last executing test programs: 14.044235187s ago: executing program 4 (id=689): r0 = inotify_init1(0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x3, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) fcntl$setown(r0, 0x8, r1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x4851) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0xd, @empty, 0xffc}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) gettid() 13.817500267s ago: executing program 0 (id=690): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000003000000020000000000401102043ad71492c03ea971ca"], 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @private=0xa010102}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e297", 0x3, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="c318964561a174f22bf25e7fad576dc7c6eb1f772f14320b5fe141ac216b1ca158cdf1d36addd6", 0x27}, {&(0x7f0000002380)="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", 0xbe0}], 0x2}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x1b, 0x5, 0x750, 0x188, 0x2c8, 0xffffffff, 0x188, 0x2c8, 0x6f8, 0x6f8, 0xffffffff, 0x6f8, 0x6f8, 0x5, &(0x7f0000000180), {[{{@ipv6={@empty, @empty, [0xffffff00, 0x0, 0xff000000, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffff00], 'geneve1\x00', 'netpci0\x00', {}, {}, 0x0, 0x8, 0x4, 0x18}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x4, 0x0, [0x9, 0x9, 0x8b0, 0x2, 0x2, 0xfff8, 0x4, 0x1, 0x3, 0x1, 0xfff8, 0x6, 0x8, 0x100, 0xe88, 0xcda0], 0x7}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv6=@loopback, @icmp_id=0x68, @gre_key=0xc}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@length={{0x28}, {0x7, 0xfffd}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x5, @ipv6=@remote, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e23, @port=0x4e22}}}, {{@uncond, 0x0, 0x318, 0x340, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0xffffff00, 0x17], 0x5f1, 0x10, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x16}, @loopback, @local, @mcast1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x34}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2], 0xe}}, @common=@rt={{0x138}, {0xfffffff9, [0x3, 0x400], 0x10000, 0x8, 0x5, [@private1, @dev={0xfe, 0x80, '\x00', 0x19}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @dev={0xfe, 0x80, '\x00', 0x26}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @mcast1], 0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x3, 0x5}, {0x0, 0x0, 0x5}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x64, @icmp_id=0x66}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x6, 0x2, 0x5, 0x2, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, 0x6, 0x200, 0x80, 0x7, 0x7, 0x7, 0x8, 0x2, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x900000001, 0x403, 0x1, 0x4, 0x101, 0x3, 0x5, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0x100, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x3ff, 0x9, 0x1800000, 0x2, 0x82b, 0x8, 0x5, 0x0, 0x9, 0x2, 0x3ff, 0x100000000000006, 0x2, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x7, 0x200, 0x8077d, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x200, 0x7, 0x8, 0x0, 0x5, 0x97, 0x8, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x7, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x1000, 0x0, 0x3, 0x8000000000007, 0xfffffffffffff000, 0x6, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x2, 0x8, 0x5, 0x9, 0x4, 0x0, 0x7f, 0xd1]}) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c1286306ff6ee45265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b8da13c4e7bbeedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e1", 0xb6, 0xffffffffffffffff) 12.32362092s ago: executing program 4 (id=691): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r5}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0xfd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, 0x0, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000100)={0x30, r8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x99}}, 0x0) (fail_nth: 6) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, 0x0, 0x0) 12.272530096s ago: executing program 0 (id=692): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x0, @remote}}) (async, rerun: 64) r2 = io_uring_setup(0x1ed3, &(0x7f00000002c0)={0x0, 0x44b9, 0x1000, 0x1, 0x342, 0x0, r1}) (rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async, rerun: 32) r3 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x190}, &(0x7f0000000380)=0x0, &(0x7f0000000240)=0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (rerun: 32) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 11.480789585s ago: executing program 0 (id=694): gettid() socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0x0, 0x20, 0x0, 0x1c, {[@window={0xa, 0x3}, @generic={0x0, 0x2}]}}}}}}, 0x3e) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0) r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_access(r6, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r8, &(0x7f00000001c0)={0x2020}, 0x2020) 11.321142863s ago: executing program 4 (id=695): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x22) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000480)={'\x00', 0x40, 0xa, 0x1fe, 0x40000004, 0x10}) unlinkat(r4, 0x0, 0x200) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') lseek(r6, 0x2, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x58, r8, 0x800, 0x0, 0x25dfdbfd, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}]}, 0x58}, 0x1, 0x40030000000000, 0x0, 0x40c0091}, 0x800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 9.136153796s ago: executing program 3 (id=696): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x200, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000700)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) getuid() dup(r3) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="140001140040000000000000000000000000060014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r10 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8.681857219s ago: executing program 4 (id=697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r3, 0x6, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r3, 0x80, 0x4}, &(0x7f00000002c0)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000580)={0x2020}, 0x2020) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}, 0x1, 0x0, 0x0, 0x8044}, 0x0) r6 = dup(r1) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f00000004c0)=0xa83) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000000480)={0x3, &(0x7f0000000100)=""/125, &(0x7f0000000400)=[{0x5, 0x9e, 0x2, &(0x7f0000000180)=""/158}, {0x7, 0xd7, 0x1, &(0x7f0000000240)=""/215}, {0x31, 0x47, 0xff, &(0x7f0000000340)=""/71}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x3}}, 0x20) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000025c0)="88aca1339298db66f9492b5339aee24f2420a9d7102b863a8af6b6c7946e3ea894bb44878fd42d75a63a25323d5907dd9641b9985fdb64df9f0d72f478e1ae37fe36cc6f074b23d9bc135231509caf07a23075fa61936c732f8349c4fd497d2bdc106a16c557b3c4d9d2615c11c5ce3bb3717c720d6c7972", 0x78) 8.193811214s ago: executing program 0 (id=698): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_nat={0x9c, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x20000000, 0x8}, @multicast2, @remote}}]}, {0x49, 0x6, "ee60127d89fdda0f3af88f91306a606b53182d6dee7ba66b2e8b277f744f72fe8ad68bbdaf5df92400dd59c041805b3d32b20cb0af929257b8cf6ca9f0cd6fdc8aa02998ad"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000001, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x14, r4, 0x705, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594"], 0x0) 8.113241498s ago: executing program 3 (id=699): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000800)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf250200"], 0x24}}, 0x40) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioperm(0x0, 0x8000, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0xb00, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r7, 0x40045731, &(0x7f0000000140)=0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}}) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000440)=""/86, 0x56}, {&(0x7f00000004c0)=""/111, 0x6f}, {&(0x7f0000000600)=""/140, 0x8c}, {&(0x7f0000000540)}], 0x6}, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120110010928fc10ac0591122543010223010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.063149629s ago: executing program 2 (id=705): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x0, r0}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) 5.477267404s ago: executing program 4 (id=706): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x1140040, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="000504000000bee763a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000640)={[], [{@uid_gt={'uid>', 0xee00}}, {@euid_eq}, {@fowner_eq}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) syz_usb_control_io(r1, 0x0, &(0x7f0000000400)={0x84, &(0x7f00000004c0)={0x20, 0x21, 0xfffffffffffffd7e, "000025000ab7ae991dc62aeaa42653d617549dd9f882da5179136299ac8fb24370a171be2203b2a42dd61db67c0c70ce16c133fdf5f3a80e99c54b8e0bf3bf74a36d1b276668b07cd9d00989a1926157c5b6e34b189a2a0a7e73d5e8f71e0484df7314e191e9b5b36066def762f203f07f0ced5d57481fec6ee8ff3982a48a4400624e0ed2026856cc37debd2b342c096bd34d65fbdb363c29395c5aa9f623e163fdeecf07073d181e8b0b08ef85c263a0410dd8971df053"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f04000000da767981b55eb072cf458e5ae4a172b6684459045601026f4824cad68e6d7954bd917a699bd7e468aef78c731369b578f6d25b390d513b7fc6adaed05599c3ebb7dfc32e8b9d703b10e5c8da"], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000780)='contention_end\x00'}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x2}) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x2001, 0x0) prlimit64(0x0, 0x6, &(0x7f00000001c0)={0xfffffffffffffffc, 0x8b}, 0x0) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200002) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) 5.406030857s ago: executing program 2 (id=707): arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x4) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xe) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xa) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xf) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xe) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xa) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x1) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xb) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xc) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x3) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xc) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xd) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xc) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xc) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x7) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x8) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x6) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xb) 5.368036024s ago: executing program 0 (id=708): socket$kcm(0x21, 0x2, 0x2) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdfff7c}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x109, &(0x7f0000000580)={0x0, 0xf81e, 0x0, 0x3, 0x1}, &(0x7f0000000640)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000013c0)=""/4089, 0xff9) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r10, 0x0, 0x0) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 5.367513525s ago: executing program 2 (id=709): pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}, 0xffffffff}], 0x1, 0x0) 5.287103369s ago: executing program 2 (id=711): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) pwritev(r3, 0x0, 0x0, 0x81, 0x7) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f0000000000)=0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000001000100000000"]) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)=0xc) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r8 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000003c0)={0x8000201c}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mq_open(0x0, 0x42, 0x0, 0x0) 3.993887676s ago: executing program 3 (id=712): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000300), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 3.885784261s ago: executing program 2 (id=713): r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'erspan0\x00', 0x0}) r1 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0xbc, 0x0, 0x2f2317a10e0b056e, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x8000, 0x0, 0xe3, 0x2}}) 2.936387055s ago: executing program 3 (id=714): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0xf, 0x3, 0x1, 'queue1\x00', 0x7f}) close(r3) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x2}}, '.\x00'}) (async) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) (async) syz_clone(0x0, 0x0, 0x21a9964e16e9c816, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_DEBUGREGS(r7, 0x8080aea1, &(0x7f0000000480)) (async) landlock_restrict_self(r0, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.660002537s ago: executing program 2 (id=715): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e3c44cbcc9a4f4ca0f00000004001300040000001200000000000000376165cd2a7a8b971f8c31833303053b8518f8516b566cee0000000066e3ffff2eb5521b", @ANYRESHEX=r4, @ANYBLOB="e4438100"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES16=r0], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010000104000000000800000000000000", @ANYRESHEX=r0, @ANYBLOB="0000000001"], 0x20}}, 0x4000040) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006001e0089", 0xd, 0x28000000, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup2(r9, r8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f000000d6c0)={0x0, 0x0, &(0x7f000000d680)={&(0x7f000000d580)=ANY=[@ANYBLOB="240000000408030000000000000000000700000a05000300ffffffff060002"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) ptrace(0x10, r7) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r11, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r11, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r11, &(0x7f0000000ac0)="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", 0xffffff9e, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2f6c62fdf406a1a0175bd356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x22}], 0x1}, 0x0) setsockopt$inet6_int(r11, 0x29, 0x19, &(0x7f00000000c0), 0x4) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.470149974s ago: executing program 3 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r3, 0x6, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r3, 0x80, 0x4}, &(0x7f00000002c0)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000580)={0x2020}, 0x2020) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}, 0x1, 0x0, 0x0, 0x8044}, 0x0) r6 = dup(r1) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f00000004c0)=0xa83) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000000480)={0x3, &(0x7f0000000100)=""/125, &(0x7f0000000400)=[{0x5, 0x9e, 0x2, &(0x7f0000000180)=""/158}, {0x7, 0xd7, 0x1, &(0x7f0000000240)=""/215}, {0x31, 0x47, 0xff, &(0x7f0000000340)=""/71}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x3}}, 0x20) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000025c0)="88aca1339298db66f9492b5339aee24f2420a9d7102b863a8af6b6c7946e3ea894bb44878fd42d75a63a25323d5907dd9641b9985fdb64df9f0d72f478e1ae37fe36cc6f074b23d9bc135231509caf07a23075fa61936c732f8349c4fd497d2bdc106a16c557b3c4d9d2615c11c5ce3bb3717c720d6c7972", 0x78) 1.992490849s ago: executing program 1 (id=718): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70007000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x0, r0}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) 1.901351567s ago: