last executing test programs: 3m14.479210176s ago: executing program 4 (id=719): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 3m14.289584672s ago: executing program 4 (id=724): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 3m14.151294554s ago: executing program 4 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) memfd_secret(0x0) 3m14.071374813s ago: executing program 4 (id=728): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 3m13.90425558s ago: executing program 4 (id=731): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 3m13.571260962s ago: executing program 4 (id=733): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0}) 3m13.107709371s ago: executing program 32 (id=733): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0}) 2m57.005461448s ago: executing program 2 (id=932): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="c5bb36c76521", @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 2m56.934474411s ago: executing program 2 (id=933): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) 2m56.025187813s ago: executing program 2 (id=947): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40010141, 0x0, 0x0) 2m55.898610222s ago: executing program 2 (id=949): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 2m55.741133274s ago: executing program 2 (id=952): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x60dd, &(0x7f0000000000)={0x0, 0x318f, 0x1, 0x2, 0x97}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x7}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 2m55.295940934s ago: executing program 2 (id=959): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x7, 0x1}) 2m55.146110388s ago: executing program 33 (id=959): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x7, 0x1}) 2m38.453264897s ago: executing program 6 (id=1145): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d3, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m38.250733029s ago: executing program 6 (id=1147): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000580), &(0x7f0000000080)=@udp6=r0}, 0x20) 2m38.119972845s ago: executing program 6 (id=1150): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) 2m37.939916063s ago: executing program 6 (id=1152): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 2m37.823352562s ago: executing program 6 (id=1155): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054"], 0x94}}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8201, 0x4) 2m37.547960564s ago: executing program 6 (id=1161): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x0, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x1e}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m37.274115926s ago: executing program 34 (id=1161): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x0, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x1e}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 42.672410732s ago: executing program 1 (id=2545): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 42.551973035s ago: executing program 1 (id=2547): rseq(&(0x7f00000002c0), 0x20, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) fchmod(r0, 0x3c) 42.468523571s ago: executing program 1 (id=2549): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x70bd26, 0x6, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x820) 42.332433499s ago: executing program 1 (id=2552): mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000200)={[{@dyn}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x12c5c18, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) 42.279597698s ago: executing program 1 (id=2554): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000ec0)={0x44, &(0x7f0000001180)={0x0, 0x11, 0x4, "28172044"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0x8, 0x4, "b8fa3b67"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)={0x40, 0x30, 0x4, "00cfb304"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 42.271916821s ago: executing program 3 (id=2555): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 42.159115404s ago: executing program 3 (id=2556): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) lremovexattr(0x0, 0x0) 42.091599947s ago: executing program 3 (id=2559): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000012c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x4866, 0x0, 0xb, 0x0, 0x0) 41.99966182s ago: executing program 1 (id=2561): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={0x0}) 41.989890156s ago: executing program 3 (id=2562): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 41.737645363s ago: executing program 35 (id=2561): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={0x0}) 41.687892302s ago: executing program 3 (id=2565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0xc001000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008f04"]) 41.54353039s ago: executing program 3 (id=2567): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000) 41.222221785s ago: executing program 36 (id=2567): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000) 3.229287958s ago: executing program 0 (id=2954): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x10, 0x56, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000600}}) 3.119809719s ago: executing program 0 (id=2955): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.164312178s ago: executing program 0 (id=2967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000002c0)="fc66b9400101c066b8b200000066ba000000000f30f4df1d0f070f01cb640f0018ba4300b000eeba6100b016ee2e0fae6ba4", 0x32}], 0x1, 0x7e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.040274197s ago: executing program 9 (id=2969): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x2, 0x4, 0x5, 0x143, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd}, 0x94) 1.953262401s ago: executing program 8 (id=2971): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1f00, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) 1.804704588s ago: executing program 9 (id=2974): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) clock_gettime(0x6, &(0x7f00000002c0)) io_pgetevents(r1, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 1.719343334s ago: executing program 5 (id=2975): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 1.227293551s ago: executing program 5 (id=2977): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}, 0x1, 0x0, 0x0, 0xcf169c839e31a272}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 1.034762112s ago: executing program 7 (id=2978): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 974.260118ms ago: executing program 5 (id=2979): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x2fa, 0xf400, 0x0, 0x0, 0x0) 929.674563ms ago: executing program 0 (id=2980): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3004c8d1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x8002, 0x1, [0x7]}, 0xa) 770.78019ms ago: executing program 5 (id=2981): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 731.435055ms ago: executing program 7 (id=2982): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 730.474845ms ago: executing program 0 (id=2983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="0f20e035000004000f22e0c462f992a4f00080000048b848470000000000000f23d00f21f835000000010f23f8660f09c4a2cd9c3666baf80cb81a73ec86ef66bafc0cb0d8ee65470f2086c744240000000000c7442402375c0000c7442406000000000f011c24b8010000000f01c1666466420f38829f93e50000", 0x7b}], 0x1, 0x25, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 729.868664ms ago: executing program 9 (id=2984): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x28}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) 621.423685ms ago: executing program 9 (id=2985): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="d9ec94c7768cad56b6c5820fae9d6dcd3292ea54c7beef91", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000ac0)=""/170, 0xaa}], 0x1}}], 0x1, 0x8060, 0x0) 559.831003ms ago: executing program 5 (id=2986): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 559.183831ms ago: executing program 8 (id=2987): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) open_by_handle_at(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1000"], 0x0) 445.319202ms ago: executing program 8 (id=2988): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2001, 0x0) 444.980723ms ago: executing program 9 (id=2989): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 384.953038ms ago: executing program 7 (id=2990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$binfmt_script(r2, 0x0, 0xd9) write(0xffffffffffffffff, 0x0, 0x0) 383.790063ms ago: executing program 5 (id=2991): r0 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r0, 0x80079a0) lseek(r0, 0x1, 0x1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r0, r0, 0x0, 0x200007) 319.800544ms ago: executing program 7 (id=2992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 283.343311ms ago: executing program 8 (id=2993): creat(&(0x7f0000000000)='./file0\x00', 0x6a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r0 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 201.044617ms ago: executing program 8 (id=2994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x18}, 0x80) 173.950027ms ago: executing program 0 (id=2995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0x1, 0x4, 0x5}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0xa, 0x1, 0x4}) 169.144748ms ago: executing program 7 (id=2996): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 129.374349ms ago: executing program 9 (id=2997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(0x3) 57.404857ms ago: executing program 7 (id=2998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r1, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x7, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}}], 0x1, 0xc000) 0s ago: executing program 8 (id=2999): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x1, 'I'}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): 0, Product=0, SerialNumber=0 [ 258.655515][ T8445] usb 2-1: config 0 descriptor?? [ 258.668221][ T8445] hub 2-1:0.0: USB hub found [ 258.739847][ T5951] m920x_read = error: -19 [ 258.744279][ T5951] dvb-usb: error while querying for an remote control event. [ 258.859820][ T5951] m920x_read = error: -19 [ 258.864214][ T5951] dvb-usb: error while querying for an remote control event. [ 258.881888][ T8445] hub 2-1:0.0: 1 port detected [ 258.883296][T12232] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.908326][T12232] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 258.918590][T12267] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input38 [ 258.926658][T12232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.944033][T12232] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 258.980057][T12280] netlink: 'syz.0.2387': attribute type 2 has an invalid length. [ 258.986768][T12232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.994197][T12232] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 259.002088][ T5951] m920x_read = error: -19 [ 259.006050][T12232] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.006672][ T5951] dvb-usb: error while querying for an remote control event. [ 259.012678][T12232] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 259.027701][T12280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2387'. [ 259.106955][T12232] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.144687][T12232] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 259.209647][ T6109] m920x_read = error: -19 [ 259.214045][ T6109] dvb-usb: error while querying for an remote control event. [ 259.303570][ T30] audit: type=1400 audit(1758747635.441:821): avc: denied { read } for pid=12286 comm="syz.0.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 259.330185][ T8445] m920x_read = error: -19 [ 259.337907][ T8445] dvb-usb: error while querying for an remote control event. [ 259.459679][ T8446] m920x_read = error: -19 [ 259.464096][ T8446] dvb-usb: error while querying for an remote control event. [ 259.477881][ T6109] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 259.500233][ T8445] hub 2-1:0.0: activate --> -90 [ 259.599613][ T8446] m920x_read = error: -19 [ 259.604050][ T8446] dvb-usb: error while querying for an remote control event. [ 259.639420][ T6109] usb 6-1: Using ep0 maxpacket: 16 [ 259.646728][ T6109] usb 6-1: config 0 has an invalid interface number: 134 but max is 0 [ 259.658352][ T6109] usb 6-1: config 0 has no interface number 0 [ 259.667089][ T6109] usb 6-1: New USB device found, idVendor=1e2d, idProduct=004a, bcdDevice=be.0a [ 259.679731][ T6109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.687852][ T6109] usb 6-1: Product: syz [ 259.698157][ T6109] usb 6-1: Manufacturer: syz [ 259.705320][ T6109] usb 6-1: SerialNumber: syz [ 259.717988][ T6109] usb 6-1: config 0 descriptor?? [ 259.723299][ T8446] m920x_read = error: -19 [ 259.727664][ T8446] dvb-usb: error while querying for an remote control event. [ 259.849513][ T6109] m920x_read = error: -19 [ 259.853899][ T6109] dvb-usb: error while querying for an remote control event. [ 259.904269][ T8457] usb 2-1: USB disconnect, device number 36 [ 259.978666][ T6109] m920x_read = error: -19 [ 259.986238][ T6109] dvb-usb: error while querying for an remote control event. [ 259.997302][ T5951] usb 6-1: USB disconnect, device number 14 [ 260.109435][ T6109] m920x_read = error: -19 [ 260.113820][ T6109] dvb-usb: error while querying for an remote control event. [ 260.121687][ T8445] usb 2-1-port1: config error [ 260.239150][ T5951] m920x_read = error: -19 [ 260.243526][ T5951] dvb-usb: error while querying for an remote control event. [ 260.369910][ T5951] m920x_read = error: -19 [ 260.385370][ T5951] dvb-usb: error while querying for an remote control event. [ 261.121820][ T5951] m920x_read = error: -19 [ 261.126205][ T5951] dvb-usb: error while querying for an remote control event. [ 261.268600][ T5853] Bluetooth: hci5: command 0xfc11 tx timeout [ 261.268653][ T50] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 261.276286][T12311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.282887][ T6109] m920x_read = error: -19 [ 261.303834][ T6109] dvb-usb: error while querying for an remote control event. [ 261.418586][ T6109] m920x_read = error: -19 [ 261.422953][ T6109] dvb-usb: error while querying for an remote control event. [ 261.550318][ T6109] m920x_read = error: -19 [ 261.574941][ T6109] dvb-usb: error while querying for an remote control event. [ 261.738344][ T6109] m920x_read = error: -19 [ 261.742721][ T6109] dvb-usb: error while querying for an remote control event. [ 261.878269][ T5951] m920x_read = error: -19 [ 261.882630][ T5951] dvb-usb: error while querying for an remote control event. [ 262.029905][ T5951] m920x_read = error: -19 [ 262.034485][ T5951] dvb-usb: error while querying for an remote control event. [ 262.198165][ T5951] m920x_read = error: -19 [ 262.202695][ T5951] dvb-usb: error while querying for an remote control event. [ 262.358458][ T5951] m920x_read = error: -19 [ 262.365523][ T5951] dvb-usb: error while querying for an remote control event. [ 262.518038][ T5951] m920x_read = error: -19 [ 262.527606][ T5951] dvb-usb: error while querying for an remote control event. [ 262.648266][T12365] kvm: MWAIT instruction emulated as NOP! [ 262.673843][ T5951] m920x_read = error: -19 [ 262.690536][ T5951] dvb-usb: error while querying for an remote control event. [ 262.890003][ T5951] m920x_read = error: -19 [ 262.894459][ T5951] dvb-usb: error while querying for an remote control event. [ 263.018475][ T5951] m920x_read = error: -19 [ 263.022839][ T5951] dvb-usb: error while querying for an remote control event. [ 263.115608][T12383] sctp: [Deprecated]: syz.5.2418 (pid 12383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.115608][T12383] Use struct sctp_sack_info instead [ 263.149086][ T5951] m920x_read = error: -19 [ 263.153571][ T5951] dvb-usb: error while querying for an remote control event. [ 263.268273][ T5951] m920x_read = error: -19 [ 263.272792][ T5951] dvb-usb: error while querying for an remote control event. [ 263.409425][ T5951] m920x_read = error: -19 [ 263.417477][ T5951] dvb-usb: error while querying for an remote control event. [ 263.547520][ T6109] m920x_read = error: -19 [ 263.555480][ T6109] dvb-usb: error while querying for an remote control event. [ 263.704204][ T30] audit: type=1400 audit(1758747639.843:822): avc: denied { connect } for pid=12409 comm="syz.1.