last executing test programs: 5m3.325359468s ago: executing program 4 (id=425): r0 = socket(0x11, 0x800000003, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf, 0x6, 0x8}}}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r1, 0x1000000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="80008fec090002"], 0x28}}, 0x0) 5m2.790925152s ago: executing program 4 (id=427): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) (async, rerun: 64) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000000), 0x4) (async, rerun: 64) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000140)={0x0, 0x18}, 0x0, 0x0}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000200300000900000001000000637acb474b6170c07a0dcfe2ddb20b479d5e0b75a76c3715c4a0a048906bcf9a202c576467f0a5c79fb0044a6c5111376862f2a53090c05f3954d5f78a6c7e59e0efac6b202fb0ce382bc9450df688b0e9bb1722b9a51bb05cdfbd4805a3154c5b9b31805880abc1c7a3eccb399ef6d335b4d120c2acd15d785076d4891c37369d0b3a7dfbf74565d9bd2138a1a60465f222cbbf1de3d7601914370a5a86e021500c1b37a3fd0970c8e4345ba789822a8260ae2477e8cf95d93229391ca616d3a7d327b7bbec902d74ab4b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000180000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000600)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x2, 0x4, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000680)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r5}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendfile(r11, r10, 0x0, 0x10001) 5m2.736148714s ago: executing program 4 (id=428): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x9, 0x8, [0x5, 0x6]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r1}, 0x10) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5m2.323069077s ago: executing program 4 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x20f}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 5m2.122687381s ago: executing program 4 (id=432): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x0, &(0x7f0000001400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}], 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001340)={'vlan1\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r4, &(0x7f00000012c0)="3f030e0033e6120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x20004881, &(0x7f0000001280)={0x11, 0x0, r6, 0x1, 0x1, 0x6, @remote}, 0x14) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f00000013c0)={0xa, 0x800, 0x0, @remote, 0x2}, 0x1c) sched_setscheduler(r1, 0x5, &(0x7f0000001380)=0x7) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) socket(0x28, 0x5, 0x0) 4m59.301552637s ago: executing program 4 (id=444): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x400, 0x0, 0x4}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6c}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x1000}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x558ac59, 'syz0\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x2, 0x10a5, 0x3, 0x0, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)='=', 0x1}], 0x1}, 0x20000001) sendmsg$inet(r8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000500)={0xb, 0x9, 0xc8e0, 0x9, 0x7, 0xfffffffb}) r9 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0xf0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0xfc, {0x9, 0x21, 0xfffa, 0x4e, 0x1, {0x22, 0x6af}}, {{{0x9, 0x5, 0x81, 0x3, 0x60, 0x4, 0x3c, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xac, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x4, 0x7, 0x5, 0xff, 0x63}, 0x33, &(0x7f0000000600)={0x5, 0xf, 0x33, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0x7, 0x3, 0x6, 0x1f}, @ssp_cap={0x1c, 0x10, 0xa, 0x2e, 0x4, 0x0, 0xf, 0x401, [0x3f00, 0x0, 0xffc0c0, 0xffff00]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xd, 0x8, 0x7fff}]}, 0x1, [{0x55, &(0x7f00000006c0)=@string={0x55, 0x3, "f98da0bbef55b1a5fecff8e3c9bb6502b3f40b758fc908853103c01e4c6e2f69f81c0166826eb59b60915990d2a42b6d6494e569e6e907bf5baffdaaf20debc533715c31b31bfafa1a1e778addb0ac07a06205"}}]}) syz_usb_control_io$hid(r9, &(0x7f0000000940)={0x24, &(0x7f0000000740)={0x40, 0xf, 0x68, {0x68, 0x21, "b02b18c6d4be5ae7f9c8b91795c9ae12366f82187039b9842b4da626a78299357b1f27f991adbf44c2f212088c271438b1ddc5c5128d307254ed346bedeefc697dc6589b2bcb0144a1bc25084fe6bd3c04d719c443bb8ad7f4e36bc479971b9f2ec012fad0a0"}}, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000840)={0x0, 0x22, 0xd, {[@main=@item_012={0x2, 0x0, 0x9, "c10f"}, @local=@item_4={0x3, 0x2, 0x3, "bec39b70"}, @local=@item_4={0x3, 0x2, 0x1, "b159b1e7"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0xe, 0x1, {0x22, 0x1c2}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0x16, 0xef, "6acae79b47cd921eb88560196d068b481411dccf929a1a60ef49a8548038225e3e019dc48132031f8b86e539ebadbca00cc21c1952cfbd58ea34a758b28345160989e6e48c271df7721347e77fe7a31df086e0f83bd9c551d2e587053bc76ff3f4c05495c4a9a9262ca0da915081bb4ba8729e39ec6b2d71eadd2887d82bb5278417e4fea683d3acc6618547a0bc2339116eb3890f97daa084f4bc59c1208eea5f29d04a9d72b97004eab7a10de983535fb96511ac8fb9cd69cd534a6af5435b6ec9c437afe415754fb9093079f836edda2a8bc5848ea0fd8530d1c738c6d4e6fe5680787ac81ef636c0e83b55ff4a"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x94}, &(0x7f0000000b00)={0x20, 0x1, 0x59, "14aa3d9cc1a32b1d63dbea8f724f199f08ebdf8de7ef58356f6d0db7c9ad3c61ec2aec041bb70de866a2094846c1f8747fdcf62d774b19aa48df70bb06bc3738ca599b09973b48bbb84b40e522958290c50aace850eaa1b14a"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x6e}}) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "2f8703", 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [@srh={0x4, 0x0, 0x4, 0x0, 0x2, 0x8, 0xf001}], "8763be05bdbf976f"}}}}}}}, 0x0) preadv(r8, &(0x7f0000001100)=[{&(0x7f0000001600)=""/4110, 0x100e}, {&(0x7f0000001000)=""/129, 0x81}, {&(0x7f00000010c0)=""/8, 0x8}], 0x3, 0x101, 0x101) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 4m59.022540228s ago: executing program 32 (id=444): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x400, 0x0, 0x4}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6c}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x1000}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x558ac59, 'syz0\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x2, 0x10a5, 0x3, 0x0, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)='=', 0x1}], 0x1}, 0x20000001) sendmsg$inet(r8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000500)={0xb, 0x9, 0xc8e0, 0x9, 0x7, 0xfffffffb}) r9 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0xf0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0xfc, {0x9, 0x21, 0xfffa, 0x4e, 0x1, {0x22, 0x6af}}, {{{0x9, 0x5, 0x81, 0x3, 0x60, 0x4, 0x3c, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xac, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x4, 0x7, 0x5, 0xff, 0x63}, 0x33, &(0x7f0000000600)={0x5, 0xf, 0x33, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0x7, 0x3, 0x6, 0x1f}, @ssp_cap={0x1c, 0x10, 0xa, 0x2e, 0x4, 0x0, 0xf, 0x401, [0x3f00, 0x0, 0xffc0c0, 0xffff00]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xd, 0x8, 0x7fff}]}, 0x1, [{0x55, &(0x7f00000006c0)=@string={0x55, 0x3, "f98da0bbef55b1a5fecff8e3c9bb6502b3f40b758fc908853103c01e4c6e2f69f81c0166826eb59b60915990d2a42b6d6494e569e6e907bf5baffdaaf20debc533715c31b31bfafa1a1e778addb0ac07a06205"}}]}) syz_usb_control_io$hid(r9, &(0x7f0000000940)={0x24, &(0x7f0000000740)={0x40, 0xf, 0x68, {0x68, 0x21, "b02b18c6d4be5ae7f9c8b91795c9ae12366f82187039b9842b4da626a78299357b1f27f991adbf44c2f212088c271438b1ddc5c5128d307254ed346bedeefc697dc6589b2bcb0144a1bc25084fe6bd3c04d719c443bb8ad7f4e36bc479971b9f2ec012fad0a0"}}, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000840)={0x0, 0x22, 0xd, {[@main=@item_012={0x2, 0x0, 0x9, "c10f"}, @local=@item_4={0x3, 0x2, 0x3, "bec39b70"}, @local=@item_4={0x3, 0x2, 0x1, "b159b1e7"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0xe, 0x1, {0x22, 0x1c2}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0x16, 0xef, "6acae79b47cd921eb88560196d068b481411dccf929a1a60ef49a8548038225e3e019dc48132031f8b86e539ebadbca00cc21c1952cfbd58ea34a758b28345160989e6e48c271df7721347e77fe7a31df086e0f83bd9c551d2e587053bc76ff3f4c05495c4a9a9262ca0da915081bb4ba8729e39ec6b2d71eadd2887d82bb5278417e4fea683d3acc6618547a0bc2339116eb3890f97daa084f4bc59c1208eea5f29d04a9d72b97004eab7a10de983535fb96511ac8fb9cd69cd534a6af5435b6ec9c437afe415754fb9093079f836edda2a8bc5848ea0fd8530d1c738c6d4e6fe5680787ac81ef636c0e83b55ff4a"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x94}, &(0x7f0000000b00)={0x20, 0x1, 0x59, "14aa3d9cc1a32b1d63dbea8f724f199f08ebdf8de7ef58356f6d0db7c9ad3c61ec2aec041bb70de866a2094846c1f8747fdcf62d774b19aa48df70bb06bc3738ca599b09973b48bbb84b40e522958290c50aace850eaa1b14a"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x6e}}) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "2f8703", 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [@srh={0x4, 0x0, 0x4, 0x0, 0x2, 0x8, 0xf001}], "8763be05bdbf976f"}}}}}}}, 0x0) preadv(r8, &(0x7f0000001100)=[{&(0x7f0000001600)=""/4110, 0x100e}, {&(0x7f0000001000)=""/129, 0x81}, {&(0x7f00000010c0)=""/8, 0x8}], 0x3, 0x101, 0x101) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 18.526957132s ago: executing program 3 (id=1513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000040)={0x0, 'veth1_macvtap\x00', {0x2}, 0xfc01}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000/0x4000)=nil}) 16.44100352s ago: executing program 3 (id=1518): syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000004c0)={'bond0\x00', {0x2, 0x0, @empty}}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0, 0xeeef0000}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xdd, &(0x7f0000000780)=""/221}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 13.142909966s ago: executing program 1 (id=1524): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x80}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$inet(0x2, 0x3, 0x2) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = dup2(r3, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) connect$inet(r4, &(0x7f0000003f40)={0x2, 0x4e1f, @empty}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080), 0x8) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 12.455687595s ago: executing program 1 (id=1527): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000d80)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000e80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b2bf2c36a214729b0bc231511e4c6cfef515e6863310f0f03bec4d773e6ed03bf34b28", 0xdd}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab", 0x326}], 0x3}}], 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0xfffffffffffffff8}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) fchdir(0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r3, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000580), r3, 0x0, 0x1, 0x4}}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x101a9, 0x4e20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x4}]}}}]}, 0x3c}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0) syz_usb_connect$hid(0xe3050027fe4adafa, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000006ff700c11f0e01b170a030109022400010108100c090400070103010101092105002109228707090581030800080601"], &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x0, 0x4, 0x96, 0x8, 0x5}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0x3, 0x6}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x4ff}}]}) 9.819046713s ago: executing program 2 (id=1531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt(r0, 0x786d, 0x80000001, &(0x7f0000000140)=""/85, &(0x7f0000000000)=0x55) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) getsockopt(r0, 0x786d, 0x80000001, &(0x7f0000000140)=""/85, &(0x7f0000000000)=0x55) (async) 9.739150381s ago: executing program 2 (id=1532): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5078, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000940), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0xfffffd45) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) 9.533063083s ago: executing program 3 (id=1534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r2, &(0x7f0000002580)={0x2020}, 0x2020) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x8803, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x2, 0xf1, &(0x7f0000000180)=""/241, 0x41000, 0x41, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x5, 0x6, 0xfffffffa}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500)=[r3, r4, r5, r6, r7, 0xffffffffffffffff], &(0x7f0000000580)=[{0x2, 0x2, 0xc, 0x6}, {0x2, 0x2, 0xc, 0xc}, {0x2, 0x5, 0x4, 0x3}, {0x3, 0x1, 0x2, 0x7}], 0x10, 0x4, @void, @value}, 0x94) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f0000000b574e69392bf85edacab3"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r8, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x2) ioctl$HIDIOCSFLAG(r8, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.913224352s ago: executing program 1 (id=1536): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}, 0x0, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x4da, 0x4dd) 8.900985626s ago: executing program 5 (id=1537): syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) symlinkat(0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)={0x5, 0x0, [{0x80a0000, 0x51, &(0x7f0000000580)=""/81}, {0x4, 0x63, &(0x7f0000000600)=""/99}, {0xeeef0000, 0xb2, &(0x7f0000000a40)=""/178}, {0x4, 0xab, &(0x7f0000000780)=""/171}, {0x3000, 0xb3, &(0x7f0000000840)=""/179}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 8.251210299s ago: executing program 5 (id=1538): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x1b, 0x88, 0x4010069}, 0x2c) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc3, 0x47, 0x2d, 0x10, 0x1410, 0x1130, 0x6c85, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x20, 0x2, 0x2, 0x6c, 0xff, 0xdd, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xc27}]}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) 7.752470187s ago: executing program 2 (id=1539): r0 = syz_open_dev$radio(&(0x7f0000000280), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x7fff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x2, '\x00', @p_u16=0x0}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x1800000, 0x7, 0x0, 0x1, 0x2, 0xccb2, 0x4, 0x6, 0x6c, 0x1, 0xfff, 0xfff, 0x0, 0x2, 0x10, 0x10, {0x5, 0xfffeffff}, 0x81}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000200)={0x0, "80a246be445c94f43a16d380ec570000aa2e5a00", 0x3, 0x0, 0x5, 0x7, 0x606020a, 0x2}) fchdir(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04000418"], 0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x100, @multicast2}, 0x4}}, 0x26) r6 = dup2(r5, r4) getpeername$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x1) 6.730057443s ago: executing program 2 (id=1542): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000004000000040000000900000000080200", @ANYRES32, @ANYBLOB='\x00\x00\x00>R\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599", @ANYRES8], 0x0) 6.168260708s ago: executing program 1 (id=1545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000001c0)={0x18, 0x0, {0x9, @multicast, 'sit0\x00'}}, 0x1e) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000001f00)) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10001) r7 = syz_io_uring_setup(0x4181, &(0x7f0000000640)={0x0, 0xec25, 0x200, 0x0, 0x3c7}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0000}]}) r10 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x97, 0x89, 0x59, 0x20, 0x1110, 0x9000, 0xf411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x6, 0xb0, 0x5, [{{0x9, 0x4, 0x19, 0x9, 0x0, 0xb4, 0xa7, 0xd5}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r10) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0xaf, 0x7, 0x1, 0x3, 0xf4, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x1, 0x1}}}}}]}}]}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000080)={0x4, 0x0, 0x11, 0x10, 0x100, 0x0}) syz_open_procfs(0x0, &(0x7f0000002080)='cmdline\x00') mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x13, 0xffffffffffffffff, 0x2438000) 5.964760579s ago: executing program 5 (id=1546): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xea042, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @p_u32=0x0}}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x18, 0x2, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000c8010000090a010400000000000000ea0100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000218c0111800b00010074617267657400007c0102800400030008000240000000006b0101"], 