executing program 1 (id=719): r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x2020c0, 0x2) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13da9ab7f07328}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x149882, 0x20) write$cgroup_int(r4, &(0x7f0000000040)=0x40000, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a280000001a0a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) 1.819771125s ago: executing program 0 (id=720): gettid() socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x20, 0x0, 0x1c, {[@window={0xa, 0x3}, @generic={0x0, 0x6, "d5883806"}]}}, {"a706faed3cf692307e75e5"}}}}}, 0x4d) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0) r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_access(r6, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r8, &(0x7f00000001c0)={0x2020}, 0x2020) 1.769913537s ago: executing program 1 (id=721): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x7060, 0x8000, 0xfffffffa, 0x3ad}) r1 = syz_init_net_socket$ax25(0x3, 0x7, 0xce) bind$vsock_stream(r1, &(0x7f0000009c80)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, {0x8001, 0x0, 0x2, 0x2, 0x0, 0x0, 0xfffc, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071ffff00000000de050000000098461ee300"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001480)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{}, &(0x7f00000001c0), &(0x7f0000001200)='%pI4 \x00'}, 0x20) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001500000074a933629cbfa30815008eae2e4950362438e4d9fdca1187382afda22305b5d09f8a0cd5d376973c669ee2831c1fa68474cf33d051c4ef72161938128b19557f1330ebdcfe8abfce504b77cd8172a4782ee6cb392b75cf23579767fe932735eccf6613ec2d153795a4ca5a4fc99444df"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x20, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000000000000009500000000000000"], &(0x7f00000012c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.187833674s ago: executing program 3 (id=722): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000402) lseek(r0, 0x0, 0x3) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) syz_emit_ethernet(0xd6, &(0x7f00000001c0)={@random="a0de8e1aa30e", @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8400", 0xa0, 0x6, 0xff, @remote, @mcast2, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x9, {[@md5sig={0x13, 0x12, "8afb72d8398dcbac145121cd4e97f5f2"}]}}, {"4b0395a7af3a47ed3d2433a39d3d63c06cfe1123e66dd94d95ee0f4d65b7d1ec590ae06e49b20f67e39e81f9bcc8e657766513979e9b8f310136d0da53ec3e19a6743a9a2c2fc9f64a19da9d3c9f65209f71ca64baded428844e091f3f0a272ccbca8eb29a37e74c08286878eec98e35d3fa61113743caaf"}}}}}}}, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 1.124824814s ago: executing program 1 (id=723): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) pwritev(r3, 0x0, 0x0, 0x81, 0x7) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f0000000000)=0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000001000100000000"]) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)=0xc) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r8 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000003c0)={0x8000201c}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mq_open(0x0, 0x42, 0x0, 0x0) 102.717877ms ago: executing program 1 (id=724): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000098120100240012800b00010062726964676500001400028005002c000600010005002b00020000"], 0x44}, 0x1, 0x0, 0x1f}, 0x4000) 21.889193ms ago: executing program 4 (id=725): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1b) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000400)={r2, 0xffff6721}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="02002dbd7000fbdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x4ec}, 0x1, 0x0, 0x0, 0x80}, 0x4004) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000940)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (rerun: 32) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000500)={r5, 0x4, 0x1, [0x48d, 0x7, 0x8000000000000000, 0x2, 0xeac2], [0x5, 0x40, 0x100000000, 0x1, 0x1, 0xfffffffffffffff8, 0x81, 0x7fffffff, 0x2, 0x1ff, 0xfffffffffffffffe, 0x5a4ec486, 0x54b, 0x100000001, 0x5, 0x5, 0x7, 0x717, 0x0, 0x3155, 0x9, 0x2, 0x4, 0x5, 0x678, 0x6, 0x7fffffff, 0x1, 0x7, 0x1, 0xa23, 0x6, 0x0, 0x4, 0x4, 0x5, 0x7, 0x9, 0xaf29, 0x80000001, 0xea, 0xc, 0xe, 0x24, 0x7, 0x80000001, 0x7, 0x1, 0x401, 0xa, 0x9, 0x3, 0xa753, 0x3, 0x6, 0x8, 0x4, 0x400, 0x1d, 0x9, 0x7, 0x0, 0x1, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x8, 0x7, 0xbd8e, 0x6, 0xffffffffcf3ff7ac, 0x4, 0xc547, 0x1, 0xa9, 0x1c, 0x1000, 0x7, 0x0, 0x100000001, 0x5, 0x5, 0x400, 0xfffffffffffffffb, 0x4, 0x3, 0x2, 0x4, 0xff, 0xfffffffffffffffd, 0x3, 0x7, 0x0, 0x9, 0x1, 0xb, 0x5, 0xb, 0xed3, 0x296a, 0x8, 0x9, 0x5, 0x1, 0x1ff, 0x200, 0x71310138, 0x8, 0xb, 0x7ff, 0x0, 0x6, 0x7, 0x9, 0x5, 0x3, 0x10000, 0x4556, 0x52a2, 0x9]}) (async) syz_usb_connect_ath9k(0x3, 0x1c, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40}}]}}, 0xffffffffff600000) 0s ago: executing program 1 (id=726): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@global=@item_012={0x0, 0x1, 0x6}, @main=@item_4={0x3, 0x0, 0x8, "8f0500f8"}, @local=@item_4={0x3, 0x2, 0x9, "dc370ea4"}]}}, 0x0}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x2c0500, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xe}, [@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000e80)=""/4096, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x207, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='mctp_key_acquire\x00', r2, 0x0, 0x884}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB="200000001300290a000000000000000007800000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) read$FUSE(r3, &(0x7f0000004480)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000002c0)={0x3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000300)={0x1d, r5, 0x2, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x55, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0x0, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x20000000) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) kernel console output (not intermixed with test programs): roduct=1291, bcdDevice=43.25 [ 222.755288][ T1995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 222.765051][ T5863] m920x_read = error: -19 [ 222.769394][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 222.782454][ T7672] fuse: Unknown parameter 'use00000000000000000000' [ 222.794733][ T1995] usb 5-1: Product: syz [ 222.799164][ T1995] usb 5-1: Manufacturer: syz [ 222.805629][ T1995] usb 5-1: SerialNumber: syz [ 223.569730][ T5863] m920x_read = error: -19 [ 223.575349][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 223.614080][ T5865] IPVS: starting estimator thread 0... [ 223.635418][ T1995] apple-mfi-fastcharge 5-1: config 0 descriptor?? [ 223.670709][ T7678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.464'. [ 223.675966][ T1995] apple-mfi-fastcharge 5-1: can't set config #0, error -71 [ 223.740817][ T5865] m920x_read = error: -19 [ 223.750010][ T7680] IPVS: using max 46 ests per chain, 110400 per kthread [ 223.776156][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 223.795263][ T1995] apple-mfi-fastcharge 5-1: USB disconnect, device number 19 [ 224.473318][ T5863] m920x_read = error: -19 [ 224.477698][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 224.499675][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 224.499689][ T30] audit: type=1326 audit(1747345616.547:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7818e969 code=0x7ffc0000 [ 224.849629][ T7702] Lens B: ================= START STATUS ================= [ 224.857448][ T7702] Lens B: Focus, Absolute: 0 [ 224.862386][ T7702] Lens B: ================== END STATUS ================== [ 225.198100][ T5863] m920x_read = error: -19 [ 225.217884][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 225.323782][ T7695] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 225.331349][ T7695] overlayfs: failed to set xattr on upper [ 225.337187][ T7695] overlayfs: ...falling back to redirect_dir=nofollow. [ 225.344260][ T7695] overlayfs: ...falling back to metacopy=off. [ 225.351244][ T7695] overlayfs: ...falling back to index=off. [ 225.357140][ T7695] overlayfs: ...falling back to uuid=null. [ 225.493373][ T30] audit: type=1326 audit(1747345616.587:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e7818e969 code=0x7ffc0000 [ 225.769877][ T30] audit: type=1326 audit(1747345616.587:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7818e969 code=0x7ffc0000 [ 225.899554][ T7703] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 225.959041][ T30] audit: type=1326 audit(1747345616.587:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7818e969 code=0x7ffc0000 [ 226.053564][ T5863] m920x_read = error: -19 [ 226.057934][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 226.071818][ T7711] gfs2: gfs2 mount does not exist [ 226.385097][ T5863] m920x_read = error: -19 [ 226.389565][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 227.175219][ T5863] m920x_read = error: -19 [ 227.179657][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 227.192431][ T30] audit: type=1326 audit(1747345616.587:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3e781907fc code=0x7ffc0000 [ 227.215739][ T30] audit: type=1326 audit(1747345616.587:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3e78190734 code=0x7ffc0000 [ 227.482751][ T30] audit: type=1326 audit(1747345616.587:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3e78190734 code=0x7ffc0000 [ 227.550164][ T5863] m920x_read = error: -19 [ 227.555169][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 227.639926][ T30] audit: type=1326 audit(1747345616.587:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7818e969 code=0x7ffc0000 [ 227.664244][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 227.716893][ T30] audit: type=1326 audit(1747345616.587:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3e7818e969 code=0x7ffc0000 [ 227.829701][ T5864] m920x_read = error: -19 [ 227.871850][ T30] audit: type=1326 audit(1747345616.597:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7818e969 code=0x7ffc0000 [ 227.909642][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 228.468203][ T5864] m920x_read = error: -19 [ 228.478356][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 228.485973][ T5862] IPVS: starting estimator thread 0... [ 228.609745][ T7733] IPVS: using max 74 ests per chain, 177600 per kthread [ 228.639697][ T5863] m920x_read = error: -19 [ 228.644055][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 228.749679][ T58] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 229.159830][ T5863] m920x_read = error: -19 [ 229.236723][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 229.632689][ T58] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.670801][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.739699][ T5863] m920x_read = error: -19 [ 229.744086][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 229.751965][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.752010][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.777898][ T58] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.808430][ T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.830859][ T58] usb 5-1: Product: syz [ 229.835075][ T58] usb 5-1: Manufacturer: syz [ 229.854213][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 229.941924][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 229.947203][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 229.963381][ T7771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.481'. [ 229.987504][ T58] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 230.059809][ T5863] m920x_read = error: -19 [ 230.127145][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 230.822712][ T5863] m920x_read = error: -19 [ 230.827406][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 231.175691][ T5863] m920x_read = error: -19 [ 231.406160][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 231.406939][ T7787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.644297][ T5863] m920x_read = error: -19 [ 231.662195][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 231.927231][ T7794] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7794 comm=syz.2.485 [ 231.930024][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 231.930036][ T30] audit: type=1400 audit(1747345623.977:2689): avc: denied { setopt } for pid=7791 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 231.965176][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.007731][ T30] audit: type=1400 audit(1747345624.037:2690): avc: denied { nlmsg_write } for pid=7791 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.049750][ T5863] m920x_read = error: -19 [ 232.058036][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 232.300900][ T5864] m920x_read = error: -19 [ 232.308896][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 232.332039][ T30] audit: type=1400 audit(1747345624.127:2691): avc: denied { getopt } for pid=7791 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.352944][ T58] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 232.492622][ T5864] usb 5-1: USB disconnect, device number 20 [ 232.565926][ T5812] m920x_read = error: -19 [ 232.589286][ T5812] dvb-usb: error -19 while querying for an remote control event. [ 232.632024][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 232.792575][ T5864] m920x_read = error: -19 [ 232.797893][ T58] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 232.797917][ T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.797935][ T58] usb 3-1: config 0 has no interfaces? [ 232.802052][ T58] usb 3-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 232.829620][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 232.881577][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 232.906383][ T58] usb 3-1: Product: syz [ 232.951851][ T58] usb 3-1: Manufacturer: syz [ 232.956522][ T58] usb 3-1: SerialNumber: syz [ 233.029981][ T5864] m920x_read = error: -19 [ 233.079722][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 233.089250][ T58] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 233.891857][ T5864] m920x_read = error: -19 [ 234.925017][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 234.952634][ T5812] IPVS: starting estimator thread 0... [ 235.009102][ T58] apple-mfi-fastcharge 3-1: USB disconnect, device number 17 [ 235.059084][ T7814] IPVS: using max 41 ests per chain, 98400 per kthread [ 235.101422][ T7820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7820 comm=syz.0.492 [ 235.139978][ T5812] m920x_read = error: -19 [ 235.144342][ T5812] dvb-usb: error -19 while querying for an remote control event. [ 235.209641][ T5863] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 235.328801][ T5864] m920x_read = error: -19 [ 235.364795][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 235.420011][ T5812] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 235.439731][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 236.003515][ T7792] syz.2.485 (7792): drop_caches: 2 [ 236.077433][ T5864] m920x_read = error: -19 [ 236.082590][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 236.090439][ T5863] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 236.098007][ T5863] usb 2-1: can't read configurations, error -71 [ 236.104377][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 236.159857][ T5812] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 236.190089][ T5812] usb 4-1: config 0 has no interface number 0 [ 236.196216][ T5812] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.249721][ T5812] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 