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 263.724501][ T6109] m920x_read = error: -19 [ 263.756297][ T6109] dvb-usb: error while querying for an remote control event. [ 263.897217][ T8455] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 263.907263][ T6109] m920x_read = error: -19 [ 263.911618][ T6109] dvb-usb: error while querying for an remote control event. [ 263.943551][T12428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 264.067723][ T6109] m920x_read = error: -19 [ 264.072086][ T6109] dvb-usb: error while querying for an remote control event. [ 264.106811][ T8455] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.134852][ T8455] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 264.187039][ T8455] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.197544][ T6109] m920x_read = error: -19 [ 264.212366][ T6109] dvb-usb: error while querying for an remote control event. [ 264.213819][ T8455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.267044][T12412] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 264.279617][ T8455] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.359212][ T8444] m920x_read = error: -19 [ 264.367607][ T8444] dvb-usb: error while querying for an remote control event. [ 264.566389][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2442'. [ 264.805478][T12461] netlink: 'syz.7.2444': attribute type 10 has an invalid length. [ 264.822710][T12461] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.830273][T12461] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.856839][ T6109] m920x_read = error: -19 [ 264.861196][ T6109] dvb-usb: error while querying for an remote control event. [ 264.878980][T12461] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.886144][T12461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.893595][T12461] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.900732][T12461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.964392][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 264.966915][ T8455] usb 6-1: USB disconnect, device number 15 [ 265.006745][ T6109] m920x_read = error: -19 [ 265.011210][ T6109] dvb-usb: error while querying for an remote control event. [ 265.030973][T12461] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 265.146643][ T6109] m920x_read = error: -19 [ 265.151006][ T6109] dvb-usb: error while querying for an remote control event. [ 265.306543][ T6109] m920x_read = error: -19 [ 265.310907][ T6109] dvb-usb: error while querying for an remote control event. [ 265.446469][ T8446] m920x_read = error: -19 [ 265.450831][ T8446] dvb-usb: error while querying for an remote control event. [ 265.600606][ T8446] m920x_read = error: -19 [ 265.604967][ T8446] dvb-usb: error while querying for an remote control event. [ 265.712852][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2455'. [ 265.722595][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2455'. [ 265.731671][T12500] netlink: 'syz.3.2455': attribute type 6 has an invalid length. [ 265.739807][ T8446] m920x_read = error: -19 [ 265.744147][ T8446] dvb-usb: error while querying for an remote control event. [ 265.767875][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.784924][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2455'. [ 265.797599][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.805987][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.814346][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2455'. [ 265.830329][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.849047][T12500] netlink: 'syz.3.2455': attribute type 6 has an invalid length. [ 265.866369][ T6109] m920x_read = error: -19 [ 265.878934][ T6109] dvb-usb: error while querying for an remote control event. [ 266.026183][ T6109] m920x_read = error: -19 [ 266.030545][ T6109] dvb-usb: error while querying for an remote control event. [ 266.176270][ T6109] m920x_read = error: -19 [ 266.182588][ T6109] dvb-usb: error while querying for an remote control event. [ 266.356540][ T8446] m920x_read = error: -19 [ 266.360901][ T8446] dvb-usb: error while querying for an remote control event. [ 266.485977][ T6109] m920x_read = error: -19 [ 266.501279][ T6109] dvb-usb: error while querying for an remote control event. [ 266.525268][ T30] audit: type=1400 audit(1758747642.664:823): avc: denied { read } for pid=12529 comm="syz.0.2466" path="socket:[45243]" dev="sockfs" ino=45243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.635943][ T6109] m920x_read = error: -19 [ 266.640386][ T6109] dvb-usb: error while querying for an remote control event. [ 266.709852][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'. [ 266.775848][ T6109] m920x_read = error: -19 [ 266.781267][ T6109] dvb-usb: error while querying for an remote control event. [ 266.922273][ T6109] m920x_read = error: -19 [ 266.934146][ T6109] dvb-usb: error while querying for an remote control event. [ 267.077115][ T6109] m920x_read = error: -19 [ 267.091363][ T6109] dvb-usb: error while querying for an remote control event. [ 267.225593][ T8444] m920x_read = error: -19 [ 267.229959][ T8444] dvb-usb: error while querying for an remote control event. [ 267.375533][ T8444] m920x_read = error: -19 [ 267.379896][ T8444] dvb-usb: error while querying for an remote control event. [ 267.422518][T12562] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 267.465518][ T6109] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 267.565511][ T8444] m920x_read = error: -19 [ 267.569879][ T8444] dvb-usb: error while querying for an remote control event. [ 267.658615][ T6109] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 267.681292][ T6109] usb 8-1: config 1 has no interface number 0 [ 267.715388][ T8446] m920x_read = error: -19 [ 267.719870][ T6109] usb 8-1: config 1 interface 105 has no altsetting 0 [ 267.730193][ T8446] dvb-usb: error while querying for an remote control event. [ 267.749266][ T6109] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 267.759327][ T6109] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.768472][ T6109] usb 8-1: Product: syz [ 267.772731][ T6109] usb 8-1: Manufacturer: syz [ 267.783352][ T6109] usb 8-1: SerialNumber: syz [ 267.866355][ T8446] m920x_read = error: -19 [ 267.887843][ T8446] dvb-usb: error while querying for an remote control event. [ 268.015706][ T8446] m920x_read = error: -19 [ 268.021790][ T8446] dvb-usb: error while querying for an remote control event. [ 268.145265][ T8446] m920x_read = error: -19 [ 268.150371][ T8446] dvb-usb: error while querying for an remote control event. [ 268.285183][ T8446] m920x_read = error: -19 [ 268.291189][ T8446] dvb-usb: error while querying for an remote control event. [ 268.377169][ T8459] libceph: connect (1)[c::]:6789 error -101 [ 268.383298][ T8459] libceph: mon0 (1)[c::]:6789 connect error [ 268.418787][ T8446] m920x_read = error: -19 [ 268.423171][ T8446] dvb-usb: error while querying for an remote control event. [ 268.442388][ T8459] libceph: connect (1)[b::]:6789 error -101 [ 268.448643][ T8455] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 268.475491][ T8459] libceph: mon0 (1)[b::]:6789 connect error [ 268.564990][ T8444] m920x_read = error: -19 [ 268.569430][ T8444] dvb-usb: error while querying for an remote control event. [ 268.634971][ T8455] usb 1-1: Using ep0 maxpacket: 8 [ 268.642511][ T6109] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 268.656882][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 268.665109][ T8455] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 268.677279][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 268.683321][ T8455] usb 1-1: config 0 has no interface number 0 [ 268.690415][ T8455] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 268.694920][ T8444] m920x_read = error: -19 [ 268.711240][ T8455] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 268.723151][ T8455] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.734366][ T8455] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.747915][ T5903] libceph: connect (1)[b::]:6789 error -101 [ 268.748745][ T8444] dvb-usb: error while querying for an remote control event. [ 268.753931][ T5903] libceph: mon0 (1)[b::]:6789 connect error [ 268.771037][ T8459] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 268.783084][ T8455] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 268.792721][ T8455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.805722][ T8455] usb 1-1: config 0 descriptor?? [ 268.826956][ T8455] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 268.880844][ T6109] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 268.904733][ T8446] m920x_read = error: -19 [ 268.909085][ T8446] dvb-usb: error while querying for an remote control event. [ 268.931791][ T6109] aqc111 8-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 268.950417][ T6109] usb 8-1: USB disconnect, device number 17 [ 268.958081][ T6109] aqc111 8-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 268.960850][ T8459] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 269.007382][ T8459] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 269.033721][ T8459] usb 2-1: Product: syz [ 269.041462][ T8459] usb 2-1: Manufacturer: syz [ 269.053427][ T8459] usb 2-1: SerialNumber: syz [ 269.055215][ T8444] m920x_read = error: -19 [ 269.062472][ T6109] aqc111 8-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 269.067368][ T8459] usb 2-1: config 0 descriptor?? [ 269.072152][ T8444] dvb-usb: error while querying for an remote control event. [ 269.082381][ T8459] ch341 2-1:0.0: ch341-uart converter detected [ 269.094456][ T6109] aqc111 8-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 269.107412][ T6109] aqc111 8-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 269.178833][T12601] ceph: No mds server is up or the cluster is laggy [ 269.178951][T12606] ceph: No mds server is up or the cluster is laggy [ 269.197102][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 269.204605][ T8444] m920x_read = error: -19 [ 269.205761][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 269.209030][ T8444] dvb-usb: error while querying for an remote control event. [ 269.254907][ T8446] usb 1-1: USB disconnect, device number 37 [ 269.277977][ T8446] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 269.374510][ T8444] m920x_read = error: -19 [ 269.378873][ T8444] dvb-usb: error while querying for an remote control event. [ 269.504880][ T8446] m920x_read = error: -19 [ 269.519088][ T8446] dvb-usb: error while querying for an remote control event. [ 269.607709][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2500'. [ 269.644659][ T8444] m920x_read = error: -19 [ 269.654367][ T8444] dvb-usb: error while querying for an remote control event. [ 269.758250][T12634] netlink: 'syz.7.2505': attribute type 1 has an invalid length. [ 269.784720][ T8444] m920x_read = error: -19 [ 269.797501][ T8444] dvb-usb: error while querying for an remote control event. [ 269.859535][T12634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.876106][T12637] bond1: (slave ip6erspan0): making interface the new active one [ 269.885800][T12637] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 269.944782][ T8446] m920x_read = error: -19 [ 269.949141][ T8446] dvb-usb: error while querying for an remote control event. [ 270.098381][ T8459] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 270.115129][ T8446] m920x_read = error: -19 [ 270.119485][ T8446] dvb-usb: error while querying for an remote control event. [ 270.147345][T12648] binder: 12647:12648 ioctl c0306201 200000000080 returned -14 [ 270.158341][T12648] binder: 12647:12648 ioctl c0306201 2000000001c0 returned -14 [ 270.234216][ T8446] m920x_read = error: -19 [ 270.240943][ T8446] dvb-usb: error while querying for an remote control event. [ 270.355306][ T8446] m920x_read = error: -19 [ 270.361988][ T8459] usb 2-1: USB disconnect, device number 37 [ 270.370582][ T8446] dvb-usb: error while querying for an remote control event. [ 270.377341][ T8459] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 270.390610][ T8459] ch341 2-1:0.0: device disconnected [ 270.494039][ T8446] m920x_read = error: -19 [ 270.498404][ T8446] dvb-usb: error while querying for an remote control event. [ 270.643957][ T8446] m920x_read = error: -19 [ 270.648356][ T8446] dvb-usb: error while querying for an remote control event. [ 270.773935][ T8446] m920x_read = error: -19 [ 270.778413][ T8446] dvb-usb: error while querying for an remote control event. [ 270.834098][ T5903] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 270.893803][ T8444] m920x_read = error: -19 [ 270.899365][ T8444] dvb-usb: error while querying for an remote control event. [ 270.947085][T12681] Bluetooth: hci0: unsupported parameter 64000 [ 270.953293][T12681] Bluetooth: hci0: unsupported parameter 64000 [ 270.996952][ T5903] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.013998][ T8444] m920x_read = error: -19 [ 271.017568][ T5903] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.023460][ T8444] dvb-usb: error while querying for an remote control event. [ 271.043677][ T8446] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 271.057827][ T5903] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.072260][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.083312][ T5903] usb 8-1: SerialNumber: syz [ 271.090333][ T30] audit: type=1400 audit(1758747647.227:824): avc: denied { create } for pid=12684 comm="syz.1.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 271.143777][ T8444] m920x_read = error: -19 [ 271.157852][ T8444] dvb-usb: error while querying for an remote control event. [ 271.213558][ T8446] usb 1-1: Using ep0 maxpacket: 16 [ 271.220076][ T8446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.243662][ T8446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.258613][ T8446] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 271.271649][ T8446] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 271.280867][ T8444] m920x_read = error: -19 [ 271.286221][ T8444] dvb-usb: error while querying for an remote control event. [ 271.298008][ T8446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.305210][ T5903] usb 8-1: 0:2 : does not exist [ 271.318050][ T8446] usb 1-1: config 0 descriptor?? [ 271.319569][ T5903] usb 8-1: unit 5: unexpected type 0x09 [ 271.349241][ T5903] usb 8-1: USB disconnect, device number 18 [ 271.370227][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.413911][ T8444] m920x_read = error: -19 [ 271.418503][ T8444] dvb-usb: error while querying for an remote control event. [ 271.533435][ T8444] m920x_read = error: -19 [ 271.537865][ T8444] dvb-usb: error while querying for an remote control event. [ 271.653374][ T8444] m920x_read = error: -19 [ 271.657759][ T8444] dvb-usb: error while querying for an remote control event. [ 271.750310][ T8446] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0023/input/input39 [ 271.775322][ T8444] m920x_read = error: -19 [ 271.779768][ T8444] dvb-usb: error while querying for an remote control event. [ 271.886765][ T8446] appleir 0003:05AC:8241.0023: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 271.899725][ T8444] m920x_read = error: -19 [ 271.933184][ T8444] dvb-usb: error while querying for an remote control event. [ 271.952064][T12703] loop3: detected capacity change from 0 to 7 [ 271.973888][T12703] Dev loop3: unable to read RDB block 7 [ 271.974124][ T8446] usb 1-1: USB disconnect, device number 38 [ 271.986857][T12703] loop3: unable to read partition table [ 271.999021][T12703] loop3: partition table beyond EOD, truncated [ 272.014626][T12703] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 272.045322][ T5859] udevd[5859]: symlink '../../loop3' '/dev/disk/by-diskseq/89.tmp-b7:3' failed: Read-only file system [ 272.073268][ T6109] m920x_read = error: -19 [ 272.077623][ T6109] dvb-usb: error while querying for an remote control event. [ 272.106643][ T5859] udevd[5859]: symlink '../../loop3' '/dev/disk/by-diskseq/89.tmp-b7:3' failed: Read-only file system [ 272.189785][T12704] fido_id[12704]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 272.191368][ T5859] udevd[5859]: symlink '../../loop3' '/dev/disk/by-diskseq/89.tmp-b7:3' failed: Read-only file system [ 272.233082][ T6109] m920x_read = error: -19 [ 272.237445][ T6109] dvb-usb: error while querying for an remote control event. [ 272.373072][ T6109] m920x_read = error: -19 [ 272.377493][ T6109] dvb-usb: error while querying for an remote control event. [ 272.402062][T12722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2541'. [ 272.430822][T12722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2541'. [ 272.435503][ T30] audit: type=1400 audit(1758747648.567:825): avc: denied { setattr } for pid=12725 comm="syz.3.2543" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 272.452923][ T8446] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 272.504268][ T6109] m920x_read = error: -19 [ 272.508619][ T6109] dvb-usb: error while querying for an remote control event. [ 272.538835][T12729] SELinux: ebitmap: truncated map [ 272.550899][T12729] SELinux: failed to load policy [ 272.641096][ T8446] usb 6-1: Using ep0 maxpacket: 16 [ 272.650231][ T8445] m920x_read = error: -19 [ 272.659311][ T8446] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 272.670280][ T8445] dvb-usb: error while querying for an remote control event. [ 272.678763][ T8446] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.697803][ T8446] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.710805][ T8446] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.720337][ T8446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.728444][ T8446] usb 6-1: Product: syz [ 272.742869][ T8446] usb 6-1: Manufacturer: syz [ 272.751837][ T8446] usb 6-1: SerialNumber: syz [ 272.803100][ T6109] m920x_read = error: -19 [ 272.808024][ T6109] dvb-usb: error while querying for an remote control event. [ 272.839902][ T30] audit: type=1400 audit(1758747648.977:826): avc: denied { getopt } for pid=12741 comm="syz.3.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.923019][ T6109] m920x_read = error: -19 [ 272.930152][ T6109] dvb-usb: error while querying for an remote control event. [ 273.062680][ T6109] m920x_read = error: -19 [ 273.067065][ T6109] dvb-usb: error while querying for an remote control event. [ 273.074147][T12755] openvswitch: netlink: Multiple metadata blocks provided [ 273.175998][ T8446] usb 6-1: 0:2 : does not exist [ 273.192912][ T6109] m920x_read = error: -19 [ 273.197705][ T6109] dvb-usb: error while querying for an remote control event. [ 273.285712][ T30] audit: type=1400 audit(1758747649.418:827): avc: denied { mounton } for pid=12760 comm="syz.3.2562" path="/531/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 273.307788][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.322945][ T6109] m920x_read = error: -19 [ 273.327310][ T6109] dvb-usb: error while querying for an remote control event. [ 273.454009][ T6109] syz1: Port: 1 Link DOWN [ 273.458830][ T8445] m920x_read = error: -19 [ 273.475528][ T8445] dvb-usb: error while querying for an remote control event. [ 273.602620][ T8445] m920x_read = error: -19 [ 273.612390][ T8445] dvb-usb: error while querying for an remote control event. [ 273.634737][ T48] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.673378][ T48] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49979 - 0 [ 273.693692][ T48] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 273.759327][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.762525][ T6109] m920x_read = error: -19 [ 273.773640][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.776617][ T6109] dvb-usb: error while querying for an remote control event. [ 273.789676][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.793596][ T48] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.810026][ T48] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49979 - 0 [ 273.824117][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.825885][ T48] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 273.842289][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.882261][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.896011][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.905803][ T48] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.916252][ T6109] m920x_read = error: -19 [ 273.920599][ T6109] dvb-usb: error while querying for an remote control event. [ 273.936041][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.945401][ T48] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49979 - 0 [ 273.955779][ T48] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 273.975933][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.983538][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.029207][ T8446] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 274.070587][ T48] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.083392][ T5951] m920x_read = error: -19 [ 274.087737][ T5951] dvb-usb: error