last executing test programs: 15.736297096s ago: executing program 3 (id=2159): syz_usb_connect(0x2, 0x3f0, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3ceb4a3a28d93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29"], 0x0) 15.432292946s ago: executing program 0 (id=2160): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) open$dir(0x0, 0x20a40, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x40, 0x10, 0x7fff, 0x9, {{0x8, 0x4, 0x3, 0x3c, 0x20, 0x66, 0x0, 0x6b, 0x29, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0x3, 0x23}, @timestamp={0x44, 0x8, 0x48, 0x0, 0x5, [0x8]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)={r6, 0x1, 0x6, @broadcast}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 14.096406359s ago: executing program 0 (id=2164): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000012c0)={0x14, 0x0, 0xe701ac47a3d23ecd}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6261b5a1cc4732d4ba9203501169af280031095dd20ea46efe9b2e08161df84c4d52cf9cf3092cc65d5b3663fff547fc5e0cf9320423e6c4ecc7ff5af65a621cff5539b4044f1b933872dd87c55fb7d0c1104bcf596eebef435b58700a421a2a10f7faaeff2c331bbe82bcc7e057431477672436ce6283e5c5ddb5acd09dda78f20992a553b0e6d4ace0c0274656fe8b496084216fe607a35a170be5d38f849f0fd6b871b2661ac3bd217183699a0485f20799fadd90da763ada7c9d3048bc2be4e8650d294fc11a6f9e1f1ece4e4df18f55f7ca83327165de2a52ad6273b8", @ANYRES16=r3, @ANYBLOB="07ef28bd7004fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4091}, 0x45080) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000340)={0xfff, 0x9b4c, 0x53b0715c, 0x1000, &(0x7f0000001300)=""/4096, 0x6a, &(0x7f0000000000)=""/106, 0x74, &(0x7f0000000240)=""/116}) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x10000001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x110, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x302, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x200, 0x70bd25, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) socket$rds(0x15, 0x5, 0x0) 14.057664966s ago: executing program 1 (id=2165): r0 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x40000) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="3b000300010006", 0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x8, &(0x7f00000000c0)=0xfffffff7, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xff, 0x9, 0x4}, 0xc) listen(r1, 0xffffffff) lseek(0xffffffffffffffff, 0x414, 0x0) mount$9p_unix(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0xa04410, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=qnix,\x00']) 13.115598316s ago: executing program 3 (id=2166): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x410020, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_usb_connect$uac1(0x4, 0xec, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xdf, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x39, 0x60, 0x59, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc87f, 0x1}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x5, 0x6, "ccd7de48c4"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x3fc, 0x1, 0x3, 0x6}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x3, 0x5, "ff1868ce"}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x5}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x6, 0x6, [0x7, 0x9, 0x3, 0x7, 0x3, 0x9], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x3, 0xd6, "1b140004d3"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x367, 0xe}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x60, '\x00', '~'}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x1, 0x0, 0x10, "940700000000000000"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0x1, 0x95, {0x7, 0x25, 0x1, 0x0, 0x6, 0xfffb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x51, 0x3, 0x0, 0x1, "e4a8d3c6d496b0a36e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xe6, 0x8, {0x7, 0x25, 0x1, 0x2, 0x10, 0x4}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xff, 0x69, 0xbf, 0xff, 0xa}, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="050f190001613b471e41151404"], 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42a}}, {0x54, &(0x7f0000000340)=@string={0x54, 0x3, "0d61d91e70f266764fd701b3218f50cce5ffc15879174884098921b6edfebc97224f79acd24c8ac6defded379c40852237b6da88020c2a173b89cc31fb4dc4419c542f5a0f74ca282a7d2a02b39578ae2f79"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x825}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x807}}, {0x102, &(0x7f0000000a80)=@string={0x102, 0x3, "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"}}, {0x95, &(0x7f0000000500)=@string={0x95, 0x3, "53568ff4a6e48021373334e6d822bc08d770178937a97ebd6755b57d0e678239b8954a9b5510894648049be6e12956ef39fe1fa9733cd9dd2903f2fd4e8c4fb83c912c71d0255337ba3ba248f562487fad53d02aa3b47a8c3f7774050bd4e0a9c12911f7d9adc63042472b0972152a041cfba47deb1c6e4285745f4a7fd019f11bbec9c4b137a88894ec858c90fa92ad9d833d"}}]}) syz_usb_control_io$uac1(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x0, 0x24, 0x72, {0x72, 0x1, "45fb52974544724be32a91e069580113e861b8089573f8b6e2fe9696d361e1c04bb1923332b38d9950a4889602b81fb8fd63a67e7af8f53c2750403447c6fbb4f74587746e201fb2740503b7eaefda6b243225c3a66e737f649b65d4dad54f9d7bbac7ccc7f5996de45a97f240b92f66"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="200aac000000fc172dae54f205af532fcb6b95b2e25897dd261f7c4446d166e49f03524702ae74daa660739e18cc03f768a54a6a838dbb4329fefbe049edbf5842b594ae0e32c397cc393ac518d66974f1e59b2e5fc84ae3a08da37807413e0ffd6600fc59b19619824df3ccc20fd813f1ba9c975b16d11b544e7f258d086a4ec728a7eac3121b25a419c6c15ff91e62e33d4aa1e1b76b0c22a3392e9d0857cb72ce2b829f1ff51700"/178], &(0x7f0000000800)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000008c0)={0x20, 0x81, 0x2, "bbf9"}, &(0x7f0000000900)=ANY=[@ANYBLOB="20e60100000054"], &(0x7f0000000940)={0x20, 0x83, 0x2, 'h{'}, &(0x7f0000000980)=ANY=[@ANYBLOB="20840300000000bb87"], &(0x7f00000009c0)={0x20, 0x85, 0x3, '/\'?'}}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000000)={0x48}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_l2cap(r7, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) accept4$vsock_stream(r7, 0x0, 0x0, 0x80000) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc010643a, &(0x7f0000000000)={0x1, 0x6, 0x200e}) close(r8) 13.053503733s ago: executing program 0 (id=2167): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000faffffffffffffff00000085000095b88c5d690be9281aa6de00fc3d169db5a37a3ff62872805fcf88affae49d7dac67c1314163e1de4f5f9453712bccfc020000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100000000000000000049000000193087aade8d969f6b7d2a2684347ee3bef2c5c770f585dec4929a70888ee2df957d21bcb474f4e1a80f28d3e70252e43b62d4af8afa6c0df4c2331103495aae7b00ceb3464fb777361bf0ff650c73440d23ec344317a16166c45fcc6d823f6117"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) write(r6, &(0x7f0000000000)="240000001a005f0314f9f4070009040002000000010000000000000008000400", 0x20) ioctl$KVM_NMI(r1, 0xae9a) 10.46990928s ago: executing program 1 (id=2168): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x6, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0700802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10.377955888s ago: executing program 2 (id=2170): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_setup(0x3, &(0x7f0000000140)) rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) io_setup(0x2, &(0x7f00000001c0)=0x0) io_pgetevents(r4, 0x3, 0x3, &(0x7f0000000540)=[{}, {}, {}], &(0x7f0000000140)={0x0, 0x989680}, 0x0) 9.597411367s ago: executing program 0 (id=2171): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/13], 0x0, 0x0, 0x0, 0x0}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffff8, 0x100) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000080)={0x80000000, 0xdcd, @value=0x864}) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x101000, 0x118) fcntl$setpipe(r3, 0x407, 0x1000000) r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r5 = syz_clone(0x81008000, 0x0, 0x12, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000001000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r9 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000005c0)=r5, 0x12) readv(r4, &(0x7f0000000800)=[{&(0x7f0000000740)=""/152, 0x98}], 0x1) syz_usb_disconnect(r0) 9.225469357s ago: executing program 1 (id=2172): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x6, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0700802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 8.586335603s ago: executing program 3 (id=2173): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = syz_io_uring_setup(0x20fe, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x20000000000002c3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4f8, 0xd9b3, 0x44, 0x0, 0x0) 8.12303274s ago: executing program 1 (id=2175): r0 = socket$inet6(0xa, 0x3, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB="2373797a310373797a302e62"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = gettid() rt_sigtimedwait(0x0, 0xffffffffffffffff, 0x0, 0x0) tkill(r3, 0x7) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x4b70, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x8]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x12, &(0x7f00000005c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r7, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000000009040000"], 0x0) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) mmap$dsp(&(0x7f00003a3000/0x1000)=nil, 0x1000, 0x5, 0x13, r7, 0x0) keyctl$setperm(0x5, r8, 0x52b242d) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) 7.651683189s ago: executing program 2 (id=2176): syz_usb_connect(0x2, 0x3f0, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3ceb4a3a28d93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29"], 0x0) 7.572252461s ago: executing program 3 (id=2177): socket$kcm(0x10, 0x2, 0x0) syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36d, 0x10100, 0x2, 0x7d}, &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fchdir(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000000000000000000689906296b71035c59649f03e34426c2417c82fc89b7c3690bbf1e379c2ca74aa4d4c92982", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) bind$inet6(r5, 0x0, 0xffffff22) pipe2$9p(0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000088f000/0x4000)=nil, 0x4000) mprotect(&(0x7f00002f7000/0x1000)=nil, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00, 0xff, 0xffffffff], 'vcan0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x0, 0xc, 0x2, 0x57}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xfff, {0x8}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, '\x00', 'syz0\x00', {0x80000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 7.483082819s ago: executing program 4 (id=2178): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0xffffffffffffffb9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r2, 0x0, 0x5, 0x4000000, 0x2, [0x0, 0x0, 0x0, 0x0], [0xbc2], [0x805, 0x1001000, 0x0, 0x3], [0x0, 0x1, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r3, 0x0, 0x0, r4], [0x2b8, 0x0, 0xff], [0x1, 0x0, 0x0, 0x8]}) 7.355615786s ago: executing program 4 (id=2179): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x6, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0700802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 5.878498483s ago: executing program 3 (id=2180): write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x0, 0x5, 0x0, 0xfffffffffffffdfc}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xff, 0x2, 0x0, 0x800000000000000}, {0x2, 0x33, 0x0, 0x0, 0x4, 0x5, 0x4, 0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x3, 0x0, 0xff, 0x0, 0x0, 0x2, 0x7ffffffe], 0x80a0000}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x401}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000002060500000000000000007f050000000500040000000100050005000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) eventfd2(0x2c, 0x80001) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r9, 0x11, 0x0, 0x7c000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.773802662s ago: executing program 2 (id=2181): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000faffffffffffffff00000085000095b88c5d690be9281aa6de00fc3d169db5a37a3ff62872805fcf88affae49d7dac67c1314163e1de4f5f9453712bccfc020000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100000000000000000049000000193087aade8d969f6b7d2a2684347ee3bef2c5c770f585dec4929a70888ee2df957d21bcb474f4e1a80f28d3e70252e43b62d4af8afa6c0df4c2331103495aae7b00ceb3464fb777361bf0ff650c73440d23ec344317a16166c45fcc6d823f6117"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) write(r6, &(0x7f0000000000)="240000001a005f0314f9f4070009040002000000010000000000000008000400", 0x20) ioctl$KVM_NMI(r1, 0xae9a) 5.771714742s ago: executing program 4 (id=2182): mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x73d014, 0x0) mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4004, r5, 0x2}) lseek(r7, 0x289e0cb9, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000002c0)={'veth0_to_hsr\x00', @random="38d6202d9fc1"}) 5.771278379s ago: executing program 0 (id=2183): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x410020, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_usb_connect$uac1(0x4, 0xec, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xdf, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x39, 0x60, 0x59, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc87f, 0x1}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x5, 0x6, "ccd7de48c4"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x3fc, 0x1, 0x3, 0x6}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x3, 0x5, "ff1868ce"}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x5}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x6, 0x6, [0x7, 0x9, 0x3, 0x7, 0x3, 0x9], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x3, 0xd6, "1b140004d3"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x367, 0xe}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x60, '\x00', '~'}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x1, 0x0, 0x10, "940700000000000000"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0x1, 0x95, {0x7, 0x25, 0x1, 0x0, 0x6, 0xfffb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x51, 0x3, 0x0, 0x1, "e4a8d3c6d496b0a36e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xe6, 0x8, {0x7, 0x25, 0x1, 0x2, 0x10, 0x4}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xff, 0x69, 0xbf, 0xff, 0xa}, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="050f190001613b471e41151404"], 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42a}}, {0x54, &(0x7f0000000340)=@string={0x54, 0x3, "0d61d91e70f266764fd701b3218f50cce5ffc15879174884098921b6edfebc97224f79acd24c8ac6defded379c40852237b6da88020c2a173b89cc31fb4dc4419c542f5a0f74ca282a7d2a02b39578ae2f79"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x825}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x807}}, {0x102, &(0x7f0000000a80)=@string={0x102, 0x3, "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"}}, {0x95, &(0x7f0000000500)=@string={0x95, 0x3, "53568ff4a6e48021373334e6d822bc08d770178937a97ebd6755b57d0e678239b8954a9b5510894648049be6e12956ef39fe1fa9733cd9dd2903f2fd4e8c4fb83c912c71d0255337ba3ba248f562487fad53d02aa3b47a8c3f7774050bd4e0a9c12911f7d9adc63042472b0972152a041cfba47deb1c6e4285745f4a7fd019f11bbec9c4b137a88894ec858c90fa92ad9d833d"}}]}) syz_usb_control_io$uac1(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x0, 0x24, 0x72, {0x72, 0x1, "45fb52974544724be32a91e069580113e861b8089573f8b6e2fe9696d361e1c04bb1923332b38d9950a4889602b81fb8fd63a67e7af8f53c2750403447c6fbb4f74587746e201fb2740503b7eaefda6b243225c3a66e737f649b65d4dad54f9d7bbac7ccc7f5996de45a97f240b92f66"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="200aac000000fc172dae54f205af532fcb6b95b2e25897dd261f7c4446d166e49f03524702ae74daa660739e18cc03f768a54a6a838dbb4329fefbe049edbf5842b594ae0e32c397cc393ac518d66974f1e59b2e5fc84ae3a08da37807413e0ffd6600fc59b19619824df3ccc20fd813f1ba9c975b16d11b544e7f258d086a4ec728a7eac3121b25a419c6c15ff91e62e33d4aa1e1b76b0c22a3392e9d0857cb72ce2b829f1ff51700"/178], &(0x7f0000000800)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000008c0)={0x20, 0x81, 0x2, "bbf9"}, &(0x7f0000000900)=ANY=[@ANYBLOB="20e60100000054"], &(0x7f0000000940)={0x20, 0x83, 0x2, 'h{'}, &(0x7f0000000980)=ANY=[@ANYBLOB="20840300000000bb87"], &(0x7f00000009c0)={0x20, 0x85, 0x3, '/\'?'}}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000000)={0x48}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_l2cap(r7, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) accept4$vsock_stream(r7, 0x0, 0x0, 0x80000) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc010643a, &(0x7f0000000000)={0x1, 0x6, 0x200e}) close(r8) 5.491044656s ago: executing program 1 (id=2184): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000002000000"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f0000000080), 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x2, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000000) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bd26, 0x23c}, 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(0xffffffffffffffff, 0x0) 4.865852509s ago: executing program 2 (id=2185): creat(0x0, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x1be, &(0x7f0000000d40)={{0x12, 0x1, 0x0, 0x7b, 0xf0, 0x83, 0x8, 0x5ac, 0x22a, 0x29be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ac, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x62, 0x3, 0x3, 0xff, 0x2, 0x2, [@generic={0x88, 0x8, "803130e5406e4190dd7f3c47aae124489723f9ac70b1fbc6f6ea58969659a09bda52ec7463dd3599598c77e548026bb185e1166b8983e64aa567a8c6e30f0d8887f38c215cdc90df58ce5db6a2c67cbfe8795d5473e12136a37df4a41ba3fa9e1eed5418a05bac22cb8e4a6c26378128f74b53a25862a7c6bde16662d982fcdace34f48190ff"}], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x1, 0x4, 0x6, [@generic={0xf7, 0x0, "f7ad5bf2751f19f2e0d8b8cef01124f1bad3870a7d060c1893fbe63dbfba0df2b95d9e48edc0129024b34334783b430230f3ed518aa61a86d88986f141ca4816553d0abe82bfce993d9e32105b00770c3ea499b935c848a28bb733abe8525548660940538388f90503a49ce5a2c63123267416c2c349c78d17a331806c84a1a12d9bcef2c7e1b0d14c2a189db6930892117a84d0174762ab8bce50ac8b09fdcbdda315941f493062469f56d3501bc40281ca29aca6283920eba2a048b703b2cd89b6d43111d9c2acca30466795d8e91fb518d9d8a4ef6e4e778242ee3bc10550cacb8b1b451ebfc03f130df71e2e415384c9939f84"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0xfe, 0x2, 0x4}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x77, 0x10, 0x5}}]}}]}}]}}, 0x0) 2.484882623s ago: executing program 4 (id=2186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000001000000000000000100"]) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r5) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff69000000000001000000180000000200861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r6) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000040)) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="548b3e6e9c7bdb818e2f5acb6b17df49ac0200817eab5a77cd082e71b472e3580ca4aad11ab32c2bb8becf3bc40f5a7b8897e8c2403ebff7a89552d8b0e235cfa3621201014c9885f74302be53c263c5ca6ccd4c26f0f6071ab8c918318bbc4850fa56c8c395ddd29936747326f806a787572ac8e984e8d2142838380fdc"]) 1.586591958s ago: executing program 2 (id=2187): creat(0x0, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x413, &(0x7f0000000d40)={{0x12, 0x1, 0x0, 0x7b, 0xf0, 0x83, 0x8, 0x5ac, 0x22a, 0x29be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x401, 0x3, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x62, 0x3, 0x3, 0xff, 0x2, 0x2, [@generic={0x88, 0x8, "803130e5406e4190dd7f3c47aae124489723f9ac70b1fbc6f6ea58969659a09bda52ec7463dd3599598c77e548026bb185e1166b8983e64aa567a8c6e30f0d8887f38c215cdc90df58ce5db6a2c67cbfe8795d5473e12136a37df4a41ba3fa9e1eed5418a05bac22cb8e4a6c26378128f74b53a25862a7c6bde16662d982fcdace34f48190ff"}], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x1, 