236.317610][ T5864] m920x_read = error: -19 [ 236.406938][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 236.600484][ T5812] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 236.640109][ T5812] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 236.659659][ T5812] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 236.678252][ T5812] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 236.803845][ T1995] m920x_read = error: -19 [ 236.930620][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 237.101202][ T5812] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 237.150031][ T5812] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.182247][ T5812] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.231231][ T5812] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 237.242035][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.262239][ T5812] usb 4-1: Product: syz [ 237.266417][ T5812] usb 4-1: Manufacturer: syz [ 237.271433][ T1995] m920x_read = error: -19 [ 237.279722][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 237.297609][ T5812] usb 4-1: SerialNumber: syz [ 237.318550][ T5812] usb 4-1: config 0 descriptor?? [ 237.355177][ T7822] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 237.370836][ T5812] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 237.397226][ T5812] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 237.450160][ T5863] m920x_read = error: -19 [ 237.454531][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 238.411654][ T30] audit: type=1326 audit(1747345630.417:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717518e969 code=0x7fc00000 [ 238.457079][ T5862] usb 4-1: USB disconnect, device number 14 [ 238.528525][ T30] audit: type=1326 audit(1747345630.417:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f717518e969 code=0x7fc00000 [ 238.552305][ T30] audit: type=1326 audit(1747345630.417:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717518e969 code=0x7fc00000 [ 238.597578][ T5863] m920x_read = error: -19 [ 238.601988][ T30] audit: type=1326 audit(1747345630.417:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717518e969 code=0x7fc00000 [ 238.625708][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 238.670867][ T30] audit: type=1326 audit(1747345630.417:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717518e969 code=0x7fc00000 [ 238.694196][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.722214][ T30] audit: type=1326 audit(1747345630.417:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717518e969 code=0x7fc00000 [ 238.745555][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.147646][ T5863] m920x_read = error: -19 [ 239.152065][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 239.177122][ T30] audit: type=1326 audit(1747345630.417:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717518e969 code=0x7fc00000 [ 239.206314][ T30] audit: type=1326 audit(1747345630.417:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717518e969 code=0x7fc00000 [ 239.229621][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.236295][ T30] audit: type=1326 audit(1747345630.417:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717518e969 code=0x7fc00000 [ 239.259632][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.269233][ T5862] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 239.283270][ T30] audit: type=1326 audit(1747345630.417:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717518e969 code=0x7fc00000 [ 239.492514][ T5863] m920x_read = error: -19 [ 240.128981][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 240.168266][ T5862] usb 1-1: device descriptor read/64, error -71 [ 240.309709][ T5863] m920x_read = error: -19 [ 240.314099][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 240.489773][ T1995] m920x_read = error: -19 [ 240.504104][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 241.385987][ T5862] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 241.386088][ T1995] m920x_read = error: -19 [ 241.406805][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 241.545373][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 241.589948][ T5863] m920x_read = error: -19 [ 241.596275][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 241.689693][ T5862] usb 1-1: device descriptor read/64, error -71 [ 241.696090][ T971] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 241.875056][ T5866] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 241.884276][ T5862] usb usb1-port1: attempt power cycle [ 241.949949][ T5863] m920x_read = error: -19 [ 241.954340][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 242.120608][ T5863] m920x_read = error: -19 [ 242.137185][ T971] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 242.237622][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 242.400605][ T1995] m920x_read = error: -19 [ 242.405094][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 242.476058][ T971] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.487296][ T971] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 242.498466][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 242.503827][ T971] usb 5-1: config 1 has no interface number 1 [ 242.510810][ T971] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 242.525442][ T971] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.525662][ T5866] usb 2-1: config index 0 descriptor too short (expected 8192, got 18) [ 242.547408][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.558133][ T5866] usb 2-1: config 0 has no interfaces? [ 242.565061][ T971] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.574644][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.582990][ T971] usb 5-1: Product: syz [ 242.587574][ T971] usb 5-1: Manufacturer: syz [ 242.592967][ T971] usb 5-1: SerialNumber: syz [ 242.598074][ T5866] usb 2-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 242.611679][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 242.619967][ T5866] usb 2-1: Product: syz [ 242.624837][ T5866] usb 2-1: Manufacturer: syz [ 242.629480][ T5866] usb 2-1: SerialNumber: syz [ 242.636661][ T5866] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 242.650333][ T1995] m920x_read = error: -19 [ 242.655105][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 242.686625][ T5862] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 242.713522][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 242.720904][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.736772][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.833081][ T1995] m920x_read = error: -19 [ 242.837540][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 243.050094][ T1995] m920x_read = error: -19 [ 243.073467][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 243.158457][ T7873] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 243.288517][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 243.311027][ T5812] m920x_read = error: -19 [ 243.314458][ T5866] apple-mfi-fastcharge 2-1: USB disconnect, device number 23 [ 243.330855][ T7873] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 243.333823][ T5812] dvb-usb: error -19 while querying for an remote control event. [ 243.401939][ T5862] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 243.559911][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.633263][ T5862] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 243.643196][ T5862] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 243.720057][ T5862] usb 1-1: Manufacturer: syz [ 243.727554][ T971] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 243.742397][ T5862] usb 1-1: config 0 descriptor?? [ 243.747494][ T971] usb 5-1: MIDIStreaming interface descriptor not found [ 244.357208][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 244.357224][ T30] audit: type=1400 audit(1747345636.087:2760): avc: denied { write } for pid=7922 comm="syz.3.511" name="file0" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.697847][ T5812] m920x_read = error: -19 [ 244.720053][ T971] usb 5-1: USB disconnect, device number 21 [ 244.727482][ T30] audit: type=1400 audit(1747345636.097:2761): avc: denied { open } for pid=7922 comm="syz.3.511" path="/106/file0" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.733901][ T5812] dvb-usb: error -19 while querying for an remote control event. [ 245.229468][ T30] audit: type=1400 audit(1747345636.107:2762): avc: denied { ioctl } for pid=7922 comm="syz.3.511" path="/106/file0" dev="tmpfs" ino=572 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 245.267968][ T30] audit: type=1400 audit(1747345636.447:2763): avc: denied { unlink } for pid=5824 comm="syz-executor" name="file0" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 245.434110][ T5863] m920x_read = error: -19 [ 245.438485][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 245.450940][ T7937] udevd[7937]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.469504][ T30] audit: type=1400 audit(1747345637.347:2764): avc: denied { accept } for pid=7929 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.536876][ T30] audit: type=1400 audit(1747345637.347:2765): avc: denied { read } for pid=7929 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.581716][ T30] audit: type=1400 audit(1747345637.527:2766): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 245.619706][ T5863] m920x_read = error: -19 [ 245.624120][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 245.800539][ T5812] m920x_read = error: -19 [ 245.804999][ T5812] dvb-usb: error -19 while querying for an remote control event. [ 246.255276][ T5812] m920x_read = error: -19 [ 246.259710][ T5812] dvb-usb: error -19 while querying for an remote control event. [ 246.420785][ T5812] m920x_read = error: -19 [ 246.425160][ T5812] dvb-usb: error -19 while querying for an remote control event. [ 246.609764][ T5863] m920x_read = error: -19 [ 246.615764][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 246.881960][ T5863] m920x_read = error: -19 [ 246.886331][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 247.000214][ T7956] program syz.1.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.137987][ T7954] program syz.4.515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.165000][ T5863] m920x_read = error: -19 [ 247.169413][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 247.406832][ T5863] m920x_read = error: -19 [ 247.485206][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 247.560312][ T30] audit: type=1326 audit(1747345639.587:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 247.583610][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.668505][ T30] audit: type=1326 audit(1747345639.587:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 247.695123][ T30] audit: type=1326 audit(1747345639.587:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 247.718410][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.774138][ T5862] rc_core: IR keymap rc-hauppauge not found [ 247.780216][ T5862] Registered IR keymap rc-empty [ 247.785656][ T5862] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.799771][ T5864] m920x_read = error: -19 [ 247.804124][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 248.028378][ T5864] m920x_read = error: -19 [ 248.326590][ T5862] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 248.363222][ T5862] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 248.371173][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 248.616406][ T5864] m920x_read = error: -19 [ 248.718443][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 248.780935][ T5862] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input11 [ 248.799816][ T5862] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 248.822861][ T5862] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 248.849808][ T5862] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 248.992922][ T5864] m920x_read = error: -19 [ 248.997296][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 249.019691][ T5862] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.039734][ T5862] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.119817][ T5862] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.149692][ T5862] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.199831][ T5864] m920x_read = error: -19 [ 249.207324][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 249.219729][ T5862] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.240187][ T5862] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.280170][ T5862] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.303419][ T5862] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 249.331842][ T5862] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 249.383953][ T5862] usb 1-1: USB disconnect, device number 22 [ 249.408924][ T5864] m920x_read = error: -19 [ 249.427652][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 249.657610][ T5864] m920x_read = error: -19 [ 249.668907][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 249.938708][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 250.101995][ T5864] m920x_read = error: -19 [ 250.181595][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 250.251141][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 250.265469][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 250.282921][ T8018] xt_HMARK: spi-set and port-set can't be combined [ 250.290840][ T5866] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 250.559837][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 250.599944][ T30] kauditd_printk_skb: 973 callbacks suppressed [ 250.599957][ T30] audit: type=1400 audit(1747345642.647:3743): avc: denied { relabelfrom } for pid=8019 comm="syz.2.530" name="" dev="pipefs" ino=16052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 250.634666][ T5866] usb 4-1: config index 0 descriptor too short (expected 8192, got 18) [ 250.647992][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.661712][ T5866] usb 4-1: config 0 has no interfaces? [ 250.670201][ T5866] usb 4-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 250.679272][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 250.687790][ T5866] usb 4-1: Product: syz [ 250.692038][ T5866] usb 4-1: Manufacturer: syz [ 250.696642][ T5866] usb 4-1: SerialNumber: syz [ 250.711199][ T5866] apple-mfi-fastcharge 4-1: config 0 descriptor?? [ 250.752468][ T1995] m920x_read = error: -19 [ 250.756959][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 250.849851][ T5864] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 250.889692][ T5863] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 251.001323][ T5866] apple-mfi-fastcharge 4-1: USB disconnect, device number 15 [ 251.160787][ T5815] Bluetooth: hci4: command 0x0405 tx timeout [ 251.188623][ T1995] m920x_read = error: -19 [ 251.215283][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 251.523629][ T5812] m920x_read = error: -19 [ 251.529065][ T5812] dvb-usb: error -19 while querying for an remote control event. [ 251.560432][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 251.605646][ T5864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.926026][ T5863] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 251.964756][ T30] audit: type=1326 audit(1747345643.937:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 252.043476][ T5864] usb 3-1: config 249 has an invalid interface number: 177 but max is 0 [ 252.070215][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.137009][ T5864] usb 3-1: config 249 has no interface number 0 [ 252.172372][ T1995] m920x_read = error: -19 [ 252.180229][ T5863] usb 2-1: config 0 descriptor?? [ 252.193902][ T5864] usb 3-1: config 249 interface 177 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 