0x210}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000800000000000ffffffff95"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbef8, 0x8031, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x40, 0x8, &(0x7f0000000140)={0x5, 0xbea1, 0x0, 0x1}) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2710}) 5.682841338s ago: executing program 3 (id=1547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ac056902000000000001090224000100000000090400000103000000092100000001220700090581030000000000"], 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400403a0000000000bbff0200000000000000000000006a616d1e0fc34a85b0da00000102009078000005006050f46dd3ec0000fc010000000000000000000000000000fc0100000000000000000d00000000003ad709c7619400"], 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) listen(r3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000040)={0x0}, &(0x7f0000000580)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x9, 0x3, 0x340, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, [0xff000000, 0xffffff00, 0x7fffff80, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00], 'bond0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x84, 0x6, 0x4, 0x25}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x9, 0x8000, 0x5, '\x00', 'syz0\x00', {0x2}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0xff000000, 0xff, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 'bond_slave_0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x1000, 0x3, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='ipvlan0\x00', 0x10) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000000000900020073797a3100000000641a5bcf6c60fbb94c3adbae8e662477eef31d638759bd18068516a4dc3760988082d1efbd3631eaae432bac041a9d5884b393dae41e673a8b5fa482ff27924ae4cab34ecc92e75cfe2345354916a758"], 0x20}}, 0x4048050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000001340)=ANY=[@ANYRESDEC=r6, @ANYBLOB="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", @ANYBLOB="00e429bd7000ffdb08000100000000000c000400ff7f0000000000000c000a005d3a405c0305002f0c0008000300003daf6992ebac3e084fed0736fb9100000000000800010002000000000000000200"/92], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = fsmount(r5, 0x1, 0x7f) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000780)={&(0x7f0000000700)="71a0c114f91f6d40d49b38b57862dc7bc39d0ef14ac4d90f5fddc6ad326cf116718ecbeb1c60f8e93404bcf25c0154f9a265d40d821c396ef386d15544aba4991b66f3a66606ab7572e7", 0x4a, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000600)={0x13, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000840)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x500, 0x1, &(0x7f00000000c0)=[r9], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000340)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800), 0x8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000009c0)={&(0x7f0000000940)="ea823c2f349ad3b91193d3df6168bdcae8f3246db69526a1272aab50243e5e0798ac5ef625b1a10f735ba67a2078819985db7bbe2788f835e5209a171abe9c797496", 0x42}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000a40)={&(0x7f0000000a00)=[0x0, r8, r9, r10, r8], 0x5, 0x80000}) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6001044800203aff20010000000000000000000000000001fe8000000000000000000000000000aa8800907800000000fe8000000000000000000000000000bb020136dad83aea8d018a06cdb0aaed7fe48397e830046df85b96944a5c55ff4d725d3a04b0c1ad0f361b3191193ee5359d421384f893c735b10fd09ea552e5dbedcad227092caeb37896f2090044dd"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 5.257387109s ago: executing program 2 (id=1548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @union]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4.167907231s ago: executing program 2 (id=1549): r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x40, 0x1, 0x41, {0x41, 0x40e14cfdcff755a, "a4a46846cca3c498274311fa93432d1b2bf989cce896292be4653a08caccb0eaa60ab0797fa49fc832ec211bc65d4b3cbe01e53b04ae03b708e33a741e7122"}}, &(0x7f0000000080)={0x0, 0x3, 0xbc, @string={0xbc, 0x3, "ea4f8ce0be1c13036b1b1079f1490e4fc3f3283bef83f6ebfb17be908e234df66c4922bee16060fd14035f1757e8a2b3a2ec2ebe53e375347ee6a197a0310968b09a812f81ffc9c7e89032414bba72470b5226f5d5fd715e1751f787c4844976bfad65268a1e1c440b7e1abb60e0aaf6f6b3c76e3bea73297c345f6959eaff40452e7f7aac55d3b24f765e91778dca7d218f01c226e12e95c94893c876bfe2ac59b0913f69b1ce0a474acae1ba451fd8feba55045d23f07d76dc"}}, &(0x7f0000000180)={0x0, 0xf, 0x44, {0x5, 0xf, 0x44, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x3, 0x0, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "f343b42e309a0ede41922b4a90a7c7a5"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x14, 0x1c, 0x7, 0x36d9, 0x80}, @wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0xff, 0x28, 0x101, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x3, 0x5}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x25, 0xc9, "dea12055", "45e86e88"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0xe, 0x5, 0x9, 0x2198, 0x2}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x0, 0xa, 0x98, "f20a718fd26d995e963122c87e32ebc9c734663ff2cb7226066a4a2986eda88f4b419d82956be44b72ad829e21a6c59706cb665668b234fe5a6cd6dbd18c5e1bb75e4a2889ec9d2661100ac92d0c1eaca5f7cb5611bdd5ad9adce5687ded02348c0d43352f1ee478668a46584e2b5439981daa1e962b5417656c92d7b3b1fdf2d23262be17767e7cca237f2495caec693af4687d454d8c7d"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x8, 0x4, [0xf000]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xd}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8f}, &(0x7f0000000500)={0x40, 0xb, 0x2, "5bf1"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0xfffc}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, '0o'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x96c}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xa}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x80}}) ioctl$sock_TIOCINQ(r0, 0x541b, 0xffffffffffffffff) 3.701601177s ago: executing program 1 (id=1550): syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) symlinkat(0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0, 0xeeef0000}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)={0x5, 0x0, [{0x80a0000, 0x51, &(0x7f0000000580)=""/81}, {0x4, 0x63, &(0x7f0000000600)=""/99}, {0xeeef0000, 0xb2, &(0x7f0000000a40)=""/178}, {0x4, 0xab, &(0x7f0000000780)=""/171}, {0x3000, 0xb3, &(0x7f0000000840)=""/179}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 3.062958585s ago: executing program 3 (id=1551): r0 = syz_io_uring_setup(0x38ab, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3}) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ef0e01000000000000010902240001000080000904000001f2ff0100092100000001220500090581", @ANYRES16=r0], 0x0) 2.717782208s ago: executing program 0 (id=1552): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4041) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x20, 0x7800, 0xff, 0x1, {{0x13, 0x4, 0x0, 0x15, 0x4c, 0x67, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010102, @loopback, {[@ssrr={0x89, 0x23, 0xe6, [@multicast2, @multicast1, @private=0xa010100, @private=0xa010101, @private=0xa010102, @private=0xa010101, @loopback, @remote]}, @timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0x9, [{@rand_addr=0x64010102, 0x2}, {@private=0xa010102, 0x200}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r2, 0x1, 0x8000, 0x7fffffff, 0xfffffffb, {{0x23, 0x4, 0x1, 0x34, 0x8c, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}, {[@noop, @cipso={0x86, 0x74, 0x3, [{0x7, 0x10, "5f9c9a84a5c01817c3aabd399917"}, {0x2, 0xf, "d9f626dec98929173dfd283828"}, {0x7, 0xd, "a5ad44210d78d945770daa"}, {0x6, 0x5, "585f9a"}, {0x6, 0xe, "cb22dd5093bc06027724bbf7"}, {0x0, 0x4, '\"L'}, {0x5, 0xd, "5179a5628fd993c28e7e97"}, {0x7, 0xf, "d576738b515c6991dabe7396ea"}, {0x0, 0xf, "2d55b1e3f8dfcca9c874ab2cd6"}]}]}}}}}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r4) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40805) r8 = msgget$private(0x0, 0x1d8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) connect$unix(r9, &(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e) msgsnd(0xffffffffffffffff, &(0x7f0000000640)={0x3, "e0c9719186d1b96d2bce7f34a52e1d43e98f8b10480cdf21544fc9e4ec811f3228e99b788d34b8bac16b9a6a16182fe3771aa03a6ca7292e6e103390149db65476d02a9d8fc9a888a9bc97e89adc467f456e7c010867824fcfd45ecf2f520a407f45ebf127f14d2818a8bc2ccfa5e856ffcf47f550ee0f959da6e0399ae82384eca2"}, 0x8a, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x94, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000084}, 0x2008080) sendmsg$nl_route_sched_retired(r9, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=@delqdisc={0xa8, 0x25, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xd}, {0x7, 0xffe0}, {0x10, 0xffff}}, [@q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xe}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1fa1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x575}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x34}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x7}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0xc40, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x1) msgsnd(r8, &(0x7f0000000a40)={0x2, "51bf5f392550dd8d4e0332147e4b4b90d6299052aa68985a3d96128b177a1b4170296584c7ce0a17963134eb572e502f99ad7b82c9f55669fb0f08b60e74a2d8af02155cdfd0ad5eb5d361ad93a00d97f15533adab0542d3fd819689cfe8be53c56a2a71e1acbd"}, 0x6f, 0x800) r10 = gettid() r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r4) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r11, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x37}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r4) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r12, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x11) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r13, &(0x7f0000000d40)={0x1f, @none}, 0x8) getresuid(&(0x7f0000000d80)=0x0, &(0x7f0000000dc0), &(0x7f0000000e00)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e40)={0x0, 0x0, 0x0}, &(0x7f0000000e80)=0xc) getresuid(&(0x7f0000000ec0), &(0x7f0000000f00)=0x0, &(0x7f0000000f40)) msgctl$IPC_SET(r8, 0x1, &(0x7f0000001040)={{0x0, r14, r15, r16, 0x0, 0x20, 0x101}, 0x0, 0x0, 0x9, 0xffffffffffffffce, 0x3, 0x8000000000000000, 0xffff, 0xe, 0xf, 0x7ef3, r10}) 2.714854616s ago: executing program 5 (id=1553): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000003ea6b1f9454bd6ca563f92ccee43bc174eede5dae9c713a5106d97db6972b37be0702419d114cd7989d2b47e8b9e47c4e27a63747675b8bd89e0ba5e004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2b, 0x0, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x53}, 0x1c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000b80)="9b1acb2c4b78b97a7c3e9ee7bb23f949", 0x10) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000b80)="9b1acb2c4b78b97a7c3e9ee7bb23f949", 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.561155709s ago: executing program 1 (id=1554): iopl(0x3) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) syz_emit_ethernet(0x4e, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1f) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000080)={0x0, 0x30, 0x61, {0x61, 0xd, "252d0ae5f0c23ca7100b421187830aa506ea4534f7bc2e5647266a736b1b897dcf2383dbf2b5c22495bb8c30bd929bf940a8d808c93bb1f5f5f1e5c74b12c357e08a0037d64dc49f0cf93e59a059299979497ffef8568798f794f9122786e3"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) iopl(0x1f) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x402303, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000440)={0x48}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, &(0x7f0000000080)={0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="4003c7000000c718f16b185b2d7a8605eca21eda38d9f8286485d0276a2a78c4e3d7a367f361b3137192af7a458113214c1ddb9198c5e4edd2a8ef6543129a2c442daac85593fca8eb37765b67f0fd6bd38fe9fadcd72869020edfaa472be587ec81f11c3df28fcf545c007de9e65d4bda9e961b5b15afd36ec7589e744427a5c75922807d524481b7d2f41761658abb6cd8fca1e3bd6cff826dec1414130490500804bcb103e07a6444977e81fe87b467202b4f3e379dab18ba910802eddffbf442d54a5c3f0551986e38e600023a2cf1c612"], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x20, 0x30, 0x100, "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"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000440)=ANY=[@ANYBLOB="2000630000000061c8407ead2fd67a24114cd32563f56f7466678bc3c1d8fa47d5c10589726dd330eb3f94cfdb13858405849daec636f3607910c640ed153351543748683eb1412ba21a9317e99cf3f856ce67cb15e094f1c1d56ca62ae6f5d45359b4ec93e02fb064"], &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x7d}}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="00000100000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.372352274s ago: executing program 0 (id=1555): r0 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000140)={0xd00, 0x30314752, 0x280, 0x1e0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000480)=0x0, &(0x7f0000000200)=0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r9, 0x3}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2001}) io_uring_enter(r4, 0x8aa, 0x39, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000580001804401040020513f8c081d159ec50568c79f7d5de72a0001000a000000000090040000000000000000000000000000000100000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a73797a3100000000d1ba661f5d3c2df1165790de5d1e930993dd46dc2be149c5c917b1fef6319b16612a31823dc93beeec5f52bbc6e289dedeaf30b9913c7eaab15fe1ccb955cca2eaa098"], 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) 2.187402819s ago: executing program 5 (id=1556): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5078, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000940), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0xfffffd45) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) 2.172957642s ago: executing program 0 (id=1557): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r0}, 0x10) syz_io_uring_setup(0x5078, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000940), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) 1.920034177s ago: executing program 5 (id=1558): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) ftruncate(r0, 0x6) (rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000002000000005000000ab16a6f8db000d000200000000004c732a56e9ae29a93b538e5d6692c43fb4c0609b8bf70c6fb2019daa1b009c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) (async) read$FUSE(r0, &(0x7f0000000dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, r6, {0x80}}, 0x18) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40107446, 0x20000000) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) (async, rerun: 32) r7 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000200)={0x100, r8}, 0x0) (async, rerun: 32) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) (rerun: 32) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000280)={0x100, r9}, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) (rerun: 32) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x100, r10}, 0x0) (async, rerun: 64) landlock_restrict_self(r7, 0x0) (rerun: 64) close(r7) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000001c0)="4d8e5ca74b", 0x5}], 0x1, 0x0, 0x0, 0x404c844}, 0x4) 1.217320903s ago: executing program 33 (id=1558): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) ftruncate(r0, 0x6) (rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000002000000005000000ab16a6f8db000d000200000000004c732a56e9ae29a93b538e5d6692c43fb4c0609b8bf70c6fb2019daa1b009c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) (async) read$FUSE(r0, &(0x7f0000000dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, r6, {0x80}}, 0x18) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40107446, 0x20000000) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) (async, rerun: 32) r7 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000200)={0x100, r8}, 0x0) (async, rerun: 32) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) (rerun: 32) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000280)={0x100, r9}, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) (rerun: 32) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x100, r10}, 0x0) (async, rerun: 64) landlock_restrict_self(r7, 0x0) (rerun: 64) close(r7) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000001c0)="4d8e5ca74b", 0x5}], 0x1, 0x0, 0x0, 0x404c844}, 0x4) 1.153298069s ago: executing program 0 (id=1560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) socket(0x2, 0x80805, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000001480)='sched_switch\x00', r2}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffb, 0x2}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[], 0x8) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) ioctl$int_in(r6, 0x5452, &(0x7f0000000c80)) writev(r6, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) (async) poll(&(0x7f0000000440)=[{r6, 0x966c}], 0x1, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f00000001c0)={0x0, 0x70}, 0x20) (async, rerun: 64) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) 1.059949947s ago: executing program 0 (id=1561): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x5}, {0x0, 0x1, 0x6}}}]}]}]}}]}, 0x54}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000000c0)='sched_switch\x00', r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000000)={0x80f0f028, 0x400}) 74.026481ms ago: executing program 3 (id=1562): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000000c0)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1004, 0x3a, 0x21004, 0x3a, 0x0, 0x0, 0xc}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f000000024000103000000000000000001"], 0xf0}}, 0x0) recvmsg(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 0s ago: executing program 0 (id=1563): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a569106c72ffffe3fffffffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x200400c0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000002c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xf, 'sit0\x00'}) kernel console output (not intermixed with test programs): terface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 373.970366][ T5898] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 373.978466][ T5867] usb 4-1: config 1 interface 0 has no altsetting 0 [ 373.988921][ T5867] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 373.998412][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 374.006415][ T5867] usb 4-1: SerialNumber: syz [ 374.013730][T10952] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 374.021364][T10952] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 374.029790][ T5867] usb 4-1: bad CDC descriptors [ 374.156445][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 374.170614][ T5898] usb 3-1: config 150 has an invalid interface number: 204 but max is 0 [ 374.184160][ T5898] usb 3-1: config 150 has no interface number 0 [ 374.190999][ T5898] usb 3-1: config 150 interface 204 has no altsetting 0 [ 374.200312][ T5898] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 374.212413][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.231786][ T5898] usb 3-1: Product: syz [ 374.240680][ T5898] usb 3-1: Manufacturer: syz [ 374.250169][ T5898] usb 3-1: SerialNumber: syz [ 374.263737][T10952] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 374.271993][T10952] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 374.292064][ T5867] cdc_subset 4-1:1.0 usb0: register 'cdc_subset' at usb-dummy_hcd.3-1, Linux Device, 1a:f9:be:f5:05:72 [ 374.523812][ T5898] usb 3-1: USB disconnect, device number 52 [ 374.541337][ T29] audit: type=1400 audit(1737048121.463:12607): avc: denied { write } for pid=10978 comm="syz.1.1224" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 374.570324][ T29] audit: type=1400 audit(1737048121.463:12608): avc: denied { ioctl } for pid=10978 comm="syz.1.1224" path="net:[4026532947]" dev="nsfs" ino=4026532947 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 374.669559][ T5867] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 374.765435][ T5898] usb 4-1: USB disconnect, device number 51 [ 374.773677][ T5898] cdc_subset 4-1:1.0 usb0: unregister 'cdc_subset' usb-dummy_hcd.3-1, Linux Device [ 375.529288][T10993] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 375.560353][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.573870][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.584065][ T5867] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 376.137223][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.186014][ T5867] usb 1-1: config 0 descriptor?? [ 376.482836][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 376.877813][T11022] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1234'. [ 377.048157][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1231'. [ 377.890164][T11031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.916939][T11031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.034147][ T932] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 378.274696][ T932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.291175][ T932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.301880][ T932] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 378.389819][ T932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.303592][ T5867] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0025/input/input35 [ 379.319329][ T932] usb 4-1: config 0 descriptor?? [ 380.048944][ T5867] uclogic 0003:256C:006D.0025: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 380.063756][ T5867] usb 1-1: USB disconnect, device number 45 [ 380.117852][T11047] input: syz0 as /devices/virtual/input/input36 [ 380.203309][T11052] xt_CT: No such helper "snmp_trap" [ 380.347636][ T5911] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 380.602899][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 380.609071][ T5911] usb 2-1: too many configurations: 160, using maximum allowed: 8 [ 380.618571][ T5911] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 380.626864][ T5911] usb 2-1: config 0 has no interface number 0 [ 380.632954][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1280, setting to 1024 [ 380.644204][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x8 has an invalid bInterval 25, changing to 8 [ 380.655489][ T5911] usb 2-1: config 0 interface 128 has no altsetting 0 [ 380.722738][ T5911] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 380.722818][ T5911] usb 2-1: config 0 has no interface number 0 [ 380.722883][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1280, setting to 1024 [ 380.722945][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x8 has an invalid bInterval 25, changing to 8 [ 380.723003][ T5911] usb 2-1: config 0 interface 128 has no altsetting 0 [ 380.724637][ T5911] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 380.724692][ T5911] usb 2-1: config 0 has no interface number 0 [ 380.724771][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1280, setting to 1024 [ 380.724832][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x8 has an invalid bInterval 25, changing to 8 [ 380.724890][ T5911] usb 2-1: config 0 interface 128 has no altsetting 0 [ 380.841053][ T5911] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 380.872287][ T5911] usb 2-1: config 0 has no interface number 0 [ 380.898383][T11014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.935802][T11014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.963918][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1280, setting to 1024 [ 381.086857][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x8 has an invalid bInterval 25, changing to 8 [ 381.200686][ T5911] usb 2-1: config 0 interface 128 has no altsetting 0 [ 381.280101][ T5911] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 381.410998][ T5911] usb 2-1: config 0 has no interface number 0 [ 381.423591][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1280, setting to 1024 [ 381.452627][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x8 has an invalid bInterval 25, changing to 8 [ 381.464398][ T932] uclogic 0003:256C:006D.0026: interface is invalid, ignoring [ 381.493746][ T5911] usb 2-1: config 0 interface 128 has no altsetting 0 [ 381.508994][ T5911] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 381.522213][ T9] usb 3-1: device descriptor read/64, error -71 [ 381.615371][ T5911] usb 2-1: config 0 has no interface number 0 [ 381.622984][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1280, setting to 1024 [ 381.639478][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x8 has an invalid bInterval 25, changing to 8 [ 381.651041][ T5911] usb 2-1: config 0 interface 128 has no altsetting 0 [ 381.662057][ T5911] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 381.670963][ T5911] usb 2-1: config 0 has no interface number 0 [ 381.680481][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1280, setting to 1024 [ 381.697087][ T932] usb 4-1: USB disconnect, device number 52 [ 381.697303][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x8 has an invalid bInterval 25, changing to 8 [ 382.642405][ T5911] usb 2-1: config 0 interface 128 has no altsetting 0 [ 382.688722][ T5911] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 382.696932][ T5911] usb 2-1: config 0 has no interface number 0 [ 382.722490][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1280, setting to 1024 [ 382.734064][ T5911] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x8 has an invalid bInterval 25, changing to 8 [ 382.745435][ T5911] usb 2-1: config 0 interface 128 has no altsetting 0 [ 382.754240][ T5911] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 382.763668][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=151 [ 382.771828][ T5911] usb 2-1: Product: syz [ 382.776458][ T5911] usb 2-1: Manufacturer: syz [ 382.781058][ T5911] usb 2-1: SerialNumber: syz [ 382.837715][ T5911] usb 2-1: config 0 descriptor?? [ 382.859924][ T5911] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 382.888699][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.904191][ T5911] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 382.919101][ T5911] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 382.954860][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 383.062056][T11098] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 383.063066][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.068588][T11098] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 383.090429][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.099380][T11098] vhci_hcd vhci_hcd.0: Device attached [ 383.099779][T11044] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 383.111531][T11044] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 383.123828][T11098] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 383.130361][T11098] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 383.138025][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 383.141642][T11044] vhci_hcd vhci_hcd.0: Device attached [ 383.145266][ T9] usb 3-1: config 150 has an invalid interface number: 204 but max is 0 [ 383.161722][ T9] usb 3-1: config 150 has no interface number 0 [ 383.168553][ T5898] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 383.176490][ T9] usb 3-1: config 150 interface 204 has no altsetting 0 [ 383.179430][T11098] vhci_hcd vhci_hcd.0: Device attached [ 383.202084][ T9] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 383.220795][T11102] vhci_hcd: connection closed [ 383.220985][T11100] vhci_hcd: connection closed [ 383.226150][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.230236][ T8815] vhci_hcd: stop threads [ 383.230864][ T9] usb 3-1: Product: syz [ 383.247537][T11105] vhci_hcd: connection closed [ 383.252597][ T8815] vhci_hcd: release socket [ 383.265047][ T9] usb 3-1: Manufacturer: syz [ 383.275049][ T9] usb 3-1: SerialNumber: syz [ 383.277493][ T5911] usb 2-1: USB disconnect, device number 75 [ 383.280071][ T5867] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 383.291176][ T8815] vhci_hcd: disconnect device [ 383.293368][ T8] vhci_hcd: vhci_device speed not set [ 383.306393][ T8815] vhci_hcd: stop threads [ 383.326769][ T8815] vhci_hcd: release socket [ 383.335280][ T8815] vhci_hcd: disconnect device [ 383.342299][ T8815] vhci_hcd: stop threads [ 383.346740][ T8815] vhci_hcd: release socket [ 383.354200][ T8815] vhci_hcd: disconnect device [ 383.361020][ T8] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 383.368657][ T8] usb 35-1: enqueue for inactive port 0 [ 383.382137][ T5898] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 383.400925][ T5898] usb 1-1: config 0 has no interface number 0 [ 383.412077][ T5898] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.426315][ T5898] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.432742][T11114] netlink: 'syz.3.1257': attribute type 1 has an invalid length. [ 383.436414][ T5898] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 383.453895][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.462402][ T8] vhci_hcd: vhci_device speed not set [ 383.471211][ T5898] usb 1-1: config 0 descriptor?? [ 383.523697][ T9] usb 3-1: USB disconnect, device number 54 [ 383.693848][T11084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.708485][T11084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.874202][ T5911] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 384.038340][ T5911] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 384.053105][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.086322][ T5911] usb 2-1: config 0 has no interface number 0 [ 384.119086][ T5911] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 384.147060][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.178682][ T5911] usb 2-1: Product: syz [ 384.183509][ T5911] usb 2-1: Manufacturer: syz [ 384.213600][ T5911] usb 2-1: SerialNumber: syz [ 384.247260][ T5911] usb 2-1: config 0 descriptor?? [ 384.276638][ T5911] ims_pcu 2-1:0.41: Missing CDC union descriptor [ 384.301289][ T5911] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 384.379464][ T5898] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0027/input/input37 [ 384.470853][ T5898] holtek_kbd 0003:04D9:A055.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 384.526961][T11120] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.534268][T11120] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.547220][T11120] bridge0: entered allmulticast mode [ 384.557018][ T932] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 384.588998][T11120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1258'. [ 384.597322][ T5911] usb 1-1: USB disconnect, device number 46 [ 384.616727][T11120] bridge_slave_1: left allmulticast mode [ 384.644022][T11120] bridge_slave_1: left promiscuous mode [ 384.722377][T11120] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.739163][ T932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.750142][ T932] usb 4-1: config 0 has no interfaces? [ 384.778750][ T932] usb 4-1: New USB device found, idVendor=054c, idProduct=06bf, bcdDevice=3c.ad [ 384.791437][ T932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=36 [ 384.794062][T11120] bridge_slave_0: left allmulticast mode [ 384.805708][T11120] bridge_slave_0: left promiscuous mode [ 384.811493][T11120] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.818928][ T932] usb 4-1: Product: syz [ 385.029656][T11133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1262'. [ 385.395650][ T932] usb 4-1: Manufacturer: syz [ 385.400317][ T5870] usb 2-1: USB disconnect, device number 76 [ 385.400366][ T932] usb 4-1: SerialNumber: syz [ 385.412975][ T932] usb 4-1: config 0 descriptor?? [ 385.721688][ T932] usb 4-1: USB disconnect, device number 53 [ 385.977639][ T5911] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 386.163816][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.177485][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.188529][ T5911] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 386.199438][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.217345][ T5911] usb 1-1: config 0 descriptor?? [ 386.254352][ T29] audit: type=1400 audit(1737048132.426:12609): avc: denied { getopt } for pid=11154 comm="syz.5.