last executing test programs: 14m33.222663773s ago: executing program 0 (id=3277): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) socket$rxrpc(0x21, 0x2, 0x2) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="000504000000abe763a8b1f454a7e6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="402c0400000052677e708fee4668d35c97f78c257faefad8080fbc7bb27fc239276eba33ea0f30547be36530f6ebd13203"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="40310400000037a20000"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0) socket$caif_stream(0x25, 0x1, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0) connect$vsock_stream(r4, &(0x7f0000000580)={0x28, 0x0, 0x2710}, 0x10) accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 14m23.504744492s ago: executing program 0 (id=3301): syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x80, 0x8, 0x3, 0x6, {{0x25, 0x4, 0x2, 0x4, 0x94, 0x64, 0x0, 0x4, 0x0, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}, {[@cipso={0x86, 0x10, 0xffffffffffffffff, [{0x4, 0xa, "a123e2ea5099527e"}]}, @rr={0x7, 0x27, 0xe2, [@remote, @remote, @broadcast, @rand_addr=0x64010102, @remote, @local, @loopback, @loopback, @remote]}, @end, @lsrr={0x83, 0xb, 0x23, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0xbc, [@rand_addr=0x64010100, @loopback, @loopback, @local, @private=0xa010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x17, 0x2, [{0x2, 0x9, "7d9f46379c10fc"}, {0x5, 0x8, "304519022d24"}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={@rand_addr, @local}, &(0x7f0000000040)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x80000001) 14m19.93292322s ago: executing program 0 (id=3313): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 14m19.371233294s ago: executing program 0 (id=3316): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1201010000f7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000079e74bf6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 14m15.963829056s ago: executing program 0 (id=3331): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 14m15.145519316s ago: executing program 0 (id=3335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x200013, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000000000000000000000aa00"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) 14m13.54252967s ago: executing program 32 (id=3335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x200013, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000000000000000000000aa00"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) 12.005744472s ago: executing program 5 (id=6305): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r4}, 0x38) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010080000000406d0422c2000000000001092207000905810c70906a4ac08a"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket(0x1e, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000206030000000000ffffffe10100000012c8521c8c6ba82e9a6122246b8ae57a75074cbb80735901df053e7af886be51f936097d8835ec960f290c9f4aaa7c4c46db35d5bd5fac60d089b84729ddfd915486cae7ea1e1548ba3137072bdf68b50cae81a855a64b7fff6e96457976fda300f1e329228a073755216024473716657e705e265c3781ad8cbb30fdbf31e14adb7c877f8001ff89d53abee153121a133ed51b769e9c8b2a78e7863b389153fa7a3f5a8d18c3c2328c80a1b66da3234ffce2314af27ee72732d4bbd0103d3ef419e45400e91538076f46ef6080d4b6bc17360ddabaaa4d58"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x8, 0x4, 0x4, 0x7fffffff}]}) 9.90148103s ago: executing program 1 (id=6310): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x15, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.455782599s ago: executing program 1 (id=6312): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) (fail_nth: 1) 8.450343901s ago: executing program 5 (id=6313): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000b00)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000000c0)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xffffffffffffff7f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x56a, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x4, 0xa6]}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271e, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.281425854s ago: executing program 1 (id=6314): io_uring_setup(0x5d29, &(0x7f00000001c0)={0x0, 0xee, 0x80, 0x1, 0xf0}) openat$sndseq(0xffffff9c, &(0x7f0000000400), 0x20200) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 8.042616121s ago: executing program 1 (id=6315): io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) socket$inet(0x2, 0x3, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x56442, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 7.757254916s ago: executing program 2 (id=6316): io_uring_setup(0x5d29, &(0x7f00000001c0)={0x0, 0xee, 0x80, 0x1, 0xf0}) openat$sndseq(0xffffff9c, &(0x7f0000000400), 0x20200) fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x0) shutdown(r0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 7.049538531s ago: executing program 5 (id=6317): openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() fsopen(&(0x7f0000000040)='afs\x00', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x4004af07, &(0x7f0000000280)) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804c0c0}, 0x0) close(r4) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 6.55405936s ago: executing program 2 (id=6318): prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8000000000000000, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x8ef2, 0x4000, 0x3, 0x1}, &(0x7f0000000380)=0x0, &(0x7f0000000440)=0x0) r3 = userfaultfd(0x801) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl2\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xc, &(0x7f0000001540)=ANY=[@ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendfile(r5, r6, &(0x7f0000000100)=0x100000001, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0xf1f6d3441bc911c8, &(0x7f0000000280)=0x54c) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3efd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) get_robust_list(0x0, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000500)=ANY=[], 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_format(r8, &(0x7f0000000100)='-1\x00', 0x3) r9 = socket$inet(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0xfffffffd}], 0x1, 0x48, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2004c881) ioctl$UFFDIO_COPY(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000adb000/0x2000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x2000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) 6.538583658s ago: executing program 5 (id=6319): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1ff, 0xfc, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x5af, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2066ab"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sync() sync() pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) unshare(0x44040000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioprio_set$uid(0x3, 0x0, 0x0) 6.394267851s ago: executing program 4 (id=6320): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x2}) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x112080, 0xe8) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xb9, 'syz1\x00', @bcast, 0xd, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8041, 0x0) write$binfmt_aout(r6, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) dup3(0xffffffffffffffff, r6, 0x0) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) 5.934468511s ago: executing program 4 (id=6321): socket$inet(0x2, 0x3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4004020}, 0x0) msgget(0x3, 0x292) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="0aba6dbd67045f60ac80d46e8f67fb4dfdfc6991ae26d3d18a7de5c989d1646357aab0e896095ea6236a3415695a6216eb95d704d8b1f8a41d389f70919996f1eebb59818b1fe50a396a9848997b36802b43b4b3c5b9423b7a921cafd9e665fc7f00d7bd6e951155f7c4d5dae366be79b021274c7ce05446d193b842a961a8a37e5f2028d218a32b75c4a973bd", 0xfffffffffffffd8e) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) acct(&(0x7f0000000240)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000280)={0x43, 0x9, 0x2, {0x4, 0xffffffff, 0xe, 0x5, 0x8, 0x2e9, 0x5, 0xfffffffffffffff8, 0x6}}, 0x43) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) open_tree(r5, &(0x7f0000000200)='./file0\x00', 0x88100) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) io_setup(0xedf, &(0x7f0000001740)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) 5.08104176s ago: executing program 1 (id=6323): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r4}, 0x38) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010080000000406d0422c2000000000001092207000905810c70906a4ac08a"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket(0x1e, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000206030000000000ffffffe10100000012c8521c8c6ba82e9a6122246b8ae57a75074cbb80735901df053e7af886be51f936097d8835ec960f290c9f4aaa7c4c46db35d5bd5fac60d089b84729ddfd915486cae7ea1e1548ba3137072bdf68b50cae81a855a64b7fff6e96457976fda300f1e329228a073755216024473716657e705e265c3781ad8cbb30fdbf31e14adb7c877f8001ff89d53abee153121a133ed51b769e9c8b2a78e7863b389153fa7a3f5a8d18c3c2328c80a1b66da3234ffce2314af27ee72732d4bbd0103d3ef419e45400e91538076f46ef6080d4b6bc17360ddabaaa4d58"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x8, 0x4, 0x4, 0x7fffffff}]}) 5.060454525s ago: executing program 3 (id=6324): r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x100000d, 0x3032, 0xffffffffffffffff, 0xffffe000) (async) mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x100000d, 0x3032, 0xffffffffffffffff, 0xffffe000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) (async) r1 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000000c0)='dirsync\x00', 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000dc0)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) r6 = memfd_create(&(0x7f0000000500)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe\xd4cHr\xaf\xdc\xa0\xb04\x97T5\x957\xec\xfb\xe6|\xdc\xe4h\xfc\x14\x06\xb5\x03\x8a\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84\b\x000\xdd\xcbS\x15\xfcp\x11\xdaiL{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eSa\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xbf\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\x96^r\xd4\xb5\t\\\xdb\xc6\x1e\x03G\x00\x04\x00\x00\xbc\xac\x18\xb2\xc8\xf8)\x03\b\x9dh\xcb)\x1df\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00d#\xfd\xc0\x92\x87d\xb6=\xda\x9c\xc2\xf0m\xaa@\xfa\x86\x88)\xac\x95U\x16\x14#\xfaBB\x19&6\x870\xeck\xe5\x98\xe1<\xec\xe0:\xdb\xb0\xcb\xf3\xf8\x10t\xe5\x81Y\xaf\x7f\x94k\x00\x00\xba\'\x1a\xdf\xed ^\x14\xa0\xe5b$\xa4\xda\x10F.fK*\xc5\x00\x00\x00\x00', 0x4) fallocate(r6, 0x3, 0x3, 0xffffffff) alarm(0x7) r7 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) alarm(0x2) (async) alarm(0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0xf503, 0x0) tkill(0x0, 0x1d) ppoll(&(0x7f0000002280)=[{r7, 0x800}, {r7, 0xd08a}], 0x2, 0x0, 0x0, 0x0) alarm(0x5) mq_timedsend(r7, 0x0, 0x0, 0x4, 0x0) (async) mq_timedsend(r7, 0x0, 0x0, 0x4, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="b700000000000000180a000000000000000000000000000095000000000000003c72229bb8e01bcde76472e9e1824aa58898733de356f00d4d6c054067b7539439e56d4668d5fa68e5b6999fbd569d3596a3b2fc61c59e47c1a84ce14797b191784e15b3193626"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="b700000000000000180a000000000000000000000000000095000000000000003c72229bb8e01bcde76472e9e1824aa58898733de356f00d4d6c054067b7539439e56d4668d5fa68e5b6999fbd569d3596a3b2fc61c59e47c1a84ce14797b191784e15b3193626"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.501688728s ago: executing program 3 (id=6325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() fsopen(&(0x7f0000000040)='afs\x00', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c0}, 0x0) 4.107090335s ago: executing program 3 (id=6326): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x24040880) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r3}, 0x38) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010080000000406d0422c2000000000001092207000905810c70906a4ac08a"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffe3) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000206030000000000ffffffe10100000012c8521c8c6ba82e9a6122246b8ae57a75074cbb80735901df053e7af886be51f936097d8835ec960f290c9f4aaa7c4c46db35d5bd5fac60d089b84729ddfd915486cae7ea1e1548ba3137072bdf68b50cae81a855a64b7fff6e96457976fda300f1e329228a073755216024473716657e705e265c3781ad8cbb30fdbf31e14adb7c877f8001ff89d53abee153121a133ed51b769e9c8b2a78e7863b389153fa7a3f5a8d18c3c2328c80a1b66da3234ffce2314af27ee72732d4bbd0103d3ef419e45400e91538076f46ef6080d4b6bc17360ddabaaa4d58"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) 3.726086993s ago: executing program 2 (id=6327): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x300) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/42) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/42) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x12400, 0x0, 0x8}, 0x18) (async) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x12400, 0x0, 0x8}, 0x18) faccessat(r1, &(0x7f0000000100)='./file0\x00', 0x8) syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) (async) r2 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x7, 0x26e2, 0x4, {0xc, @win={{0x0, 0x2, 0x8, 0x6}, 0x0, 0x7fff, &(0x7f0000000180)={{0xfffffffc, 0x7, 0x21921bda, 0x200}}, 0x8aa6, &(0x7f00000001c0)="5472865b905bc8ede80c0a2ba3fba040e4f289b3f24ed04cdcba93243909ba13a0e3f146f0ca1b525efc3f96b8abbbb9f27b551a84cce76d6d2555c00831594b9219699200a335bb7c86622198d278a18cd9975228a37a2d7420337a5dd471c37a03f85a4f0bb52e8edd213fb900ef4b78188544cca1382b3b50862cc10e2a43", 0x5}}, 0x5}) r3 = syz_io_uring_setup(0x13d5, &(0x7f0000000340)={0x0, 0x60c3, 0x2000, 0x0, 0x16}, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_setup(0x6c37, &(0x7f0000000440)={0x0, 0x3a72, 0x4000, 0x0, 0x178, 0x0, r3}, &(0x7f00000004c0), &(0x7f0000000500)) (async) syz_io_uring_setup(0x6c37, &(0x7f0000000440)={0x0, 0x3a72, 0x4000, 0x0, 0x178, 0x0, r3}, &(0x7f00000004c0), &(0x7f0000000500)) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x3802008, &(0x7f00000005c0)={[{@verity_on}, {@xino_auto}], [{@euid_gt={'euid>', 0xee00}}, {@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, ',-%#'}}, {@audit}]}) (async) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x3802008, &(0x7f00000005c0)={[{@verity_on}, {@xino_auto}], [{@euid_gt={'euid>', 0xee00}}, {@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, ',-%#'}}, {@audit}]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2440f22}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x1, 0x200, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000020}, 0x4060040) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000740)) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000740)) r4 = syz_io_uring_setup(0x73ff, &(0x7f00000007c0)={0x0, 0x76e6, 0x40, 0x1, 0x19}, &(0x7f0000000840), &(0x7f0000000880)) open_by_handle_at(r0, &(0x7f00000008c0)=@xfs={0x1c, 0x81, {0xffffffffffffffdf, 0x3, 0x8, 0x8}}, 0x64040) getxattr(&(0x7f0000000900)='./file1\x00', &(0x7f0000000940)=@known='system.advise\x00', &(0x7f0000000980)=""/110, 0x6e) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000a00)={0x0, @data}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) close_range(r7, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000b00), r8) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000b00), r8) r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b80)={'wlan1\x00'}) socket$inet6(0xa, 0x5, 0x10000) (async) socket$inet6(0xa, 0x5, 0x10000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f0000000bc0)={0x80, 0x0, '\x00', {0x0, @bt={0x5, 0x9, 0x1, 0x1, 0x2, 0x0, 0x10000, 0x3a48, 0xdfd1, 0x7, 0x3, 0x3, 0x2, 0x5, 0xb, 0x7, {0x8, 0x7}, 0x7, 0xff}}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000c80)={0x0, {0x96b, 0x708}}) socket$inet6(0xa, 0x4, 0xed9) (async) socket$inet6(0xa, 0x4, 0xed9) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000cc0), 0x13f, 0x5}}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000d40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86, 0x0, 0xff, 0x8, 0xda4, 0x8}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000d40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86, 0x0, 0xff, 0x8, 0xda4, 0x8}, 0x20) 3.629003956s ago: executing program 2 (id=6328): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 1) 3.563667612s ago: executing program 4 (id=6329): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x80802, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r3}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x1a6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r3}, 0x38) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000a00)={&(0x7f0000002000)={[{&(0x7f0000000100)="c54657d44b352b5f4b147624", 0xc}, {&(0x7f00000003c0)="cdc7e937258a01850e5c154584370f527b79ddf2c9326ea3bf6550a6b7a1015fb5aa5b7c5ed71694ac73f7aa99a08a17831395f8ad4e269372030555f773f98250fd9a40241ffe371888ab98d90032b6690cd1f18a93b0714034b5d83f59d848c361dc7c373444a504ac7f47f49cb725f81767280fe680293a703212fa23d355611bd5b75361da74", 0x88}, {&(0x7f0000000280)="f02e4f469f99588b0ff7bf49bae0552741395ff5288a84222b2efd4e3945ac35cffe457e68621b77ef14a547478f46381ef28f16c3c16a3bc1f7fcee61f8c43e09d63a9058044925e4f6f8ae5c0f5321315d00cfc4804f176599a7c1774c02620a53ca", 0x63, 0x3}, {&(0x7f0000000600)="b1a720106c9b0bcd11bfb121cb3dafaef2215a894b30f15e24af9b56ad33564d3877bdc9d19f4d3c65aa756bb8212585c0f061eddb97a82dda1bd348bcd3bd2cbe368192278a4d8ae1b5c08f13bd64bf19023a1e5dd087db53f266b422bff94c175017096f08eaea8dd89c1429b6fbe8cffb2ae696d2405c86701e2b9fa65eeeb8c3bfa8d63e06a18a47120f56cd34f4a854154fa68e22f13ac8c69542144b3fb6602c4f72d5e0df884b6f8d998f60684e34ee5a0a67d6962880a84781899e45b2d8dcb18f95f4fd6b039eda2549181c8e0884", 0xd3, 0x3}, {&(0x7f0000000480)="26c2889b6b66356eed9bd7bd77edaa5f020ec8fcef10399eff9213a65a82db133c57ac555b5e6502089d30850459f8109fbe90b446bdbc5dc8e55a2644cf5d1f934bb27adf33cd81bcf87da47ed9c76eb3196445bdf656d093dee59c608eceeecc1850917a63c0ac9f3faeb4f22172a794", 0x71, 0x1}, {&(0x7f0000000700)="0674cb5517e1844df63e8c3ca46c2d9c21d72975069e39d73ee18386ad2e6e3b9145799e74df6056642dd2417a424538072010a84323baf4e66611e63b48410cf681ba0c91a7cbce35cc731487bf16ce8913c9f94cab201c3141f3ddc1b20a96b8c7a547d65cf13de4866932000f1356de1c1c606d79a0066dc2bf5ddac90626106626712f8664eed4e1695fbd80bc1536b7eb07c97e54eb8c9ab57c0d87f463cc6eacf419e364f03d296f2ec78a1736d188802a4d8204e22559a3e46a6bb8a77518fe3f582e04c9d2384cd320894f95e83bcb4b818c0ff184b66d5ed9c141a38975d275cac26c85771af72694132dfd01f9358f6518", 