252.207351][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 252.221335][ T30] audit: type=1326 audit(1747345643.937:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 252.248632][ T5863] gspca_main: sq930x-2.14.0 probing 041e:403c [ 252.265645][ T5864] usb 3-1: config 249 interface 177 altsetting 0 has an endpoint descriptor with address 0x53, changing to 0x3 [ 252.300892][ T5864] usb 3-1: config 249 interface 177 altsetting 0 endpoint 0x3 has invalid maxpacket 65199, setting to 1024 [ 252.313017][ T30] audit: type=1326 audit(1747345643.937:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 252.336311][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.345574][ T5864] usb 3-1: config 249 interface 177 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 252.367217][ T5864] usb 3-1: config 249 interface 177 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.381799][ T30] audit: type=1326 audit(1747345643.937:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 252.409274][ T30] audit: type=1326 audit(1747345643.937:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 252.449515][ T1995] m920x_read = error: -19 [ 252.457748][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 252.466056][ T5864] usb 3-1: New USB device found, idVendor=057c, idProduct=3800, bcdDevice=5a.9d [ 252.478660][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.486837][ T5864] usb 3-1: Product: syz [ 252.491239][ T5864] usb 3-1: Manufacturer: syz [ 252.495894][ T5864] usb 3-1: SerialNumber: syz [ 252.503865][ T30] audit: type=1326 audit(1747345643.937:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 252.566036][ T8021] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 252.606481][ T30] audit: type=1326 audit(1747345643.937:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 252.629797][ T5865] m920x_read = error: -19 [ 252.629818][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 252.642903][ T30] audit: type=1326 audit(1747345643.937:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 252.674950][ T8022] gtp0: entered allmulticast mode [ 252.680427][ T30] audit: type=1326 audit(1747345643.937:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 252.739764][ T8042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.535'. [ 252.789796][ T5865] m920x_read = error: -19 [ 252.794240][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 252.833621][ T5864] usb 3-1: USB disconnect, device number 18 [ 252.905307][ T8045] netlink: 256 bytes leftover after parsing attributes in process `syz.4.536'. [ 252.989819][ T5865] m920x_read = error: -19 [ 252.994270][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 253.169678][ T5865] m920x_read = error: -19 [ 253.175213][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 253.901794][ T1995] m920x_read = error: -19 [ 253.906211][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 253.999976][ T5863] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 254.013797][ T5863] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 254.033479][ T5863] usb 2-1: USB disconnect, device number 24 [ 254.073261][ T1995] m920x_read = error: -19 [ 254.079200][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 254.300060][ T5863] m920x_read = error: -19 [ 254.319124][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 254.454178][ T8085] program syz.3.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.344535][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.350960][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.028717][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 257.028733][ T30] audit: type=1326 audit(1747345649.034:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 257.105673][ T5863] m920x_read = error: -19 [ 257.110039][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 257.118618][ T30] audit: type=1326 audit(1747345649.034:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 257.154402][ T30] audit: type=1326 audit(1747345649.034:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 257.210770][ T30] audit: type=1326 audit(1747345649.034:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 257.249548][ T30] audit: type=1326 audit(1747345649.034:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 257.272896][ T5863] m920x_read = error: -19 [ 257.272917][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 257.424855][ T5863] m920x_read = error: -19 [ 257.429227][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 257.474299][ T30] audit: type=1326 audit(1747345649.034:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 257.553348][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 257.579805][ T8116] 9pnet_fd: Insufficient options for proto=fd [ 258.134296][ T30] audit: type=1326 audit(1747345649.034:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 258.172012][ T58] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 258.284925][ T30] audit: type=1326 audit(1747345649.034:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 258.298099][ T1995] m920x_read = error: -19 [ 258.388652][ T30] audit: type=1326 audit(1747345649.045:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 258.412276][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 258.419097][ T58] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 258.463183][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 258.467039][ T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.516552][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 258.525752][ T30] audit: type=1326 audit(1747345649.045:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20cb8e969 code=0x7fc00000 [ 258.636834][ T1995] m920x_read = error: -19 [ 258.641324][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 258.782950][ T58] usb 3-1: config 0 has no interfaces? [ 258.798498][ T58] usb 3-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 258.803605][ T1995] m920x_read = error: -19 [ 258.818112][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 258.836122][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 258.836137][ T58] usb 3-1: Product: syz [ 259.037189][ T1995] m920x_read = error: -19 [ 259.041538][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 259.055773][ T58] usb 3-1: Manufacturer: syz [ 259.070136][ T58] usb 3-1: SerialNumber: syz [ 259.132141][ T58] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 259.233457][ T1995] m920x_read = error: -19 [ 259.278173][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 259.417266][ T5862] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 259.455269][ T1995] m920x_read = error: -19 [ 259.459654][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 259.575743][ T8131] program syz.4.556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.592733][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.631217][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.640326][ T1995] m920x_read = error: -19 [ 259.649504][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 259.674763][ T5862] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 259.706277][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.738855][ T5862] usb 2-1: config 0 descriptor?? [ 259.834823][ T1995] m920x_read = error: -19 [ 259.839204][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 261.210158][ T58] apple-mfi-fastcharge 3-1: USB disconnect, device number 19 [ 261.315557][ T5865] m920x_read = error: -19 [ 261.322842][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 261.473778][ T5862] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 261.516117][ T8154] lo speed is unknown, defaulting to 1000 [ 261.523731][ T8154] lo speed is unknown, defaulting to 1000 [ 261.545318][ T8154] lo speed is unknown, defaulting to 1000 [ 261.564849][ T5865] m920x_read = error: -19 [ 261.569482][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 261.722697][ T8156] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 261.730490][ T8156] overlayfs: failed to set xattr on upper [ 261.736379][ T8156] overlayfs: ...falling back to redirect_dir=nofollow. [ 261.746196][ T8156] overlayfs: ...falling back to metacopy=off. [ 261.753379][ T8156] overlayfs: ...falling back to index=off. [ 261.759958][ T8156] overlayfs: ...falling back to uuid=null. [ 261.959314][ T5865] m920x_read = error: -19 [ 261.994916][ T8154] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 262.013989][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 262.114462][ T8154] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 262.235796][ T5863] m920x_read = error: -19 [ 262.240247][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 262.281690][ T8154] lo speed is unknown, defaulting to 1000 [ 262.331597][ T8154] lo speed is unknown, defaulting to 1000 [ 262.347619][ T8154] lo speed is unknown, defaulting to 1000 [ 262.355771][ T8154] lo speed is unknown, defaulting to 1000 [ 262.377414][ T8154] lo speed is unknown, defaulting to 1000 [ 262.392238][ T5862] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 262.400867][ T5862] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 262.415308][ T5862] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71 [ 262.422429][ T5865] m920x_read = error: -19 [ 262.429164][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 262.461438][ T5862] usb 2-1: USB disconnect, device number 25 [ 262.466015][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 262.466027][ T30] audit: type=1400 audit(1747345654.672:3879): avc: denied { map } for pid=8163 comm="syz.2.563" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 262.534370][ T30] audit: type=1400 audit(1747345654.713:3880): avc: denied { execute } for pid=8163 comm="syz.2.563" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 262.578265][ T971] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 262.584041][ T30] audit: type=1400 audit(1747345654.795:3881): avc: denied { append } for pid=8165 comm="syz.3.564" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 262.616170][ T5863] m920x_read = error: -19 [ 262.621055][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 262.631873][ T30] audit: type=1400 audit(1747345654.846:3882): avc: denied { ioctl } for pid=8165 comm="syz.3.564" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 262.688797][ T30] audit: type=1400 audit(1747345654.897:3883): avc: denied { call } for pid=8165 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 262.726888][ T30] audit: type=1400 audit(1747345654.938:3884): avc: denied { wake_alarm } for pid=8167 comm="syz.4.565" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 262.756251][ T971] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.765112][ T971] usb 1-1: config 0 has no interface number 0 [ 262.774147][ T971] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.783438][ T5863] m920x_read = error: -19 [ 262.789317][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 262.797212][ T971] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.797220][ T5865] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 262.815585][ T971] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 262.828945][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.862125][ T971] usb 1-1: config 0 descriptor?? [ 262.950106][ T1995] m920x_read = error: -19 [ 262.954657][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 262.975061][ T5865] usb 3-1: config 0 has an invalid interface number: 114 but max is 0 [ 263.152275][ T5865] usb 3-1: config 0 has no interface number 0 [ 263.169505][ T5865] usb 3-1: too many endpoints for config 0 interface 114 altsetting 111: 112, using maximum allowed: 30 [ 263.182121][ T5865] usb 3-1: config 0 interface 114 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 263.196167][ T5865] usb 3-1: config 0 interface 114 has no altsetting 0 [ 263.203924][ T5865] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 263.274943][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 263.290339][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 263.306672][ T8181] netlink: 'syz.1.567': attribute type 3 has an invalid length. [ 263.319021][ T8181] xt_HMARK: spi-set and port-set can't be combined [ 263.570371][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 263.582853][ T8182] 9pnet_fd: Insufficient options for proto=fd [ 263.650425][ T1995] m920x_read = error: -19 [ 263.666280][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 263.683528][ T5865] usb 3-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 263.693687][ T5865] usb 3-1: Manufacturer: syz [ 264.026507][ T1995] m920x_read = error: -19 [ 264.032896][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 264.045060][ T5865] usb 3-1: config 0 descriptor?? [ 264.053960][ T5865] ftdi_sio 3-1:0.114: FTDI USB Serial Device converter detected [ 264.062843][ T5865] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 264.136709][ T971] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.000C/input/input12 [ 264.199432][ T5865] m920x_read = error: -19 [ 264.207002][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 264.273834][ T5865] usb 3-1: USB disconnect, device number 20 [ 264.285814][ T5865] ftdi_sio 3-1:0.114: device disconnected [ 264.385141][ T5863] m920x_read = error: -19 [ 264.389512][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 264.419540][ T58] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 264.458971][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 264.484141][ T8190] 9pnet_fd: Insufficient options for proto=fd [ 264.841385][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 264.864452][ T58] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 264.882821][ T5917] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 264.897498][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.912863][ T971] holtek_kbd 0003:04D9:A055.