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 386.290384][ T5897] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 386.461368][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 386.469680][ T5897] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 386.479269][ T5897] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 386.490695][ T5897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.505272][ T5897] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 386.514392][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.524676][ T5897] usb 2-1: Product: syz [ 386.529599][ T5897] usb 2-1: Manufacturer: syz [ 386.534220][ T5897] usb 2-1: SerialNumber: syz [ 386.696499][ T46] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 386.761560][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.770080][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.781350][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.789962][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.803040][ T5897] usb 2-1: 0:2 : does not exist [ 386.803438][ T5867] usb 6-1: device descriptor read/64, error -71 [ 386.819907][ T5897] usb 2-1: USB disconnect, device number 77 [ 386.856851][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 386.864035][ T46] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.873515][ T46] usb 4-1: config 0 has no interface number 0 [ 386.879768][ T46] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 386.890753][ T46] usb 4-1: config 0 interface 1 has no altsetting 0 [ 386.899029][ T46] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 386.908289][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.925736][ T46] usb 4-1: Product: syz [ 386.929976][ T46] usb 4-1: Manufacturer: syz [ 386.934789][ T46] usb 4-1: SerialNumber: syz [ 386.946650][ T46] usb 4-1: config 0 descriptor?? [ 387.092090][ T5867] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 387.392186][T11139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.525942][ T46] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 387.547305][T11139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.684237][ T46] cx231xx 4-1:0.1: Failed to read PCB config [ 387.768469][ T5911] uclogic 0003:256C:006D.0028: interface is invalid, ignoring [ 387.792391][ T46] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 387.842036][ T46] usb 4-1: USB disconnect, device number 54 [ 387.925892][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 387.935110][ T5867] usb 6-1: config 150 has an invalid interface number: 204 but max is 0 [ 388.016533][ T932] usb 1-1: USB disconnect, device number 47 [ 388.056992][ T5867] usb 6-1: config 150 has no interface number 0 [ 388.074504][ T5867] usb 6-1: config 150 interface 204 has no altsetting 0 [ 388.085425][ T5867] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 388.095445][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.267935][ T46] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 388.310425][ T5867] usb 6-1: Product: syz [ 388.314686][ T5867] usb 6-1: Manufacturer: syz [ 388.319336][ T5867] usb 6-1: SerialNumber: syz [ 388.428501][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 388.435033][ T46] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.443995][ T46] usb 4-1: config 0 has no interface number 0 [ 388.451928][ T46] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 388.481404][ T46] usb 4-1: config 0 interface 1 has no altsetting 0 [ 388.490518][ T46] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 388.524554][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.545570][ T46] usb 4-1: Product: syz [ 388.560346][ T46] usb 4-1: Manufacturer: syz [ 388.587091][ T46] usb 4-1: SerialNumber: syz [ 388.601085][ T46] usb 4-1: config 0 descriptor?? [ 388.805357][ T5867] usb 6-1: USB disconnect, device number 49 [ 388.846218][ T46] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 389.548687][T11181] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 389.604167][T11179] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 389.634028][ T46] cx231xx 4-1:0.1: bad scenario!!!!! [ 389.634028][ T46] config_info=0 [ 389.642747][ T46] cx231xx 4-1:0.1: Failed to read PCB config [ 389.857229][ T46] usb 4-1: USB disconnect, device number 55 [ 391.172889][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1284'. [ 391.190105][ T29] audit: type=1400 audit(1737048137.020:12610): avc: denied { map } for pid=11210 comm="syz.1.1283" path="pipe:[30604]" dev="pipefs" ino=30604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 391.213070][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.507354][ T5867] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 391.772981][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1284'. [ 392.170093][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 392.180997][ T5867] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.192179][ T5867] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.207940][ T5867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 392.214822][ T5867] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 392.224059][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.233655][ T5867] usb 4-1: config 0 descriptor?? [ 392.373266][ T932] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 392.458806][ T46] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 392.554896][ T932] usb 2-1: Using ep0 maxpacket: 8 [ 392.586578][ T932] usb 2-1: config 150 has an invalid interface number: 204 but max is 0 [ 392.602164][ T932] usb 2-1: config 150 has no interface number 0 [ 392.619495][ T932] usb 2-1: config 150 interface 204 has no altsetting 0 [ 392.669202][ T932] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 392.670086][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 392.678687][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.700942][ T932] usb 2-1: Product: syz [ 392.716648][ T932] usb 2-1: Manufacturer: syz [ 392.721784][ T932] usb 2-1: SerialNumber: syz [ 392.722652][ T46] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 392.891656][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.907384][ T46] usb 1-1: Product: syz [ 392.912847][ T46] usb 1-1: Manufacturer: syz [ 392.919578][ T46] usb 1-1: SerialNumber: syz [ 393.010893][ T46] usb 1-1: config 0 descriptor?? [ 393.021013][ T46] dvb-usb: found a 'DTV-DVB UDTT7049' in warm state. [ 393.030426][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 393.040184][ T46] dvbdev: DVB: registering new adapter (DTV-DVB UDTT7049) [ 393.047765][ T46] usb 1-1: media controller created [ 393.061642][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.080608][ T932] usb 2-1: USB disconnect, device number 78 [ 393.093355][ T5867] mcp2200 0003:04D8:00DF.0029: unknown main item tag 0x0 [ 393.106580][ T5867] mcp2200 0003:04D8:00DF.0029: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 393.250505][ T46] dvb-usb: no frontend was attached by 'DTV-DVB UDTT7049' [ 393.260646][ T8] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 393.303317][ T46] rc_core: IR keymap rc-twinhan1027 not found [ 393.309505][ T46] Registered IR keymap rc-empty [ 393.321757][ T46] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 393.366169][ T46] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input39 [ 393.619728][ T46] dvb-usb: schedule remote query interval to 150 msecs. [ 393.643816][ T46] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected. [ 393.673570][ T46] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 393.761122][ T46] usb 1-1: USB disconnect, device number 48 [ 393.887699][ T5911] m920x_read = error: -19 [ 393.894119][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 393.987034][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 394.002109][ T8] usb 3-1: config index 0 descriptor too short (expected 63268, got 36) [ 394.020272][ T8] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 394.028532][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 394.053935][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.083522][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.101784][ T8] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 394.111384][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.153509][ T8] usb 3-1: config 0 descriptor?? [ 394.183248][ T5897] m920x_read = error: -19 [ 394.187846][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 394.364490][ T46] m920x_read = error: -19 [ 394.368963][ T46] dvb-usb: error -19 while querying for an remote control event. [ 394.483590][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 394.490893][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 394.501216][ T8] usb 3-1: USB disconnect, device number 55 [ 394.964095][ T46] m920x_read = error: -19 [ 394.968487][ T46] dvb-usb: error -19 while querying for an remote control event. [ 395.042021][ T5911] hid-generic 0000:0000:0000.002A: item fetching failed at offset 0/1 [ 395.054340][ T5911] hid-generic 0000:0000:0000.002A: probe with driver hid-generic failed with error -22 [ 395.142077][ T5911] m920x_read = error: -19 [ 395.157373][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 395.185208][T11257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'. [ 395.240008][ T5911] usb 4-1: USB disconnect, device number 56 [ 395.404378][T11294] ufs: You didn't specify the type of your ufs filesystem [ 395.404378][T11294] [ 395.404378][T11294] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 395.404378][T11294] [ 395.404378][T11294] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 395.435697][T11294] ufs: ufstype=old is supported read-only [ 395.442107][T11294] syz.2.1302: attempt to access beyond end of device [ 395.442107][T11294] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 395.719479][ T29] audit: type=1400 audit(1737048140.977:12611): avc: denied { create } for pid=11279 comm="syz.2.1302" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 395.918542][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 395.931357][T11296] xt_connbytes: Forcing CT accounting to be enabled [ 395.938111][T11296] Cannot find add_set index 0 as target [ 396.172285][ T46] m920x_read = error: -19 [ 396.176722][ T46] dvb-usb: error -19 while querying for an remote control event. [ 396.350490][ T46] m920x_read = error: -19 [ 396.385578][ T29] audit: type=1400 audit(1737048140.977:12612): avc: denied { mounton } for pid=11279 comm="syz.2.1302" path="/283/file0" dev="tmpfs" ino=1555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 396.434442][ T46] dvb-usb: error -19 while querying for an remote control event. [ 396.641711][ T29] audit: type=1400 audit(1737048142.137:12613): avc: denied { unlink } for pid=5825 comm="syz-executor" name="file0" dev="tmpfs" ino=1555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 396.664494][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.703516][ T5911] m920x_read = error: -19 [ 396.708027][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 396.922261][ T46] m920x_read = error: -19 [ 396.927196][ T46] dvb-usb: error -19 while querying for an remote control event. [ 397.004272][T11307] bridge0: port 3(erspan0) entered blocking state [ 397.011438][T11307] bridge0: port 3(erspan0) entered disabled state [ 397.020343][T11307] erspan0: entered allmulticast mode [ 397.030862][T11307] erspan0: entered promiscuous mode [ 397.040164][T11307] bridge0: port 3(erspan0) entered blocking state [ 397.046830][T11307] bridge0: port 3(erspan0) entered forwarding state [ 397.100184][ T46] m920x_read = error: -19 [ 397.104884][ T46] dvb-usb: error -19 while querying for an remote control event. [ 397.141629][ T5911] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 397.146510][T11307] netlink: 'syz.0.1307': attribute type 1 has an invalid length. [ 397.333822][ T46] m920x_read = error: -19 [ 397.338783][ T46] dvb-usb: error -19 while querying for an remote control event. [ 397.351252][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.364681][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.837350][ T5911] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 397.849557][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.875064][ T5911] usb 3-1: config 0 descriptor?? [ 398.007282][ T46] m920x_read = error: -19 [ 398.011661][ T46] dvb-usb: error -19 while querying for an remote control event. [ 398.280105][T11330] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 398.307050][ T5870] m920x_read = error: -19 [ 398.311969][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 398.562319][T11340] 9pnet_virtio: no channels available for device syz [ 399.110156][T11343] befs: (nbd5): No write support. Marking filesystem read-only [ 399.120471][T11343] syz.5.1314: attempt to access beyond end of device [ 399.120471][T11343] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 399.134173][T11343] befs: (nbd5): unable to read superblock [ 399.365733][ T5897] m920x_read = error: -19 [ 399.370151][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 399.696701][ T46] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 400.196058][ T5870] m920x_read = error: -19 [ 400.200508][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 400.233895][ T29] audit: type=1326 audit(1737048145.411:12614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.3.1318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5949d85d29 code=0x10000 [ 400.260041][T11342] random: crng reseeded on system resumption [ 400.654361][ T5870] m920x_read = error: -19 [ 400.658876][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 400.741789][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 400.753199][ T46] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 400.811072][ T46] usb 1-1: can't read configurations, error -71 [ 400.868355][ T5870] m920x_read = error: -19 [ 400.872794][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 401.137365][ T5897] m920x_read = error: -19 [ 401.142245][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 401.321367][ T5870] m920x_read = error: -19 [ 401.321491][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 401.721495][ T5870] m920x_read = error: -19 [ 401.739616][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 401.828308][T11368] loop5: detected capacity change from 0 to 7 [ 401.844671][T11368] Buffer I/O error on dev loop5, logical block 0, async page read [ 401.891023][ T29] audit: type=1326 audit(1737048147.048:12615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.2.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0db85d29 code=0x7fc00000 [ 401.920004][T11368] Buffer I/O error on dev loop5, logical block 0, async page read [ 401.980379][T11368] Buffer I/O error on dev loop5, logical block 0, async page read [ 402.011441][T11368] Buffer I/O error on dev loop5, logical block 0, async page read [ 402.033103][ T5897] m920x_read = error: -19 [ 402.038815][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 402.086653][T11368] Buffer I/O error on dev loop5, logical block 0, async page read [ 402.133894][T11368] Buffer I/O error on dev loop5, logical block 0, async page read [ 402.176666][T11368] Buffer I/O error on dev loop5, logical block 0, async page read [ 402.202306][ T5911] usbhid 3-1:0.0: can't add hid device: -71 [ 402.208544][ T5897] m920x_read = error: -19 [ 402.213295][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 402.221206][ T5911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 402.223224][T11368] ldm_validate_partition_table(): Disk read failed. [ 402.230502][ T5911] usb 3-1: USB disconnect, device number 56 [ 402.300409][T11368] Buffer I/O error on dev loop5, logical block 0, async page read [ 402.401147][ T46] m920x_read = error: -19 [ 402.406016][ T46] dvb-usb: error -19 while querying for an remote control event. [ 402.547691][T11368] Buffer I/O error on dev loop5, logical block 0, async page read [ 402.679288][ T46] m920x_read = error: -19 [ 402.744009][ T46] dvb-usb: error -19 while querying for an remote control event. [ 402.773751][T11368] Buffer I/O error on dev loop5, logical block 0, async page read [ 402.784549][T11368] Dev loop5: unable to read RDB block 0 [ 402.806238][T11368] loop5: unable to read partition table [ 402.816919][T11368] loop5: partition table beyond EOD, truncated [ 402.837037][T11368] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 402.837037][T11368] ) failed (rc=-5) [ 402.898859][ T29] audit: type=1400 audit(1737048147.983:12616): avc: denied { read append } for pid=11387 comm="syz.5.1325" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 402.962121][ T29] audit: type=1400 audit(1737048147.993:12617): avc: denied { open } for pid=11387 comm="syz.5.1325" path="/167/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 403.011056][ T46] m920x_read = error: -19 [ 403.020990][ T46] dvb-usb: error -19 while querying for an remote control event. [ 403.063846][ T29] audit: type=1400 audit(1737048148.011:12618): avc: denied { write } for pid=11387 comm="syz.5.1325" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 403.202736][ T46] m920x_read = error: -19 [ 403.207201][ T46] dvb-usb: error -19 while querying for an remote control event. [ 403.562198][ T5867] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 403.606339][T11403] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1334'. [ 403.867311][T11406] program syz.2.1332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.112663][ T46] m920x_read = error: -19 [ 404.117042][ T46] dvb-usb: error -19 while querying for an remote control event. [ 404.133138][T11403] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1334'. [ 404.212833][T11410] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.1333'. [ 404.222174][T11410] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 404.232175][ T29] audit: type=1326 audit(1737048149.246:12619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11409 comm="syz.3.1333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5949d85d29 code=0x0 [ 404.378696][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 404.411899][ T46] m920x_read = error: -19 [ 404.416590][ T46] dvb-usb: error -19 while querying for an remote control event. [ 404.496498][ T5867] usb 2-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 404.511273][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.525838][ T29] audit: type=1400 audit(1737048149.499:12620): avc: denied { read } for pid=11409 comm="syz.3.