while querying for an remote control event. [ 274.131714][ T48] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49979 - 0 [ 274.162383][ T8446] usb 6-1: USB disconnect, device number 16 [ 274.175907][ T48] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 274.225117][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 274.252141][ T5951] m920x_read = error: -19 [ 274.256499][ T5951] dvb-usb: error while querying for an remote control event. [ 274.392181][ T5951] m920x_read = error: -19 [ 274.396541][ T5951] dvb-usb: error while querying for an remote control event. [ 274.426596][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.442891][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.454567][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.468992][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.477206][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.531933][ T8455] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 274.533198][ T8446] m920x_read = error: -19 [ 274.573014][ T8446] dvb-usb: error while querying for an remote control event. [ 274.681860][ T6124] m920x_read = error: -19 [ 274.686229][ T6124] dvb-usb: error while querying for an remote control event. [ 274.730637][ T8455] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 274.784304][ T8455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.829020][ T8455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.832043][ T8446] m920x_read = error: -19 [ 274.849330][ T8455] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 274.884674][ T8446] dvb-usb: error while querying for an remote control event. [ 274.908491][ T8455] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 274.933278][ T8455] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 274.958338][ T8455] usb 8-1: Manufacturer: syz [ 274.989421][ T8455] usb 8-1: config 0 descriptor?? [ 275.012017][ T6124] m920x_read = error: -19 [ 275.019749][ T6124] dvb-usb: error while querying for an remote control event. [ 275.124814][ T48] bond1 (unregistering): (slave geneve3): Releasing active interface [ 275.143461][ T6124] m920x_read = error: -19 [ 275.147818][ T6124] dvb-usb: error while querying for an remote control event. [ 275.279858][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.281594][ T6124] m920x_read = error: -19 [ 275.293497][ T6124] dvb-usb: error while querying for an remote control event. [ 275.296265][ T48] bond0 (unregistering): Released all slaves [ 275.384288][ T48] bond1 (unregistering): Released all slaves [ 275.411516][ T6124] m920x_read = error: -19 [ 275.416275][ T8455] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 275.416355][ T6124] dvb-usb: error while querying for an remote control event. [ 275.441121][ T8455] appleir 0003:05AC:8243.0024: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 275.518480][ T48] bond2 (unregistering): (slave vcan1): Releasing backup interface [ 275.526574][ T48] vcan1: left promiscuous mode [ 275.533182][ T48] bond2 (unregistering): Released all slaves [ 275.541555][ T8445] m920x_read = error: -19 [ 275.545897][ T8445] dvb-usb: error while querying for an remote control event. [ 275.606941][ T48] : left promiscuous mode [ 275.662008][ T8445] m920x_read = error: -19 [ 275.666373][ T8445] dvb-usb: error while querying for an remote control event. [ 275.679566][T12768] chnl_net:caif_netlink_parms(): no params data found [ 275.724404][ T48] tipc: Disabling bearer [ 275.729969][ T48] tipc: Left network mode [ 275.781328][ T8445] m920x_read = error: -19 [ 275.785688][ T8445] dvb-usb: error while querying for an remote control event. [ 275.838588][T12815] syzkaller1: entered promiscuous mode [ 275.845565][T12815] syzkaller1: entered allmulticast mode [ 275.901297][ T6109] m920x_read = error: -19 [ 275.909901][ T6109] dvb-usb: error while querying for an remote control event. [ 276.034625][ T6109] m920x_read = error: -19 [ 276.051951][ T6109] dvb-usb: error while querying for an remote control event. [ 276.064695][ T5848] Bluetooth: hci2: command tx timeout [ 276.086666][T12768] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.100851][T12768] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.111522][T12768] bridge_slave_0: entered allmulticast mode [ 276.118739][T12768] bridge_slave_0: entered promiscuous mode [ 276.148640][T12768] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.168253][T12768] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.177905][T12768] bridge_slave_1: entered allmulticast mode [ 276.188527][T12768] bridge_slave_1: entered promiscuous mode [ 276.194468][ T8445] m920x_read = error: -19 [ 276.200173][ T8445] dvb-usb: error while querying for an remote control event. [ 276.218234][ T48] hsr_slave_0: left promiscuous mode [ 276.225541][ T48] hsr_slave_1: left promiscuous mode [ 276.242597][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.250130][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.258666][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.266233][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.282971][ T48] veth1_vlan: left promiscuous mode [ 276.288276][ T48] veth0_vlan: left promiscuous mode [ 276.311133][ T6109] m920x_read = error: -19 [ 276.315486][ T6109] dvb-usb: error while querying for an remote control event. [ 276.366487][ T48] team0 (unregistering): Port device vlan2 removed [ 276.441109][ T6109] m920x_read = error: -19 [ 276.445599][ T6109] dvb-usb: error while querying for an remote control event. [ 276.542790][ T5848] Bluetooth: hci3: command tx timeout [ 276.563731][ T6109] m920x_read = error: -19 [ 276.568155][ T6109] dvb-usb: error while querying for an remote control event. [ 276.580005][ T48] team0 (unregistering): Port device team_slave_1 removed [ 276.609102][ T48] team0 (unregistering): Port device team_slave_0 removed [ 276.684278][ T6109] m920x_read = error: -19 [ 276.688654][ T6109] dvb-usb: error while querying for an remote control event. [ 276.802311][ T6109] m920x_read = error: -19 [ 276.806713][ T6109] dvb-usb: error while querying for an remote control event. [ 276.888068][T12768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.899459][T12768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.909387][T12782] chnl_net:caif_netlink_parms(): no params data found [ 276.921019][ T6109] m920x_read = error: -19 [ 276.925364][ T6109] dvb-usb: error while querying for an remote control event. [ 277.008694][T12768] team0: Port device team_slave_0 added [ 277.016936][T12768] team0: Port device team_slave_1 added [ 277.071151][ T6109] m920x_read = error: -19 [ 277.072646][T12768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.075628][ T6109] dvb-usb: error while querying for an remote control event. [ 277.105611][T12768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.144183][T12768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.181869][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 277.189192][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 277.202217][ T6109] m920x_read = error: -19 [ 277.207148][ T6109] dvb-usb: error while querying for an remote control event. [ 277.232749][T12768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.239708][T12768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.320619][ T6109] m920x_read = error: -19 [ 277.326096][ T5903] usb 8-1: USB disconnect, device number 19 [ 277.340461][ T6109] dvb-usb: error while querying for an remote control event. [ 277.389237][ T30] audit: type=1400 audit(1758747653.490:828): avc: denied { name_bind } for pid=12850 comm="syz.5.2583" path="socket:[45928]" dev="sockfs" ino=45928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.423288][T12768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.470630][ T6124] m920x_read = error: -19 [ 277.475000][ T6124] dvb-usb: error while querying for an remote control event. [ 277.568970][T12782] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.596248][T12782] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.611871][ T8445] m920x_read = error: -19 [ 277.619126][ T8445] dvb-usb: error while querying for an remote control event. [ 277.626711][T12782] bridge_slave_0: entered allmulticast mode [ 277.645820][T12782] bridge_slave_0: entered promiscuous mode [ 277.673467][T12782] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.690838][T12782] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.708148][T12782] bridge_slave_1: entered allmulticast mode [ 277.730796][T12782] bridge_slave_1: entered promiscuous mode [ 277.756821][T12768] hsr_slave_0: entered promiscuous mode [ 277.770329][ T8445] m920x_read = error: -19 [ 277.770871][T12768] hsr_slave_1: entered promiscuous mode [ 277.774667][ T8445] dvb-usb: error while querying for an remote control event. [ 277.818020][T12768] debugfs: 'hsr0' already exists in 'hsr' [ 277.890070][T12768] Cannot create hsr debugfs directory [ 277.930781][ T8445] m920x_read = error: -19 [ 277.935141][ T8445] dvb-usb: error while querying for an remote control event. [ 278.046070][T12782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.070198][ T8445] m920x_read = error: -19 [ 278.078942][T12782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.088336][ T8445] dvb-usb: error while querying for an remote control event. [ 278.150728][ T50] Bluetooth: hci2: command tx timeout [ 278.159478][T12782] team0: Port device team_slave_0 added [ 278.188403][T12782] team0: Port device team_slave_1 added [ 278.200370][ T8445] m920x_read = error: -19 [ 278.205016][ T8445] dvb-usb: error while querying for an remote control event. [ 278.260407][ T5903] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 278.285358][T12782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.301838][T12782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.329716][ T8445] m920x_read = error: -19 [ 278.334123][ T8445] dvb-usb: error while querying for an remote control event. [ 278.341856][T12782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.376224][T12782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.394035][T12782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.437049][T12782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.453845][ T5903] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 278.460214][ T8445] m920x_read = error: -19 [ 278.467276][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.481769][ T8445] dvb-usb: error while querying for an remote control event. [ 278.556145][ T5903] usb 1-1: config 0 descriptor?? [ 278.622348][ T8445] m920x_read = error: -19 [ 278.626763][ T50] Bluetooth: hci3: command tx timeout [ 278.641457][ T8445] dvb-usb: error while querying for an remote control event. [ 278.759815][ T8445] m920x_read = error: -19 [ 278.801227][ T8445] dvb-usb: error while querying for an remote control event. [ 278.919754][ T8445] m920x_read = error: -19 [ 278.924120][ T8445] dvb-usb: error while querying for an remote control event. [ 278.990465][T12782] hsr_slave_0: entered promiscuous mode [ 279.089597][ T8445] m920x_read = error: -19 [ 279.093960][ T8445] dvb-usb: error while querying for an remote control event. [ 279.130322][T12782] hsr_slave_1: entered promiscuous mode [ 279.143589][T12782] debugfs: 'hsr0' already exists in 'hsr' [ 279.149416][T12782] Cannot create hsr debugfs directory [ 279.180392][ T8459] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 279.230966][ T8445] m920x_read = error: -19 [ 279.235340][ T8445] dvb-usb: error while querying for an remote control event. [ 279.359526][ T8445] m920x_read = error: -19 [ 279.363886][ T8445] dvb-usb: error while querying for an remote control event. [ 279.379531][ T8459] usb 6-1: Using ep0 maxpacket: 16 [ 279.399766][ T8459] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 279.416166][ T8459] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.476906][ T8459] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 279.495645][ T8445] m920x_read = error: -19 [ 279.497948][ T8459] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.508316][ T8445] dvb-usb: error while querying for an remote control event. [ 279.569730][ T8459] usb 6-1: Product: syz [ 279.584052][ T8459] usb 6-1: Manufacturer: syz [ 279.597450][ T8459] usb 6-1: SerialNumber: syz [ 279.618900][ T8459] usb 6-1: config 0 descriptor?? [ 279.636804][T12768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.643934][T12922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.658419][ T8459] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 279.669554][ T6109] m920x_read = error: -19 [ 279.673897][ T6109] dvb-usb: error while querying for an remote control event. [ 279.698010][T12768] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.704754][ T8459] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 279.721651][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.728757][ T8270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.751638][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.758747][ T8270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.791758][ T8445] m920x_read = error: -19 [ 279.796111][ T8445] dvb-usb: error while querying for an remote control event. [ 279.876875][T12782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.877260][ T5903] pegasus 1-1:0.0: can't reset MAC [ 279.899647][ T5903] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 279.909757][ T6109] m920x_read = error: -19 [ 279.914099][ T6109] dvb-usb: error while querying for an remote control event. [ 279.914397][T12768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.949961][ T5903] usb 1-1: USB disconnect, device number 39 [ 279.969039][T12768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.004944][T12782] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.036778][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.043925][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.054394][ T6124] m920x_read = error: -19 [ 280.058743][ T6124] dvb-usb: error while querying for an remote control event. [ 280.075796][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.082934][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.179131][ T6109] m920x_read = error: -19 [ 280.183560][ T6109] dvb-usb: error while querying for an remote control event. [ 280.219217][ T50] Bluetooth: hci2: command tx timeout [ 280.268865][ T8459] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 280.296460][ T8459] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 280.307670][T12768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.309171][ T6109] m920x_read = error: -19 [ 280.323679][ T6109] dvb-usb: error while querying for an remote control event. [ 280.405784][T12782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.449197][ T6109] m920x_read = error: -19 [ 280.455927][ T6109] dvb-usb: error while querying for an remote control event. [ 280.520628][ T8459] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 280.533173][ T8459] em28xx 6-1:0.0: No AC97 audio processor [ 280.563389][ T8459] usb 6-1: USB disconnect, device number 17 [ 280.573553][T12952] netlink: 'syz.0.2602': attribute type 1 has an invalid length. [ 280.580873][ T6109] m920x_read = error: -19 [ 280.585604][ T6109] dvb-usb: error while querying for an remote control event. [ 280.587373][ T8459] em28xx 6-1:0.0: Disconnecting em28xx [ 280.606026][T12952] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2602'. [ 280.621476][ T8459] em28xx 6-1:0.0: Freeing device [ 280.626523][T12952] netlink: 'syz.0.2602': attribute type 2 has an invalid length. [ 280.660293][T12952] netlink: 'syz.0.2602': attribute type 1 has an invalid length. [ 280.700346][ T50] Bluetooth: hci3: command tx timeout [ 280.712498][T12768] veth0_vlan: entered promiscuous mode [ 280.718875][ T6109] m920x_read = error: -19 [ 280.723306][ T6109] dvb-usb: error while querying for an remote control event. [ 280.732273][T12768] veth1_vlan: entered promiscuous mode [ 280.766041][T12768] veth0_macvtap: entered promiscuous mode [ 280.794912][T12768] veth1_macvtap: entered promiscuous mode [ 280.839428][ T6109] m920x_read = error: -19 [ 280.846615][T12768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.864293][ T6109] dvb-usb: error while querying for an remote control event. [ 280.874994][T12782] veth0_vlan: entered promiscuous mode [ 280.886579][T12782] veth1_vlan: entered promiscuous mode [ 280.923563][T12768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.955759][ T30] audit: type=1400 audit(1758747657.102:829): avc: denied { mounton } for pid=12961 comm="syz.7.2604" path="/284/file0" dev="proc" ino=4026533763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 280.978736][ T6124] m920x_read = error: -19 [ 280.983292][ T6124] dvb-usb: error while querying for an remote control event. [ 281.011427][T12782] veth0_macvtap: entered promiscuous mode [ 281.019876][ T30] audit: type=1400 audit(1758747657.162:830): avc: denied { unmount } for pid=8891 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 281.052193][T12782] veth1_macvtap: entered promiscuous mode [ 281.090693][T12967] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.102648][ T6124] m920x_read = error: -19 [ 281.107014][ T6124] dvb-usb: error while querying for an remote control event. [ 281.134111][T12967] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.166623][T12782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.199124][ T6109] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 281.199258][T12967] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.218632][ T6124] m920x_read = error: -19 [ 281.223685][ T6124] dvb-usb: error while querying for an remote control event. [ 281.226345][T12782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.244947][ T8270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.267692][ T8270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.300328][T12967] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.350946][ T6109] usb 1-1: config 0 has no interfaces? [ 281.356053][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.356471][ T6109] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 281.367413][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.374037][ T6124] m920x_read = error: -19 [ 281.385514][ T30] audit: type=1400 audit(1758747657.532:831): avc: denied { listen } for pid=12973 comm="syz.5.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 281.390116][ T6124] dvb-usb: error while querying for an remote control event. [ 281.417510][ T6109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.425509][ T30] audit: type=1400 audit(1758747657.562:832): avc: denied { accept } for pid=12973 comm="syz.5.