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 264.991653][ T5865] m920x_read = error: -19 [ 264.995111][ T58] usb 5-1: config 0 has no interfaces? [ 265.005867][ T971] usb 1-1: USB disconnect, device number 23 [ 265.025589][ T58] usb 5-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 265.096530][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 265.096845][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 265.126938][ T5917] usb 2-1: config index 0 descriptor too short (expected 8192, got 18) [ 265.241204][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.254138][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 265.280293][ T58] usb 5-1: Product: syz [ 265.293078][ T5865] m920x_read = error: -19 [ 265.300390][ T5917] usb 2-1: config 0 has no interfaces? [ 265.302187][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 265.319227][ T58] usb 5-1: Manufacturer: syz [ 265.338016][ T5917] usb 2-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 265.357018][ T58] usb 5-1: SerialNumber: syz [ 265.360290][ T8195] fido_id[8195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 265.388106][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 265.404288][ T58] apple-mfi-fastcharge 5-1: config 0 descriptor?? [ 265.432103][ T5917] usb 2-1: Product: syz [ 265.439613][ T5917] usb 2-1: Manufacturer: syz [ 265.447711][ T5917] usb 2-1: SerialNumber: syz [ 265.600066][ T5865] m920x_read = error: -19 [ 265.604435][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 265.651147][ T8200] netlink: 40 bytes leftover after parsing attributes in process `syz.3.572'. [ 265.664630][ T5917] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 266.083427][ T5865] m920x_read = error: -19 [ 266.088724][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 266.233429][ T30] audit: type=1400 audit(1747345658.507:3885): avc: denied { write } for pid=8207 comm="syz.0.576" path="socket:[16355]" dev="sockfs" ino=16355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.233515][ T8208] Bluetooth: MGMT ver 1.23 [ 266.333989][ T5865] m920x_read = error: -19 [ 266.342013][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 266.350452][ T8208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.576'. [ 266.361153][ T8208] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 266.512244][ T5865] m920x_read = error: -19 [ 266.517274][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 267.286850][ T8219] program syz.0.579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.341450][ T5865] m920x_read = error: -19 [ 267.574357][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 267.582748][ T5917] sysfs: cannot create duplicate filename '/class/power_supply/apple_mfi_fastcharge' [ 267.601045][ T5917] CPU: 1 UID: 0 PID: 5917 Comm: kworker/1:7 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 267.601072][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.601085][ T5917] Workqueue: usb_hub_wq hub_event [ 267.601109][ T5917] Call Trace: [ 267.601114][ T5917] [ 267.601121][ T5917] dump_stack_lvl+0x16c/0x1f0 [ 267.601147][ T5917] sysfs_warn_dup+0x7f/0xa0 [ 267.601166][ T5917] sysfs_do_create_link_sd+0x124/0x140 [ 267.601187][ T5917] sysfs_create_link+0x61/0xc0 [ 267.601206][ T5917] device_add+0x62c/0x1a70 [ 267.601232][ T5917] ? __pfx_device_add+0x10/0x10 [ 267.601255][ T5917] ? lockdep_init_map_type+0x5c/0x280 [ 267.601272][ T5917] ? __raw_spin_lock_init+0x3a/0x110 [ 267.601294][ T5917] __power_supply_register.part.0+0xa4e/0x1270 [ 267.601327][ T5917] ? __pfx___power_supply_register.part.0+0x10/0x10 [ 267.601381][ T5917] power_supply_register+0xca/0x130 [ 267.601412][ T5917] mfi_fc_probe+0x16c/0x310 [ 267.601435][ T5917] ? __pfx_mfi_fc_probe+0x10/0x10 [ 267.601464][ T5917] ? blocking_notifier_call_chain+0x78/0xa0 [ 267.601498][ T5917] ? __pfx_mfi_fc_probe+0x10/0x10 [ 267.601519][ T5917] usb_probe_device+0xec/0x3e0 [ 267.601548][ T5917] ? __pfx_usb_probe_device+0x10/0x10 [ 267.601573][ T5917] really_probe+0x23e/0xa90 [ 267.601598][ T5917] __driver_probe_device+0x1de/0x440 [ 267.601617][ T5917] ? usb_driver_applicable+0x1c7/0x220 [ 267.601647][ T5917] driver_probe_device+0x4c/0x1b0 [ 267.601669][ T5917] __device_attach_driver+0x1df/0x310 [ 267.601693][ T5917] ? __pfx___device_attach_driver+0x10/0x10 [ 267.601723][ T5917] bus_for_each_drv+0x156/0x1e0 [ 267.601756][ T5917] ? __pfx_bus_for_each_drv+0x10/0x10 [ 267.601784][ T5917] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.601808][ T5917] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 267.601839][ T5917] __device_attach+0x1e4/0x4b0 [ 267.601860][ T5917] ? __pfx___device_attach+0x10/0x10 [ 267.601880][ T5917] ? do_raw_spin_unlock+0x172/0x230 [ 267.601905][ T5917] bus_probe_device+0x17f/0x1c0 [ 267.601937][ T5917] device_add+0x1148/0x1a70 [ 267.601961][ T5917] ? __pfx_device_add+0x10/0x10 [ 267.601983][ T5917] ? add_device_randomness+0xb7/0xf0 [ 267.602010][ T5917] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 267.602041][ T5917] usb_new_device+0xd07/0x1a20 [ 267.602068][ T5917] ? do_raw_spin_lock+0x12c/0x2b0 [ 267.602088][ T5917] ? __pfx_usb_new_device+0x10/0x10 [ 267.602111][ T5917] ? mark_held_locks+0x49/0x80 [ 267.602142][ T5917] hub_event+0x2eb7/0x4fa0 [ 267.602191][ T5917] ? __pfx_hub_event+0x10/0x10 [ 267.602213][ T5917] ? debug_object_deactivate+0x1ec/0x3a0 [ 267.602243][ T5917] ? rcu_is_watching+0x12/0xc0 [ 267.602276][ T5917] process_one_work+0x9cf/0x1b70 [ 267.602306][ T5917] ? __pfx_hcd_resume_work+0x10/0x10 [ 267.602331][ T5917] ? __pfx_process_one_work+0x10/0x10 [ 267.602359][ T5917] ? assign_work+0x1a0/0x250 [ 267.602380][ T5917] worker_thread+0x6c8/0xf10 [ 267.602409][ T5917] ? __kthread_parkme+0x19e/0x250 [ 267.602436][ T5917] ? __pfx_worker_thread+0x10/0x10 [ 267.602462][ T5917] kthread+0x3c2/0x780 [ 267.602481][ T5917] ? __pfx_kthread+0x10/0x10 [ 267.602496][ T5917] ? __pfx_kthread+0x10/0x10 [ 267.602513][ T5917] ? __pfx_kthread+0x10/0x10 [ 267.602529][ T5917] ? __pfx_kthread+0x10/0x10 [ 267.602551][ T5917] ? rcu_is_watching+0x12/0xc0 [ 267.602572][ T5917] ? __pfx_kthread+0x10/0x10 [ 267.602590][ T5917] ret_from_fork+0x45/0x80 [ 267.602608][ T5917] ? __pfx_kthread+0x10/0x10 [ 267.602626][ T5917] ret_from_fork_asm+0x1a/0x30 [ 267.602665][ T5917] [ 268.125881][ T58] apple-mfi-fastcharge 5-1: USB disconnect, device number 22 [ 268.133981][ T5917] apple-mfi-fastcharge 2-1: Can't register battery [ 268.140527][ T5917] apple-mfi-fastcharge 2-1: probe with driver apple-mfi-fastcharge failed with error -17 [ 268.150535][ T5917] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 268.159237][ T5917] usb 2-1: USB disconnect, device number 26 [ 268.164580][ T5865] m920x_read = error: -19 [ 268.169458][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 268.185117][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 268.609408][ T5865] m920x_read = error: -19 [ 268.614204][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 269.764492][ T5865] m920x_read = error: -19 [ 269.782020][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 270.452849][ T5865] m920x_read = error: -19 [ 270.457243][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 270.620153][ T1995] m920x_read = error: -19 [ 270.624527][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 270.642994][ T8253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.588'. [ 272.960865][ T1995] m920x_read = error: -19 [ 272.965237][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 273.971778][ T5865] m920x_read = error: -19 [ 274.029245][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 274.291566][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 274.310315][ T8265] 9pnet_fd: Insufficient options for proto=fd [ 274.501553][ T8272] program syz.4.590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.682551][ T58] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 274.841261][ T1995] m920x_read = error: -19 [ 274.845642][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 274.992235][ T5865] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 275.091021][ T5863] m920x_read = error: -19 [ 275.095615][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 275.128102][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.592'. [ 275.923825][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 275.935232][ T5863] m920x_read = error: -19 [ 275.935961][ T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.950992][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 276.010283][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 276.128103][ T5864] m920x_read = error: -19 [ 276.516405][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 276.524230][ T5865] usb 2-1: config index 0 descriptor too short (expected 8192, got 18) [ 276.535289][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.546124][ T5865] usb 2-1: config 0 has no interfaces? [ 276.551779][ T30] audit: type=1326 audit(1747345668.686:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 276.624054][ T5865] usb 2-1: string descriptor 0 read error: -71 [ 276.630268][ T5865] usb 2-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 276.642663][ T30] audit: type=1326 audit(1747345668.686:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 276.723710][ T5864] m920x_read = error: -19 [ 276.728089][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 276.747938][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.763445][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 276.811615][ T5865] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 276.818523][ T30] audit: type=1326 audit(1747345668.686:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 276.822433][ T58] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 276.855995][ T5865] apple-mfi-fastcharge 2-1: can't set config #0, error -71 [ 276.876613][ T5865] apple-mfi-fastcharge 2-1: USB disconnect, device number 27 [ 276.930057][ T30] audit: type=1326 audit(1747345668.686:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 276.940779][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.002122][ T58] usb 3-1: Product: syz [ 277.098522][ T58] usb 3-1: Manufacturer: syz [ 277.106651][ T58] usb 3-1: SerialNumber: syz [ 277.111915][ T1995] m920x_read = error: -19 [ 277.113344][ T58] usb 3-1: config 0 descriptor?? [ 277.126134][ T58] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 277.130680][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 277.615160][ T30] audit: type=1326 audit(1747345668.686:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 277.654276][ T58] gspca_stv06xx: st6422 sensor detected [ 277.724268][ T30] audit: type=1326 audit(1747345668.686:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 277.814029][ T1995] m920x_read = error: -19 [ 277.818395][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 277.853025][ T30] audit: type=1326 audit(1747345668.686:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 277.913604][ T58] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 277.923119][ T30] audit: type=1326 audit(1747345668.686:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 278.042218][ T5864] m920x_read = error: -19 [ 278.046569][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 278.806340][ T30] audit: type=1326 audit(1747345668.686:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 278.836247][ T30] audit: type=1326 audit(1747345668.686:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 278.903679][ T58] usb 3-1: USB disconnect, device number 21 [ 278.984987][ T5864] m920x_read = error: -19 [ 278.989353][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 279.173661][ T5897] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 279.232859][ T5864] m920x_read = error: -19 [ 279.237447][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 279.739166][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 279.761249][ T5897] usb 5-1: config 0 has an invalid interface number: 215 but max is 0 [ 279.773261][ T5897] usb 5-1: config 0 has no interface number 0 [ 279.802158][ T5897] usb 5-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 279.812124][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.831270][ T58] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 279.885784][ T5897] usb 5-1: Product: syz [ 279.973717][ T5897] usb 5-1: Manufacturer: syz [ 279.982382][ T5897] usb 5-1: SerialNumber: syz [ 280.011269][ T5897] usb 5-1: config 0 descriptor?? [ 280.130031][ T5864] m920x_read = error: -19 [ 280.141286][ T5897] io_ti 5-1:0.215: required endpoints missing [ 280.144865][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 280.157747][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.177659][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.198418][ T58] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 280.237836][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.276111][ T58] usb 3-1: config 0 descriptor?? [ 280.315433][ T5864] m920x_read = error: -19 [ 280.319833][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 280.326269][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.356773][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.504063][ T5864] m920x_read = error: -19 [ 280.543267][ T8327] program syz.0.606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.584223][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 280.760891][ T5864] usb 5-1: USB disconnect, device number 23 [ 280.874979][ T1995] m920x_read = error: -19 [ 280.880849][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 281.050067][ T5864] m920x_read = error: -19 [ 281.054443][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 281.147959][ T58] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 281.228902][ T5864] m920x_read = error: -19 [ 281.239034][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 281.261429][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 281.273069][ T8329] 9pnet_fd: Insufficient options for proto=fd [ 281.468060][ T5865] m920x_read = error: -19 [ 281.472441][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 281.635290][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 281.800638][ T8336] netlink: 'syz.0.609': attribute type 3 has an invalid length. [ 281.808385][ T8336] netlink: 'syz.0.609': attribute type 1 has an invalid length. [ 281.837404][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 281.859983][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 281.889183][ T8340] FAULT_INJECTION: forcing a failure. [ 281.889183][ T8340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.902595][ T8340] CPU: 1 UID: 0 PID: 8340 Comm: syz.4.610 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 281.902618][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.902629][ T8340] Call Trace: [ 281.902635][ T8340] [ 281.902641][ T8340] dump_stack_lvl+0x16c/0x1f0 [ 281.902674][ T8340] should_fail_ex+0x512/0x640 [ 281.902702][ T8340] _copy_from_user+0x2e/0xd0 [ 281.902727][ T8340] copy_msghdr_from_user+0x98/0x160 [ 281.902747][ T8340] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 281.902774][ T8340] ? __lock_acquire+0xaa4/0x1ba0 [ 281.902804][ T8340] ___sys_sendmsg+0xfe/0x1d0 [ 281.902824][ T8340] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.902875][ T8340] __sys_sendmsg+0x16d/0x220 [ 281.902894][ T8340] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.902911][ T8340] ? __pfx___schedule+0x10/0x10 [ 281.902950][ T8340] do_syscall_64+0xcd/0x260 [ 281.902976][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.902994][ T8340] RIP: 0033:0x7fb16438e969 [ 281.903008][ T8340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.903025][ T8340] RSP: 002b:00007fb1651ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.903042][ T8340] RAX: ffffffffffffffda RBX: 00007fb1645b6160 RCX: 00007fb16438e969 [ 281.903054][ T8340] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 281.903064][ T8340] RBP: 00007fb1651ed090 R08: 0000000000000000 R09: 0000000000000000 [ 281.903075][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.903085][ T8340] R13: 0000000000000000 R14: 00007fb1645b6160 R15: 00007fffd3503eb8 [ 281.903109][ T8340] [ 281.951717][ T5865] m920x_read = error: -19 [ 281.960063][ T5897] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 281.991911][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 282.096209][ T5864] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 282.302015][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 282.371674][ T58] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 282.384189][ T5864] usb 2-1: config index 0 descriptor too short (expected 8192, got 18) [ 282.395364][ T5897] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.408539][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.409567][ T58] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 282.420985][ T5864] usb 2-1: config 0 has no interfaces? [ 282.430875][ T1995] m920x_read = error: -19 [ 282.437884][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 282.448985][ T5864] usb 2-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 282.460593][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 282.469082][ T5897] usb 4-1: config 0 has no interface number 0 [ 282.469121][ T5897] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.469145][ T5897] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.469178][ T5897] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 282.469199][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.512737][ T58] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -71 [ 282.527021][ T5864] usb 2-1: Product: syz [ 282.527257][ T5897] usb 4-1: config 0 descriptor?? [ 282.642170][ T5865] m920x_read = error: -19 [ 282.646921][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 282.663197][ T5864] usb 2-1: Manufacturer: syz [ 282.668508][ T5864] usb 2-1: SerialNumber: syz [ 282.692310][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 282.692323][ T30] audit: type=1400 audit(1747345675.123:3953): avc: denied { execute } for pid=8344 comm="syz.4.612" path="/121/cgroup.events" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 282.698979][ T58] usb 3-1: USB disconnect, device number 22 [ 282.721592][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.759811][ T5864] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 282.824940][ T5865] m920x_read = error: -19 [ 282.829536][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 282.998999][ T5865] m920x_read = error: -19 [ 283.004999][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 283.209480][ T5865] m920x_read = error: -19 [ 283.236523][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 283.374407][ T5897] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.000E/input/input13 [ 283.429512][ T8348] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 283.436133][ T8348] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 283.443982][ T8348] vhci_hcd vhci_hcd.0: Device attached [ 283.449723][ T1995] m920x_read = error: -19 [ 283.454111][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 283.697256][ T1995] m920x_read = error: -19 [ 283.713914][ T58] usb 38-1: SetAddress Request (2) to port 0 [ 283.723272][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 283.732732][ T8353] vhci_hcd: connection closed [ 283.738823][ T58] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 283.755483][ T8103] vhci_hcd: stop threads [ 283.903092][ T1995] m920x_read = error: -19 [ 283.907579][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 284.289308][ T8103] vhci_hcd: release socket [ 284.303027][ T8103] vhci_hcd: disconnect device [ 284.317929][ T5897] holtek_kbd 0003:04D9:A055.