0x4, 0x6, [@generic={0xf7, 0x0, "f7ad5bf2751f19f2e0d8b8cef01124f1bad3870a7d060c1893fbe63dbfba0df2b95d9e48edc0129024b34334783b430230f3ed518aa61a86d88986f141ca4816553d0abe82bfce993d9e32105b00770c3ea499b935c848a28bb733abe8525548660940538388f90503a49ce5a2c63123267416c2c349c78d17a331806c84a1a12d9bcef2c7e1b0d14c2a189db6930892117a84d0174762ab8bce50ac8b09fdcbdda315941f493062469f56d3501bc40281ca29aca6283920eba2a048b703b2cd89b6d43111d9c2acca30466795d8e91fb518d9d8a4ef6e4e778242ee3bc10550cacb8b1b451ebfc03f130df71e2e415384c9939f84"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0xfe, 0x2, 0x4}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x77, 0x10, 0x5}}]}}, {{0x9, 0x4, 0xf6, 0x5, 0x4, 0xff, 0xff, 0xff, 0x78, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "617707b6c2"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x7f, 0x7, 0x7}, [@obex={0x5, 0x24, 0x15, 0xc}]}, @uac_control={{0xa, 0x24, 0x1, 0xa, 0x80}, [@mixer_unit={0xb, 0x24, 0x4, 0x4, 0x40, "4f5a5fb0368e"}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x1, "f174b90ce8"}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x4}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x7f, "f4bb60a129"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0x9, "989a1a923a48"}]}], [{{0x9, 0x5, 0x0, 0x4, 0x8, 0x0, 0x3, 0x8}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x6, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x72, 0xc08e}, @generic={0x38, 0x3, "652b68ce37cf518f8639f6194d64e723c3fb6de104000000f4397151f77f57f1410905e8c8ae12fd131f47fd2622537ddcc8289755b1"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0x6, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xfe, 0xfd31}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x5, 0xe, 0x8, [@generic={0xcb, 0xa, "334856c8a5861058b41e5c54a3f577cc03ed48960550a8310650001e69b7f8fba3fd11a5a8f11a9d135fab6446e14f925aed785bf9ba66e19235933c52d5bc7da37a3b2f1fac690a1398ec77f0251b31dbac89431594857b87891338d2628701f52915ce40ea49409f15d14d0cd8805674c0deca233ddab6f2875baf73d56b0ecc8f45bb04cd71bbf0c89b13080b4a17d2e8dc18fb5f268a2c08e4f5a5b738349b03e7f2339df23e271e8738299fe242fbcc9c76e2ced13bc71e16e82270b429bdba737d308baa943a"}]}}]}}, {{0x9, 0x4, 0xe2, 0x4, 0x2, 0x5c, 0x2e, 0x70, 0xe5, [@hid_hid={0x9, 0x21, 0x5, 0x10, 0x1, {0x22, 0x362}}, @generic={0xf, 0xf, "9b0410774fdbb1dd1ce22cf771"}], [{{0x9, 0x5, 0x5, 0x3, 0x418, 0x1, 0x2, 0xe1, [@generic={0x7b, 0x2, "6444ff607389da1af163e83da8a1013f703e16dbee61dacd01d4ec5fc02bba456f53a35001d0f948bb8e98a44374d5e036eaca6b2b0216c003d1f45c6da9011c8c4cafd1c844c107f5060f94e9ddb60332094e9289cca2a1e6d6d20094006a2f7a109625911e5b4fa44244632d5d5a7e976b2f9bd1859982df"}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x8c, 0x10, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8}]}}]}}]}}]}}, 0x0) 1.412222764s ago: executing program 4 (id=2188): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$igmp6(0xa, 0x3, 0x2) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1000, &(0x7f0000000240)={0x20006b, 0x0, 0x120000}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000440)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x11, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYBLOB="2f2b12ed85b073c0e4dbf3f6c7ee365a71c4eba58785fe8e94249a1dfe60c41534e248748aa4f35dc89c4718f0ffe26cdc808dbe372a43a7b40988d4e9aa8274f2b91dde7ba9df", @ANYBLOB="000229bd7000ffdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000919}, 0xc4b7bac946ebace2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791", 0x6b}, {&(0x7f0000000500)="12109e71143949c567756f564b826216827f15e1560cb5d1e06c0507f98c804b296299bb95ae1ede20edbf342ba39983366f6dd693d9b82c24cd55a1054a945f8b22dc3d15488ce5954ff2742385d678b423f0963074e350d1a335d4f5ffa71e3e2daf3813ecec6d3b79565f73", 0x6d}], 0x2, 0x0, 0x0, 0x7400}, 0x0) 1.196241762s ago: executing program 0 (id=2189): socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='afs_make_vl_call\x00'}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) chdir(&(0x7f0000000540)='./cgroup\x00') fspick(r0, &(0x7f0000000040)='./file0\x00', 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) write$cgroup_int(r6, &(0x7f0000000000)=0xfe8e, 0x12) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r7, 0xb704, 0xfffffffffffffffe) 652.18692ms ago: executing program 3 (id=2190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000001000000000000000100"]) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r6) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff69000000000001000000180000000200861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r7) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, &(0x7f0000000080)={0x1f, @none, 0x3b}, 0xa) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000040)) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="548b3e6e9c7bdb818e2f5acb6b17df49ac0200817eab5a77cd082e71b472e3580ca4aad11ab32c2bb8becf3bc40f5a7b8897e8c2403ebff7a89552d8b0e235cfa3621201014c9885f74302be53c263c5ca6ccd4c26f0f6071ab8c918318bbc4850fa56c8c395ddd29936747326f806a787572ac8e984e8d2142838380fdc"]) 647.171604ms ago: executing program 2 (id=2191): syz_usb_connect(0x2, 0x3f0, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3ceb4a3a28d93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29"], 0x0) 435.380004ms ago: executing program 4 (id=2192): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x50, 0x0, &(0x7f0000000180)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x4, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r3, 0x2dee, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)) r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0) tee(r6, r7, 0x8f5, 0x100000000000000) 0s ago: executing program 1 (id=2193): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES8, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESDEC], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) sched_setscheduler(0x0, 0x2, 0x0) mount(&(0x7f0000000100)=@nullb, 0x0, 0x0, 0x2a2d402, &(0x7f0000000680)='barrier\x19\xfc\xc5\x02\x00\xe14\x04\x00\x00\x00\x00\x00\x00\x00\x8a\xf9\x8c\x02\r\xda\x83:\xe8\x82\x8fX\r`\xf7\xa3?+\x95\x976U\xac\xa3\xc7\xd4\x12b\xa8\x7f5g\f\x1bY\x86w\xa2\xa6\x84\xc4\xda\x00\x00\x8e\x00\x00\x00\xb7\xf1\xb7\x93;^\xdd?\xd3\x8d\x91U\xe8\x8eP\xb8]\xc0A\xa7[\xbbiU\xb8\xf0*\x0e\xaa\xeet*&\x95\xb1\x00\xf2\xb9U\x88n\x12\x9a3=\xd1=\'c\xb4\x8aX\x9b\x17\xa9&\xc53\xe0\x96qN\xad[k,\xbc\x13\x19C&\xfe\xa5\xf9\x06(^\xf2\xff\x80\xcdn.yg\xc8\xb6w\b\x91\xad\x10\x8d\xf1\xec\xd5\xcbN[\xa4\xc3\x9b;\x10?cb\xde)\xab\xb9\x8d\x1bg1\x0f_\x05\xf6c\x17\xe1\xe2\xef\xd7\xae\x1bq9&\x1b\xfd\xc3\xc7\x1aU\xda\v\xc9\x99\x8a\x8d\xd5\xdd\xefwax4\xfbR\x0fR\x1b\xec\x12CW[\xc9\x01+\xbf\xc1\x0f\xdc\x9f\xd5{\x10\xe9\xd5\x9eDN\xb3\xf8\xefFh3o6l\x05\xfb\xb1\x97\xc2^\xcf\xdfl\x9e\xd5S\xff\xff\xff@\xa8\x98\xb9\x8f\xdc\x00~\x9dx\x1f\xf3\xd8\xc2\xe9&{\xe6\x1c\xdd9\x87&\x84\xe0V\xe4') openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) (fail_nth: 9) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) lstat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa0, 0x0, 0x16, {{0x3, 0x0, 0x9, 0x40, 0xfffffffd, 0x3, {0x40000, 0x7fff, 0x5, 0xfffc, 0x4, 0x200001, 0x0, 0x14, 0x0, 0x1000, 0x4, 0x0, r2, 0xfffffff9, 0x1}}}}, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x90) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x10000, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) syz_init_net_socket$x25(0x9, 0x5, 0x0) chdir(&(0x7f0000000040)='./cgroup\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, 0xffffffffffffffff, 0xd728a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): 615.137289][T12301] ? do_syscall_64+0xcd/0x4c0 [ 615.137301][T12301] kvm_vm_ioctl+0x19b7/0x3d90 [ 615.137321][T12301] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 615.137343][T12301] ? kasan_quarantine_put+0x10a/0x240 [ 615.137358][T12301] ? lockdep_hardirqs_on+0x7c/0x110 [ 615.137375][T12301] ? find_held_lock+0x2b/0x80 [ 615.137386][T12301] ? tomoyo_path_number_perm+0x295/0x580 [ 615.137402][T12301] ? tomoyo_path_number_perm+0x18d/0x580 [ 615.137418][T12301] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 615.137432][T12301] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 615.137449][T12301] ? do_vfs_ioctl+0x523/0x1a60 [ 615.137463][T12301] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 615.137480][T12301] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 615.137498][T12301] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 615.137521][T12301] ? hook_file_ioctl_common+0x145/0x410 [ 615.137536][T12301] ? selinux_file_ioctl+0x180/0x270 [ 615.137552][T12301] ? selinux_file_ioctl+0xb4/0x270 [ 615.137568][T12301] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 615.137583][T12301] __x64_sys_ioctl+0x18e/0x210 [ 615.137597][T12301] do_syscall_64+0xcd/0x4c0 [ 615.137611][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.137621][T12301] RIP: 0033:0x7f71feb8e969 [ 615.137630][T12301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.137641][T12301] RSP: 002b:00007f71ff99a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.137651][T12301] RAX: ffffffffffffffda RBX: 00007f71fedb5fa0 RCX: 00007f71feb8e969 [ 615.137657][T12301] RDX: 0000200000000080 RSI: 00000000c048aec8 RDI: 0000000000000004 [ 615.137663][T12301] RBP: 00007f71ff99a090 R08: 0000000000000000 R09: 0000000000000000 [ 615.137669][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.137674][T12301] R13: 0000000000000000 R14: 00007f71fedb5fa0 R15: 00007ffcbb031d98 [ 615.137687][T12301] [ 615.241865][T12306] trusted_key: encrypted_key: hex blob is missing [ 615.604464][ T5861] m920x_read = error: -19 [ 615.654631][ T5861] dvb-usb: error while querying for an remote control event. [ 615.785563][ T5861] m920x_read = error: -19 [ 615.800006][ T5861] dvb-usb: error while querying for an remote control event. [ 616.018275][ T5886] m920x_read = error: -19 [ 616.023022][ T5886] dvb-usb: error while querying for an remote control event. [ 616.140216][ T5886] m920x_read = error: -19 [ 616.144643][ T5886] dvb-usb: error while querying for an remote control event. [ 616.540881][T10919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.690270][ T5861] m920x_read = error: -19 [ 616.694607][ T5861] dvb-usb: error while querying for an remote control event. [ 617.150797][ T5886] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 617.158553][ T5861] m920x_read = error: -19 [ 617.163861][ T5861] dvb-usb: error while querying for an remote control event. [ 617.628266][ T5861] m920x_read = error: -19 [ 617.640259][ T5861] dvb-usb: error while querying for an remote control event. [ 617.700873][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.726807][ T5886] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 617.752759][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.769606][ T5861] m920x_read = error: -19 [ 617.774030][ T5861] dvb-usb: error while querying for an remote control event. [ 617.795139][ T5886] usb 4-1: config 0 descriptor?? [ 617.824678][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 617.936466][ T5861] m920x_read = error: -19 [ 617.941123][ T5861] dvb-usb: error while querying for an remote control event. [ 618.039479][T12316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.048157][T12316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.059590][ T5861] m920x_read = error: -19 [ 618.069058][ T5861] dvb-usb: error while querying for an remote control event. [ 618.139726][T12329] FAULT_INJECTION: forcing a failure. [ 618.139726][T12329] name failslab, interval 1, probability 0, space 0, times 0 [ 618.189613][ T5861] m920x_read = error: -19 [ 618.219110][ T5861] dvb-usb: error while querying for an remote control event. [ 618.232979][T12329] CPU: 0 UID: 0 PID: 12329 Comm: syz.0.1754 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(full) [ 618.233005][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.233015][T12329] Call Trace: [ 618.233021][T12329] [ 618.233028][T12329] dump_stack_lvl+0x16c/0x1f0 [ 618.233048][T12329] should_fail_ex+0x512/0x640 [ 618.233065][T12329] ? __kvmalloc_node_noprof+0x122/0x620 [ 618.233095][T12329] should_failslab+0xc2/0x120 [ 618.233114][T12329] __kvmalloc_node_noprof+0x135/0x620 [ 618.233139][T12329] ? __pfx___mutex_lock+0x10/0x10 [ 618.233155][T12329] ? traverse.part.0.constprop.0+0x392/0x640 [ 618.233185][T12329] ? traverse.part.0.constprop.0+0x392/0x640 [ 618.233207][T12329] traverse.part.0.constprop.0+0x392/0x640 [ 618.233241][T12329] seq_read_iter+0x932/0x12c0 [ 618.233272][T12329] ? __pfx__kstrtoull+0x10/0x10 [ 618.233298][T12329] seq_read+0x39e/0x4e0 [ 618.233322][T12329] ? find_held_lock+0x2b/0x80 [ 618.233340][T12329] ? __pfx_seq_read+0x10/0x10 [ 618.233365][T12329] ? __lock_acquire+0x622/0x1c90 [ 618.233390][T12329] ? import_ubuf+0x1b6/0x220 [ 618.233410][T12329] ? avc_policy_seqno+0x9/0x20 [ 618.233441][T12329] ? __pfx_seq_read+0x10/0x10 [ 618.233466][T12329] proc_reg_read+0x23d/0x330 [ 618.233488][T12329] ? __pfx_proc_reg_read+0x10/0x10 [ 618.233510][T12329] vfs_readv+0x6bc/0x8a0 [ 618.233531][T12329] ? get_pid_task+0x106/0x250 [ 618.233558][T12329] ? __pfx_vfs_readv+0x10/0x10 [ 618.233583][T12329] ? find_held_lock+0x2b/0x80 [ 618.233616][T12329] ? __fget_files+0x20e/0x3c0 [ 618.233639][T12329] ? do_preadv+0x1a6/0x270 [ 618.233661][T12329] do_preadv+0x1a6/0x270 [ 618.233685][T12329] ? __pfx_do_preadv+0x10/0x10 [ 618.233716][T12329] do_syscall_64+0xcd/0x4c0 [ 618.233735][T12329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.233752][T12329] RIP: 0033:0x7fcae138e969 [ 618.233766][T12329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.233782][T12329] RSP: 002b:00007fcae2121038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 618.233798][T12329] RAX: ffffffffffffffda RBX: 00007fcae15b5fa0 RCX: 00007fcae138e969 [ 618.233810][T12329] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 618.233820][T12329] RBP: 00007fcae2121090 R08: 0000000000008d3a R09: 0000000000000000 [ 618.233830][T12329] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 618.233840][T12329] R13: 0000000000000000 R14: 00007fcae15b5fa0 R15: 00007ffd55239cb8 [ 618.233864][T12329] [ 618.756944][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 618.778014][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 618.788014][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 618.889573][ T9] m920x_read = error: -19 [ 618.894019][ T9] dvb-usb: error while querying for an remote control event. [ 619.005962][ T30] audit: type=1400 audit(1748477134.387:1965): avc: denied { ioctl } for pid=12332 comm="syz.1.1757" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x542c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 619.039677][ T9] m920x_read = error: -19 [ 619.050351][ T9] dvb-usb: error while querying for an remote control event. [ 619.179777][ T30] audit: type=1400 audit(1748477134.437:1966): avc: denied { accept } for pid=12332 comm="syz.1.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 619.207914][ T9] m920x_read = error: -19 [ 619.224088][ T9] dvb-usb: error while querying for an remote control event. [ 619.581365][ T9] m920x_read = error: -19 [ 619.590054][ T9] dvb-usb: error while querying for an remote control event. [ 619.736168][ T9] m920x_read = error: -19 [ 619.748572][ T9] dvb-usb: error while querying for an remote control event. [ 619.892223][ T9] m920x_read = error: -19 [ 620.053878][ T5886] pwc: recv_control_msg error -71 req 04 val 1000 [ 620.093016][ T9] dvb-usb: error while querying for an remote control event. [ 620.115988][ T5886] pwc: recv_control_msg error -71 req 04 val 1300 [ 620.148130][ T5886] pwc: recv_control_msg error -71 req 04 val 1400 [ 620.249843][ T9] m920x_read = error: -19 [ 620.325341][ T9] dvb-usb: error while querying for an remote control event. [ 620.385820][ T5886] pwc: recv_control_msg error -71 req 02 val 2000 [ 620.435999][ T5886] pwc: recv_control_msg error -71 req 02 val 2100 [ 620.494188][T12351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1762'. [ 620.508243][ T5886] pwc: recv_control_msg error -71 req 04 val 1500 [ 620.518521][ T5886] pwc: recv_control_msg error -71 req 02 val 2500 [ 620.539628][ T9] m920x_read = error: -19 [ 620.545697][ T9] dvb-usb: error while querying for an remote control event. [ 620.584010][ T5886] pwc: recv_control_msg error -71 req 02 val 2400 [ 620.591008][ T5886] pwc: recv_control_msg error -71 req 02 val 2600 [ 620.699546][ T9] m920x_read = error: -19 [ 620.711934][ T9] dvb-usb: error while querying for an remote control event. [ 620.746096][ T5886] pwc: recv_control_msg error -71 req 02 val 2900 [ 620.753054][ T5886] pwc: recv_control_msg error -71 req 02 val 2800 [ 620.760218][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 620.869996][ T9] m920x_read = error: -19 [ 620.874467][ T9] dvb-usb: error while querying for an remote control event. [ 620.882060][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 620.966124][T12358] overlayfs: failed to clone upperpath [ 621.400030][ T5886] pwc: Registered as video103. [ 621.477935][ T9] m920x_read = error: -19 [ 621.500194][ T9] dvb-usb: error while querying for an remote control event. [ 621.508714][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 621.577554][ T5886] usb 4-1: USB disconnect, device number 43 [ 621.643957][ T9] m920x_read = error: -19 [ 621.672564][ T9] dvb-usb: error while querying for an remote control event. [ 621.912322][ T9] m920x_read = error: -19 [ 621.916690][ T9] dvb-usb: error while querying for an remote control event. [ 621.964755][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.394356][T12386] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 622.534242][ T9] m920x_read = error: -19 [ 622.552303][ T9] dvb-usb: error while querying for an remote control event. [ 622.939805][ T5861] m920x_read = error: -19 [ 622.944177][ T5861] dvb-usb: error while querying for an remote control event. [ 623.009478][ T5886] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 623.082171][ T9] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 623.102520][ T5861] m920x_read = error: -19 [ 623.113229][ T5861] dvb-usb: error while querying for an remote control event. [ 623.192953][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 623.214239][ T5886] usb 4-1: can't read configurations, error -61 [ 623.235601][T12396] netlink: 'syz.2.1773': attribute type 10 has an invalid length. [ 623.244600][T12396] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1773'. [ 623.254148][ T5861] m920x_read = error: -19 [ 623.259341][ T5861] dvb-usb: error while querying for an remote control event. [ 623.271014][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 623.298192][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 623.326902][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 623.420165][ T5861] m920x_read = error: -19 [ 623.424908][ T5861] dvb-usb: error while querying for an remote control event. [ 623.432469][ T5886] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 623.470059][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 623.568992][ T5861] m920x_read = error: -19 [ 623.934188][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.103911][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 624.131285][ T5861] dvb-usb: error while querying for an remote control event. [ 624.169466][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.189203][ T5886] usb 4-1: can't read configurations, error -61 [ 624.279856][ T5886] usb usb4-port1: attempt power cycle [ 624.287324][ T9] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 624.306586][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.340622][ T5861] m920x_read = error: -19 [ 624.345508][ T5861] dvb-usb: error while querying for an remote control event. [ 624.370760][ T9] usb 2-1: Product: syz [ 624.399056][ T9] usb 2-1: Manufacturer: syz [ 624.425518][ T9] usb 2-1: SerialNumber: syz [ 624.452251][ T9] usb 2-1: config 0 descriptor?? [ 624.495318][ T5861] m920x_read = error: -19 [ 624.505426][ T5861] dvb-usb: error while querying for an remote control event. [ 624.517030][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 624.722118][T12383] netlink: 'syz.1.1770': attribute type 10 has an invalid length. [ 624.776747][T12383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.878063][T12383] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 624.899256][T12413] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1778'. [ 624.998903][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1780'. [ 625.009642][ T5861] m920x_read = error: -19 [ 625.018124][ T5861] dvb-usb: error while querying for an remote control event. [ 625.291657][ T5861] m920x_read = error: -19 [ 625.404189][ T5861] dvb-usb: error while querying for an remote control event. [ 625.549526][ T5886] m920x_read = error: -19 [ 625.553938][ T5886] dvb-usb: error while querying for an remote control event. [ 625.711328][ T5942] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 625.779515][ T5886] m920x_read = error: -19 [ 625.786555][ T5886] dvb-usb: error while querying for an remote control event. [ 625.899508][ T5886] m920x_read = error: -19 [ 625.940710][ T9543] usb 2-1: USB disconnect, device number 32 [ 625.946744][ T5942] usb 1-1: Using ep0 maxpacket: 16 [ 625.969176][ T5942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.998569][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 626.023167][ T5886] dvb-usb: error while querying for an remote control event. [ 626.039598][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.062793][ T5942] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 626.595468][ T5886] m920x_read = error: -19 [ 626.599968][ T30] audit: type=1400 audit(1748477141.547:1967): avc: denied { accept } for pid=12435 comm="syz.1.