&(0x7f00000037c0)=""/124, 0x7c}, {&(0x7f0000003840)=""/199, 0xc7}, {&(0x7f0000003940)=""/4096, 0x1000}], 0x3, &(0x7f0000004980)=""/55, 0x37}, 0xffffffa2}, {{0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/5, 0x5}, {&(0x7f0000005a00)=""/38, 0x26}, {&(0x7f00000049c0)=""/71, 0x47}, {&(0x7f0000005ac0)=""/39, 0x27}, {&(0x7f0000005b00)=""/175, 0xaf}, {&(0x7f0000005bc0)=""/86, 0x56}, {&(0x7f0000005c40)=""/4096, 0x1000}], 0x8, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x5}], 0x6, 0x40013002, &(0x7f0000007e80)={r7, r8+60000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 2 (id=1140): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000008ac05730200000000000109022400010000f0000904000401030002000921"], 0x0) ioprio_set$uid(0x3, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009042000010300000009210000000122050009058103"], 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xd7, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x88, 0x1, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x96, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xff, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x5, 0x3, 0x0, 0x40, 0x2}, 0x12a, &(0x7f0000000140)={0x5, 0xf, 0x12a, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x4, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "02b795438887b0a418d5851e637bf4ec"}, @generic={0xdc, 0x10, 0x0, "b0d6f891e434ef8af52b06660eef032c49595d07f9d5668b045b111b4df914843b74546a263141523348e2d876c15c3e12e376f7f218218d9fbb02e84f3b67a1bfb8c9c51d8266c4b4ee5dee3605c499c6524007b99137abe89feed26af818820ba3a5aaee7940c5aaa72900166ad22c520ac308fbd44886d2f9d599f0e26c5bbac9bb445eb2ec592c8423f9b669597d805d2c283d177263c46148ed755656b70ec21ff4ec199fe69c533fee5394e017066be5afbcb8946dedfdf9a7f247ff1a95a66975d61905c964ff0262d5ecea6e2fa788b33ea1b32f39"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "57bc5897aa8c9f302e2c426ef4584383"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x6, 0x2, 0x3}]}, 0x7, [{0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x480a}}, {0xe4, &(0x7f0000000400)=@string={0xe4, 0x3, "80cacba891e6d9140db7472c5e237a8d8db45515383623b318303f5ac566aba0389087854aef8fcd77c3d70c94dd4f179f18b1385b8f8c19f034205f86cecdd63eb07243e84ea8c459206413f5d9b94ac8027d798dabfbdedb33e413573a7edeb4edf193232634549fde874d67aa350a55df9e4b842884894d4722e15c59d3875f9f86f9a1172c2c2d2993765b3e0c9c613f0cd89f974ea9b0f57c061ab77d4abd215dba74c91c21e95278a34095816ce32d14c13af6d48b0e7ecd67b22acb4d301e5b0bceaa36535b2a192c7d3f9bc47ee4e72c649b50cabad8ae600ec5bf0d5706"}}, {0x58, &(0x7f0000000580)=@string={0x58, 0x3, "8f83b6515ed1c2147e8946fbe2f537804cdf68154687939ddf7e1bce5acf94c5773cc72907d2b43c0c79420c8dce9c20c5b261440337e418735a3e7b0bbec9b26ada69ee47196fe19053b71937f36e6b0c2d6c2ae8c5"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2c09}}, {0xb5, &(0x7f0000000680)=@string={0xb5, 0x3, "1509b7d4c5b6e4ccd13c32363f9993927e9ea7e1f5f23168b21482f5c939a41b47776418be35c3e87a037e17a6bc9c53819d0f5d4650e4c0b5bdf7e51cc01c2d5009d9e7c4fc236364f22453c94a64bd9f38f1310d0a102630a73eff7ad8efa2de0ce7fd0fc8aa9660005e356e279595039e89fa264e0839fade08f56d94bdcf1479f781724abc61ee72ea579de19c0882201cc516956b68ba46123e05a0661a2ba55d726036656dec82c5a7696a8e101cd9e5"}}]}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000000)={0x0, 0x43, 0x3f, 0x30315559, 0x1, [], [0x3f, 0x0, 0x80, 0x1fffe], [0x0, 0xdaf, 0xfffffffe], [0x2]}) syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x400002) syz_usb_control_io$hid(r1, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000800)={'mangle\x00', 0x0, [0x9, 0x4f2, 0x6, 0x1, 0x8001]}, &(0x7f0000000880)=0x54) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): dvb-usb: error -19 while querying for an remote control event. [ 455.875255][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.893300][ T5877] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 455.901370][ T5906] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.918482][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 455.925850][ T24] m920x_read = error: -19 [ 455.931069][ T24] dvb-usb: error -19 while querying for an remote control event. [ 455.948056][ T5906] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 455.962754][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.983229][ T5836] usb 3-1: USB disconnect, device number 25 [ 455.987149][ T5906] usb 4-1: config 0 descriptor?? [ 456.009309][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 456.078158][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 456.101008][ T5877] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 456.110567][ T5881] m920x_read = error: -19 [ 456.132679][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 456.141827][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.154988][ T5877] usb 5-1: Product: syz [ 456.159453][ T5877] usb 5-1: Manufacturer: syz [ 456.164484][ T5877] usb 5-1: SerialNumber: syz [ 456.201248][ T5877] r8152-cfgselector 5-1: Unknown version 0x0000 [ 456.213393][ T8859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.222273][ T8859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.230143][ T5877] r8152-cfgselector 5-1: config 0 descriptor?? [ 456.234591][ T8859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.259602][ T8859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.289787][ T5173] bcm5974 4-1:0.0: could not read from device [ 456.299191][ T5173] bcm5974 4-1:0.0: could not read from device [ 456.308732][ T5906] usb 4-1: USB disconnect, device number 28 [ 456.319202][ T5173] bcm5974 4-1:0.0: could not read from device [ 456.332240][ T5881] m920x_read = error: -19 [ 456.337025][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 456.471881][ T30] audit: type=1800 audit(1746896553.167:40): pid=8869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.818" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 456.491391][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.503111][ T5881] m920x_read = error: -19 [ 456.507535][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 456.547971][ T8861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.650599][ T8861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.723915][ T24] m920x_read = error: -19 [ 456.728382][ T24] dvb-usb: error -19 while querying for an remote control event. [ 456.756916][ T5877] r8152-cfgselector 5-1: Unknown version 0x0000 [ 456.788751][ T5877] r8152-cfgselector 5-1: bad CDC descriptors [ 456.944554][ T24] m920x_read = error: -19 [ 457.273705][ T24] dvb-usb: error -19 while querying for an remote control event. [ 457.298323][ T5877] r8152-cfgselector 5-1: USB disconnect, device number 14 [ 457.473820][ T5906] m920x_read = error: -19 [ 457.478229][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 457.514215][ T8880] i2c i2c-0: Invalid block write size 35 [ 457.663212][ T5906] m920x_read = error: -19 [ 457.678550][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 457.693177][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 457.702795][ T8884] syz.0.824 (8884): drop_caches: 2 [ 457.729950][ T8884] syz.0.824 (8884): drop_caches: 2 [ 457.853265][ T5906] m920x_read = error: -19 [ 457.857674][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 457.874733][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 457.892624][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 457.923218][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 457.943125][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.972402][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 458.005486][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.025145][ T24] usb 3-1: Product: syz [ 458.033059][ T24] usb 3-1: Manufacturer: syz [ 458.037698][ T24] usb 3-1: SerialNumber: syz [ 458.047655][ T5906] m920x_read = error: -19 [ 458.052054][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 458.123106][ T59] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 458.233251][ T5906] m920x_read = error: -19 [ 458.245987][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 458.285035][ T59] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 458.297271][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 458.313953][ T8895] syz_tun: entered allmulticast mode [ 458.340024][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 458.375195][ T8892] syz_tun: left allmulticast mode [ 458.390665][ T59] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 458.404484][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.413258][ T5906] m920x_read = error: -19 [ 458.415045][ T59] usb 1-1: Product: syz [ 458.417624][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 458.421767][ T59] usb 1-1: Manufacturer: syz [ 458.451745][ T59] usb 1-1: SerialNumber: syz [ 458.464643][ T59] usb 1-1: config 0 descriptor?? [ 458.470460][ T8887] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 458.480149][ T59] option 1-1:0.0: GSM modem (1-port) converter detected [ 458.513990][ T24] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 458.593086][ T5906] m920x_read = error: -19 [ 458.597548][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 458.743370][ T5906] usb 1-1: USB disconnect, device number 9 [ 458.809624][ T5906] option 1-1:0.0: device disconnected [ 458.817145][ T5881] m920x_read = error: -19 [ 458.821562][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 458.823073][ T5878] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 459.063327][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 459.144249][ T5878] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 459.192705][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.258253][ T5878] usb 5-1: Product: syz [ 459.280213][ T5878] usb 5-1: Manufacturer: syz [ 459.303830][ T5878] usb 5-1: SerialNumber: syz [ 459.459458][ T5881] m920x_read = error: -19 [ 459.467931][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 459.637582][ T24] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 459.642625][ T5878] r8152-cfgselector 5-1: Unknown version 0x0000 [ 459.653058][ T5878] r8152-cfgselector 5-1: config 0 descriptor?? [ 459.665033][ T5906] m920x_read = error: -19 [ 459.686210][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 459.925619][ T5877] m920x_read = error: -19 [ 460.067342][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 460.264112][ T8878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.320145][ T8878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.373436][ T8897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.420923][ T8897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.423956][ T5877] m920x_read = error: -19 [ 460.439486][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 460.547808][ T59] usb 3-1: USB disconnect, device number 26 [ 460.840072][ T5878] r8152-cfgselector 5-1: Unknown version 0x0000 [ 460.877438][ T5878] r8152-cfgselector 5-1: bad CDC descriptors [ 460.950546][ T24] m920x_read = error: -19 [ 460.955089][ T24] dvb-usb: error -19 while querying for an remote control event. [ 460.990015][ T5878] r8152-cfgselector 5-1: USB disconnect, device number 15 [ 461.028117][ T8930] syz.1.835 (8930): drop_caches: 2 [ 461.066673][ T8930] syz.1.835 (8930): drop_caches: 2 [ 461.123715][ T24] m920x_read = error: -19 [ 461.128125][ T24] dvb-usb: error -19 while querying for an remote control event. [ 461.137306][ T8927] Bluetooth: MGMT ver 1.23 [ 461.263383][ T5877] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 461.303085][ T24] m920x_read = error: -19 [ 461.312973][ T24] dvb-usb: error -19 while querying for an remote control event. [ 461.433012][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 461.449072][ T5877] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 461.473753][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.483615][ T24] m920x_read = error: -19 [ 461.486877][ T8943] i2c i2c-0: Invalid block write size 35 [ 461.487981][ T24] dvb-usb: error -19 while querying for an remote control event. [ 461.507690][ T5877] usb 1-1: Product: syz [ 461.520922][ T5877] usb 1-1: Manufacturer: syz [ 461.521479][ T8949] FAULT_INJECTION: forcing a failure. [ 461.521479][ T8949] name failslab, interval 1, probability 0, space 0, times 0 [ 461.526547][ T5877] usb 1-1: SerialNumber: syz [ 461.545864][ T8949] CPU: 0 UID: 0 PID: 8949 Comm: syz.4.841 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 461.545888][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.545899][ T8949] Call Trace: [ 461.545906][ T8949] [ 461.545913][ T8949] dump_stack_lvl+0x189/0x250 [ 461.545944][ T8949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.545968][ T8949] ? __pfx__printk+0x10/0x10 [ 461.545997][ T8949] ? __pfx___might_resched+0x10/0x10 [ 461.546022][ T8949] ? fs_reclaim_acquire+0x7d/0x100 [ 461.546045][ T8949] should_fail_ex+0x414/0x560 [ 461.546076][ T8949] should_failslab+0xa8/0x100 [ 461.546104][ T8949] __kmalloc_noprof+0xcb/0x4f0 [ 461.546127][ T8949] ? tomoyo_encode+0x28b/0x550 [ 461.546153][ T8949] tomoyo_encode+0x28b/0x550 [ 461.546179][ T8949] tomoyo_realpath_from_path+0x58d/0x5d0 [ 461.546203][ T8949] ? tomoyo_domain+0xda/0x130 [ 461.546230][ T8949] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 461.546248][ T8949] tomoyo_path_number_perm+0x1e8/0x5a0 [ 461.546268][ T8949] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 461.546302][ T8949] ? __lock_acquire+0xaac/0xd20 [ 461.546348][ T8949] ? __fget_files+0x2a/0x420 [ 461.546378][ T8949] ? __fget_files+0x3a0/0x420 [ 461.546402][ T8949] ? __fget_files+0x2a/0x420 [ 461.546431][ T8949] security_file_ioctl+0xcb/0x2d0 [ 461.546453][ T8949] __se_sys_ioctl+0x47/0x170 [ 461.546476][ T8949] do_syscall_64+0xf6/0x210 [ 461.546498][ T8949] ? clear_bhb_loop+0x45/0xa0 [ 461.546519][ T8949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.546536][ T8949] RIP: 0033:0x7f869438e969 [ 461.546551][ T8949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.546565][ T8949] RSP: 002b:00007f869520c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.546585][ T8949] RAX: ffffffffffffffda RBX: 00007f86945b5fa0 RCX: 00007f869438e969 [ 461.546597][ T8949] RDX: 00002000000000c0 RSI: 0000000000005403 RDI: 0000000000000004 [ 461.546608][ T8949] RBP: 00007f869520c090 R08: 0000000000000000 R09: 0000000000000000 [ 461.546618][ T8949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.546629][ T8949] R13: 0000000000000000 R14: 00007f86945b5fa0 R15: 00007ffdcd77a948 [ 461.546655][ T8949] [ 461.546673][ T8949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.565924][ T5877] r8152-cfgselector 1-1: Unknown version 0x0000 [ 461.793050][ T24] m920x_read = error: -19 [ 461.797438][ T24] dvb-usb: error -19 while querying for an remote control event. [ 461.922786][ T5877] r8152-cfgselector 1-1: config 0 descriptor?? [ 461.963178][ T5906] m920x_read = error: -19 [ 461.967599][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 462.026873][ T8961] FAULT_INJECTION: forcing a failure. [ 462.026873][ T8961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.040502][ T8961] CPU: 0 UID: 0 PID: 8961 Comm: syz.2.843 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 462.040528][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.040541][ T8961] Call Trace: [ 462.040548][ T8961] [ 462.040556][ T8961] dump_stack_lvl+0x189/0x250 [ 462.040585][ T8961] ? __lock_acquire+0xaac/0xd20 [ 462.040612][ T8961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.040637][ T8961] ? __pfx__printk+0x10/0x10 [ 462.040665][ T8961] ? __might_fault+0xb0/0x130 [ 462.040704][ T8961] should_fail_ex+0x414/0x560 [ 462.040739][ T8961] _copy_from_user+0x2d/0xb0 [ 462.040763][ T8961] kvm_arch_vcpu_ioctl+0xdc5/0x2a10 [ 462.040797][ T8961] ? kvm_arch_vcpu_ioctl+0xd85/0x2a10 [ 462.040823][ T8961] ? __lock_acquire+0xaac/0xd20 [ 462.040847][ T8961] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 462.040885][ T8961] ? __lock_acquire+0xaac/0xd20 [ 462.040927][ T8961] ? is_bpf_text_address+0x26/0x2b0 [ 462.040956][ T8961] ? is_bpf_text_address+0x292/0x2b0 [ 462.040978][ T8961] ? is_bpf_text_address+0x26/0x2b0 [ 462.041005][ T8961] ? kernel_text_address+0xa5/0xe0 [ 462.041028][ T8961] ? __kernel_text_address+0xd/0x40 [ 462.041050][ T8961] ? unwind_get_return_address+0x4d/0x90 [ 462.041070][ T8961] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 462.041088][ T8961] ? arch_stack_walk+0xfc/0x150 [ 462.041122][ T8961] ? stack_trace_save+0x9c/0xe0 [ 462.041143][ T8961] ? stack_depot_save_flags+0x40/0x910 [ 462.041180][ T8961] ? __lock_acquire+0xaac/0xd20 [ 462.041211][ T8961] ? __mutex_trylock_common+0x153/0x260 [ 462.041231][ T8961] ? __pfx___mutex_trylock_common+0x10/0x10 [ 462.041265][ T8961] ? rcu_is_watching+0x15/0xb0 [ 462.041291][ T8961] ? trace_contention_end+0x39/0x120 [ 462.041315][ T8961] ? __mutex_lock+0x330/0xe80 [ 462.041343][ T8961] ? kasan_quarantine_put+0xdd/0x220 [ 462.041368][ T8961] ? kvm_vcpu_ioctl+0x22c/0xe90 [ 462.041395][ T8961] ? __pfx___mutex_lock+0x10/0x10 [ 462.041417][ T8961] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 462.041440][ T8961] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 462.041458][ T8961] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 462.041478][ T8961] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 462.041501][ T8961] kvm_vcpu_ioctl+0x74b/0xe90 [ 462.041530][ T8961] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 462.041556][ T8961] ? __lock_acquire+0xaac/0xd20 [ 462.041583][ T8961] ? __asan_memset+0x22/0x50 [ 462.041604][ T8961] ? smack_file_ioctl+0x302/0x340 [ 462.041636][ T8961] ? __pfx_smack_file_ioctl+0x10/0x10 [ 462.041674][ T8961] ? __fget_files+0x3a0/0x420 [ 462.041701][ T8961] ? __fget_files+0x2a/0x420 [ 462.041732][ T8961] ? bpf_lsm_file_ioctl+0x9/0x20 [ 462.041754][ T8961] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 462.041778][ T8961] __se_sys_ioctl+0xf9/0x170 [ 462.041803][ T8961] do_syscall_64+0xf6/0x210 [ 462.041827][ T8961] ? clear_bhb_loop+0x45/0xa0 [ 462.041850][ T8961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.041867][ T8961] RIP: 0033:0x7f8eb858e969 [ 462.041883][ T8961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.041899][ T8961] RSP: 002b:00007f8eb9383038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.041918][ T8961] RAX: ffffffffffffffda RBX: 00007f8eb87b5fa0 RCX: 00007f8eb858e969 [ 462.041931][ T8961] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000010 [ 462.041943][ T8961] RBP: 00007f8eb9383090 R08: 0000000000000000 R09: 0000000000000000 [ 462.041955][ T8961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.041967][ T8961] R13: 0000000000000000 R14: 00007f8eb87b5fa0 R15: 00007fffa97fca28 [ 462.041996][ T8961] [ 462.133273][ T5906] m920x_read = error: -19 [ 462.152691][ T8931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.346897][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 462.449617][ T8931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.500056][ T5877] r8152-cfgselector 1-1: Unknown version 0x0000 [ 462.507586][ T5877] r8152-cfgselector 1-1: bad CDC descriptors [ 462.525869][ T5877] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 462.605915][ T24] m920x_read = error: -19 [ 462.610357][ T24] dvb-usb: error -19 while querying for an remote control event. [ 462.626942][ T8968] syz.2.846 (8968): drop_caches: 2 [ 462.632681][ T8968] syz.2.846 (8968): drop_caches: 2 [ 462.686620][ T5906] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 462.755383][ T8972] binder: 8971:8972 ioctl 40046210 0 returned -14 [ 462.783039][ T5877] m920x_read = error: -19 [ 462.787446][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 462.888814][ T5906] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.929804][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 462.951437][ T5906] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 462.966540][ T5877] m920x_read = error: -19 [ 462.988341][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 463.004853][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.027497][ T5906] usb 5-1: config 0 descriptor?? [ 463.173453][ T24] m920x_read = error: -19 [ 463.177868][ T24] dvb-usb: error -19 while querying for an remote control event. [ 463.343125][ T24] m920x_read = error: -19 [ 463.347655][ T24] dvb-usb: error -19 while querying for an remote control event. [ 463.525369][ T24] m920x_read = error: -19 [ 463.548996][ T24] dvb-usb: error -19 while querying for an remote control event. [ 463.754243][ T5906] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 463.769035][ T5906] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 463.776534][ T5906] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 463.784126][ T5906] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 463.797779][ T5906] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 463.805342][ T5906] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 463.812681][ T5906] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 463.854623][ T5906] dragonrise 0003:0079:0011.0002: hidraw0: USB HID v10.00 Device [HID 0079:0011] on usb-dummy_hcd.4-1/input0 [ 463.996246][ T24] m920x_read = error: -19 [ 464.080863][ T24] dvb-usb: error -19 while querying for an remote control event. [ 464.468884][ T5906] m920x_read = error: -19 [ 464.474629][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 464.538641][ T24] usb 5-1: USB disconnect, device number 16 [ 464.643172][ T5877] m920x_read = error: -19 [ 464.648865][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 464.742314][ T9007] syz.0.857 (9007): drop_caches: 2 [ 464.765937][ T9007] syz.0.857 (9007): drop_caches: 2 [ 464.813042][ T5906] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 464.850280][ T24] m920x_read = error: -19 [ 464.857277][ T24] dvb-usb: error -19 while querying for an remote control event. [ 465.023209][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 465.047463][ T5906] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.082154][ T5906] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.105692][ T24] m920x_read = error: -19 [ 465.116930][ T24] dvb-usb: error -19 while querying for an remote control event. [ 465.126652][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 465.145657][ T5906] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 465.177537][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.219377][ T5906] usb 2-1: config 0 descriptor?? [ 465.313222][ T24] m920x_read = error: -19 [ 465.317710][ T24] dvb-usb: error -19 while querying for an remote control event. [ 466.116529][ T24] m920x_read = error: -19 [ 466.120951][ T24] dvb-usb: error -19 while querying for an remote control event. [ 466.283118][ T5906] usbhid 2-1:0.0: can't add hid device: -32 [ 466.290582][ T5906] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 466.382886][ T5906] usb 2-1: USB disconnect, device number 20 [ 466.493093][ T5877] m920x_read = error: -19 [ 466.497608][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 466.524649][ T9030] i2c i2c-0: Invalid block write size 35 [ 466.736091][ T5906] m920x_read = error: -19 [ 466.741132][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 467.349697][ T5877] m920x_read = error: -19 [ 467.354284][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 467.637566][ T9045] syz.1.868 (9045): drop_caches: 2 [ 467.645921][ T9045] syz.1.868 (9045): drop_caches: 2 [ 468.683248][ T5877] m920x_read = error: -19 [ 468.688411][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 468.763332][ T5906] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 468.883060][ T5881] m920x_read = error: -19 [ 468.887520][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 468.923196][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 468.930384][ T5906] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 468.939734][ T5906] usb 1-1: config 0 has no interface number 0 [ 468.961548][ T5906] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 468.988198][ T5906] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 469.018872][ T5906] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 469.034686][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.057090][ T5906] usb 1-1: Product: syz [ 469.070120][ T5906] usb 1-1: Manufacturer: syz [ 469.075112][ T5881] m920x_read = error: -19 [ 469.081935][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 469.094542][ T5906] usb 1-1: SerialNumber: syz [ 469.123481][ T5906] usb 1-1: config 0 descriptor?? [ 469.131270][ T9052] FAULT_INJECTION: forcing a failure. [ 469.131270][ T9052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.137103][ T9041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 469.169748][ T9041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 469.217104][ T9052] CPU: 0 UID: 0 PID: 9052 Comm: syz.1.870 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 469.217134][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.217147][ T9052] Call Trace: [ 469.217155][ T9052] [ 469.217163][ T9052] dump_stack_lvl+0x189/0x250 [ 469.217193][ T9052] ? __lock_acquire+0xaac/0xd20 [ 469.217222][ T9052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.217248][ T9052] ? __pfx__printk+0x10/0x10 [ 469.217278][ T9052] ? __might_fault+0xb0/0x130 [ 469.217321][ T9052] should_fail_ex+0x414/0x560 [ 469.217356][ T9052] _copy_from_user+0x2d/0xb0 [ 469.217383][ T9052] kstrtouint_from_user+0xc4/0x170 [ 469.217408][ T9052] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 469.217447][ T9052] proc_fail_nth_write+0x88/0x240 [ 469.217467][ T9052] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 469.217492][ T9052] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 469.217514][ T9052] vfs_write+0x27b/0xa90 [ 469.217549][ T9052] ? __pfx_vfs_write+0x10/0x10 [ 469.217577][ T9052] ? __fget_files+0x2a/0x420 [ 469.217609][ T9052] ? __fget_files+0x3a0/0x420 [ 469.217637][ T9052] ? __fget_files+0x2a/0x420 [ 469.217673][ T9052] ksys_write+0x145/0x250 [ 469.217697][ T9052] ? rcu_is_watching+0x15/0xb0 [ 469.217724][ T9052] ? __pfx_ksys_write+0x10/0x10 [ 469.217745][ T9052] ? do_syscall_64+0xba/0x210 [ 469.217765][ T9052] do_syscall_64+0xf6/0x210 [ 469.217782][ T9052] ? clear_bhb_loop+0x45/0xa0 [ 469.217805][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.217819][ T9052] RIP: 0033:0x7ff32b78d41f [ 469.217832][ T9052] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 469.217844][ T9052] RSP: 002b:00007ff32c640030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 469.217858][ T9052] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff32b78d41f [ 469.217868][ T9052] RDX: 0000000000000001 RSI: 00007ff32c6400a0 RDI: 0000000000000005 [ 469.217877][ T9052] RBP: 00007ff32c640090 R08: 0000000000000000 R09: 0000000000000000 [ 469.217885][ T9052] R10: 0000000000000097 R11: 0000000000000293 R12: 0000000000000001 [ 469.217893][ T9052] R13: 0000000000000000 R14: 00007ff32b9b5fa0 R15: 00007ffeda134388 [ 469.217915][ T9052] [ 469.228155][ T5906] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 469.459210][ T5881] m920x_read = error: -19 [ 469.466437][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 469.690422][ T9059] FAULT_INJECTION: forcing a failure. [ 469.690422][ T9059] name failslab, interval 1, probability 0, space 0, times 0 [ 469.707239][ T5881] m920x_read = error: -19 [ 469.711638][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 469.719690][ T9059] CPU: 0 UID: 0 PID: 9059 Comm: syz.2.873 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 469.719718][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.719730][ T9059] Call Trace: [ 469.719737][ T9059] [ 469.719745][ T9059] dump_stack_lvl+0x189/0x250 [ 469.719781][ T9059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.719801][ T9059] ? __pfx__printk+0x10/0x10 [ 469.719821][ T9059] ? __local_bh_enable_ip+0x12d/0x1c0 [ 469.719849][ T9059] ? sctp_get_port_local+0xe4c/0x1610 [ 469.719874][ T9059] should_fail_ex+0x414/0x560 [ 469.719900][ T9059] should_failslab+0xa8/0x100 [ 469.719934][ T9059] __kmalloc_cache_noprof+0x70/0x3d0 [ 469.719953][ T9059] ? sctp_add_bind_addr+0x8c/0x370 [ 469.719971][ T9059] sctp_add_bind_addr+0x8c/0x370 [ 469.719986][ T9059] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 469.720008][ T9059] sctp_do_bind+0x5ab/0x940 [ 469.720036][ T9059] sctp_connect_new_asoc+0x25c/0x690 [ 469.720058][ T9059] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 469.720076][ T9059] ? __local_bh_enable_ip+0x12d/0x1c0 [ 469.720099][ T9059] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 469.720114][ T9059] ? security_sctp_bind_connect+0x7e/0x2e0 [ 469.720131][ T9059] sctp_sendmsg+0x155c/0x2810 [ 469.720157][ T9059] ? __pfx_sctp_sendmsg+0x10/0x10 [ 469.720177][ T9059] ? __lock_acquire+0xaac/0xd20 [ 469.720204][ T9059] ? sock_rps_record_flow+0x19/0x400 [ 469.720224][ T9059] ? inet_sendmsg+0x2f4/0x370 [ 469.720244][ T9059] __sock_sendmsg+0x19c/0x270 [ 469.720266][ T9059] __sys_sendto+0x3bd/0x520 [ 469.720282][ T9059] ? __pfx___sys_sendto+0x10/0x10 [ 469.720295][ T9059] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 469.720319][ T9059] ? __fget_files+0x3a0/0x420 [ 469.720346][ T9059] ? ksys_write+0x1f0/0x250 [ 469.720362][ T9059] ? rcu_is_watching+0x15/0xb0 [ 469.720386][ T9059] __x64_sys_sendto+0xde/0x100 [ 469.720403][ T9059] do_syscall_64+0xf6/0x210 [ 469.720419][ T9059] ? clear_bhb_loop+0x45/0xa0 [ 469.720435][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.720448][ T9059] RIP: 0033:0x7f8eb858e969 [ 469.720459][ T9059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.720471][ T9059] RSP: 002b:00007f8eb9383038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 469.720484][ T9059] RAX: ffffffffffffffda RBX: 00007f8eb87b5fa0 RCX: 00007f8eb858e969 [ 469.720505][ T9059] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 469.720513][ T9059] RBP: 00007f8eb9383090 R08: 0000200000000080 R09: 000000000000001c [ 469.720521][ T9059] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000001 [ 469.720528][ T9059] R13: 0000000000000000 R14: 00007f8eb87b5fa0 R15: 00007fffa97fca28 [ 469.720547][ T9059] [ 470.173425][ T5881] m920x_read = error: -19 [ 470.179153][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 470.207398][ T5906] usb 1-1: USB disconnect, device number 11 [ 470.473013][ T59] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 471.149570][ T59] usb 3-1: config 0 has no interfaces? [ 471.155356][ T59] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 471.234756][ T5877] m920x_read = error: -19 [ 471.239592][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 471.262054][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.452443][ T5906] m920x_read = error: -19 [ 471.457395][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 471.633861][ T5906] m920x_read = error: -19 [ 471.884026][ T59] usb 3-1: config 0 descriptor?? [ 471.886296][ T9070] syz.4.879 (9070): drop_caches: 2 [ 471.972148][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 471.978997][ T9070] syz.4.879 (9070): drop_caches: 2 [ 472.098946][ T5878] usb 3-1: USB disconnect, device number 27 [ 472.238281][ T5877] m920x_read = error: -19 [ 472.242943][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 472.251949][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'. [ 472.493265][ T5877] m920x_read = error: -19 [ 472.497738][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 472.673101][ T5906] m920x_read = error: -19 [ 473.251954][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 473.296096][ T9094] i2c i2c-0: Invalid block write size 35 [ 473.427368][ T5877] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 474.333711][ T9098] FAULT_INJECTION: forcing a failure. [ 474.333711][ T9098] name failslab, interval 1, probability 0, space 0, times 0 [ 474.394010][ T9098] CPU: 0 UID: 0 PID: 9098 Comm: syz.2.885 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 474.394039][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.394053][ T9098] Call Trace: [ 474.394060][ T9098] [ 474.394069][ T9098] dump_stack_lvl+0x189/0x250 [ 474.394105][ T9098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.394131][ T9098] ? __pfx__printk+0x10/0x10 [ 474.394168][ T9098] ? __pfx___might_resched+0x10/0x10 [ 474.394202][ T9098] should_fail_ex+0x414/0x560 [ 474.394238][ T9098] ? alloc_fdtable+0xe4/0x2a0 [ 474.394264][ T9098] should_failslab+0xa8/0x100 [ 474.394296][ T9098] __kvmalloc_node_noprof+0x168/0x5e0 [ 474.394326][ T9098] ? alloc_fdtable+0xe4/0x2a0 [ 474.394351][ T9098] ? alloc_fdtable+0xa7/0x2a0 [ 474.394382][ T9098] alloc_fdtable+0xe4/0x2a0 [ 474.394407][ T9098] ? dup_fd+0x864/0xb60 [ 474.394435][ T9098] dup_fd+0x86c/0xb60 [ 474.394475][ T9098] __se_sys_close_range+0x1a4/0x650 [ 474.394505][ T9098] ? ksys_write+0x1f0/0x250 [ 474.394534][ T9098] ? __pfx___se_sys_close_range+0x10/0x10 [ 474.394568][ T9098] ? do_syscall_64+0xba/0x210 [ 474.394600][ T9098] do_syscall_64+0xf6/0x210 [ 474.394623][ T9098] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 474.394643][ T9098] ? clear_bhb_loop+0x45/0xa0 [ 474.394674][ T9098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.394693][ T9098] RIP: 0033:0x7f8eb858e969 [ 474.394710][ T9098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.394727][ T9098] RSP: 002b:00007f8eb9383038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 474.394748][ T9098] RAX: ffffffffffffffda RBX: 00007f8eb87b5fa0 RCX: 00007f8eb858e969 [ 474.394762][ T9098] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000003 [ 474.394774][ T9098] RBP: 00007f8eb9383090 R08: 0000000000000000 R09: 0000000000000000 [ 474.394785][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.394797][ T9098] R13: 0000000000000000 R14: 00007f8eb87b5fa0 R15: 00007fffa97fca28 [ 474.394827][ T9098] [ 474.859716][ T5906] m920x_read = error: -19 [ 475.375093][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 475.419024][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 475.428704][ T5877] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 475.440644][ T5877] usb 1-1: config 0 has no interface number 0 [ 475.593159][ T5906] m920x_read = error: -19 [ 475.597791][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 475.695039][ T5877] usb 1-1: string descriptor 0 read error: -71 [ 475.863293][ T9105] netlink: 'syz.2.888': attribute type 1 has an invalid length. [ 475.871450][ T24] m920x_read = error: -19 [ 475.893705][ T24] dvb-usb: error -19 while querying for an remote control event. [ 475.902113][ T5877] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 475.915537][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.938497][ T5877] usb 1-1: config 0 descriptor?? [ 476.076065][ T24] m920x_read = error: -19 [ 476.096099][ T24] dvb-usb: error -19 while querying for an remote control event. [ 476.113642][ T5877] usb 1-1: can't set config #0, error -71 [ 476.134990][ T5877] usb 1-1: USB disconnect, device number 12 [ 476.609551][ T24] m920x_read = error: -19 [ 476.996079][ T24] dvb-usb: error -19 while querying for an remote control event. [ 477.173096][ T24] m920x_read = error: -19 [ 477.179869][ T24] dvb-usb: error -19 while querying for an remote control event. [ 477.503045][ T24] m920x_read = error: -19 [ 477.507455][ T24] dvb-usb: error -19 while querying for an remote control event. [ 477.601416][ T9118] syz.4.892 (9118): drop_caches: 2 [ 477.609560][ T9118] syz.4.892 (9118): drop_caches: 2 [ 477.806470][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 477.894730][ T24] m920x_read = error: -19 [ 477.915130][ T24] dvb-usb: error -19 while querying for an remote control event. [ 478.093712][ T24] m920x_read = error: -19 [ 478.098189][ T24] dvb-usb: error -19 while querying for an remote control event. [ 478.283194][ T24] m920x_read = error: -19 [ 478.287620][ T24] dvb-usb: error -19 while querying for an remote control event. [ 478.483199][ T24] m920x_read = error: -19 [ 478.491976][ T24] dvb-usb: error -19 while querying for an remote control event. [ 478.643336][ T5836] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 478.674772][ T24] m920x_read = error: -19 [ 478.692285][ T24] dvb-usb: error -19 while querying for an remote control event. [ 478.833039][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 478.845886][ T5836] usb 5-1: unable to get BOS descriptor or descriptor too short [ 478.860176][ T5836] usb 5-1: config 83 has an invalid interface number: 177 but max is 0 [ 478.868744][ T5836] usb 5-1: config 83 has no interface number 0 [ 478.888950][ T5836] usb 5-1: config 83 interface 177 has no altsetting 0 [ 478.912664][ T5836] usb 5-1: New USB device found, idVendor=0c52, idProduct=2881, bcdDevice=9f.e8 [ 478.925833][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.071658][ T24] m920x_read = error: -19 [ 479.079549][ T24] dvb-usb: error -19 while querying for an remote control event. [ 479.279650][ T24] m920x_read = error: -19 [ 479.311946][ T24] dvb-usb: error -19 while querying for an remote control event. [ 479.545885][ T24] m920x_read = error: -19 [ 479.582925][ T24] dvb-usb: error -19 while querying for an remote control event. [ 479.735928][ T5836] usb 5-1: Product: syz [ 479.753130][ T5836] usb 5-1: Manufacturer: syz [ 479.757784][ T5836] usb 5-1: SerialNumber: syz [ 479.811762][ T24] m920x_read = error: -19 [ 479.839173][ T24] dvb-usb: error -19 while querying for an remote control event. [ 480.033295][ T24] m920x_read = error: -19 [ 480.051068][ T24] dvb-usb: error -19 while querying for an remote control event. [ 480.304422][ T24] m920x_read = error: -19 [ 480.358805][ T24] dvb-usb: error -19 while querying for an remote control event. [ 480.563252][ T5836] hub 5-1:83.177: bad descriptor, ignoring hub [ 480.569492][ T5836] hub 5-1:83.177: probe with driver hub failed with error -5 [ 480.613507][ T24] m920x_read = error: -19 [ 480.645938][ T24] dvb-usb: error -19 while querying for an remote control event. [ 480.813945][ T5836] ftdi_sio 5-1:83.177: FTDI USB Serial Device converter detected [ 480.822818][ T5836] ftdi_sio ttyUSB0: unknown device type: 0x9fe8 [ 480.893245][ T24] m920x_read = error: -19 [ 480.903733][ T5836] usb 5-1: USB disconnect, device number 17 [ 480.912628][ T5836] ftdi_sio 5-1:83.177: device disconnected [ 480.945173][ T24] dvb-usb: error -19 while querying for an remote control event. [ 481.183195][ T5906] m920x_read = error: -19 [ 481.187700][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 481.433129][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 481.545115][ T24] m920x_read = error: -19 [ 481.549536][ T24] dvb-usb: error -19 while querying for an remote control event. [ 481.773118][ T24] m920x_read = error: -19 [ 481.777528][ T24] dvb-usb: error -19 while querying for an remote control event. [ 482.196606][ T9158] trusted_key: encrypted_key: insufficient parameters specified [ 482.319068][ T9158] 8021q: VLANs not supported on wg2 [ 482.398795][ T24] m920x_read = error: -19 [ 482.796451][ T24] dvb-usb: error -19 while querying for an remote control event. [ 482.835651][ T9163] syz.0.905 (9163): drop_caches: 2 [ 482.841277][ T9163] syz.0.905 (9163): drop_caches: 2 [ 482.896763][ T30] audit: type=1326 audit(1746896579.587:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9164 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869438e969 code=0x7ffc0000 [ 482.983090][ T24] m920x_read = error: -19 [ 482.987578][ T24] dvb-usb: error -19 while querying for an remote control event. [ 482.997880][ T30] audit: type=1326 audit(1746896579.597:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9164 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f869438e969 code=0x7ffc0000 [ 483.091940][ T30] audit: type=1326 audit(1746896579.597:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9164 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869438e969 code=0x7ffc0000 [ 483.158250][ T30] audit: type=1326 audit(1746896579.627:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9164 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f869438e969 code=0x7ffc0000 [ 483.158313][ T24] m920x_read = error: -19 [ 483.261202][ T30] audit: type=1326 audit(1746896579.627:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9164 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869438e969 code=0x7ffc0000 [ 483.337350][ T30] audit: type=1326 audit(1746896579.637:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9164 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869438e969 code=0x7ffc0000 [ 483.358725][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.449791][ T24] dvb-usb: error -19 while querying for an remote control event. [ 483.457744][ T30] audit: type=1326 audit(1746896579.637:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9164 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f869438d2d0 code=0x7ffc0000 [ 483.636915][ T5906] m920x_read = error: -19 [ 483.641781][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 483.767501][ T30] audit: type=1326 audit(1746896579.637:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9164 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869438e969 code=0x7ffc0000 [ 483.920188][ T5906] m920x_read = error: -19 [ 484.018261][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 484.138323][ T30] audit: type=1326 audit(1746896579.637:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9164 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f869438d2d0 code=0x7ffc0000 [ 484.162593][ T30] audit: type=1326 audit(1746896579.637:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9164 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8694390197 code=0x7ffc0000 [ 484.503935][ T5906] m920x_read = error: -19 [ 484.508349][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 485.280540][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 485.401067][ T5906] m920x_read = error: -19 [ 485.409380][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 485.463929][ T9197] syz.0.919 (9197): drop_caches: 2 [ 485.469595][ T9197] syz.0.919 (9197): drop_caches: 2 [ 486.017841][ T24] m920x_read = error: -19 [ 486.022233][ T24] dvb-usb: error -19 while querying for an remote control event. [ 487.553050][ T5877] m920x_read = error: -19 [ 487.557526][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 489.442336][ T59] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 489.514234][ T24] m920x_read = error: -19 [ 489.521252][ T24] dvb-usb: error -19 while querying for an remote control event. [ 489.549803][ T9210] syz.4.922 (9210) used greatest stack depth: 20264 bytes left [ 489.648265][ T9213] netlink: 'syz.4.924': attribute type 4 has an invalid length. [ 489.842985][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 489.855548][ T59] usb 1-1: device descriptor read/all, error -71 [ 489.856813][ T24] m920x_read = error: -19 [ 489.867198][ T24] dvb-usb: error -19 while querying for an remote control event. [ 490.030705][ T9223] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 490.051336][ T9223] batman_adv: batadv0: Adding interface: gretap1 [ 490.057821][ T9223] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.083291][ T9223] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 490.159414][ T24] m920x_read = error: -19 [ 490.178154][ T9224] FAULT_INJECTION: forcing a failure. [ 490.178154][ T9224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.191371][ T9224] CPU: 1 UID: 0 PID: 9224 Comm: syz.0.927 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 490.191396][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.191408][ T9224] Call Trace: [ 490.191415][ T9224] [ 490.191423][ T9224] dump_stack_lvl+0x189/0x250 [ 490.191451][ T9224] ? __lock_acquire+0xaac/0xd20 [ 490.191483][ T9224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.191508][ T9224] ? __pfx__printk+0x10/0x10 [ 490.191536][ T9224] ? __might_fault+0xb0/0x130 [ 490.191573][ T9224] should_fail_ex+0x414/0x560 [ 490.191607][ T9224] _copy_from_user+0x2d/0xb0 [ 490.191632][ T9224] ___sys_recvmsg+0x12e/0x510 [ 490.191653][ T9224] ? rcu_is_watching+0x15/0xb0 [ 490.191684][ T9224] ? __pfx____sys_recvmsg+0x10/0x10 [ 490.191738][ T9224] ? __might_fault+0xb0/0x130 [ 490.191768][ T9224] do_recvmmsg+0x307/0x760 [ 490.191800][ T9224] ? __pfx_do_recvmmsg+0x10/0x10 [ 490.191854][ T9224] __x64_sys_recvmmsg+0x190/0x240 [ 490.191881][ T9224] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 490.191910][ T9224] ? do_syscall_64+0xba/0x210 [ 490.191935][ T9224] do_syscall_64+0xf6/0x210 [ 490.191956][ T9224] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 490.191974][ T9224] ? clear_bhb_loop+0x45/0xa0 [ 490.191996][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.192014][ T9224] RIP: 0033:0x7f1eab78e969 [ 490.192029][ T9224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.192045][ T9224] RSP: 002b:00007f1eac62e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 490.192064][ T9224] RAX: ffffffffffffffda RBX: 00007f1eab9b6080 RCX: 00007f1eab78e969 [ 490.192077][ T9224] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000006 [ 490.192089][ T9224] RBP: 00007f1eac62e090 R08: 0000000000000000 R09: 0000000000000000 [ 490.192120][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.192131][ T9224] R13: 0000000000000000 R14: 00007f1eab9b6080 R15: 00007ffc951b0fd8 [ 490.192159][ T9224] [ 490.402451][ T24] dvb-usb: error -19 while querying for an remote control event. [ 490.778574][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 490.904561][ T24] m920x_read = error: -19 [ 490.908968][ T24] dvb-usb: error -19 while querying for an remote control event. [ 491.789183][ T24] m920x_read = error: -19 [ 491.793663][ T24] dvb-usb: error -19 while querying for an remote control event. [ 491.953193][ T5906] m920x_read = error: -19 [ 491.957612][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 492.213450][ T5877] m920x_read = error: -19 [ 492.553457][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 492.713102][ T5877] m920x_read = error: -19 [ 492.717638][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 492.743748][ T9256] random: crng reseeded on system resumption [ 494.903082][ T5877] m920x_read = error: -19 [ 494.907491][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 495.047451][ T59] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 495.273077][ T5877] m920x_read = error: -19 [ 495.277475][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 495.293242][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 495.317235][ T59] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 495.341263][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.380056][ T59] usb 2-1: Product: syz [ 495.388387][ T59] usb 2-1: Manufacturer: syz [ 495.398678][ T59] usb 2-1: SerialNumber: syz [ 495.420462][ T59] r8152-cfgselector 2-1: Unknown version 0x0000 [ 495.432985][ T59] r8152-cfgselector 2-1: config 0 descriptor?? [ 495.443392][ T5877] m920x_read = error: -19 [ 495.447783][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 495.705354][ T5877] m920x_read = error: -19 [ 495.710360][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 495.843236][ T9269] FAULT_INJECTION: forcing a failure. [ 495.843236][ T9269] name failslab, interval 1, probability 0, space 0, times 0 [ 495.855994][ T9269] CPU: 1 UID: 0 PID: 9269 Comm: syz.2.940 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 495.856020][ T9269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.856032][ T9269] Call Trace: [ 495.856040][ T9269] [ 495.856048][ T9269] dump_stack_lvl+0x189/0x250 [ 495.856080][ T9269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.856105][ T9269] ? __pfx__printk+0x10/0x10 [ 495.856135][ T9269] ? fs_reclaim_acquire+0x7d/0x100 [ 495.856167][ T9269] should_fail_ex+0x414/0x560 [ 495.856201][ T9269] should_failslab+0xa8/0x100 [ 495.856231][ T9269] __kmalloc_noprof+0xcb/0x4f0 [ 495.856255][ T9269] ? kfree+0x4d/0x440 [ 495.856277][ T9269] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 495.856307][ T9269] tomoyo_realpath_from_path+0xe3/0x5d0 [ 495.856333][ T9269] ? tomoyo_domain+0xda/0x130 [ 495.856362][ T9269] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 495.856381][ T9269] tomoyo_path_number_perm+0x1e8/0x5a0 [ 495.856403][ T9269] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 495.856440][ T9269] ? __fget_files+0x2a/0x420 [ 495.856489][ T9269] ? __rcu_read_unlock+0x84/0xe0 [ 495.856512][ T9269] ? __fget_files+0x3a0/0x420 [ 495.856538][ T9269] ? __fget_files+0x2a/0x420 [ 495.856569][ T9269] security_file_ioctl+0xcb/0x2d0 [ 495.856592][ T9269] __se_sys_ioctl+0x47/0x170 [ 495.856617][ T9269] do_syscall_64+0xf6/0x210 [ 495.856640][ T9269] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 495.856658][ T9269] ? clear_bhb_loop+0x45/0xa0 [ 495.856680][ T9269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.856698][ T9269] RIP: 0033:0x7f8eb858e969 [ 495.856714][ T9269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.856731][ T9269] RSP: 002b:00007f8eb9341038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.856750][ T9269] RAX: ffffffffffffffda RBX: 00007f8eb87b6160 RCX: 00007f8eb858e969 [ 495.856763][ T9269] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000003 [ 495.856775][ T9269] RBP: 00007f8eb9341090 R08: 0000000000000000 R09: 0000000000000000 [ 495.856787][ T9269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.856797][ T9269] R13: 0000000000000000 R14: 00007f8eb87b6160 R15: 00007fffa97fca28 [ 495.856827][ T9269] [ 495.856860][ T9269] ERROR: Out of memory at tomoyo_realpath_from_path. [ 496.114475][ T5877] m920x_read = error: -19 [ 496.114621][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 496.243993][ T59] r8152-cfgselector 2-1: Unknown version 0x0000 [ 496.272745][ T59] r8152-cfgselector 2-1: bad CDC descriptors [ 