0xf6, 0x2}, {&(0x7f0000000800)="0efe0e80f9807ec5b1c497e31941a16920b5b7969792c68f776e51c8d76d95ca524bbc2dd6a85ceb714efbab5425fb6bd3e506b032bf9a652147c51aadd823702053da68cc7c004f782a68f9397189d223c2b710cecaf567e4d06febd1e50e9a69c1f0c8ecb945f8386d484b62e6ab9d986f55dbcffdd144c0380f6cff04406c9ac6fc47bc07cc6759ca2d6a959be16b906d23757d3f647b0c42ea3110eddf71f6defc4d2e1b15bd0b4cb9e92852ee677cae3bfc46847a4cb3242b837a959d213fb67acf01b3ecc7b6bb020a337a5e6924ab13f3238870", 0xd7, 0x1}, {&(0x7f0000000940)="2deff1adf20d09287b58ba255bfab17eb99033d4d48493bf5b96b0b9f7b8a8ba877fdd0d72e7126e751201cf36b4dd5ddb67f61e20b710320b6e81f4abfe9bc8adef12d629e34441", 0x48, 0x1}, {&(0x7f0000000340)="2ae1ef0da2a868a4cc3e320b97cb61b3f47d4a", 0x13, 0x2}]}, 0x9, 0x2}, 0x1) io_setup(0xb4, 0x0) memfd_secret(0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r5, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x6b2e, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 3.083589483s ago: executing program 2 (id=6330): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) 2.098405364s ago: executing program 4 (id=6331): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x24040880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r5}, 0x38) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010080000000406d0422c2000000000001092207000905810c70906a4ac08a"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) r7 = socket(0x1e, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000206030000000000ffffffe10100000012c8521c8c6ba82e9a6122246b8ae57a75074cbb80735901df053e7af886be51f936097d8835ec960f290c9f4aaa7c4c46db35d5bd5fac60d089b84729ddfd915486cae7ea1e1548ba3137072bdf68b50cae81a855a64b7fff6e96457976fda300f1e329228a073755216024473716657e705e265c3781ad8cbb30fdbf31e14adb7c877f8001ff89d53abee153121a133ed51b769e9c8b2a78e7863b389153fa7a3f5a8d18c3c2328c80a1b66da3234ffce2314af27ee72732d4bbd0103d3ef419e45400e91538076f46ef6080d4b6bc17360ddabaaa4d58"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) 1.936715054s ago: executing program 3 (id=6332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000001140)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x775}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, 0x0) r3 = io_uring_setup(0x5878, &(0x7f0000000500)={0x0, 0x1bad, 0x0, 0x2}) syz_io_uring_setup(0x1de6, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x34f, 0x0, r3}, &(0x7f00000000c0), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mknod$loop(0x0, 0x2000, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) semget$private(0x0, 0x4000, 0x0) 1.103428859s ago: executing program 3 (id=6333): openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() fsopen(&(0x7f0000000040)='afs\x00', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x4004af07, &(0x7f0000000280)) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c0}, 0x0) 1.033502365s ago: executing program 5 (id=6334): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.events\x00', 0x275a, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x2, 0x2017}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x0, 0x4}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x1800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 940.614957ms ago: executing program 3 (id=6335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1000000000}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x80}}, 0x0) 849.406335ms ago: executing program 5 (id=6336): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/243, 0xf3}], 0x1) 241.152112ms ago: executing program 2 (id=6337): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 207.943438ms ago: executing program 4 (id=6338): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5de6, 0x4) (async) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002160, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) (async) fcntl$setpipe(r3, 0x407, 0x5) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000b40)={r6, 0xffffffffffffffff, 0x2, 0x1}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYRES16=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x2000000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2410}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x0, 0xa, r7}]}, 0x40}}, 0x4000) 20.278191ms ago: executing program 4 (id=6339): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 0s ago: executing program 1 (id=6340): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r2 = socket(0x18, 0x800, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'ip6_vti0\x00'}}, 0x1e) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000140)) sendfile(r2, r1, 0x0, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x854) write$FUSE_DIRENTPLUS(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="b000ffffffeb0088", @ANYRES32=r3, @ANYRES8=r1], 0xb8) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f0000000100)) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000013c0)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="7d92d7"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): ontrol event. [ 1770.925054][ T45] m920x_read = error: -19 [ 1770.936981][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1770.969202][ T7099] dvmrp0 (unregistering): left allmulticast mode [ 1771.136210][ T45] m920x_read = error: -19 [ 1771.157458][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1771.369071][ T45] m920x_read = error: -19 [ 1771.374562][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1771.456047][ T5831] Bluetooth: hci4: command tx timeout [ 1771.573923][ T45] m920x_read = error: -19 [ 1771.578602][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1771.844422][ T45] m920x_read = error: -19 [ 1771.848793][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1772.117174][ T45] m920x_read = error: -19 [ 1772.148354][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1772.276420][T17322] libceph: connect (1)[c::]:6789 error -101 [ 1772.287459][T17322] libceph: mon0 (1)[c::]:6789 connect error [ 1772.296897][T17322] libceph: connect (1)[c::]:6789 error -101 [ 1772.314199][T27819] ceph: No mds server is up or the cluster is laggy [ 1772.337442][T17322] libceph: mon0 (1)[c::]:6789 connect error [ 1772.393428][ T45] m920x_read = error: -19 [ 1772.404038][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1772.624561][ T45] m920x_read = error: -19 [ 1772.628996][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1772.689543][ T7099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1772.701330][ T7099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1772.711430][ T7099] bond0 (unregistering): Released all slaves [ 1772.729475][T27759] hsr_slave_0: entered promiscuous mode [ 1772.754264][T27759] hsr_slave_1: entered promiscuous mode [ 1772.780009][T27759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1772.789523][T27759] Cannot create hsr debugfs directory [ 1772.801327][ T45] m920x_read = error: -19 [ 1772.805671][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1772.852049][T27802] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1772.877118][T17322] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1772.983264][ T25] m920x_read = error: -19 [ 1772.987660][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1773.292682][ T8] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1773.335833][T17322] usb 3-1: Using ep0 maxpacket: 32 [ 1773.364562][T17322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1773.375724][T17322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1773.386202][T17322] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1773.397392][T17322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.409355][T17322] usb 3-1: config 0 descriptor?? [ 1773.479128][ T25] m920x_read = error: -19 [ 1773.484724][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1773.517445][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1773.551269][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1773.563730][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1773.573649][ T8] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1773.589750][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.615814][ T8] usb 2-1: config 0 descriptor?? [ 1773.656827][ T25] m920x_read = error: -19 [ 1773.661334][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1773.677810][ T5831] Bluetooth: hci4: command tx timeout [ 1773.816559][ T7099] hsr_slave_0: left promiscuous mode [ 1773.848517][ T7099] hsr_slave_1: left promiscuous mode [ 1773.848858][ T25] m920x_read = error: -19 [ 1773.856926][T27824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.874608][T27824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.887682][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1773.920971][ T7099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1773.948605][T17322] ft260 0003:0403:6030.004E: unknown main item tag 0x0 [ 1773.957517][ T7099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1773.980217][ T7099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1774.002036][ T7099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1774.038710][ T7099] veth1_macvtap: left promiscuous mode [ 1774.050089][ T7099] veth0_macvtap: left promiscuous mode [ 1774.061060][ T7099] veth1_vlan: left promiscuous mode [ 1774.073394][ T25] m920x_read = error: -19 [ 1774.081636][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1774.081821][ T7099] veth0_vlan: left promiscuous mode [ 1774.102703][T27826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.128545][T27826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.161671][T17322] ft260 0003:0403:6030.004E: chip code: 6424 8183 [ 1774.172317][ T8] ft260 0003:0403:6030.004F: unknown main item tag 0x0 [ 1774.276498][ T25] m920x_read = error: -19 [ 1774.280875][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1774.378679][T17322] ft260 0003:0403:6030.004E: failed to retrieve system status [ 1774.394418][ T8] ft260 0003:0403:6030.004F: chip code: 6424 8183 [ 1774.444281][T17322] ft260 0003:0403:6030.004E: probe with driver ft260 failed with error -5 [ 1774.463402][ T25] m920x_read = error: -19 [ 1774.477071][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1774.608845][ T8] ft260 0003:0403:6030.004F: failed to retrieve system status [ 1774.626813][ T8] ft260 0003:0403:6030.004F: probe with driver ft260 failed with error -5 [ 1774.682737][ T25] m920x_read = error: -19 [ 1774.687436][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1774.886254][ T25] m920x_read = error: -19 [ 1774.978168][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1775.174376][ T25] m920x_read = error: -19 [ 1775.178734][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1775.388370][ T45] m920x_read = error: -19 [ 1775.392979][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1775.587928][ T45] m920x_read = error: -19 [ 1775.601275][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1775.771850][ T7099] team0 (unregistering): Port device team_slave_1 removed [ 1775.794330][ T45] m920x_read = error: -19 [ 1775.800879][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1775.861270][ T7099] team0 (unregistering): Port device team_slave_0 removed [ 1775.981542][ T5831] Bluetooth: hci4: command tx timeout [ 1776.002878][ T45] m920x_read = error: -19 [ 1776.008767][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1776.221298][ T45] m920x_read = error: -19 [ 1776.228760][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1776.425064][ T45] m920x_read = error: -19 [ 1776.906259][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1777.123261][ T25] m920x_read = error: -19 [ 1777.127630][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1777.334276][ T25] m920x_read = error: -19 [ 1777.342916][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1777.528685][T26328] m920x_read = error: -19 [ 1777.533026][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1777.718925][T26328] m920x_read = error: -19 [ 1777.723291][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1777.913172][T26328] m920x_read = error: -19 [ 1777.917695][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1778.110086][T26328] m920x_read = error: -19 [ 1778.125356][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1778.297864][T26328] m920x_read = error: -19 [ 1778.305523][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1778.314930][T27759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1778.331461][T27759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1778.346297][T27759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1778.367915][T27759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1778.477497][T26328] m920x_read = error: -19 [ 1778.484190][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1778.484980][T27759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1778.516623][T26328] usb 3-1: USB disconnect, device number 101 [ 1778.555793][T17322] usb 2-1: USB disconnect, device number 123 [ 1778.704804][ T25] m920x_read = error: -19 [ 1778.784941][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1778.992731][T27759] 8021q: adding VLAN 0 to HW filter on device team0 [ 1779.015375][T27865] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1779.032680][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.039808][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1779.554133][T26328] m920x_read = error: -19 [ 1779.600697][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.607789][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1779.629096][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1779.672828][T27759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1779.685419][T27759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1779.813516][ T45] m920x_read = error: -19 [ 1780.220723][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1781.139319][ T25] m920x_read = error: -19 [ 1781.149877][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1781.469555][ T45] m920x_read = error: -19 [ 1781.484461][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1781.501248][T27759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1781.646367][T27896] 9pnet_virtio: no channels available for device syz [ 1781.669371][ T45] m920x_read = error: -19 [ 1781.679982][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1781.876803][ T45] m920x_read = error: -19 [ 1781.881246][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1782.058318][ T45] m920x_read = error: -19 [ 1782.068950][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1782.186577][T13795] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1782.239642][T27759] veth0_vlan: entered promiscuous mode [ 1782.265647][ T45] m920x_read = error: -19 [ 1782.269996][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1782.292995][T27759] veth1_vlan: entered promiscuous mode [ 1782.311668][T27759] veth0_macvtap: entered promiscuous mode [ 1782.321357][T27759] veth1_macvtap: entered promiscuous mode [ 1782.332109][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1782.342617][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.978510][T13795] usb 6-1: Using ep0 maxpacket: 32 [ 1782.983749][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1782.986775][ T45] m920x_read = error: -19 [ 1782.995245][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.009332][T13795] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1783.089949][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1783.116588][T13795] usb 6-1: config 0 has no interface number 0 [ 1783.131836][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.146824][T13795] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1783.154804][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.469249][T13795] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1783.472217][ T25] m920x_read = error: -19 [ 1783.478382][T13795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.487348][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1783.505620][T27921] ceph: No mds server is up or the cluster is laggy [ 1783.515255][ T45] libceph: connect (1)[c::]:6789 error -101 [ 1783.521898][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 1783.534347][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.554586][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.638466][T13795] usb 6-1: Product: syz [ 1783.650954][T13795] usb 6-1: Manufacturer: syz [ 1783.658070][T13795] usb 6-1: SerialNumber: syz [ 1783.675036][T13795] usb 6-1: config 0 descriptor?? [ 1783.704904][ T25] m920x_read = error: -19 [ 1783.705333][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.722322][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1783.722969][T13795] smsc75xx v1.0.0 [ 1783.752487][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.786862][T27759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1783.809605][ T25] libceph: connect (1)[c::]:6789 error -101 [ 1783.860082][T27927] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1783.873850][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 1783.904422][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1783.918560][ T25] m920x_read = error: -19 [ 1783.919431][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.922880][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1783.951788][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1783.963174][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.973693][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1783.988192][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.998322][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.010908][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.020842][T27759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.031401][T27759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.051142][T27759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1784.128570][ T25] m920x_read = error: -19 [ 1784.133800][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1784.261662][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1784.808501][T13795] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 1784.822447][T27759] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.832133][T13795] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1784.844129][T27759] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.853000][T27759] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.855699][ T25] m920x_read = error: -19 [ 1784.861807][T13795] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1784.872725][T27759] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.901334][T13795] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1784.945123][T13795] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1784.971359][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1785.040380][T13795] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1785.184547][T13795] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1785.249474][T26328] m920x_read = error: -19 [ 1785.393778][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1785.704223][T26328] m920x_read = error: -19 [ 1785.708596][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1785.904244][T14122] m920x_read = error: -19 [ 1785.909999][T27951] 9pnet_virtio: no channels available for device syz [ 1785.941979][T22137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.950426][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1785.967673][T22137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1786.001778][T22144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1786.018602][T22144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1786.175723][T14122] m920x_read = error: -19 [ 1786.186521][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1786.421112][ T25] m920x_read = error: -19 [ 1786.744405][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1786.947712][ T25] m920x_read = error: -19 [ 1787.135786][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1787.169507][ T117] usb 6-1: USB disconnect, device number 51 [ 1787.328395][ T25] m920x_read = error: -19 [ 1787.332932][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1787.666051][ T117] libceph: connect (1)[c::]:6789 error -101 [ 1787.672137][ T117] libceph: mon0 (1)[c::]:6789 connect error [ 1787.698764][T27972] ceph: No mds server is up or the cluster is laggy [ 1787.734796][T27977] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1787.862729][ T25] m920x_read = error: -19 [ 1787.867095][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1788.044727][ T25] m920x_read = error: -19 [ 1788.049094][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1788.103242][T27983] 9pnet_virtio: no channels available for device syz [ 1788.750057][ T25] m920x_read = error: -19 [ 1788.754428][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1788.963696][ T25] m920x_read = error: -19 [ 1788.968054][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1789.259187][T27993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6081'. [ 1789.271190][T27993] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1789.279934][T27993] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1789.288660][T27993] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1789.297376][T27993] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1789.306147][T27993] vxlan0: entered promiscuous mode [ 1789.311365][T27993] vxlan0: entered allmulticast mode [ 1789.342031][T14122] m920x_read = error: -19 [ 1789.837877][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1790.032622][T14122] m920x_read = error: -19 [ 1790.061863][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1790.764958][ T117] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1790.820228][T28004] 9pnet_virtio: no channels available for device syz [ 1790.842757][T14122] m920x_read = error: -19 [ 1790.862681][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1790.973301][ T117] usb 5-1: Using ep0 maxpacket: 32 [ 1790.980900][ T117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.992057][ T117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1791.001909][ T117] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1791.174122][T13795] libceph: connect (1)[c::]:6789 error -101 [ 1791.181287][T13795] libceph: mon0 (1)[c::]:6789 connect error [ 1791.187577][ T117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.205541][ T117] usb 5-1: config 0 descriptor?? [ 1791.228005][T28010] ceph: No mds server is up or the cluster is laggy [ 1791.280774][T26328] m920x_read = error: -19 [ 1791.294992][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1791.498600][T14122] m920x_read = error: -19 [ 1791.503088][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1791.683791][T26328] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1791.892216][T14122] m920x_read = error: -19 [ 1791.934991][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1792.074454][T26328] usb 6-1: Using ep0 maxpacket: 32 [ 1792.125179][T26328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1792.128244][ T117] usbhid 5-1:0.0: can't add hid device: -71 [ 1792.181343][T14122] m920x_read = error: -19 [ 1792.184650][ T117] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1792.191825][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1792.196300][ T117] usb 5-1: USB disconnect, device number 103 [ 1792.201745][T26328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1792.300214][T26328] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1792.441500][ T25] m920x_read = error: -19 [ 1792.445950][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1792.455870][T26328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.689505][T26328] usb 6-1: config 0 descriptor?? [ 1792.834369][T14122] m920x_read = error: -19 [ 1792.838848][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1792.983054][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1793.186597][T14122] m920x_read = error: -19 [ 1793.191421][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1793.367693][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1793.374696][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.386177][T14122] m920x_read = error: -19 [ 1793.390607][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1793.398413][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1793.409248][ T25] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1793.418753][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.433891][T28015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.443004][ T25] usb 4-1: config 0 descriptor?? [ 1793.449051][T28015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.501525][T26328] ft260 0003:0403:6030.0050: unknown main item tag 0x0 [ 1793.581545][T14122] m920x_read = error: -19 [ 1793.591382][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1793.728619][T26328] ft260 0003:0403:6030.0050: chip code: 6424 8183 [ 1793.742189][T13795] libceph: connect (1)[c::]:6789 error -101 [ 1793.748611][T13795] libceph: mon0 (1)[c::]:6789 connect error [ 1793.809493][T13795] libceph: connect (1)[c::]:6789 error -101 [ 1793.815897][T13795] libceph: mon0 (1)[c::]:6789 connect error [ 1793.822448][T28036] ceph: No mds server is up or the cluster is laggy [ 1793.865514][T14122] m920x_read = error: -19 [ 1793.869950][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1794.053246][T14122] m920x_read = error: -19 [ 1794.057673][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1794.075287][ T25] ft260 0003:0403:6030.0051: unknown main item tag 0x0 [ 1794.233941][T14122] m920x_read = error: -19 [ 1794.238473][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1794.426654][T14122] m920x_read = error: -19 [ 1794.431199][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1794.542003][ T25] ft260 0003:0403:6030.0051: failed to retrieve chip version [ 1794.569650][ T25] ft260 0003:0403:6030.0051: probe with driver ft260 failed with error -5 [ 1794.736261][T14122] m920x_read = error: -19 [ 1794.740755][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1794.765050][ T117] libceph: connect (1)[c::]:6789 error -101 [ 1794.828079][ T117] libceph: mon0 (1)[c::]:6789 connect error [ 1794.857100][T28047] ceph: No mds server is up or the cluster is laggy [ 1794.889804][ T117] usb 4-1: USB disconnect, device number 8 [ 1795.099340][T13795] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1795.142929][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1795.171001][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1795.289809][T26328] ft260 0003:0403:6030.0050: failed to retrieve system status [ 1795.297614][T14122] m920x_read = error: -19 [ 1795.302109][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1795.310054][T26328] ft260 0003:0403:6030.0050: probe with driver ft260 failed with error -71 [ 1795.321052][T26328] usb 6-1: USB disconnect, device number 52 [ 1795.406519][T13795] usb 5-1: Using ep0 maxpacket: 32 [ 1795.421089][T13795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.432203][T13795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.443272][T13795] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1795.452529][T13795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.464676][T13795] usb 5-1: config 0 descriptor?? [ 1795.495304][ T25] m920x_read = error: -19 [ 1795.499924][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1795.719360][T14122] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1796.179014][T14122] usb 3-1: Using ep0 maxpacket: 32 [ 1796.189771][T26328] m920x_read = error: -19 [ 1796.194116][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1796.222895][T14122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.241415][T14122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1796.252718][T14122] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1796.284520][T14122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.436716][T26328] m920x_read = error: -19 [ 1796.441068][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1796.452736][T14122] usb 3-1: config 0 descriptor?? [ 1796.673528][T28064] netlink: 544 bytes leftover after parsing attributes in process `syz.1.6099'. [ 1796.682696][T28064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6099'. [ 1797.097057][ T25] m920x_read = error: -19 [ 1797.101798][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1797.102948][T28062] Cannot find add_set index 0 as target [ 1797.220969][T28065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.346666][T28062] netlink: 'syz.3.6100': attribute type 10 has an invalid length. [ 1797.569070][T28065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.610856][T13795] ft260 0003:0403:6030.0052: unknown main item tag 0x0 [ 1797.720404][ T25] m920x_read = error: -19 [ 1797.725152][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1797.868867][T28071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6102'. [ 1798.381813][T28056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.402983][ T25] m920x_read = error: -19 [ 1798.408128][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1798.450745][T28056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.460359][T13795] ft260 0003:0403:6030.0052: chip code: 6424 8183 [ 1798.824401][ T25] m920x_read = error: -19 [ 1798.830735][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1798.851591][T14122] ft260 0003:0403:6030.0053: unknown main item tag 0x0 [ 1799.106454][T14122] ft260 0003:0403:6030.0053: failed to retrieve chip version [ 1799.247792][ T25] m920x_read = error: -19 [ 1799.261004][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1799.270197][T14122] ft260 0003:0403:6030.0053: probe with driver ft260 failed with error -5 [ 1799.482436][ T25] m920x_read = error: -19 [ 1799.486910][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1799.858053][T14122] m920x_read = error: -19 [ 1800.463958][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1801.042986][T14122] m920x_read = error: -19 [ 1801.043943][T28088] Cannot find add_set index 0 as target [ 1801.239995][T28091] netlink: 'syz.3.6105': attribute type 10 has an invalid length. [ 1801.276685][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1801.297953][T13795] ft260 0003:0403:6030.0052: failed to retrieve system status [ 1801.308044][T13795] ft260 0003:0403:6030.0052: probe with driver ft260 failed with error -71 [ 1801.459823][T14122] m920x_read = error: -19 [ 1801.464213][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1801.672376][ T117] libceph: connect (1)[c::]:6789 error -101 [ 1801.684224][T13795] usb 5-1: USB disconnect, device number 104 [ 1801.695094][ T117] libceph: mon0 (1)[c::]:6789 connect error [ 1801.716186][T28093] ceph: No mds server is up or the cluster is laggy [ 1801.890365][T14122] m920x_read = error: -19 [ 1801.895004][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1802.034893][T28101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6108'. [ 1802.507148][T14122] m920x_read = error: -19 [ 1802.517077][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1802.921671][T14122] m920x_read = error: -19 [ 1802.944306][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1803.174507][T14122] m920x_read = error: -19 [ 1803.184528][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1803.376891][T28113] 9pnet_virtio: no channels available for device syz [ 1803.590085][T14122] m920x_read = error: -19 [ 1803.850616][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1803.951988][T14122] usb 3-1: USB disconnect, device number 102 [ 1804.773342][ T45] m920x_read = error: -19 [ 1804.777715][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1804.999977][T14122] m920x_read = error: -19 [ 1805.052816][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1805.436274][ T45] m920x_read = error: -19 [ 1805.440819][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1805.650053][ T45] m920x_read = error: -19 [ 1805.654581][T14122] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1805.671322][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1805.831690][T14122] usb 5-1: Using ep0 maxpacket: 32 [ 1805.842260][T14122] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1805.930301][T17322] libceph: connect (1)[c::]:6789 error -101 [ 1805.936572][T17322] libceph: mon0 (1)[c::]:6789 connect error [ 1805.938604][T28140] ceph: No mds server is up or the cluster is laggy [ 1805.953214][T14122] usb 5-1: config 0 has no interface number 0 [ 1805.959479][T14122] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1805.966602][ T45] m920x_read = error: -19 [ 1806.089026][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1806.104043][T14122] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1806.132103][T14122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.513282][T17957] m920x_read = error: -19 [ 1806.517882][ T29] audit: type=1326 audit(1740327323.994:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.3.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d8b8d169 code=0x7ffc0000 [ 1806.541759][T17957] dvb-usb: error -19 while querying for an remote control event. [ 1806.801833][ T29] audit: type=1326 audit(1740327323.994:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.3.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d8b8d169 code=0x7ffc0000 [ 1806.840507][ T29] audit: type=1326 audit(1740327324.003:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.3.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66d8b8d169 code=0x7ffc0000 [ 1806.958544][T14122] usb 5-1: Product: syz [ 1806.962739][T14122] usb 5-1: Manufacturer: syz [ 1806.977159][T14122] usb 5-1: SerialNumber: syz [ 1807.005937][T14122] usb 5-1: config 0 descriptor?? [ 1807.012579][T14122] smsc75xx v1.0.0 [ 1807.034972][ T29] audit: type=1326 audit(1740327324.003:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.3.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d8b8d169 code=0x7ffc0000 [ 1807.383127][T28155] 9pnet_virtio: no channels available for device syz [ 1807.809424][T17957] m920x_read = error: -19 [ 1807.813815][T17957] dvb-usb: error -19 while querying for an remote control event. [ 1807.894646][ T29] audit: type=1326 audit(1740327324.003:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.3.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d8b8d169 code=0x7ffc0000 [ 1807.929679][ T29] audit: type=1326 audit(1740327324.003:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.3.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66d8b8d169 code=0x7ffc0000 [ 1807.958520][ T29] audit: type=1326 audit(1740327324.003:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.3.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d8b8d169 code=0x7ffc0000 [ 1808.171938][T17957] m920x_read = error: -19 [ 1808.176647][T17957] dvb-usb: error -19 while querying for an remote control event. [ 1808.429196][T17957] m920x_read = error: -19 [ 1808.578280][ T29] audit: type=1326 audit(1740327324.003:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.3.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d8b8d169 code=0x7ffc0000 [ 1808.625386][T17957] dvb-usb: error -19 while querying for an remote control event. [ 1808.677440][ T29] audit: type=1326 audit(1740327324.003:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.3.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f66d8b8d169 code=0x7ffc0000 [ 1809.109910][T17957] m920x_read = error: -19 [ 1809.114560][T17957] dvb-usb: error -19 while querying for an remote control event. [ 1809.354532][ T29] audit: type=1326 audit(1740327324.013:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.3.