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 626.619987][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.628257][ T5886] dvb-usb: error while querying for an remote control event. [ 626.645375][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.684084][ T5942] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 626.708256][ T5942] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 626.726865][ T5942] usb 1-1: Manufacturer: syz [ 626.738854][ T5942] usb 1-1: config 0 descriptor?? [ 626.759641][ T5886] m920x_read = error: -19 [ 626.764033][ T5886] dvb-usb: error while querying for an remote control event. [ 626.977935][ T5886] m920x_read = error: -19 [ 626.989620][ T5886] dvb-usb: error while querying for an remote control event. [ 627.465009][ T5886] m920x_read = error: -19 [ 627.487084][ T5886] dvb-usb: error while querying for an remote control event. [ 627.557229][T12456] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1791'. [ 627.625902][ T5886] m920x_read = error: -19 [ 627.761299][ T7467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 627.772586][ T5886] dvb-usb: error while querying for an remote control event. [ 628.000701][ T5886] m920x_read = error: -19 [ 628.005445][ T5886] dvb-usb: error while querying for an remote control event. [ 628.123152][T12466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1792'. [ 628.481921][ T30] audit: type=1400 audit(1748477143.527:1968): avc: denied { ioctl } for pid=12459 comm="syz.2.1792" path="socket:[33370]" dev="sockfs" ino=33370 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 628.506669][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.536516][T12469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.749497][ T5942] rc_core: IR keymap rc-hauppauge not found [ 628.967741][ T5886] m920x_read = error: -19 [ 629.067165][ T5886] dvb-usb: error while querying for an remote control event. [ 629.573140][T12472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.781836][ T9] m920x_read = error: -19 [ 630.314535][ T5942] Registered IR keymap rc-empty [ 631.318937][ T9] dvb-usb: error while querying for an remote control event. [ 631.367335][ T5942] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 631.440231][ T9] m920x_read = error: -19 [ 631.446364][ T9] dvb-usb: error while querying for an remote control event. [ 631.449635][ T5942] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 631.502576][T12475] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1795'. [ 631.520729][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 631.576541][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 631.743293][ T5861] m920x_read = error: -19 [ 631.747632][ T5861] dvb-usb: error while querying for an remote control event. [ 631.787537][ T5942] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 631.840166][ T5942] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 631.899498][ T5942] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 631.954272][ T9] m920x_read = error: -19 [ 631.968749][ T9] dvb-usb: error while querying for an remote control event. [ 631.979501][ T5942] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 632.099599][ T5942] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 632.123438][ T5861] m920x_read = error: -19 [ 632.150140][ T5942] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 632.153717][ T5861] dvb-usb: error while querying for an remote control event. [ 632.275692][ T5942] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 632.319082][T12495] Bluetooth: MGMT ver 1.23 [ 632.418373][ T9] m920x_read = error: -19 [ 632.423176][ T9] dvb-usb: error while querying for an remote control event. [ 632.602633][ T9] m920x_read = error: -19 [ 632.607052][ T9] dvb-usb: error while querying for an remote control event. [ 633.362391][ T9] m920x_read = error: -19 [ 633.366772][ T9] dvb-usb: error while querying for an remote control event. [ 633.404948][T12504] 9pnet: Could not find request transport: qnix [ 633.483576][ T9] m920x_read = error: -19 [ 633.488469][T10910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.489527][ T5942] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.503417][ T9] dvb-usb: error while querying for an remote control event. [ 633.899550][ T9] m920x_read = error: -19 [ 634.062516][ T9] dvb-usb: error while querying for an remote control event. [ 634.280976][ T9] m920x_read = error: -19 [ 634.310643][ T9] dvb-usb: error while querying for an remote control event. [ 634.719506][ T5942] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 634.953151][T12502] Set syz1 is full, maxelem 65536 reached [ 635.109579][ T5861] m920x_read = error: -19 [ 635.113949][ T5861] dvb-usb: error while querying for an remote control event. [ 635.118388][ T5942] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 635.139511][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'. [ 635.216575][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1804'. [ 635.303561][ T5861] m920x_read = error: -19 [ 635.312196][ T5942] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 635.334272][ T5942] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 635.356503][ T5861] dvb-usb: error while querying for an remote control event. [ 635.749771][ T5861] m920x_read = error: -19 [ 635.778981][ T30] audit: type=1400 audit(1748477151.157:1969): avc: denied { ioctl } for pid=12513 comm="syz.4.1805" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 635.807170][ T5861] dvb-usb: error while querying for an remote control event. [ 635.889253][T12518] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 635.961395][ T5861] m920x_read = error: -19 [ 635.965736][ T5861] dvb-usb: error while querying for an remote control event. [ 635.995746][T12522] IPv6: sit1: Disabled Multicast RS [ 636.014143][T12522] sit1: entered allmulticast mode [ 636.035234][ T5942] usb 1-1: USB disconnect, device number 40 [ 636.208197][ T5861] m920x_read = error: -19 [ 636.212906][ T5861] dvb-usb: error while querying for an remote control event. [ 636.482800][ T9] m920x_read = error: -19 [ 636.487149][ T9] dvb-usb: error while querying for an remote control event. [ 636.609971][ T9] m920x_read = error: -19 [ 636.890478][ T9] dvb-usb: error while querying for an remote control event. [ 636.914539][T12512] syz.1.1804: attempt to access beyond end of device [ 636.914539][T12512] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 637.005403][T12512] gfs2: error -5 reading superblock [ 637.011909][ T9] m920x_read = error: -19 [ 637.019434][ T9] dvb-usb: error while querying for an remote control event. [ 637.676151][ T9] m920x_read = error: -19 [ 637.680722][ T9] dvb-usb: error while querying for an remote control event. [ 637.797271][ T9] m920x_read = error: -19 [ 637.810754][ T9] dvb-usb: error while querying for an remote control event. [ 639.009602][ T9] m920x_read = error: -19 [ 639.030684][ T9] dvb-usb: error while querying for an remote control event. [ 639.149586][ T9] m920x_read = error: -19 [ 639.159505][ T9] dvb-usb: error while querying for an remote control event. [ 639.382844][T12545] xt_hashlimit: size too large, truncated to 1048576 [ 639.599558][T12547] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1811'. [ 639.759196][ T9] m920x_read = error: -19 [ 639.779443][ T9] dvb-usb: error while querying for an remote control event. [ 639.889578][ T9] m920x_read = error: -19 [ 639.900313][ T9] dvb-usb: error while querying for an remote control event. [ 640.019630][ T9] m920x_read = error: -19 [ 640.127794][ T9] dvb-usb: error while querying for an remote control event. [ 640.389060][ T9] m920x_read = error: -19 [ 640.439507][ T9] dvb-usb: error while querying for an remote control event. [ 640.650023][ T9] m920x_read = error: -19 [ 640.677777][ T9] dvb-usb: error while querying for an remote control event. [ 640.859509][ T9] m920x_read = error: -19 [ 640.888869][ T9] dvb-usb: error while querying for an remote control event. [ 640.925118][ T30] audit: type=1400 audit(1748477156.307:1970): avc: denied { read } for pid=12556 comm="syz.1.1815" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 640.993041][ T30] audit: type=1400 audit(1748477156.307:1971): avc: denied { open } for pid=12556 comm="syz.1.1815" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 641.059513][ T9] m920x_read = error: -19 [ 641.064059][ T9] dvb-usb: error while querying for an remote control event. [ 641.179889][T12563] netlink: 'syz.1.1815': attribute type 10 has an invalid length. [ 641.187758][T12563] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1815'. [ 641.635470][ T30] audit: type=1400 audit(1748477156.337:1972): avc: denied { ioctl } for pid=12556 comm="syz.1.1815" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 642.039739][ T9] m920x_read = error: -19 [ 642.191077][ T9] dvb-usb: error while querying for an remote control event. [ 642.297407][T12563] team0: Port device geneve0 added [ 642.390356][ T5861] m920x_read = error: -19 [ 642.395625][ T5861] dvb-usb: error while querying for an remote control event. [ 642.877970][ T5861] m920x_read = error: -19 [ 642.883206][ T5861] dvb-usb: error while querying for an remote control event. [ 643.251204][ T5861] m920x_read = error: -19 [ 643.534705][ T30] audit: type=1400 audit(1748477158.347:1973): avc: denied { listen } for pid=12572 comm="syz.4.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 643.801047][ T5861] dvb-usb: error while querying for an remote control event. [ 643.939635][ T5861] m920x_read = error: -19 [ 643.944002][ T5861] dvb-usb: error while querying for an remote control event. [ 643.970779][T12580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8464 sclass=netlink_route_socket pid=12580 comm=syz.1.1820 [ 644.003820][ T30] audit: type=1400 audit(1748477158.347:1974): avc: denied { accept } for pid=12572 comm="syz.4.1819" lport=54519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 644.099488][ T5861] m920x_read = error: -19 [ 644.103849][ T5861] dvb-usb: error while querying for an remote control event. [ 644.174450][T12584] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 644.248486][T12580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=12580 comm=syz.1.1820 [ 644.273747][ T5861] m920x_read = error: -19 [ 644.293306][ T5861] dvb-usb: error while querying for an remote control event. [ 644.338166][ T30] audit: type=1400 audit(1748477159.717:1975): avc: denied { ioctl } for pid=12583 comm="syz.3.1822" path="socket:[34213]" dev="sockfs" ino=34213 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 644.368233][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.479510][ T5861] m920x_read = error: -19 [ 644.483955][ T5861] dvb-usb: error while querying for an remote control event. [ 644.619681][ T5861] m920x_read = error: -19 [ 644.634763][ T5861] dvb-usb: error while querying for an remote control event. [ 644.843278][ T5861] m920x_read = error: -19 [ 644.847611][ T5861] dvb-usb: error while querying for an remote control event. [ 645.070581][ T5861] m920x_read = error: -19 [ 645.074949][ T5861] dvb-usb: error while querying for an remote control event. [ 645.222741][ T5861] m920x_read = error: -19 [ 645.227110][ T5861] dvb-usb: error while querying for an remote control event. [ 645.369971][ T9] m920x_read = error: -19 [ 645.374343][ T9] dvb-usb: error while querying for an remote control event. [ 645.555686][T12619] virtio-fs: tag not found [ 645.740895][ T5861] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 645.753611][ T5886] m920x_read = error: -19 [ 645.761157][ T5886] dvb-usb: error while querying for an remote control event. [ 645.895278][ T9] m920x_read = error: -19 [ 645.909673][ T9] dvb-usb: error while querying for an remote control event. [ 645.928014][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.943080][ T5861] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 645.989699][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.019760][ T9] m920x_read = error: -19 [ 646.056607][ T9] dvb-usb: error while querying for an remote control event. [ 646.076878][ T5861] usb 5-1: config 0 descriptor?? [ 646.721870][ T9] m920x_read = error: -19 [ 646.726244][ T9] dvb-usb: error while querying for an remote control event. [ 646.890974][ T9] m920x_read = error: -19 [ 646.895447][ T9] dvb-usb: error while querying for an remote control event. [ 646.977982][ T5861] usbhid 5-1:0.0: can't add hid device: -71 [ 647.013194][ T5861] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 647.021160][ T5886] m920x_read = error: -19 [ 647.025493][ T5886] dvb-usb: error while querying for an remote control event. [ 647.066326][ T5861] usb 5-1: USB disconnect, device number 32 [ 647.155953][T12644] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1836'. [ 647.175762][ T5886] m920x_read = error: -19 [ 647.196315][ T5886] dvb-usb: error while querying for an remote control event. [ 647.239859][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 647.320746][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1838'. [ 647.330394][ T5861] m920x_read = error: -19 [ 647.334745][ T5861] dvb-usb: error while querying for an remote control event. [ 647.410837][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 647.629453][ T5861] m920x_read = error: -19 [ 647.633821][ T5861] dvb-usb: error while querying for an remote control event. [ 647.661443][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 647.677335][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 647.705817][ T9] usb 4-1: can't read configurations, error -71 [ 647.804040][ T5861] m920x_read = error: -19 [ 647.811915][ T5861] dvb-usb: error while querying for an remote control event. [ 647.976979][T12657] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 648.275567][ T5861] m920x_read = error: -19 [ 648.291527][ T5861] dvb-usb: error while querying for an remote control event. [ 648.345871][T12655] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1840'. [ 648.573041][ T5886] m920x_read = error: -19 [ 648.577414][ T5886] dvb-usb: error while querying for an remote control event. [ 648.717941][ T5886] m920x_read = error: -19 [ 648.737684][T12666] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1842'. [ 648.861417][ T5886] dvb-usb: error while querying for an remote control event. [ 649.091705][ T5886] m920x_read = error: -19 [ 649.109725][ T5886] dvb-usb: error while querying for an remote control event. [ 649.302306][ T9] m920x_read = error: -19 [ 649.306673][ T9] dvb-usb: error while querying for an remote control event. [ 649.429572][ T5861] m920x_read = error: -19 [ 649.434046][ T5861] dvb-usb: error while querying for an remote control event. [ 649.472526][ T5886] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 649.496205][T12672] bridge0: entered allmulticast mode [ 649.509267][T12672] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 649.529563][T12672] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 649.542444][T12672] bridge0: port 3(netdevsim0) entered disabled state [ 649.553522][T12672] bridge_slave_1: left allmulticast mode [ 649.559174][T12672] bridge_slave_1: left promiscuous mode [ 649.566517][T12672] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.573907][ T9387] m920x_read = error: -19 [ 649.580114][ T9387] dvb-usb: error while querying for an remote control event. [ 649.590894][T12672] bridge_slave_0: left allmulticast mode [ 649.599343][T12672] bridge_slave_0: left promiscuous mode [ 649.607031][T12672] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.639588][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 649.653898][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 649.664360][ T30] audit: type=1400 audit(1748477165.037:1976): avc: denied { setopt } for pid=12673 comm="syz.2.