496.273679][ T5877] m920x_read = error: -19 [ 496.295409][ T59] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 496.312437][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 496.470153][ T9274] FAULT_INJECTION: forcing a failure. [ 496.470153][ T9274] name failslab, interval 1, probability 0, space 0, times 0 [ 496.533095][ T9274] CPU: 1 UID: 0 PID: 9274 Comm: syz.0.942 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 496.533126][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.533138][ T9274] Call Trace: [ 496.533147][ T9274] [ 496.533156][ T9274] dump_stack_lvl+0x189/0x250 [ 496.533192][ T9274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.533218][ T9274] ? __pfx__printk+0x10/0x10 [ 496.533252][ T9274] ? __pfx___might_resched+0x10/0x10 [ 496.533301][ T9274] ? fs_reclaim_acquire+0x7d/0x100 [ 496.533326][ T9274] should_fail_ex+0x414/0x560 [ 496.533362][ T9274] should_failslab+0xa8/0x100 [ 496.533394][ T9274] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 496.533435][ T9274] ? __alloc_skb+0x112/0x2d0 [ 496.533459][ T9274] __alloc_skb+0x112/0x2d0 [ 496.533502][ T9274] alloc_skb_with_frags+0xca/0x890 [ 496.533525][ T9274] ? smk_access+0x14c/0x4e0 [ 496.533575][ T9274] sock_alloc_send_pskb+0x857/0x990 [ 496.533619][ T9274] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 496.533650][ T9274] ? dev_get_by_index+0x22/0x2e0 [ 496.533676][ T9274] ? dev_get_by_index+0x22/0x2e0 [ 496.533708][ T9274] raw_sendmsg+0x261/0x1210 [ 496.533731][ T9274] ? is_bpf_text_address+0x26/0x2b0 [ 496.533760][ T9274] ? __pfx_raw_sendmsg+0x10/0x10 [ 496.533791][ T9274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.533818][ T9274] ? __pfx_raw_sendmsg+0x10/0x10 [ 496.533838][ T9274] __sock_sendmsg+0x219/0x270 [ 496.533869][ T9274] ____sys_sendmsg+0x505/0x830 [ 496.533898][ T9274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.533948][ T9274] ? import_iovec+0x74/0xa0 [ 496.533978][ T9274] ___sys_sendmsg+0x21f/0x2a0 [ 496.534005][ T9274] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.534066][ T9274] ? __fget_files+0x2a/0x420 [ 496.534095][ T9274] ? __fget_files+0x3a0/0x420 [ 496.534134][ T9274] __x64_sys_sendmsg+0x19b/0x260 [ 496.534162][ T9274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.534204][ T9274] ? do_syscall_64+0xba/0x210 [ 496.534231][ T9274] do_syscall_64+0xf6/0x210 [ 496.534255][ T9274] ? clear_bhb_loop+0x45/0xa0 [ 496.534279][ T9274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.534297][ T9274] RIP: 0033:0x7f1eab78e969 [ 496.534314][ T9274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.534331][ T9274] RSP: 002b:00007f1eac64f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.534351][ T9274] RAX: ffffffffffffffda RBX: 00007f1eab9b5fa0 RCX: 00007f1eab78e969 [ 496.534366][ T9274] RDX: 0000000004080811 RSI: 0000200000000140 RDI: 0000000000000003 [ 496.534379][ T9274] RBP: 00007f1eac64f090 R08: 0000000000000000 R09: 0000000000000000 [ 496.534390][ T9274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.534402][ T9274] R13: 0000000000000000 R14: 00007f1eab9b5fa0 R15: 00007ffc951b0fd8 [ 496.534433][ T9274] [ 496.818737][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.865147][ T5877] m920x_read = error: -19 [ 496.869581][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 497.136973][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 497.776137][ T24] m920x_read = error: -19 [ 497.780575][ T24] dvb-usb: error -19 while querying for an remote control event. [ 498.001262][ T5877] m920x_read = error: -19 [ 498.005777][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 498.171920][ T9296] FAULT_INJECTION: forcing a failure. [ 498.171920][ T9296] name failslab, interval 1, probability 0, space 0, times 0 [ 498.195230][ T5877] m920x_read = error: -19 [ 498.242593][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 498.306155][ T9296] CPU: 1 UID: 0 PID: 9296 Comm: syz.4.948 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 498.306184][ T9296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.306196][ T9296] Call Trace: [ 498.306204][ T9296] [ 498.306212][ T9296] dump_stack_lvl+0x189/0x250 [ 498.306244][ T9296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.306269][ T9296] ? __pfx__printk+0x10/0x10 [ 498.306303][ T9296] ? __pfx___might_resched+0x10/0x10 [ 498.306329][ T9296] ? fs_reclaim_acquire+0x7d/0x100 [ 498.306353][ T9296] should_fail_ex+0x414/0x560 [ 498.306386][ T9296] should_failslab+0xa8/0x100 [ 498.306416][ T9296] __kmalloc_cache_noprof+0x70/0x3d0 [ 498.306443][ T9296] ? do_mq_timedreceive+0x39c/0xab0 [ 498.306468][ T9296] do_mq_timedreceive+0x39c/0xab0 [ 498.306490][ T9296] ? ksys_write+0x1cb/0x250 [ 498.306520][ T9296] ? __pfx_do_mq_timedreceive+0x10/0x10 [ 498.306544][ T9296] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.306571][ T9296] ? __fget_files+0x3a0/0x420 [ 498.306609][ T9296] __x64_sys_mq_timedreceive+0x172/0x210 [ 498.306632][ T9296] ? __pfx___x64_sys_mq_timedreceive+0x10/0x10 [ 498.306655][ T9296] ? do_syscall_64+0xba/0x210 [ 498.306689][ T9296] do_syscall_64+0xf6/0x210 [ 498.306710][ T9296] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 498.306728][ T9296] ? clear_bhb_loop+0x45/0xa0 [ 498.306750][ T9296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.306768][ T9296] RIP: 0033:0x7f869438e969 [ 498.306784][ T9296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.306800][ T9296] RSP: 002b:00007f86951eb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 498.306819][ T9296] RAX: ffffffffffffffda RBX: 00007f86945b6080 RCX: 00007f869438e969 [ 498.306833][ T9296] RDX: 0000000000001000 RSI: 0000200000000140 RDI: 0000000000000003 [ 498.306844][ T9296] RBP: 00007f86951eb090 R08: 0000000000000000 R09: 0000000000000000 [ 498.306856][ T9296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.306867][ T9296] R13: 0000000000000000 R14: 00007f86945b6080 R15: 00007ffdcd77a948 [ 498.306894][ T9296] [ 498.524094][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.803724][ T5877] m920x_read = error: -19 [ 498.808173][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 498.973421][ T47] m920x_read = error: -19 [ 499.008533][ T47] dvb-usb: error -19 while querying for an remote control event. [ 499.177935][ T9300] FAULT_INJECTION: forcing a failure. [ 499.177935][ T9300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.191114][ T9300] CPU: 0 UID: 0 PID: 9300 Comm: syz.2.949 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 499.191139][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.191150][ T9300] Call Trace: [ 499.191157][ T9300] [ 499.191164][ T9300] dump_stack_lvl+0x189/0x250 [ 499.191191][ T9300] ? __lock_acquire+0xaac/0xd20 [ 499.191216][ T9300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.191238][ T9300] ? __pfx__printk+0x10/0x10 [ 499.191265][ T9300] ? __might_fault+0xb0/0x130 [ 499.191300][ T9300] should_fail_ex+0x414/0x560 [ 499.191332][ T9300] _copy_from_user+0x2d/0xb0 [ 499.191355][ T9300] video_usercopy+0x354/0x14f0 [ 499.191383][ T9300] ? smk_tskacc+0x2fc/0x370 [ 499.191408][ T9300] ? __pfx___video_do_ioctl+0x10/0x10 [ 499.191431][ T9300] ? __pfx_video_usercopy+0x10/0x10 [ 499.191451][ T9300] ? smack_file_ioctl+0x24a/0x340 [ 499.191490][ T9300] ? security_file_ioctl+0x26e/0x2d0 [ 499.191512][ T9300] v4l2_ioctl+0x18a/0x1e0 [ 499.191551][ T9300] ? __pfx_v4l2_ioctl+0x10/0x10 [ 499.191580][ T9300] __se_sys_ioctl+0xf9/0x170 [ 499.191606][ T9300] do_syscall_64+0xf6/0x210 [ 499.191629][ T9300] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 499.191647][ T9300] ? clear_bhb_loop+0x45/0xa0 [ 499.191668][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.191686][ T9300] RIP: 0033:0x7f8eb858e969 [ 499.191702][ T9300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.191718][ T9300] RSP: 002b:00007f8eb9362038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.191736][ T9300] RAX: ffffffffffffffda RBX: 00007f8eb87b6080 RCX: 00007f8eb858e969 [ 499.191749][ T9300] RDX: 0000200000000080 RSI: 0000000040045612 RDI: 0000000000000008 [ 499.191761][ T9300] RBP: 00007f8eb9362090 R08: 0000000000000000 R09: 0000000000000000 [ 499.191772][ T9300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.191782][ T9300] R13: 0000000000000000 R14: 00007f8eb87b6080 R15: 00007fffa97fca28 [ 499.191809][ T9300] [ 499.223124][ T5906] m920x_read = error: -19 [ 499.231750][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.263126][ T5877] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 499.363051][ T5836] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 499.470462][ T9307] batadv_slave_0: entered promiscuous mode [ 499.552044][ T9307] batadv_slave_0: entered allmulticast mode [ 499.627996][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.953'. [ 499.738052][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 499.893187][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 499.904124][ T5836] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 499.971823][ T5906] m920x_read = error: -19 [ 499.977013][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 499.993214][ T59] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 500.001304][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.012603][ T5877] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 500.021809][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.030796][ T5836] usb 5-1: Product: syz [ 500.036696][ T5877] usb 1-1: config 0 descriptor?? [ 500.039194][ T5836] usb 5-1: Manufacturer: syz [ 500.047177][ T5836] usb 5-1: SerialNumber: syz [ 500.082294][ T5836] r8152-cfgselector 5-1: Unknown version 0x0000 [ 500.115683][ T5836] r8152-cfgselector 5-1: config 0 descriptor?? [ 500.145855][ T5906] m920x_read = error: -19 [ 500.150324][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 500.163455][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 500.176796][ T59] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 500.200429][ T59] usb 2-1: config 0 has no interface number 0 [ 500.231566][ T59] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.288717][ T59] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 500.369768][ T5877] cp210x 1-1:0.0: cp210x converter detected [ 500.522195][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.530576][ T59] usb 2-1: Product: syz [ 500.533315][ T5906] m920x_read = error: -19 [ 500.534897][ T59] usb 2-1: Manufacturer: syz [ 500.539169][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 500.544014][ T59] usb 2-1: SerialNumber: syz [ 500.561046][ T59] usb 2-1: config 0 descriptor?? [ 500.614249][ T9305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.633124][ T59] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 500.669944][ T9305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.739847][ T5836] r8152-cfgselector 5-1: Unknown version 0x0000 [ 500.753527][ T5836] r8152-cfgselector 5-1: bad CDC descriptors [ 500.782121][ T59] usb 2-1: USB disconnect, device number 22 [ 500.788896][ T53] usb 2-1: Failed to submit usb control message: -71 [ 500.833313][ T5836] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 500.843197][ T53] usb 2-1: unable to send the bmi data to the device: -71 [ 500.850349][ T53] usb 2-1: unable to get target info from device [ 500.853030][ T5906] m920x_read = error: -19 [ 500.861079][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 501.070185][ T53] usb 2-1: could not get target info (-71) [ 501.076376][ T53] usb 2-1: could not probe fw (-71) [ 501.110604][ T5906] m920x_read = error: -19 [ 501.119605][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 501.406679][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.418553][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.036185][ T5906] m920x_read = error: -19 [ 502.040643][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 502.244397][ T5906] m920x_read = error: -19 [ 502.249433][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 502.877799][ T5906] m920x_read = error: -19 [ 502.882223][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 503.066906][ T5906] m920x_read = error: -19 [ 503.104080][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 503.181200][ T5877] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 503.208073][ T5877] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 503.239740][ T5877] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 503.293213][ T5906] m920x_read = error: -19 [ 503.297706][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 503.318188][ T5877] usb 1-1: cp210x converter now attached to ttyUSB0 [ 503.374992][ T5877] usb 1-1: USB disconnect, device number 15 [ 503.412170][ T5877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 503.434645][ T5877] cp210x 1-1:0.0: device disconnected [ 503.482306][ T9347] syz.2.962 (9347): drop_caches: 2 [ 503.509911][ T9347] syz.2.962 (9347): drop_caches: 2 [ 503.516752][ T5906] m920x_read = error: -19 [ 503.521233][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 503.753744][ T5906] m920x_read = error: -19 [ 503.758160][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 504.107298][ T5906] m920x_read = error: -19 [ 504.120410][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 505.208925][ T5906] m920x_read = error: -19 [ 505.223370][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 505.523036][ T5906] m920x_read = error: -19 [ 505.525469][ T9375] FAULT_INJECTION: forcing a failure. [ 505.525469][ T9375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.527450][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 505.574010][ T9375] CPU: 1 UID: 0 PID: 9375 Comm: syz.2.969 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 505.574039][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.574050][ T9375] Call Trace: [ 505.574058][ T9375] [ 505.574066][ T9375] dump_stack_lvl+0x189/0x250 [ 505.574094][ T9375] ? __lock_acquire+0xaac/0xd20 [ 505.574122][ T9375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.574146][ T9375] ? __pfx__printk+0x10/0x10 [ 505.574174][ T9375] ? __might_fault+0xb0/0x130 [ 505.574212][ T9375] should_fail_ex+0x414/0x560 [ 505.574245][ T9375] _copy_from_user+0x2d/0xb0 [ 505.574269][ T9375] restore_altstack+0x9d/0x4b0 [ 505.574290][ T9375] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 505.574312][ T9375] ? __pfx_restore_altstack+0x10/0x10 [ 505.574337][ T9375] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.574362][ T9375] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.574384][ T9375] __ia32_sys_rt_sigreturn+0x1ac/0x7b0 [ 505.574419][ T9375] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 505.574454][ T9375] ? __lock_acquire+0xaac/0xd20 [ 505.574502][ T9375] ? do_syscall_64+0xba/0x210 [ 505.574527][ T9375] do_syscall_64+0xf6/0x210 [ 505.574550][ T9375] ? clear_bhb_loop+0x45/0xa0 [ 505.574572][ T9375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.574589][ T9375] RIP: 0033:0x7f8eb852ab39 [ 505.574605][ T9375] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 505.574620][ T9375] RSP: 002b:00007f8eb9382a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 505.574639][ T9375] RAX: ffffffffffffffda RBX: 00007f8eb87b5fa0 RCX: 00007f8eb852ab39 [ 505.574652][ T9375] RDX: 00007f8eb9382a80 RSI: 00007f8eb9382bb0 RDI: 0000000000000021 [ 505.574664][ T9375] RBP: 00007f8eb9383090 R08: 0000000000000004 R09: 0000000000000004 [ 505.574675][ T9375] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 505.574686][ T9375] R13: 0000000000000000 R14: 00007f8eb87b5fa0 R15: 00007fffa97fca28 [ 505.574714][ T9375] [ 506.011577][ T5906] m920x_read = error: -19 [ 506.031258][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 506.233673][ T5877] m920x_read = error: -19 [ 506.255846][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 506.463238][ T5877] m920x_read = error: -19 [ 506.467726][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 506.695252][ T9400] syz.0.976 (9400): drop_caches: 2 [ 506.736530][ T9400] syz.0.976 (9400): drop_caches: 2 [ 506.850276][ T5877] m920x_read = error: -19 [ 506.855107][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 507.619309][ T5877] m920x_read = error: -19 [ 507.624178][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 507.784621][ T47] m920x_read = error: -19 [ 507.789022][ T47] dvb-usb: error -19 while querying for an remote control event. [ 507.936557][ T9416] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.981'. [ 507.973814][ T47] m920x_read = error: -19 [ 507.978286][ T47] dvb-usb: error -19 while querying for an remote control event. [ 508.244854][ T9420] Driver unsupported XDP return value 