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 404.564684][ T5867] usb 2-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 404.584129][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.592648][ T5897] m920x_read = error: -19 [ 404.597053][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 404.618716][ T5867] usb 2-1: config 0 descriptor?? [ 404.630524][ T5867] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 404.774417][ T5897] m920x_read = error: -19 [ 404.779962][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 405.023296][ T5897] m920x_read = error: -19 [ 405.028135][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 405.636921][ T46] m920x_read = error: -19 [ 405.641494][ T46] dvb-usb: error -19 while querying for an remote control event. [ 405.811270][ T46] m920x_read = error: -19 [ 405.815735][ T46] dvb-usb: error -19 while querying for an remote control event. [ 405.979184][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1345'. [ 406.057174][ T46] m920x_read = error: -19 [ 406.061636][ T46] dvb-usb: error -19 while querying for an remote control event. [ 406.250554][ T46] m920x_read = error: -19 [ 406.254952][ T46] dvb-usb: error -19 while querying for an remote control event. [ 406.388522][ T5897] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 406.442071][ T46] m920x_read = error: -19 [ 406.446495][ T46] dvb-usb: error -19 while querying for an remote control event. [ 406.548998][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 406.555507][ T5897] usb 4-1: config index 0 descriptor too short (expected 63268, got 36) [ 406.565409][ T5897] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 406.600567][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 406.621175][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.634553][ T5911] m920x_read = error: -19 [ 406.638953][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 406.664966][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.688213][ T5897] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 406.707944][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.741901][ T5897] usb 4-1: config 0 descriptor?? [ 406.827010][ T46] m920x_read = error: -19 [ 406.831428][ T46] dvb-usb: error -19 while querying for an remote control event. [ 407.008702][ T46] m920x_read = error: -19 [ 407.013108][ T46] dvb-usb: error -19 while querying for an remote control event. [ 407.199151][ T5897] hkems 0003:2006:0118.002B: item fetching failed at offset 1/5 [ 407.207562][ T46] m920x_read = error: -19 [ 407.219449][ T46] dvb-usb: error -19 while querying for an remote control event. [ 407.232315][ T5897] hkems 0003:2006:0118.002B: parse failed [ 407.268370][ T5897] hkems 0003:2006:0118.002B: probe with driver hkems failed with error -22 [ 407.407975][ T29] audit: type=1400 audit(1737048152.211:12621): avc: denied { getopt } for pid=11465 comm="syz.5.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 407.418780][ T5897] usb 4-1: USB disconnect, device number 57 [ 407.429507][T11466] trusted_key: encrypted_key: master key parameter '„'AŒñgZHpÞ$ÀZ€F¾$6ÓÄæÏ£' is invalid [ 407.447220][ T46] m920x_read = error: -19 [ 407.452586][ T46] dvb-usb: error -19 while querying for an remote control event. [ 407.492433][ T932] usb 2-1: USB disconnect, device number 79 [ 407.639411][ T46] m920x_read = error: -19 [ 407.643847][ T46] dvb-usb: error -19 while querying for an remote control event. [ 407.891967][ T46] m920x_read = error: -19 [ 407.896907][ T46] dvb-usb: error -19 while querying for an remote control event. [ 408.068271][ T46] m920x_read = error: -19 [ 408.229066][ T46] dvb-usb: error -19 while querying for an remote control event. [ 408.723172][ T46] m920x_read = error: -19 [ 408.727604][ T46] dvb-usb: error -19 while querying for an remote control event. [ 408.905162][ T5897] m920x_read = error: -19 [ 408.998993][ T29] audit: type=1400 audit(1737048153.699:12622): avc: denied { unmount } for pid=7662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 409.063186][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 409.232411][ T46] m920x_read = error: -19 [ 409.237004][ T46] dvb-usb: error -19 while querying for an remote control event. [ 409.564160][ T46] m920x_read = error: -19 [ 409.590301][ T46] dvb-usb: error -19 while querying for an remote control event. [ 409.620221][ T29] audit: type=1400 audit(1737048154.279:12623): avc: denied { create } for pid=11492 comm="syz.5.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.764867][ T29] audit: type=1400 audit(1737048154.410:12624): avc: denied { execmem } for pid=11495 comm="syz.5.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 409.917602][ T46] m920x_read = error: -19 [ 409.927735][ T46] dvb-usb: error -19 while querying for an remote control event. [ 409.958215][T11499] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 410.098599][ T46] m920x_read = error: -19 [ 410.216007][ T46] dvb-usb: error -19 while querying for an remote control event. [ 410.558169][ T46] m920x_read = error: -19 [ 410.562713][ T46] dvb-usb: error -19 while querying for an remote control event. [ 410.771233][ T46] m920x_read = error: -19 [ 410.779741][ T46] dvb-usb: error -19 while querying for an remote control event. [ 410.830367][T11511] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20002 [ 410.964185][ T5897] m920x_read = error: -19 [ 410.968641][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 411.160032][ T5897] m920x_read = error: -19 [ 411.164500][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 411.199586][ T46] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 411.240687][ T29] audit: type=1400 audit(1737048155.794:12625): avc: denied { watch_mount watch_reads } for pid=11522 comm="syz.2.1366" path="pipe:[5377]" dev="pipefs" ino=5377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 411.313172][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 411.326390][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 411.349051][ T5897] m920x_read = error: -19 [ 411.353503][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 411.361521][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 411.362880][T11523] ceph: No mds server is up or the cluster is laggy [ 411.368568][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.376272][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 411.390959][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 412.409339][ T5897] m920x_read = error: -19 [ 412.413783][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 412.421759][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.433894][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 412.444880][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.694366][ T5911] m920x_read = error: -19 [ 412.728138][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 412.801859][ T46] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 412.813679][ T46] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 412.821788][ T46] usb 4-1: Manufacturer: syz [ 412.994743][ T5897] m920x_read = error: -19 [ 412.999283][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 413.156142][ T46] usb 4-1: config 0 descriptor?? [ 413.274135][ T5897] m920x_read = error: -19 [ 413.278565][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 413.455095][ T5911] m920x_read = error: -19 [ 413.459565][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 413.468799][ T46] rc_core: IR keymap rc-hauppauge not found [ 413.474811][ T46] Registered IR keymap rc-empty [ 413.480570][ T46] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 413.510968][ T46] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 413.530306][ T46] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 413.543232][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input40 [ 413.563937][ T46] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 413.583530][ T46] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 413.611298][ T46] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 413.626277][ T5867] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 413.634226][ T932] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 413.643881][ T46] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 413.657037][T11550] ubi: mtd0 is already attached to ubi0 [ 413.658199][ T5897] m920x_read = error: -19 [ 413.666611][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1371'. [ 413.667018][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 413.684522][ T46] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 413.691705][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1371'. [ 413.714054][ T46] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 413.734295][ T46] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 413.758355][ T46] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 413.787065][ T46] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 413.808046][ T46] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 413.829335][ T932] usb 1-1: Using ep0 maxpacket: 16 [ 413.832012][ T46] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 413.840119][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.847205][ T46] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 413.866260][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.872083][ T5911] m920x_read = error: -19 [ 413.883260][T11513] block nbd3: NBD_DISCONNECT [ 413.896645][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 413.915904][ T932] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 413.925599][ T932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.934191][ T5867] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 413.943745][ T932] usb 1-1: Product: syz [ 413.949687][ T932] usb 1-1: Manufacturer: syz [ 413.954740][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.975948][ T932] usb 1-1: SerialNumber: syz [ 413.984057][ T932] usb 1-1: config 0 descriptor?? [ 413.993180][ T5867] usb 3-1: config 0 descriptor?? [ 414.075253][ T46] m920x_read = error: -19 [ 414.079710][ T46] dvb-usb: error -19 while querying for an remote control event. [ 414.454427][ T5911] m920x_read = error: -19 [ 414.459504][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 414.820355][ T5911] m920x_read = error: -19 [ 414.934752][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 415.193397][ T932] usb 4-1: USB disconnect, device number 58 [ 415.293918][ T46] m920x_read = error: -19 [ 415.298557][ T46] dvb-usb: error -19 while querying for an remote control event. [ 415.378655][ T29] audit: type=1400 audit(1737048159.657:12626): avc: denied { connect } for pid=11579 comm="syz.3.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 415.581955][T11544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.715476][T11544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.102648][ T46] m920x_read = error: -19 [ 416.114510][ T46] dvb-usb: error -19 while querying for an remote control event. [ 416.265966][ T29] audit: type=1400 audit(1737048160.480:12627): avc: denied { shutdown } for pid=11590 comm="syz.3.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 416.293283][ T46] m920x_read = error: -19 [ 416.318617][ T29] audit: type=1400 audit(1737048160.480:12628): avc: denied { read } for pid=11590 comm="syz.3.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 416.343230][ T46] dvb-usb: error -19 while querying for an remote control event. [ 416.371114][ T5867] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.002C/input/input41 [ 416.450154][ T5867] uclogic 0003:256C:006D.002C: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 416.534638][ T46] m920x_read = error: -19 [ 416.539368][ T46] dvb-usb: error -19 while querying for an remote control event. [ 417.441768][ T46] m920x_read = error: -19 [ 417.461163][ T46] dvb-usb: error -19 while querying for an remote control event. [ 417.463607][ T932] usb 1-1: USB disconnect, device number 51 [ 417.698055][ T5911] m920x_read = error: -19 [ 417.702632][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 417.894878][ T5897] m920x_read = error: -19 [ 417.899539][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 418.084154][ T5870] m920x_read = error: -19 [ 418.088560][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 418.212436][ T5911] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 418.233915][ T5897] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 418.266128][ T5870] m920x_read = error: -19 [ 418.270579][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 418.372865][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 418.383897][ T5911] usb 4-1: config 150 has an invalid interface number: 204 but max is 0 [ 418.394136][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 418.401786][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 418.415613][ T5911] usb 4-1: config 150 has no interface number 0 [ 418.425604][ T5897] usb 2-1: config 127 has an invalid interface number: 25 but max is 0 [ 418.435725][ T5897] usb 2-1: config 127 has no interface number 0 [ 418.444906][ T5911] usb 4-1: config 150 interface 204 has no altsetting 0 [ 418.452224][ T5870] m920x_read = error: -19 [ 418.456594][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 418.465337][ T5897] usb 2-1: config 127 interface 25 has no altsetting 0 [ 418.473886][ T5911] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 418.483770][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.492736][ T5911] usb 4-1: Product: syz [ 418.497676][ T5911] usb 4-1: Manufacturer: syz [ 418.502834][ T5911] usb 4-1: SerialNumber: syz [ 418.507622][ T5897] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 418.549921][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.586712][ T5897] usb 2-1: Product: syz [ 418.618581][ T5897] usb 2-1: Manufacturer: syz [ 418.623403][ T5897] usb 2-1: SerialNumber: syz [ 418.629306][ T5870] m920x_read = error: -19 [ 418.633750][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 418.668211][ T46] usb 3-1: USB disconnect, device number 57 [ 418.811304][ T5870] m920x_read = error: -19 [ 418.815830][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 418.840008][T11621] netlink: 'syz.2.1391': attribute type 2 has an invalid length. [ 418.849363][T11621] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1391'. [ 418.904702][ T5897] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 418.975155][ T5911] usb 4-1: USB disconnect, device number 59 [ 418.992792][ T5870] m920x_read = error: -19 [ 418.999221][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 419.174620][ T5870] m920x_read = error: -19 [ 419.189128][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 419.377709][ T5870] m920x_read = error: -19 [ 419.388417][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 419.560621][ T5870] m920x_read = error: -19 [ 419.565055][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 419.573428][ T5897] usb 2-1: reset high-speed USB device number 80 using dummy_hcd [ 419.746843][ T29] audit: type=1400 audit(1737048163.754:12629): avc: denied { read } for pid=11630 comm="syz.3.