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 649.770261][ T9387] m920x_read = error: -19 [ 649.774641][ T9387] dvb-usb: error while querying for an remote control event. [ 649.783170][ T5886] usb 5-1: config 249 has an invalid interface number: 177 but max is 0 [ 649.797938][ T5886] usb 5-1: config 249 has no interface number 0 [ 649.807793][T12680] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 649.890388][T12686] FAULT_INJECTION: forcing a failure. [ 649.890388][T12686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.903536][T12686] CPU: 1 UID: 0 PID: 12686 Comm: syz.0.1848 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(full) [ 649.903560][T12686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 649.903570][T12686] Call Trace: [ 649.903577][T12686] [ 649.903584][T12686] dump_stack_lvl+0x16c/0x1f0 [ 649.903604][T12686] should_fail_ex+0x512/0x640 [ 649.903626][T12686] _copy_from_user+0x2e/0xd0 [ 649.903645][T12686] ksys_shmctl.constprop.0+0x323/0x380 [ 649.903665][T12686] ? __pfx_ksys_shmctl.constprop.0+0x10/0x10 [ 649.903685][T12686] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 649.903706][T12686] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 649.903727][T12686] ? __fget_files+0x20e/0x3c0 [ 649.903763][T12686] do_syscall_64+0xcd/0x4c0 [ 649.903783][T12686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.903800][T12686] RIP: 0033:0x7fcae138e969 [ 649.903814][T12686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.903831][T12686] RSP: 002b:00007fcadf1d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 649.903848][T12686] RAX: ffffffffffffffda RBX: 00007fcae15b6160 RCX: 00007fcae138e969 [ 649.903860][T12686] RDX: 00002000000003c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 649.903870][T12686] RBP: 00007fcadf1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 649.903880][T12686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.903890][T12686] R13: 0000000000000000 R14: 00007fcae15b6160 R15: 00007ffd55239cb8 [ 649.903914][T12686] [ 650.047245][ T9387] m920x_read = error: -19 [ 650.053658][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.077715][ T5886] usb 5-1: config 249 interface 177 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 650.089599][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 650.095174][ T5886] usb 5-1: config 249 interface 177 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.118156][ T9387] dvb-usb: error while querying for an remote control event. [ 650.125879][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 650.136005][ T5886] usb 5-1: New USB device found, idVendor=057c, idProduct=3800, bcdDevice=5a.9d [ 650.145308][ T9] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 650.155821][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.173381][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 650.185911][ T5886] usb 5-1: Product: syz [ 650.198991][ T5886] usb 5-1: Manufacturer: syz [ 650.204083][ T5886] usb 5-1: SerialNumber: syz [ 650.208709][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 650.268860][T12668] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 650.293111][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 650.299514][ T9387] m920x_read = error: -19 [ 650.502686][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 650.603658][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.635553][ T9387] dvb-usb: error while querying for an remote control event. [ 650.665669][ T9] usbtmc 4-1:16.0: bulk endpoints not found [ 650.780194][ T5886] usb 5-1: USB disconnect, device number 33 [ 650.795270][ T9] m920x_read = error: -19 [ 650.799961][ T9] dvb-usb: error while querying for an remote control event. [ 650.829336][T12700] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1852'. [ 650.919760][ T9] m920x_read = error: -19 [ 650.925168][ T9] dvb-usb: error while querying for an remote control event. [ 651.049518][ T9] m920x_read = error: -19 [ 651.053943][ T9] dvb-usb: error while querying for an remote control event. [ 651.245215][ T9] m920x_read = error: -19 [ 651.249708][ T9] dvb-usb: error while querying for an remote control event. [ 651.391655][ T9] m920x_read = error: -19 [ 651.410170][ T9] dvb-usb: error while querying for an remote control event. [ 651.529652][ T9] m920x_read = error: -19 [ 651.536058][ T9] dvb-usb: error while querying for an remote control event. [ 651.649676][ T9] m920x_read = error: -19 [ 651.656087][ T9] dvb-usb: error while querying for an remote control event. [ 651.702531][T12716] lo speed is unknown, defaulting to 1000 [ 651.713245][T12716] lo speed is unknown, defaulting to 1000 [ 651.769483][ T9] m920x_read = error: -19 [ 651.780688][ T9] dvb-usb: error while querying for an remote control event. [ 651.909494][ T9] m920x_read = error: -19 [ 651.983189][ T9] dvb-usb: error while querying for an remote control event. [ 652.120142][ T5886] m920x_read = error: -19 [ 652.132720][ T5886] dvb-usb: error while querying for an remote control event. [ 652.279542][ T5886] m920x_read = error: -19 [ 652.298493][ T5886] dvb-usb: error while querying for an remote control event. [ 652.419709][ T5886] m920x_read = error: -19 [ 652.437244][ T5886] dvb-usb: error while querying for an remote control event. [ 652.515100][T12728] bridge0: entered allmulticast mode [ 652.549466][ T5886] m920x_read = error: -19 [ 652.558787][ T5886] dvb-usb: error while querying for an remote control event. [ 652.663322][ T9543] usb 4-1: USB disconnect, device number 49 [ 652.680362][ T5886] m920x_read = error: -19 [ 652.684945][ T4542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.704533][ T5886] dvb-usb: error while querying for an remote control event. [ 652.855082][ T5886] m920x_read = error: -19 [ 652.869760][ T5886] dvb-usb: error while querying for an remote control event. [ 653.504525][ T5886] m920x_read = error: -19 [ 653.521017][ T5886] dvb-usb: error while querying for an remote control event. [ 653.649606][ T5886] m920x_read = error: -19 [ 653.671969][ T5886] dvb-usb: error while querying for an remote control event. [ 653.854747][T12754] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 654.071897][ T5886] m920x_read = error: -19 [ 654.080875][ T5886] dvb-usb: error while querying for an remote control event. [ 654.199562][ T5886] m920x_read = error: -19 [ 654.212221][ T5886] dvb-usb: error while querying for an remote control event. [ 654.349957][ T5886] m920x_read = error: -19 [ 654.387653][ T5886] dvb-usb: error while querying for an remote control event. [ 654.519779][ T5861] m920x_read = error: -19 [ 654.529574][ T5861] dvb-usb: error while querying for an remote control event. [ 654.831495][ T5861] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 654.847803][ T5886] m920x_read = error: -19 [ 654.856133][ T5886] dvb-usb: error while querying for an remote control event. [ 655.002384][ T5861] usb 1-1: unable to get BOS descriptor or descriptor too short [ 655.022205][ T5886] m920x_read = error: -19 [ 655.029562][ T5861] usb 1-1: config 249 has an invalid interface number: 177 but max is 0 [ 655.045858][ T5886] dvb-usb: error while querying for an remote control event. [ 655.059506][ T5861] usb 1-1: config 249 has no interface number 0 [ 655.083575][ T5861] usb 1-1: config 249 interface 177 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 655.114073][ T5861] usb 1-1: config 249 interface 177 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.131550][ T5861] usb 1-1: New USB device found, idVendor=057c, idProduct=3800, bcdDevice=5a.9d [ 655.141198][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.149203][ T5861] usb 1-1: Product: syz [ 655.153566][ T5861] usb 1-1: Manufacturer: syz [ 655.159490][ T5861] usb 1-1: SerialNumber: syz [ 655.176876][T12764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.189573][ T9] m920x_read = error: -19 [ 655.197387][ T9] dvb-usb: error while querying for an remote control event. [ 655.210527][ T9543] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 655.370147][ T9] m920x_read = error: -19 [ 655.390447][ T9] dvb-usb: error while querying for an remote control event. [ 655.650055][T12789] vivid-000: disconnect [ 655.655526][T12789] vivid-000: reconnect [ 655.669270][ T9543] usb 4-1: Using ep0 maxpacket: 8 [ 655.874127][ T9] m920x_read = error: -19 [ 655.878385][ T9543] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 655.900296][ T9543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.908702][ T9543] usb 4-1: Product: syz [ 655.913401][ T9543] usb 4-1: Manufacturer: syz [ 655.917995][ T9543] usb 4-1: SerialNumber: syz [ 656.210399][ T9] dvb-usb: error while querying for an remote control event. [ 656.319903][ T9543] usb 4-1: config 0 descriptor?? [ 656.402034][ T5861] usb 1-1: USB disconnect, device number 41 [ 656.562956][T12798] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1880'. [ 656.734664][ T9] m920x_read = error: -19 [ 656.832621][ T9] dvb-usb: error while querying for an remote control event. [ 656.833452][ T9543] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 656.915529][T12801] virtio-fs: tag not found [ 657.032774][ T5886] m920x_read = error: -19 [ 657.038549][ T5886] dvb-usb: error while querying for an remote control event. [ 657.234409][T12795] delete_channel: no stack [ 657.239245][T12795] delete_channel: no stack [ 657.250049][ T5861] m920x_read = error: -19 [ 657.254457][ T5861] dvb-usb: error while querying for an remote control event. [ 657.492209][ T5861] m920x_read = error: -19 [ 657.499469][ T5861] dvb-usb: error while querying for an remote control event. [ 657.609472][ T5861] m920x_read = error: -19 [ 657.619403][ T5861] dvb-usb: error while querying for an remote control event. [ 657.828367][ T5861] m920x_read = error: -19 [ 658.002120][ T9543] gspca_sunplus: reg_w_riv err -71 [ 658.028784][ T9543] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 658.202067][ T5861] dvb-usb: error while querying for an remote control event. [ 658.245763][ T9543] usb 4-1: USB disconnect, device number 50 [ 658.320045][ T5861] m920x_read = error: -19 [ 658.327572][ T5861] dvb-usb: error while querying for an remote control event. [ 658.443656][ T4542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 658.455004][ T9] m920x_read = error: -19 [ 658.459348][ T9] dvb-usb: error while querying for an remote control event. [ 658.594188][ T9] m920x_read = error: -19 [ 658.598635][ T9] dvb-usb: error while querying for an remote control event. [ 658.740712][ T5861] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 659.010214][T12829] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1890'. [ 659.759563][ T9543] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 659.803790][ T9] m920x_read = error: -19 [ 659.808459][ T9] dvb-usb: error while querying for an remote control event. [ 659.872063][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 659.881203][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 659.945016][ T5886] m920x_read = error: -19 [ 659.961837][ T5886] dvb-usb: error while querying for an remote control event. [ 659.979587][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 660.013115][ T5861] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 660.058044][ T9543] usb 1-1: device descriptor read/64, error -71 [ 660.109553][ T5886] m920x_read = error: -19 [ 660.113932][ T5886] dvb-usb: error while querying for an remote control event. [ 660.232198][T12838] netlink: 'syz.3.1894': attribute type 6 has an invalid length. [ 660.329659][ T9543] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 660.509604][ T9543] usb 1-1: device descriptor read/64, error -71 [ 660.671063][ T9543] usb usb1-port1: attempt power cycle [ 660.827829][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.094623][ T9543] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 661.104720][ T5861] usb 5-1: Product: syz [ 661.109011][ T5861] usb 5-1: Manufacturer: syz [ 661.113725][ T5861] usb 5-1: SerialNumber: syz [ 661.131110][ T9543] usb 1-1: device descriptor read/8, error -71 [ 661.219435][ T5886] m920x_read = error: -19 [ 661.243322][ T5861] usb 5-1: config 0 descriptor?? [ 661.251718][ T5886] dvb-usb: error while querying for an remote control event. [ 661.272294][ T5861] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 661.310778][ T5861] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 661.386086][ T5886] m920x_read = error: -19 [ 661.389468][ T9543] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 661.399590][ T5886] dvb-usb: error while querying for an remote control event. [ 661.483954][ T9543] usb 1-1: device descriptor read/8, error -71 [ 661.609732][ T5861] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 661.648172][ T5861] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 661.655783][ T5886] m920x_read = error: -19 [ 661.670763][ T9543] usb usb1-port1: unable to enumerate USB device [ 661.670995][ T5886] dvb-usb: error while querying for an remote control event. [ 661.713967][ T5861] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 661.859270][ T5861] em28xx 5-1:0.0: No AC97 audio processor [ 662.603818][ T5886] m920x_read = error: -19 [ 662.687319][ T5886] dvb-usb: error while querying for an remote control event. [ 662.728194][ T5861] usb 5-1: USB disconnect, device number 34 [ 662.750450][ T5861] em28xx 5-1:0.0: Disconnecting em28xx [ 662.892589][ T5886] m920x_read = error: -19 [ 662.904273][ T5861] em28xx 5-1:0.0: Freeing device [ 663.062085][T12865] virtio-fs: tag not found [ 663.203830][ T5886] dvb-usb: error while querying for an remote control event. [ 663.319847][ T9387] m920x_read = error: -19 [ 663.324313][ T9387] dvb-usb: error while querying for an remote control event. [ 663.499724][T12869] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1904'. [ 663.951103][ T9387] m920x_read = error: -19 [ 663.955799][ T9387] dvb-usb: error while querying for an remote control event. [ 664.089496][ T9387] m920x_read = error: -19 [ 664.093861][ T9387] dvb-usb: error while querying for an remote control event. [ 664.713916][ T9387] m920x_read = error: -19 [ 664.746179][ T7467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.770011][ T9387] dvb-usb: error while querying for an remote control event. [ 664.848502][T12881] overlayfs: missing 'lowerdir' [ 665.671701][ T9387] m920x_read = error: -19 [ 665.676100][ T9387] dvb-usb: error while querying for an remote control event. [ 665.799722][ T9387] m920x_read = error: -19 [ 665.804193][ T9387] dvb-usb: error while querying for an remote control event. [ 665.865551][T12884] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 665.920168][ T9387] m920x_read = error: -19 [ 665.928212][ T9387] dvb-usb: error while querying for an remote control event. [ 665.949709][ T5942] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 666.431075][ T9387] m920x_read = error: -19 [ 666.456733][ T9387] dvb-usb: error while querying for an remote control event. [ 666.569470][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 666.576191][ T5942] usb 2-1: unable to get BOS descriptor or descriptor too short [ 666.585953][ T5942] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 666.708942][ T9387] m920x_read = error: -19 [ 666.709182][ T5942] usb 2-1: config 8 has no interface number 0 [ 666.726034][ T5942] usb 2-1: config 8 interface 255 has no altsetting 0 [ 666.729462][ T9387] dvb-usb: error while querying for an remote control event. [ 666.735850][ T5942] usb 2-1: string descriptor 0 read error: -22 [ 666.769480][ T5861] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 666.781407][ T5942] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 666.814047][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.869896][ T5886] m920x_read = error: -19 [ 666.900180][ T5886] dvb-usb: error while querying for an remote control event. [ 666.914303][ T5942] catc 2-1:8.255: Can't set altsetting 1. [ 666.943260][ T5942] catc 2-1:8.255: probe with driver catc failed with error -5 [ 666.959520][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 666.985121][ T5942] usb 2-1: USB disconnect, device number 33 [ 667.000826][ T5861] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 667.028711][ T5861] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 667.169519][ T5886] m920x_read = error: -19 [ 667.198196][T12903] virtio-fs: tag not found [ 667.290010][ T5886] dvb-usb: error while querying for an remote control event. [ 667.340175][ T5861] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 667.375600][ T5861] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 667.401973][ T5861] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.416147][ T5861] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 667.434522][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.493196][ T9387] m920x_read = error: -19 [ 667.497666][ T9387] dvb-usb: error while querying for an remote control event. [ 667.629478][ T9387] m920x_read = error: -19 [ 667.633871][ T9387] dvb-usb: error while querying for an remote control event. [ 667.661207][ T5886] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 667.672698][ T5861] usb 5-1: usb_control_msg returned -32 [ 667.678254][ T5861] usbtmc 5-1:16.0: can't read capabilities [ 667.790209][ T5861] m920x_read = error: -19 [ 667.794590][ T5861] dvb-usb: error while querying for an remote control event. [ 667.819469][ T5886] usb 4-1: device descriptor read/64, error -71 [ 667.909863][ T5861] m920x_read = error: -19 [ 667.914244][ T5861] dvb-usb: error while querying for an remote control event. [ 668.018375][T12911] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 668.025871][ T5942] usb 5-1: USB disconnect, device number 35 [ 668.043003][ T5861] m920x_read = error: -19 [ 668.047408][ T5861] dvb-usb: error while querying for an remote control event. [ 668.070014][ T5886] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 668.159683][ T5861] m920x_read = error: -19 [ 668.174549][ T5861] dvb-usb: error while querying for an remote control event. [ 668.211449][ T5886] usb 4-1: device descriptor read/64, error -71 [ 668.350413][ T5861] m920x_read = error: -19 [ 668.357775][ T5886] usb usb4-port1: attempt power cycle [ 668.371476][ T5861] dvb-usb: error while querying for an remote control event. [ 668.586436][ T5861] m920x_read = error: -19 [ 668.699946][ T5861] dvb-usb: error while querying for an remote control event. [ 668.759494][ T5886] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 668.811703][ T5861] m920x_read = error: -19 [ 668.819612][ T5886] usb 4-1: device descriptor read/8, error -71 [ 668.863503][ T5861] dvb-usb: error while querying for an remote control event. [ 669.187769][T12939] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 669.545369][ T5861] m920x_read = error: -19 [ 669.550327][ T5861] dvb-usb: error while querying for an remote control event. [ 669.688775][ T5886] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 669.799548][ T5886] usb 4-1: device descriptor read/8, error -71 [ 670.032724][ T5861] m920x_read = error: -19 [ 670.060724][ T5861] dvb-usb: error while querying for an remote control event. [ 670.309585][ T5942] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 670.492273][ T5886] usb usb4-port1: unable to enumerate USB device [ 670.657737][ T5861] m920x_read = error: -19 [ 670.671450][ T4575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.729466][ T5861] dvb-usb: error while querying for an remote control event. [ 670.819442][ T5942] usb 5-1: Using ep0 maxpacket: 8 [ 670.865822][ T5942] usb 5-1: unable to get BOS descriptor or descriptor too short [ 670.926797][ T5942] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 671.015133][ T5861] m920x_read = error: -19 [ 671.024110][ T5861] dvb-usb: error while querying for an remote control event. [ 671.096762][ T5942] usb 5-1: config 8 has no interface number 0 [ 671.114877][ T5942] usb 5-1: config 8 interface 255 has no altsetting 0 [ 671.140888][ T5942] usb 5-1: string descriptor 0 read error: -22 [ 671.150922][ T5861] m920x_read = error: -19 [ 671.155283][ T5861] dvb-usb: error while querying for an remote control event. [ 671.179127][ T5942] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 671.301220][ T5861] m920x_read = error: -19 [ 671.305919][ T5861] dvb-usb: error while querying for an remote control event. [ 671.445882][ T5861] m920x_read = error: -19 [ 672.364940][ T5861] dvb-usb: error while querying for an remote control event. [ 672.601276][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.697567][ T5861] m920x_read = error: -19 [ 672.709101][ T5861] dvb-usb: error while querying for an remote control event. [ 672.829835][ T5861] m920x_read = error: -19 [ 672.864526][ T5942] catc 5-1:8.255: Can't set altsetting 1. [ 672.870434][ T5861] dvb-usb: error while querying for an remote control event. [ 672.883254][ T5942] catc 5-1:8.255: probe with driver catc failed with error -5 [ 672.943733][ T5942] usb 5-1: USB disconnect, device number 36 [ 672.999731][ T5861] m920x_read = error: -19 [ 673.025766][ T5861] dvb-usb: error while querying for an remote control event. [ 673.271443][ T5861] m920x_read = error: -19 [ 673.425963][ T5861] dvb-usb: error while querying for an remote control event. [ 673.879747][ T5886] m920x_read = error: -19 [ 673.886626][ T5886] dvb-usb: error while querying for an remote control event. [ 674.025106][T12993] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 674.059813][ T5886] m920x_read = error: -19 [ 674.064437][ T5861] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 674.391177][ T5886] dvb-usb: error while querying for an remote control event. [ 674.457905][ T5863] kworker/0:5 (5863) used greatest stack depth: 17880 bytes left [ 674.585422][ T5886] m920x_read = error: -19 [ 674.627937][ T5886] dvb-usb: error while querying for an remote control event. [ 674.763853][ T5861] usb 1-1: unable to