0 on prog (id 220) dev N/A, expect packet loss! [ 508.343092][ T47] m920x_read = error: -19 [ 508.353021][ T47] dvb-usb: error -19 while querying for an remote control event. [ 508.562887][ T47] m920x_read = error: -19 [ 508.568520][ T47] dvb-usb: error -19 while querying for an remote control event. [ 508.583087][ T59] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 508.833462][ T59] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 508.973829][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.199339][ T47] m920x_read = error: -19 [ 509.203834][ T47] dvb-usb: error -19 while querying for an remote control event. [ 509.368800][ T47] m920x_read = error: -19 [ 509.370205][ T59] usb 1-1: config 0 descriptor?? [ 509.380554][ T59] cp210x 1-1:0.0: cp210x converter detected [ 509.412375][ T47] dvb-usb: error -19 while querying for an remote control event. [ 509.664678][ T47] m920x_read = error: -19 [ 509.705233][ T47] dvb-usb: error -19 while querying for an remote control event. [ 510.125995][ T47] m920x_read = error: -19 [ 510.130418][ T47] dvb-usb: error -19 while querying for an remote control event. [ 510.383228][ T5877] m920x_read = error: -19 [ 510.782014][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 511.374508][ T5836] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 511.453274][ T5877] m920x_read = error: -19 [ 511.462256][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 511.488251][ T59] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 511.508841][ T59] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 511.530710][ T59] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 511.562005][ T59] usb 1-1: cp210x converter now attached to ttyUSB0 [ 511.658149][ T5877] m920x_read = error: -19 [ 511.662744][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 511.837178][ T5877] m920x_read = error: -19 [ 511.877545][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 511.939397][ T59] usb 1-1: USB disconnect, device number 16 [ 511.952464][ T59] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 511.964088][ T59] cp210x 1-1:0.0: device disconnected [ 511.973766][ T5836] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 511.982848][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.991183][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 512.075392][ T5836] usb 4-1: Product: syz [ 512.079611][ T5836] usb 4-1: Manufacturer: syz [ 512.085285][ T5836] usb 4-1: SerialNumber: syz [ 512.107794][ T5836] r8152-cfgselector 4-1: Unknown version 0x0000 [ 512.114338][ T5836] r8152-cfgselector 4-1: config 0 descriptor?? [ 512.166327][ T5877] m920x_read = error: -19 [ 512.170823][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 512.363496][ T5877] m920x_read = error: -19 [ 512.393955][ T9453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.540216][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 512.553115][ T9453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.621244][ T9464] FAULT_INJECTION: forcing a failure. [ 512.621244][ T9464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.634526][ T9464] CPU: 1 UID: 0 PID: 9464 Comm: syz.4.996 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 512.634551][ T9464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.634563][ T9464] Call Trace: [ 512.634569][ T9464] [ 512.634577][ T9464] dump_stack_lvl+0x189/0x250 [ 512.634608][ T9464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.634631][ T9464] ? __pfx__printk+0x10/0x10 [ 512.634669][ T9464] should_fail_ex+0x414/0x560 [ 512.634701][ T9464] _copy_to_user+0x31/0xb0 [ 512.634727][ T9464] simple_read_from_buffer+0xe1/0x170 [ 512.634757][ T9464] proc_fail_nth_read+0x1df/0x250 [ 512.634777][ T9464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.634796][ T9464] ? rw_verify_area+0x258/0x650 [ 512.634818][ T9464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.634842][ T9464] vfs_read+0x1fd/0x980 [ 512.634869][ T9464] ? __pfx___mutex_lock+0x10/0x10 [ 512.634890][ T9464] ? __pfx_vfs_read+0x10/0x10 [ 512.634914][ T9464] ? __fget_files+0x2a/0x420 [ 512.634944][ T9464] ? __fget_files+0x3a0/0x420 [ 512.634968][ T9464] ? __fget_files+0x2a/0x420 [ 512.635007][ T9464] ksys_read+0x145/0x250 [ 512.635028][ T9464] ? rcu_is_watching+0x15/0xb0 [ 512.635053][ T9464] ? __pfx_ksys_read+0x10/0x10 [ 512.635079][ T9464] ? do_syscall_64+0xba/0x210 [ 512.635104][ T9464] do_syscall_64+0xf6/0x210 [ 512.635123][ T9464] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 512.635141][ T9464] ? clear_bhb_loop+0x45/0xa0 [ 512.635162][ T9464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.635178][ T9464] RIP: 0033:0x7f869438d37c [ 512.635194][ T9464] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 512.635209][ T9464] RSP: 002b:00007f86951ca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.635226][ T9464] RAX: ffffffffffffffda RBX: 00007f86945b6160 RCX: 00007f869438d37c [ 512.635239][ T9464] RDX: 000000000000000f RSI: 00007f86951ca0a0 RDI: 0000000000000006 [ 512.635249][ T9464] RBP: 00007f86951ca090 R08: 0000000000000000 R09: 0000000000000000 [ 512.635260][ T9464] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 512.635271][ T9464] R13: 0000000000000000 R14: 00007f86945b6160 R15: 00007ffdcd77a948 [ 512.635298][ T9464] [ 513.133113][ T5906] m920x_read = error: -19 [ 513.137528][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 513.184609][ T5836] r8152-cfgselector 4-1: Unknown version 0x0000 [ 513.207765][ T5836] r8152-cfgselector 4-1: bad CDC descriptors [ 513.237323][ T5836] r8152-cfgselector 4-1: USB disconnect, device number 29 [ 513.353698][ T5906] m920x_read = error: -19 [ 513.358139][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 513.563707][ T5906] m920x_read = error: -19 [ 513.568202][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 514.366242][ T5906] m920x_read = error: -19 [ 514.370672][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 514.597619][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.616272][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.663111][ T47] m920x_read = error: -19 [ 514.672562][ T47] dvb-usb: error -19 while querying for an remote control event. [ 514.714066][ T5836] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 514.823071][ T59] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 514.874745][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'. [ 515.036202][ T47] m920x_read = error: -19 [ 515.040629][ T47] dvb-usb: error -19 while querying for an remote control event. [ 515.064367][ T5836] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.072447][ T5836] usb 4-1: config 0 has no interface number 0 [ 515.097369][ T5836] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 515.166699][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.181582][ T5836] usb 4-1: config 0 descriptor?? [ 515.199103][ T5836] usb 4-1: selecting invalid altsetting 1 [ 515.209264][ T5836] dvb_ttusb_budget: ttusb_init_controller: error [ 515.353231][ T47] m920x_read = error: -19 [ 515.357596][ T47] dvb-usb: error -19 while querying for an remote control event. [ 515.386762][ T5836] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 515.531533][ T47] m920x_read = error: -19 [ 515.548052][ T5836] DVB: Unable to find symbol cx22700_attach() [ 515.555593][ T47] dvb-usb: error -19 while querying for an remote control event. [ 515.778021][ T47] m920x_read = error: -19 [ 515.845546][ T47] dvb-usb: error -19 while querying for an remote control event. [ 516.708048][ T5906] m920x_read = error: -19 [ 516.712874][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 516.758300][ T5836] DVB: Unable to find symbol tda10046_attach() [ 516.789501][ T5836] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 517.105329][ T5877] m920x_read = error: -19 [ 517.109720][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 517.140030][ T5836] usb 4-1: USB disconnect, device number 30 [ 517.273052][ T5877] m920x_read = error: -19 [ 517.277444][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 517.475170][ T5877] m920x_read = error: -19 [ 517.479587][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 517.593044][ T5836] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 517.692534][ T5877] m920x_read = error: -19 [ 517.702618][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 517.794026][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 517.804749][ T5836] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 517.833165][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.846069][ T5836] usb 4-1: Product: syz [ 517.850283][ T5836] usb 4-1: Manufacturer: syz [ 517.883046][ T5836] usb 4-1: SerialNumber: syz [ 517.917342][ T5836] usb 4-1: config 0 descriptor?? [ 518.024036][ T47] m920x_read = error: -19 [ 518.029006][ T47] dvb-usb: error -19 while querying for an remote control event. [ 518.209054][ T47] m920x_read = error: -19 [ 518.226888][ T9520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.235825][ T47] dvb-usb: error -19 while querying for an remote control event. [ 518.328445][ T9520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.475747][ T47] m920x_read = error: -19 [ 518.491401][ T47] dvb-usb: error -19 while querying for an remote control event. [ 518.733369][ T47] m920x_read = error: -19 [ 518.738030][ T47] dvb-usb: error -19 while querying for an remote control event. [ 518.748700][ T5836] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 518.772968][ T5877] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 518.895055][ T5836] usb 4-1: USB disconnect, device number 31 [ 518.933132][ T47] m920x_read = error: -19 [ 518.937537][ T47] dvb-usb: error -19 while querying for an remote control event. [ 518.945512][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 519.170937][ T5877] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 519.182499][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 519.298142][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.306341][ T5877] usb 5-1: Product: syz [ 519.311008][ T5877] usb 5-1: Manufacturer: syz [ 519.316847][ T5877] usb 5-1: SerialNumber: syz [ 519.325181][ T47] m920x_read = error: -19 [ 519.331154][ T47] dvb-usb: error -19 while querying for an remote control event. [ 519.352312][ T5877] r8152-cfgselector 5-1: Unknown version 0x0000 [ 519.413260][ T5877] r8152-cfgselector 5-1: config 0 descriptor?? [ 519.976625][ T47] m920x_read = error: -19 [ 519.987559][ T9533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.996450][ T47] dvb-usb: error -19 while querying for an remote control event. [ 520.374249][ T9533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.644396][ T5877] r8152-cfgselector 5-1: Unknown version 0x0000 [ 520.650904][ T5877] r8152-cfgselector 5-1: bad CDC descriptors [ 520.666439][ T9557] openvswitch: netlink: Multiple metadata blocks provided [ 520.723291][ T47] m920x_read = error: -19 [ 520.776163][ T47] dvb-usb: error -19 while querying for an remote control event. [ 521.182491][ T5877] r8152-cfgselector 5-1: USB disconnect, device number 19 [ 521.323383][ T47] m920x_read = error: -19 [ 521.360856][ T47] dvb-usb: error -19 while querying for an remote control event. [ 521.590406][ T5877] m920x_read = error: -19 [ 521.606085][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 522.443717][ T5877] m920x_read = error: -19 [ 522.454858][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 522.613097][ T24] m920x_read = error: -19 [ 522.617501][ T24] dvb-usb: error -19 while querying for an remote control event. [ 522.813082][ T24] m920x_read = error: -19 [ 522.820645][ T24] dvb-usb: error -19 while querying for an remote control event. [ 523.983852][ T47] m920x_read = error: -19 [ 523.988257][ T47] dvb-usb: error -19 while querying for an remote control event. [ 524.193560][ T47] m920x_read = error: -19 [ 524.198287][ T47] dvb-usb: error -19 while querying for an remote control event. [ 524.321519][ T9599] FAULT_INJECTION: forcing a failure. [ 524.321519][ T9599] name failslab, interval 1, probability 0, space 0, times 0 [ 524.334307][ T9599] CPU: 1 UID: 0 PID: 9599 Comm: syz.0.1036 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 524.334333][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 524.334345][ T9599] Call Trace: [ 524.334352][ T9599] [ 524.334360][ T9599] dump_stack_lvl+0x189/0x250 [ 524.334392][ T9599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.334416][ T9599] ? __pfx__printk+0x10/0x10 [ 524.334450][ T9599] ? __pfx___might_resched+0x10/0x10 [ 524.334476][ T9599] ? fs_reclaim_acquire+0x7d/0x100 [ 524.334500][ T9599] should_fail_ex+0x414/0x560 [ 524.334533][ T9599] should_failslab+0xa8/0x100 [ 524.334562][ T9599] __kmalloc_node_noprof+0xd1/0x4e0 [ 524.334588][ T9599] ? __vmalloc_node_range_noprof+0x51a/0x12c0 [ 524.334612][ T9599] __vmalloc_node_range_noprof+0x51a/0x12c0 [ 524.334643][ T9599] ? preempt_schedule_irq+0xde/0x150 [ 524.334675][ T9599] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 524.334703][ T9599] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 524.334730][ T9599] __vmalloc_noprof+0x7a/0x90 [ 524.334748][ T9599] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 524.334770][ T9599] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 524.334797][ T9599] bpf_prog_alloc+0x3c/0x1a0 [ 524.334821][ T9599] bpf_prog_load+0x735/0x1930 [ 524.334849][ T9599] ? __lock_acquire+0xaac/0xd20 [ 524.334875][ T9599] ? __pfx_bpf_prog_load+0x10/0x10 [ 524.334917][ T9599] ? bpf_lsm_bpf+0x9/0x20 [ 524.334938][ T9599] ? security_bpf+0x7e/0x300 [ 524.334962][ T9599] __sys_bpf+0x5f1/0x860 [ 524.334984][ T9599] ? __pfx___sys_bpf+0x10/0x10 [ 524.335031][ T9599] __x64_sys_bpf+0x7c/0x90 [ 524.335049][ T9599] do_syscall_64+0xf6/0x210 [ 524.335071][ T9599] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 524.335089][ T9599] ? clear_bhb_loop+0x45/0xa0 [ 524.335110][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.335128][ T9599] RIP: 0033:0x7f1eab78e969 [ 524.335143][ T9599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.335159][ T9599] RSP: 002b:00007f1eac60d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.335178][ T9599] RAX: ffffffffffffffda RBX: 00007f1eab9b6160 RCX: 00007f1eab78e969 [ 524.335191][ T9599] RDX: 0000000000000021 RSI: 000020000000e000 RDI: 0000000000000005 [ 524.335203][ T9599] RBP: 00007f1eac60d090 R08: 0000000000000000 R09: 0000000000000000 [ 524.335214][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.335225][ T9599] R13: 0000000000000000 R14: 00007f1eab9b6160 R15: 00007ffc951b0fd8 [ 524.335253][ T9599] [ 524.335477][ T9599] syz.0.1036: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 524.608870][ T9599] CPU: 1 UID: 0 PID: 9599 Comm: syz.0.1036 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 524.608899][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 524.608911][ T9599] Call Trace: [ 524.608919][ T9599] [ 524.608928][ T9599] dump_stack_lvl+0x189/0x250 [ 524.608963][ T9599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.608998][ T9599] ? __pfx__printk+0x10/0x10 [ 524.609029][ T9599] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 524.609061][ T9599] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 524.609094][ T9599] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 524.609128][ T9599] warn_alloc+0x214/0x310 [ 524.609148][ T9599] ? __pfx___might_resched+0x10/0x10 [ 524.609175][ T9599] ? fs_reclaim_acquire+0x7d/0x100 [ 524.609199][ T9599] ? __pfx_warn_alloc+0x10/0x10 [ 524.609226][ T9599] ? rcu_is_watching+0x15/0xb0 [ 524.609254][ T9599] ? trace_kmalloc+0x1f/0xd0 [ 524.609279][ T9599] ? __kmalloc_node_noprof+0x293/0x4e0 [ 524.609307][ T9599] ? __vmalloc_node_range_noprof+0x51a/0x12c0 [ 524.609333][ T9599] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 524.609384][ T9599] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 524.609415][ T9599] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 524.609439][ T9599] __vmalloc_noprof+0x7a/0x90 [ 524.609458][ T9599] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 524.609482][ T9599] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 524.609511][ T9599] bpf_prog_alloc+0x3c/0x1a0 [ 524.609538][ T9599] bpf_prog_load+0x735/0x1930 [ 524.609569][ T9599] ? __lock_acquire+0xaac/0xd20 [ 524.609597][ T9599] ? __pfx_bpf_prog_load+0x10/0x10 [ 524.609644][ T9599] ? bpf_lsm_bpf+0x9/0x20 [ 524.609666][ T9599] ? security_bpf+0x7e/0x300 [ 524.609693][ T9599] __sys_bpf+0x5f1/0x860 [ 524.609718][ T9599] ? __pfx___sys_bpf+0x10/0x10 [ 524.609771][ T9599] __x64_sys_bpf+0x7c/0x90 [ 524.609791][ T9599] do_syscall_64+0xf6/0x210 [ 524.609816][ T9599] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 524.609836][ T9599] ? clear_bhb_loop+0x45/0xa0 [ 524.609859][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.609890][ T9599] RIP: 0033:0x7f1eab78e969 [ 524.609918][ T9599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.609933][ T9599] RSP: 002b:00007f1eac60d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.609952][ T9599] RAX: ffffffffffffffda RBX: 00007f1eab9b6160 RCX: 00007f1eab78e969 [ 524.609965][ T9599] RDX: 0000000000000021 RSI: 000020000000e000 RDI: 0000000000000005 [ 524.609983][ T9599] RBP: 00007f1eac60d090 R08: 0000000000000000 R09: 0000000000000000 [ 524.609994][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.610005][ T9599] R13: 0000000000000000 R14: 00007f1eab9b6160 R15: 00007ffc951b0fd8 [ 524.610033][ T9599] [ 524.610049][ T9599] Mem-Info: [ 524.894930][ T9599] active_anon:255 inactive_anon:9945 isolated_anon:0 [ 524.894930][ T9599] active_file:14197 inactive_file:38646 isolated_file:0 [ 524.894930][ T9599] unevictable:769 dirty:506 writeback:0 [ 524.894930][ T9599] slab_reclaimable:5635 slab_unreclaimable:99876 [ 524.894930][ T9599] mapped:35711 shmem:7081 pagetables:843 [ 524.894930][ T9599] sec_pagetables:0 bounce:0 [ 524.894930][ T9599] kernel_misc_reclaimable:0 [ 524.894930][ T9599] free:1328015 free_pcp:452 free_cma:0 [ 524.940074][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.946376][ T9599] Node 0 active_anon:1020kB inactive_anon:39780kB active_file:56580kB inactive_file:154584kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:142844kB dirty:2024kB writeback:0kB shmem:26788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10824kB pagetables:3372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 524.980116][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.987042][ T9599] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 525.018219][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.024502][ T9599] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 525.051602][ T9599] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 525.057388][ T9599] Node 0 DMA32 free:1384492kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:1016kB inactive_anon:39876kB active_file:56488kB inactive_file:154572kB unevictable:1540kB writepending:2024kB present:3129332kB managed:2564600kB mlocked:12kB bounce:0kB free_pcp:1308kB local_pcp:648kB free_cma:0kB [ 525.089231][ T9599] lowmem_reserve[]: 0 0 0 0 0 [ 525.093989][ T9599] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 525.120608][ T9599] lowmem_reserve[]: 0 0 0 0 0 [ 525.125348][ T9599] Node 1 Normal free:3912208kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB [ 525.154338][ T9599] lowmem_reserve[]: 0 0 0 0 0 [ 525.159067][ T9599] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 525.172716][ T9599] Node 0 DMA32: 14*4kB (UM) 53*8kB (UME) 164*16kB (UE) 372*32kB (UME) 437*64kB (UME) 124*128kB (UME) 68*256kB (UME) 53*512kB (UME) 61*1024kB (UME) 43*2048kB (UME) 276*4096kB (UME) = 1384416kB [ 525.191713][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.197824][ T9599] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 525.209478][ T9599] Node 1 Normal: 248*4kB (UE) 68*8kB (UME) 41*16kB (UME) 210*32kB (UME) 95*64kB (UME) 37*128kB (UME) 13*256kB (UME) 8*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3912208kB [ 525.228323][ T47] m920x_read = error: -19 [ 525.232694][ T47] dvb-usb: error -19 while querying for an remote control event. [ 525.258556][ T9599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.272011][ T9599] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 525.281866][ T9599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.293761][ T9599] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 525.304615][ T9599] 59939 total pagecache pages [ 525.309334][ T9599] 0 pages in swap cache [ 525.314540][ T9599] Free swap = 124996kB [ 525.318692][ T9599] Total swap = 124996kB [ 525.324451][ T9599] 2097051 pages RAM [ 525.328251][ T9599] 0 pages HighMem/MovableOnly [ 525.333964][ T9599] 424242 pages reserved [ 525.338128][ T9599] 0 pages cma reserved [ 525.527419][ T47] m920x_read = error: -19 [ 525.531826][ T47] dvb-usb: error -19 while querying for an remote control event. [ 525.649552][ T9607] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1039'. [ 525.820936][ T5881] m920x_read = error: -19 [ 525.825411][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 525.856090][ T9601] kvm: apic: phys broadcast and lowest prio [ 526.038721][ T5881] m920x_read = error: -19 [ 526.043188][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 526.218254][ T5881] m920x_read = error: -19 [ 526.222695][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 526.288534][ T5128] Bluetooth: hci0: command 0x0406 tx timeout [ 526.393055][ T47] m920x_read = error: -19 [ 526.399297][ T47] dvb-usb: error -19 while querying for an remote control event. [ 526.583247][ T47] m920x_read = error: -19 [ 526.601784][ T47] dvb-usb: error -19 while querying for an remote control event. [ 526.823018][ T47] m920x_read = error: -19 [ 526.827435][ T47] dvb-usb: error -19 while querying for an remote control event. [ 527.003923][ T47] m920x_read = error: -19 [ 527.008487][ T47] dvb-usb: error -19 while querying for an remote control event. [ 527.076766][ T9636] syz.0.1050 (9636): drop_caches: 2 [ 527.089833][ T9636] syz.0.1050 (9636): drop_caches: 2 [ 527.100156][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 527.100170][ T30] audit: type=1326 audit(1746896623.787:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259ef8e969 code=0x7ffc0000 [ 527.260095][ T47] m920x_read = error: -19 [ 527.264551][ T47] dvb-usb: error -19 while querying for an remote control event. [ 527.272335][ T30] audit: type=1326 audit(1746896623.787:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259ef8e969 code=0x7ffc0000 [ 527.299853][ T30] audit: type=1326 audit(1746896623.787:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f259ef8e969 code=0x7ffc0000 [ 527.891961][ T47] m920x_read = error: -19 [ 527.902991][ T47] dvb-usb: error -19 while querying for an remote control event. [ 527.973034][ T30] audit: type=1326 audit(1746896623.787:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259ef8e969 code=0x7ffc0000 [ 528.185489][ T47] m920x_read = error: -19 [ 528.190000][ T47] dvb-usb: error -19 while querying for an remote control event. [ 528.200815][ T30] audit: type=1326 audit(1746896623.787:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259ef8e969 code=0x7ffc0000 [ 528.226825][ T30] audit: type=1326 audit(1746896623.787:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f259ef8e969 code=0x7ffc0000 [ 528.252035][ T9650] Invalid ELF header type: 0 != 1 [ 528.266008][ T30] audit: type=1326 audit(1746896623.787:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259ef8e969 code=0x7ffc0000 [ 528.383268][ T47] m920x_read = error: -19 [ 528.387671][ T47] dvb-usb: error -19 while querying for an remote control event. [ 528.400548][ T30] audit: type=1326 audit(1746896623.787:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f259ef8e969 code=0x7ffc0000 [ 528.530264][ T30] audit: type=1326 audit(1746896623.787:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.3.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259ef8e969 code=0x7ffc0000 [ 528.593092][ T47] m920x_read = error: -19 [ 528.597502][ T47] dvb-usb: error -19 while querying for an remote control event. [ 528.813016][ T47] m920x_read = error: -19 [ 528.817429][ T47] dvb-usb: error -19 while querying for an remote control event. [ 528.898284][ T9665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1060'. [ 528.993076][ T24] m920x_read = error: -19 [ 528.997495][ T24] dvb-usb: error -19 while querying for an remote control event. [ 529.163384][ T24] m920x_read = error: -19 [ 529.167824][ T24] dvb-usb: error -19 while querying for an remote control event. [ 529.424490][ T24] m920x_read = error: -19 [ 529.429336][ T24] dvb-usb: error -19 while querying for an remote control event. [ 530.076902][ T24] m920x_read = error: -19 [ 530.198125][ T24] dvb-usb: error -19 while querying for an remote control event. [ 530.263935][ T9686] fuse: Bad value for 'fd' [ 530.322801][ T9688] nft_compat: unsupported protocol 1 [ 530.373091][ T24] m920x_read = error: -19 [ 530.377509][ T24] dvb-usb: error -19 while querying for an remote control event. [ 530.656512][ T24] m920x_read = error: -19 [ 530.665727][ T5881] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 530.879459][ T24] dvb-usb: error -19 while querying for an remote control event. [ 531.119347][ T5881] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 531.133319][ T24] m920x_read = error: -19 [ 531.137960][ T24] dvb-usb: error -19 while querying for an remote control event. [ 531.153171][ T5881] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 531.173925][ T5881] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 531.201032][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.257799][ T9688] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 531.271886][ T5881] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 531.313385][ T5877] m920x_read = error: -19 [ 531.317849][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 531.411669][ T9707] FAULT_INJECTION: forcing a failure. [ 531.411669][ T9707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.481551][ T9707] CPU: 1 UID: 0 PID: 9707 Comm: syz.2.1072 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 531.481582][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 531.481595][ T9707] Call Trace: [ 531.481603][ T9707] [ 531.481612][ T9707] dump_stack_lvl+0x189/0x250 [ 531.481655][ T9707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.481680][ T9707] ? __pfx__printk+0x10/0x10 [ 531.481712][ T9707] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 531.481741][ T9707] should_fail_ex+0x414/0x560 [ 531.481773][ T9707] strncpy_from_user+0x36/0x290 [ 531.481804][ T9707] __se_sys_request_key+0xa2/0x340 [ 531.481823][ T9707] ? ksys_write+0x1f0/0x250 [ 531.481847][ T9707] ? __pfx___se_sys_request_key+0x10/0x10 [ 531.481870][ T9707] ? do_syscall_64+0xba/0x210 [ 531.481894][ T9707] do_syscall_64+0xf6/0x210 [ 531.481916][ T9707] ? clear_bhb_loop+0x45/0xa0 [ 531.481937][ T9707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.481964][ T9707] RIP: 0033:0x7f8eb858e969 [ 531.481979][ T9707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.481993][ T9707] RSP: 002b:00007f8eb9383038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 531.482011][ T9707] RAX: ffffffffffffffda RBX: 00007f8eb87b5fa0 RCX: 00007f8eb858e969 [ 531.482022][ T9707] RDX: 0000200000000e40 RSI: 0000200000000e00 RDI: 0000200000000dc0 [ 531.482033][ T9707] RBP: 00007f8eb9383090 R08: 0000000000000000 R09: 0000000000000000 [ 531.482044][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.482054][ T9707] R13: 0000000000000000 R14: 00007f8eb87b5fa0 R15: 00007fffa97fca28 [ 531.482098][ T9707] [ 531.651500][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.669842][ T5881] m920x_read = error: -19 [ 531.674358][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 531.693096][ T9713] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 531.699835][ T9713] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 531.781896][ T9713] vhci_hcd vhci_hcd.0: Device attached [ 531.833199][ T5877] m920x_read = error: -19 [ 531.837630][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 531.943394][ T5836] vhci_hcd: vhci_device speed not set [ 531.966384][ T9] usb 4-1: USB disconnect, device number 32 [ 531.978131][ T9716] vhci_hcd: connection closed [ 531.996904][ T6973] vhci_hcd: stop threads [ 532.003307][ T5877] m920x_read = error: -19 [ 532.010228][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 532.023005][ T5881] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 532.027503][ T5836] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 532.065246][ T6973] vhci_hcd: release socket [ 532.085165][ T6973] vhci_hcd: disconnect device [ 532.203172][ T5877] m920x_read = error: -19 [ 532.207644][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 533.239892][ T5881] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 533.249224][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.421915][ T5877] m920x_read = error: -19 [ 533.464498][ T5881] usb 2-1: config 0 descriptor?? [ 533.573235][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 533.582876][ T5881] cp210x 2-1:0.0: cp210x converter detected [ 533.733123][ T5877] m920x_read = error: -19 [ 533.739608][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 533.934210][ T5877] m920x_read = error: -19 [ 534.043311][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 534.603336][ T5877] m920x_read = error: -19 [ 534.608363][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 534.618625][ T9746] overlay: Unknown parameter '/' [ 534.803549][ T5877] m920x_read = error: -19 [ 535.617396][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 535.696929][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 535.914691][ T47] m920x_read = error: -19 [ 535.920551][ T47] dvb-usb: error -19 while querying for an remote control event. [ 536.086223][ T9] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 536.183256][ T47] m920x_read = error: -19 [ 536.187687][ T47] dvb-usb: error -19 while querying for an remote control event. [ 536.193350][ T9] usb 1-1: config 0 has no interface number 0 [ 536.201542][ T9] usb 1-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid maxpacket 49765, setting to 64 [ 536.258944][ T5881] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 536.262983][ T9] usb 1-1: config 0 interface 235 has no altsetting 0 [ 536.287078][ T5881] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 536.294947][ T5881] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 536.328836][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 536.334075][ T5881] usb 2-1: cp210x converter now attached to ttyUSB0 [ 536.350454][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.391279][ T9] usb 1-1: Product: syz [ 536.409324][ T9] usb 1-1: Manufacturer: syz [ 536.442972][ T9] usb 1-1: SerialNumber: syz [ 536.461763][ T9] usb 1-1: config 0 descriptor?? [ 536.569823][ T47] m920x_read = error: -19 [ 536.582941][ T47] dvb-usb: error -19 while querying for an remote control event. [ 536.591479][ T9744] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 536.601019][ T5881] usb 2-1: USB disconnect, device number 23 [ 536.623959][ T5881] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 536.632778][ T5881] cp210x 2-1:0.0: device disconnected [ 537.333725][ T9] keyspan 1-1:0.235: Keyspan 1 port adapter converter detected [ 537.341691][ T9] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 87 [ 537.415734][ T47] m920x_read = error: -19 [ 537.422976][ T47] dvb-usb: error -19 while querying for an remote control event. [ 537.443706][ T5836] vhci_hcd: vhci_device speed not set [ 537.523059][ T9] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 7 [ 537.532282][ T9] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 81 [ 537.593181][ T47] m920x_read = error: -19 [ 537.597622][ T47] dvb-usb: error -19 while querying for an remote control event. [ 537.635861][ T9] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 1 [ 537.661313][ T9] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 85 [ 537.699860][ T9] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 537.753593][ T9] usb 1-1: USB disconnect, device number 18 [ 537.813235][ T47] m920x_read = error: -19 [ 537.817791][ T47] dvb-usb: error -19 while querying for an remote control event. [ 537.825858][ T5881] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 537.915825][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 537.940994][ T9] keyspan 1-1:0.235: device disconnected [ 538.074319][ T24] m920x_read = error: -19 [ 538.078983][ T24] dvb-usb: error -19 while querying for an remote control event. [ 538.142973][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 539.044385][ T47] m920x_read = error: -19 [ 539.060762][ T47] dvb-usb: error -19 while querying for an remote control event. [ 539.340175][ T47] m920x_read = error: -19 [ 539.435409][ T9777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.458778][ T5881] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 539.491033][ T47] dvb-usb: error -19 while querying for an remote control event. [ 