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 281.462802][ T6109] usb 1-1: config 0 descriptor?? [ 281.510447][ T30] audit: type=1400 audit(1758747657.612:833): avc: denied { mounton } for pid=12768 comm="syz-executor" path="/root/syzkaller.E57x6m/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=48362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 281.559825][ T6109] m920x_read = error: -19 [ 281.564178][ T6109] dvb-usb: error while querying for an remote control event. [ 281.569769][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.608342][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.645340][ T30] audit: type=1400 audit(1758747657.652:834): avc: denied { mount } for pid=12768 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 281.692997][ T8270] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.748349][ T5951] m920x_read = error: -19 [ 281.752821][ T5951] dvb-usb: error while querying for an remote control event. [ 281.779322][ T8270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.784696][ T8459] usb 1-1: USB disconnect, device number 40 [ 281.816205][ T48] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.828518][ T8270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.876103][ T48] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.928264][ T5951] m920x_read = error: -19 [ 281.932634][ T5951] dvb-usb: error while querying for an remote control event. [ 281.933142][ T48] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.078525][ T5951] m920x_read = error: -19 [ 282.083087][ T5951] dvb-usb: error while querying for an remote control event. [ 282.189629][T12980] netlink: 'syz.9.2568': attribute type 4 has an invalid length. [ 282.228115][ T5951] m920x_read = error: -19 [ 282.232549][ T5951] dvb-usb: error while querying for an remote control event. [ 282.244562][T12980] netlink: 'syz.9.2568': attribute type 4 has an invalid length. [ 282.299146][ T50] Bluetooth: hci2: command tx timeout [ 282.358037][ T5951] m920x_read = error: -19 [ 282.362403][ T5951] dvb-usb: error while querying for an remote control event. [ 282.399919][ T8459] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 282.478105][ T8448] m920x_read = error: -19 [ 282.482490][ T8448] dvb-usb: error while querying for an remote control event. [ 282.570736][ T8459] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.591848][ T8459] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 282.619218][ T8448] m920x_read = error: -19 [ 282.632263][ T8448] dvb-usb: error while querying for an remote control event. [ 282.646285][ T8459] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.693475][ T8459] usb 8-1: config 0 descriptor?? [ 282.748299][ T8448] m920x_read = error: -19 [ 282.750111][ T8459] pwc: Askey VC010 type 2 USB webcam detected. [ 282.752653][ T8448] dvb-usb: error while querying for an remote control event. [ 282.790083][ T50] Bluetooth: hci3: command tx timeout [ 283.007804][ T8448] m920x_read = error: -19 [ 283.038451][ T8448] dvb-usb: error while querying for an remote control event. [ 283.221789][ T8459] pwc: recv_control_msg error -32 req 02 val 2b00 [ 283.238052][ T8459] pwc: recv_control_msg error -32 req 02 val 2700 [ 283.238438][ T8448] m920x_read = error: -19 [ 283.258977][ T8459] pwc: recv_control_msg error -32 req 02 val 2c00 [ 283.290500][ T8448] dvb-usb: error while querying for an remote control event. [ 283.422128][T13002] netlink: 'syz.0.2618': attribute type 5 has an invalid length. [ 283.437492][ T8448] m920x_read = error: -19 [ 283.479899][ T8448] dvb-usb: error while querying for an remote control event. [ 283.506683][ T8459] pwc: recv_control_msg error -71 req 04 val 1300 [ 283.518384][ T8459] pwc: recv_control_msg error -71 req 04 val 1400 [ 283.525057][ T8459] pwc: recv_control_msg error -71 req 02 val 2000 [ 283.542311][ T8459] pwc: recv_control_msg error -71 req 02 val 2100 [ 283.584522][ T8459] pwc: recv_control_msg error -71 req 04 val 1500 [ 283.657921][ T6109] m920x_read = error: -19 [ 283.807482][ T6109] dvb-usb: error while querying for an remote control event. [ 283.830233][ T8459] pwc: recv_control_msg error -71 req 02 val 2500 [ 283.857018][ T8459] pwc: recv_control_msg error -71 req 02 val 2400 [ 283.870330][ T8459] pwc: recv_control_msg error -71 req 02 val 2600 [ 283.883685][ T8459] pwc: recv_control_msg error -71 req 02 val 2900 [ 283.901650][ T8459] pwc: recv_control_msg error -71 req 02 val 2800 [ 283.937283][ T8459] pwc: recv_control_msg error -71 req 04 val 1100 [ 283.937396][ T8448] m920x_read = error: -19 [ 283.951142][ T8459] pwc: recv_control_msg error -71 req 04 val 1200 [ 283.966932][ T8448] dvb-usb: error while querying for an remote control event. [ 283.968435][ T8459] pwc: Registered as video103. [ 284.012297][ T8459] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input40 [ 284.066546][ T8459] usb 8-1: USB disconnect, device number 20 [ 284.107843][ T6109] m920x_read = error: -19 [ 284.112206][ T6109] dvb-usb: error while querying for an remote control event. [ 284.208334][ T30] audit: type=1400 audit(1758747660.353:835): avc: denied { listen } for pid=13018 comm="syz.0.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.247090][ T8448] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 284.258324][ T5951] m920x_read = error: -19 [ 284.262676][ T5951] dvb-usb: error while querying for an remote control event. [ 284.300707][ T30] audit: type=1400 audit(1758747660.393:836): avc: denied { write } for pid=13018 comm="syz.0.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.397465][ T8446] m920x_read = error: -19 [ 284.401924][ T8446] dvb-usb: error while querying for an remote control event. [ 284.438210][ T8448] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 284.449343][ T8448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.462128][ T8448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.471984][ T8448] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 284.487226][ T8448] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 284.496345][ T8448] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 284.504722][ T8448] usb 6-1: Manufacturer: syz [ 284.517061][ T8446] m920x_read = error: -19 [ 284.521483][ T8446] dvb-usb: error while querying for an remote control event. [ 284.530941][ T8448] usb 6-1: config 0 descriptor?? [ 284.587576][ T5951] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 284.597551][ T8457] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 284.644303][ T8459] IPVS: starting estimator thread 0... [ 284.647124][ T6109] m920x_read = error: -19 [ 284.650759][T13040] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 284.657121][ T6109] dvb-usb: error while querying for an remote control event. [ 284.749971][ T5951] usb 10-1: Using ep0 maxpacket: 32 [ 284.758524][T13041] IPVS: using max 46 ests per chain, 110400 per kthread [ 284.759914][ T8457] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 284.770328][ T5951] usb 10-1: config 0 has no interfaces? [ 284.782486][ T5951] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.785474][ T8457] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.795052][ T5951] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.817052][ T6109] m920x_read = error: -19 [ 284.821990][ T6109] dvb-usb: error while querying for an remote control event. [ 284.832704][ T5951] usb 10-1: Product: syz [ 284.837670][ T5951] usb 10-1: Manufacturer: syz [ 284.838163][ T8457] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 284.842477][ T5951] usb 10-1: SerialNumber: syz [ 284.861785][ T8457] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 284.871054][ T8457] usb 9-1: Manufacturer: syz [ 284.872978][ T5951] usb 10-1: config 0 descriptor?? [ 284.882939][ T8457] usb 9-1: config 0 descriptor?? [ 284.937538][ T5951] m920x_read = error: -19 [ 284.946674][ T5951] dvb-usb: error while querying for an remote control event. [ 284.960172][ T8448] appleir 0003:05AC:8243.0025: unknown main item tag 0x0 [ 284.987087][ T8448] appleir 0003:05AC:8243.0025: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 285.011799][ T8457] rc_core: IR keymap rc-hauppauge not found [ 285.050957][ T8457] Registered IR keymap rc-empty [ 285.077854][ T8448] m920x_read = error: -19 [ 285.078647][ T8457] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 285.102771][ T8448] dvb-usb: error while querying for an remote control event. [ 285.123359][ T8457] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input42 [ 285.163909][ T8459] usb 6-1: USB disconnect, device number 18 [ 285.181154][T13052] fido_id[13052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 285.229442][T13059] netlink: 'syz.7.2642': attribute type 1 has an invalid length. [ 285.230908][T13056] sock: sock_set_timeout: `syz.0.2643' (pid 13056) tries to set negative timeout [ 285.262134][ T8448] m920x_read = error: -19 [ 285.283104][ T8448] dvb-usb: error while querying for an remote control event. [ 285.292253][ T5951] usb 10-1: USB disconnect, device number 2 [ 285.369792][T13061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.379648][T13061] bond2: (slave bond3): making interface the new active one [ 285.388678][T13061] bond2: (slave bond3): Enslaving as an active interface with an up link [ 285.406619][ T8446] m920x_read = error: -19 [ 285.411482][ T8446] dvb-usb: error while querying for an remote control event. [ 285.467791][ C0] igorplugusb 9-1:0.0: receive overflow, at least 21 lost [ 285.509861][ T30] audit: type=1326 audit(1758747661.664:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13068 comm="syz.7.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bd18eec9 code=0x7ffc0000 [ 285.538357][ T6124] m920x_read = error: -19 [ 285.543681][ T6124] dvb-usb: error while querying for an remote control event. [ 285.553552][ T30] audit: type=1326 audit(1758747661.664:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13068 comm="syz.7.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bd18eec9 code=0x7ffc0000 [ 285.584580][ T30] audit: type=1326 audit(1758747661.664:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13068 comm="syz.7.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f04bd18eec9 code=0x7ffc0000 [ 285.614146][ T30] audit: type=1326 audit(1758747661.664:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13068 comm="syz.7.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bd18eec9 code=0x7ffc0000 [ 285.646170][ T30] audit: type=1326 audit(1758747661.684:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13068 comm="syz.7.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bd18eec9 code=0x7ffc0000 [ 285.670997][ T6124] m920x_read = error: -19 [ 285.675346][ T6124] dvb-usb: error while querying for an remote control event. [ 285.683812][ T30] audit: type=1400 audit(1758747661.764:842): avc: denied { map } for pid=13071 comm="syz.7.2647" path="socket:[48799]" dev="sockfs" ino=48799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 285.736947][ T5951] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 285.787776][ T6124] m920x_read = error: -19 [ 285.792222][ T6124] dvb-usb: error while querying for an remote control event. [ 285.885074][ C0] igorplugusb 9-1:0.0: receive overflow invalid: 173 [ 285.888556][ T5951] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.916448][ T6124] m920x_read = error: -19 [ 285.922191][ T6124] dvb-usb: error while querying for an remote control event. [ 285.935202][ T5951] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 285.947139][ T5951] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.956285][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.974398][T13069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 285.984868][ T5951] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.056908][ T6124] m920x_read = error: -19 [ 286.067829][ T6124] dvb-usb: error while querying for an remote control event. [ 286.070024][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 286.096665][ T5903] usb 9-1: USB disconnect, device number 2 [ 286.176115][ T8459] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 286.186328][ T6124] m920x_read = error: -19 [ 286.190757][ T6124] dvb-usb: error while querying for an remote control event. [ 286.259824][ T6124] usb 1-1: USB disconnect, device number 41 [ 286.308369][ T8448] m920x_read = error: -19 [ 286.312966][ T8448] dvb-usb: error while querying for an remote control event. [ 286.365972][ T8459] usb 8-1: Using ep0 maxpacket: 32 [ 286.372491][ T8459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.384856][ T8459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.394813][ T8459] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 286.404008][ T8459] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.415364][ T8459] usb 8-1: config 0 descriptor?? [ 286.446069][ T8448] m920x_read = error: -19 [ 286.450523][ T8448] dvb-usb: error while querying for an remote control event. [ 286.588690][ T6124] m920x_read = error: -19 [ 286.595999][ T6124] dvb-usb: error while querying for an remote control event. [ 287.255345][ T6124] m920x_read = error: -19 [ 287.269809][ T6124] dvb-usb: error while querying for an remote control event. [ 287.280433][ T8459] savu 0003:1E7D:2D5A.0026: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 287.404056][T13099] unknown channel width for channel at 909000KHz? [ 287.412235][ T6124] m920x_read = error: -19 [ 287.425658][ T6124] dvb-usb: error while querying for an remote control event. [ 287.457100][T13099] unknown channel width for channel at 909000KHz? [ 287.487406][ T8459] usb 8-1: USB disconnect, device number 21 [ 287.578366][ T6124] m920x_read = error: -19 [ 287.662705][ T6124] dvb-usb: error while querying for an remote control event. [ 287.773118][ T30] audit: type=1400 audit(1758747663.915:843): avc: denied { read } for pid=13108 comm="syz.8.2661" path="socket:[47861]" dev="sockfs" ino=47861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 287.805389][ T8459] kernel write not supported for file [eventfd] (pid: 8459 comm: kworker/0:13) [ 287.822455][ T6124] m920x_read = error: -19 [ 287.850843][ T6124] dvb-usb: error while querying for an remote control event. [ 288.005191][ T6124] m920x_read = error: -19 [ 288.009554][ T6124] dvb-usb: error while querying for an remote control event. [ 288.145131][ T6124] m920x_read = error: -19 [ 288.149510][ T6124] dvb-usb: error while querying for an remote control event. [ 288.285135][ T6124] m920x_read = error: -19 [ 288.294838][ T6124] dvb-usb: error while querying for an remote control event. [ 288.403149][T13127] smc: net device bond0 applied user defined pnetid SYZ2 [ 288.435062][ T6124] m920x_read = error: -19 [ 288.439464][ T6124] dvb-usb: error while querying for an remote control event. [ 288.585219][ T8448] m920x_read = error: -19 [ 288.590355][ T8448] dvb-usb: error while querying for an remote control event. [ 288.715350][ T8448] m920x_read = error: -19 [ 288.725362][ T8448] dvb-usb: error while querying for an remote control event. [ 288.839697][ T8448] m920x_read = error: -19 [ 288.848127][ T8448] dvb-usb: error while querying for an remote control event. [ 288.922274][ T30] audit: type=1400 audit(1758747665.066:844): avc: denied { setopt } for pid=13151 comm="syz.7.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 288.987816][ T8448] m920x_read = error: -19 [ 288.992170][ T8448] dvb-usb: error while querying for an remote control event. [ 289.116914][ T8448] m920x_read = error: -19 [ 289.121280][ T8448] dvb-usb: error while querying for an remote control event. [ 289.262477][T13172] bridge: RTM_NEWNEIGH with invalid ether address [ 289.269179][ T8448] m920x_read = error: -19 [ 289.273520][ T8448] dvb-usb: error while querying for an remote control event. [ 289.365041][ T8457] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 289.383037][T13176] ªªªªªª: renamed from wg2 (while UP) [ 289.405309][ T8448] m920x_read = error: -19 [ 289.414061][ T8448] dvb-usb: error while querying for an remote control event. [ 289.521452][T13178] SELinux: ebitmap: empty map [ 289.527557][ T8457] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.541582][ T8457] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.544592][ T8448] m920x_read = error: -19 [ 289.561914][T13178] SELinux: failed to load policy [ 289.574761][ T8448] dvb-usb: error while querying for an remote control event. [ 289.627286][ T8457] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.663913][ T8457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.694564][ T6124] m920x_read = error: -19 [ 289.698918][ T6124] dvb-usb: error while querying for an remote control event. [ 289.744155][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2698'. [ 289.769230][T13188] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2698'. [ 289.788226][T13188] vlan2: entered allmulticast mode [ 289.793647][T13188] dummy0: entered allmulticast mode [ 289.843307][ T6124] m920x_read = error: -19 [ 289.857782][ T6124] dvb-usb: error while querying for an remote control event. [ 289.894253][ T8457] usb 1-1: usb_control_msg returned -32 [ 289.918053][ T8457] usbtmc 1-1:16.0: can't read capabilities [ 289.974405][ T8448] m920x_read = error: -19 [ 289.978769][ T8448] dvb-usb: error while querying for an remote control event. [ 290.057057][T13195] block nbd8: Attempted send on invalid socket [ 290.069004][T13195] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.070739][T13194] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 290.081063][T13195] block nbd8: Attempted send on invalid socket [ 290.104129][ T8448] m920x_read = error: -19 [ 290.108492][ T8448] dvb-usb: error while querying for an remote control event. [ 290.118772][ T30] audit: type=1326 audit(1758747666.256:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783fd8eec9 code=0x7ffc0000 [ 290.149931][T13195] I/O error, dev nbd8, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.175884][T13195] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 290.189631][ T30] audit: type=1326 audit(1758747666.256:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783fd8eec9 code=0x7ffc0000 [ 290.221812][ T30] audit: type=1326 audit(1758747666.256:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f783fd8eec9 code=0x7ffc0000 [ 290.253173][ T30] audit: type=1326 audit(1758747666.256:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783fd8eec9 code=0x7ffc0000 [ 290.277059][ T8448] m920x_read = error: -19 [ 290.278042][T13202] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 290.281391][ T8448] dvb-usb: error while querying for an remote control event. [ 290.305621][T13195] block nbd8: Send control failed (result -107) [ 290.313035][T13195] block nbd8: Request send failed, requeueing [ 290.322165][ T55] block nbd8: Dead connection, failed to find a fallback [ 290.329392][ T55] block nbd8: shutting down sockets [ 290.337511][ T55] I/O error, dev nbd8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.346908][ T30] audit: type=1326 audit(1758747666.256:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783fd8eec9 code=0x7ffc0000 [ 290.370708][T13195] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 290.389846][T13195] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.399990][T13195] I/O error, dev nbd8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.413048][T13195] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 290.423127][T13195] I/O error, dev nbd8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.432931][ T6124] m920x_read = error: -19 [ 290.435150][T13195] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 290.437340][ T6124] dvb-usb: error while querying for an remote control event. [ 290.456241][T13195] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.465841][T13195] I/O error, dev nbd8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.475565][T13195] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 290.486275][T13195] I/O error, dev nbd8, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.495908][T13195] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 290.506686][T13195] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.536418][T13195] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 290.547184][T13195] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 290.558919][T13195] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 290.567571][ T6124] m920x_read = error: -19 [ 290.571907][ T6124] dvb-usb: error while querying for an remote control event. [ 290.668601][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2706'. [ 290.693988][ T8448] m920x_read = error: -19 [ 290.699182][ T8448] dvb-usb: error while querying for an remote control event. [ 290.716388][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.724041][T13209] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.824187][ T6124] m920x_read = error: -19 [ 290.829772][ T6124] dvb-usb: error while querying for an remote control event. [ 290.895169][T13209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.919111][T13209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.945677][ T6124] m920x_read = error: -19 [ 290.957166][ T6124] dvb-usb: error while querying for an remote control event. [ 291.049438][T13210] geneve2: entered promiscuous mode [ 291.056355][T13210] geneve2: entered allmulticast mode [ 291.069886][T13222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.079376][ T8448] m920x_read = error: -19 [ 291.084032][ T8448] dvb-usb: error while querying for an remote control event. [ 291.203681][ T8448] m920x_read = error: -19 [ 291.208030][ T8448] dvb-usb: error while querying for an remote control event. [ 291.326087][ T8448] m920x_read = error: -19 [ 291.330562][ T8448] dvb-usb: error while querying for an remote control event. [ 291.465905][ T8448] m920x_read = error: -19 [ 291.488877][ T8448] dvb-usb: error while querying for an remote control event. [ 291.645501][ T8446] m920x_read = error: -19 [ 291.650792][ T8446] dvb-usb: error while querying for an remote control event. [ 291.723376][ T5960] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 291.821333][ T8446] m920x_read = error: -19 [ 291.832368][ T8446] dvb-usb: error while querying for an remote control event. [ 291.915765][ T5960] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 291.936171][ T5960] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 291.966357][ T5960] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 291.984058][ T5960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.993223][ T8446] m920x_read = error: -19 [ 292.017907][ T5960] usb 9-1: Product: syz [ 292.022170][ T8446] dvb-usb: error while querying for an remote control event. [ 292.024543][ T5960] usb 9-1: Manufacturer: syz [ 292.041175][ T5960] usb 9-1: SerialNumber: syz [ 292.068054][ T5960] usb 9-1: config 0 descriptor?? [ 292.081983][T13241] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 292.097481][T13241] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 292.141754][ T8448] usb 1-1: USB disconnect, device number 42 [ 292.186359][ T5951] m920x_read = error: -19 [ 292.223075][ T5951] dvb-usb: error while querying for an remote control event. [ 292.353287][ T5951] m920x_read = error: -19 [ 292.378832][ T5951] dvb-usb: error while querying for an remote control event. [ 292.385648][T13241] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 292.432001][T13241] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 292.524728][ T5951] m920x_read = error: -19 [ 292.538196][ T5951] dvb-usb: error while querying for an remote control event. [ 292.652885][ T5951] m920x_read = error: -19 [ 292.665827][ T5951] dvb-usb: error while querying for an remote control event. [ 292.793661][ T5951] m920x_read = error: -19 [ 292.804216][ T5951] dvb-usb: error while querying for an remote control event. [ 292.870763][ T5960] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 293.042805][ T5951] m920x_read = error: -19 [ 293.047260][ T5951] dvb-usb: error while querying for an remote control event. [ 293.165130][ T5951] m920x_read = error: -19 [ 293.169647][ T5951] dvb-usb: error while querying for an remote control event. [ 293.312625][ T5951] m920x_read = error: -19 [ 293.316987][ T5951] dvb-usb: error while querying for an remote control event. [ 293.472495][ T5951] m920x_read = error: -19 [ 293.510462][ T5960] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 293.525612][ T5960] usb 9-1: USB disconnect, device number 3 [ 293.562197][ T5951] dvb-usb: error while querying for an remote control event. [ 293.686623][T13304] GUP no longer grows the stack in syz.0.2734 (13304): 200000004000-20000000a000 (200000002000) [ 293.718648][T13304] CPU: 1 UID: 0 PID: 13304 Comm: syz.0.2734 Not tainted syzkaller #0 PREEMPT(full) [ 293.718678][T13304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.718690][T13304] Call Trace: [ 293.718697][T13304] [ 293.718705][T13304] dump_stack_lvl+0x16c/0x1f0 [ 293.718735][T13304] gup_vma_lookup+0x1d2/0x220 [ 293.718764][T13304] __get_user_pages+0x243/0x34a0 [ 293.718799][T13304] ? find_held_lock+0x2b/0x80 [ 293.718824][T13304] ? __pfx___get_user_pages+0x10/0x10 [ 293.718859][T13304] get_user_pages_remote+0x243/0xab0 [ 293.718886][T13304] ? mas_parent_gap+0x6f0/0x7b0 [ 293.718913][T13304] ? __pfx_get_user_pages_remote+0x10/0x10 [ 293.718942][T13304] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 293.718970][T13304] __access_remote_vm+0x24d/0x850 [ 293.718998][T13304] ? do_raw_spin_lock+0x12c/0x2b0 [ 293.719020][T13304] ? __pfx___access_remote_vm+0x10/0x10 [ 293.719050][T13304] proc_pid_cmdline_read+0x4de/0x8e0 [ 293.719076][T13304] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 293.719101][T13304] ? rw_verify_area+0xcf/0x6c0 [ 293.719132][T13304] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 293.719153][T13304] vfs_readv+0x5c1/0x8b0 [ 293.719175][T13304] ? __pfx_vfs_readv+0x10/0x10 [ 293.719212][T13304] ? __fget_files+0x20e/0x3c0 [ 293.719239][T13304] ? do_preadv+0x1a6/0x270 [ 293.719254][T13304] do_preadv+0x1a6/0x270 [ 293.719272][T13304] ? __pfx_do_preadv+0x10/0x10 [ 293.719296][T13304] do_syscall_64+0xcd/0x4e0 [ 293.719323][T13304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.719342][T13304] RIP: 0033:0x7f307298eec9 [ 293.719357][T13304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.719375][T13304] RSP: 002b:00007f30737aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 293.719393][T13304] RAX: ffffffffffffffda RBX: 00007f3072be5fa0 RCX: 00007f307298eec9 [ 293.719405][T13304] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 293.719417][T13304] RBP: 00007f3072a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 293.719428][T13304] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 293.719439][T13304] R13: 00007f3072be6038 R14: 00007f3072be5fa0 R15: 00007fff9bde0528 [ 293.719471][T13304] [ 293.943288][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.985486][ T5951] m920x_read = error: -19 [ 293.989846][ T5951] dvb-usb: error while querying for an remote control event. [ 294.109480][ T8448] m920x_read = error: -19 [ 294.110121][ T30] audit: type=1326 audit(1758747670.258:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.9.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010ad8eec9 code=0x7fc00000 [ 294.113876][ T8448] dvb-usb: error while querying for an remote control event. [ 294.222138][ T8448] m920x_read = error: -19 [ 294.226519][ T8448] dvb-usb: error while querying for an remote control event. [ 294.342056][ T5951] m920x_read = error: -19 [ 294.346487][ T5951] dvb-usb: error while querying for an remote control event. [ 294.461978][ T5951] m920x_read = error: -19 [ 294.468624][ T5951] dvb-usb: error while querying for an remote control event. [ 294.487167][ T5960] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 294.553248][ T8448] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 294.591890][ T30] audit: type=1326 audit(1758747670.738:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.9.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f010ad8eec9 code=0x7fc00000 [ 294.610464][ T5951] m920x_read = error: -19 [ 294.623915][ T5951] dvb-usb: error while querying for an remote control event. [ 294.675010][ T5960] usb 1-1: Using ep0 maxpacket: 16 [ 294.685080][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.739916][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.760250][ T5960] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.788954][ T5960] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 294.809113][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.822272][ T5951] m920x_read = error: -19 [ 294.826644][ T5951] dvb-usb: error while querying for an remote control event. [ 294.839229][ T5960] usb 1-1: config 0 descriptor?? [ 294.873351][ T8448] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 294.885178][ T8448] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 295.019712][ T5951] m920x_read = error: -19 [ 295.127423][ T5951] dvb-usb: error while querying for an remote control event. [ 295.146563][ T8448] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 295.188163][ T8448] usb 8-1: config 220 has no interface number 2 [ 295.219286][ T8448] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 295.276828][ T8448] usb 8-1: config 220 interface 0 has no altsetting 0 [ 295.283756][ T5951] m920x_read = error: -19 [ 295.289161][ T5951] dvb-usb: error while querying for an remote control event. [ 295.307765][ T8448] usb 8-1: config 220 interface 76 has no altsetting 0 [ 295.360289][ T5960] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0027/input/input43 [ 295.500182][ T5960] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 295.598817][ T5960] usb 1-1: USB disconnect, device number 43 [ 295.621400][ T8448] usb 8-1: config 220 interface 1 has no altsetting 0 [ 295.633958][ T8448] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 295.816115][ T8446] m920x_read = error: -19 [ 295.820471][ T8446] dvb-usb: error while querying for an remote control event. [ 295.837331][ T8448] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.872397][ T8448] usb 8-1: Product: syz [ 295.882963][ T8448] usb 8-1: Manufacturer: syz [ 295.891418][ T8448] usb 8-1: SerialNumber: syz [ 296.179679][ T8446] m920x_read = error: -19 [ 296.239624][ T8446] dvb-usb: error while querying for an remote control event. [ 296.247903][ T8448] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 296.256328][ T8448] usb 8-1: No valid video chain found. [ 296.261918][ T8448] usb 8-1: selecting invalid altsetting 0 [ 296.273831][T13362] fido_id[13362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 296.345369][ T8448] usb 8-1: selecting invalid altsetting 0 [ 296.371400][ T8446] m920x_read = error: -19 [ 296.376949][ T8446] dvb-usb: error while querying for an remote control event. [ 296.439164][ T8448] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 296.487987][ T8448] usb 8-1: USB disconnect, device number 22 [ 296.518448][ T6109] m920x_read = error: -19 [ 296.555865][ T6109] dvb-usb: error while querying for an remote control event. [ 296.720409][ T6109] m920x_read = error: -19 [ 296.755117][ T6109] dvb-usb: error while querying for an remote control event. [ 296.921838][ T8448] m920x_read = error: -19 [ 296.926917][ T8448] dvb-usb: error while querying for an remote control event. [ 297.051904][ T8448] m920x_read = error: -19 [ 297.056600][ T8448] dvb-usb: error while querying for an remote control event. [ 297.190654][ T8448] m920x_read = error: -19 [ 297.195046][ T8448] dvb-usb: error while querying for an remote control event. [ 297.360644][ T8446] m920x_read = error: -19 [ 297.365175][ T8446] dvb-usb: error while querying for an remote control event. [ 297.490533][ T8446] m920x_read = error: -19 [ 297.560514][ T5960] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 297.650322][ T8446] dvb-usb: error while querying for an remote control event. [ 297.762688][ T5960] usb 8-1: Using ep0 maxpacket: 32 [ 297.783153][ T5960] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 297.821250][ T5960] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 297.848015][ T8446] m920x_read = error: -19 [ 297.850105][ T5960] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 297.886154][ T5960] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 297.906148][ T5960] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 297.930286][ T5960] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 297.953104][ T5960] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 297.981712][ T5960] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 297.990581][ T8446] dvb-usb: error while querying for an remote control event. [ 298.028702][ T5960] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 298.068096][ T5960] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.691551][ T5844] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 298.739830][ T6109] m920x_read = error: -19 [ 298.744177][ T6109] dvb-usb: error while querying for an remote control event. [ 298.780289][ T5960] usb 8-1: config 0 descriptor?? [ 298.785706][T13398] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 298.880194][ T6109] m920x_read = error: -19 [ 298.891045][ T6109] dvb-usb: error while querying for an remote control event. [ 298.899701][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 298.952390][ T5844] usb 1-1: config 4 has an invalid interface number: 111 but max is 0 [ 298.986776][ T5844] usb 1-1: config 4 has no interface number 0 [ 299.002875][ T5844] usb 1-1: config 4 interface 111 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 299.023842][ T6109] m920x_read = error: -19 [ 299.028473][ T6109] dvb-usb: error while querying for an remote control event. [ 299.121534][ T5844] usb 1-1: config 4 interface 111 has no altsetting 0 [ 299.129312][ T5960] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 299.161782][ T6109] m920x_read = error: -19 [ 299.162917][ T5844] usb 1-1: New USB device found, idVendor=0403, idProduct=bca2, bcdDevice=f7.e6 [ 299.175160][ T6109] dvb-usb: error while querying for an remote control event. [ 299.199066][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.208293][ T5844] usb 1-1: Product: ц [ 299.218105][ T5844] usb 1-1: Manufacturer: á° [ 299.224731][ T5844] usb 1-1: SerialNumber: á  [ 299.279647][ T6109] m920x_read = error: -19 [ 299.284103][ T6109] dvb-usb: error while querying for an remote control event. [ 299.287713][ T5960] usb 8-1: USB disconnect, device number 23 [ 299.300168][ T5960] usblp0: removed [ 299.439633][ T6109] m920x_read = error: -19 [ 299.443996][ T6109] dvb-usb: error while querying for an remote control event. [ 299.464923][ T5844] ftdi_sio 1-1:4.111: FTDI USB Serial Device converter detected [ 299.492115][ T5844] ftdi_sio ttyUSB0: unknown device type: 0xf7e6 [ 299.534080][ T5844] usb 1-1: USB disconnect, device number 44 [ 299.631321][ T6109] m920x_read = error: -19 [ 299.639817][ T6109] dvb-usb: error while querying for an remote control event. [ 299.675406][ T5844] ftdi_sio 1-1:4.111: device disconnected [ 299.753734][ T30] audit: type=1400 audit(1758747675.911:852): avc: denied { name_bind 0x1000000 } for pid=13436 comm="syz.8.2775" path="socket:[50640]" dev="sockfs" ino=50640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 299.755021][T13438] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 299.786742][ T6109] m920x_read = error: -19 [ 299.794198][ T6109] dvb-usb: error while querying for an remote control event. [ 299.909427][ T6109] m920x_read = error: -19 [ 299.920865][ T6109] dvb-usb: error while querying for an remote control event. [ 300.031421][ T6109] m920x_read = error: -19 [ 300.035865][ T6109] dvb-usb: error while querying for an remote control event. [ 300.179612][ T6109] m920x_read = error: -19 [ 300.184130][ T6109] dvb-usb: error while querying for an remote control event. [ 300.260375][T13455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.329231][ T6109] m920x_read = error: -19 [ 300.345408][ T6109] dvb-usb: error while querying for an remote control event. [ 300.349015][ T5844] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 300.494911][ T6109] m920x_read = error: -19 [ 300.505748][ T6109] dvb-usb: error while querying for an remote control event. [ 300.538406][ T5844] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.552781][ T5844] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.586630][ T5844] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.606417][ T5844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.643028][ T6109] m920x_read = error: -19 [ 300.647385][ T6109] dvb-usb: error while querying for an remote control event. [ 300.778871][ T5951] m920x_read = error: -19 [ 300.783229][ T5951] dvb-usb: error while querying for an remote control event. [ 300.854884][ T5844] usb 8-1: usb_control_msg returned -32 [ 300.887198][ T5844] usbtmc 8-1:16.0: can't read capabilities [ 300.910985][ T5951] m920x_read = error: -19 [ 300.924134][ T5951] dvb-usb: error while querying for an remote control event. [ 301.048642][ T5951] m920x_read = error: -19 [ 301.053006][ T5951] dvb-usb: error while querying for an remote control event. [ 301.098248][T13489] SELinux: failed to load policy [ 301.171176][ T5951] m920x_read = error: -19 [ 301.175542][ T5951] dvb-usb: error while querying for an remote control event. [ 301.280406][ T5844] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 301.298229][ T30] audit: type=1400 audit(1758747677.442:853): avc: denied { name_bind } for pid=13494 comm="syz.5.2797" path="socket:[50773]" dev="sockfs" ino=50773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 301.328880][ T5951] m920x_read = error: -19 [ 301.333239][ T5951] dvb-usb: error while querying for an remote