get BOS descriptor or descriptor too short [ 674.779193][ T5861] usb 1-1: config 249 has an invalid interface number: 177 but max is 0 [ 674.788029][ T5861] usb 1-1: config 249 has no interface number 0 [ 674.794688][ T5861] usb 1-1: config 249 interface 177 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 674.828245][ T5861] usb 1-1: config 249 interface 177 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.845874][ T5886] m920x_read = error: -19 [ 674.850369][ T5886] dvb-usb: error while querying for an remote control event. [ 674.909688][ T5861] usb 1-1: New USB device found, idVendor=057c, idProduct=3800, bcdDevice=5a.9d [ 674.921030][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.929324][ T5861] usb 1-1: Product: syz [ 674.934168][ T5861] usb 1-1: Manufacturer: syz [ 675.019996][ T5886] m920x_read = error: -19 [ 675.024728][ T5886] dvb-usb: error while querying for an remote control event. [ 675.032483][ T5861] usb 1-1: SerialNumber: syz [ 675.043400][T12988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 675.109659][ T5942] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 675.158623][T13011] ptrace attach of "./syz-executor exec"[5811] was attempted by "./syz-executor exec"[13011] [ 675.520287][ T5886] m920x_read = error: -19 [ 675.524698][ T5886] dvb-usb: error while querying for an remote control event. [ 675.677985][ T5861] usb 1-1: USB disconnect, device number 46 [ 675.691639][ T5942] usb 2-1: unable to get BOS descriptor or descriptor too short [ 675.692312][ T5886] m920x_read = error: -19 [ 675.707668][ T5886] dvb-usb: error while querying for an remote control event. [ 675.808770][ T5942] usb 2-1: config 249 has an invalid interface number: 177 but max is 0 [ 675.829900][ T5886] m920x_read = error: -19 [ 675.847054][ T5886] dvb-usb: error while querying for an remote control event. [ 675.863246][ T5942] usb 2-1: config 249 has no interface number 0 [ 675.876108][ T5942] usb 2-1: config 249 interface 177 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 675.918890][ T5942] usb 2-1: config 249 interface 177 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.941611][ T5942] usb 2-1: New USB device found, idVendor=057c, idProduct=3800, bcdDevice=5a.9d [ 675.970463][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.971906][ T5861] m920x_read = error: -19 [ 675.984586][ T5942] usb 2-1: Product: syz [ 675.985747][ T5861] dvb-usb: error while querying for an remote control event. [ 675.988742][ T5942] usb 2-1: Manufacturer: syz [ 676.007329][ T5942] usb 2-1: SerialNumber: syz [ 676.050023][T13001] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 676.099640][ T5861] m920x_read = error: -19 [ 676.103993][ T5861] dvb-usb: error while querying for an remote control event. [ 676.239475][ T5861] m920x_read = error: -19 [ 676.275112][ T5861] dvb-usb: error while querying for an remote control event. [ 676.342269][T13018] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.349629][T13018] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.361010][ T4575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 676.409693][ T5886] m920x_read = error: -19 [ 676.433770][T13018] bridge0: entered allmulticast mode [ 676.434111][ T5886] dvb-usb: error while querying for an remote control event. [ 676.453457][T13022] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1945'. [ 676.487650][T13020] bridge_slave_1: left allmulticast mode [ 676.504283][T13020] bridge_slave_1: left promiscuous mode [ 676.511086][T13020] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.523268][T13020] bridge_slave_0: left allmulticast mode [ 676.614726][ T5886] m920x_read = error: -19 [ 676.619621][ T5886] dvb-usb: error while querying for an remote control event. [ 676.636684][T13020] bridge_slave_0: left promiscuous mode [ 676.648022][T13020] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.093620][ T5886] m920x_read = error: -19 [ 677.098011][ T5886] dvb-usb: error while querying for an remote control event. [ 677.133791][ T5942] usb 2-1: USB disconnect, device number 34 [ 677.180589][ T43] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 677.209631][ T5886] m920x_read = error: -19 [ 677.225599][ T5886] dvb-usb: error while querying for an remote control event. [ 677.349493][ T5861] m920x_read = error: -19 [ 677.379511][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 677.388478][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 677.408454][ T5861] dvb-usb: error while querying for an remote control event. [ 677.419067][ T43] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 677.447511][ T43] usb 5-1: config 8 has no interface number 0 [ 677.476692][ T43] usb 5-1: config 8 interface 255 has no altsetting 0 [ 677.522453][ T43] usb 5-1: string descriptor 0 read error: -22 [ 677.545892][ T43] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 677.572627][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.606469][ T5861] m920x_read = error: -19 [ 677.667829][ T5861] dvb-usb: error while querying for an remote control event. [ 677.819527][ T5861] m920x_read = error: -19 [ 677.834695][ T43] catc 5-1:8.255: Can't set altsetting 1. [ 677.838983][ T5861] dvb-usb: error while querying for an remote control event. [ 677.872758][ T43] catc 5-1:8.255: probe with driver catc failed with error -5 [ 677.940514][ T43] usb 5-1: USB disconnect, device number 37 [ 677.999804][ T5861] m920x_read = error: -19 [ 678.028073][ T5861] dvb-usb: error while querying for an remote control event. [ 678.169623][ T5861] m920x_read = error: -19 [ 678.174151][ T5861] dvb-usb: error while querying for an remote control event. [ 678.320003][ T5861] m920x_read = error: -19 [ 678.346585][ T5861] dvb-usb: error while querying for an remote control event. [ 678.483227][ T5861] m920x_read = error: -19 [ 678.497766][ T5861] dvb-usb: error while querying for an remote control event. [ 678.595281][T13052] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 678.639773][ T5861] m920x_read = error: -19 [ 678.961632][ T5861] dvb-usb: error while querying for an remote control event. [ 679.074672][ T5861] m920x_read = error: -19 [ 679.099408][ T5861] dvb-usb: error while querying for an remote control event. [ 679.209585][ T5861] m920x_read = error: -19 [ 679.213990][ T5861] dvb-usb: error while querying for an remote control event. [ 679.539486][ T9543] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 679.629696][ T5861] m920x_read = error: -19 [ 679.683913][ T5861] dvb-usb: error while querying for an remote control event. [ 679.875649][T13074] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1957'. [ 680.161660][ T9543] usb 4-1: unable to get BOS descriptor or descriptor too short [ 680.182401][ T9543] usb 4-1: config 249 has an invalid interface number: 177 but max is 0 [ 680.309038][ T918] m920x_read = error: -19 [ 680.502838][ T918] dvb-usb: error while querying for an remote control event. [ 681.809589][ T918] m920x_read = error: -19 [ 681.814011][ T918] dvb-usb: error while querying for an remote control event. [ 682.615505][T10914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 682.661731][ T9543] usb 4-1: config 249 has no interface number 0 [ 682.668055][ T9543] usb 4-1: config 249 interface 177 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 682.772045][ T5861] m920x_read = error: -19 [ 682.776837][ T5861] dvb-usb: error while querying for an remote control event. [ 683.254276][ T5861] m920x_read = error: -19 [ 683.277522][ T5861] dvb-usb: error while querying for an remote control event. [ 683.280223][ T9543] usb 4-1: config 249 interface 177 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.409501][ T5861] m920x_read = error: -19 [ 683.414341][ T5861] dvb-usb: error while querying for an remote control event. [ 684.231245][ T5861] m920x_read = error: -19 [ 684.343103][ T5861] dvb-usb: error while querying for an remote control event. [ 684.405326][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1961'. [ 684.454823][ T9543] usb 4-1: string descriptor 0 read error: -71 [ 684.471519][ T5861] m920x_read = error: -19 [ 684.481985][ T9543] usb 4-1: New USB device found, idVendor=057c, idProduct=3800, bcdDevice=5a.9d [ 684.518914][ T5861] dvb-usb: error while querying for an remote control event. [ 684.541607][ T9543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.730148][ T9543] usb 4-1: can't set config #249, error -71 [ 684.737852][ T9543] usb 4-1: USB disconnect, device number 55 [ 684.748929][ T5861] m920x_read = error: -19 [ 684.769541][ T5861] dvb-usb: error while querying for an remote control event. [ 684.844948][T13104] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 685.363696][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.397234][ T5861] m920x_read = error: -19 [ 685.402204][ T5861] dvb-usb: error while querying for an remote control event. [ 686.155983][ T5861] m920x_read = error: -19 [ 686.184869][ T5861] dvb-usb: error while querying for an remote control event. [ 686.229923][T13117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1970'. [ 686.351602][ T5861] m920x_read = error: -19 [ 686.363142][ T5861] dvb-usb: error while querying for an remote control event. [ 686.504397][ T5861] m920x_read = error: -19 [ 686.530306][ T5861] dvb-usb: error while querying for an remote control event. [ 686.560149][ T9543] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 686.987285][ T5861] m920x_read = error: -19 [ 687.014157][ T5861] dvb-usb: error while querying for an remote control event. [ 687.061678][ T9543] usb 2-1: unable to get BOS descriptor or descriptor too short [ 687.081485][ T9543] usb 2-1: config 249 has an invalid interface number: 177 but max is 0 [ 687.098700][ T9543] usb 2-1: config 249 has no interface number 0 [ 687.105095][ T9543] usb 2-1: config 249 interface 177 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 687.116993][ T9543] usb 2-1: config 249 interface 177 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.132566][ T9543] usb 2-1: New USB device found, idVendor=057c, idProduct=3800, bcdDevice=5a.9d [ 687.147962][ T9543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.159583][ T5861] m920x_read = error: -19 [ 687.166526][ T9543] usb 2-1: Product: syz [ 687.172177][ T5861] dvb-usb: error while querying for an remote control event. [ 687.181765][ T9543] usb 2-1: Manufacturer: syz [ 687.186389][ T9543] usb 2-1: SerialNumber: syz [ 687.213673][T13125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 687.299628][ T5861] m920x_read = error: -19 [ 687.304023][ T5861] dvb-usb: error while querying for an remote control event. [ 687.434181][ T5861] m920x_read = error: -19 [ 687.448987][ T5861] dvb-usb: error while querying for an remote control event. [ 687.599862][ T5861] m920x_read = error: -19 [ 687.604245][ T5861] dvb-usb: error while querying for an remote control event. [ 687.789506][ T5861] m920x_read = error: -19 [ 687.794085][ T5861] dvb-usb: error while querying for an remote control event. [ 687.814249][T10914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 687.882256][ T9543] usb 2-1: USB disconnect, device number 35 [ 687.988874][ T5861] m920x_read = error: -19 [ 688.041694][ T5861] dvb-usb: error while querying for an remote control event. [ 688.329057][ T5861] m920x_read = error: -19 [ 688.368502][ T5861] dvb-usb: error while querying for an remote control event. [ 688.548121][ T5861] m920x_read = error: -19 [ 688.667076][ T5861] dvb-usb: error while querying for an remote control event. [ 689.124427][ T5861] m920x_read = error: -19 [ 689.144712][ T5861] dvb-usb: error while querying for an remote control event. [ 689.180148][T13177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 689.279792][ T5861] m920x_read = error: -19 [ 689.313655][ T5861] dvb-usb: error while querying for an remote control event. [ 690.768010][ T5886] m920x_read = error: -19 [ 690.774787][ T5886] dvb-usb: error while querying for an remote control event. [ 691.076031][ T5861] m920x_read = error: -19 [ 691.093353][ T5861] dvb-usb: error while querying for an remote control event. [ 691.677361][ T5886] m920x_read = error: -19 [ 691.858767][ T5886] dvb-usb: error while querying for an remote control event. [ 692.045081][ T918] m920x_read = error: -19 [ 692.055042][ T918] dvb-usb: error while querying for an remote control event. [ 692.279664][ T5886] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 692.334425][ T5861] m920x_read = error: -19 [ 692.484207][ T5861] dvb-usb: error while querying for an remote control event. [ 692.636809][ T918] m920x_read = error: -19 [ 692.691986][ T5886] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 692.714241][ T918] dvb-usb: error while querying for an remote control event. [ 692.727307][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.847633][ T5886] usb 5-1: config 0 descriptor?? [ 692.862090][ T5861] m920x_read = error: -19 [ 692.904388][ T5861] dvb-usb: error while querying for an remote control event. [ 693.014606][T13225] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1997'. [ 693.068798][ T918] m920x_read = error: -19 [ 693.101572][ T918] dvb-usb: error while querying for an remote control event. [ 693.313845][ T918] m920x_read = error: -19 [ 693.318259][ T918] dvb-usb: error while querying for an remote control event. [ 693.559115][ T918] m920x_read = error: -19 [ 693.567733][ T918] dvb-usb: error while querying for an remote control event. [ 693.643054][T10914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 693.832538][ T918] m920x_read = error: -19 [ 693.842321][ T918] dvb-usb: error while querying for an remote control event. [ 693.939106][ T9543] usb 5-1: USB disconnect, device number 38 [ 693.960016][ T918] m920x_read = error: -19 [ 693.967001][ T918] dvb-usb: error while querying for an remote control event. [ 694.083186][ T918] m920x_read = error: -19 [ 694.106361][ T918] dvb-usb: error while querying for an remote control event. [ 694.165644][T13242] binder: 13241:13242 unknown command 201326592 [ 694.176505][T13242] binder: 13241:13242 ioctl c0306201 200000000040 returned -22 [ 694.241288][ T918] m920x_read = error: -19 [ 694.248022][ T918] dvb-usb: error while querying for an remote control event. [ 694.389561][ T918] m920x_read = error: -19 [ 694.523667][ T918] dvb-usb: error while querying for an remote control event. [ 694.539443][ T30] audit: type=1400 audit(1748477209.907:1977): avc: denied { accept } for pid=13243 comm="syz.2.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 694.679646][ T918] m920x_read = error: -19 [ 694.686202][ T918] dvb-usb: error while querying for an remote control event. [ 694.819816][ T918] m920x_read = error: -19 [ 694.906748][T13265] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2008'. [ 695.110635][ T918] dvb-usb: error while querying for an remote control event. [ 695.231593][ T918] m920x_read = error: -19 [ 695.378565][ T918] dvb-usb: error while querying for an remote control event. [ 695.862196][ T918] m920x_read = error: -19 [ 695.894933][T13253] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 695.897224][ T918] dvb-usb: error while querying for an remote control event. [ 696.321849][ T918] m920x_read = error: -19 [ 696.326345][ T918] dvb-usb: error while querying for an remote control event. [ 696.849654][ T918] m920x_read = error: -19 [ 696.854038][ T918] dvb-usb: error while querying for an remote control event. [ 696.954361][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 696.989557][ T918] m920x_read = error: -19 [ 696.996207][ T918] dvb-usb: error while querying for an remote control event. [ 697.067820][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2009'. [ 697.119657][ T918] m920x_read = error: -19 [ 697.126597][ T918] dvb-usb: error while querying for an remote control event. [ 697.190642][ T30] audit: type=1400 audit(1748477212.577:1978): avc: denied { watch } for pid=13283 comm="syz.1.2015" path="/410/file0" dev="tmpfs" ino=2260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 697.359774][ T918] m920x_read = error: -19 [ 697.688344][ T918] dvb-usb: error while querying for an remote control event. [ 697.764039][T13296] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2017'. [ 697.829582][ T918] m920x_read = error: -19 [ 697.882751][T13302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 699.169409][ T918] dvb-usb: error while querying for an remote control event. [ 699.170765][ T4575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 699.289726][ T5861] m920x_read = error: -19 [ 699.298113][ T5861] dvb-usb: error while querying for an remote control event. [ 699.460250][ T5861] m920x_read = error: -19 [ 699.477130][ T5861] dvb-usb: error while querying for an remote control event. [ 699.689694][ T43] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 699.928878][T13313] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2021'. [ 699.943658][ T30] audit: type=1400 audit(1748477215.307:1979): avc: denied { nlmsg_read } for pid=13303 comm="syz.3.