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d8b8d169 code=0x7ffc0000 [ 1809.398184][ T45] m920x_read = error: -19 [ 1809.403614][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1809.962673][T17957] m920x_read = error: -19 [ 1809.967067][T17957] dvb-usb: error -19 while querying for an remote control event. [ 1810.374312][T28183] 9pnet_virtio: no channels available for device syz [ 1810.495346][T17957] m920x_read = error: -19 [ 1810.577541][T17957] dvb-usb: error -19 while querying for an remote control event. [ 1810.597102][ T45] libceph: connect (1)[c::]:6789 error -101 [ 1810.608912][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 1810.612186][T28185] ceph: No mds server is up or the cluster is laggy [ 1810.632550][T14122] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 1810.647685][T14122] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1810.759374][T17957] m920x_read = error: -19 [ 1810.802262][T17957] dvb-usb: error -19 while querying for an remote control event. [ 1810.999864][T14122] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1811.097170][T17957] libceph: connect (1)[c::]:6789 error -101 [ 1811.654822][T28201] netlink: 544 bytes leftover after parsing attributes in process `syz.3.6135'. [ 1811.664027][T28201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6135'. [ 1812.027393][T17957] libceph: mon0 (1)[c::]:6789 connect error [ 1812.034164][ T45] m920x_read = error: -19 [ 1812.157563][T14122] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1812.168722][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1812.363150][T28207] 9pnet_virtio: no channels available for device syz [ 1813.517225][T14122] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1813.527509][T14122] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1814.104727][ T45] m920x_read = error: -19 [ 1814.115869][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1814.948646][T28225] 9pnet_virtio: no channels available for device syz [ 1815.053098][T14122] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1815.152965][T14122] usb 5-1: USB disconnect, device number 105 [ 1815.216854][ T45] m920x_read = error: -19 [ 1815.260052][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1815.569997][T14122] m920x_read = error: -19 [ 1815.574437][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1815.800433][T14122] m920x_read = error: -19 [ 1816.680873][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1816.926335][ T8] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1816.969882][T28248] xt_connbytes: Forcing CT accounting to be enabled [ 1816.976773][T28248] Cannot find add_set index 0 as target [ 1817.376281][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1817.383903][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.410449][ T8] usb 2-1: config 0 has no interfaces? [ 1817.417490][ T8] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1817.442908][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.469110][ T8] usb 2-1: config 0 descriptor?? [ 1817.471927][T14122] m920x_read = error: -19 [ 1817.486259][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1818.347698][T28251] netlink: 544 bytes leftover after parsing attributes in process `syz.4.6149'. [ 1818.356788][T28251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6149'. [ 1818.417963][ T8] usb 2-1: USB disconnect, device number 124 [ 1818.576850][T14122] m920x_read = error: -19 [ 1818.581204][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1818.883877][T28261] 9pnet_virtio: no channels available for device syz [ 1819.023139][T14122] m920x_read = error: -19 [ 1819.032936][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1819.214720][T14122] m920x_read = error: -19 [ 1819.219090][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1819.420371][T14122] m920x_read = error: -19 [ 1819.423907][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1819.424964][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1820.010364][T28273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6153'. [ 1820.468380][T14122] m920x_read = error: -19 [ 1820.472735][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1820.584009][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1820.888704][T14122] m920x_read = error: -19 [ 1820.961799][T28268] ceph: No mds server is up or the cluster is laggy [ 1820.968506][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1821.012598][T14122] libceph: connect (1)[c::]:6789 error -101 [ 1821.018609][T14122] libceph: mon0 (1)[c::]:6789 connect error [ 1821.136455][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1821.147718][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1821.163883][ T8] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1821.173245][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.199341][ T8] usb 4-1: config 0 descriptor?? [ 1821.222157][T14122] m920x_read = error: -19 [ 1821.235198][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1821.295779][T28286] --map-set only usable from mangle table [ 1821.334734][T28286] netlink: 'syz.2.6156': attribute type 10 has an invalid length. [ 1821.427430][T14122] m920x_read = error: -19 [ 1821.430052][T28264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.444844][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1821.459658][T28264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.642060][T14122] m920x_read = error: -19 [ 1821.647162][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1821.652480][T17322] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1821.866521][T14122] m920x_read = error: -19 [ 1821.903409][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1821.953326][T17322] usb 6-1: Using ep0 maxpacket: 32 [ 1822.018837][T17322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.038623][T17322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1822.239985][T14122] m920x_read = error: -19 [ 1822.244707][T17322] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1822.253880][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1822.410347][T17322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.423803][T17322] usb 6-1: config 0 descriptor?? [ 1822.427067][T14122] m920x_read = error: -19 [ 1822.456678][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1822.505687][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 1822.512534][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1822.521685][ T8] usb 4-1: USB disconnect, device number 9 [ 1822.717096][T14122] m920x_read = error: -19 [ 1822.722022][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1823.020562][T28304] 9pnet_virtio: no channels available for device syz [ 1823.032391][T14122] m920x_read = error: -19 [ 1823.493773][T28292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.546594][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1823.555407][T28292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.571796][T17322] ft260 0003:0403:6030.0054: unknown main item tag 0x0 [ 1823.714967][ T45] m920x_read = error: -19 [ 1823.730193][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1823.788080][T17322] ft260 0003:0403:6030.0054: chip code: 6424 8183 [ 1823.886003][T14122] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1823.919584][ T45] m920x_read = error: -19 [ 1823.958051][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1824.003098][T17322] ft260 0003:0403:6030.0054: failed to retrieve system status [ 1824.020106][T17322] ft260 0003:0403:6030.0054: probe with driver ft260 failed with error -5 [ 1824.029296][ T45] libceph: connect (1)[c::]:6789 error -101 [ 1824.039552][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 1824.079743][T28314] ceph: No mds server is up or the cluster is laggy [ 1824.125380][T14122] usb 3-1: Using ep0 maxpacket: 8 [ 1824.146472][ T45] m920x_read = error: -19 [ 1824.163980][T14122] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1824.173278][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1824.215508][T14122] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1824.248471][T14122] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1824.279069][T14122] usb 3-1: Product: syz [ 1824.303617][T14122] usb 3-1: Manufacturer: syz [ 1824.460801][ T45] m920x_read = error: -19 [ 1824.566929][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1824.580799][T14122] usb 3-1: SerialNumber: syz [ 1824.773290][ T45] m920x_read = error: -19 [ 1824.777840][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1825.009337][T28330] 9pnet_virtio: no channels available for device syz [ 1825.016389][T14122] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1825.027428][ T45] m920x_read = error: -19 [ 1825.862764][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1825.903240][T14122] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1825.907041][T28335] syz.2.6162 (28335): drop_caches: 2 [ 1825.938407][T28335] syz.2.6162 (28335): drop_caches: 2 [ 1826.293507][T14122] m920x_read = error: -19 [ 1826.294489][T17322] usb 3-1: USB disconnect, device number 103 [ 1826.298741][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1826.494301][T14122] m920x_read = error: -19 [ 1826.498664][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1826.545646][T17322] usb 6-1: USB disconnect, device number 53 [ 1826.622809][T28343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6170'. [ 1827.578493][T14122] m920x_read = error: -19 [ 1827.586723][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1827.923520][T14122] m920x_read = error: -19 [ 1827.927950][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1828.053163][T13795] libceph: connect (1)[c::]:6789 error -101 [ 1828.097621][T14122] m920x_read = error: -19 [ 1828.102056][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1828.283984][T14122] m920x_read = error: -19 [ 1828.333502][T13795] libceph: mon0 (1)[c::]:6789 connect error [ 1828.340146][T28358] ceph: No mds server is up or the cluster is laggy [ 1828.340671][T13795] libceph: connect (1)[c::]:6789 error -101 [ 1828.347754][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1828.367768][T13795] libceph: mon0 (1)[c::]:6789 connect error [ 1828.571158][T14122] m920x_read = error: -19 [ 1828.591241][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1828.671018][T13795] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1828.825215][T14122] m920x_read = error: -19 [ 1828.865606][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1828.942731][T13795] usb 4-1: Using ep0 maxpacket: 8 [ 1829.038717][ T45] m920x_read = error: -19 [ 1829.043185][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1829.252299][T14122] m920x_read = error: -19 [ 1829.276514][ T45] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1829.284459][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1829.292896][T13795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.305718][T13795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1455, setting to 1024 [ 1829.336899][T13795] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1829.405343][T14122] libceph: connect (1)[c::]:6789 error -101 [ 1829.411977][T14122] libceph: mon0 (1)[c::]:6789 connect error [ 1829.455521][ T5870] m920x_read = error: -19 [ 1829.460219][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 1829.468611][T14122] libceph: connect (1)[c::]:6789 error -101 [ 1829.474564][T14122] libceph: mon0 (1)[c::]:6789 connect error [ 1829.487351][T13795] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1829.496474][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 1829.498048][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.502052][T28377] ceph: No mds server is up or the cluster is laggy [ 1829.519744][T13795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.532242][T13795] usb 4-1: config 0 descriptor?? [ 1829.562898][T28365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1829.711585][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1829.776254][T14122] m920x_read = error: -19 [ 1829.785848][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1829.800267][ T45] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1829.811552][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.839061][ T45] usb 2-1: config 0 descriptor?? [ 1830.104305][T14122] m920x_read = error: -19 [ 1830.106936][T13795] prodikeys 0003:041E:2801.0055: unknown main item tag 0x0 [ 1830.108844][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1830.129393][T13795] prodikeys 0003:041E:2801.0055: unknown main item tag 0x0 [ 1830.151809][T13795] prodikeys 0003:041E:2801.0055: item fetching failed at offset 2/7 [ 1830.384255][T28372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1830.422607][T14122] m920x_read = error: -19 [ 1830.598298][T13795] prodikeys 0003:041E:2801.0055: hid parse failed [ 1830.605355][T13795] prodikeys 0003:041E:2801.0055: probe with driver prodikeys failed with error -22 [ 1830.684752][T28372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1830.727863][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1831.034561][T14122] m920x_read = error: -19 [ 1831.039485][ T45] ft260 0003:0403:6030.0056: unknown main item tag 0x0 [ 1831.046428][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1831.273785][ T45] ft260 0003:0403:6030.0056: chip code: 6424 8183 [ 1831.513203][ T5870] m920x_read = error: -19 [ 1831.517899][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 1831.546359][ T5870] usb 4-1: USB disconnect, device number 10 [ 1831.552466][ T45] ft260 0003:0403:6030.0056: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1832.063010][T26328] m920x_read = error: -19 [ 1832.069069][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1832.245484][ T5870] m920x_read = error: -19 [ 1832.250016][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 1832.596786][ T5870] m920x_read = error: -19 [ 1832.629936][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 1832.682323][ T45] ft260 0003:0403:6030.0056: failed to retrieve status: -71, no wakeup [ 1832.973007][T26328] m920x_read = error: -19 [ 1832.977373][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1833.015162][ T45] ft260 0003:0403:6030.0056: failed to retrieve status: -71 [ 1833.027670][ T45] ft260 0003:0403:6030.0056: failed to reset I2C controller: -71 [ 1833.064620][T26328] libceph: connect (1)[c::]:6789 error -101 [ 1833.389677][T28406] ceph: No mds server is up or the cluster is laggy [ 1833.413225][T26328] libceph: mon0 (1)[c::]:6789 connect error [ 1833.437502][T26328] m920x_read = error: -19 [ 1833.447008][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1833.645785][T26328] m920x_read = error: -19 [ 1833.650234][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1834.137264][T17322] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1834.222847][T14122] m920x_read = error: -19 [ 1834.227299][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1834.485991][ T5870] m920x_read = error: -19 [ 1834.496832][ T45] usb 2-1: USB disconnect, device number 125 [ 1834.502898][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 1834.682528][ T5870] m920x_read = error: -19 [ 1834.687211][T14122] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1834.876098][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 1835.096720][ T5870] m920x_read = error: -19 [ 1835.101277][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 1835.120371][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1835.126665][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1835.185916][T14122] usb 4-1: Using ep0 maxpacket: 8 [ 1835.203978][T14122] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1835.245035][T14122] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1835.268360][T14122] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1835.291672][ T45] m920x_read = error: -19 [ 1835.299030][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1835.314172][T14122] usb 4-1: Product: syz [ 1835.334430][T14122] usb 4-1: Manufacturer: syz [ 1835.349172][T14122] usb 4-1: SerialNumber: syz [ 1835.537812][ T45] m920x_read = error: -19 [ 1835.542619][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1836.282548][T28422] syz.3.6190 (28422): drop_caches: 2 [ 1836.288436][T28422] syz.3.6190 (28422): drop_caches: 2 [ 1836.364473][ T45] m920x_read = error: -19 [ 1836.368893][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1836.382022][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1836.382055][ T29] audit: type=1326 audit(1740327351.526:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28439 comm="syz.5.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafdf8d169 code=0x7ffc0000 [ 1836.478124][T14122] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 1836.520990][T14122] visor 4-1:1.0: probe with driver visor failed with error -71 [ 1836.530694][T14122] usb 4-1: USB disconnect, device number 11 [ 1836.539855][ T29] audit: type=1326 audit(1740327351.526:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28439 comm="syz.5.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafdf8d169 code=0x7ffc0000 [ 1836.574660][ T29] audit: type=1326 audit(1740327351.526:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28439 comm="syz.5.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feafdf8d169 code=0x7ffc0000 [ 1836.606813][ T29] audit: type=1326 audit(1740327351.526:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28439 comm="syz.5.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafdf8d169 code=0x7ffc0000 [ 1836.636853][ T29] audit: type=1326 audit(1740327351.535:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28439 comm="syz.5.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafdf8d169 code=0x7ffc0000 [ 1836.689792][ T29] audit: type=1326 audit(1740327351.535:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28439 comm="syz.5.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feafdf8d169 code=0x7ffc0000 [ 1836.720638][ T29] audit: type=1326 audit(1740327351.535:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28439 comm="syz.5.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafdf8d169 code=0x7ffc0000 [ 1836.723991][ T45] m920x_read = error: -19 [ 1836.749525][ T29] audit: type=1326 audit(1740327351.535:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28439 comm="syz.5.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafdf8d169 code=0x7ffc0000 [ 1836.794276][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1836.841408][ T29] audit: type=1326 audit(1740327351.535:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28439 comm="syz.5.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7feafdf8d169 code=0x7ffc0000 [ 1836.911505][T17322] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1836.929433][T17322] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1836.969589][T17322] usb 5-1: can't read configurations, error -71 [ 1836.995068][ T29] audit: type=1326 audit(1740327351.535:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28439 comm="syz.5.