539.523035][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.531091][ T5881] usb 2-1: Product: syz [ 539.536906][ T9777] loop2: detected capacity change from 0 to 7 [ 539.547483][ T9777] Dev loop2: unable to read RDB block 7 [ 539.553118][ T9777] loop2: AHDI p1 p2 p3 [ 539.557303][ T9777] loop2: partition table partially beyond EOD, truncated [ 539.564482][ T9777] loop2: p1 start 1601398130 is beyond EOD, truncated [ 539.571243][ T9777] loop2: p2 start 1702059890 is beyond EOD, truncated [ 539.649498][ T5881] usb 2-1: Manufacturer: syz [ 539.682242][ T5881] usb 2-1: SerialNumber: syz [ 539.703076][ T47] m920x_read = error: -19 [ 539.746072][ T47] dvb-usb: error -19 while querying for an remote control event. [ 539.973458][ T47] m920x_read = error: -19 [ 540.005483][ T47] dvb-usb: error -19 while querying for an remote control event. [ 542.141545][ T47] m920x_read = error: -19 [ 542.157807][ T47] dvb-usb: error -19 while querying for an remote control event. [ 542.273371][ T9800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1097'. [ 543.183625][ T5881] r8152-cfgselector 2-1: Unknown version 0x0000 [ 543.190756][ T5881] r8152-cfgselector 2-1: config 0 descriptor?? [ 543.209350][ T5881] r8152-cfgselector 2-1: can't set config #0, error -71 [ 543.226086][ T5881] r8152-cfgselector 2-1: USB disconnect, device number 24 [ 543.245503][ T47] m920x_read = error: -19 [ 543.249993][ T47] dvb-usb: error -19 while querying for an remote control event. [ 543.425672][ T47] m920x_read = error: -19 [ 543.430366][ T47] dvb-usb: error -19 while querying for an remote control event. [ 543.613609][ T5881] m920x_read = error: -19 [ 543.618286][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 543.855395][ T5881] m920x_read = error: -19 [ 543.859801][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 544.074179][ T5881] m920x_read = error: -19 [ 544.078579][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 544.103461][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 544.270845][ T24] m920x_read = error: -19 [ 544.276353][ T24] dvb-usb: error -19 while querying for an remote control event. [ 544.288532][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 544.309269][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.341596][ T9] usb 3-1: config 0 descriptor?? [ 544.383558][ T9] cp210x 3-1:0.0: cp210x converter detected [ 544.453021][ T24] m920x_read = error: -19 [ 544.483017][ T59] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 544.483352][ T24] dvb-usb: error -19 while querying for an remote control event. [ 544.643156][ T59] usb 4-1: Using ep0 maxpacket: 16 [ 544.651087][ T47] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 544.658718][ T59] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 544.658766][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.680441][ T59] usb 4-1: Product: syz [ 544.691589][ T59] usb 4-1: Manufacturer: syz [ 544.702720][ T59] usb 4-1: SerialNumber: syz [ 544.703069][ T24] m920x_read = error: -19 [ 544.711732][ T24] dvb-usb: error -19 while querying for an remote control event. [ 544.720323][ T59] r8152-cfgselector 4-1: Unknown version 0x0000 [ 544.729565][ T59] r8152-cfgselector 4-1: config 0 descriptor?? [ 544.768605][ T9833] usb usb8: usbfs: process 9833 (syz.4.1103) did not claim interface 0 before use [ 544.803072][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 544.816035][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.830695][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 544.873025][ T24] m920x_read = error: -19 [ 544.878054][ T24] dvb-usb: error -19 while querying for an remote control event. [ 544.908579][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 544.961328][ T9824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.970296][ T9824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.971088][ T47] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 545.018785][ T59] r8152-cfgselector 4-1: Unknown version 0x0000 [ 545.030773][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.033386][ T59] r8152-cfgselector 4-1: bad CDC descriptors [ 545.075977][ T5881] m920x_read = error: -19 [ 545.080348][ T5881] dvb-usb: error -19 while querying for an remote control event. [ 545.120711][ T47] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 545.141655][ T47] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 545.161480][ T47] usb 2-1: Manufacturer: syz [ 545.167468][ T59] r8152-cfgselector 4-1: USB disconnect, device number 33 [ 545.178217][ T47] usb 2-1: config 0 descriptor?? [ 545.203216][ T9] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 545.211234][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 545.251415][ T9] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 545.253129][ T24] m920x_read = error: -19 [ 545.262380][ T24] dvb-usb: error -19 while querying for an remote control event. [ 545.262777][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 545.300489][ T9] usb 3-1: USB disconnect, device number 28 [ 545.318793][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 545.335965][ T9] cp210x 3-1:0.0: device disconnected [ 545.467623][ T24] m920x_read = error: -19 [ 545.472703][ T24] dvb-usb: error -19 while querying for an remote control event. [ 545.701798][ T24] m920x_read = error: -19 [ 545.720629][ T24] dvb-usb: error -19 while querying for an remote control event. [ 546.242588][ T47] rc_core: IR keymap rc-hauppauge not found [ 546.249321][ T24] m920x_read = error: -19 [ 546.254205][ T47] Registered IR keymap rc-empty [ 546.259790][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.268803][ T24] dvb-usb: error -19 while querying for an remote control event. [ 546.433119][ T24] m920x_read = error: -19 [ 546.437508][ T24] dvb-usb: error -19 while querying for an remote control event. [ 546.543969][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 547.984329][ T47] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 548.003022][ T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input15 [ 548.039772][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.073031][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.093148][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.117174][ T5877] m920x_read = error: -19 [ 548.121590][ T5877] dvb-usb: error -19 while querying for an remote control event. [ 548.129488][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.203460][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.273035][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.343133][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.353051][ T5906] m920x_read = error: -19 [ 548.357451][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 548.393129][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.551092][ T5906] m920x_read = error: -19 [ 548.564227][ T9867] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 548.573590][ T9867] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 549.470379][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 549.495022][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 549.811507][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 549.854285][ T47] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 549.877262][ T47] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 549.889782][ T47] usb 2-1: USB disconnect, device number 25 [ 549.973242][ T5906] m920x_read = error: -19 [ 549.977643][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 550.296702][ T5906] m920x_read = error: -19 [ 550.301119][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 550.388353][ T9882] netlink: 'syz.0.1127': attribute type 1 has an invalid length. [ 550.422734][ T9882] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1127'. [ 550.525569][ T30] audit: type=1326 audit(1746896647.227:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb858e969 code=0x7ffc0000 [ 550.527523][ T47] m920x_read = error: -19 [ 550.590398][ T47] dvb-usb: error -19 while querying for an remote control event. [ 550.617306][ T30] audit: type=1326 audit(1746896647.227:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb858e969 code=0x7ffc0000 [ 550.661003][ T9889] FAULT_INJECTION: forcing a failure. [ 550.661003][ T9889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.669822][ T30] audit: type=1326 audit(1746896647.227:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f8eb858e969 code=0x7ffc0000 [ 550.676435][ T9889] CPU: 1 UID: 0 PID: 9889 Comm: syz.2.1128 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 550.676465][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 550.676479][ T9889] Call Trace: [ 550.676487][ T9889] [ 550.676496][ T9889] dump_stack_lvl+0x189/0x250 [ 550.676533][ T9889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.676560][ T9889] ? __pfx__printk+0x10/0x10 [ 550.676606][ T9889] should_fail_ex+0x414/0x560 [ 550.676644][ T9889] _copy_to_user+0x31/0xb0 [ 550.676674][ T9889] simple_read_from_buffer+0xe1/0x170 [ 550.676710][ T9889] proc_fail_nth_read+0x1df/0x250 [ 550.676734][ T9889] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 550.676758][ T9889] ? rw_verify_area+0x258/0x650 [ 550.676784][ T9889] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 550.676805][ T9889] vfs_read+0x1fd/0x980 [ 550.676838][ T9889] ? __pfx___mutex_lock+0x10/0x10 [ 550.676863][ T9889] ? __pfx_vfs_read+0x10/0x10 [ 550.676892][ T9889] ? __fget_files+0x2a/0x420 [ 550.676928][ T9889] ? __fget_files+0x3a0/0x420 [ 550.676957][ T9889] ? __fget_files+0x2a/0x420 [ 550.676998][ T9889] ksys_read+0x145/0x250 [ 550.677024][ T9889] ? rcu_is_watching+0x15/0xb0 [ 550.677065][ T9889] ? __pfx_ksys_read+0x10/0x10 [ 550.677097][ T9889] ? do_syscall_64+0xba/0x210 [ 550.677125][ T9889] do_syscall_64+0xf6/0x210 [ 550.677151][ T9889] ? clear_bhb_loop+0x45/0xa0 [ 550.677176][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.677197][ T9889] RIP: 0033:0x7f8eb858d37c [ 550.677215][ T9889] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 550.677232][ T9889] RSP: 002b:00007f8eb9362030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 550.677254][ T9889] RAX: ffffffffffffffda RBX: 00007f8eb87b6080 RCX: 00007f8eb858d37c [ 550.677269][ T9889] RDX: 000000000000000f RSI: 00007f8eb93620a0 RDI: 0000000000000008 [ 550.677282][ T9889] RBP: 00007f8eb9362090 R08: 0000000000000000 R09: 0000000000000000 [ 550.677294][ T9889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.677307][ T9889] R13: 0000000000000000 R14: 00007f8eb87b6080 R15: 00007fffa97fca28 [ 550.677340][ T9889] [ 550.767390][ T5906] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 550.829173][ T30] audit: type=1326 audit(1746896647.227:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb858e969 code=0x7ffc0000 [ 550.830705][ T47] m920x_read = error: -19 [ 550.839536][ T9890] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1129'. [ 550.853873][ T47] dvb-usb: error -19 while querying for an remote control event. [ 551.036776][ T9894] block nbd2: not configured, cannot reconfigure [ 551.047959][ T30] audit: type=1326 audit(1746896647.227:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f8eb858e969 code=0x7ffc0000 [ 551.123386][ T47] m920x_read = error: -19 [ 551.127839][ T30] audit: type=1326 audit(1746896647.227:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb858e969 code=0x7ffc0000 [ 551.127887][ T30] audit: type=1326 audit(1746896647.227:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8eb858e969 code=0x7ffc0000 [ 551.127930][ T30] audit: type=1326 audit(1746896647.227:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb858e969 code=0x7ffc0000 [ 551.127973][ T30] audit: type=1326 audit(1746896647.227:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8eb858e969 code=0x7ffc0000 [ 551.128016][ T30] audit: type=1326 audit(1746896647.257:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb858e969 code=0x7ffc0000 [ 551.171523][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.238243][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.250538][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 551.275575][ T47] dvb-usb: error -19 while querying for an remote control event. [ 551.286959][ T5906] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 551.299368][ T5906] usb 1-1: config 0 has no interface number 0 [ 551.307165][ T5906] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 551.357715][ T5906] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 551.367974][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 551.382970][ T5906] usb 1-1: Product: syz [ 551.392982][ T5906] usb 1-1: SerialNumber: syz [ 551.403808][ T5906] usb 1-1: config 0 descriptor?? [ 551.419089][ T5906] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 551.440699][ T5906] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input16 [ 551.513198][ T5906] m920x_read = error: -19 [ 551.517749][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 551.637741][ T9900] dlm: no locking on control device [ 551.652267][ T9901] input: syz0 as /devices/virtual/input/input17 [ 551.703580][ T47] m920x_read = error: -19 [ 551.708151][ T47] dvb-usb: error -19 while querying for an remote control event. [ 551.893694][ T47] m920x_read = error: -19 [ 551.893745][ T47] dvb-usb: error -19 while querying for an remote control event. [ 552.005072][ T9910] FAULT_INJECTION: forcing a failure. [ 552.005072][ T9910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.068208][ T47] m920x_read = error: -19 [ 552.068235][ T47] dvb-usb: error -19 while querying for an remote control event. [ 552.081338][ T9910] CPU: 1 UID: 0 PID: 9910 Comm: syz.1.1135 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 552.081367][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.081379][ T9910] Call Trace: [ 552.081386][ T9910] [ 552.081394][ T9910] dump_stack_lvl+0x189/0x250 [ 552.081432][ T9910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.081468][ T9910] ? __pfx__printk+0x10/0x10 [ 552.081508][ T9910] should_fail_ex+0x414/0x560 [ 552.081543][ T9910] _copy_to_user+0x31/0xb0 [ 552.081569][ T9910] simple_read_from_buffer+0xe1/0x170 [ 552.081596][ T9910] proc_fail_nth_read+0x1df/0x250 [ 552.081618][ T9910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.081640][ T9910] ? rw_verify_area+0x258/0x650 [ 552.081665][ T9910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.081686][ T9910] vfs_read+0x1fd/0x980 [ 552.081716][ T9910] ? __pfx___mutex_lock+0x10/0x10 [ 552.081741][ T9910] ? __pfx_vfs_read+0x10/0x10 [ 552.081767][ T9910] ? __fget_files+0x2a/0x420 [ 552.081800][ T9910] ? __fget_files+0x3a0/0x420 [ 552.081827][ T9910] ? __fget_files+0x2a/0x420 [ 552.081865][ T9910] ksys_read+0x145/0x250 [ 552.081897][ T9910] ? __pfx_ksys_read+0x10/0x10 [ 552.081926][ T9910] ? do_syscall_64+0xba/0x210 [ 552.081959][ T9910] do_syscall_64+0xf6/0x210 [ 552.081983][ T9910] ? clear_bhb_loop+0x45/0xa0 [ 552.082006][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.082025][ T9910] RIP: 0033:0x7ff32b78d37c [ 552.082043][ T9910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 552.082060][ T9910] RSP: 002b:00007ff32c640030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.082081][ T9910] RAX: ffffffffffffffda RBX: 00007ff32b9b5fa0 RCX: 00007ff32b78d37c [ 552.082095][ T9910] RDX: 000000000000000f RSI: 00007ff32c6400a0 RDI: 0000000000000004 [ 552.082107][ T9910] RBP: 00007ff32c640090 R08: 0000000000000000 R09: 0000000000000000 [ 552.082119][ T9910] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 552.082130][ T9910] R13: 0000000000000000 R14: 00007ff32b9b5fa0 R15: 00007ffeda134388 [ 552.082162][ T9910] [ 552.564838][ T9920] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 552.662060][ T9921] syz.3.1139 (9921): drop_caches: 2 [ 552.662477][ T9921] syz.3.1139 (9921): drop_caches: 2 [ 552.715082][ T59] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 552.724755][ T47] m920x_read = error: -19 [ 552.724778][ T47] dvb-usb: error -19 while querying for an remote control event. [ 552.803990][ T5880] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 552.888115][ T5906] m920x_read = error: -19 [ 552.888257][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 552.961327][ T5880] usb 2-1: config 16 has an invalid interface number: 168 but max is 0 [ 552.961357][ T5880] usb 2-1: config 16 has no interface number 0 [ 552.961397][ T5880] usb 2-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 552.961425][ T5880] usb 2-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 552.961467][ T5880] usb 2-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 