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 700.233868][ T5861] m920x_read = error: -19 [ 700.238366][ T5861] dvb-usb: error while querying for an remote control event. [ 700.294794][ T43] usb 1-1: config 0 has no interfaces? [ 700.302539][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 700.382013][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.409521][ T5861] m920x_read = error: -19 [ 700.419988][ T5861] dvb-usb: error while querying for an remote control event. [ 700.427600][ T43] usb 1-1: Product: syz [ 700.434920][ T43] usb 1-1: Manufacturer: syz [ 700.539761][ T5861] m920x_read = error: -19 [ 700.545921][ T5861] dvb-usb: error while querying for an remote control event. [ 700.568143][ T43] usb 1-1: SerialNumber: syz [ 700.659463][ T5861] m920x_read = error: -19 [ 700.668432][ T43] usb 1-1: config 0 descriptor?? [ 700.696957][ T5861] dvb-usb: error while querying for an remote control event. [ 700.839785][ T5861] m920x_read = error: -19 [ 700.854552][ T5861] dvb-usb: error while querying for an remote control event. [ 700.989497][ T918] m920x_read = error: -19 [ 700.993884][ T918] dvb-usb: error while querying for an remote control event. [ 701.109541][ T918] m920x_read = error: -19 [ 701.114106][ T918] dvb-usb: error while querying for an remote control event. [ 701.149500][ T5861] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 701.258653][ T918] m920x_read = error: -19 [ 701.374863][ T918] dvb-usb: error while querying for an remote control event. [ 701.405655][ T5861] usb 2-1: unable to get BOS descriptor or descriptor too short [ 701.459062][ T5861] usb 2-1: config 249 has an invalid interface number: 177 but max is 0 [ 701.518035][ T5861] usb 2-1: config 249 has no interface number 0 [ 701.559666][ T918] m920x_read = error: -19 [ 701.574376][ T918] dvb-usb: error while querying for an remote control event. [ 701.699273][ T5861] usb 2-1: config 249 interface 177 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 701.727317][ T5861] usb 2-1: config 249 interface 177 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.733532][T13331] trusted_key: encrypted_key: hex blob is missing [ 701.758944][ T5861] usb 2-1: New USB device found, idVendor=057c, idProduct=3800, bcdDevice=5a.9d [ 701.806204][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.829513][ T918] m920x_read = error: -19 [ 701.861766][ T918] dvb-usb: error while querying for an remote control event. [ 701.894239][ T5861] usb 2-1: Product: syz [ 701.941605][ T5861] usb 2-1: Manufacturer: syz [ 701.946267][ T5861] usb 2-1: SerialNumber: syz [ 701.984435][T13327] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 702.049628][ T918] m920x_read = error: -19 [ 702.054740][ T918] dvb-usb: error while querying for an remote control event. [ 702.083109][ T43] usb 1-1: can't set config #0, error -71 [ 702.100478][ T43] usb 1-1: USB disconnect, device number 47 [ 702.219487][ T9] m920x_read = error: -19 [ 702.223856][ T9] dvb-usb: error while querying for an remote control event. [ 702.280058][ T5861] usb 2-1: USB disconnect, device number 36 [ 702.371715][ T9] m920x_read = error: -19 [ 702.377506][ T9] dvb-usb: error while querying for an remote control event. [ 702.396284][T13342] kAFS: No cell specified [ 702.499459][ T5861] m920x_read = error: -19 [ 702.508375][ T5861] dvb-usb: error while querying for an remote control event. [ 702.639518][ T5861] m920x_read = error: -19 [ 702.648309][ T5861] dvb-usb: error while querying for an remote control event. [ 702.887752][ T5861] m920x_read = error: -19 [ 703.045016][ T5861] dvb-usb: error while querying for an remote control event. [ 703.199425][ T918] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 703.239578][ T5861] m920x_read = error: -19 [ 703.258230][ T5861] dvb-usb: error while querying for an remote control event. [ 703.401730][ T918] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 703.430390][ T918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.447154][ T918] usb 1-1: config 0 descriptor?? [ 703.452782][ T5861] m920x_read = error: -19 [ 703.457213][ T5861] dvb-usb: error while querying for an remote control event. [ 703.503200][T13367] virtio-fs: tag not found [ 703.569765][ T9] m920x_read = error: -19 [ 703.574295][ T9] dvb-usb: error while querying for an remote control event. [ 703.647014][T13370] virtio-fs: tag not found [ 703.741262][ T9] m920x_read = error: -19 [ 703.809541][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 703.860852][ T5861] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 703.909156][ T9] dvb-usb: error while querying for an remote control event. [ 703.917656][ T9543] usb 1-1: USB disconnect, device number 48 [ 704.020626][ T918] m920x_read = error: -19 [ 704.025124][ T918] dvb-usb: error while querying for an remote control event. [ 704.071001][ T5861] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 704.079637][ T5861] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.100141][ T5861] usb 2-1: config 0 has no interface number 0 [ 704.106379][ T5861] usb 2-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 704.139929][ T918] m920x_read = error: -19 [ 704.144311][ T918] dvb-usb: error while querying for an remote control event. [ 704.175994][ T5861] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 704.187780][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.209442][ T5861] usb 2-1: Product: syz [ 704.223554][ T5861] usb 2-1: Manufacturer: syz [ 704.233435][ T5861] usb 2-1: SerialNumber: syz [ 704.253696][ T5861] usb 2-1: config 0 descriptor?? [ 704.263873][ T5861] symbolserial 2-1:0.175: required endpoints missing [ 704.289804][ T918] m920x_read = error: -19 [ 704.346016][ T918] dvb-usb: error while querying for an remote control event. [ 704.451409][T13386] syz.4.2046: attempt to access beyond end of device [ 704.451409][T13386] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 704.466974][T13386] syz.4.2046: attempt to access beyond end of device [ 704.466974][T13386] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 704.480465][T13386] Mount JFS Failure: -5 [ 704.484701][T13386] jfs_mount failed w/return code = -5 [ 704.565822][ T4575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 704.689937][ T918] m920x_read = error: -19 [ 704.731117][ T918] dvb-usb: error while querying for an remote control event. [ 704.824139][ T918] usb 2-1: USB disconnect, device number 37 [ 704.909775][ T5861] m920x_read = error: -19 [ 705.850304][ T5861] dvb-usb: error while querying for an remote control event. [ 706.030428][ T9] m920x_read = error: -19 [ 706.034911][ T9] dvb-usb: error while querying for an remote control event. [ 706.149481][ T9] m920x_read = error: -19 [ 706.159422][ T9] dvb-usb: error while querying for an remote control event. [ 706.508251][ T9] m920x_read = error: -19 [ 706.519876][ T9] dvb-usb: error while querying for an remote control event. [ 707.049674][ T9] m920x_read = error: -19 [ 707.054067][ T9] dvb-usb: error while querying for an remote control event. [ 707.072302][T13411] virtio-fs: tag not found [ 707.199881][ T9] m920x_read = error: -19 [ 707.204641][ T9] dvb-usb: error while querying for an remote control event. [ 707.662063][ T9] m920x_read = error: -19 [ 707.666449][ T9] dvb-usb: error while querying for an remote control event. [ 707.799612][ T9] m920x_read = error: -19 [ 707.804004][ T9] dvb-usb: error while querying for an remote control event. [ 707.939534][ T9] m920x_read = error: -19 [ 707.993139][T13426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.614476][ T9] dvb-usb: error while querying for an remote control event. [ 708.933660][T13433] netlink: 'syz.4.2059': attribute type 23 has an invalid length. [ 710.299514][ T9] m920x_read = error: -19 [ 710.303960][ T9] dvb-usb: error while querying for an remote control event. [ 710.305471][T10910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 710.470093][ T9] m920x_read = error: -19 [ 710.474467][ T9] dvb-usb: error while querying for an remote control event. [ 710.651243][ T9] m920x_read = error: -19 [ 710.669492][ T9] dvb-usb: error while querying for an remote control event. [ 710.854490][T13445] kAFS: No cell specified [ 710.916278][ T9] m920x_read = error: -19 [ 710.921844][ T9] dvb-usb: error while querying for an remote control event. [ 711.059010][ T918] m920x_read = error: -19 [ 711.064112][ T918] dvb-usb: error while querying for an remote control event. [ 711.411785][ T9543] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 711.469470][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 711.529455][ T918] m920x_read = error: -19 [ 711.533832][ T918] dvb-usb: error while querying for an remote control event. [ 711.721458][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 711.798389][ T918] m920x_read = error: -19 [ 711.799688][ T9543] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 711.841500][ T918] dvb-usb: error while querying for an remote control event. [ 712.297062][ T918] m920x_read = error: -19 [ 712.301520][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 712.312598][ T918] dvb-usb: error while querying for an remote control event. [ 712.321008][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 712.331125][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 712.351964][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 712.365324][T13452] virtio-fs: tag not found [ 712.395386][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.400209][ T9543] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.431245][ T5861] m920x_read = error: -19 [ 712.433834][ T9543] usb 5-1: config 0 has no interface number 0 [ 712.436700][ T9] usb 2-1: config 0 descriptor?? [ 712.451379][ T5861] dvb-usb: error while querying for an remote control event. [ 712.464124][ T9543] usb 5-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 712.484987][ T9543] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 712.496791][ T9543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.532423][ T9543] usb 5-1: Product: syz [ 712.569491][ T918] m920x_read = error: -19 [ 712.574083][ T918] dvb-usb: error while querying for an remote control event. [ 712.594105][ T9543] usb 5-1: Manufacturer: syz [ 712.598855][ T9543] usb 5-1: SerialNumber: syz [ 712.611990][ T9543] usb 5-1: config 0 descriptor?? [ 712.638487][ T9543] symbolserial 5-1:0.175: required endpoints missing [ 712.749652][ T918] m920x_read = error: -19 [ 712.785151][ T918] dvb-usb: error while querying for an remote control event. [ 712.880388][ T9] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 712.893822][ T9543] usb 5-1: USB disconnect, device number 39 [ 712.905580][ T918] m920x_read = error: -19 [ 712.921047][ T918] dvb-usb: error while querying for an remote control event. [ 712.937356][ T9] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 713.069856][ T918] m920x_read = error: -19 [ 713.083589][ T9] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 713.099232][ T918] dvb-usb: error while querying for an remote control event. [ 713.620665][ T9] m920x_read = error: -19 [ 713.643619][ T9] dvb-usb: error while querying for an remote control event. [ 713.897001][ T9] m920x_read = error: -19 [ 713.901500][ T9] dvb-usb: error while querying for an remote control event. [ 714.019754][ T9] m920x_read = error: -19 [ 714.024311][ T9] dvb-usb: error while querying for an remote control event. [ 714.179637][ T9] m920x_read = error: -19 [ 714.185860][ T9] dvb-usb: error while querying for an remote control event. [ 714.299436][ T918] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 714.323805][ T9387] m920x_read = error: -19 [ 714.328880][ T9387] dvb-usb: error while querying for an remote control event. [ 714.342461][ T5861] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 714.359705][T13488] kAFS: No cell specified [ 714.460800][ T9387] m920x_read = error: -19 [ 714.467385][ T9387] dvb-usb: error while querying for an remote control event. [ 714.489512][ T5861] usb 2-1: device descriptor read/64, error -32 [ 714.512727][ T918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 714.522794][ T918] usb 5-1: config 249 has an invalid interface number: 177 but max is 0 [ 714.531374][ T918] usb 5-1: config 249 has no interface number 0 [ 714.537706][ T918] usb 5-1: config 249 interface 177 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 714.551553][ T918] usb 5-1: config 249 interface 177 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.574773][ T918] usb 5-1: New USB device found, idVendor=057c, idProduct=3800, bcdDevice=5a.9d [ 714.696105][ T9387] m920x_read = error: -19 [ 714.715701][ T9387] dvb-usb: error while querying for an remote control event. [ 714.723282][ T918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.732422][ T918] usb 5-1: Product: syz [ 714.736630][ T918] usb 5-1: Manufacturer: syz [ 714.741524][ T918] usb 5-1: SerialNumber: syz [ 714.752537][T13478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 714.839569][ T9387] m920x_read = error: -19 [ 714.844004][ T9387] dvb-usb: error while querying for an remote control event. [ 714.869437][ T5861] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 714.953722][T13499] trusted_key: encrypted_key: insufficient parameters specified [ 715.259700][ T9387] m920x_read = error: -19 [ 715.264084][ T9387] dvb-usb: error while querying for an remote control event. [ 715.319810][ T918] usb 5-1: USB disconnect, device number 40 [ 715.479277][ T5886] m920x_read = error: -19 [ 715.484290][ T5886] dvb-usb: error while querying for an remote control event. [ 715.958796][ T5886] m920x_read = error: -19 [ 715.969486][ T5886] dvb-usb: error while querying for an remote control event. [ 716.036802][T13506] 9pnet: Could not find request transport: qnix [ 716.047022][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 716.111795][ T5886] m920x_read = error: -19 [ 716.679837][ T5886] dvb-usb: error while querying for an remote control event. [ 716.695179][ T9] usb 2-1: USB disconnect, device number 38 [ 716.890421][ T5886] m920x_read = error: -19 [ 716.962869][T13523] overlayfs: missing 'lowerdir' [ 717.356087][ T5886] dvb-usb: error while querying for an remote control event. [ 717.481511][ T9] m920x_read = error: -19 [ 717.781781][ T9] dvb-usb: error while querying for an remote control event. [ 718.055813][ T9] m920x_read = error: -19 [ 718.060590][ T9] dvb-usb: error while querying for an remote control event. [ 718.209515][ T9] m920x_read = error: -19 [ 718.213936][ T9] dvb-usb: error while querying for an remote control event. [ 718.341954][T13548] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 718.354731][ T9] m920x_read = error: -19 [ 718.360788][ T9] dvb-usb: error while querying for an remote control event. [ 718.470174][ T9] m920x_read = error: -19 [ 718.489123][ T9] dvb-usb: error while querying for an remote control event. [ 718.609810][ T9] m920x_read = error: -19 [ 718.614329][ T9] dvb-usb: error while querying for an remote control event. [ 718.740481][ T9] m920x_read = error: -19 [ 718.748026][ T9] dvb-usb: error while querying for an remote control event. [ 718.859592][ T9] m920x_read = error: -19 [ 718.864114][ T9] dvb-usb: error while querying for an remote control event. [ 718.979508][ T9] m920x_read = error: -19 [ 718.983950][ T9] dvb-usb: error while querying for an remote control event. [ 719.354871][ T9] m920x_read = error: -19 [ 719.369612][ T9] dvb-usb: error while querying for an remote control event. [ 719.480762][ T9] m920x_read = error: -19 [ 719.485186][ T9] dvb-usb: error while querying for an remote control event. [ 719.632035][T13568] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 720.039587][ T9] m920x_read = error: -19 [ 720.170635][ T9] dvb-usb: error while querying for an remote control event. [ 720.830280][T13574] overlayfs: missing 'lowerdir' [ 720.897371][T13577] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2098'. [ 720.924181][ T9] m920x_read = error: -19 [ 721.262999][ T9] dvb-usb: error while querying for an remote control event. [ 721.380905][ T9] m920x_read = error: -19 [ 721.403472][ T9] dvb-usb: error while querying for an remote control event. [ 721.804419][T13594] FAULT_INJECTION: forcing a failure. [ 721.804419][T13594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.817545][T13594] CPU: 1 UID: 0 PID: 13594 Comm: syz.1.2105 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(full) [ 721.817568][T13594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 721.817579][T13594] Call Trace: [ 721.817586][T13594] [ 721.817593][T13594] dump_stack_lvl+0x16c/0x1f0 [ 721.817616][T13594] should_fail_ex+0x512/0x640 [ 721.817637][T13594] _copy_from_user+0x2e/0xd0 [ 721.817657][T13594] restore_altstack+0x93/0x170 [ 721.817681][T13594] ? __pfx_restore_altstack+0x10/0x10 [ 721.817706][T13594] ? _raw_spin_unlock_irq+0x23/0x50 [ 721.817731][T13594] ? lockdep_hardirqs_on+0x7c/0x110 [ 721.817758][T13594] ? _raw_spin_unlock_irq+0x2e/0x50 [ 721.817782][T13594] ? set_current_blocked+0xdd/0x120 [ 721.817810][T13594] __do_sys_rt_sigreturn+0x13c/0x230 [ 721.817829][T13594] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 721.817855][T13594] ? __x86_indirect_its_thunk_r15+0x80/0x80 [ 721.817882][T13594] do_syscall_64+0xcd/0x4c0 [ 721.817903][T13594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.817920][T13594] RIP: 0033:0x7f174692ab39 [ 721.817934][T13594] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 721.817950][T13594] RSP: 002b:00007f174788b340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 721.817968][T13594] RAX: ffffffffffffffda RBX: 00007f1746bb6080 RCX: 00007f174692ab39 [ 721.817980][T13594] RDX: 00007f174788b340 RSI: 00007f174788b470 RDI: 0000000000000021 [ 721.817991][T13594] RBP: 00007f174788c090 R08: 0000000000000000 R09: 0000000000000000 [ 721.818002][T13594] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 721.818012][T13594] R13: 0000000000000000 R14: 00007f1746bb6080 R15: 00007ffd0e205838 [ 721.818036][T13594] [ 721.839428][ T5861] m920x_read = error: -19 [ 722.591850][ T5861] dvb-usb: error while querying for an remote control event. [ 722.707898][T10914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 722.720899][ T5861] m920x_read = error: -19 [ 722.725213][ T5861] dvb-usb: error while querying for an remote control event. [ 722.866621][ T9] m920x_read = error: -19 [ 722.883756][ T9] dvb-usb: error while querying for an remote control event. [ 723.099529][ T5861] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 723.332812][T13607] FAULT_INJECTION: forcing a failure. [ 723.332812][T13607] name failslab, interval 1, probability 0, space 0, times 0 [ 723.347342][ T9] m920x_read = error: -19 [ 723.351785][ T9] dvb-usb: error while querying for an remote control event. [ 723.358976][T13607] CPU: 1 UID: 0 PID: 13607 Comm: syz.0.2108 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(full) [ 723.358999][T13607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 723.359008][T13607] Call Trace: [ 723.359014][T13607] [ 723.359021][T13607] dump_stack_lvl+0x16c/0x1f0 [ 723.359041][T13607] should_fail_ex+0x512/0x640 [ 723.359056][T13607] ? __kvmalloc_node_noprof+0x122/0x620 [ 723.359082][T13607] should_failslab+0xc2/0x120 [ 723.359099][T13607] __kvmalloc_node_noprof+0x135/0x620 [ 723.359123][T13607] ? bucket_table_alloc.isra.0+0x83/0x460 [ 723.359161][T13607] ? bucket_table_alloc.isra.0+0x83/0x460 [ 723.359184][T13607] bucket_table_alloc.isra.0+0x83/0x460 [ 723.359209][T13607] rhashtable_init_noprof+0x41a/0x7e0 [ 723.359235][T13607] rhltable_init_noprof+0x20/0x60 [ 723.359257][T13607] nf_tables_newtable+0xf94/0x1b40 [ 723.359277][T13607] ? __pfx___nla_validate_parse+0x10/0x10 [ 723.359297][T13607] ? __pfx_nf_tables_newtable+0x10/0x10 [ 723.359322][T13607] ? __nla_parse+0x40/0x60 [ 723.359343][T13607] nfnetlink_rcv_batch+0x190b/0x2350 [ 723.359373][T13607] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 723.359389][T13607] ? find_held_lock+0x2b/0x80 [ 723.359424][T13607] ? avc_has_perm_noaudit+0x149/0x3b0 [ 723.359471][T13607] ? __nla_parse+0x40/0x60 [ 723.359491][T13607] nfnetlink_rcv+0x3c1/0x430 [ 723.359507][T13607] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 723.359529][T13607] netlink_unicast+0x53d/0x7f0 [ 723.359554][T13607] ? __pfx_netlink_unicast+0x10/0x10 [ 723.359583][T13607] netlink_sendmsg+0x8d1/0xdd0 [ 723.359608][T13607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.359639][T13607] ____sys_sendmsg+0xa95/0xc70 [ 723.359656][T13607] ? copy_msghdr_from_user+0x10a/0x160 [ 723.359676][T13607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.359703][T13607] ___sys_sendmsg+0x134/0x1d0 [ 723.359724][T13607] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.359741][T13607] ? __lock_acquire+0x622/0x1c90 [ 723.359794][T13607] __sys_sendmsg+0x16d/0x220 [ 723.359813][T13607] ? __pfx___sys_sendmsg+0x10/0x10 [ 723.359851][T13607] do_syscall_64+0xcd/0x4c0 [ 723.359868][T13607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.359883][T13607] RIP: 0033:0x7fcae138e969 [ 723.359897][T13607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.359911][T13607] RSP: 002b:00007fcadf1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.359925][T13607] RAX: ffffffffffffffda RBX: 00007fcae15b6080 RCX: 00007fcae138e969 [ 723.359935][T13607] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 723.359944][T13607] RBP: 00007fcadf1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 723.359953][T13607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.359961][T13607] R13: 0000000000000000 R14: 00007fcae15b6080 R15: 00007ffd55239cb8 [ 723.359982][T13607] [ 723.689399][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 723.696205][ T5861] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.707899][ T5861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 723.728458][ T5861] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 723.743814][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.761229][ T5861] usb 4-1: Product: syz [ 723.765440][ T5861] usb 4-1: Manufacturer: syz [ 723.772335][ T5861] usb 4-1: SerialNumber: syz [ 723.782119][ T9] m920x_read = error: -19 [ 723.786460][ T9] dvb-usb: error while querying for an remote control event. [ 723.909908][ T9] m920x_read = error: -19 [ 723.914427][ T9] dvb-usb: error while querying for an remote control event. [ 723.930110][T13617] virtio-fs: tag not found [ 724.030146][ T9] m920x_read = error: -19 [ 724.045739][ T9] dvb-usb: error while querying for an remote control event. [ 724.159517][ T9] m920x_read = error: -19 [ 724.167824][ T9] dvb-usb: error while querying for an remote control event. [ 724.289885][ T9] m920x_read = error: -19 [ 724.294331][ T9] dvb-usb: error while querying for an remote control event. [ 724.479896][T13624] syz.1.2113: attempt to access beyond end of device [ 724.479896][T13624] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 724.493355][T13624] syz.1.2113: attempt to access beyond end of device [ 724.493355][T13624] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 724.506533][T13624] Mount JFS Failure: -5 [ 724.510937][T13624] jfs_mount failed w/return code = -5 [ 724.731227][ T9] m920x_read = error: -19 [ 725.210508][ T9] dvb-usb: error while querying for an remote control event. [ 725.285044][ T5861] usb 4-1: USB disconnect, device number 56 [ 725.370882][ T9] m920x_read = error: -19 [ 725.375284][ T9] dvb-usb: error while querying for an remote control event. [ 725.509800][ T918] m920x_read = error: -19 [ 725.630564][ T918] dvb-usb: error while querying for an remote control event. [ 725.810242][ T918] m920x_read = error: -19 [ 725.814984][ T918] dvb-usb: error while querying for an remote control event. [ 725.937997][ T918] m920x_read = error: -19 [ 725.946810][ T918] dvb-usb: error while querying for an remote control event. [ 726.296309][ T918] m920x_read = error: -19 [ 726.309531][ T918] dvb-usb: error while querying for an remote control event. [ 726.397685][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2121'. [ 726.423918][T13637] 9pnet: Could not find request transport: qnix [ 726.460919][ T918] m920x_read = error: -19 [ 726.467008][ T918] dvb-usb: error while querying for an remote control event. [ 726.502071][T13651] virtio-fs: tag not found [ 726.560870][ T30] audit: type=1400 audit(1748477241.937:1980): avc: denied { connect } for pid=13654 comm="syz.2.