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafdf8d169 code=0x7ffc0000 [ 1837.085145][T26328] m920x_read = error: -19 [ 1837.096825][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1837.356828][T26328] m920x_read = error: -19 [ 1837.529421][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1837.707681][T26328] m920x_read = error: -19 [ 1837.829502][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1838.295462][T26328] m920x_read = error: -19 [ 1838.299902][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1838.327720][ T45] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1838.479928][ T25] m920x_read = error: -19 [ 1838.484426][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1838.541431][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 1838.542675][T13795] libceph: connect (1)[c::]:6789 error -101 [ 1838.549084][ T45] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1838.586557][T13795] libceph: mon0 (1)[c::]:6789 connect error [ 1838.586569][T28466] ceph: No mds server is up or the cluster is laggy [ 1838.641532][ T45] usb 6-1: config 0 has no interface number 0 [ 1838.712415][ T45] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1838.954360][T17322] libceph: connect (1)[c::]:6789 error -101 [ 1838.973815][T17322] libceph: mon0 (1)[c::]:6789 connect error [ 1839.207526][ T45] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1840.026588][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.037361][T26328] m920x_read = error: -19 [ 1840.048322][ T45] usb 6-1: Product: syz [ 1840.052510][ T45] usb 6-1: Manufacturer: syz [ 1840.057215][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1840.165137][ T45] usb 6-1: SerialNumber: syz [ 1840.171343][ T45] usb 6-1: config 0 descriptor?? [ 1840.178895][ T45] smsc75xx v1.0.0 [ 1840.337088][T26328] m920x_read = error: -19 [ 1840.341791][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1840.524963][T28487] dvmrp0: entered allmulticast mode [ 1840.830930][T14122] m920x_read = error: -19 [ 1840.923948][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1841.063955][T26328] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1841.182090][T14122] m920x_read = error: -19 [ 1841.186487][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1841.214690][T17322] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1841.379655][ T25] m920x_read = error: -19 [ 1841.384052][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1841.964477][T26328] usb 3-1: Using ep0 maxpacket: 32 [ 1841.975128][T26328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1841.986369][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1841.998831][ T25] m920x_read = error: -19 [ 1842.003252][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1842.113682][T26328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.126903][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1842.278755][ T25] m920x_read = error: -19 [ 1842.340986][T26328] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1842.350381][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1842.361564][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1842.393603][T26328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.409834][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1842.442110][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1842.459761][T26328] usb 3-1: config 0 descriptor?? [ 1842.534730][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1842.571491][ T25] m920x_read = error: -19 [ 1842.575985][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1842.665564][ T45] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1842.695288][ T45] usb 6-1: USB disconnect, device number 54 [ 1842.817272][ T25] m920x_read = error: -19 [ 1842.821660][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1843.089449][ T45] m920x_read = error: -19 [ 1843.093948][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1843.126105][T28486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.185962][T28486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.287709][ T45] m920x_read = error: -19 [ 1843.394956][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1843.410189][T26328] ft260 0003:0403:6030.0057: unknown main item tag 0x0 [ 1843.523162][T17322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1843.559158][T17322] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1843.577466][ T45] m920x_read = error: -19 [ 1843.582023][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1843.623190][T26328] ft260 0003:0403:6030.0057: chip code: 6424 8183 [ 1843.667039][T17322] usb 4-1: can't read configurations, error -71 [ 1843.768694][T14122] m920x_read = error: -19 [ 1843.812602][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1843.837544][T26328] ft260 0003:0403:6030.0057: failed to retrieve system status [ 1843.846662][T26328] ft260 0003:0403:6030.0057: probe with driver ft260 failed with error -5 [ 1843.896595][ T25] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1843.985934][T26328] m920x_read = error: -19 [ 1843.990433][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1844.163979][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1844.174205][ T25] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1844.182746][ T25] usb 5-1: config 0 has no interface number 0 [ 1844.189705][T26328] m920x_read = error: -19 [ 1844.194099][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1844.202542][ T25] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1844.769790][ T25] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1844.837023][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.905524][ T25] usb 5-1: Product: syz [ 1844.928932][ T25] usb 5-1: Manufacturer: syz [ 1844.934330][T26328] m920x_read = error: -19 [ 1845.056533][T26328] dvb-usb: error -19 while querying for an remote control event. [ 1845.179562][ T25] usb 5-1: SerialNumber: syz [ 1845.235720][ T25] usb 5-1: config 0 descriptor?? [ 1845.304684][ T25] smsc75xx v1.0.0 [ 1845.451849][T14122] m920x_read = error: -19 [ 1845.456561][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1845.873367][T28534] netlink: 544 bytes leftover after parsing attributes in process `syz.1.6220'. [ 1845.882561][T28534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6220'. [ 1846.046577][T14122] m920x_read = error: -19 [ 1846.068193][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1846.462120][ T8] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1846.537242][T14122] m920x_read = error: -19 [ 1846.553398][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1846.761728][T14122] m920x_read = error: -19 [ 1846.898037][ T117] usb 3-1: USB disconnect, device number 104 [ 1846.900370][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1847.124876][T14122] m920x_read = error: -19 [ 1847.129280][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1847.175386][ T25] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1847.193191][ T25] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1847.573718][T14122] m920x_read = error: -19 [ 1847.837976][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1847.837992][ T29] audit: type=1326 audit(1740327362.359:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28540 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd908d8d169 code=0x7ffc0000 [ 1847.942804][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1847.953371][ T25] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1848.060542][ T25] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1848.161607][ T45] m920x_read = error: -19 [ 1848.270383][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1848.330811][ T29] audit: type=1326 audit(1740327362.368:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28540 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd908d8d169 code=0x7ffc0000 [ 1848.354663][ T25] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1848.407381][ T25] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1848.419661][ T25] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1848.429058][ T29] audit: type=1326 audit(1740327362.368:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28540 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd908d8d169 code=0x7ffc0000 [ 1848.461392][ T25] usb 5-1: USB disconnect, device number 108 [ 1848.596448][ T29] audit: type=1326 audit(1740327362.378:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28540 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd908d8d169 code=0x7ffc0000 [ 1848.620709][ T29] audit: type=1326 audit(1740327362.378:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28540 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd908d8d169 code=0x7ffc0000 [ 1848.715457][T28559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6228'. [ 1849.167539][ T45] m920x_read = error: -19 [ 1849.171900][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1849.203645][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1849.222391][ T8] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1849.244697][ T29] audit: type=1326 audit(1740327362.378:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28540 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd908d8d169 code=0x7ffc0000 [ 1849.276563][T17322] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1849.289121][ T8] usb 6-1: can't read configurations, error -71 [ 1849.369759][ T45] m920x_read = error: -19 [ 1849.374267][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1849.626174][ T117] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1849.639017][ T29] audit: type=1326 audit(1740327362.378:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28540 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd908d8d169 code=0x7ffc0000 [ 1849.662749][T17322] usb 2-1: Using ep0 maxpacket: 8 [ 1849.673158][T17322] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1849.685114][ T29] audit: type=1326 audit(1740327362.378:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28540 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd908d8d169 code=0x7ffc0000 [ 1849.708604][ C0] vkms_vblank_simulate: vblank timer overrun [ 1849.728687][T17322] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1849.743366][T17322] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1849.759380][T17322] usb 2-1: Product: syz [ 1849.846358][ T25] m920x_read = error: -19 [ 1849.850737][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1849.883975][T17322] usb 2-1: Manufacturer: syz [ 1849.893035][T17322] usb 2-1: SerialNumber: syz [ 1849.893337][ T29] audit: type=1326 audit(1740327362.387:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28540 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fd908d8d169 code=0x7ffc0000 [ 1850.446729][ T25] m920x_read = error: -19 [ 1850.465611][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1850.474983][ T29] audit: type=1326 audit(1740327362.387:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28540 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd908d8d169 code=0x7ffc0000 [ 1850.641772][ T25] m920x_read = error: -19 [ 1850.646158][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1850.741426][T28574] 9pnet_virtio: no channels available for device syz [ 1850.808681][T17322] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 1850.893231][T28579] syz.1.6226 (28579): drop_caches: 2 [ 1850.900878][T28579] syz.1.6226 (28579): drop_caches: 2 [ 1850.954929][ T25] m920x_read = error: -19 [ 1850.962012][T17322] visor 2-1:1.0: probe with driver visor failed with error -110 [ 1851.125134][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1851.187742][ T25] usb 2-1: USB disconnect, device number 126 [ 1851.336815][ T45] m920x_read = error: -19 [ 1851.409856][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1851.619749][ T45] libceph: connect (1)[c::]:6789 error -101 [ 1851.985940][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 1851.992071][ T25] m920x_read = error: -19 [ 1851.997438][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1852.063381][T28582] ceph: No mds server is up or the cluster is laggy [ 1852.216760][ T45] m920x_read = error: -19 [ 1852.226650][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1852.444927][T28594] netlink: 544 bytes leftover after parsing attributes in process `syz.3.6234'. [ 1852.454185][T28594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6234'. [ 1852.958016][ T45] m920x_read = error: -19 [ 1853.011878][ T8] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1853.031691][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1853.228488][ T25] m920x_read = error: -19 [ 1853.232876][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1853.260898][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1853.269897][ T8] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1853.279188][ T8] usb 2-1: config 0 has no interface number 0 [ 1854.082951][ T25] m920x_read = error: -19 [ 1854.270503][ T8] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1854.279713][ T8] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1854.288920][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.296899][ T8] usb 2-1: Product: syz [ 1854.301085][ T8] usb 2-1: Manufacturer: syz [ 1854.305664][ T8] usb 2-1: SerialNumber: syz [ 1854.312819][ T8] usb 2-1: config 0 descriptor?? [ 1854.331248][ T8] smsc75xx v1.0.0 [ 1854.336715][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1854.396658][ T45] libceph: connect (1)[c::]:6789 error -101 [ 1854.419647][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 1854.444524][T28598] ceph: No mds server is up or the cluster is laggy [ 1854.655938][ T45] m920x_read = error: -19 [ 1854.664069][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1854.818270][T28611] netlink: 544 bytes leftover after parsing attributes in process `syz.3.6238'. [ 1854.827505][T28611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6238'. [ 1856.041481][ T117] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1856.070758][ T117] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 1856.080280][ T117] usb 3-1: chopping to 0 config(s) [ 1856.094005][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1856.116637][ T117] usb 3-1: can't read configurations, error -32 [ 1856.404186][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1856.448824][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1856.459391][ T45] m920x_read = error: -19 [ 1856.464056][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1856.483761][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1856.502889][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1856.522480][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1856.542540][ T8] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1856.563560][ T117] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1856.786322][ T8] usb 2-1: USB disconnect, device number 127 [ 1856.863074][T17322] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1856.939266][ T117] usb 3-1: device descriptor read/64, error -32 [ 1856.956808][ T25] m920x_read = error: -19 [ 1856.968598][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1857.063725][ T117] usb usb3-port1: attempt power cycle [ 1857.287473][T28627] 9pnet_virtio: no channels available for device syz [ 1857.294555][ T25] m920x_read = error: -19 [ 1857.298961][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1858.379227][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1858.379243][ T29] audit: type=1326 audit(1740327371.864:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28626 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bce98d169 code=0x7ffc0000 [ 1858.409082][ T25] m920x_read = error: -19 [ 1858.680095][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1858.872576][ T25] m920x_read = error: -19 [ 1858.877043][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1858.885944][ T29] audit: type=1326 audit(1740327371.864:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28626 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bce98d169 code=0x7ffc0000 [ 1859.097144][ T25] m920x_read = error: -19 [ 1859.193361][T18682] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1859.245970][T17322] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1859.267104][T17322] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1859.276790][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1859.297018][T17322] usb 6-1: can't read configurations, error -71 [ 1859.297098][ T29] audit: type=1326 audit(1740327371.864:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28626 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bce98d169 code=0x7ffc0000 [ 1859.410942][ T117] libceph: connect (1)[c::]:6789 error -101 [ 1859.417732][ T117] libceph: mon0 (1)[c::]:6789 connect error [ 1859.438488][ T29] audit: type=1326 audit(1740327371.873:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28626 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bce98d169 code=0x7ffc0000 [ 1859.463437][ T117] libceph: connect (1)[c::]:6789 error -101 [ 1859.472344][ T117] libceph: mon0 (1)[c::]:6789 connect error [ 1859.473109][T28645] ceph: No mds server is up or the cluster is laggy [ 1859.478625][ T29] audit: type=1326 audit(1740327371.873:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28626 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bce98d169 code=0x7ffc0000 [ 1859.509131][ T29] audit: type=1326 audit(1740327371.873:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28626 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bce98d169 code=0x7ffc0000 [ 1859.533061][ T25] m920x_read = error: -19 [ 1859.533123][ T29] audit: type=1326 audit(1740327371.873:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28626 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bce98d169 code=0x7ffc0000 [ 1859.562531][ T29] audit: type=1326 audit(1740327371.873:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28626 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bce98d169 code=0x7ffc0000 [ 1859.750584][ T117] libceph: connect (1)[c::]:6789 error -101 [ 1859.757169][ T117] libceph: mon0 (1)[c::]:6789 connect error [ 1859.802581][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1859.881224][ T29] audit: type=1326 audit(1740327371.873:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28626 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f5bce98d169 code=0x7ffc0000 [ 1859.959238][ T29] audit: type=1326 audit(1740327371.873:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28626 comm="syz.2.