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 284.340734][ T58] usb 38-1: enqueue for inactive port 0 [ 284.342080][ T5864] apple-mfi-fastcharge 2-1: USB disconnect, device number 28 [ 284.399717][ T30] audit: type=1326 audit(1747345676.853:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 284.445581][ T5897] usb 4-1: USB disconnect, device number 16 [ 284.493433][ T30] audit: type=1326 audit(1747345676.853:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 284.500679][ T1995] m920x_read = error: -19 [ 284.578713][ T30] audit: type=1326 audit(1747345676.853:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 284.581230][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 284.605384][ T30] audit: type=1326 audit(1747345676.853:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 284.622469][ T8360] fido_id[8360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 284.694995][ T30] audit: type=1326 audit(1747345676.853:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 284.736198][ T30] audit: type=1326 audit(1747345676.853:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 284.740472][ T58] usb usb38-port1: attempt power cycle [ 284.759495][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.782770][ T30] audit: type=1326 audit(1747345676.853:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 284.850469][ T1995] m920x_read = error: -19 [ 284.854828][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 284.883195][ T30] audit: type=1326 audit(1747345676.853:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 284.907879][ T30] audit: type=1326 audit(1747345676.853:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16438e969 code=0x7fc00000 [ 285.036828][ T1995] m920x_read = error: -19 [ 285.041911][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 285.209754][ T8379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.371533][ T5864] m920x_read = error: -19 [ 285.375948][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 285.406511][ T5897] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 285.414355][ T5866] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 285.611834][ T58] usb usb38-port1: unable to enumerate USB device [ 285.746440][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 285.850681][ T8387] netlink: 'syz.0.623': attribute type 3 has an invalid length. [ 285.858433][ T8387] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 286.002012][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 286.425825][ T1995] m920x_read = error: -19 [ 286.436648][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 286.523481][ T5864] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 286.574461][ T5866] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.583617][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.594735][ T5866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.871685][ T5865] m920x_read = error: -19 [ 286.876334][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 286.989869][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.002406][ T5866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 287.011822][ T5866] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.027084][ T5897] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 287.033549][ T5864] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 287.036641][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.056445][ T5866] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.060955][ T1995] m920x_read = error: -19 [ 287.065558][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.078115][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 287.078647][ T5897] usb 4-1: config 0 descriptor?? [ 287.085963][ T5864] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.091005][ T5866] usb 5-1: Product: syz [ 287.112763][ T5866] usb 5-1: Manufacturer: syz [ 287.116278][ T5864] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 287.131138][ T5864] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.145925][ T5866] cdc_wdm 5-1:1.0: skipping garbage [ 287.149730][ T5864] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.151730][ T5866] cdc_wdm 5-1:1.0: skipping garbage [ 287.165844][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.172872][ T5866] cdc_wdm 5-1:1.0: skipping garbage [ 287.174475][ T5864] usb 2-1: Product: syz [ 287.193124][ T5864] usb 2-1: Manufacturer: syz [ 287.206182][ T5866] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 287.212011][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 287.223361][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 287.231776][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 287.239859][ T5864] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 288.165208][ T1995] m920x_read = error: -19 [ 288.210556][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 288.281232][ T5897] usbhid 4-1:0.0: can't add hid device: -71 [ 288.343299][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 288.526758][ T5897] usb 4-1: USB disconnect, device number 17 [ 288.575296][ T5864] m920x_read = error: -19 [ 288.596675][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 288.654743][ T8405] overlay: Unknown parameter 'obj_role' [ 288.854382][ T5864] m920x_read = error: -19 [ 288.859446][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 289.026579][ T8409] Cannot find add_set index 0 as target [ 289.504456][ T5864] m920x_read = error: -19 [ 289.548331][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 289.845074][ T5897] usb 2-1: USB disconnect, device number 29 [ 289.975040][ T5864] m920x_read = error: -19 [ 289.979409][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 290.236570][ T5866] usb 5-1: USB disconnect, device number 24 [ 290.267593][ T9] m920x_read = error: -19 [ 290.283909][ T9] dvb-usb: error -19 while querying for an remote control event. [ 290.443358][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 290.476540][ T5864] m920x_read = error: -19 [ 290.480930][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 290.652503][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 290.661486][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 290.682609][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.692659][ T5865] m920x_read = error: -19 [ 290.697006][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 290.749970][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.851943][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 290.876852][ T8430] 9pnet_fd: Insufficient options for proto=fd [ 291.130888][ T5897] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 291.246322][ T5864] m920x_read = error: -19 [ 291.258406][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 291.266375][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.278875][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.293079][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 291.302178][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.360258][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 291.402066][ T8434] program syz.0.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.418831][ T5897] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 291.611247][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.753209][ T5864] m920x_read = error: -19 [ 291.757585][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 291.781354][ T5897] usb 3-1: config 0 has no interfaces? [ 291.813242][ T5897] usb 3-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 291.829938][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 291.838134][ T5897] usb 3-1: Product: syz [ 291.844045][ T5897] usb 3-1: Manufacturer: syz [ 291.851260][ T5897] usb 3-1: SerialNumber: syz [ 291.861717][ T5897] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 291.938450][ T1995] m920x_read = error: -19 [ 291.942891][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 291.972052][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 291.982252][ T9] usbtmc 2-1:16.0: can't read capabilities [ 292.213200][ T9] m920x_read = error: -19 [ 292.221006][ T9] dvb-usb: error -19 while querying for an remote control event. [ 292.358072][ T8449] process 'syz.0.635' launched '/dev/fd/6' with NULL argv: empty string added [ 292.409524][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 292.409556][ T30] audit: type=1400 audit(1747345684.866:4053): avc: denied { execute_no_trans } for pid=8438 comm="syz.0.635" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.727728][ T1995] m920x_read = error: -19 [ 292.732132][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 292.778873][ T30] audit: type=1400 audit(1747345684.896:4054): avc: denied { map } for pid=8438 comm="syz.0.635" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 292.903592][ T30] audit: type=1400 audit(1747345685.328:4055): avc: denied { listen } for pid=8438 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 292.924015][ T1995] m920x_read = error: -19 [ 293.138380][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 293.314622][ T1995] m920x_read = error: -19 [ 293.338509][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 293.492064][ T1995] usb 2-1: USB disconnect, device number 30 [ 293.665414][ T9] m920x_read = error: -19 [ 293.669837][ T9] dvb-usb: error -19 while querying for an remote control event. [ 294.089856][ T5897] apple-mfi-fastcharge 3-1: USB disconnect, device number 23 [ 294.203595][ T30] audit: type=1326 audit(1747345686.622:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 294.420515][ T5865] m920x_read = error: -19 [ 294.424916][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 294.439879][ T30] audit: type=1326 audit(1747345686.622:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 294.471515][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 294.543035][ T30] audit: type=1326 audit(1747345686.622:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 294.620797][ T5863] m920x_read = error: -19 [ 294.625244][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 294.638567][ T30] audit: type=1326 audit(1747345686.622:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 294.662844][ T30] audit: type=1326 audit(1747345686.622:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 294.696777][ T30] audit: type=1326 audit(1747345686.622:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 294.727670][ T30] audit: type=1326 audit(1747345686.622:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 294.760333][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 294.773200][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 294.949378][ T8470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.045940][ T5863] m920x_read = error: -19 [ 295.127557][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 295.140166][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 295.153046][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.198432][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 295.226402][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.243720][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 295.250603][ T8473] netlink: 140 bytes leftover after parsing attributes in process `syz.0.643'. [ 295.258219][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 295.282899][ T9] usb 5-1: Product: syz [ 295.289457][ T9] usb 5-1: Manufacturer: syz [ 295.314371][ T5863] m920x_read = error: -19 [ 295.723654][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 295.753317][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 295.759665][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 295.764877][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 295.770684][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 295.902867][ T9] m920x_read = error: -19 [ 295.917507][ T9] dvb-usb: error -19 while querying for an remote control event. [ 296.131768][ T8485] program syz.0.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.972514][ T9] m920x_read = error: -19 [ 297.130134][ T9] dvb-usb: error -19 while querying for an remote control event. [ 297.320777][ T9] m920x_read = error: -19 [ 297.332703][ T9] dvb-usb: error -19 while querying for an remote control event. [ 297.508472][ T5863] m920x_read = error: -19 [ 297.526445][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 297.703531][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 297.712692][ T5863] m920x_read = error: -19 [ 297.721240][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 297.924312][ T5863] m920x_read = error: -19 [ 297.932116][ T5866] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 297.933910][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 298.022132][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 298.121489][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 298.230478][ T5897] usb 5-1: USB disconnect, device number 25 [ 298.237202][ T5866] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 298.237356][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 298.247287][ T5866] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 298.263590][ T5866] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 298.279393][ T9] usb 2-1: can't read configurations, error -61 [ 298.286745][ T5863] m920x_read = error: -19 [ 298.295974][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 298.299420][ T5866] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 298.407660][ T5866] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 298.416990][ T5866] usb 4-1: config 0 has no interface number 0 [ 298.423169][ T5866] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 298.434320][ T5866] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 298.444721][ T5866] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 298.454762][ T5866] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.467905][ T5866] usb 4-1: config 0 interface 125 has no altsetting 0 [ 298.470707][ T5863] m920x_read = error: -19 [ 298.474761][ T5866] usb 4-1: config 0 interface 125 has no altsetting 2 [ 298.494319][ T5866] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 298.503928][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.945909][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 298.957988][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 298.985968][ T5866] usb 4-1: Product: syz [ 299.006349][ T5866] usb 4-1: Manufacturer: syz [ 299.022977][ T5866] usb 4-1: SerialNumber: syz [ 299.030448][ T5866] usb 4-1: config 0 descriptor?? [ 299.039048][ T5866] usb 4-1: selecting invalid altsetting 2 [ 299.056349][ T8512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.119394][ T5863] m920x_read = error: -19 [ 299.124087][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 299.645613][ T5863] m920x_read = error: -19 [ 299.721123][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 299.753212][ T8523] netlink: 'syz.0.656': attribute type 7 has an invalid length. [ 299.871992][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 299.881931][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 300.058031][ T5863] m920x_read = error: -19 [ 300.072790][ T5866] get_1284_register timeout [ 300.073428][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 300.115086][ C1] usb 4-1: async_complete: urb error -104 [ 300.127594][ T5866] uss720 4-1:0.125: probe with driver uss720 failed with error -5 [ 300.339327][ T8526] bridge1: entered promiscuous mode [ 300.441338][ T9] m920x_read = error: -19 [ 300.445940][ T9] dvb-usb: error -19 while querying for an remote control event. [ 300.481057][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 300.481072][ T30] audit: type=1400 audit(1747345692.996:4122): avc: denied { write } for pid=8525 comm="syz.4.657" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 300.575791][ T8531] program syz.1.658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.596893][ T30] audit: type=1400 audit(1747345693.006:4123): avc: denied { write } for pid=8525 comm="syz.4.