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 726.591800][ T918] m920x_read = error: -19 [ 726.602706][ T30] audit: type=1326 audit(1748477241.967:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13654 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad238e969 code=0x7ffc0000 [ 726.606773][ T918] dvb-usb: error while querying for an remote control event. [ 726.641426][ T30] audit: type=1326 audit(1748477241.967:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13654 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad238e969 code=0x7ffc0000 [ 726.665350][ T30] audit: type=1326 audit(1748477241.967:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13654 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f6ad238e969 code=0x7ffc0000 [ 726.712516][ T30] audit: type=1326 audit(1748477241.967:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13654 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad238e969 code=0x7ffc0000 [ 726.739546][ T30] audit: type=1326 audit(1748477241.967:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13654 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad238e969 code=0x7ffc0000 [ 726.763284][ T30] audit: type=1326 audit(1748477241.967:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13654 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6ad238e969 code=0x7ffc0000 [ 726.789661][ T30] audit: type=1326 audit(1748477241.967:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13654 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad238e969 code=0x7ffc0000 [ 726.820152][ T918] m920x_read = error: -19 [ 726.831793][ T918] dvb-usb: error while querying for an remote control event. [ 726.993963][ T30] audit: type=1326 audit(1748477241.967:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13654 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad238e969 code=0x7ffc0000 [ 727.158126][ T918] m920x_read = error: -19 [ 727.162763][ T918] dvb-usb: error while querying for an remote control event. [ 727.279727][ T918] m920x_read = error: -19 [ 727.317936][ T918] dvb-usb: error while querying for an remote control event. [ 727.661029][ T918] m920x_read = error: -19 [ 727.695380][ T918] dvb-usb: error while querying for an remote control event. [ 728.051644][ T918] m920x_read = error: -19 [ 728.056008][ T918] dvb-usb: error while querying for an remote control event. [ 728.467993][T10179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 728.569549][ T9] m920x_read = error: -19 [ 728.573918][ T9] dvb-usb: error while querying for an remote control event. [ 728.739765][ T9] m920x_read = error: -19 [ 728.744104][ T9] dvb-usb: error while querying for an remote control event. [ 728.864412][T13703] virtio-fs: tag not found [ 728.869702][ T9] m920x_read = error: -19 [ 728.871956][ T9543] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 728.884146][ T30] audit: type=1400 audit(1748477244.257:1989): avc: denied { mount } for pid=13700 comm="syz.1.2133" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 728.884491][T13702] FAULT_INJECTION: forcing a failure. [ 728.884491][T13702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.919546][ T9] dvb-usb: error while querying for an remote control event. [ 728.999319][T13702] CPU: 1 UID: 0 PID: 13702 Comm: syz.1.2133 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(full) [ 728.999344][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 728.999354][T13702] Call Trace: [ 728.999360][T13702] [ 728.999367][T13702] dump_stack_lvl+0x16c/0x1f0 [ 728.999388][T13702] should_fail_ex+0x512/0x640 [ 728.999409][T13702] _copy_from_user+0x2e/0xd0 [ 728.999428][T13702] memdup_user+0x6b/0xe0 [ 728.999448][T13702] strndup_user+0x78/0xe0 [ 728.999467][T13702] __x64_sys_mount+0x137/0x310 [ 728.999488][T13702] ? __pfx___x64_sys_mount+0x10/0x10 [ 728.999516][T13702] do_syscall_64+0xcd/0x4c0 [ 728.999534][T13702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.999552][T13702] RIP: 0033:0x7f174698e969 [ 728.999566][T13702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.999582][T13702] RSP: 002b:00007f17478ad038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 728.999598][T13702] RAX: ffffffffffffffda RBX: 00007f1746bb5fa0 RCX: 00007f174698e969 [ 728.999609][T13702] RDX: 0000200000000340 RSI: 0000200000000080 RDI: 0000000000000000 [ 728.999620][T13702] RBP: 00007f17478ad090 R08: 0000200000000240 R09: 0000000000000000 [ 728.999631][T13702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.999641][T13702] R13: 0000000000000000 R14: 00007f1746bb5fa0 R15: 00007ffd0e205838 [ 728.999665][T13702] [ 729.146521][ T9] m920x_read = error: -19 [ 729.150961][ T9] dvb-usb: error while querying for an remote control event. [ 729.334822][ T918] m920x_read = error: -19 [ 729.339213][ T918] dvb-usb: error while querying for an remote control event. [ 729.346976][ T5886] IPVS: starting estimator thread 0... [ 729.387789][ T9543] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.411001][ T9543] usb 4-1: config 0 has no interfaces? [ 729.416725][ T9543] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 729.451354][T13712] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 729.494856][ T9543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.503275][T13711] IPVS: using max 39 ests per chain, 93600 per kthread [ 729.511770][ T9543] usb 4-1: config 0 descriptor?? [ 729.622782][ T918] m920x_read = error: -19 [ 729.627171][ T918] dvb-usb: error while querying for an remote control event. [ 730.117430][ T918] m920x_read = error: -19 [ 730.124273][ T918] dvb-usb: error while querying for an remote control event. [ 730.132538][T13717] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2138'. [ 730.147971][T13725] overlayfs: statfs failed on './file1' [ 730.239590][ T918] m920x_read = error: -19 [ 730.243965][ T918] dvb-usb: error while querying for an remote control event. [ 730.359742][ T918] m920x_read = error: -19 [ 730.364202][ T918] dvb-usb: error while querying for an remote control event. [ 730.480395][ T918] m920x_read = error: -19 [ 730.492865][ T918] dvb-usb: error while querying for an remote control event. [ 730.669914][ T918] m920x_read = error: -19 [ 730.679628][ T918] dvb-usb: error while querying for an remote control event. [ 730.695464][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2141'. [ 730.789548][ T5886] m920x_read = error: -19 [ 730.984585][ T5886] dvb-usb: error while querying for an remote control event. [ 731.543116][T13739] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 731.842139][ T5886] m920x_read = error: -19 [ 731.867651][ T5886] dvb-usb: error while querying for an remote control event. [ 732.210049][ T5886] m920x_read = error: -19 [ 732.241329][ T5886] dvb-usb: error while querying for an remote control event. [ 732.470403][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 732.470419][ T30] audit: type=1400 audit(1748477247.657:1993): avc: denied { connect } for pid=13740 comm="syz.4.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 732.542334][T13748] kAFS: No cell specified [ 732.759669][ T5886] m920x_read = error: -19 [ 733.016689][T13749] virtio-fs: tag not found [ 733.159918][ T5886] dvb-usb: error while querying for an remote control event. [ 733.191750][T13754] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2147'. [ 733.345268][ T5886] m920x_read = error: -19 [ 733.687539][ T7467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 733.903364][ T5886] dvb-usb: error while querying for an remote control event. [ 733.940558][T13761] syz.1.2145: attempt to access beyond end of device [ 733.940558][T13761] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 733.956854][T13761] syz.1.2145: attempt to access beyond end of device [ 733.956854][T13761] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 733.971056][T13761] Mount JFS Failure: -5 [ 733.975353][T13761] jfs_mount failed w/return code = -5 [ 734.189257][ T5886] m920x_read = error: -19 [ 734.206117][ T5886] dvb-usb: error while querying for an remote control event. [ 734.278816][ T9543] usb 4-1: USB disconnect, device number 57 [ 734.319588][ T5886] m920x_read = error: -19 [ 734.325069][ T5886] dvb-usb: error while querying for an remote control event. [ 734.443543][ T30] audit: type=1400 audit(1748477249.827:1994): avc: denied { getopt } for pid=13763 comm="syz.4.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 734.463515][ T5886] m920x_read = error: -19 [ 734.477514][ T5886] dvb-usb: error while querying for an remote control event. [ 734.533588][ T30] audit: type=1400 audit(1748477249.857:1995): avc: denied { getopt } for pid=13763 comm="syz.4.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 734.629438][ T5886] m920x_read = error: -19 [ 734.633820][ T5886] dvb-usb: error while querying for an remote control event. [ 734.662765][ T30] audit: type=1400 audit(1748477249.957:1996): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 734.846329][T13776] Bluetooth: MGMT ver 1.23 [ 734.864392][ T5886] m920x_read = error: -19 [ 734.978066][ T5886] dvb-usb: error while querying for an remote control event. [ 735.021195][ T30] audit: type=1400 audit(1748477250.157:1997): avc: denied { bind } for pid=13772 comm="syz.4.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 735.119430][ T5886] m920x_read = error: -19 [ 735.123935][ T5886] dvb-usb: error while querying for an remote control event. [ 735.382141][ T5861] m920x_read = error: -19 [ 735.390640][ T5861] dvb-usb: error while querying for an remote control event. [ 735.730165][ T5861] m920x_read = error: -19 [ 735.849849][T13781] 9pnet: Could not find request transport: qnix [ 736.046355][ T5861] dvb-usb: error while querying for an remote control event. [ 736.649453][ T5861] m920x_read = error: -19 [ 736.663956][ T5861] dvb-usb: error while querying for an remote control event. [ 736.897542][T13780] Set syz1 is full, maxelem 65536 reached [ 736.945279][ T5861] m920x_read = error: -19 [ 736.961965][ T5861] dvb-usb: error while querying for an remote control event. [ 737.089960][ T5886] m920x_read = error: -19 [ 737.094335][ T5886] dvb-usb: error while querying for an remote control event. [ 737.979825][ T5861] m920x_read = error: -19 [ 737.984197][ T5861] dvb-usb: error while querying for an remote control event. [ 738.110333][ T5861] m920x_read = error: -19 [ 738.114701][ T5861] dvb-usb: error while querying for an remote control event. [ 738.882193][ T30] audit: type=1400 audit(1748477253.867:1998): avc: denied { setopt } for pid=13799 comm="syz.0.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 738.885748][ T5861] m920x_read = error: -19 [ 739.048598][ T5861] dvb-usb: error while querying for an remote control event. [ 739.450469][ T5861] m920x_read = error: -19 [ 739.455321][ T5861] dvb-usb: error while querying for an remote control event. [ 739.488204][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2157'. [ 739.594970][T13813] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 739.629551][ T9543] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 739.729518][ T4575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 739.834951][ T9543] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 739.892989][ T9543] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.926973][ T5861] m920x_read = error: -19 [ 739.931388][ T5861] dvb-usb: error while querying for an remote control event. [ 740.069024][ T918] m920x_read = error: -19 [ 740.076260][ T918] dvb-usb: error while querying for an remote control event. [ 740.085604][T13818] syz.1.2161: attempt to access beyond end of device [ 740.085604][T13818] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 740.100449][T13818] syz.1.2161: attempt to access beyond end of device [ 740.100449][T13818] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 740.113645][T13818] Mount JFS Failure: -5 [ 740.117882][T13818] jfs_mount failed w/return code = -5 [ 740.412956][ T9543] usb 4-1: config 0 has no interface number 0 [ 740.419127][ T9543] usb 4-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 740.435065][ T9543] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 740.445487][ T9543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.453597][ T9543] usb 4-1: Product: syz [ 740.457812][ T9543] usb 4-1: Manufacturer: syz [ 740.462509][ T9543] usb 4-1: SerialNumber: syz [ 740.539458][ T918] m920x_read = error: -19 [ 740.544036][ T918] dvb-usb: error while querying for an remote control event. [ 740.573802][ T9543] usb 4-1: config 0 descriptor?? [ 740.580523][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 740.588013][ T9543] symbolserial 4-1:0.175: required endpoints missing [ 740.886601][ T918] m920x_read = error: -19 [ 740.897616][ T918] dvb-usb: error while querying for an remote control event. [ 740.917138][ T9543] usb 4-1: USB disconnect, device number 58 [ 740.997906][ T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 741.007507][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.015884][ T5886] m920x_read = error: -19 [ 741.020918][ T5886] dvb-usb: error while querying for an remote control event. [ 741.030932][ T9] usb 5-1: config 0 descriptor?? [ 741.067964][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2164'. [ 741.139693][ T5886] m920x_read = error: -19 [ 741.144152][ T5886] dvb-usb: error while querying for an remote control event. [ 741.519987][T13830] 9pnet: Could not find request transport: qnix [ 741.579702][ T5886] m920x_read = error: -19 [ 741.588260][ T5886] dvb-usb: error while querying for an remote control event. [ 741.667221][T13835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.225860][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 744.253244][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 744.280013][ T5886] m920x_read = error: -19 [ 744.355929][ T5886] dvb-usb: error while querying for an remote control event. [ 744.416519][ T9] usb 5-1: USB disconnect, device number 41 [ 744.526428][T13846] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2168'. [ 744.916484][ T918] m920x_read = error: -19 [ 744.926330][T10914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 744.938932][ T918] dvb-usb: error while querying for an remote control event. [ 745.185783][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2169'. [ 745.249502][ T918] m920x_read = error: -19 [ 745.323767][ T918] dvb-usb: error while querying for an remote control event. [ 745.439568][ T5886] m920x_read = error: -19 [ 745.444041][ T5886] dvb-usb: error while querying for an remote control event. [ 745.559553][ T5886] m920x_read = error: -19 [ 745.563942][ T5886] dvb-usb: error while querying for an remote control event. [ 745.765032][T13855] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2172'. [ 745.998833][ T5886] m920x_read = error: -19 [ 746.012393][ T5886] dvb-usb: error while querying for an remote control event. [ 746.049413][ T9] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 746.163097][T13857] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 746.181017][ T5886] m920x_read = error: -19 [ 746.185366][ T5886] dvb-usb: error while querying for an remote control event. [ 746.201508][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 746.215543][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.228375][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 746.238489][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.255006][ T9] usb 1-1: config 0 descriptor?? [ 746.299575][ T5886] m920x_read = error: -19 [ 746.361685][T13862] xt_hashlimit: size too large, truncated to 1048576 [ 746.521765][T13864] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2174'. [ 746.796939][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.810641][ T5886] dvb-usb: error while querying for an remote control event. [ 746.836717][T13866] kAFS: No cell specified [ 746.929658][ T5886] m920x_read = error: -19 [ 746.936967][ T5886] dvb-usb: error while querying for an remote control event. [ 747.125968][ T918] m920x_read = error: -19 [ 747.157086][ T918] dvb-usb: error while querying for an remote control event. [ 747.299459][ T918] m920x_read = error: -19 [ 747.308197][ T918] dvb-usb: error while querying for an remote control event. [ 747.349454][ T5886] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 747.429759][ T918] m920x_read = error: -19 [ 747.434229][ T918] dvb-usb: error while querying for an remote control event. [ 747.521063][ T5886] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 747.540488][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.607259][T13883] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2179'. [ 748.058777][ T5886] usb 2-1: config 0 descriptor?? [ 748.064980][ T918] m920x_read = error: -19 [ 748.070229][ T918] dvb-usb: error while querying for an remote control event. [ 748.185164][ T918] m920x_read = error: -19 [ 748.200791][ T918] dvb-usb: error while querying for an remote control event. [ 748.352328][ T5886] m920x_read = error: -19 [ 748.357361][ T918] usb 2-1: USB disconnect, device number 39 [ 748.400272][T13882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 748.400821][ T5886] dvb-usb: error while querying for an remote control event. [ 748.616344][ T5886] m920x_read = error: -19 [ 748.629258][ T5886] dvb-usb: error while querying for an remote control event. [ 748.740086][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 748.779441][ T5886] m920x_read = error: -19 [ 748.783904][ T5886] dvb-usb: error while querying for an remote control event. [ 748.802244][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 748.899998][ T9] usb 1-1: USB disconnect, device number 49 [ 748.970394][ T5886] m920x_read = error: -19 [ 748.987530][ T5886] dvb-usb: error while querying for an remote control event. [ 749.129454][ T5886] m920x_read = error: -19 [ 749.137303][ T5886] dvb-usb: error while querying for an remote control event. [ 749.701165][T13901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 749.750409][ T5886] m920x_read = error: -19 [ 752.101282][ T5886] dvb-usb: error while querying for an remote control event. [ 752.167898][ T4575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.267134][ T5886] m920x_read = error: -19 [ 752.277593][ T5886] dvb-usb: error while querying for an remote control event. [ 752.945132][ T9] m920x_read = error: -19 [ 752.949632][ T9] dvb-usb: error while querying for an remote control event. [ 753.082330][ T9] m920x_read = error: -19 [ 753.104246][ T9] dvb-usb: error while querying for an remote control event. [ 753.236356][ T9] m920x_read = error: -19 [ 753.253284][ T9] dvb-usb: error while querying for an remote control event. [ 753.405436][ T5886] m920x_read = error: -19 [ 753.498845][T13921] xt_hashlimit: size too large, truncated to 1048576 [ 753.700464][T13923] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2188'. [ 753.876220][ T5886] dvb-usb: error while querying for an remote control event. [ 754.003552][ T9] m920x_read = error: -19 [ 754.022924][ T9] dvb-usb: error while querying for an remote control event. [ 754.185320][ T5886] m920x_read = error: -19 [ 754.196192][ T5886] dvb-usb: error while querying for an remote control event. [ 754.339725][ T9] m920x_read = error: -19 [ 754.355675][ T9] dvb-usb: error while querying for an remote control event. [ 754.509541][ T9] m920x_read = error: -19 [ 754.524701][ T9] dvb-usb: error while querying for an remote control event. [ 754.679963][ T9] m920x_read = error: -19 [ 754.684339][ T9] dvb-usb: error while querying for an remote control event. [ 754.790949][T13942] random: crng reseeded on system resumption [ 754.798219][T13942] FAULT_INJECTION: forcing a failure. [ 754.798219][T13942] name failslab, interval 1, probability 0, space 0, times 0 [ 754.811918][T13942] CPU: 1 UID: 0 PID: 13942 Comm: syz.1.2193 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(full) [ 754.811944][T13942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 754.811955][T13942] Call Trace: [ 754.811961][T13942] [ 754.811968][T13942] dump_stack_lvl+0x16c/0x1f0 [ 754.811990][T13942] should_fail_ex+0x512/0x640 [ 754.812012][T13942] should_failslab+0xc2/0x120 [ 754.812032][T13942] __kmalloc_cache_noprof+0x6a/0x3e0 [ 754.812056][T13942] ? do_raw_spin_lock+0x12c/0x2b0 [ 754.812082][T13942] ? find_held_lock+0x2b/0x80 [ 754.812098][T13942] ? async_schedule_node_domain+0x54/0x120 [ 754.812122][T13942] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 754.812148][T13942] async_schedule_node_domain+0x54/0x120 [ 754.812170][T13942] dev_cache_fw_image+0x38e/0x490 [ 754.812196][T13942] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 754.812223][T13942] ? dev_cache_fw_image+0x398/0x490 [ 754.812246][T13942] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 754.812270][T13942] dpm_for_each_dev+0x5a/0xb0 [ 754.812294][T13942] fw_pm_notify+0x81/0x150 [ 754.812315][T13942] notifier_call_chain+0xbc/0x410 [ 754.812335][T13942] ? __pfx_fw_pm_notify+0x10/0x10 [ 754.812364][T13942] blocking_notifier_call_chain_robust+0xc8/0x160 [ 754.812388][T13942] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 754.812420][T13942] pm_notifier_call_chain_robust+0x27/0x60 [ 754.812444][T13942] snapshot_open+0x218/0x2b0 [ 754.812465][T13942] ? __pfx_snapshot_open+0x10/0x10 [ 754.812486][T13942] misc_open+0x35a/0x420 [ 754.812510][T13942] ? __pfx_misc_open+0x10/0x10 [ 754.812532][T13942] chrdev_open+0x231/0x6a0 [ 754.812552][T13942] ? __pfx_chrdev_open+0x10/0x10 [ 754.812572][T13942] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 754.812605][T13942] do_dentry_open+0x744/0x1c10 [ 754.812632][T13942] ? __pfx_chrdev_open+0x10/0x10 [ 754.812656][T13942] vfs_open+0x82/0x3f0 [ 754.812680][T13942] path_openat+0x1de4/0x2cb0 [ 754.812708][T13942] ? __pfx_path_openat+0x10/0x10 [ 754.812731][T13942] ? __lock_acquire+0xb8a/0x1c90 [ 754.812758][T13942] do_filp_open+0x20b/0x470 [ 754.812776][T13942] ? __pfx_do_filp_open+0x10/0x10 [ 754.812815][T13942] ? alloc_fd+0x471/0x7d0 [ 754.812840][T13942] do_sys_openat2+0x11b/0x1d0 [ 754.812861][T13942] ? __pfx_do_sys_openat2+0x10/0x10 [ 754.812890][T13942] ? __pfx___schedule+0x10/0x10 [ 754.812914][T13942] ? __fget_files+0x20e/0x3c0 [ 754.812936][T13942] __x64_sys_openat+0x174/0x210 [ 754.812958][T13942] ? __pfx___x64_sys_openat+0x10/0x10 [ 754.812977][T13942] ? ksys_write+0x1ac/0x250 [ 754.813013][T13942] do_syscall_64+0xcd/0x4c0 [ 754.813033][T13942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.813050][T13942] RIP: 0033:0x7f174698e969 [ 754.813066][T13942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.813082][T13942] RSP: 002b:00007f174786b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 754.813099][T13942] RAX: ffffffffffffffda RBX: 00007f1746bb6160 RCX: 00007f174698e969 [ 754.813111][T13942] RDX: 00000000000c2d41 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 754.813121][T13942] RBP: 00007f174786b090 R08: 0000000000000000 R09: 0000000000000000 [ 754.813130][T13942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.813140][T13942] R13: 0000000000000000 R14: 00007f1746bb6160 R15: 00007ffd0e205838 [ 754.813164][T13942] [ 755.160944][T13942] [ 755.163302][T13942] ============================================ [ 755.169447][T13942] WARNING: possible recursive locking detected [ 755.175596][T13942] 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 Not tainted [ 755.182359][T13942] -------------------------------------------- [ 755.188502][T13942] syz.1.2193/13942 is trying to acquire lock: [ 755.194539][T13942] ffffffff8f304948 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x640 [ 755.202428][T13942] [ 755.202428][T13942] but task is already holding lock: [ 755.209762][T13942] ffffffff8f304948 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 755.217917][T13942] [ 755.217917][T13942] other info that might help us debug this: [ 755.225948][T13942] Possible unsafe locking scenario: [ 755.225948][T13942] [ 755.233385][T13942] CPU0 [ 755.236651][T13942] ---- [ 755.239913][T13942] lock(fw_lock); [ 755.243608][T13942] lock(fw_lock); [ 755.247310][T13942] [ 755.247310][T13942] *** DEADLOCK *** [ 755.247310][T13942] [ 755.255423][T13942] May be due to missing lock nesting notation [ 755.255423][T13942] [ 755.263711][T13942] 5 locks held by syz.1.2193/13942: [ 755.268881][T13942] #0: ffffffff8f0f4948 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 755.277291][T13942] #1: ffffffff8e2861a8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 755.287610][T13942] #2: ffffffff8e2c62d0 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 755.299416][T13942] #3: ffffffff8f304948 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 755.308000][T13942] #4: ffffffff8f2ff348 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 755.317274][T13942] [ 755.317274][T13942] stack backtrace: [ 755.323138][T13942] CPU: 1 UID: 0 PID: 13942 Comm: syz.1.2193 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(full) [ 755.323152][T13942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.323159][T13942] Call Trace: [ 755.323163][T13942] [ 755.323167][T13942] dump_stack_lvl+0x116/0x1f0 [ 755.323178][T13942] print_deadlock_bug+0x1e9/0x240 [ 755.323192][T13942] __lock_acquire+0x1106/0x1c90 [ 755.323207][T13942] ? __kasan_slab_free+0x51/0x70 [ 755.323218][T13942] lock_acquire+0x179/0x350 [ 755.323232][T13942] ? assign_fw+0x4e/0x640 [ 755.323246][T13942] ? __pfx___might_resched+0x10/0x10 [ 755.323257][T13942] ? do_sys_openat2+0x11b/0x1d0 [ 755.323269][T13942] ? __x64_sys_openat+0x174/0x210 [ 755.323282][T13942] ? do_syscall_64+0xcd/0x4c0 [ 755.323293][T13942] __mutex_lock+0x199/0xb90 [ 755.323304][T13942] ? assign_fw+0x4e/0x640 [ 755.323318][T13942] ? assign_fw+0x4e/0x640 [ 755.323332][T13942] ? __pfx___mutex_lock+0x10/0x10 [ 755.323344][T13942] ? kasan_quarantine_put+0x10a/0x240 [ 755.323360][T13942] ? lockdep_hardirqs_on+0x7c/0x110 [ 755.323377][T13942] ? assign_fw+0x4e/0x640 [ 755.323390][T13942] assign_fw+0x4e/0x640 [ 755.323403][T13942] ? _request_firmware+0x957/0x1470 [ 755.323419][T13942] _request_firmware+0x988/0x1470 [ 755.323436][T13942] ? __pfx__request_firmware+0x10/0x10 [ 755.323451][T13942] ? dump_stack_lvl+0x197/0x1f0 [ 755.323461][T13942] ? dump_stack_lvl+0x1a3/0x1f0 [ 755.323471][T13942] __async_dev_cache_fw_image+0xb1/0x340 [ 755.323487][T13942] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 755.323504][T13942] ? mark_held_locks+0x49/0x80 [ 755.323516][T13942] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 755.323532][T13942] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 755.323548][T13942] async_schedule_node_domain+0xd4/0x120 [ 755.323561][T13942] dev_cache_fw_image+0x38e/0x490 [ 755.323576][T13942] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 755.323591][T13942] ? dev_cache_fw_image+0x398/0x490 [ 755.323604][T13942] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 755.323619][T13942] dpm_for_each_dev+0x5a/0xb0 [ 755.323632][T13942] fw_pm_notify+0x81/0x150 [ 755.323645][T13942] notifier_call_chain+0xbc/0x410 [ 755.323656][T13942] ? __pfx_fw_pm_notify+0x10/0x10 [ 755.323671][T13942] blocking_notifier_call_chain_robust+0xc8/0x160 [ 755.323685][T13942] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 755.323700][T13942] pm_notifier_call_chain_robust+0x27/0x60 [ 755.323715][T13942] snapshot_open+0x218/0x2b0 [ 755.323727][T13942] ? __pfx_snapshot_open+0x10/0x10 [ 755.323739][T13942] misc_open+0x35a/0x420 [ 755.323752][T13942] ? __pfx_misc_open+0x10/0x10 [ 755.323765][T13942] chrdev_open+0x231/0x6a0 [ 755.323777][T13942] ? __pfx_chrdev_open+0x10/0x10 [ 755.323787][T13942] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 755.323806][T13942] do_dentry_open+0x744/0x1c10 [ 755.323822][T13942] ? __pfx_chrdev_open+0x10/0x10 [ 755.323833][T13942] vfs_open+0x82/0x3f0 [ 755.323846][T13942] path_openat+0x1de4/0x2cb0 [ 755.323858][T13942] ? __pfx_path_openat+0x10/0x10 [ 755.323871][T13942] ? __lock_acquire+0xb8a/0x1c90 [ 755.323885][T13942] do_filp_open+0x20b/0x470 [ 755.323894][T13942] ? __pfx_do_filp_open+0x10/0x10 [ 755.323908][T13942] ? alloc_fd+0x471/0x7d0 [ 755.323919][T13942] do_sys_openat2+0x11b/0x1d0 [ 755.323931][T13942] ? __pfx_do_sys_openat2+0x10/0x10 [ 755.323943][T13942] ? __pfx___schedule+0x10/0x10 [ 755.323958][T13942] ? __fget_files+0x20e/0x3c0 [ 755.323969][T13942] __x64_sys_openat+0x174/0x210 [ 755.323981][T13942] ? __pfx___x64_sys_openat+0x10/0x10 [ 755.323993][T13942] ? ksys_write+0x1ac/0x250 [ 755.324010][T13942] do_syscall_64+0xcd/0x4c0 [ 755.324020][T13942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.324031][T13942] RIP: 0033:0x7f174698e969 [ 755.324040][T13942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.324051][T13942] RSP: 002b:00007f174786b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 755.324060][T13942] RAX: ffffffffffffffda RBX: 00007f1746bb6160 RCX: 00007f174698e969 [ 755.324067][T13942] RDX: 00000000000c2d41 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 755.324074][T13942] RBP: 00007f174786b090 R08: 0000000000000000 R09: 0000000000000000 [ 755.324079][T13942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.324085][T13942] R13: 0000000000000000 R14: 00007f1746bb6160 R15: 00007ffd0e205838 [ 755.324095][T13942] [ 755.767002][ T9] m920x_read = error: -19 [ 755.792943][ T9] dvb-usb: error while querying for an remote control event. [ 756.879519][ T9] m920x_read = error: -19 [ 756.883928][ T9] dvb-usb: error while querying for an remote control event. [ 756.999502][ T9] m920x_read = error: -19 [ 757.003888][ T9] dvb-usb: error while querying for an remote control event. [ 757.119478][ T9] m920x_read = error: -19 [ 757.123837][ T9] dvb-usb: error while querying for an remote control event. [ 757.239710][ T9] m920x_read = error: -19 [ 757.244091][ T9] dvb-usb: error while querying for an remote control event. [ 757.319694][T10179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.359642][ T9] m920x_read = error: -19 [ 757.364071][ T9] dvb-usb: error while querying for an remote control event. [ 757.480418][ T9] m920x_read = error: -19 [ 757.484784][ T9] dvb-usb: error while querying for an remote control event. [ 757.600052][ T9] m920x_read = error: -19 [ 757.604430][ T9] dvb-usb: error while querying for an remote control event. [ 757.719481][ T9] m920x_read = error: -19 [ 757.723872][ T9] dvb-usb: error while querying for an remote control event. [ 757.839758][ T9] m920x_read = error: -19 [ 757.844205][ T9] dvb-usb: error while querying for an remote control event. [ 757.960134][ T9] m920x_read = error: -19 [ 757.964488][ T9] dvb-usb: error while querying for an remote control event. [ 758.079488][ T9] m920x_read = error: -19 [ 758.083874][ T9] dvb-usb: error while querying for an remote control event. [ 758.200211][ T9] m920x_read = error: -19 [ 758.204560][ T9] dvb-usb: error while querying for an remote control event. [ 758.319888][ T9] m920x_read = error: -19 [ 758.324257][ T9] dvb-usb: error while querying for an remote control event. [ 758.439461][ T9] m920x_read = error: -19 [ 758.443814][ T9] dvb-usb: error while querying for an remote control event. [ 758.559732][ T9] m920x_read = error: -19 [ 758.564095][ T9] dvb-usb: error while querying for an remote control event. [ 758.679528][ T9] m920x_read = error: -19 [ 758.683907][ T9] dvb-usb: error while querying for an remote control event. [ 758.800292][ T9] m920x_read = error: -19 [ 758.804640][ T9] dvb-usb: error while querying for an remote control event. [ 758.920114][ T918] m920x_read = error: -19 [ 758.924614][ T918] dvb-usb: error while querying for an remote control event. [ 759.040209][ T918] m920x_read = error: -19 [ 759.044558][ T918] dvb-usb: error while querying for an remote control event. [ 759.159507][ T918] m920x_read = error: -19 [ 759.163891][ T918] dvb-usb: error while querying for an remote control event. [ 759.279932][ T918] m920x_read = error: -19 [ 759.284308][ T918] dvb-usb: error while querying for an remote control event. [ 759.399476][ T918] m920x_read = error: -19 [ 759.403833][ T918] dvb-usb: error while querying for an remote control event. [ 759.520026][ T918] m920x_read = error: -19 [ 759.524399][ T918] dvb-usb: error while querying for an remote control event. [ 759.639665][ T918] m920x_read = error: -19 [ 759.644047][ T918] dvb-usb: error while querying for an remote control event. [ 759.760029][ T918] m920x_read = error: -19 [ 759.764379][ T918] dvb-usb: error while querying for an remote control event. [ 759.879880][ T918] m920x_read = error: -19 [ 759.884219][ T918] dvb-usb: error while querying for an remote control event. [ 760.000449][ T918] m920x_read = error: -19 [ 760.004824][ T918] dvb-usb: error while querying for an remote control event. [ 760.119489][ T918] m920x_read = error: -19 [ 760.123893][ T918] dvb-usb: error while querying for an remote control event. [ 760.239515][ T918] m920x_read = error: -19 [ 760.243907][ T918] dvb-usb: error while querying for an remote control event. [ 760.360008][ T918] m920x_read = error: -19 [ 760.364392][ T918] dvb-usb: error while querying for an remote control event. [ 760.489487][ T918] m920x_read = error: -19 [ 760.493863][ T918] dvb-usb: error while querying for an remote control event. [ 760.609729][ T918] m920x_read = error: -19 [ 760.614087][ T918] dvb-usb: error while querying for an remote control event. [ 760.730055][ T918] m920x_read = error: -19 [ 760.734411][ T918] dvb-usb: error while querying for an remote control event. [ 760.849494][ T918] m920x_read = error: -19 [ 760.853846][ T918] dvb-usb: error while querying for an remote control event. [ 760.980937][ T918] m920x_read = error: -19 [ 760.985310][ T918] dvb-usb: error while querying for an remote control event. [ 761.099435][ T918] m920x_read = error: -19 [ 761.103812][ T918] dvb-usb: error while querying for an remote control event. [ 761.219470][ T918] m920x_read = error: -19 [ 761.223835][ T918] dvb-usb: error while querying for an remote control event. [ 761.350151][ T918] m920x_read = error: -19 [ 761.354559][ T918] dvb-usb: error while querying for an remote control event. [ 761.469472][ T918] m920x_read = error: -19 [ 761.473858][ T918] dvb-usb: error while querying for an remote control event. [ 761.590039][ T918] m920x_read = error: -19 [ 761.594435][ T918] dvb-usb: error while querying for an remote control event. [ 761.709460][ T918] m920x_read = error: -19 [ 761.713826][ T918] dvb-usb: error while querying for an remote control event. [ 761.839710][ T918] m920x_read = error: -19 [ 761.844113][ T918] dvb-usb: error while querying for an remote control event. [ 761.959594][ T918] m920x_read = error: -19 [ 761.963953][ T918] dvb-usb: error while querying for an remote control event. [ 762.079745][ T918] m920x_read = error: -19 [ 762.084128][ T918] dvb-usb: error while querying for an remote control event. [ 762.199642][ T918] m920x_read = error: -19 [ 762.203991][ T918] dvb-usb: error while querying for an remote control event. [ 762.321007][ T918] m920x_read = error: -19 [ 762.325353][ T918] dvb-usb: error while querying for an remote control event. [ 762.439535][ T918] m920x_read = error: -19 [ 762.443897][ T918] dvb-usb: error while querying for an remote control event. [ 762.559475][ T918] m920x_read = error: -19 [ 762.563842][ T918] dvb-usb: error while querying for an remote control event. [ 762.680089][ T918] m920x_read = error: -19 [ 762.684493][ T918] dvb-usb: error while querying for an remote control event. [ 762.760074][T10910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 762.799460][ T918] m920x_read = error: -19 [ 762.803837][ T918] dvb-usb: error while querying for an remote control event. [ 762.919714][ T918] m920x_read = error: -19 [ 762.924071][ T918] dvb-usb: error while querying for an remote control event. [ 763.049417][ T918] m920x_read = error: -19 [ 763.053765][ T918] dvb-usb: error while querying for an remote control event. [ 763.169467][ T918] m920x_read = error: -19 [ 763.173820][ T918] dvb-usb: error while querying for an remote control event. [ 763.289425][ T918] m920x_read = error: -19 [ 763.293796][ T918] dvb-usb: error while querying for an remote control event. [ 763.409912][ T918] m920x_read = error: -19 [ 763.414274][ T918] dvb-usb: error while querying for an remote control event. [ 763.530186][ T918] m920x_read = error: -19 [ 763.534743][ T918] dvb-usb: error while querying for an remote control event. [ 763.649830][ T918] m920x_read = error: -19 [ 763.654202][ T918] dvb-usb: error while querying for an remote control event. [ 763.769512][ T918] m920x_read = error: -19 [ 763.773876][ T918] dvb-usb: error while querying for an remote control event. [ 763.889722][ T918] m920x_read = error: -19 [ 763.894099][ T918] dvb-usb: error while querying for an remote control event. [ 764.009977][ T918] m920x_read = error: -19 [ 764.014335][ T918] dvb-usb: error while querying for an remote control event. [ 764.129915][ T918] m920x_read = error: -19 [ 764.134267][ T918] dvb-usb: error while querying for an remote control event. [ 764.249700][ T918] m920x_read = error: -19 [ 764.254067][ T918] dvb-usb: error while querying for an remote control event. [ 764.370011][ T918] m920x_read = error: -19 [ 764.374392][ T918] dvb-usb: error while querying for an remote control event. [ 764.489436][ T918] m920x_read = error: -19 [ 764.493808][ T918] dvb-usb: error while querying for an remote control event. [ 764.610417][ T918] m920x_read = error: -19 [ 764.614762][ T918] dvb-usb: error while querying for an remote control event. [ 764.729494][ T918] m920x_read = error: -19 [ 764.733892][ T918] dvb-usb: error while querying for an remote control event. [ 764.849908][ T918] m920x_read = error: -19 [ 764.854248][ T918] dvb-usb: error while querying for an remote control event. [ 764.970530][ T918] m920x_read = error: -19 [ 764.974890][ T918] dvb-usb: error while querying for an remote control event. [ 765.089593][ T918] m920x_read = error: -19 [ 765.093972][ T918] dvb-usb: error while querying for an remote control event.