control event. [ 301.478553][ T5844] usb 10-1: Using ep0 maxpacket: 8 [ 301.488552][ T6109] m920x_read = error: -19 [ 301.495533][ T6109] dvb-usb: error while querying for an remote control event. [ 301.497896][ T5844] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 301.542626][ T5844] usb 10-1: config 179 has no interface number 0 [ 301.564850][ T5844] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 301.594641][ T5844] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 301.612337][ T5844] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 301.624675][ T5844] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 301.629005][ T5951] m920x_read = error: -19 [ 301.639807][ T5844] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 301.658352][ T5951] dvb-usb: error while querying for an remote control event. [ 301.665808][ T5844] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 301.676604][ T5844] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.704369][T13487] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 301.788715][ T5951] m920x_read = error: -19 [ 301.793142][ T5951] dvb-usb: error while querying for an remote control event. [ 301.813761][ T8407] udevd[8407]: symlink '../../loop9' '/dev/disk/by-diskseq/91.tmp-b7:9' failed: Read-only file system [ 301.915073][ T5859] udevd[5859]: symlink '../../loop1' '/dev/disk/by-diskseq/92.tmp-b7:1' failed: Read-only file system [ 301.942928][ T5951] m920x_read = error: -19 [ 301.947284][ T5951] dvb-usb: error while querying for an remote control event. [ 301.991444][ T5859] udevd[5859]: symlink '../../loop1' '/dev/disk/by-diskseq/93.tmp-b7:1' failed: Read-only file system [ 302.068330][ T5951] m920x_read = error: -19 [ 302.072687][ T5951] dvb-usb: error while querying for an remote control event. [ 302.128890][ T5844] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input44 [ 302.198094][ T6109] m920x_read = error: -19 [ 302.206832][ T6109] dvb-usb: error while querying for an remote control event. [ 302.349606][T13487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.351873][ T5951] m920x_read = error: -19 [ 302.376567][ T5951] dvb-usb: error while querying for an remote control event. [ 302.381788][T13487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.508016][ T6109] m920x_read = error: -19 [ 302.512374][ T6109] dvb-usb: error while querying for an remote control event. [ 302.648527][ T6109] m920x_read = error: -19 [ 302.654016][ T6109] dvb-usb: error while querying for an remote control event. [ 302.672244][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 302.680618][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 302.718954][ T5844] usb 10-1: USB disconnect, device number 3 [ 302.819439][ T6109] m920x_read = error: -19 [ 302.823848][ T6109] dvb-usb: error while querying for an remote control event. [ 302.957977][ T6109] m920x_read = error: -19 [ 302.962963][ T6109] dvb-usb: error while querying for an remote control event. [ 302.980411][T13547] input: syz0 as /devices/virtual/input/input45 [ 303.137866][ T6109] m920x_read = error: -19 [ 303.142227][ T6109] dvb-usb: error while querying for an remote control event. [ 303.168768][ T6109] usb 8-1: USB disconnect, device number 24 [ 303.269804][T13553] SELinux: ebitmap start bit (4294967294) is not a multiple of the map unit size (64) [ 303.279636][ T8446] m920x_read = error: -19 [ 303.283974][ T8446] dvb-usb: error while querying for an remote control event. [ 303.295786][T13553] SELinux: failed to load policy [ 303.409036][ T8446] m920x_read = error: -19 [ 303.413417][ T8446] dvb-usb: error while querying for an remote control event. [ 303.504910][T13567] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2827'. [ 303.547541][ T5951] m920x_read = error: -19 [ 303.551974][ T5951] dvb-usb: error while querying for an remote control event. [ 303.688419][ T6109] m920x_read = error: -19 [ 303.693101][ T6109] dvb-usb: error while querying for an remote control event. [ 303.717432][ T8446] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 303.807316][ T5951] m920x_read = error: -19 [ 303.811787][ T5951] dvb-usb: error while querying for an remote control event. [ 303.872986][T13586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.907216][ T8446] usb 6-1: Using ep0 maxpacket: 32 [ 303.912599][T13582] netlink: 'syz.8.2836': attribute type 10 has an invalid length. [ 303.934625][ T8446] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 303.947507][ T8446] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 303.973454][T13581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.976761][ T8446] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 303.997521][ T5951] m920x_read = error: -19 [ 304.001863][ T5951] dvb-usb: error while querying for an remote control event. [ 304.032683][ T8446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.057120][ T8446] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 304.105533][ T8446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 304.128865][ T5951] m920x_read = error: -19 [ 304.133217][ T5951] dvb-usb: error while querying for an remote control event. [ 304.144869][ T8446] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 304.165065][ T8446] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 304.192349][ T8446] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 304.225817][ T8446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.247171][ T5844] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 304.249934][ T8446] usb 6-1: config 0 descriptor?? [ 304.261614][T13566] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 304.268994][ T6109] m920x_read = error: -19 [ 304.273396][ T6109] dvb-usb: error while querying for an remote control event. [ 304.387030][ T5951] m920x_read = error: -19 [ 304.401557][ T5951] dvb-usb: error while querying for an remote control event. [ 304.408319][ T5844] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 304.426112][ T5844] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.445478][ T5844] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 304.460478][ T5844] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 304.472065][ T5844] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.490191][ T5844] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.527061][ T5951] m920x_read = error: -19 [ 304.531449][ T5951] dvb-usb: error while querying for an remote control event. [ 304.539566][ T5844] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.541394][ T5844] usb 10-1: config 0 descriptor?? [ 304.553891][ T8446] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 304.595500][T13588] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 304.684561][ T8446] m920x_read = error: -19 [ 304.692349][ T8446] dvb-usb: error while querying for an remote control event. [ 304.771293][ T8446] usb 6-1: USB disconnect, device number 19 [ 304.787231][ T8446] usblp0: removed [ 304.837739][ T8448] m920x_read = error: -19 [ 304.846170][ T8448] dvb-usb: error while querying for an remote control event. [ 304.966915][ T5951] m920x_read = error: -19 [ 304.971781][ T5951] dvb-usb: error while querying for an remote control event. [ 305.028828][ T5844] plantronics 0003:047F:FFFF.0028: reserved main item tag 0xd [ 305.047290][ T5844] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 305.096156][ T5951] m920x_read = error: -19 [ 305.100666][ T5951] dvb-usb: error while querying for an remote control event. [ 305.178294][ T8448] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 305.236546][ T5951] m920x_read = error: -19 [ 305.240910][ T5951] dvb-usb: error while querying for an remote control event. [ 305.252011][ T5960] usb 10-1: USB disconnect, device number 4 [ 305.356542][ T5951] m920x_read = error: -19 [ 305.361035][ T5951] dvb-usb: error while querying for an remote control event. [ 305.369983][ T8448] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.380513][ T8448] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.390707][ T8448] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 305.400084][ T8448] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 305.418448][ T8448] usb 8-1: SerialNumber: syz [ 305.478394][ T6109] m920x_read = error: -19 [ 305.482816][ T6109] dvb-usb: error while querying for an remote control event. [ 305.606864][ T5951] m920x_read = error: -19 [ 305.611252][ T5951] dvb-usb: error while querying for an remote control event. [ 305.644321][ T30] audit: type=1400 audit(1758747681.804:854): avc: denied { bind } for pid=13626 comm="syz.0.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 305.669453][ T8448] usb 8-1: 0:2 : does not exist [ 305.674371][ T8448] usb 8-1: usbmixer: too many channels (61) in unit 5 [ 305.694357][ T8448] usb 8-1: USB disconnect, device number 25 [ 305.722553][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 305.742373][ T5951] m920x_read = error: -19 [ 305.756772][ T5951] dvb-usb: error while querying for an remote control event. [ 305.794062][T13630] SELinux: ebitmap: truncated map [ 305.821768][T13634] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2858'. [ 305.863908][T13630] SELinux: failed to load policy [ 305.877694][ T5951] m920x_read = error: -19 [ 305.882083][ T5951] dvb-usb: error while querying for an remote control event. [ 305.946645][ T5844] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 306.017052][ T8448] m920x_read = error: -19 [ 306.022304][ T8448] dvb-usb: error while querying for an remote control event. [ 306.128544][ T5844] usb 9-1: Using ep0 maxpacket: 16 [ 306.142483][ T5844] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 306.156726][ T5844] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 306.157976][ T8448] m920x_read = error: -19 [ 306.168662][ T5844] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 306.181136][ T5844] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 306.209742][T13651] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2865'. [ 306.217111][ T8448] dvb-usb: error while querying for an remote control event. [ 306.243542][ T5844] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 306.280163][ T30] audit: type=1400 audit(1758747682.434:855): avc: denied { bind } for pid=13653 comm="syz.0.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 306.288330][ T5844] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 306.349077][ T8448] m920x_read = error: -19 [ 306.357465][ T8448] dvb-usb: error while querying for an remote control event. [ 306.389409][ T5844] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.425258][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 306.442187][ T5844] usb 9-1: SerialNumber: syz [ 306.461593][T13631] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 306.476229][ T6109] m920x_read = error: -19 [ 306.480623][ T6109] dvb-usb: error while querying for an remote control event. [ 306.481490][ T5844] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 306.519081][ T5844] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -12 [ 306.606221][ T6109] m920x_read = error: -19 [ 306.611196][ T6109] dvb-usb: error while querying for an remote control event. [ 306.657061][ T8448] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 306.715103][ T5951] usb 9-1: USB disconnect, device number 4 [ 306.757242][ T6109] m920x_read = error: -19 [ 306.761594][ T6109] dvb-usb: error while querying for an remote control event. [ 306.817582][ T8448] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 306.825930][ T8448] usb 1-1: config 0 has no interface number 0 [ 306.833731][ T8448] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 306.843250][ T8448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.851904][ T8448] usb 1-1: Product: syz [ 306.856159][ T8448] usb 1-1: Manufacturer: syz [ 306.860745][ T8448] usb 1-1: SerialNumber: syz [ 306.868530][ T8448] usb 1-1: config 0 descriptor?? [ 306.875775][ T6109] m920x_read = error: -19 [ 306.880151][ T6109] dvb-usb: error while querying for an remote control event. [ 306.905820][ T8446] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 306.995822][ T5951] m920x_read = error: -19 [ 307.000228][ T5951] dvb-usb: error while querying for an remote control event. [ 307.059323][ T8446] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.070435][ T8446] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 307.084983][ T8446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.095105][ T8446] usb 8-1: config 0 descriptor?? [ 307.115687][ T5951] m920x_read = error: -19 [ 307.120052][ T5951] dvb-usb: error while querying for an remote control event. [ 307.235658][ T5951] m920x_read = error: -19 [ 307.250409][ T5951] dvb-usb: error while querying for an remote control event. [ 307.294348][ T8448] usb 1-1: Firmware: major: 84, minor: 103, hardware type: UNKNOWN (73) [ 307.365621][ T5951] m920x_read = error: -19 [ 307.381084][ T5951] dvb-usb: error while querying for an remote control event. [ 307.393996][ T30] audit: type=1400 audit(1758747683.545:856): avc: denied { ioctl } for pid=13683 comm="syz.9.2879" path="socket:[52242]" dev="sockfs" ino=52242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 307.476151][T13688] veth0: entered promiscuous mode [ 307.482913][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2881'. [ 307.504281][ T8448] usb 1-1: Read permanent extended address 52:39:35:8d:79:3e:bf:c5 from device [ 307.519796][ T8446] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 307.527751][ T5951] m920x_read = error: -19 [ 307.532085][ T5951] dvb-usb: error while querying for an remote control event. [ 307.539661][ T8448] usb 1-1: atusb_probe: initialization failed, error = -524 [ 307.550679][ T8448] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 307.559213][ T8446] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 307.583504][ T8446] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0029/input/input47 [ 307.643980][ T8446] cm6533_jd 0003:0D8C:0022.0029: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 307.657139][ T8448] m920x_read = error: -19 [ 307.661480][ T8448] dvb-usb: error while querying for an remote control event. [ 307.742316][ T8446] usb 8-1: USB disconnect, device number 26 [ 307.753385][ T8448] usb 1-1: USB disconnect, device number 45 [ 307.775410][ T6109] m920x_read = error: -19 [ 307.790456][ T6109] dvb-usb: error while querying for an remote control event. [ 307.862222][ T30] audit: type=1400 audit(1758747684.025:857): avc: denied { module_load } for pid=13694 comm="syz.9.2884" path="/53/bus" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 307.862313][T13695] Invalid ELF header magic: != ELF [ 307.925501][ T5951] m920x_read = error: -19 [ 307.930469][ T5951] dvb-usb: error while querying for an remote control event. [ 308.045335][ T8446] m920x_read = error: -19 [ 308.049690][ T8446] dvb-usb: error while querying for an remote control event. [ 308.175086][ T8446] m920x_read = error: -19 [ 308.179457][ T8446] dvb-usb: error while querying for an remote control event. [ 308.215135][ T5951] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 308.260671][ T30] audit: type=1400 audit(1758747684.415:858): avc: denied { mounton } for pid=13716 comm="syz.8.2893" path="/file0" dev="ramfs" ino=52360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 308.298694][ T8446] m920x_read = error: -19 [ 308.303048][ T8446] dvb-usb: error while querying for an remote control event. [ 308.394680][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2896'. [ 308.396178][ T5951] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 308.427965][ T5951] usb 6-1: config 1 has no interface number 0 [ 308.438205][ T8446] m920x_read = error: -19 [ 308.444772][ T5951] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 80, setting to 64 [ 308.458678][ T8446] dvb-usb: error while querying for an remote control event. [ 308.466462][ T5951] usb 6-1: config 1 interface 105 has no altsetting 0 [ 308.480942][ T5951] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 308.497896][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.510339][ T5951] usb 6-1: Product: syz [ 308.519976][ T5951] usb 6-1: Manufacturer: syz [ 308.527877][ T5951] usb 6-1: SerialNumber: syz [ 308.543190][T13702] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.582791][ T8446] m920x_read = error: -19 [ 308.589520][ T8446] dvb-usb: error while querying for an remote control event. [ 308.647449][T13735] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2901'. [ 308.727313][ T8446] m920x_read = error: -19 [ 308.731741][ T8446] dvb-usb: error while querying for an remote control event. [ 308.846278][ T8446] m920x_read = error: -19 [ 308.854424][ T8446] dvb-usb: error while querying for an remote control event. [ 308.952434][T13747] input: syz0 as /devices/virtual/input/input48 [ 308.960971][T13702] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.974719][ T8448] m920x_read = error: -19 [ 308.979082][ T8448] dvb-usb: error while querying for an remote control event. [ 309.096423][ T8448] m920x_read = error: -19 [ 309.100807][ T8448] dvb-usb: error while querying for an remote control event. [ 309.140097][T13754] block nbd7: Attempted send on invalid socket [ 309.157985][T13754] blk_print_req_error: 2 callbacks suppressed [ 309.158001][T13754] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.184830][T13754] block nbd7: Attempted send on invalid socket [ 309.200963][ T30] audit: type=1400 audit(1758747685.356:859): avc: denied { ioctl } for pid=13755 comm="syz.8.2912" path="socket:[52424]" dev="sockfs" ino=52424 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 309.201853][T13754] I/O error, dev nbd7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.234586][ T8448] m920x_read = error: -19 [ 309.251233][ T8448] dvb-usb: error while querying for an remote control event. [ 309.271616][T13754] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 309.322142][T13754] block nbd7: Send control failed (result -107) [ 309.337920][T13754] block nbd7: Request send failed, requeueing [ 309.344382][ T55] block nbd7: Dead connection, failed to find a fallback [ 309.355246][ T55] block nbd7: shutting down sockets [ 309.360463][ T55] I/O error, dev nbd7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.372772][T13754] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 309.382485][ T8448] m920x_read = error: -19 [ 309.386920][ T8448] dvb-usb: error while querying for an remote control event. [ 309.395874][ T5951] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 309.419732][ T5951] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 309.435070][ T5951] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 309.438091][T13754] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.452975][ T5951] aqc111 6-1:1.105 