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bce98d169 code=0x7ffc0000 [ 1859.984476][ T25] m920x_read = error: -19 [ 1859.988821][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1860.262736][T28653] netlink: 'syz.1.6250': attribute type 10 has an invalid length. [ 1860.499609][T17322] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1860.540115][ T25] m920x_read = error: -19 [ 1860.544506][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1860.661161][T28657] netlink: 544 bytes leftover after parsing attributes in process `syz.3.6251'. [ 1860.670346][T28657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6251'. [ 1861.273727][T17322] usb 6-1: Using ep0 maxpacket: 8 [ 1861.286129][T18682] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1861.352477][ T25] m920x_read = error: -19 [ 1861.356849][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1861.357215][T17322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1861.376747][T18682] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1861.384295][T18682] usb 5-1: can't read configurations, error -71 [ 1861.496696][T17322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1455, setting to 1024 [ 1862.218563][ T25] m920x_read = error: -19 [ 1862.253292][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1862.373862][T17322] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1862.606732][T17322] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1862.629140][T17322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.728425][T17322] usb 6-1: config 0 descriptor?? [ 1862.761093][T17322] usb 6-1: can't set config #0, error -71 [ 1862.770400][T17322] usb 6-1: USB disconnect, device number 58 [ 1862.792908][ T45] m920x_read = error: -19 [ 1862.805883][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1863.045565][ T45] m920x_read = error: -19 [ 1863.051147][T28676] 9pnet_virtio: no channels available for device syz [ 1863.070689][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1863.255515][ T45] m920x_read = error: -19 [ 1863.255571][T18682] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1863.544464][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1864.055780][ T45] m920x_read = error: -19 [ 1864.061485][T28691] ceph: No mds server is up or the cluster is laggy [ 1864.070243][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1864.089615][ T45] libceph: connect (1)[c::]:6789 error -101 [ 1864.112372][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 1864.186917][T28696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28696 comm=syz.2.6263 [ 1864.756644][ T45] m920x_read = error: -19 [ 1864.761014][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1865.123095][ T45] m920x_read = error: -19 [ 1865.153619][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1865.191273][T18682] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1865.223407][T18682] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1865.231005][T18682] usb 5-1: can't read configurations, error -71 [ 1865.265143][T18682] usb usb5-port1: attempt power cycle [ 1865.273319][ T45] libceph: connect (1)[c::]:6789 error -101 [ 1865.285169][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 1865.377297][ T45] m920x_read = error: -19 [ 1865.385155][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1865.396835][T28696] ceph: No mds server is up or the cluster is laggy [ 1865.591876][T28705] netlink: 544 bytes leftover after parsing attributes in process `syz.5.6264'. [ 1865.601045][T28705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6264'. [ 1865.625244][ T45] m920x_read = error: -19 [ 1865.646700][T28704] FAULT_INJECTION: forcing a failure. [ 1865.646700][T28704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1865.684986][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1865.695601][ T25] libceph: connect (1)[c::]:6789 error -101 [ 1865.733151][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 1865.902535][T28704] CPU: 0 UID: 0 PID: 28704 Comm: syz.4.6266 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 1865.902562][T28704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1865.902573][T28704] Call Trace: [ 1865.902578][T28704] [ 1865.902585][T28704] dump_stack_lvl+0x16c/0x1f0 [ 1865.902612][T28704] should_fail_ex+0x50a/0x650 [ 1865.902643][T28704] _copy_from_user+0x2e/0xd0 [ 1865.902661][T28704] copy_msghdr_from_user+0x99/0x160 [ 1865.902685][T28704] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1865.902707][T28704] ? __lock_acquire+0xcc5/0x3c40 [ 1865.902741][T28704] ___sys_sendmsg+0xff/0x1e0 [ 1865.902764][T28704] ? __pfx____sys_sendmsg+0x10/0x10 [ 1865.902797][T28704] ? trace_lock_acquire+0x14e/0x1f0 [ 1865.902834][T28704] __sys_sendmmsg+0x201/0x420 [ 1865.902859][T28704] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1865.902888][T28704] ? irqentry_exit+0x3b/0x90 [ 1865.902929][T28704] __x64_sys_sendmmsg+0x9c/0x100 [ 1865.902954][T28704] do_syscall_64+0xcd/0x250 [ 1865.902977][T28704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.903001][T28704] RIP: 0033:0x7fe32c58d169 [ 1865.903016][T28704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1865.903032][T28704] RSP: 002b:00007fe32d3da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1865.903050][T28704] RAX: ffffffffffffffda RBX: 00007fe32c7a5fa0 RCX: 00007fe32c58d169 [ 1865.903062][T28704] RDX: 0000000000000001 RSI: 0000400000000d40 RDI: 0000000000000003 [ 1865.903072][T28704] RBP: 00007fe32d3da090 R08: 0000000000000000 R09: 0000000000000000 [ 1865.903084][T28704] R10: 000000002c000011 R11: 0000000000000246 R12: 0000000000000001 [ 1865.903094][T28704] R13: 0000000000000000 R14: 00007fe32c7a5fa0 R15: 00007ffc0b52baf8 [ 1865.903116][T28704] [ 1866.291348][ T25] m920x_read = error: -19 [ 1866.480780][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1867.069521][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1867.069537][ T29] audit: type=1400 audit(1740327380.863:2470): avc: denied { ioctl } for pid=28706 comm="syz.2.6267" path="socket:[114729]" dev="sockfs" ino=114729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1867.221206][ T25] m920x_read = error: -19 [ 1867.490284][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1868.178184][T28737] 9pnet_virtio: no channels available for device syz [ 1868.192654][ T45] m920x_read = error: -19 [ 1868.219772][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1868.627546][ T29] audit: type=1400 audit(1740327382.332:2471): avc: denied { map } for pid=28736 comm="syz.3.6275" path="pipe:[114910]" dev="pipefs" ino=114910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1868.706755][ T25] m920x_read = error: -19 [ 1868.711141][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1868.909924][T18682] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1868.954431][ T25] m920x_read = error: -19 [ 1868.963009][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1869.070244][T17322] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1869.082475][T18682] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1869.104034][T18682] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1869.145577][ T25] m920x_read = error: -19 [ 1869.170567][T18682] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1869.170574][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1869.184470][T18682] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1869.210309][T18682] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1869.229855][T18682] usb 4-1: Manufacturer: syz [ 1869.305411][T18682] usb 4-1: SerialNumber: syz [ 1869.343203][T28740] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1869.401590][ T25] m920x_read = error: -19 [ 1869.405975][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1869.605909][ T25] m920x_read = error: -19 [ 1869.664540][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1869.687739][T28755] FAULT_INJECTION: forcing a failure. [ 1869.687739][T28755] name failslab, interval 1, probability 0, space 0, times 0 [ 1869.689143][T18682] yealink 4-1:36.0: invalid payload size 64, expected 16 [ 1869.833231][T18682] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input143 [ 1869.856431][T28755] CPU: 1 UID: 0 PID: 28755 Comm: syz.5.6279 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 1869.856455][T28755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1869.856465][T28755] Call Trace: [ 1869.856471][T28755] [ 1869.856478][T28755] dump_stack_lvl+0x16c/0x1f0 [ 1869.856503][T28755] should_fail_ex+0x50a/0x650 [ 1869.856527][T28755] ? fs_reclaim_acquire+0xae/0x150 [ 1869.856553][T28755] should_failslab+0xc2/0x120 [ 1869.856573][T28755] __kmalloc_node_noprof+0xd1/0x510 [ 1869.856591][T28755] ? file_tty_write.constprop.0+0x281/0x9a0 [ 1869.856609][T28755] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1869.856636][T28755] __kvmalloc_node_noprof+0xad/0x1a0 [ 1869.856659][T28755] file_tty_write.constprop.0+0x6dd/0x9a0 [ 1869.856679][T28755] ? rw_verify_area+0xcf/0x680 [ 1869.856703][T28755] vfs_write+0x5ae/0x1150 [ 1869.856726][T28755] ? __pfx_tty_write+0x10/0x10 [ 1869.856743][T28755] ? __pfx_vfs_write+0x10/0x10 [ 1869.856767][T28755] ? __fget_files+0x40/0x3a0 [ 1869.856791][T28755] ksys_write+0x12b/0x250 [ 1869.856812][T28755] ? __pfx_ksys_write+0x10/0x10 [ 1869.856840][T28755] do_syscall_64+0xcd/0x250 [ 1869.856859][T28755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.856879][T28755] RIP: 0033:0x7feafdf8d169 [ 1869.856893][T28755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1869.856907][T28755] RSP: 002b:00007feafedaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1869.856921][T28755] RAX: ffffffffffffffda RBX: 00007feafe1a5fa0 RCX: 00007feafdf8d169 [ 1869.856931][T28755] RDX: 0000000000001006 RSI: 0000400000001980 RDI: 0000000000000004 [ 1869.856940][T28755] RBP: 00007feafedaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1869.856948][T28755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1869.856957][T28755] R13: 0000000000000000 R14: 00007feafe1a5fa0 R15: 00007ffe32ef7418 [ 1869.856978][T28755] [ 1869.860458][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1869.904575][ T25] m920x_read = error: -19 [ 1869.906824][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.075077][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.082179][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.089040][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1870.095862][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.103730][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.110725][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.117675][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.124611][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.131371][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.137289][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.149465][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.156257][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.170594][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.177956][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.184737][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.190638][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.197628][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.204437][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.210397][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.217447][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.224225][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.230550][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.237832][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.244614][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.252692][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.259762][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.266540][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.267512][ T45] m920x_read = error: -19 [ 1870.272428][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.283792][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.290541][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.299222][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.306181][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.312948][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.315182][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1870.318846][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.333677][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.340446][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.346531][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.353944][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.360720][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.367954][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.374969][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.381730][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.387987][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.396173][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.402945][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.409522][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.416454][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.423401][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.430774][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.437932][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 1870.444712][ C0] yealink 4-1:36.0: unexpected response 0 [ 1870.450678][T18682] usb 4-1: USB disconnect, device number 14 [ 1870.459221][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1870.465988][ C0] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 1871.148639][ T45] m920x_read = error: -19 [ 1871.153013][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1871.397121][ T45] m920x_read = error: -19 [ 1871.406143][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1871.561643][ T29] audit: type=1400 audit(1740327385.082:2472): avc: denied { map } for pid=28769 comm="syz.3.6286" path="socket:[113897]" dev="sockfs" ino=113897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1871.667684][ T45] m920x_read = error: -19 [ 1871.672344][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1871.856428][T28780] FAULT_INJECTION: forcing a failure. [ 1871.856428][T28780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1871.956651][T28780] CPU: 0 UID: 0 PID: 28780 Comm: syz.5.6288 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 1871.956678][T28780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1871.956687][T28780] Call Trace: [ 1871.956692][T28780] [ 1871.956699][T28780] dump_stack_lvl+0x16c/0x1f0 [ 1871.956722][T28780] should_fail_ex+0x50a/0x650 [ 1871.956749][T28780] _copy_from_user+0x2e/0xd0 [ 1871.956764][T28780] io_submit_one+0xbc/0x1da0 [ 1871.956789][T28780] ? hlock_class+0x4e/0x130 [ 1871.956807][T28780] ? __pfx_io_submit_one+0x10/0x10 [ 1871.956829][T28780] ? __might_fault+0x13b/0x190 [ 1871.956850][T28780] ? lock_acquire+0x2f/0xb0 [ 1871.956868][T28780] ? __might_fault+0xe3/0x190 [ 1871.956888][T28780] ? __x64_sys_io_submit+0x1b2/0x340 [ 1871.956909][T28780] __x64_sys_io_submit+0x1b2/0x340 [ 1871.956931][T28780] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1871.956962][T28780] do_syscall_64+0xcd/0x250 [ 1871.956980][T28780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.957000][T28780] RIP: 0033:0x7feafdf8d169 [ 1871.957013][T28780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1871.957027][T28780] RSP: 002b:00007feafedaf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1871.957042][T28780] RAX: ffffffffffffffda RBX: 00007feafe1a5fa0 RCX: 00007feafdf8d169 [ 1871.957052][T28780] RDX: 0000400000000700 RSI: 0000000000000001 RDI: 00007feafed65000 [ 1871.957061][T28780] RBP: 00007feafedaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1871.957069][T28780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.957078][T28780] R13: 0000000000000000 R14: 00007feafe1a5fa0 R15: 00007ffe32ef7418 [ 1871.957096][T28780] [ 1871.966029][T28549] m920x_read = error: -19 [ 1872.180256][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1872.261328][ T29] audit: type=1400 audit(1740327385.719:2473): avc: denied { ioctl } for pid=28784 comm="syz.2.6289" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1872.291951][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1872.416033][T28549] m920x_read = error: -19 [ 1872.420395][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1872.468755][T17322] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1872.479789][T17322] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1872.480088][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 1872.497379][T17322] usb 5-1: can't read configurations, error -71 [ 1872.504413][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.514275][T28794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1872.527367][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1455, setting to 1024 [ 1872.569501][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1872.597773][T28549] m920x_read = error: -19 [ 1872.602143][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1872.630734][ T45] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1872.657157][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.681844][ T45] usb 2-1: config 0 descriptor?? [ 1872.699762][T28782] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1872.870067][T28549] m920x_read = error: -19 [ 1872.874489][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1873.057452][T28549] m920x_read = error: -19 [ 1873.063225][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1873.218989][ T45] prodikeys 0003:041E:2801.0058: unknown main item tag 0x0 [ 1873.239105][T28549] m920x_read = error: -19 [ 1873.671923][ T45] prodikeys 0003:041E:2801.0058: unknown main item tag 0x0 [ 1873.679339][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1873.744399][ T45] prodikeys 0003:041E:2801.0058: item fetching failed at offset 2/7 [ 1873.847239][ T45] prodikeys 0003:041E:2801.0058: hid parse failed [ 1873.923424][T28549] m920x_read = error: -19 [ 1873.929031][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1874.149726][ T45] prodikeys 0003:041E:2801.0058: probe with driver prodikeys failed with error -22 [ 1874.222444][T28814] ALSA: mixer_oss: invalid OSS volume 'L' [ 1874.671660][ T45] m920x_read = error: -19 [ 1874.692481][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1874.692863][ T8] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1874.770614][T18682] usb 2-1: USB disconnect, device number 2 [ 1874.918628][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1874.925328][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1874.938906][ T45] m920x_read = error: -19 [ 1874.945841][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.059236][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1875.098634][ T8] usb 5-1: config 0 descriptor?? [ 1875.302511][ T45] m920x_read = error: -19 [ 1875.530417][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1875.719299][ T45] m920x_read = error: -19 [ 1875.725225][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1875.965443][ T8] wacom 0003:056A:0331.0059: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 1876.062834][ T8] usb 5-1: USB disconnect, device number 114 [ 1876.189887][ T45] m920x_read = error: -19 [ 1876.194405][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1876.260332][ T29] audit: type=1400 audit(1740327389.470:2474): avc: denied { bind } for pid=28832 comm="syz.1.6303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1876.300047][ T29] audit: type=1400 audit(1740327389.498:2475): avc: denied { listen } for pid=28832 comm="syz.1.6303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1876.325784][T28837] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1876.357688][T28837] CPU: 1 UID: 0 PID: 28837 Comm: syz.2.6304 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 1876.357707][T28837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1876.357716][T28837] Call Trace: [ 1876.357720][T28837] [ 1876.357725][T28837] dump_stack_lvl+0x16c/0x1f0 [ 1876.357744][T28837] sysfs_warn_dup+0x7f/0xa0 [ 1876.357763][T28837] sysfs_do_create_link_sd+0x124/0x140 [ 1876.357781][T28837] sysfs_create_link+0x61/0xc0 [ 1876.357799][T28837] device_add+0x62e/0x1a70 [ 1876.357816][T28837] ? __pfx_device_add+0x10/0x10 [ 1876.357831][T28837] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1876.357850][T28837] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1876.357867][T28837] wiphy_register+0x1cab/0x2860 [ 1876.357883][T28837] ? __pfx__dev_printk+0x10/0x10 [ 1876.357898][T28837] ? __pfx_wiphy_register+0x10/0x10 [ 1876.357918][T28837] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1876.357934][T28837] ieee80211_register_hw+0x2455/0x4060 [ 1876.357954][T28837] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1876.357973][T28837] ? net_generic+0xea/0x2a0 [ 1876.357986][T28837] ? lockdep_init_map_type+0x16d/0x7d0 [ 1876.358006][T28837] ? __asan_memset+0x23/0x50 [ 1876.358025][T28837] ? __hrtimer_init+0x106/0x2c0 [ 1876.358046][T28837] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1876.358069][T28837] ? __kmalloc_node_track_caller_noprof+0x240/0x510 [ 1876.358083][T28837] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1876.358098][T28837] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 1876.358114][T28837] ? __asan_memcpy+0x3c/0x60 [ 1876.358133][T28837] hwsim_new_radio_nl+0xb42/0x12b0 [ 1876.358149][T28837] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1876.358169][T28837] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1876.358188][T28837] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1876.358208][T28837] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1876.358226][T28837] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1876.358248][T28837] ? bpf_lsm_capable+0x9/0x10 [ 1876.358261][T28837] ? security_capable+0x7e/0x260 [ 1876.358276][T28837] ? ns_capable+0xd7/0x110 [ 1876.358301][T28837] genl_rcv_msg+0x565/0x800 [ 1876.358321][T28837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1876.358340][T28837] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1876.358358][T28837] ? __pfx___lock_acquire+0x10/0x10 [ 1876.358377][T28837] netlink_rcv_skb+0x16b/0x440 [ 1876.358392][T28837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1876.358409][T28837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1876.358429][T28837] ? down_read+0xc9/0x330 [ 1876.358444][T28837] ? __pfx_down_read+0x10/0x10 [ 1876.358459][T28837] ? netlink_deliver_tap+0x1ae/0xd30 [ 1876.358476][T28837] genl_rcv+0x28/0x40 [ 1876.358490][T28837] netlink_unicast+0x53c/0x7f0 [ 1876.358506][T28837] ? __pfx_netlink_unicast+0x10/0x10 [ 1876.358525][T28837] netlink_sendmsg+0x8b8/0xd70 [ 1876.358542][T28837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1876.358562][T28837] ____sys_sendmsg+0xaaf/0xc90 [ 1876.358575][T28837] ? copy_msghdr_from_user+0x10b/0x160 [ 1876.358591][T28837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1876.358609][T28837] ___sys_sendmsg+0x135/0x1e0 [ 1876.358626][T28837] ? __pfx____sys_sendmsg+0x10/0x10 [ 1876.358647][T28837] ? __pfx_lock_release+0x10/0x10 [ 1876.358664][T28837] ? trace_lock_acquire+0x14e/0x1f0 [ 1876.358682][T28837] ? __fget_files+0x206/0x3a0 [ 1876.358697][T28837] __sys_sendmsg+0x16e/0x220 [ 1876.358714][T28837] ? __pfx___sys_sendmsg+0x10/0x10 [ 1876.358730][T28837] ? __x64_sys_futex+0x1e1/0x4c0 [ 1876.358752][T28837] do_syscall_64+0xcd/0x250 [ 1876.358767][T28837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.358782][T28837] RIP: 0033:0x7f5bce98d169 [ 1876.358793][T28837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1876.358803][T28837] RSP: 002b:00007f5bcf84c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1876.358814][T28837] RAX: ffffffffffffffda RBX: 00007f5bceba5fa0 RCX: 00007f5bce98d169 [ 1876.358821][T28837] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000004 [ 1876.358827][T28837] RBP: 00007f5bcea0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1876.358834][T28837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1876.358840][T28837] R13: 0000000000000000 R14: 00007f5bceba5fa0 R15: 00007ffc87d7ca48 [ 1876.358853][T28837] [ 1876.785321][ T45] m920x_read = error: -19 [ 1876.789725][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1876.969674][ T45] m920x_read = error: -19 [ 1876.974041][ T45] dvb-usb: error -19 while querying for an remote control event. [ 1877.108512][ T29] audit: type=1400 audit(1740327390.265:2476): avc: denied { accept } for pid=28843 comm="syz.4.6306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1877.151624][T28549] m920x_read = error: -19 [ 1877.155984][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1877.240253][ T8] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1877.254645][T28846] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1877.263182][T28846] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1877.271759][T28846] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1877.869158][T28549] m920x_read = error: -19 [ 1877.880112][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1877.890129][ T29] audit: type=1400 audit(1740327390.396:2477): avc: denied { accept } for pid=28843 comm="syz.4.6306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1878.085572][T28549] m920x_read = error: -19 [ 1878.089951][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1878.338184][T28549] m920x_read = error: -19 [ 1878.632777][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1878.932768][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1878.941168][ T29] audit: type=1400 audit(1740327391.968:2478): avc: denied { read write } for pid=28860 comm="syz.3.6311" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1878.976997][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1878.996271][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.003807][ T25] m920x_read = error: -19 [ 1879.008541][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1879.024050][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.031524][ T29] audit: type=1400 audit(1740327391.968:2479): avc: denied { open } for pid=28860 comm="syz.3.6311" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1879.066968][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.078217][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.085742][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.093245][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.101672][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.109191][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.117032][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.124525][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.132025][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.139409][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.146870][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.154339][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.161858][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.169315][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.177290][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.184771][ T25] m920x_read = error: -19 [ 1879.189225][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1879.197094][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.204667][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.212150][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.245598][T14122] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1879.631581][ T25] m920x_read = error: -19 [ 1879.636152][ T25] dvb-usb: error -19 while querying for an remote control event. [ 1879.668143][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.676657][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.684060][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.691427][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1879.692286][ T8] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1879.699130][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.699154][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.722112][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.729571][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.736959][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.744397][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.753835][T28549] hid-generic 0006:0003:0003.005A: unknown main item tag 0x0 [ 1879.765763][T28865] FAULT_INJECTION: forcing a failure. [ 1879.765763][T28865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1879.765788][T28865] CPU: 1 UID: 0 PID: 28865 Comm: syz.1.6312 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 1879.765807][T28865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1879.765817][T28865] Call Trace: [ 1879.765823][T28865] [ 1879.765830][T28865] dump_stack_lvl+0x16c/0x1f0 [ 1879.765854][T28865] should_fail_ex+0x50a/0x650 [ 1879.765881][T28865] _copy_from_user+0x2e/0xd0 [ 1879.765898][T28865] keyctl_dh_compute+0xab/0x140 [ 1879.765924][T28865] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1879.765953][T28865] ? ksys_write+0x1ba/0x250 [ 1879.765980][T28865] ? __pfx_ksys_write+0x10/0x10 [ 1879.766008][T28865] __do_sys_keyctl+0x4df/0x590 [ 1879.766030][T28865] do_syscall_64+0xcd/0x250 [ 1879.766053][T28865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1879.766083][T28865] RIP: 0033:0x7fd908d8d169 [ 1879.766096][T28865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1879.766112][T28865] RSP: 002b:00007fd909bc6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1879.766129][T28865] RAX: ffffffffffffffda RBX: 00007fd908fa5fa0 RCX: 00007fd908d8d169 [ 1879.766140][T28865] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000017 [ 1879.766151][T28865] RBP: 00007fd909bc6090 R08: 0000400000000180 R09: 0000000000000000 [ 1879.766161][T28865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1879.766171][T28865] R13: 0000000000000000 R14: 00007fd908fa5fa0 R15: 00007ffe87057768 [ 1879.766193][T28865] [ 1879.770530][T28549] hid-generic 0006:0003:0003.005A: hidraw0: VIRTUAL HID v0.00 Device [syz1] on syz0 [ 1879.803824][T14122] usb 4-1: config 0 has no interfaces? [ 1879.803852][T14122] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1879.803873][T14122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.817644][T14122] usb 4-1: config 0 descriptor?? [ 1879.821340][ T8] usb 6-1: can't read configurations, error -71 [ 1879.822153][T28549] m920x_read = error: -19 [ 1879.822170][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1879.984324][T28549] m920x_read = error: -19 [ 1879.984401][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1880.168190][T28549] m920x_read = error: -19 [ 1880.168231][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1880.345466][T14122] m920x_read = error: -19 [ 1880.345489][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1881.047547][T14122] m920x_read = error: -19 [ 1881.047566][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1881.216051][T14122] m920x_read = error: -19 [ 1881.217293][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1881.605498][T14122] m920x_read = error: -19 [ 1881.605517][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1881.679479][ T29] audit: type=1400 audit(1740327394.531:2480): avc: denied { write } for pid=28871 comm="syz.1.6315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1881.872564][T14122] m920x_read = error: -19 [ 1881.878734][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1881.929635][ T8] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1881.981949][ T29] audit: type=1400 audit(1740327394.821:2481): avc: denied { map_create } for pid=28871 comm="syz.1.6315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1882.004178][T28895] 9pnet_fd: Insufficient options for proto=fd [ 1882.155733][T14122] m920x_read = error: -19 [ 1882.163934][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1882.171874][T28896] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1882.180618][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1882.226929][ T29] audit: type=1400 audit(1740327394.830:2482): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.134 dest=49390 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1882.234641][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.314420][ T29] audit: type=1400 audit(1740327394.840:2483): avc: denied { map_read map_write } for pid=28871 comm="syz.1.6315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1882.344770][ T117] usb 4-1: USB disconnect, device number 15 [ 1882.389580][T28549] m920x_read = error: -19 [ 1882.391948][T28901] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1882.394005][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1882.409124][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1882.420930][T28901] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1882.433357][T28901] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1882.674742][ T8] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1882.684099][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.688005][ T29] audit: type=1400 audit(1740327394.840:2484): avc: denied { prog_load } for pid=28871 comm="syz.1.6315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1882.827841][T28549] m920x_read = error: -19 [ 1883.074248][ T8] usb 6-1: config 0 descriptor?? [ 1883.084069][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1883.279167][T14122] m920x_read = error: -19 [ 1883.283562][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1883.438096][ T29] audit: type=1400 audit(1740327394.840:2485): avc: denied { bpf } for pid=28871 comm="syz.1.6315" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1883.490267][T14122] m920x_read = error: -19 [ 1883.501012][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1883.526678][ T29] audit: type=1400 audit(1740327394.840:2486): avc: denied { perfmon } for pid=28871 comm="syz.1.6315" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1883.553094][ T29] audit: type=1400 audit(1740327394.840:2487): avc: denied { prog_run } for pid=28871 comm="syz.1.6315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1883.591822][ T29] audit: type=1400 audit(1740327394.840:2488): avc: denied { mounton } for pid=28871 comm="syz.1.6315" path="/587" dev="tmpfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1883.682879][T14122] m920x_read = error: -19 [ 1883.693559][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1883.723116][ T29] audit: type=1400 audit(1740327394.849:2489): avc: denied { ioctl } for pid=28888 comm="syz.5.6319" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1883.975879][T28891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1884.008980][T28891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.020689][ T8] ft260 0003:0403:6030.005B: unknown main item tag 0x0 [ 1884.035440][T14122] m920x_read = error: -19 [ 1884.051215][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1884.388626][ T8] ft260 0003:0403:6030.005B: chip code: 6424 8183 [ 1884.395785][T14122] m920x_read = error: -19 [ 1884.400219][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1884.559639][T17322] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1884.583701][T28549] m920x_read = error: -19 [ 1884.606180][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1884.607610][T28930] FAULT_INJECTION: forcing a failure. [ 1884.607610][T28930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1884.628462][T28930] CPU: 0 UID: 0 PID: 28930 Comm: syz.2.6328 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 1884.628483][T28930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1884.628491][T28930] Call Trace: [ 1884.628495][T28930] [ 1884.628504][T28930] dump_stack_lvl+0x16c/0x1f0 [ 1884.628525][T28930] should_fail_ex+0x50a/0x650 [ 1884.628548][T28930] _copy_from_user+0x2e/0xd0 [ 1884.628562][T28930] move_addr_to_kernel+0x68/0x160 [ 1884.628578][T28930] __sys_sendto+0x1ba/0x4f0 [ 1884.628595][T28930] ? __pfx___sys_sendto+0x10/0x10 [ 1884.628625][T28930] ? ksys_write+0x1ba/0x250 [ 1884.628647][T28930] ? __pfx_ksys_write+0x10/0x10 [ 1884.628669][T28930] __x64_sys_sendto+0xe0/0x1c0 [ 1884.628684][T28930] ? do_syscall_64+0x91/0x250 [ 1884.628700][T28930] ? lockdep_hardirqs_on+0x7c/0x110 [ 1884.628715][T28930] do_syscall_64+0xcd/0x250 [ 1884.628732][T28930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.628751][T28930] RIP: 0033:0x7f5bce98d169 [ 1884.628762][T28930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1884.628775][T28930] RSP: 002b:00007f5bcf82b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1884.628789][T28930] RAX: ffffffffffffffda RBX: 00007f5bceba6080 RCX: 00007f5bce98d169 [ 1884.628798][T28930] RDX: 000000000000fee4 RSI: 0000400000847fff RDI: 0000000000000006 [ 1884.628807][T28930] RBP: 00007f5bcf82b090 R08: 000040000005ffe4 R09: 000000000000001c [ 1884.628815][T28930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1884.628824][T28930] R13: 0000000000000000 R14: 00007f5bceba6080 R15: 00007ffc87d7ca48 [ 1884.628840][T28930] [ 1885.013017][T28549] m920x_read = error: -19 [ 1885.017374][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1885.082028][ T8] ft260 0003:0403:6030.005B: failed to retrieve system status [ 1885.090511][ T8] ft260 0003:0403:6030.005B: probe with driver ft260 failed with error -5 [ 1885.190729][T14122] m920x_read = error: -19 [ 1885.190800][ T117] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1885.218728][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1885.463731][T14122] m920x_read = error: -19 [ 1885.476601][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1885.509431][T17322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1885.517204][ T8] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1885.528348][T17322] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1885.536399][T17322] usb 4-1: can't read configurations, error -71 [ 1885.671066][T14122] m920x_read = error: -19 [ 1885.899878][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.910246][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1885.962439][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1885.970396][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1885.996595][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1886.070043][ T8] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1886.079884][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.088215][ T8] usb 3-1: Product: syz [ 1886.093708][ T8] usb 3-1: Manufacturer: syz [ 1886.099199][ T8] usb 3-1: SerialNumber: syz [ 1886.126426][ T8] usb 3-1: config 0 descriptor?? [ 1886.135572][ T8] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 1886.143924][T18682] usb 6-1: USB disconnect, device number 61 [ 1886.154367][ T8] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1886.165015][ T8] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1886.173266][T14122] m920x_read = error: -19 [ 1886.193913][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1886.387654][T28549] m920x_read = error: -19 [ 1886.392093][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1886.881480][T28549] m920x_read = error: -19 [ 1886.896767][T28549] dvb-usb: error -19 while querying for an remote control event. [ 1887.000456][ T25] usb 3-1: USB disconnect, device number 108 [ 1887.054546][ T25] garmin_gps 3-1:0.0: device disconnected [ 1887.131740][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 1887.131753][ T29] audit: type=1400 audit(1740327399.639:2553): avc: denied { mounton } for pid=28950 comm="syz.5.6334" path="/file0" dev="tmpfs" ino=3148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1887.164163][T14122] m920x_read = error: -19 [ 1887.176014][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1887.380319][T14122] m920x_read = error: -19 [ 1887.855219][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1887.899521][ T29] audit: type=1400 audit(1740327400.359:2554): avc: denied { unmount } for pid=19175 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1887.955091][ T29] audit: type=1400 audit(1740327400.415:2555): avc: denied { setopt } for pid=28959 comm="syz.4.6338" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1887.977471][ T29] audit: type=1400 audit(1740327400.415:2556): avc: denied { write } for pid=28959 comm="syz.4.6338" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1888.000258][T28960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6338'. [ 1888.017616][ T29] audit: type=1400 audit(1740327400.434:2557): avc: denied { read } for pid=28959 comm="syz.4.6338" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1888.038042][T14122] m920x_read = error: -19 [ 1888.042374][T14122] dvb-usb: error -19 while querying for an remote control event. [ 1888.112717][ T117] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1888.121509][ T117] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1888.133874][ T117] usb 2-1: can't read configurations, error -71 [ 1888.144547][ T29] audit: type=1400 audit(1740327400.593:2558): avc: denied { read write } for pid=28964 comm="syz.4.6339" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1888.180893][ T29] audit: type=1400 audit(1740327400.593:2559): avc: denied { open } for pid=28964 comm="syz.4.6339" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2000.509046][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2000.516023][ C1] rcu: 0-...!: (1 GPs behind) idle=5c9c/1/0x4000000000000000 softirq=137817/137818 fqs=0 [ 2000.527792][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28955/1:b..l [ 2000.535803][ C1] rcu: (detected by 1, t=10506 jiffies, g=136901, q=82 ncpus=2) [ 2000.543514][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2000.543538][ C0] NMI backtrace for cpu 0 [ 2000.543547][ C0] CPU: 0 UID: 0 PID: 28968 Comm: syz.1.6340 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 2000.543563][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2000.543571][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x33/0x60 [ 2000.543590][ C0] Code: 9c 5d fa f7 c5 00 02 00 00 75 39 bf 01 00 00 00 e8 a2 87 2e f6 45 31 c9 41 b8 01 00 00 00 31 c9 ff 74 24 10 48 8d 7b 18 31 d2 <31> f6 e8 96 f0 3c f6 48 89 df e8 7e 58 3d f6 58 48 89 e8 5b 5d c3 [ 2000.543602][ C0] RSP: 0018:ffffc90000007d20 EFLAGS: 00000046 [ 2000.543613][ C0] RAX: 0000000000010002 RBX: ffffffff9ab4f750 RCX: 0000000000000000 [ 2000.543622][ C0] RDX: 0000000000000000 RSI: ffffffff8b6fbbc0 RDI: ffffffff9ab4f768 [ 2000.543631][ C0] RBP: 0000000000000006 R08: 0000000000000001 R09: 0000000000000000 [ 2000.543639][ C0] R10: 0000000000000001 R11: 0000000000000002 R12: ffffffff9ab4f748 [ 2000.543648][ C0] R13: dffffc0000000000 R14: ffff88805bd7a340 R15: 1ffff92000000faa [ 2000.543657][ C0] FS: 00007fd909bc66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2000.543672][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2000.543681][ C0] CR2: 000000110c3dfce2 CR3: 000000001b130000 CR4: 00000000003526f0 [ 2000.543690][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2000.543698][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2000.543706][ C0] Call Trace: [ 2000.543712][ C0] [ 2000.543719][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2000.543740][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2000.543757][ C0] ? nmi_handle+0x1ac/0x5d0 [ 2000.543776][ C0] ? _raw_spin_lock_irqsave+0x33/0x60 [ 2000.543789][ C0] ? default_do_nmi+0x6a/0x160 [ 2000.543807][ C0] ? exc_nmi+0x170/0x1e0 [ 2000.543824][ C0] ? end_repeat_nmi+0xf/0x53 [ 2000.543846][ C0] ? _raw_spin_lock_irqsave+0x33/0x60 [ 2000.543859][ C0] ? _raw_spin_lock_irqsave+0x33/0x60 [ 2000.543872][ C0] ? _raw_spin_lock_irqsave+0x33/0x60 [ 2000.543885][ C0] [ 2000.543889][ C0] [ 2000.543894][ C0] ? debug_object_deactivate+0x13b/0x370 [ 2000.543909][ C0] debug_object_deactivate+0x13b/0x370 [ 2000.543924][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 2000.543940][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2000.543955][ C0] ? __pfx_advance_sched+0x10/0x10 [ 2000.543975][ C0] __hrtimer_run_queues+0x47c/0xae0 [ 2000.543992][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2000.544004][ C0] ? read_tsc+0x9/0x20 [ 2000.544020][ C0] hrtimer_interrupt+0x392/0x8e0 [ 2000.544038][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 2000.544059][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2000.544073][ C0] [ 2000.544077][ C0] [ 2000.544082][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2000.544099][ C0] RIP: 0010:write_comp_data+0x11/0x90 [ 2000.544118][ C0] Code: cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 ff ff 49 7e <65> 8b 05 00 00 4a 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 2000.544129][ C0] RSP: 0018:ffffc9000d2d7308 EFLAGS: 00000246 [ 2000.544140][ C0] RAX: 0000000000000000 RBX: 0000000000002edb RCX: ffffffff899d06c2 [ 2000.544148][ C0] RDX: ffff888036fe8000 RSI: 0000000000010000 RDI: 0000000000000004 [ 2000.544156][ C0] RBP: 0000000000010000 R08: 0000000000000004 R09: 0000000000010000 [ 2000.544165][ C0] R10: 0000000000002edb R11: 0000000000000002 R12: ffff888044400000 [ 2000.544173][ C0] R13: dffffc0000000000 R14: ffff888055746c00 R15: ffff8880369c8000 [ 2000.544184][ C0] ? bitmap_port_ext_cleanup+0xf2/0x290 [ 2000.544202][ C0] bitmap_port_ext_cleanup+0xf2/0x290 [ 2000.544219][ C0] bitmap_port_destroy+0x124/0x160 [ 2000.544233][ C0] _destroy_all_sets+0x3e6/0x7d0 [ 2000.544251][ C0] ip_set_destroy+0x762/0x8d0 [ 2000.544270][ C0] ? __pfx_ip_set_destroy+0x10/0x10 [ 2000.544290][ C0] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 2000.544316][ C0] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2000.544334][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 2000.544359][ C0] ? lock_acquire+0x2f/0xb0 [ 2000.544375][ C0] ? avc_has_perm_noaudit+0x61/0x3a0 [ 2000.544391][ C0] netlink_rcv_skb+0x16b/0x440 [ 2000.544407][ C0] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2000.544425][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2000.544445][ C0] ? bpf_lsm_capable+0x9/0x10 [ 2000.544461][ C0] ? security_capable+0x7e/0x260 [ 2000.544476][ C0] ? ns_capable+0xd7/0x110 [ 2000.544494][ C0] nfnetlink_rcv+0x1b4/0x430 [ 2000.544511][ C0] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2000.544527][ C0] ? netlink_deliver_tap+0x1ae/0xd30 [ 2000.544544][ C0] netlink_unicast+0x53c/0x7f0 [ 2000.544560][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 2000.544578][ C0] netlink_sendmsg+0x8b8/0xd70 [ 2000.544595][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2000.544614][ C0] ____sys_sendmsg+0xaaf/0xc90 [ 2000.544627][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 2000.544644][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2000.544661][ C0] ___sys_sendmsg+0x135/0x1e0 [ 2000.544678][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 2000.544698][ C0] ? __pfx_lock_release+0x10/0x10 [ 2000.544715][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 2000.544733][ C0] ? __fget_files+0x206/0x3a0 [ 2000.544748][ C0] __sys_sendmsg+0x16e/0x220 [ 2000.544764][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 2000.544781][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 2000.544802][ C0] do_syscall_64+0xcd/0x250 [ 2000.544818][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2000.544835][ C0] RIP: 0033:0x7fd908d8d169 [ 2000.544846][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2000.544857][ C0] RSP: 002b:00007fd909bc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2000.544869][ C0] RAX: ffffffffffffffda RBX: 00007fd908fa5fa0 RCX: 00007fd908d8d169 [ 2000.544878][ C0] RDX: 0000000000000854 RSI: 0000400000000340 RDI: 0000000000000006 [ 2000.544886][ C0] RBP: 00007fd908e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 2000.544894][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2000.544902][ C0] R13: 0000000000000000 R14: 00007fd908fa5fa0 R15: 00007ffe87057768 [ 2000.544915][ C0] [ 2000.545533][ C1] task:syz.5.6336 state:R running task stack:27936 pid:28955 tgid:28955 ppid:18081 task_flags:0x40004c flags:0x00004000 [ 2001.163422][ C1] Call Trace: [ 2001.166696][ C1] [ 2001.169625][ C1] __schedule+0xf43/0x5890 [ 2001.174058][ C1] ? hlock_class+0x4e/0x130 [ 2001.178561][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2001.183762][ C1] ? __pfx_mark_lock+0x10/0x10 [ 2001.188528][ C1] ? __pfx___schedule+0x10/0x10 [ 2001.193370][ C1] ? find_held_lock+0x2d/0x110 [ 2001.198145][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2001.203518][ C1] preempt_schedule_common+0x44/0xc0 [ 2001.208800][ C1] preempt_schedule_thunk+0x1a/0x30 [ 2001.214001][ C1] _raw_spin_unlock+0x3e/0x50 [ 2001.218673][ C1] unmap_page_range+0xee3/0x4390 [ 2001.223657][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 2001.229032][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 2001.233983][ C1] ? uprobe_munmap+0x20/0x5c0 [ 2001.238669][ C1] unmap_single_vma+0x194/0x2b0 [ 2001.243525][ C1] unmap_vmas+0x22f/0x490 [ 2001.247858][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 2001.252713][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 2001.257664][ C1] exit_mmap+0x1c1/0xba0 [ 2001.261914][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 2001.266687][ C1] ? __pfx_mark_lock+0x10/0x10 [ 2001.271486][ C1] __mmput+0x12a/0x410 [ 2001.275563][ C1] mmput+0x62/0x70 [ 2001.279295][ C1] do_exit+0x9ba/0x2d70 [ 2001.283452][ C1] ? __pfx_do_exit+0x10/0x10 [ 2001.288039][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2001.293417][ C1] do_group_exit+0xd3/0x2a0 [ 2001.297917][ C1] __x64_sys_exit_group+0x3e/0x50 [ 2001.302938][ C1] x64_sys_call+0x151f/0x1720 [ 2001.307609][ C1] do_syscall_64+0xcd/0x250 [ 2001.312123][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.318015][ C1] RIP: 0033:0x7feafdf8d169 [ 2001.322423][ C1] RSP: 002b:00007ffe32ef7778 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2001.330834][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feafdf8d169 [ 2001.338813][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 2001.346806][ C1] RBP: 00007ffe32ef77dc R08: 0000000932ef786f R09: 00000000000927c0 [ 2001.354778][ C1] R10: 0000000000000654 R11: 0000000000000246 R12: 0000000000000253 [ 2001.362765][ C1] R13: 00000000000927c0 R14: 00000000001b23e0 R15: 00007ffe32ef7830 [ 2001.371275][ C1] [ 2001.374296][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g136901 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2001.385568][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2001.395528][ C1] rcu: RCU grace-period kthread stack dump: [ 2001.401417][ C1] task:rcu_preempt state:R running task stack:27552 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2001.414906][ C1] Call Trace: [ 2001.418178][ C1] [ 2001.421109][ C1] __schedule+0xf43/0x5890 [ 2001.425526][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2001.430734][ C1] ? __pfx___schedule+0x10/0x10 [ 2001.435581][ C1] ? schedule+0x298/0x350 [ 2001.439908][ C1] ? __pfx_lock_release+0x10/0x10 [ 2001.444937][ C1] ? lock_acquire+0x2f/0xb0 [ 2001.449443][ C1] ? schedule+0x1fd/0x350 [ 2001.453776][ C1] schedule+0xe7/0x350 [ 2001.457839][ C1] schedule_timeout+0x124/0x280 [ 2001.462692][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2001.468067][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2001.473367][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2001.479172][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 2001.484637][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 2001.489404][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2001.494688][ C1] ? rcu_gp_init+0xc82/0x1630 [ 2001.499364][ C1] ? lock_acquire+0x2f/0xb0 [ 2001.503864][ C1] ? finish_swait+0xc5/0x280 [ 2001.508456][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2001.514261][ C1] rcu_gp_kthread+0x271/0x380 [ 2001.518943][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2001.524144][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2001.529338][ C1] ? __kthread_parkme+0x148/0x220 [ 2001.534362][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2001.539562][ C1] kthread+0x3af/0x750 [ 2001.543631][ C1] ? __pfx_kthread+0x10/0x10 [ 2001.548223][ C1] ? __pfx_kthread+0x10/0x10 [ 2001.552813][ C1] ret_from_fork+0x45/0x80 [ 2001.557228][ C1] ? __pfx_kthread+0x10/0x10 [ 2001.561814][ C1] ret_from_fork_asm+0x1a/0x30 [ 2001.567108][ C1] [ 2001.570120][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2001.576433][ C1] CPU: 1 UID: 0 PID: 14122 Comm: kworker/1:4 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 2001.587271][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2001.597324][ C1] Workqueue: events __sched_core_put [ 2001.602614][ C1] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 2001.609285][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 7c 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 2001.628889][ C1] RSP: 0018:ffffc9000e6979e0 EFLAGS: 00000293 [ 2001.634974][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81add19a [ 2001.642943][ C1] RDX: ffff888030660000 RSI: ffffffff81add174 RDI: 0000000000000005 [ 2001.650908][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 2001.658871][ C1] R10: 0000000000000001 R11: 0000000000000007 R12: ffffed10170c8d41 [ 2001.666833][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 2001.674799][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2001.683729][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2001.690320][ C1] CR2: 0000555567209808 CR3: 000000000df80000 CR4: 00000000003526f0 [ 2001.698287][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2001.706250][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2001.714216][ C1] Call Trace: [ 2001.717489][ C1] [ 2001.720324][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 2001.726652][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 2001.731846][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 2001.737307][ C1] ? timekeeping_advance+0x72e/0xa90 [ 2001.742588][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 2001.748216][ C1] ? __asan_memcpy+0x3c/0x60 [ 2001.752820][ C1] ? rcu_is_watching+0x12/0xc0 [ 2001.757582][ C1] ? update_process_times+0x178/0x2d0 [ 2001.762957][ C1] ? __pfx_update_process_times+0x10/0x10 [ 2001.768678][ C1] ? update_wall_time+0x1c/0x40 [ 2001.773535][ C1] ? tick_nohz_handler+0x376/0x530 [ 2001.778644][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2001.784096][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 2001.789471][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2001.795183][ C1] ? read_tsc+0x9/0x20 [ 2001.799258][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 2001.804366][ C1] ? sched_core_idle_cpu+0x50/0x250 [ 2001.809571][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 2001.815726][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2001.821531][ C1] [ 2001.824457][ C1] [ 2001.827381][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2001.833540][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 2001.839605][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 2001.845670][ C1] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 2001.851745][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 2001.856766][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 2001.861875][ C1] text_poke_bp_batch+0x22b/0x760 [ 2001.866900][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 2001.872441][ C1] ? __jump_label_patch+0x1db/0x400 [ 2001.877639][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 2001.883881][ C1] text_poke_finish+0x30/0x40 [ 2001.888560][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 2001.894538][ C1] jump_label_update+0x1d7/0x400 [ 2001.899477][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 2001.905454][ C1] static_key_disable+0x1a/0x20 [ 2001.910304][ C1] __sched_core_put+0x38/0x50 [ 2001.914973][ C1] process_one_work+0x9c5/0x1ba0 [ 2001.919918][ C1] ? __pfx_release_one_tty+0x10/0x10 [ 2001.925198][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2001.930575][ C1] ? assign_work+0x1a0/0x250 [ 2001.935165][ C1] worker_thread+0x6c8/0xf00 [ 2001.939760][ C1] ? __kthread_parkme+0x148/0x220 [ 2001.944779][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2001.949887][ C1] kthread+0x3af/0x750 [ 2001.953956][ C1] ? __pfx_kthread+0x10/0x10 [ 2001.958542][ C1] ? lock_acquire+0x2f/0xb0 [ 2001.963060][ C1] ? __pfx_kthread+0x10/0x10 [ 2001.967650][ C1] ret_from_fork+0x45/0x80 [ 2001.972066][ C1] ? __pfx_kthread+0x10/0x10 [ 2001.976659][ C1] ret_from_fork_asm+0x1a/0x30 [ 2001.981432][ C1]