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 419.766434][ T46] m920x_read = error: -19 [ 419.766458][ T46] dvb-usb: error -19 while querying for an remote control event. [ 419.784517][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 419.793113][ T5897] usb 2-1: device firmware changed [ 419.798850][ T5897] ueagle-atm 2-1:127.25: usbatm_usb_probe: bind failed: -19! [ 419.809478][ T29] audit: type=1400 audit(1737048163.810:12630): avc: denied { getopt } for pid=11633 comm="syz.5.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 419.819557][ T5897] usb 2-1: USB disconnect, device number 80 [ 419.933568][ T46] m920x_read = error: -19 [ 419.937997][ T46] dvb-usb: error -19 while querying for an remote control event. [ 420.115363][ T5897] m920x_read = error: -19 [ 420.119896][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 420.167787][ T29] audit: type=1400 audit(1737048164.138:12631): avc: denied { create } for pid=11637 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 420.212877][ T29] audit: type=1400 audit(1737048164.138:12632): avc: denied { create } for pid=11637 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 420.279897][ T29] audit: type=1400 audit(1737048164.138:12633): avc: denied { setopt } for pid=11637 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 420.350288][ T46] m920x_read = error: -19 [ 420.354837][ T46] dvb-usb: error -19 while querying for an remote control event. [ 420.483725][T11652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.492528][T11652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.536374][ T5897] m920x_read = error: -19 [ 420.540807][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 420.552144][ T29] audit: type=1400 audit(1737048164.493:12634): avc: denied { accept } for pid=11644 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 421.527430][ T46] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 421.678214][ T5897] m920x_read = error: -19 [ 421.682635][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 421.780206][ T8] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 421.858683][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 421.865827][ T46] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 421.874456][ T46] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 421.883826][ T46] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 421.893021][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 421.905164][ T46] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 422.082051][ T5897] m920x_read = error: -19 [ 422.086663][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 422.094981][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 422.108273][ T46] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 422.117676][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.204044][ T8] usb 2-1: device descriptor read/64, error -71 [ 422.628844][ T5897] m920x_read = error: -19 [ 422.633318][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 422.653188][ T46] usb 6-1: config 0 descriptor?? [ 422.654691][T11664] netlink: 'syz.3.1402': attribute type 21 has an invalid length. [ 422.668903][T11664] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1402'. [ 422.745166][ T8] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 422.809388][ T5911] m920x_read = error: -19 [ 422.813877][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 422.855031][ T29] audit: type=1400 audit(1737048166.663:12635): avc: denied { read } for pid=11669 comm="syz.0.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 422.905823][ T46] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 422.927178][ T8] usb 2-1: device descriptor read/64, error -71 [ 423.001818][ T46] m920x_read = error: -19 [ 423.011266][ T46] dvb-usb: error -19 while querying for an remote control event. [ 423.044964][ T8] usb usb2-port1: attempt power cycle [ 423.183540][ T46] m920x_read = error: -19 [ 423.190329][ T46] dvb-usb: error -19 while querying for an remote control event. [ 423.387334][ T46] m920x_read = error: -19 [ 423.395797][ T46] dvb-usb: error -19 while querying for an remote control event. [ 423.567506][ T5870] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 423.617071][ T5911] m920x_read = error: -19 [ 423.623349][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 423.788366][ T5870] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.806873][ T5870] usb 3-1: config 0 has no interface number 0 [ 423.842505][ T5911] m920x_read = error: -19 [ 423.848940][ T5870] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 423.857033][ T8] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 423.866320][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 423.884136][ T8] usb 2-1: device descriptor read/8, error -71 [ 423.890932][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.922291][ T5870] usb 3-1: Product: syz [ 423.926523][ T5870] usb 3-1: Manufacturer: syz [ 423.931124][ T5870] usb 3-1: SerialNumber: syz [ 423.959115][ T5870] usb 3-1: config 0 descriptor?? [ 423.972103][ T5870] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 423.991945][ T5870] usb 3-1: selecting invalid altsetting 1 [ 424.004984][ T5870] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 424.022821][ T5870] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 424.070936][ T46] m920x_read = error: -19 [ 424.075554][ T46] dvb-usb: error -19 while querying for an remote control event. [ 424.217856][ T5870] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 424.442381][ T46] m920x_read = error: -19 [ 424.447016][ T46] dvb-usb: error -19 while querying for an remote control event. [ 425.314351][ T5870] usb 3-1: USB disconnect, device number 58 [ 425.373857][ T5911] m920x_read = error: -19 [ 425.384399][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 425.392777][ T46] usb 6-1: USB disconnect, device number 50 [ 425.401339][ T46] usblp0: removed [ 425.599787][ T5870] m920x_read = error: -19 [ 425.610238][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 425.685795][T11708] binder: 11707:11708 ioctl c018620c 20000180 returned -1 [ 425.804453][ T46] m920x_read = error: -19 [ 425.808887][ T46] dvb-usb: error -19 while querying for an remote control event. [ 426.025633][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'. [ 426.378738][ T46] m920x_read = error: -19 [ 426.384441][ T46] dvb-usb: error -19 while querying for an remote control event. [ 426.527491][ T5867] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 426.583555][ T46] m920x_read = error: -19 [ 426.585783][T11726] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 426.594431][T11726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 426.602277][T11726] vhci_hcd vhci_hcd.0: Device attached [ 426.617659][ T46] dvb-usb: error -19 while querying for an remote control event. [ 426.968483][ T5870] m920x_read = error: -19 [ 426.972901][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 427.042893][T11731] vhci_hcd: connection closed [ 427.053549][ T3505] vhci_hcd: stop threads [ 427.062759][ T3505] vhci_hcd: release socket [ 427.067425][ T3505] vhci_hcd: disconnect device [ 427.149841][ T5870] m920x_read = error: -19 [ 427.154306][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 427.352863][ T5870] m920x_read = error: -19 [ 427.357414][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 427.379011][ T5867] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 427.393869][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.402493][ T5867] usb 6-1: Product: syz [ 427.406728][ T5867] usb 6-1: Manufacturer: syz [ 427.428104][ T5867] usb 6-1: SerialNumber: syz [ 427.474991][ T5867] usb 6-1: config 0 descriptor?? [ 427.484717][ T5867] hub 6-1:0.0: bad descriptor, ignoring hub [ 427.490725][ T5867] hub 6-1:0.0: probe with driver hub failed with error -5 [ 428.077596][ T5870] m920x_read = error: -19 [ 428.082096][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 428.092378][ T29] audit: type=1400 audit(1737048171.565:12636): avc: denied { create } for pid=11718 comm="syz.5.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 428.111324][ T5867] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input43 [ 428.122621][ T29] audit: type=1400 audit(1737048171.565:12637): avc: denied { create } for pid=11718 comm="syz.5.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 428.214224][ T29] audit: type=1400 audit(1737048171.668:12638): avc: denied { read } for pid=11746 comm="syz.2.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 428.250887][ T46] m920x_read = error: -19 [ 428.255330][ T46] dvb-usb: error -19 while querying for an remote control event. [ 428.287114][ T5867] usb 6-1: USB disconnect, device number 51 [ 428.293052][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 428.448624][ T46] m920x_read = error: -19 [ 428.453342][ T46] dvb-usb: error -19 while querying for an remote control event. [ 429.516910][ T46] m920x_read = error: -19 [ 429.521352][ T46] dvb-usb: error -19 while querying for an remote control event. [ 429.696999][ T5870] m920x_read = error: -19 [ 429.701723][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 430.262440][ T5870] m920x_read = error: -19 [ 430.267020][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 430.365352][T11764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1427'. [ 430.451491][ T5911] m920x_read = error: -19 [ 430.458107][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 430.624179][ T46] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 430.634978][ T5911] m920x_read = error: -19 [ 430.639403][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 430.665040][ T5867] IPVS: starting estimator thread 0... [ 430.684770][ T5870] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 430.774356][T11779] IPVS: using max 39 ests per chain, 93600 per kthread [ 430.818125][T11782] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1431'. [ 430.838116][ T5911] m920x_read = error: -19 [ 430.843679][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 430.851877][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 430.868514][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.884841][ T46] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 430.894184][ T5870] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 12320, setting to 64 [ 430.907413][ T5870] usb 6-1: config 0 interface 0 has no altsetting 0 [ 430.914147][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.923567][ T5870] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 430.923711][ T932] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 430.932699][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.934522][ T46] usb 1-1: config 0 descriptor?? [ 430.967228][ T5870] usb 6-1: config 0 descriptor?? [ 430.978703][ T5870] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 431.009147][ T5898] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 431.030498][ T5870] m920x_read = error: -19 [ 431.034900][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 431.121482][ T932] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 431.138435][ T932] usb 3-1: config 0 has no interface number 0 [ 431.153592][ T932] usb 3-1: config 0 interface 32 has no altsetting 0 [ 431.164011][ T932] usb 3-1: New USB device found, idVendor=1410, idProduct=1130, bcdDevice=6c.85 [ 431.180983][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 431.189197][ T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.195303][T11768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.207774][ T5898] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 431.220722][T11768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.228675][ T5870] m920x_read = error: -19 [ 431.229486][ T932] usb 3-1: Product: syz [ 431.233061][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 431.240364][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.253270][ T932] usb 3-1: Manufacturer: syz [ 431.262508][ T932] usb 3-1: SerialNumber: syz [ 431.277053][ T5898] usb 4-1: config 0 descriptor?? [ 431.283576][ T932] usb 3-1: config 0 descriptor?? [ 431.298592][ T932] option 3-1:0.32: GSM modem (1-port) converter detected [ 431.315866][ T932] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 431.430339][ T46] elecom 0003:056E:00FB.002D: hidraw0: USB HID v1.01 Device [HID 056e:00fb] on usb-dummy_hcd.0-1/input0 [ 431.458339][ T46] m920x_read = error: -19 [ 431.462762][ T46] dvb-usb: error -19 while querying for an remote control event. [ 431.512318][T11773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.541085][T11773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.620217][ T932] usb 3-1: USB disconnect, device number 59 [ 431.628055][ T932] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 431.650563][ T46] m920x_read = error: -19 [ 431.657624][ T932] option 3-1:0.32: device disconnected [ 431.779078][ T46] dvb-usb: error -19 while querying for an remote control event. [ 431.924787][T11787] fuse: Bad value for 'fd' [ 432.791198][ T5898] cherry 0003:046A:0023.002E: unknown main item tag 0x0 [ 432.805183][ T5898] cherry 0003:046A:0023.002E: hidraw1: USB HID v0.00 Device [HID 046a:0023] on usb-dummy_hcd.3-1/input0 [ 433.919862][ T46] m920x_read = error: -19 [ 433.924286][ T46] dvb-usb: error -19 while querying for an remote control event. [ 434.109922][ T5870] m920x_read = error: -19 [ 434.172044][ T932] usb 1-1: USB disconnect, device number 52 [ 434.184262][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 434.471283][ T5870] m920x_read = error: -19 [ 434.478708][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 434.489805][ T46] usb 4-1: USB disconnect, device number 60 [ 434.575531][ T5867] usb 6-1: USB disconnect, device number 52 [ 434.654625][ T5911] m920x_read = error: -19 [ 434.659022][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 434.857823][ T5911] m920x_read = error: -19 [ 434.862322][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 434.933115][T11804] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 434.945171][T11804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.959871][T11804] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1436'. [ 434.972809][T11804] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 434.981694][T11804] overlayfs: missing 'lowerdir' [ 435.371256][ T46] m920x_read = error: -19 [ 435.375670][ T46] dvb-usb: error -19 while querying for an remote control event. [ 435.581098][ T5911] m920x_read = error: -19 [ 435.586716][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 435.798906][ T5911] m920x_read = error: -19 [ 435.803424][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 435.922784][T11822] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.980478][ T46] m920x_read = error: -19 [ 435.985592][ T46] dvb-usb: error -19 while querying for an remote control event. [ 436.161972][ T5911] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 436.169716][ T46] m920x_read = error: -19 [ 436.175850][ T46] dvb-usb: error -19 while querying for an remote control event. [ 436.299705][T11841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.315399][T11841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.345121][ T5911] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 436.356416][ T46] m920x_read = error: -19 [ 436.360782][ T46] dvb-usb: error -19 while querying for an remote control event. [ 436.368811][ T5911] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1327, setting to 1024 [ 436.380026][ T5911] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 436.390129][ T5911] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 436.399372][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.410131][T11810] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.419236][ T5911] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.482754][ T932] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 436.546843][ T5911] m920x_read = error: -19 [ 436.551253][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 436.589543][ T5867] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 436.632383][ T932] usb 3-1: device descriptor read/64, error -71 [ 436.670392][ T5911] usb 2-1: USB disconnect, device number 85 [ 436.728496][ T5870] m920x_read = error: -19 [ 436.732999][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 436.751609][ T5867] usb 1-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 436.763399][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.772959][ T5867] usb 1-1: config 0 descriptor?? [ 436.779388][ T5867] gspca_main: tv8532-2.14.0 probing 0545:808b [ 436.901948][ T932] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 436.911348][ T5870] m920x_read = error: -19 [ 436.916365][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 436.972382][ T29] audit: type=1400 audit(1737048179.862:12639): avc: denied { getattr } for pid=11847 comm="syz.3.1450" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 436.974535][ T46] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 437.034225][ T5867] usb 1-1: USB disconnect, device number 53 [ 437.060033][ T932] usb 3-1: device descriptor read/64, error -71 [ 437.092104][ T5870] m920x_read = error: -19 [ 437.098542][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 437.166794][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 437.173254][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.184515][ T46] usb 6-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 437.189564][ T932] usb usb3-port1: attempt power cycle [ 437.193740][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.210247][ T46] usb 6-1: config 0 descriptor?? [ 437.216678][ T46] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 437.266911][T11851] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 437.275923][ T46] m920x_read = error: -19 [ 437.280393][T11851] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 437.289108][ T46] dvb-usb: error -19 while querying for an remote control event. [ 437.297192][T11851] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 437.305488][T11851] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 437.314413][T11851] geneve2: entered promiscuous mode [ 437.319790][T11851] geneve2: entered allmulticast mode [ 437.461446][ T5867] usb 6-1: USB disconnect, device number 53 [ 437.466330][ T46] m920x_read = error: -19 [ 437.471777][ T46] dvb-usb: error -19 while querying for an remote control event. [ 438.003871][ T46] m920x_read = error: -19 [ 438.008308][ T46] dvb-usb: error -19 while querying for an remote control event. [ 438.118295][ T932] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 438.151296][ T932] usb 3-1: device descriptor read/8, error -71 [ 438.246600][ T5911] m920x_read = error: -19 [ 438.251151][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 438.366871][ T46] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 438.407139][ T932] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 438.428357][ T5911] m920x_read = error: -19 [ 438.434890][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 438.439048][ T5898] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 438.450566][ T932] usb 3-1: device descriptor read/8, error -71 [ 438.537910][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 438.544609][ T46] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 438.553236][ T46] usb 1-1: config 0 has no interface number 0 [ 438.559895][ T46] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 438.571388][ T46] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 438.578251][ T932] usb usb3-port1: unable to enumerate USB device [ 438.590411][ T46] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 438.602022][ T46] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.615349][ T5911] m920x_read = error: -19 [ 438.620169][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 438.633339][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 438.639003][ T46] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 438.648295][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.657340][ T46] usb 1-1: Product: syz [ 438.661770][ T46] usb 1-1: Manufacturer: syz [ 438.661974][ T5898] usb 4-1: config 64 has an invalid interface number: 255 but max is 1 [ 438.674977][ T5898] usb 4-1: config 64 has an invalid interface number: 2 but max is 1 [ 438.675153][ T46] usb 1-1: SerialNumber: syz [ 438.683196][ T5898] usb 4-1: config 64 has no interface number 0 [ 438.694013][ T5898] usb 4-1: config 64 has no interface number 1 [ 438.700347][ T5898] usb 4-1: config 64 interface 255 has no altsetting 0 [ 438.707320][ T5898] usb 4-1: config 64 interface 2 has no altsetting 0 [ 438.717245][ T46] usb 1-1: config 0 descriptor?? [ 438.723308][ T5898] usb 4-1: New USB device found, idVendor=7886, idProduct=d4d4, bcdDevice=99.70 [ 438.733186][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.741575][ T5898] usb 4-1: Product: syz [ 438.745866][ T5898] usb 4-1: Manufacturer: syz [ 438.751880][ T5898] usb 4-1: SerialNumber: syz [ 438.791956][ T5911] m920x_read = error: -19 [ 438.799876][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 438.955887][ T46] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 438.973595][ T5911] m920x_read = error: -19 [ 438.986199][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 438.994004][T11861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.994143][T11861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.028612][ T5898] usb-storage 4-1:64.255: USB Mass Storage device detected [ 439.095617][ T5898] usb 4-1: USB disconnect, device number 61 [ 439.176741][ T5911] m920x_read = error: -19 [ 439.181159][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 439.287290][T11860] SELinux: policydb string length 0 does not match expected length 8 [ 439.297609][T11860] SELinux: failed to load policy [ 439.369071][ T5911] m920x_read = error: -19 [ 439.382535][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 439.595142][ T5911] m920x_read = error: -19 [ 439.599564][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 439.718276][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 439.730296][T11879] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1458'. [ 439.744021][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1458'. [ 439.764114][T11879] vlan0: entered allmulticast mode [ 439.796759][ T5911] m920x_read = error: -19 [ 439.807332][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 439.909881][T11884] Cannot find add_set index 0 as target [ 439.955044][ T5867] usb 1-1: USB disconnect, device number 54 [ 439.989806][ T5911] m920x_read = error: -19 [ 439.994333][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 440.203079][ T5911] m920x_read = error: -19 [ 440.207777][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 440.223680][T11888] dvmrp8: entered allmulticast mode [ 440.243985][T11888] dlm: Unknown command passed to DLM device : 9 [ 440.243985][T11888] [ 440.442537][ T5911] m920x_read = error: -19 [ 440.447088][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 441.314787][ T5898] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 441.370474][ T46] m920x_read = error: -19 [ 441.374912][ T46] dvb-usb: error -19 while querying for an remote control event. [ 441.476547][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 441.487586][ T5898] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 441.532929][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.541504][ T29] audit: type=1400 audit(1737048184.109:12640): avc: denied { ioctl } for pid=11910 comm="syz.2.1466" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 441.549430][ T5898] usb 2-1: Product: syz [ 441.571939][ T5911] m920x_read = error: -19 [ 441.575050][ T5898] usb 2-1: Manufacturer: syz [ 441.576326][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 441.580847][ T5898] usb 2-1: SerialNumber: syz [ 441.627224][ T5898] usb 2-1: config 0 descriptor?? [ 441.634482][ T29] audit: type=1400 audit(1737048184.202:12641): avc: denied { execute } for pid=11912 comm="syz.2.1468" path="/proc/asound/seq/clients" dev="proc" ino=4026532313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 441.661197][ T5898] gspca_main: se401-2.14.0 probing 047d:5003 [ 441.785184][ T5911] m920x_read = error: -19 [ 441.789622][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 441.821477][T11923] netlink: 'syz.5.1470': attribute type 4 has an invalid length. [ 441.966955][ T5911] m920x_read = error: -19 [ 441.984407][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 442.180815][ T5911] m920x_read = error: -19 [ 442.185248][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 442.305004][T11901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.314055][T11901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.362537][ T5911] m920x_read = error: -19 [ 442.366931][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 442.424252][ T5898] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 442.452456][ T5898] usb 2-1: USB disconnect, device number 86 [ 442.556458][ T46] m920x_read = error: -19 [ 442.560827][ T46] dvb-usb: error -19 while querying for an remote control event. [ 442.736631][ T46] m920x_read = error: -19 [ 442.741018][ T46] dvb-usb: error -19 while querying for an remote control event. [ 442.779481][ T5867] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 442.918451][ T5911] m920x_read = error: -19 [ 442.922898][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 442.950409][ T5867] usb 6-1: device descriptor read/64, error -71 [ 443.106593][ T5911] m920x_read = error: -19 [ 443.321762][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 443.399516][ T5867] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 443.510539][ T5911] m920x_read = error: -19 [ 443.549205][ T5867] usb 6-1: device descriptor read/64, error -71 [ 443.785773][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 444.000106][T11945] binder: BINDER_SET_CONTEXT_MGR already set [ 444.006295][T11945] binder: 11941:11945 ioctl 4018620d 200002c0 returned -16 [ 444.045603][ T46] m920x_read = error: -19 [ 444.212001][ T5867] usb usb6-port1: attempt power cycle [ 444.258009][ T46] dvb-usb: error -19 while querying for an remote control event. [ 444.578986][ T5867] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 444.634357][ T5867] usb 6-1: device descriptor read/8, error -71 [ 444.939072][ T5867] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 444.962856][ T5867] usb 6-1: device descriptor read/8, error -71 [ 445.005795][ T46] m920x_read = error: -19 [ 445.010239][ T46] dvb-usb: error -19 while querying for an remote control event. [ 445.141393][ T5911] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 445.968016][ T5867] usb usb6-port1: unable to enumerate USB device [ 446.034244][T11959] SELinux: Context Ü is not valid (left unmapped). [ 446.048448][ T5870] m920x_read = error: -19 [ 446.053210][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 446.221794][ T5870] m920x_read = error: -19 [ 446.226247][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 447.159564][ T5870] m920x_read = error: -19 [ 447.164188][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 447.193820][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.204539][ T5911] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 447.402402][ T5870] m920x_read = error: -19 [ 447.406821][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 447.449562][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.109110][ T5870] m920x_read = error: -19 [ 448.113557][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 448.133459][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.155748][ T5911] usb 1-1: config 0 descriptor?? [ 448.165575][ T5911] usb 1-1: can't set config #0, error -71 [ 448.178138][ T5911] usb 1-1: USB disconnect, device number 55 [ 448.288341][ T5868] m920x_read = error: -19 [ 448.501135][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 448.929935][T11975] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 448.941986][T11976] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 448.958345][T11975] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 449.044019][ T5868] m920x_read = error: -19 [ 449.048624][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 449.270814][ T5870] m920x_read = error: -19 [ 449.300148][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 449.541400][ T46] m920x_read = error: -19 [ 449.562237][ T46] dvb-usb: error -19 while querying for an remote control event. [ 449.791817][ T5911] m920x_read = error: -19 [ 449.819281][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 449.846608][ T29] audit: type=1400 audit(1737048191.882:12642): avc: denied { watch watch_reads } for pid=11984 comm="syz.2.1487" path="/sys/fs/cgroup" dev="sysfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 449.953046][T11994] input: syz1 as /devices/virtual/input/input46 [ 450.135420][ T5911] m920x_read = error: -19 [ 450.139794][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 451.027154][ T46] m920x_read = error: -19 [ 451.032975][ T46] dvb-usb: error -19 while querying for an remote control event. [ 451.232783][ T46] m920x_read = error: -19 [ 451.237286][ T46] dvb-usb: error -19 while querying for an remote control event. [ 451.406728][ T46] m920x_read = error: -19 [ 451.411170][ T46] dvb-usb: error -19 while querying for an remote control event. [ 451.556531][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.573314][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.651996][ T46] m920x_read = error: -19 [ 451.656921][ T46] dvb-usb: error -19 while querying for an remote control event. [ 452.687111][ T46] m920x_read = error: -19 [ 452.691650][ T46] dvb-usb: error -19 while querying for an remote control event. [ 452.792281][ T29] audit: type=1326 audit(1737048194.660:12643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.3.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5949d85d29 code=0x7ffc0000 [ 452.816802][ T29] audit: type=1326 audit(1737048194.660:12644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.3.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5949d85d29 code=0x7ffc0000 [ 452.841058][ T29] audit: type=1326 audit(1737048194.660:12645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.3.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f5949d85d29 code=0x7ffc0000 [ 452.865102][ T29] audit: type=1326 audit(1737048194.660:12646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.3.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5949d85d29 code=0x7ffc0000 [ 452.889062][ T29] audit: type=1326 audit(1737048194.660:12647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.3.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5949d85d29 code=0x7ffc0000 [ 452.931961][ T5870] m920x_read = error: -19 [ 452.932033][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 453.269171][ T5870] m920x_read = error: -19 [ 453.273718][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 453.292549][ T29] audit: type=1326 audit(1737048195.099:12648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.3.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5949d85d29 code=0x7ffc0000 [ 453.417773][ T29] audit: type=1326 audit(1737048195.128:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.3.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5949d85d29 code=0x7ffc0000 [ 453.461399][ T5911] m920x_read = error: -19 [ 453.469662][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 453.550078][ T46] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 453.737516][ T29] audit: type=1326 audit(1737048195.128:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.3.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5949d85d29 code=0x7ffc0000 [ 453.807365][ T5911] m920x_read = error: -19 [ 453.811803][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 453.822844][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 453.835834][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 453.849607][ T29] audit: type=1326 audit(1737048195.165:12651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.3.