eth21: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 86:25:61:17:3a:81 [ 309.470970][ T5951] usb 6-1: USB disconnect, device number 20 [ 309.492587][ T5951] aqc111 6-1:1.105 eth21: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 309.507009][T13754] I/O error, dev nbd7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.524443][ T8448] m920x_read = error: -19 [ 309.538826][ T8448] dvb-usb: error while querying for an remote control event. [ 309.544436][T13754] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 309.570065][T13754] I/O error, dev nbd7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.582767][T13754] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 309.604888][ T5951] aqc111 6-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 309.622118][ T5951] aqc111 6-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 309.632022][T13754] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.633742][ T5951] aqc111 6-1:1.105 eth21 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 309.654518][ T8448] m920x_read = error: -19 [ 309.658859][ T8448] dvb-usb: error while querying for an remote control event. [ 309.684655][T13754] I/O error, dev nbd7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.717479][T13754] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 309.725318][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2917'. [ 309.743573][T13754] I/O error, dev nbd7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.752257][T13771] input: syz1 as /devices/virtual/input/input49 [ 309.773435][T13754] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 309.776478][T13769] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2917'. [ 309.793679][T13754] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.795659][ T8446] m920x_read = error: -19 [ 309.817938][T13754] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 309.824870][ T8446] dvb-usb: error while querying for an remote control event. [ 309.843808][T13754] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 309.847174][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2917'. [ 309.874085][T13772] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2917'. [ 309.888414][T13754] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 309.974451][ T8446] m920x_read = error: -19 [ 309.978810][ T8446] dvb-usb: error while querying for an remote control event. [ 310.115458][ T8446] m920x_read = error: -19 [ 310.119819][ T8446] dvb-usb: error while querying for an remote control event. [ 310.244100][ T8446] m920x_read = error: -19 [ 310.248537][ T8446] dvb-usb: error while querying for an remote control event. [ 310.309999][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2927'. [ 310.313886][ T50] block nbd9: Receive control failed (result -32) [ 310.329539][T13790] block nbd9: shutting down sockets [ 310.355612][T13796] openvswitch: netlink: nsh attr 0 has unexpected len 8 expected 0 [ 310.363720][T13796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.376907][ T8446] m920x_read = error: -19 [ 310.382854][ T8446] dvb-usb: error while querying for an remote control event. [ 310.544679][ T8446] m920x_read = error: -19 [ 310.549042][ T8446] dvb-usb: error while querying for an remote control event. [ 310.674279][ T8448] m920x_read = error: -19 [ 310.678647][ T8448] dvb-usb: error while querying for an remote control event. [ 310.713827][ T5951] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 310.730821][ T30] audit: type=1400 audit(1758747686.886:860): avc: denied { ioctl } for pid=13811 comm="syz.7.2935" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 310.814955][ T6109] m920x_read = error: -19 [ 310.819965][ T6109] dvb-usb: error while querying for an remote control event. [ 310.827454][ T8446] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 310.863923][ T5951] usb 10-1: Using ep0 maxpacket: 32 [ 310.879833][ T5951] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 310.897254][ T5951] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.928495][ T5951] usb 10-1: config 0 descriptor?? [ 310.943729][ T6109] m920x_read = error: -19 [ 310.961867][ T6109] dvb-usb: error while querying for an remote control event. [ 310.972160][ T5951] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 311.033839][ T8446] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 311.042893][ T8446] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.077372][ T8446] usb 9-1: config 0 descriptor?? [ 311.153788][ T6109] m920x_read = error: -19 [ 311.158211][ T6109] dvb-usb: error while querying for an remote control event. [ 311.249763][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2941'. [ 311.293588][ T6109] m920x_read = error: -19 [ 311.298265][ T6109] dvb-usb: error while querying for an remote control event. [ 311.311939][T13828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.336290][T13830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.348519][T13830] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 311.362575][T13830] bond1: (slave vcan1): Error -95 calling set_mac_address [ 311.433870][ T6109] m920x_read = error: -19 [ 311.438237][ T6109] dvb-usb: error while querying for an remote control event. [ 311.563599][ T6109] m920x_read = error: -19 [ 311.568050][ T6109] dvb-usb: error while querying for an remote control event. [ 311.669195][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2946'. [ 311.693405][ T6109] m920x_read = error: -19 [ 311.697924][ T6109] dvb-usb: error while querying for an remote control event. [ 311.814374][ T6109] m920x_read = error: -19 [ 311.824000][ T6109] dvb-usb: error while querying for an remote control event. [ 311.943684][ T6109] m920x_read = error: -19 [ 311.950733][ T6109] dvb-usb: error while querying for an remote control event. [ 312.081875][ T6109] m920x_read = error: -19 [ 312.086362][ T6109] dvb-usb: error while querying for an remote control event. [ 312.129634][ T8446] pegasus 9-1:0.0: probe with driver pegasus failed with error -71 [ 312.145019][ T30] audit: type=1400 audit(1758747688.307:861): avc: denied { watch_sb } for pid=13865 comm="syz.5.2956" path="/138" dev="tmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 312.151699][ T8446] usb 9-1: USB disconnect, device number 5 [ 312.197108][ T5951] gspca_vc032x: reg_w err -71 [ 312.205914][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.211214][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.216730][ T6109] m920x_read = error: -19 [ 312.221068][ T6109] dvb-usb: error while querying for an remote control event. [ 312.238218][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.244802][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.250541][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.255951][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261285][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.267690][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.273789][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.279389][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.289485][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.299574][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.309709][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.323518][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.328817][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.345737][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.351047][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.356474][ T6109] m920x_read = error: -19 [ 312.360806][ T6109] dvb-usb: error while querying for an remote control event. [ 312.386416][ T5951] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.391921][ T5951] gspca_vc032x: Unknown sensor... [ 312.397172][ T5951] vc032x 10-1:0.0: probe with driver vc032x failed with error -22 [ 312.438587][ T5951] usb 10-1: USB disconnect, device number 5 [ 312.483185][ T8446] m920x_read = error: -19 [ 312.487546][ T8446] dvb-usb: error while querying for an remote control event. [ 312.622868][ T6109] m920x_read = error: -19 [ 312.627828][ T6109] dvb-usb: error while querying for an remote control event. [ 312.637586][T13881] input: syz1 as /devices/virtual/input/input50 [ 312.752953][ T6109] m920x_read = error: -19 [ 312.757316][ T6109] dvb-usb: error while querying for an remote control event. [ 312.903506][ T5951] m920x_read = error: -19 [ 312.911378][ T5951] dvb-usb: error while querying for an remote control event. [ 313.052682][ T5951] m920x_read = error: -19 [ 313.057035][ T5951] dvb-usb: error while querying for an remote control event. [ 313.208044][ T5951] m920x_read = error: -19 [ 313.212433][ T5951] dvb-usb: error while querying for an remote control event. [ 313.362548][ T5951] m920x_read = error: -19 [ 313.366926][ T5951] dvb-usb: error while querying for an remote control event. [ 313.512601][ T5951] m920x_read = error: -19 [ 313.528958][ T5951] dvb-usb: error while querying for an remote control event. [ 313.702455][ T5951] m920x_read = error: -19 [ 313.709070][ T5951] dvb-usb: error while querying for an remote control event. [ 313.902366][ T5951] m920x_read = error: -19 [ 313.906724][ T5951] dvb-usb: error while querying for an remote control event. [ 314.092227][ T5951] m920x_read = error: -19 [ 314.096589][ T5951] dvb-usb: error while querying for an remote control event. [ 314.262239][ T5951] m920x_read = error: -19 [ 314.266610][ T5951] dvb-usb: error while querying for an remote control event. [ 314.424208][ T5951] m920x_read = error: -19 [ 314.428793][ T5951] dvb-usb: error while querying for an remote control event. [ 314.565418][ T5951] m920x_read = error: -19 [ 314.575690][ T5951] dvb-usb: error while querying for an remote control event. [ 314.644437][ T30] audit: type=1400 audit(1758747690.808:862): avc: denied { mounton } for pid=13961 comm="syz.8.2987" path="/85/file0" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 314.730680][ T5951] m920x_read = error: -19 [ 314.744345][ T5951] dvb-usb: error while querying for an remote control event. [ 314.894117][ T5951] m920x_read = error: -19 [ 314.898478][ T5951] dvb-usb: error while querying for an remote control event. [ 315.022909][ T5951] m920x_read = error: -19 [ 315.027269][ T5951] dvb-usb: error while querying for an remote control event. [ 315.153595][T13991] [ 315.155943][T13991] ===================================================== [ 315.161631][ T8446] m920x_read = error: -19 [ 315.162860][T13991] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 315.167227][ T8446] dvb-usb: error while querying for an remote control event. [ 315.174596][T13991] syzkaller #0 Not tainted [ 315.174608][T13991] ----------------------------------------------------- [ 315.174615][T13991] syz.8.2999/13991 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 315.174635][T13991] ffff888051bfd2b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 315.174685][T13991] [ 315.174685][T13991] and this task is already holding: [ 315.174692][T13991] ffff888066206028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 315.226818][T13991] which would create a new lock dependency: [ 315.232682][T13991] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 315.240754][T13991] [ 315.240754][T13991] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 315.250180][T13991] (&dev->event_lock#2){..-.}-{3:3} [ 315.250204][T13991] [ 315.250204][T13991] ... which became SOFTIRQ-irq-safe at: [ 315.263051][T13991] lock_acquire+0x179/0x350 [ 315.267621][T13991] _raw_spin_lock_irqsave+0x3a/0x60 [ 315.272891][T13991] input_event+0x74/0xd0 [ 315.277205][T13991] xpad360_process_packet.part.0+0xed/0xce0 [ 315.283167][T13991] xpad_irq_in+0x1414/0x2ac0 [ 315.287827][T13991] __usb_hcd_giveback_urb+0x38b/0x610 [ 315.293262][T13991] usb_hcd_giveback_urb+0x39b/0x450 [ 315.298525][T13991] dummy_timer+0x1814/0x3a30 [ 315.303180][T13991] __hrtimer_run_queues+0x202/0xad0 [ 315.308444][T13991] hrtimer_run_softirq+0x17d/0x350 [ 315.313620][T13991] handle_softirqs+0x219/0x8e0 [ 315.318450][T13991] __irq_exit_rcu+0x109/0x170 [ 315.323192][T13991] irq_exit_rcu+0x9/0x30 [ 315.327504][T13991] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 315.333203][T13991] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.339256][T13991] memset_orig+0x25/0xb0 [ 315.343580][T13991] __kasan_slab_free+0x55/0x70 [ 315.348416][T13991] kfree+0x2b4/0x4d0 [ 315.352396][T13991] m920x_rc_query+0x4a3/0x770 [ 315.357151][T13991] legacy_dvb_usb_read_remote_control+0x10c/0x4f0 [ 315.363641][T13991] process_one_work+0x9cc/0x1b70 [ 315.368648][T13991] worker_thread+0x6c8/0xf10 [ 315.373303][T13991] kthread+0x3c2/0x780 [ 315.377440][T13991] ret_from_fork+0x56a/0x730 [ 315.382094][T13991] ret_from_fork_asm+0x1a/0x30 [ 315.386925][T13991] [ 315.386925][T13991] to a SOFTIRQ-irq-unsafe lock: [ 315.393914][T13991] (tasklist_lock){.+.+}-{3:3} [ 315.393935][T13991] [ 315.393935][T13991] ... which became SOFTIRQ-irq-unsafe at: [ 315.406523][T13991] ... [ 315.406532][T13991] lock_acquire+0x179/0x350 [ 315.413661][T13991] _raw_read_lock+0x5f/0x70 [ 315.418232][T13991] __do_wait+0x105/0x890 [ 315.422542][T13991] do_wait+0x21e/0x5a0 [ 315.426682][T13991] kernel_wait+0x9f/0x160 [ 315.431076][T13991] call_usermodehelper_exec_work+0xf1/0x170 [ 315.437039][T13991] process_one_work+0x9cc/0x1b70 [ 315.442046][T13991] worker_thread+0x6c8/0xf10 [ 315.446705][T13991] kthread+0x3c2/0x780 [ 315.450843][T13991] ret_from_fork+0x56a/0x730 [ 315.455502][T13991] ret_from_fork_asm+0x1a/0x30 [ 315.460338][T13991] [ 315.460338][T13991] other info that might help us debug this: [ 315.460338][T13991] [ 315.470552][T13991] Chain exists of: [ 315.470552][T13991] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 315.470552][T13991] [ 315.484095][T13991] Possible interrupt unsafe locking scenario: [ 315.484095][T13991] [ 315.492399][T13991] CPU0 CPU1 [ 315.497745][T13991] ---- ---- [ 315.503088][T13991] lock(tasklist_lock); [ 315.507313][T13991] local_irq_disable(); [ 315.514049][T13991] lock(&dev->event_lock#2); [ 315.521234][T13991] lock(&client->buffer_lock); [ 315.528587][T13991] [ 315.532020][T13991] lock(&dev->event_lock#2); [ 315.536855][T13991] [ 315.536855][T13991] *** DEADLOCK *** [ 315.536855][T13991] [ 315.544976][T13991] 7 locks held by syz.8.2999/13991: [ 315.550165][T13991] #0: ffff888146b9d118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 315.559282][T13991] #1: ffff88801ffb9230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 315.569361][T13991] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 315.578999][T13991] #3: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 315.588549][T13991] #4: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 315.597664][T13991] #5: ffff888066206028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 315.607911][T13991] #6: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 315.616937][T13991] [ 315.616937][T13991] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 315.627317][T13991] -> (&dev->event_lock#2){..-.}-{3:3} { [ 315.632944][T13991] IN-SOFTIRQ-W at: [ 315.636988][T13991] lock_acquire+0x179/0x350 [ 315.643292][T13991] _raw_spin_lock_irqsave+0x3a/0x60 [ 315.650298][T13991] input_event+0x74/0xd0 [ 315.656349][T13991] xpad360_process_packet.part.0+0xed/0xce0 [ 315.664054][T13991] xpad_irq_in+0x1414/0x2ac0 [ 315.670460][T13991] __usb_hcd_giveback_urb+0x38b/0x610 [ 315.677636][T13991] usb_hcd_giveback_urb+0x39b/0x450 [ 315.684637][T13991] dummy_timer+0x1814/0x3a30 [ 315.691040][T13991] __hrtimer_run_queues+0x202/0xad0 [ 315.698047][T13991] hrtimer_run_softirq+0x17d/0x350 [ 315.704965][T13991] handle_softirqs+0x219/0x8e0 [ 315.711538][T13991] __irq_exit_rcu+0x109/0x170 [ 315.718022][T13991] irq_exit_rcu+0x9/0x30 [ 315.724070][T13991] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 315.731506][T13991] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.739288][T13991] memset_orig+0x25/0xb0 [ 315.745337][T13991] __kasan_slab_free+0x55/0x70 [ 315.751905][T13991] kfree+0x2b4/0x4d0 [ 315.757606][T13991] m920x_rc_query+0x4a3/0x770 [ 315.764088][T13991] legacy_dvb_usb_read_remote_control+0x10c/0x4f0 [ 315.772308][T13991] process_one_work+0x9cc/0x1b70 [ 315.779049][T13991] worker_thread+0x6c8/0xf10 [ 315.785442][T13991] kthread+0x3c2/0x780 [ 315.791312][T13991] ret_from_fork+0x56a/0x730 [ 315.797703][T13991] ret_from_fork_asm+0x1a/0x30 [ 315.804277][T13991] INITIAL USE at: [ 315.808235][T13991] lock_acquire+0x179/0x350 [ 315.814454][T13991] _raw_spin_lock_irqsave+0x3a/0x60 [ 315.821367][T13991] input_inject_event+0x9f/0x3b0 [ 315.828030][T13991] led_set_brightness+0x217/0x290 [ 315.834774][T13991] kbd_led_trigger_activate+0xcb/0x110 [ 315.841950][T13991] led_trigger_set+0x59a/0xc50 [ 315.848424][T13991] led_trigger_set_default+0x1e0/0x2e0 [ 315.855596][T13991] led_classdev_register_ext+0x7b8/0xa10 [ 315.862951][T13991] input_leds_connect+0x552/0x8e0 [ 315.869698][T13991] input_attach_handler.isra.0+0x176/0x250 [ 315.877225][T13991] input_register_device+0xab9/0x1180 [ 315.884322][T13991] atkbd_connect+0x5f8/0xa40 [ 315.890628][T13991] serio_driver_probe+0x7c/0xd0 [ 315.897198][T13991] really_probe+0x241/0xa90 [ 315.903418][T13991] __driver_probe_device+0x1de/0x440 [ 315.910418][T13991] driver_probe_device+0x4c/0x1b0 [ 315.917159][T13991] __driver_attach+0x283/0x580 [ 315.923641][T13991] bus_for_each_dev+0x13e/0x1d0 [ 315.930223][T13991] serio_handle_event+0x335/0xc30 [ 315.936968][T13991] process_one_work+0x9cc/0x1b70 [ 315.943623][T13991] worker_thread+0x6c8/0xf10 [ 315.949927][T13991] kthread+0x3c2/0x780 [ 315.955709][T13991] ret_from_fork+0x56a/0x730 [ 315.962013][T13991] ret_from_fork_asm+0x1a/0x30 [ 315.968495][T13991] } [ 315.971055][T13991] ... key at: [] __key.7+0x0/0x40 [ 315.978246][T13991] -> (&client->buffer_lock){....}-{3:3} { [ 315.983967][T13991] INITIAL USE at: [ 315.987844][T13991] lock_acquire+0x179/0x350 [ 315.993894][T13991] _raw_spin_lock+0x2e/0x40 [ 315.999949][T13991] evdev_pass_values+0x10e/0x9b0 [ 316.006442][T13991] evdev_events+0x1bb/0x390 [ 316.012495][T13991] input_pass_values+0x74e/0x880 [ 316.018986][T13991] input_handle_event+0xf00/0x14d0 [ 316.025647][T13991] input_inject_event+0x1e8/0x3b0 [ 316.032219][T13991] evdev_write+0x457/0x750 [ 316.038175][T13991] vfs_write+0x2a0/0x11d0 [ 316.044044][T13991] ksys_write+0x1f8/0x250 [ 316.049913][T13991] do_syscall_64+0xcd/0x4e0 [ 316.055963][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.063396][T13991] } [ 316.065870][T13991] ... key at: [] __key.1+0x0/0x40 [ 316.072965][T13991] ... acquired at: [ 316.076744][T13991] _raw_spin_lock+0x2e/0x40 [ 316.081399][T13991] evdev_pass_values+0x10e/0x9b0 [ 316.086494][T13991] evdev_events+0x1bb/0x390 [ 316.091154][T13991] input_pass_values+0x74e/0x880 [ 316.096252][T13991] input_handle_event+0xf00/0x14d0 [ 316.101528][T13991] input_inject_event+0x1e8/0x3b0 [ 316.106714][T13991] evdev_write+0x457/0x750 [ 316.111281][T13991] vfs_write+0x2a0/0x11d0 [ 316.115760][T13991] ksys_write+0x1f8/0x250 [ 316.120238][T13991] do_syscall_64+0xcd/0x4e0 [ 316.124898][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.130948][T13991] [ 316.133249][T13991] [ 316.133249][T13991] the dependencies between the lock to be acquired [ 316.133256][T13991] and SOFTIRQ-irq-unsafe lock: [ 316.146719][T13991] -> (tasklist_lock){.