553.054194][ T5906] m920x_read = error: -19 [ 553.058924][ T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.244331][ T5906] dvb-usb: error -19 while querying for an remote control event. [ 553.578167][ T47] m920x_read = error: -19 [ 553.622687][ T47] dvb-usb: error -19 while querying for an remote control event. [ 553.697009][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.708834][ T59] usb 5-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.722369][ T9920] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 553.729725][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 553.739883][ T59] usb 5-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 553.751844][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.756938][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 553.760325][ T5880] HFC-S_USB 2-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 553.766789][ C1] ------------[ cut here ]------------ [ 553.778479][ T59] usb 5-1: config 0 descriptor?? [ 553.781008][ C1] URB ffff8880213c8700 submitted while active [ 553.792843][ C1] WARNING: CPU: 1 PID: 9882 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfa8/0x1870 [ 553.795183][ T59] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 553.802420][ C1] Modules linked in: [ 553.815756][ C1] CPU: 1 UID: 0 PID: 9882 Comm: syz.0.1127 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 553.827773][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 553.837860][ C1] RIP: 0010:usb_submit_urb+0xfa8/0x1870 [ 553.843448][ C1] Code: 00 eb 5c e8 0a f2 b1 fa e9 09 f1 ff ff e8 00 f2 b1 fa c6 05 f4 d6 59 08 01 90 48 c7 c7 c0 8f 11 8c 48 89 de e8 29 4e 76 fa 90 <0f> 0b 90 90 e9 d0 f0 ff ff e8 da f1 b1 fa eb 11 e8 d3 f1 b1 fa bd [ 553.863283][ C1] RSP: 0018:ffffc90000a087b8 EFLAGS: 00010046 [ 553.869368][ C1] RAX: 0fe10f53cf3f0f00 RBX: ffff8880213c8700 RCX: 0000000000040000 [ 553.877347][ C1] RDX: ffffc90002432000 RSI: 0000000000039a8b RDI: 0000000000039a8c [ 553.885330][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 553.893310][ C1] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 1ffff1100b81610a [ 553.901297][ C1] R13: dffffc0000000000 R14: ffff8880213c8708 R15: 0000000000000820 [ 553.909277][ C1] FS: 0000000000000000(0000) GS:ffff888126200000(0000) knlGS:0000000000000000 [ 553.918215][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.924805][ C1] CR2: 0000001b2f908ff8 CR3: 000000002e956000 CR4: 00000000003526f0 [ 553.932795][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 553.940774][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 553.948758][ C1] Call Trace: [ 553.952047][ C1] [ 553.954917][ C1] ? kcov_remote_start+0x97/0x7f0 [ 553.959971][ C1] cm109_urb_irq_callback+0x718/0xc80 [ 553.965369][ C1] __usb_hcd_giveback_urb+0x417/0x690 [ 553.970773][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 553.976604][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 553.982653][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 553.988050][ C1] dummy_timer+0x862/0x4550 [ 553.992601][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 553.997983][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 554.003566][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 554.008522][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 554.013471][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 554.018441][ C1] __hrtimer_run_queues+0x529/0xc60 [ 554.023674][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 554.029412][ C1] ? read_tsc+0x9/0x20 [ 554.033495][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 554.039313][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 554.044448][ C1] handle_softirqs+0x283/0x870 [ 554.049232][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 554.054017][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 554.059336][ C1] __irq_exit_rcu+0xca/0x1f0 [ 554.063945][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 554.069174][ C1] irq_exit_rcu+0x9/0x30 [ 554.073438][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 554.079086][ C1] [ 554.082023][ C1] [ 554.084964][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 554.090948][ C1] RIP: 0010:__kasan_check_byte+0x2d/0x40 [ 554.096595][ C1] Code: 00 41 56 53 48 89 f3 49 89 fe e8 1e 12 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 b6 03 00 00 89 d8 5b <41> 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 554.116468][ C1] RSP: 0018:ffffc9000beff288 EFLAGS: 00000202 [ 554.122542][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0fe10f53cf3f0f00 [ 554.130522][ C1] RDX: 0000000000000000 RSI: ffffffff8171aa12 RDI: 1ffffffff1be770c [ 554.138501][ C1] RBP: ffffffff8171a9f5 R08: 0000000000000000 R09: 0000000000000000 [ 554.146479][ C1] R10: ffffc9000beff458 R11: ffffffff81acbaf0 R12: 0000000000000002 [ 554.154461][ C1] R13: ffffffff8df3b860 R14: ffffffff8df3b860 R15: 0000000000000000 [ 554.162444][ C1] ? unwind_next_frame+0xa5/0x2390 [ 554.167658][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 554.173827][ C1] ? unwind_next_frame+0xc2/0x2390 [ 554.178954][ C1] lock_acquire+0x8d/0x360 [ 554.183393][ C1] ? unwind_next_frame+0xa5/0x2390 [ 554.188512][ C1] ? usb_gadget_unregister_driver+0x4e/0x70 [ 554.194424][ C1] ? unwind_next_frame+0xa5/0x2390 [ 554.199542][ C1] unwind_next_frame+0xc2/0x2390 [ 554.204496][ C1] ? unwind_next_frame+0xa5/0x2390 [ 554.209627][ C1] ? unwind_next_frame+0xa5/0x2390 [ 554.214756][ C1] ? bus_remove_driver+0x226/0x2f0 [ 554.219889][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 554.226063][ C1] arch_stack_walk+0x11c/0x150 [ 554.230844][ C1] ? usb_gadget_unregister_driver+0x4e/0x70 [ 554.236763][ C1] stack_trace_save+0x9c/0xe0 [ 554.241450][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 554.246828][ C1] ? __lock_acquire+0xaac/0xd20 [ 554.251695][ C1] kasan_save_track+0x3e/0x80 [ 554.256387][ C1] ? kasan_save_track+0x3e/0x80 [ 554.261250][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 554.266025][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 554.271585][ C1] ? kobject_uevent_env+0x27c/0x8c0 [ 554.276802][ C1] ? device_release_driver_internal+0x46c/0x7c0 [ 554.283060][ C1] ? driver_detach+0x1f3/0x2d0 [ 554.287836][ C1] ? bus_remove_driver+0x226/0x2f0 [ 554.292970][ C1] ? usb_gadget_unregister_driver+0x4e/0x70 [ 554.298921][ C1] ? kobject_uevent_env+0x27c/0x8c0 [ 554.304141][ C1] __kasan_kmalloc+0x93/0xb0 [ 554.308777][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 554.314168][ C1] ? kobject_uevent_env+0x27c/0x8c0 [ 554.319383][ C1] ? __pfx_dev_uevent_name+0x10/0x10 [ 554.324691][ C1] kobject_uevent_env+0x27c/0x8c0 [ 554.329732][ C1] ? gadget_unbind_driver+0x315/0x430 [ 554.335122][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 554.340864][ C1] device_release_driver_internal+0x46c/0x7c0 [ 554.346951][ C1] driver_detach+0x1f3/0x2d0 [ 554.351556][ C1] bus_remove_driver+0x226/0x2f0 [ 554.356517][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 554.362267][ C1] raw_release+0xd7/0x260 [ 554.366625][ C1] ? __pfx_raw_release+0x10/0x10 [ 554.371578][ C1] __fput+0x449/0xa70 [ 554.375581][ C1] task_work_run+0x1d1/0x260 [ 554.380194][ C1] ? __pfx_task_work_run+0x10/0x10 [ 554.385322][ C1] ? kmem_cache_free+0x192/0x3f0 [ 554.390291][ C1] do_exit+0x8d6/0x2550 [ 554.394464][ C1] ? do_raw_spin_lock+0x121/0x290 [ 554.399498][ C1] ? __pfx_do_exit+0x10/0x10 [ 554.404095][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 554.409497][ C1] do_group_exit+0x21c/0x2d0 [ 554.414099][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.419305][ C1] get_signal+0x125e/0x1310 [ 554.423837][ C1] arch_do_signal_or_restart+0x95/0x780 [ 554.429420][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 554.435609][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 554.441517][ C1] syscall_exit_to_user_mode+0x8b/0x120 [ 554.447077][ C1] do_syscall_64+0x103/0x210 [ 554.451677][ C1] ? clear_bhb_loop+0x45/0xa0 [ 554.456371][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.462282][ C1] RIP: 0033:0x7f1eab78e969 [ 554.466701][ C1] Code: Unable to access opcode bytes at 0x7f1eab78e93f. [ 554.473727][ C1] RSP: 002b:00007f1eac64f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 554.482167][ C1] RAX: fffffffffffffe00 RBX: 00007f1eab9b5fa8 RCX: 00007f1eab78e969 [ 554.490155][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1eab9b5fa8 [ 554.498162][ C1] RBP: 00007f1eab9b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 554.506149][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1eab9b5fac [ 554.514132][ C1] R13: 0000000000000000 R14: 00007ffc951b0ef0 R15: 00007ffc951b0fd8 [ 554.522127][ C1] [ 554.525162][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 554.532455][ C1] CPU: 1 UID: 0 PID: 9882 Comm: syz.0.1127 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 554.544428][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 554.554483][ C1] Call Trace: [ 554.557762][ C1] [ 554.560609][ C1] dump_stack_lvl+0x99/0x250 [ 554.565212][ C1] ? __asan_memcpy+0x40/0x70 [ 554.569812][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.575023][ C1] ? __pfx__printk+0x10/0x10 [ 554.579642][ C1] panic+0x2db/0x790 [ 554.583565][ C1] ? __pfx_panic+0x10/0x10 [ 554.588016][ C1] __warn+0x31b/0x4b0 [ 554.592018][ C1] ? usb_submit_urb+0xfa8/0x1870 [ 554.596983][ C1] ? usb_submit_urb+0xfa8/0x1870 [ 554.601921][ C1] report_bug+0x2be/0x4f0 [ 554.606255][ C1] ? usb_submit_urb+0xfa8/0x1870 [ 554.611207][ C1] ? usb_submit_urb+0xfa8/0x1870 [ 554.616147][ C1] ? usb_submit_urb+0xfaa/0x1870 [ 554.621095][ C1] handle_bug+0x84/0x160 [ 554.625353][ C1] exc_invalid_op+0x1a/0x50 [ 554.629894][ C1] asm_exc_invalid_op+0x1a/0x20 [ 554.634775][ C1] RIP: 0010:usb_submit_urb+0xfa8/0x1870 [ 554.640323][ C1] Code: 00 eb 5c e8 0a f2 b1 fa e9 09 f1 ff ff e8 00 f2 b1 fa c6 05 f4 d6 59 08 01 90 48 c7 c7 c0 8f 11 8c 48 89 de e8 29 4e 76 fa 90 <0f> 0b 90 90 e9 d0 f0 ff ff e8 da f1 b1 fa eb 11 e8 d3 f1 b1 fa bd [ 554.659936][ C1] RSP: 0018:ffffc90000a087b8 EFLAGS: 00010046 [ 554.666024][ C1] RAX: 0fe10f53cf3f0f00 RBX: ffff8880213c8700 RCX: 0000000000040000 [ 554.674004][ C1] RDX: ffffc90002432000 RSI: 0000000000039a8b RDI: 0000000000039a8c [ 554.681979][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 554.689952][ C1] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 1ffff1100b81610a [ 554.697935][ C1] R13: dffffc0000000000 R14: ffff8880213c8708 R15: 0000000000000820 [ 554.705929][ C1] ? usb_submit_urb+0xfa7/0x1870 [ 554.710908][ C1] ? kcov_remote_start+0x97/0x7f0 [ 554.715947][ C1] cm109_urb_irq_callback+0x718/0xc80 [ 554.721343][ C1] __usb_hcd_giveback_urb+0x417/0x690 [ 554.726740][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 554.732562][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 554.738487][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 554.743891][ C1] dummy_timer+0x862/0x4550 [ 554.748439][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 554.753833][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 554.759417][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 554.764399][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 554.769356][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 554.774311][ C1] __hrtimer_run_queues+0x529/0xc60 [ 554.779547][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 554.785301][ C1] ? read_tsc+0x9/0x20 [ 554.789422][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 554.795242][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 554.800389][ C1] handle_softirqs+0x283/0x870 [ 554.805168][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 554.809986][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 554.815292][ C1] __irq_exit_rcu+0xca/0x1f0 [ 554.819915][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 554.825227][ C1] irq_exit_rcu+0x9/0x30 [ 554.829486][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 554.835135][ C1] [ 554.838077][ C1] [ 554.841027][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 554.847019][ C1] RIP: 0010:__kasan_check_byte+0x2d/0x40 [ 554.852664][ C1] Code: 00 41 56 53 48 89 f3 49 89 fe e8 1e 12 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 b6 03 00 00 89 d8 5b <41> 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 554.872285][ C1] RSP: 0018:ffffc9000beff288 EFLAGS: 00000202 [ 554.878368][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0fe10f53cf3f0f00 [ 554.886355][ C1] RDX: 0000000000000000 RSI: ffffffff8171aa12 RDI: 1ffffffff1be770c [ 554.894331][ C1] RBP: ffffffff8171a9f5 R08: 0000000000000000 R09: 0000000000000000 [ 554.902302][ C1] R10: ffffc9000beff458 R11: ffffffff81acbaf0 R12: 0000000000000002 [ 554.910282][ C1] R13: ffffffff8df3b860 R14: ffffffff8df3b860 R15: 0000000000000000 [ 554.918264][ C1] ? unwind_next_frame+0xa5/0x2390 [ 554.923388][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 554.929551][ C1] ? unwind_next_frame+0xc2/0x2390 [ 554.934679][ C1] lock_acquire+0x8d/0x360 [ 554.939111][ C1] ? unwind_next_frame+0xa5/0x2390 [ 554.944241][ C1] ? usb_gadget_unregister_driver+0x4e/0x70 [ 554.950144][ C1] ? unwind_next_frame+0xa5/0x2390 [ 554.955253][ C1] unwind_next_frame+0xc2/0x2390 [ 554.960192][ C1] ? unwind_next_frame+0xa5/0x2390 [ 554.965321][ C1] ? unwind_next_frame+0xa5/0x2390 [ 554.970472][ C1] ? bus_remove_driver+0x226/0x2f0 [ 554.975604][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 554.981762][ C1] arch_stack_walk+0x11c/0x150 [ 554.986569][ C1] ? usb_gadget_unregister_driver+0x4e/0x70 [ 554.992491][ C1] stack_trace_save+0x9c/0xe0 [ 554.997177][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 555.002552][ C1] ? __lock_acquire+0xaac/0xd20 [ 555.007407][ C1] kasan_save_track+0x3e/0x80 [ 555.012099][ C1] ? kasan_save_track+0x3e/0x80 [ 555.016967][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 555.021748][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 555.027305][ C1] ? kobject_uevent_env+0x27c/0x8c0 [ 555.032528][ C1] ? device_release_driver_internal+0x46c/0x7c0 [ 555.038779][ C1] ? driver_detach+0x1f3/0x2d0 [ 555.043556][ C1] ? bus_remove_driver+0x226/0x2f0 [ 555.048674][ C1] ? usb_gadget_unregister_driver+0x4e/0x70 [ 555.054627][ C1] ? kobject_uevent_env+0x27c/0x8c0 [ 555.059847][ C1] __kasan_kmalloc+0x93/0xb0 [ 555.064450][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 555.069833][ C1] ? kobject_uevent_env+0x27c/0x8c0 [ 555.075049][ C1] ? __pfx_dev_uevent_name+0x10/0x10 [ 555.080355][ C1] kobject_uevent_env+0x27c/0x8c0 [ 555.085412][ C1] ? gadget_unbind_driver+0x315/0x430 [ 555.090805][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 555.096544][ C1] device_release_driver_internal+0x46c/0x7c0 [ 555.102634][ C1] driver_detach+0x1f3/0x2d0 [ 555.107235][ C1] bus_remove_driver+0x226/0x2f0 [ 555.112208][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 555.117940][ C1] raw_release+0xd7/0x260 [ 555.122289][ C1] ? __pfx_raw_release+0x10/0x10 [ 555.127234][ C1] __fput+0x449/0xa70 [ 555.131236][ C1] task_work_run+0x1d1/0x260 [ 555.135837][ C1] ? __pfx_task_work_run+0x10/0x10 [ 555.140957][ C1] ? kmem_cache_free+0x192/0x3f0 [ 555.145922][ C1] do_exit+0x8d6/0x2550 [ 555.150106][ C1] ? do_raw_spin_lock+0x121/0x290 [ 555.155137][ C1] ? __pfx_do_exit+0x10/0x10 [ 555.159733][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.165128][ C1] do_group_exit+0x21c/0x2d0 [ 555.169741][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.174958][ C1] get_signal+0x125e/0x1310 [ 555.179502][ C1] arch_do_signal_or_restart+0x95/0x780 [ 555.185076][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 555.191253][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 555.197196][ C1] syscall_exit_to_user_mode+0x8b/0x120 [ 555.202752][ C1] do_syscall_64+0x103/0x210 [ 555.207399][ C1] ? clear_bhb_loop+0x45/0xa0 [ 555.212087][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.217988][ C1] RIP: 0033:0x7f1eab78e969 [ 555.222414][ C1] Code: Unable to access opcode bytes at 0x7f1eab78e93f. [ 555.229441][ C1] RSP: 002b:00007f1eac64f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 555.237866][ C1] RAX: fffffffffffffe00 RBX: 00007f1eab9b5fa8 RCX: 00007f1eab78e969 [ 555.245852][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1eab9b5fa8 [ 555.254008][ C1] RBP: 00007f1eab9b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 555.262003][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1eab9b5fac [ 555.269994][ C1] R13: 0000000000000000 R14: 00007ffc951b0ef0 R15: 00007ffc951b0fd8 [ 555.277986][ C1] [ 555.281349][ C1] Kernel Offset: disabled [ 555.285687][ C1] Rebooting in 86400 seconds..