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 300.744668][ T30] audit: type=1400 audit(1747345693.217:4124): avc: denied { write } for pid=8530 comm="syz.0.659" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 300.947465][ T9] m920x_read = error: -19 [ 300.951849][ T9] dvb-usb: error -19 while querying for an remote control event. [ 301.105721][ T8539] netlink: 60 bytes leftover after parsing attributes in process `syz.4.662'. [ 301.107452][ T8540] netlink: 60 bytes leftover after parsing attributes in process `syz.4.662'. [ 301.135733][ T9] m920x_read = error: -19 [ 301.147387][ T9] dvb-usb: error -19 while querying for an remote control event. [ 301.280631][ T5866] usb 4-1: USB disconnect, device number 18 [ 301.319286][ T5864] m920x_read = error: -19 [ 301.323648][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 301.515263][ T5864] m920x_read = error: -19 [ 301.523609][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 302.450411][ T5864] m920x_read = error: -19 [ 302.459065][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 302.699491][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 302.709889][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 302.730049][ T9] m920x_read = error: -19 [ 302.875399][ T9] dvb-usb: error -19 while querying for an remote control event. [ 303.148700][ T5864] m920x_read = error: -19 [ 303.168074][ T8572] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 303.175488][ T8572] overlayfs: failed to set xattr on upper [ 303.181242][ T8572] overlayfs: ...falling back to redirect_dir=nofollow. [ 303.191006][ T8572] overlayfs: ...falling back to metacopy=off. [ 303.197864][ T8572] overlayfs: ...falling back to index=off. [ 303.204542][ T8572] overlayfs: ...falling back to uuid=null. [ 303.217104][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 303.272327][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 303.459579][ T8576] netlink: 140 bytes leftover after parsing attributes in process `syz.3.674'. [ 303.591378][ T1995] m920x_read = error: -19 [ 303.604488][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 303.615661][ T9] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 303.855315][ T9] usb 3-1: config 0 has no interface number 0 [ 303.881456][ T9] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.951544][ T5864] m920x_read = error: -19 [ 303.958086][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 303.969644][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 304.093218][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.113590][ T9] usb 3-1: Product: syz [ 304.584317][ T1995] m920x_read = error: -19 [ 304.591251][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 304.599019][ T9] usb 3-1: Manufacturer: syz [ 304.604870][ T9] usb 3-1: SerialNumber: syz [ 304.616398][ T9] usb 3-1: config 0 descriptor?? [ 304.785499][ T5864] m920x_read = error: -19 [ 304.791596][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 304.891268][ T9] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 304.899111][ T9] keyspan 3-1:0.133: unsupported endpoint type 0 [ 304.907128][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 304.915306][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 304.926873][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 304.953664][ T5864] m920x_read = error: -19 [ 304.958034][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 304.982332][ T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 305.005402][ T9] usb 3-1: USB disconnect, device number 24 [ 305.014412][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 305.029374][ T9] keyspan 3-1:0.133: device disconnected [ 306.023237][ T5864] m920x_read = error: -19 [ 306.028056][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 306.826821][ T9] m920x_read = error: -19 [ 306.831199][ T9] dvb-usb: error -19 while querying for an remote control event. [ 306.910795][ T8611] FAULT_INJECTION: forcing a failure. [ 306.910795][ T8611] name failslab, interval 1, probability 0, space 0, times 0 [ 306.923625][ T8611] CPU: 0 UID: 0 PID: 8611 Comm: syz.2.681 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 306.923649][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.923658][ T8611] Call Trace: [ 306.923663][ T8611] [ 306.923667][ T8611] dump_stack_lvl+0x16c/0x1f0 [ 306.923687][ T8611] should_fail_ex+0x512/0x640 [ 306.923703][ T8611] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 306.923716][ T8611] should_failslab+0xc2/0x120 [ 306.923729][ T8611] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 306.923740][ T8611] ? __alloc_skb+0x2b2/0x380 [ 306.923754][ T8611] __alloc_skb+0x2b2/0x380 [ 306.923765][ T8611] ? __pfx___alloc_skb+0x10/0x10 [ 306.923777][ T8611] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 306.923794][ T8611] netlink_alloc_large_skb+0x69/0x130 [ 306.923809][ T8611] netlink_sendmsg+0x6a1/0xdd0 [ 306.923825][ T8611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.923844][ T8611] ____sys_sendmsg+0xa98/0xc70 [ 306.923860][ T8611] ? copy_msghdr_from_user+0x10a/0x160 [ 306.923872][ T8611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.923893][ T8611] ___sys_sendmsg+0x134/0x1d0 [ 306.923906][ T8611] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.923934][ T8611] __sys_sendmsg+0x16d/0x220 [ 306.923946][ T8611] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.923967][ T8611] do_syscall_64+0xcd/0x260 [ 306.923984][ T8611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.923995][ T8611] RIP: 0033:0x7f717518e969 [ 306.924005][ T8611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.924016][ T8611] RSP: 002b:00007f7176031038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.924027][ T8611] RAX: ffffffffffffffda RBX: 00007f71753b6080 RCX: 00007f717518e969 [ 306.924034][ T8611] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 306.924040][ T8611] RBP: 00007f7176031090 R08: 0000000000000000 R09: 0000000000000000 [ 306.924047][ T8611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.924053][ T8611] R13: 0000000000000000 R14: 00007f71753b6080 R15: 00007ffd1b4b8748 [ 306.924066][ T8611] [ 307.144888][ T9] m920x_read = error: -19 [ 307.149700][ T9] dvb-usb: error -19 while querying for an remote control event. [ 307.450214][ T9] m920x_read = error: -19 [ 307.454594][ T9] dvb-usb: error -19 while querying for an remote control event. [ 307.645116][ T8622] blktrace: Concurrent blktraces are not allowed on loop4 [ 308.215687][ T5864] m920x_read = error: -19 [ 308.220030][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 308.234213][ T5815] Bluetooth: hci4: command 0x0405 tx timeout [ 308.335330][ T8623] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 308.342294][ T8623] overlayfs: failed to set xattr on upper [ 308.364937][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 308.367424][ T30] audit: type=1400 audit(1747345700.898:4125): avc: denied { module_request } for pid=8626 comm="syz.0.687" kmod="crypto-cryptd(__generic-gcm-aesni-avx)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 308.375153][ T8623] overlayfs: ...falling back to redirect_dir=nofollow. [ 308.415952][ T8623] overlayfs: ...falling back to metacopy=off. [ 308.422374][ T8623] overlayfs: ...falling back to index=off. [ 308.433754][ T8623] overlayfs: ...falling back to uuid=null. [ 308.440899][ T5864] m920x_read = error: -19 [ 308.456986][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 308.492206][ T8631] vivid-000: ================= START STATUS ================= [ 308.545018][ T8631] vivid-000: Radio HW Seek Mode: Bounded [ 308.551058][ T8631] vivid-000: Radio Programmable HW Seek: false [ 308.576689][ T8631] vivid-000: RDS Rx I/O Mode: Block I/O [ 308.583044][ T8631] vivid-000: Generate RBDS Instead of RDS: false [ 308.589841][ T8631] vivid-000: RDS Reception: true [ 308.595091][ T8631] vivid-000: RDS Program Type: 0 inactive [ 308.611030][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.627131][ T8631] vivid-000: RDS PS Name: inactive [ 308.632418][ T8631] vivid-000: RDS Radio Text: inactive [ 308.644913][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.664858][ T5864] m920x_read = error: -19 [ 308.668206][ T8631] vivid-000: RDS Traffic Announcement: [ 308.669196][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 308.699091][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 308.707362][ T8631] false inactive [ 308.734569][ T8631] vivid-000: RDS Traffic Program: false inactive [ 308.735533][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.752260][ T8631] vivid-000: RDS Music: false inactive [ 308.766962][ T8631] vivid-000: ================== END STATUS ================== [ 308.786270][ T9] usb 4-1: config 0 descriptor?? [ 308.824500][ T5864] m920x_read = error: -19 [ 308.829120][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 309.069905][ T5864] m920x_read = error: -19 [ 309.074601][ T5864] dvb-usb: error -19 while querying for an remote control event. [ 310.171301][ T5865] m920x_read = error: -19 [ 310.180430][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 310.193695][ T9] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 310.262333][ T5897] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 310.413248][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 310.426784][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.457158][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.463686][ T5865] m920x_read = error: -19 [ 310.473038][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 310.601736][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 310.639948][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 310.656491][ T1995] m920x_read = error: -19 [ 310.662174][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 310.675907][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.726161][ T5897] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 310.748865][ T5897] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 310.768570][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'. [ 310.779765][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'. [ 310.792658][ T8661] netlink: 'syz.4.691': attribute type 3 has an invalid length. [ 310.800375][ T8661] netlink: 'syz.4.691': attribute type 1 has an invalid length. [ 310.808191][ T8661] FAULT_INJECTION: forcing a failure. [ 310.808191][ T8661] name failslab, interval 1, probability 0, space 0, times 0 [ 310.820910][ T8661] CPU: 1 UID: 0 PID: 8661 Comm: syz.4.691 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 310.820934][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.820945][ T8661] Call Trace: [ 310.820952][ T8661] [ 310.820959][ T8661] dump_stack_lvl+0x16c/0x1f0 [ 310.820988][ T8661] should_fail_ex+0x512/0x640 [ 310.821011][ T8661] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 310.821031][ T8661] should_failslab+0xc2/0x120 [ 310.821052][ T8661] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 310.821070][ T8661] ? __alloc_skb+0x2b2/0x380 [ 310.821093][ T8661] __alloc_skb+0x2b2/0x380 [ 310.821111][ T8661] ? __pfx___alloc_skb+0x10/0x10 [ 310.821132][ T8661] ? __nla_parse+0x40/0x60 [ 310.821152][ T8661] inet_rtm_getroute+0x8fa/0x2680 [ 310.821185][ T8661] ? rcu_is_watching+0x12/0xc0 [ 310.821206][ T8661] ? trace_sched_exit_tp+0xde/0x130 [ 310.821232][ T8661] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 310.821258][ T8661] ? __schedule+0x1186/0x5de0 [ 310.821295][ T8661] ? __pfx___schedule+0x10/0x10 [ 310.821319][ T8661] ? kmem_cache_free+0x2d4/0x4d0 [ 310.821364][ T8661] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 310.821397][ T8661] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 310.821425][ T8661] rtnetlink_rcv_msg+0x95b/0xe90 [ 310.821448][ T8661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.821467][ T8661] ? __pfx___schedule+0x10/0x10 [ 310.821491][ T8661] ? __lock_acquire+0xaa4/0x1ba0 [ 310.821523][ T8661] netlink_rcv_skb+0x16a/0x440 [ 310.821550][ T8661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.821573][ T8661] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.821591][ T8661] ? find_held_lock+0x2b/0x80 [ 310.821634][ T8661] netlink_unicast+0x53d/0x7f0 [ 310.821658][ T8661] ? __pfx_netlink_unicast+0x10/0x10 [ 310.821687][ T8661] netlink_sendmsg+0x8d1/0xdd0 [ 310.821713][ T8661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.821744][ T8661] ____sys_sendmsg+0xa98/0xc70 [ 310.821769][ T8661] ? copy_msghdr_from_user+0x10a/0x160 [ 310.821788][ T8661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.821817][ T8661] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 310.821838][ T8661] ? lockdep_hardirqs_on+0x7c/0x110 [ 310.821860][ T8661] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 310.821886][ T8661] ___sys_sendmsg+0x134/0x1d0 [ 310.821906][ T8661] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.821959][ T8661] __sys_sendmsg+0x16d/0x220 [ 310.821979][ T8661] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.822014][ T8661] do_syscall_64+0xcd/0x260 [ 310.822041][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.822058][ T8661] RIP: 0033:0x7fb16438e969 [ 310.822072][ T8661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.822089][ T8661] RSP: 002b:00007fb1651ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.822107][ T8661] RAX: ffffffffffffffda RBX: 00007fb1645b6160 RCX: 00007fb16438e969 [ 310.822118][ T8661] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 310.822128][ T8661] RBP: 00007fb1651ed090 R08: 0000000000000000 R09: 0000000000000000 [ 310.822138][ T8661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.822149][ T8661] R13: 0000000000000000 R14: 00007fb1645b6160 R15: 00007fffd3503eb8 [ 310.822173][ T8661] [ 310.972253][ T5865] m920x_read = error: -19 [ 310.989394][ T5897] usb 2-1: Manufacturer: syz [ 310.992118][ T9] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 311.162864][ T5897] usb 2-1: config 0 descriptor?? [ 311.165583][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 311.341445][ T5865] m920x_read = error: -19 [ 312.283534][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 312.296576][ T9] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 313.302576][ T5865] m920x_read = error: -19 [ 313.318785][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 313.450042][ T9] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -71 [ 313.480321][ T9] usb 4-1: USB disconnect, device number 19 [ 313.547769][ T30] audit: type=1326 audit(1747345706.063:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 313.607957][ T5863] m920x_read = error: -19 [ 313.612787][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 313.621592][ T30] audit: type=1326 audit(1747345706.063:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 313.664994][ T30] audit: type=1326 audit(1747345706.063:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 313.733469][ T30] audit: type=1326 audit(1747345706.063:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 313.757071][ T30] audit: type=1326 audit(1747345706.063:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 313.780649][ T30] audit: type=1326 audit(1747345706.063:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 313.804222][ T30] audit: type=1326 audit(1747345706.063:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 313.994693][ T5863] m920x_read = error: -19 [ 313.999070][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 314.030257][ T30] audit: type=1326 audit(1747345706.063:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 314.077436][ T30] audit: type=1326 audit(1747345706.063:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 314.398819][ T30] audit: type=1326 audit(1747345706.063:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 314.419219][ T5863] m920x_read = error: -19 [ 314.431675][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 314.609207][ T5863] m920x_read = error: -19 [ 314.613587][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 314.789268][ T8689] sp0: Synchronizing with TNC [ 314.872234][ T5865] m920x_read = error: -19 [ 314.876759][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 315.039323][ T5863] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 315.238733][ T5865] m920x_read = error: -19 [ 315.288314][ T5897] rc_core: IR keymap rc-hauppauge not found [ 315.294718][ T5897] Registered IR keymap rc-empty [ 315.299739][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 315.317991][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 315.318777][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 315.332179][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 315.353981][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 315.396616][ T5897] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 315.423338][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 315.448083][ T8694] 9pnet_fd: Insufficient options for proto=fd [ 315.708507][ T5917] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 315.740803][ T5897] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input14 [ 315.798405][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 315.808205][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.823265][ T5863] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 315.839065][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.848670][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 315.868225][ T5863] usb 1-1: Product: syz [ 315.873699][ T5863] usb 1-1: Manufacturer: syz [ 315.891118][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 315.898543][ T5863] usb 1-1: SerialNumber: syz [ 315.900446][ T5863] usb 1-1: config 0 descriptor?? [ 315.948496][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 315.958733][ T5863] m920x_read = error: -19 [ 315.963658][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 315.968137][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 315.987094][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 315.999219][ T5917] usb 4-1: config index 0 descriptor too short (expected 8192, got 18) [ 316.017742][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.026703][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.046966][ T5917] usb 4-1: config 0 has no interfaces? [ 316.058392][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.078962][ T5917] usb 4-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 316.088380][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.108925][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 316.118123][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.121503][ T5863] usb 1-1: USB disconnect, device number 24 [ 316.129551][ T5917] usb 4-1: Product: syz [ 316.140087][ T5917] usb 4-1: Manufacturer: syz [ 316.144904][ T5917] usb 4-1: SerialNumber: syz [ 316.156945][ T5917] apple-mfi-fastcharge 4-1: config 0 descriptor?? [ 316.158224][ T5865] m920x_read = error: -19 [ 316.163575][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.203035][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.232807][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.242374][ T8708] netlink: 3 bytes leftover after parsing attributes in process `syz.2.703'. [ 316.266519][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 316.268061][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.420437][ T5897] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 316.428890][ T5897] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 316.583308][ T5897] usb 2-1: USB disconnect, device number 33 [ 316.600018][ T5863] m920x_read = error: -19 [ 316.605408][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 316.828353][ T5865] m920x_read = error: -19 [ 316.832812][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 317.398299][ T5865] m920x_read = error: -19 [ 317.406797][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 317.602566][ T5865] m920x_read = error: -19 [ 317.608120][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 317.769148][ T5897] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 317.828091][ T8734] program syz.2.711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.689180][ T5865] m920x_read = error: -19 [ 318.697599][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 318.719181][ T5917] apple-mfi-fastcharge 4-1: USB disconnect, device number 20 [ 318.876360][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 318.884517][ T5897] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 318.897019][ T5863] m920x_read = error: -19 [ 318.906464][ T5897] usb 5-1: config 0 has no interface number 0 [ 318.912831][ T5897] usb 5-1: config 0 interface 184 has no altsetting 0 [ 319.014470][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 319.023399][ T5897] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 319.033725][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.050739][ T5897] usb 5-1: Product: syz [ 319.054916][ T5897] usb 5-1: Manufacturer: syz [ 319.510390][ T5863] m920x_read = error: -19 [ 319.522410][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 319.533497][ T5897] usb 5-1: SerialNumber: syz [ 319.573261][ T5897] usb 5-1: config 0 descriptor?? [ 319.591464][ T5897] smsc75xx v1.0.0 [ 319.686125][ T5863] m920x_read = error: -19 [ 319.705808][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 319.916006][ T5863] m920x_read = error: -19 [ 319.921494][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 320.085839][ T9] m920x_read = error: -19 [ 320.090219][ T9] dvb-usb: error -19 while querying for an remote control event. [ 320.206627][ T5897] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 320.240329][ T5897] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 320.286210][ T5863] m920x_read = error: -19 [ 320.291300][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 320.354722][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 320.410901][ T5897] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 320.433908][ T5917] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 320.461381][ T5863] m920x_read = error: -19 [ 320.462604][ T5897] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 320.481501][ T5897] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 320.496095][ T5897] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 320.536460][ T5897] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 320.576035][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 320.625401][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 320.662396][ T5917] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 320.711695][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.725148][ T5917] usb 3-1: config 0 descriptor?? [ 320.859118][ T5865] m920x_read = error: -19 [ 320.863497][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 320.888688][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 321.059167][ T5865] m920x_read = error: -19 [ 321.108472][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 321.184550][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 321.459912][ T8775] can0: slcan on ttyprintk. [ 321.469582][ T5863] m920x_read = error: -19 [ 321.493726][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 321.664901][ T5863] m920x_read = error: -19 [ 321.677627][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 321.855130][ T5865] m920x_read = error: -19 [ 321.859689][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 322.065196][ T8786] program syz.1.723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.294840][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 322.294871][ T30] audit: type=1326 audit(1747345714.758:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 322.332730][ T5865] m920x_read = error: -19 [ 322.350572][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 322.392970][ T30] audit: type=1326 audit(1747345714.758:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 322.419324][ T30] audit: type=1326 audit(1747345714.758:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 322.447390][ T30] audit: type=1326 audit(1747345714.758:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 322.472387][ T30] audit: type=1326 audit(1747345714.758:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 322.475511][ T8761] can0 (unregistered): slcan off ttyprintk. [ 322.496382][ T30] audit: type=1326 audit(1747345714.758:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 322.526247][ T5865] m920x_read = error: -19 [ 322.531207][ T5865] dvb-usb: error -19 while querying for an remote control event. [ 322.539410][ T30] audit: type=1326 audit(1747345714.758:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 322.640713][ T30] audit: type=1326 audit(1747345714.758:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 322.671523][ T5865] usb 5-1: USB disconnect, device number 26 [ 322.700355][ T5863] m920x_read = error: -19 [ 322.707667][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 322.746584][ T30] audit: type=1326 audit(1747345714.758:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 322.772333][ T30] audit: type=1326 audit(1747345714.758:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb07f8e969 code=0x7fc00000 [ 322.850670][ T8782] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN NOPTI [ 322.862761][ T8782] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 322.871171][ T8782] CPU: 0 UID: 0 PID: 8782 Comm: syz.3.722 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 322.883061][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.893112][ T8782] RIP: 0010:do_move_mount+0x1fd/0x1930 [ 322.898575][ T8782] Code: 03 80 3c 02 00 0f 85 65 13 00 00 49 8d 44 24 48 4d 8b 76 18 48 89 c2 48 89 44 24 40 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 78 13 00 00 49 8b 44 24 48 48 89 44 24 20 4d 39 [ 322.918183][ T8782] RSP: 0018:ffffc9000397fdb8 EFLAGS: 00010206 [ 322.924246][ T8782] RAX: dffffc0000000000 RBX: ffff888079435480 RCX: ffffc90010bbb000 [ 322.932226][ T8782] RDX: 0000000000000009 RSI: ffffffff823dc424 RDI: ffff888060512560 [ 322.940193][ T8782] RBP: ffff88801eaa2aa0 R08: 0000000000000007 R09: fffffffffffff000 [ 322.948155][ T8782] R10: ffff888079435480 R11: 0000000000000000 R12: 0000000000000000 [ 322.956116][ T8782] R13: ffff88805d5f4400 R14: ffff88805d5f4400 R15: ffffc9000397fe90 [ 322.964096][ T8782] FS: 00007fb20d9576c0(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 322.973015][ T8782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.979585][ T8782] CR2: 00007f3e78172720 CR3: 0000000030eaa000 CR4: 00000000003526f0 [ 322.987547][ T8782] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 322.995503][ T8782] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 323.003465][ T8782] Call Trace: [ 323.006731][ T8782] [ 323.009655][ T8782] __do_sys_move_mount+0x3b0/0x7c0 [ 323.014759][ T8782] ? __pfx___do_sys_move_mount+0x10/0x10 [ 323.020380][ T8782] ? rcu_is_watching+0x12/0xc0 [ 323.025133][ T8782] do_syscall_64+0xcd/0x260 [ 323.029630][ T8782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.035507][ T8782] RIP: 0033:0x7fb20cb8e969 [ 323.039908][ T8782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.059505][ T8782] RSP: 002b:00007fb20d957038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 323.067903][ T8782] RAX: ffffffffffffffda RBX: 00007fb20cdb6160 RCX: 00007fb20cb8e969 [ 323.075857][ T8782] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000004 [ 323.083813][ T8782] RBP: 00007fb20cc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 323.091768][ T8782] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 323.099724][ T8782] R13: 0000000000000000 R14: 00007fb20cdb6160 R15: 00007ffd874ba6e8 [ 323.107684][ T8782] [ 323.110685][ T8782] Modules linked in: [ 323.115461][ T8782] ---[ end trace 0000000000000000 ]--- [ 323.121467][ T9] m920x_read = error: -19 [ 323.125897][ T9] dvb-usb: error -19 while querying for an remote control event. [ 323.129365][ T8782] RIP: 0010:do_move_mount+0x1fd/0x1930 [ 323.160105][ T8782] Code: 03 80 3c 02 00 0f 85 65 13 00 00 49 8d 44 24 48 4d 8b 76 18 48 89 c2 48 89 44 24 40 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 78 13 00 00 49 8b 44 24 48 48 89 44 24 20 4d 39 [ 323.180938][ T5917] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 323.191046][ T5917] asix 3-1:0.0: probe with driver asix failed with error -71 [ 323.199715][ T8782] RSP: 0018:ffffc9000397fdb8 EFLAGS: 00010206 [ 323.200699][ T5917] usb 3-1: USB disconnect, device number 25 [ 323.206434][ T8782] RAX: dffffc0000000000 RBX: ffff888079435480 RCX: ffffc90010bbb000 [ 323.221395][ T8782] RDX: 0000000000000009 RSI: ffffffff823dc424 RDI: ffff888060512560 [ 323.230241][ T8782] RBP: ffff88801eaa2aa0 R08: 0000000000000007 R09: fffffffffffff000 [ 323.238466][ T8782] R10: ffff888079435480 R11: 0000000000000000 R12: 0000000000000000 [ 323.246927][ T8782] R13: ffff88805d5f4400 R14: ffff88805d5f4400 R15: ffffc9000397fe90 [ 323.254939][ T8782] FS: 00007fb20d9576c0(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 323.263870][ T8782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.270721][ T5863] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 323.271181][ T8782] CR2: 00007fdb08180178 CR3: 0000000030eaa000 CR4: 00000000003526f0 [ 323.284063][ T1995] m920x_read = error: -19 [ 323.286491][ T8782] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 323.290630][ T1995] dvb-usb: error -19 while querying for an remote control event. [ 323.306438][ T8782] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 323.315092][ T8782] Kernel panic - not syncing: Fatal exception [ 323.321381][ T8782] Kernel Offset: disabled [ 323.325684][ T8782] Rebooting in 86400 seconds..