+.+}-{3:3} { [ 316.151994][T13991] HARDIRQ-ON-R at: [ 316.156126][T13991] lock_acquire+0x179/0x350 [ 316.162601][T13991] _raw_read_lock+0x5f/0x70 [ 316.169094][T13991] __do_wait+0x105/0x890 [ 316.175329][T13991] do_wait+0x21e/0x5a0 [ 316.181468][T13991] kernel_wait+0x9f/0x160 [ 316.187780][T13991] call_usermodehelper_exec_work+0xf1/0x170 [ 316.195663][T13991] process_one_work+0x9cc/0x1b70 [ 316.202591][T13991] worker_thread+0x6c8/0xf10 [ 316.209164][T13991] kthread+0x3c2/0x780 [ 316.215219][T13991] ret_from_fork+0x56a/0x730 [ 316.221795][T13991] ret_from_fork_asm+0x1a/0x30 [ 316.228550][T13991] SOFTIRQ-ON-R at: [ 316.232686][T13991] lock_acquire+0x179/0x350 [ 316.239166][T13991] _raw_read_lock+0x5f/0x70 [ 316.245649][T13991] __do_wait+0x105/0x890 [ 316.251867][T13991] do_wait+0x21e/0x5a0 [ 316.257914][T13991] kernel_wait+0x9f/0x160 [ 316.264230][T13991] call_usermodehelper_exec_work+0xf1/0x170 [ 316.272107][T13991] process_one_work+0x9cc/0x1b70 [ 316.279033][T13991] worker_thread+0x6c8/0xf10 [ 316.285614][T13991] kthread+0x3c2/0x780 [ 316.291659][T13991] ret_from_fork+0x56a/0x730 [ 316.298229][T13991] ret_from_fork_asm+0x1a/0x30 [ 316.304978][T13991] INITIAL USE at: [ 316.309031][T13991] lock_acquire+0x179/0x350 [ 316.315423][T13991] _raw_write_lock_irq+0x36/0x50 [ 316.322255][T13991] copy_process+0x4caf/0x7690 [ 316.328825][T13991] kernel_clone+0xfc/0x930 [ 316.335133][T13991] user_mode_thread+0xc7/0x110 [ 316.341790][T13991] rest_init+0x23/0x2b0 [ 316.347839][T13991] start_kernel+0x3ee/0x4d0 [ 316.354233][T13991] x86_64_start_reservations+0x18/0x30 [ 316.361589][T13991] x86_64_start_kernel+0x130/0x190 [ 316.368600][T13991] common_startup_64+0x13e/0x148 [ 316.375429][T13991] INITIAL READ USE at: [ 316.379921][T13991] lock_acquire+0x179/0x350 [ 316.386752][T13991] _raw_read_lock+0x5f/0x70 [ 316.393585][T13991] __do_wait+0x105/0x890 [ 316.400152][T13991] do_wait+0x21e/0x5a0 [ 316.406544][T13991] kernel_wait+0x9f/0x160 [ 316.413196][T13991] call_usermodehelper_exec_work+0xf1/0x170 [ 316.421418][T13991] process_one_work+0x9cc/0x1b70 [ 316.428680][T13991] worker_thread+0x6c8/0xf10 [ 316.435610][T13991] kthread+0x3c2/0x780 [ 316.442001][T13991] ret_from_fork+0x56a/0x730 [ 316.448911][T13991] ret_from_fork_asm+0x1a/0x30 [ 316.456002][T13991] } [ 316.458652][T13991] ... key at: [] tasklist_lock+0x18/0x40 [ 316.466531][T13991] ... acquired at: [ 316.470484][T13991] _raw_read_lock+0x5f/0x70 [ 316.475142][T13991] send_sigurg+0xed/0xc80 [ 316.479629][T13991] sk_send_sigurg+0x76/0x360 [ 316.484373][T13991] unix_stream_sendmsg+0xfa5/0x1340 [ 316.489739][T13991] ____sys_sendmsg+0xa98/0xc70 [ 316.494676][T13991] ___sys_sendmsg+0x134/0x1d0 [ 316.499518][T13991] __sys_sendmmsg+0x200/0x420 [ 316.504358][T13991] __x64_sys_sendmmsg+0x9c/0x100 [ 316.509460][T13991] do_syscall_64+0xcd/0x4e0 [ 316.514137][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.520196][T13991] [ 316.522499][T13991] -> (&f_owner->lock){....}-{3:3} { [ 316.527791][T13991] INITIAL USE at: [ 316.531752][T13991] lock_acquire+0x179/0x350 [ 316.537981][T13991] _raw_write_lock_irq+0x36/0x50 [ 316.544649][T13991] __f_setown+0x61/0x3c0 [ 316.550613][T13991] generic_setlease+0xef2/0x1300 [ 316.557270][T13991] kernel_setlease+0x106/0x140 [ 316.563748][T13991] vfs_setlease+0x258/0x2d0 [ 316.569985][T13991] fcntl_setlease+0x3ed/0x5a0 [ 316.576380][T13991] do_fcntl+0x751/0x15a0 [ 316.582341][T13991] __x64_sys_fcntl+0x163/0x200 [ 316.588822][T13991] do_syscall_64+0xcd/0x4e0 [ 316.595046][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.602654][T13991] INITIAL READ USE at: [ 316.607047][T13991] lock_acquire+0x179/0x350 [ 316.613698][T13991] _raw_read_lock_irqsave+0x74/0x90 [ 316.621046][T13991] send_sigio+0x31/0x3e0 [ 316.627441][T13991] kill_fasync+0x214/0x510 [ 316.634015][T13991] lease_break_callback+0x23/0x30 [ 316.641198][T13991] __break_lease+0x671/0x1810 [ 316.648024][T13991] do_dentry_open+0x91f/0x1530 [ 316.654935][T13991] vfs_open+0x82/0x3f0 [ 316.661157][T13991] path_openat+0x1de4/0x2cb0 [ 316.667899][T13991] do_filp_open+0x20b/0x470 [ 316.674552][T13991] do_sys_openat2+0x11b/0x1d0 [ 316.681381][T13991] __x64_sys_open+0x153/0x1e0 [ 316.688214][T13991] do_syscall_64+0xcd/0x4e0 [ 316.694868][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.702911][T13991] } [ 316.705473][T13991] ... key at: [] __key.1+0x0/0x40 [ 316.712654][T13991] ... acquired at: [ 316.716517][T13991] _raw_read_lock_irqsave+0x74/0x90 [ 316.721869][T13991] send_sigio+0x31/0x3e0 [ 316.726267][T13991] kill_fasync+0x214/0x510 [ 316.730838][T13991] lease_break_callback+0x23/0x30 [ 316.736026][T13991] __break_lease+0x671/0x1810 [ 316.740852][T13991] do_dentry_open+0x91f/0x1530 [ 316.745768][T13991] vfs_open+0x82/0x3f0 [ 316.749991][T13991] path_openat+0x1de4/0x2cb0 [ 316.754740][T13991] do_filp_open+0x20b/0x470 [ 316.759394][T13991] do_sys_openat2+0x11b/0x1d0 [ 316.764227][T13991] __x64_sys_open+0x153/0x1e0 [ 316.769062][T13991] do_syscall_64+0xcd/0x4e0 [ 316.773722][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.779764][T13991] [ 316.782065][T13991] -> (&new->fa_lock){....}-{3:3} { [ 316.787168][T13991] INITIAL USE at: [ 316.791045][T13991] lock_acquire+0x179/0x350 [ 316.797091][T13991] _raw_write_lock_irq+0x36/0x50 [ 316.803572][T13991] fasync_remove_entry+0xb2/0x1e0 [ 316.810577][T13991] fasync_helper+0xaf/0xd0 [ 316.816539][T13991] sock_fasync+0x92/0x140 [ 316.822417][T13991] __fput+0x96b/0xb70 [ 316.827946][T13991] task_work_run+0x150/0x240 [ 316.834078][T13991] get_signal+0x1d1/0x26d0 [ 316.840046][T13991] arch_do_signal_or_restart+0x8f/0x7d0 [ 316.847135][T13991] exit_to_user_mode_loop+0x84/0x110 [ 316.853961][T13991] do_syscall_64+0x41c/0x4e0 [ 316.860102][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.867536][T13991] INITIAL READ USE at: [ 316.871842][T13991] lock_acquire+0x179/0x350 [ 316.878320][T13991] _raw_read_lock_irqsave+0x74/0x90 [ 316.885494][T13991] kill_fasync+0x138/0x510 [ 316.891910][T13991] sock_wake_async+0x132/0x160 [ 316.898657][T13991] unix_write_space+0x2ae/0x510 [ 316.905488][T13991] sock_wfree+0x25e/0x880 [ 316.911793][T13991] unix_destruct_scm+0x137/0x190 [ 316.918709][T13991] skb_release_head_state+0xa6/0x290 [ 316.925971][T13991] sk_skb_reason_drop+0xeb/0x1a0 [ 316.932909][T13991] skb_queue_purge_reason+0x2b0/0x420 [ 316.940275][T13991] unix_dgram_disconnected+0x54/0x150 [ 316.947622][T13991] unix_dgram_connect+0x86f/0xc80 [ 316.954643][T13991] __sys_connect_file+0x141/0x1a0 [ 316.961646][T13991] __sys_connect+0x13b/0x160 [ 316.968210][T13991] __x64_sys_connect+0x72/0xb0 [ 316.974950][T13991] do_syscall_64+0xcd/0x4e0 [ 316.981435][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.989302][T13991] } [ 316.991780][T13991] ... key at: [] __key.0+0x0/0x40 [ 316.998880][T13991] ... acquired at: [ 317.002658][T13991] lock_acquire+0x179/0x350 [ 317.007319][T13991] _raw_read_lock_irqsave+0x74/0x90 [ 317.012699][T13991] kill_fasync+0x138/0x510 [ 317.017289][T13991] evdev_pass_values+0x619/0x9b0 [ 317.022385][T13991] evdev_events+0x1bb/0x390 [ 317.027045][T13991] input_pass_values+0x74e/0x880 [ 317.032140][T13991] input_handle_event+0xf00/0x14d0 [ 317.037410][T13991] input_inject_event+0x1e8/0x3b0 [ 317.042590][T13991] evdev_write+0x457/0x750 [ 317.047171][T13991] vfs_write+0x2a0/0x11d0 [ 317.051651][T13991] ksys_write+0x1f8/0x250 [ 317.056131][T13991] do_syscall_64+0xcd/0x4e0 [ 317.060786][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.066832][T13991] [ 317.069131][T13991] [ 317.069131][T13991] stack backtrace: [ 317.074998][T13991] CPU: 0 UID: 0 PID: 13991 Comm: syz.8.2999 Not tainted syzkaller #0 PREEMPT(full) [ 317.075021][T13991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.075030][T13991] Call Trace: [ 317.075036][T13991] [ 317.075042][T13991] dump_stack_lvl+0x116/0x1f0 [ 317.075060][T13991] check_irq_usage+0x7dc/0x920 [ 317.075081][T13991] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 317.075101][T13991] ? check_path.constprop.0+0x24/0x50 [ 317.075123][T13991] ? __lock_acquire+0x12bc/0x1ce0 [ 317.075144][T13991] __lock_acquire+0x12bc/0x1ce0 [ 317.075168][T13991] lock_acquire+0x179/0x350 [ 317.075180][T13991] ? kill_fasync+0x138/0x510 [ 317.075202][T13991] _raw_read_lock_irqsave+0x74/0x90 [ 317.075219][T13991] ? kill_fasync+0x138/0x510 [ 317.075238][T13991] kill_fasync+0x138/0x510 [ 317.075258][T13991] evdev_pass_values+0x619/0x9b0 [ 317.075282][T13991] evdev_events+0x1bb/0x390 [ 317.075303][T13991] input_pass_values+0x74e/0x880 [ 317.075326][T13991] input_handle_event+0xf00/0x14d0 [ 317.075347][T13991] ? _copy_from_user+0x59/0xd0 [ 317.075370][T13991] input_inject_event+0x1e8/0x3b0 [ 317.075392][T13991] evdev_write+0x457/0x750 [ 317.075405][T13991] ? __pfx_evdev_write+0x10/0x10 [ 317.075419][T13991] ? bpf_lsm_file_permission+0x9/0x10 [ 317.075437][T13991] ? security_file_permission+0x71/0x210 [ 317.075460][T13991] ? rw_verify_area+0xcf/0x6c0 [ 317.075482][T13991] ? __pfx_evdev_write+0x10/0x10 [ 317.075494][T13991] vfs_write+0x2a0/0x11d0 [ 317.075509][T13991] ? __pfx_vfs_write+0x10/0x10 [ 317.075522][T13991] ? find_held_lock+0x2b/0x80 [ 317.075539][T13991] ? __fget_files+0x204/0x3c0 [ 317.075556][T13991] ? __fget_files+0x20e/0x3c0 [ 317.075573][T13991] ksys_write+0x1f8/0x250 [ 317.075587][T13991] ? __pfx_ksys_write+0x10/0x10 [ 317.075603][T13991] do_syscall_64+0xcd/0x4e0 [ 317.075622][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.075635][T13991] RIP: 0033:0x7f7c1618eec9 [ 317.075647][T13991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.075662][T13991] RSP: 002b:00007f7c16fd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.075676][T13991] RAX: ffffffffffffffda RBX: 00007f7c163e5fa0 RCX: 00007f7c1618eec9 [ 317.075685][T13991] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 317.075694][T13991] RBP: 00007f7c16211f91 R08: 0000000000000000 R09: 0000000000000000 [ 317.075704][T13991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.075712][T13991] R13: 00007f7c163e6038 R14: 00007f7c163e5fa0 R15: 00007ffea8ea9668 [ 317.075725][T13991] [ 317.080219][ T8446] m920x_read = error: -19 [ 317.102911][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.106306][ T8446] dvb-usb: error while querying for an remote control event. [ 317.460457][ T5951] m920x_read = error: -19 [ 317.464793][ T5951] dvb-usb: error while querying for an remote control event. [ 317.581204][ T5951] m920x_read = error: -19 [ 317.585548][ T5951] dvb-usb: error while querying for an remote control event. [ 317.710307][ T5951] m920x_read = error: -19 [ 317.714694][ T5951] dvb-usb: error while querying for an remote control event. [ 317.830670][ T5951] m920x_read = error: -19 [ 317.835023][ T5951] dvb-usb: error while querying for an remote control event. [ 317.950236][ T5951] m920x_read = error: -19 [ 317.954583][ T5951] dvb-usb: error while querying for an remote control event. [ 318.081295][ T5951] m920x_read = error: -19 [ 318.085633][ T5951] dvb-usb: error while querying for an remote control event. [ 318.200127][ T5951] m920x_read = error: -19 [ 318.204472][ T5951] dvb-usb: error while querying for an remote control event. [ 318.320744][ T5951] m920x_read = error: -19 [ 318.325086][ T5951] dvb-usb: error while querying for an remote control event. [ 318.440064][ T6124] m920x_read = error: -19 [ 318.444544][ T6124] dvb-usb: error while querying for an remote control event. [ 318.560500][ T5951] m920x_read = error: -19 [ 318.564831][ T5951] dvb-usb: error while querying for an remote control event. [ 318.679911][ T5951] m920x_read = error: -19 [ 318.684264][ T5951] dvb-usb: error while querying for an remote control event. [ 318.800113][ T5951] m920x_read = error: -19 [ 318.804478][ T5951] dvb-usb: error while querying for an remote control event. [ 318.920091][ T5951] m920x_read = error: -19 [ 318.924438][ T5951] dvb-usb: error while querying for an remote control event. [ 319.040132][ T5951] m920x_read = error: -19 [ 319.044476][ T5951] dvb-usb: error while querying for an remote control event. [ 319.159760][ T5951] m920x_read = error: -19 [ 319.164106][ T5951] dvb-usb: error while querying for an remote control event. [ 319.280180][ T5951] m920x_read = error: -19 [ 319.284532][ T5951] dvb-usb: error while querying for an remote control event. [ 319.400251][ T6124] m920x_read = error: -19 [ 319.404615][ T6124] dvb-usb: error while querying for an remote control event. [ 319.520731][ T6124] m920x_read = error: -19 [ 319.525059][ T6124] dvb-usb: error while querying for an remote control event. [ 319.639471][ T6124] m920x_read = error: -19 [ 319.643814][ T6124] dvb-usb: error while querying for an remote control event. [ 319.760317][ T6124] m920x_read = error: -19 [ 319.764667][ T6124] dvb-usb: error while querying for an remote control event. [ 319.879298][ T6124] m920x_read = error: -19 [ 319.883657][ T6124] dvb-usb: error while querying for an remote control event. [ 319.999758][ T6124] m920x_read = error: -19 [ 320.004105][ T6124] dvb-usb: error while querying for an remote control event. [ 320.120108][ T6124] m920x_read = error: -19 [ 320.124436][ T6124] dvb-usb: error while querying for an remote control event. [ 320.239901][ T6124] m920x_read = error: -19 [ 320.244245][ T6124] dvb-usb: error while querying for an remote control event. [ 320.359663][ T6109] m920x_read = error: -19 [ 320.364140][ T6109] dvb-usb: error while querying for an remote control event. [ 320.478979][ T6124] m920x_read = error: -19 [ 320.483339][ T6124] dvb-usb: error while querying for an remote control event. [ 320.609406][ T6124] m920x_read = error: -19 [ 320.613749][ T6124] dvb-usb: error while querying for an remote control event. [ 320.728902][ T6124] m920x_read = error: -19 [ 320.733246][ T6124] dvb-usb: error while querying for an remote control event. [ 320.849203][ T6124] m920x_read = error: -19 [ 320.853547][ T6124] dvb-usb: error while querying for an remote control event. [ 320.968757][ T6124] m920x_read = error: -19 [ 320.973116][ T6124] dvb-usb: error while querying for an remote control event. [ 321.089493][ T6124] m920x_read = error: -19 [ 321.093826][ T6124] dvb-usb: error while querying for an remote control event. [ 321.209847][ T6124] m920x_read = error: -19 [ 321.214175][ T6124] dvb-usb: error while querying for an remote control event. [ 321.329076][ T6124] m920x_read = error: -19 [ 321.333423][ T6124] dvb-usb: error while querying for an remote control event. [ 321.448925][ T6124] m920x_read = error: -19 [ 321.453271][ T6124] dvb-usb: error while querying for an remote control event. [ 321.568709][ T6124] m920x_read = error: -19 [ 321.573042][ T6124] dvb-usb: error while querying for an remote control event. [ 321.689004][ T6124] m920x_read = error: -19 [ 321.693460][ T6124] dvb-usb: error while querying for an remote control event. [ 321.808306][ T6124] m920x_read = error: -19 [ 321.812654][ T6124] dvb-usb: error while querying for an remote control event. [ 321.929120][ T6124] m920x_read = error: -19 [ 321.933449][ T6124] dvb-usb: error while querying for an remote control event. [ 322.048161][ T6124] m920x_read = error: -19 [ 322.052495][ T6124] dvb-usb: error while querying for an remote control event. [ 322.168733][ T6124] m920x_read = error: -19 [ 322.173063][ T6124] dvb-usb: error while querying for an remote control event. [ 322.288124][ T6124] m920x_read = error: -19 [ 322.292481][ T6124] dvb-usb: error while querying for an remote control event. [ 322.408625][ T6124] m920x_read = error: -19 [ 322.412971][ T6124] dvb-usb: error while querying for an remote control event. [ 322.528263][ T6124] m920x_read = error: -19 [ 322.532596][ T6124] dvb-usb: error while querying for an remote control event. [ 322.658334][ T6124] m920x_read = error: -19 [ 322.662680][ T6124] dvb-usb: error while querying for an remote control event. [ 322.777808][ T6124] m920x_read = error: -19 [ 322.782186][ T6124] dvb-usb: error while querying for an remote control event. [ 322.898492][ T6124] m920x_read = error: -19 [ 322.902824][ T6124] dvb-usb: error while querying for an remote control event. [ 323.017732][ T6124] m920x_read = error: -19 [ 323.022311][ T6124] dvb-usb: error while querying for an remote control event. [ 323.138045][ T6124] m920x_read = error: -19 [ 323.142389][ T6124] dvb-usb: error while querying for an remote control event. [ 323.257551][ T6124] m920x_read = error: -19 [ 323.261882][ T6124] dvb-usb: error while querying for an remote control event. [ 323.377856][ T6124] m920x_read = error: -19 [ 323.382198][ T6124] dvb-usb: error while querying for an remote control event. [ 323.497935][ T6124] m920x_read = error: -19 [ 323.502294][ T6124] dvb-usb: error while querying for an remote control event. [ 323.627398][ T6124] m920x_read = error: -19 [ 323.631761][ T6124] dvb-usb: error while querying for an remote control event. [ 323.747736][ T6124] m920x_read = error: -19 [ 323.752089][ T6124] dvb-usb: error while querying for an remote control event. [ 323.867530][ T6124] m920x_read = error: -19 [ 323.871866][ T6124] dvb-usb: error while querying for an remote control event. [ 323.987221][ T6124] m920x_read = error: -19 [ 323.991570][ T6124] dvb-usb: error while querying for an remote control event. [ 324.107174][ T6124] m920x_read = error: -19 [ 324.111544][ T6124] dvb-usb: error while querying for an remote control event. [ 324.227885][ T6124] m920x_read = error: -19 [ 324.232241][ T6124] dvb-usb: error while querying for an remote control event. [ 324.347604][ T6124] m920x_read = error: -19 [ 324.351948][ T6124] dvb-usb: error while querying for an remote control event. [ 324.467404][ T6124] m920x_read = error: -19 [ 324.471757][ T6124] dvb-usb: error while querying for an remote control event. [ 324.586921][ T6124] m920x_read = error: -19 [ 324.591260][ T6124] dvb-usb: error while querying for an remote control event. [ 324.707267][ T6124] m920x_read = error: -19 [ 324.711636][ T6124] dvb-usb: error while querying for an remote control event. [ 324.826867][ T6124] m920x_read = error: -19 [ 324.831256][ T6124] dvb-usb: error while querying for an remote control event. [ 324.947077][ T6124] m920x_read = error: -19 [ 324.951409][ T6124] dvb-usb: error while querying for an remote control event. [ 325.067394][ T6124] m920x_read = error: -19 [ 325.071835][ T6124] dvb-usb: error while querying for an remote control event.