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5949d85d29 code=0x7ffc0000 [ 453.900159][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 453.905004][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880354c8c00: rx timeout, send abort [ 453.920194][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880354c8c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 453.938323][ T46] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 454.002060][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.050596][ T46] usb 6-1: Product: syz [ 454.090128][ T46] usb 6-1: Manufacturer: syz [ 454.105067][ T5911] m920x_read = error: -19 [ 454.394587][ T46] usb 6-1: SerialNumber: syz [ 454.403936][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 454.489343][ T46] usb 6-1: config 0 descriptor?? [ 454.506742][ T46] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 454.696744][ T46] m920x_read = error: -19 [ 454.701489][ T46] dvb-usb: error -19 while querying for an remote control event. [ 454.802583][ T8812] usb 6-1: Failed to submit usb control message: -71 [ 454.810212][ T5867] usb 6-1: USB disconnect, device number 58 [ 454.827539][ T8812] usb 6-1: unable to send the bmi data to the device: -71 [ 454.870646][ T46] m920x_read = error: -19 [ 454.875059][ T46] dvb-usb: error -19 while querying for an remote control event. [ 454.881095][ T8812] usb 6-1: unable to get target info from device [ 454.892508][ T5898] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 454.924807][ T8812] usb 6-1: could not get target info (-71) [ 454.930997][ T8812] usb 6-1: could not probe fw (-71) [ 455.093999][ T46] m920x_read = error: -19 [ 455.106469][ T46] dvb-usb: error -19 while querying for an remote control event. [ 455.170002][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 455.190640][ T5898] usb 1-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 455.205881][ T5898] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 455.236019][ T5898] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 455.252613][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.295130][ T5898] usb 1-1: Product: syz [ 455.298282][ T46] m920x_read = error: -19 [ 455.305302][ T5898] usb 1-1: Manufacturer: syz [ 455.307932][ T46] dvb-usb: error -19 while querying for an remote control event. [ 455.316082][ T5898] usb 1-1: SerialNumber: syz [ 455.336210][ T5898] usb 1-1: config 0 descriptor?? [ 455.415670][ T5911] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 455.479826][ T46] m920x_read = error: -19 [ 455.484283][ T46] dvb-usb: error -19 while querying for an remote control event. [ 455.576053][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 455.582969][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 455.597032][ T5911] usb 3-1: config 127 has an invalid interface number: 25 but max is 0 [ 455.615235][ T5911] usb 3-1: config 127 has no interface number 0 [ 455.637415][ T5911] usb 3-1: config 127 interface 25 has no altsetting 0 [ 455.663926][ T5911] usb 3-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 455.673431][ T46] m920x_read = error: -19 [ 455.677835][ T46] dvb-usb: error -19 while querying for an remote control event. [ 455.696131][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.713699][ T5911] usb 3-1: Product: syz [ 455.722513][ T5911] usb 3-1: Manufacturer: syz [ 455.732001][ T5911] usb 3-1: SerialNumber: syz [ 456.401564][ T5870] m920x_read = error: -19 [ 456.564675][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 456.745388][ T46] m920x_read = error: -19 [ 456.749826][ T46] dvb-usb: error -19 while querying for an remote control event. [ 456.978037][ T5870] m920x_read = error: -19 [ 456.983095][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 457.160244][ T5911] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 457.323896][ T46] m920x_read = error: -19 [ 457.347426][ T46] dvb-usb: error -19 while querying for an remote control event. [ 457.543591][ T46] m920x_read = error: -19 [ 457.550117][ T46] dvb-usb: error -19 while querying for an remote control event. [ 457.782929][ T46] m920x_read = error: -19 [ 457.915366][ T46] dvb-usb: error -19 while querying for an remote control event. [ 458.073152][T12105] 9pnet_virtio: no channels available for device syz [ 458.081748][T12105] overlayfs: missing 'workdir' [ 458.092555][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 458.092587][ T29] audit: type=1400 audit(1737048199.599:12663): avc: denied { bind } for pid=12097 comm="syz.5.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 458.160610][ T5898] usb 1-1: USB disconnect, device number 56 [ 458.337835][ T5870] m920x_read = error: -19 [ 458.342546][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 458.925301][ T5911] usb 3-1: reset high-speed USB device number 64 using dummy_hcd [ 458.944687][ T46] m920x_read = error: -19 [ 458.949224][ T46] dvb-usb: error -19 while querying for an remote control event. [ 459.125851][ T5870] m920x_read = error: -19 [ 459.131433][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 459.826456][ T5867] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 459.838276][ T5870] m920x_read = error: -19 [ 459.842854][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 460.013537][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 460.023758][ T5870] m920x_read = error: -19 [ 460.056470][T12116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.064960][T12116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.077484][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 460.301956][ T46] m920x_read = error: -19 [ 460.333127][ T46] dvb-usb: error -19 while querying for an remote control event. [ 460.365599][ T5898] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 460.439516][ T5911] ueagle-atm 3-1:127.25: usbatm_usb_probe: bind failed: -19! [ 460.521675][ T5911] usb 3-1: USB disconnect, device number 64 [ 460.536658][ T46] m920x_read = error: -19 [ 460.541100][ T46] dvb-usb: error -19 while querying for an remote control event. [ 460.614399][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 460.626734][ T5898] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 460.647417][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.658782][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.782037][ T46] m920x_read = error: -19 [ 460.786757][ T46] dvb-usb: error -19 while querying for an remote control event. [ 460.803093][ T5898] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.813203][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.823871][ T5898] usb 6-1: Product: syz [ 460.828839][ T5898] usb 6-1: Manufacturer: syz [ 460.833523][ T5898] usb 6-1: SerialNumber: syz [ 461.805256][ T5867] usb 1-1: unable to get BOS descriptor or descriptor too short [ 461.825976][ T5867] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 461.852069][ T5911] m920x_read = error: -19 [ 461.856480][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 461.871553][ T5867] usb 1-1: can't read configurations, error -71 [ 462.249968][ T5898] usb 6-1: 0:2 : does not exist [ 462.257924][ T5898] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 462.293993][ T5898] usb 6-1: USB disconnect, device number 59 [ 462.812237][ T5911] m920x_read = error: -19 [ 462.816685][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 463.041700][ T46] m920x_read = error: -19 [ 463.046166][ T46] dvb-usb: error -19 while querying for an remote control event. [ 463.258814][ T46] m920x_read = error: -19 [ 463.263582][ T46] dvb-usb: error -19 while querying for an remote control event. [ 463.436492][ T46] m920x_read = error: -19 [ 463.440968][ T46] dvb-usb: error -19 while querying for an remote control event. [ 463.662463][ T46] m920x_read = error: -19 [ 463.666844][ T46] dvb-usb: error -19 while querying for an remote control event. [ 463.733013][ T5867] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 463.923834][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 463.936618][ T46] m920x_read = error: -19 [ 463.941073][ T46] dvb-usb: error -19 while querying for an remote control event. [ 463.970485][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.021838][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.060036][ T5867] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 464.069321][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.077405][ T5867] usb 1-1: Product: syz [ 464.081824][ T5867] usb 1-1: Manufacturer: syz [ 464.086569][ T5867] usb 1-1: SerialNumber: syz [ 464.099249][ T5867] usb 1-1: config 0 descriptor?? [ 464.118039][ T5911] m920x_read = error: -19 [ 464.122509][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 464.123132][ T5867] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 464.139716][ T5867] gspca_stv06xx: st6422 sensor detected [ 464.246812][ T46] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 464.310385][ T5870] m920x_read = error: -19 [ 464.314788][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 464.370530][T12162] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (4) [ 464.449402][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 464.450758][ T5867] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 464.458751][ T46] usb 6-1: unable to get BOS descriptor or descriptor too short [ 464.662355][ T5867] usb 1-1: USB disconnect, device number 58 [ 464.682509][ T5870] m920x_read = error: -19 [ 464.687513][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 464.715013][ T46] usb 6-1: config 127 has an invalid interface number: 25 but max is 0 [ 464.726092][ T46] usb 6-1: config 127 has no interface number 0 [ 464.737393][ T46] usb 6-1: config 127 interface 25 has no altsetting 0 [ 464.750872][ T46] usb 6-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 464.760189][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.768252][ T46] usb 6-1: Product: syz [ 464.785660][ T46] usb 6-1: Manufacturer: syz [ 464.793822][ T46] usb 6-1: SerialNumber: syz [ 464.802036][ T5898] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 464.891250][ T5870] m920x_read = error: -19 [ 464.895717][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 464.994610][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 465.034832][ T5898] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 465.049665][ T46] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 465.069353][ T5870] m920x_read = error: -19 [ 465.073825][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 465.080012][ T5898] usb 2-1: config 179 has no interface number 0 [ 465.094556][ T5898] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 465.158168][ T5898] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 465.197367][ T5898] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 465.305793][ T5870] m920x_read = error: -19 [ 465.310655][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 465.354542][ T5898] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 466.299967][T12170] tipc: Can't bind to reserved service type 0 [ 466.341111][ T5911] m920x_read = error: -19 [ 466.371881][ T5898] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 466.381083][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.381432][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 466.422673][T12162] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 466.623198][ T5911] m920x_read = error: -19 [ 466.627620][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 466.801363][ T5870] m920x_read = error: -19 [ 466.805787][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 466.822857][ T29] audit: type=1326 audit(1737048207.783:12664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0db85d29 code=0x7ffc0000 [ 466.914426][ T46] usb 6-1: reset high-speed USB device number 60 using dummy_hcd [ 467.060286][ T5898] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 467.216382][ T29] audit: type=1326 audit(1737048207.783:12665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0db85d29 code=0x7ffc0000 [ 467.216509][ T5870] m920x_read = error: -19 [ 467.239983][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.242112][ T29] audit: type=1326 audit(1737048207.783:12666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8e0db85d29 code=0x7ffc0000 [ 467.334546][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 467.343730][ T29] audit: type=1326 audit(1737048207.812:12667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0db85d29 code=0x7ffc0000 [ 467.400609][ T29] audit: type=1326 audit(1737048207.812:12668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0db85d29 code=0x7ffc0000 [ 467.429879][ T29] audit: type=1326 audit(1737048207.812:12669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8e0db85d29 code=0x7ffc0000 [ 467.454135][ T29] audit: type=1326 audit(1737048207.812:12670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0db85d29 code=0x7ffc0000 [ 467.478076][ T29] audit: type=1326 audit(1737048207.812:12671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0db85d29 code=0x7ffc0000 [ 467.496175][ T46] usb 6-1: device not accepting address 60, error -71 [ 467.506745][ T29] audit: type=1326 audit(1737048207.812:12672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8e0db85d29 code=0x7ffc0000 [ 467.539077][ T5870] m920x_read = error: -19 [ 467.543867][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 467.601295][ T29] audit: type=1326 audit(1737048207.812:12673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0db85d29 code=0x7ffc0000 [ 467.667318][ T5911] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 467.818645][ T932] usb 2-1: USB disconnect, device number 87 [ 467.820446][ T5870] m920x_read = error: -19 [ 467.841616][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 468.030769][ T5898] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 468.039931][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.052597][ T5898] usb 1-1: Product: syz [ 468.056770][ T5898] usb 1-1: Manufacturer: syz [ 468.061346][ T5898] usb 1-1: SerialNumber: syz [ 468.096263][ T5898] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 468.129152][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 468.168592][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 468.191032][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 468.233182][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 468.265843][ T5870] m920x_read = error: -19 [ 468.270339][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 468.283725][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 468.313239][ T5911] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 468.330218][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.340247][ T5911] usb 4-1: config 0 descriptor?? [ 468.447596][ T932] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 468.469064][ T5870] m920x_read = error: -19 [ 468.473511][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 468.650925][ T932] usb 2-1: Using ep0 maxpacket: 16 [ 468.657752][ T932] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 468.666846][ T932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.683406][ T46] ueagle-atm 6-1:127.25: usbatm_usb_probe: bind failed: -19! [ 468.691847][T12198] syz.2.1539: attempt to access beyond end of device [ 468.691847][T12198] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 468.712596][ T932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.725600][ T5870] m920x_read = error: -19 [ 468.730068][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 468.730277][T12198] befs: (nbd2): unable to read superblock [ 468.764914][ T46] usb 6-1: USB disconnect, device number 60 [ 468.764969][ T932] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.796353][ T5911] plantronics 0003:047F:FFFF.002F: ignoring exceeding usage max [ 468.820346][ T5870] usb 1-1: USB disconnect, device number 59 [ 468.823554][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.829512][ T5911] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 468.840980][ T932] usb 2-1: Product: syz [ 468.848786][ T932] usb 2-1: Manufacturer: syz [ 468.853522][ T932] usb 2-1: SerialNumber: syz [ 468.896977][ T5911] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 468.939382][ T46] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 468.960820][ T5911] m920x_read = error: -19 [ 468.965960][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 469.186782][ T46] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 469.249468][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 469.256582][ T8] ath9k_htc: Failed to initialize the device [ 469.278818][ T5870] usb 1-1: ath9k_htc: USB layer deinitialized [ 469.290738][ T46] usb 6-1: config 0 has no interface number 0 [ 469.336438][ T46] usb 6-1: config 0 interface 32 has no altsetting 0 [ 469.353176][ T46] usb 6-1: New USB device found, idVendor=1410, idProduct=1130, bcdDevice=6c.85 [ 469.362972][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.371888][ T46] usb 6-1: Product: syz [ 469.378903][ T46] usb 6-1: Manufacturer: syz [ 469.383788][ T46] usb 6-1: SerialNumber: syz [ 469.393914][ T46] usb 6-1: config 0 descriptor?? [ 469.401791][ T46] option 6-1:0.32: GSM modem (1-port) converter detected [ 469.426511][ T46] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 469.452588][ T46] m920x_read = error: -19 [ 469.457028][ T46] dvb-usb: error -19 while querying for an remote control event. [ 469.517846][ T932] usb 2-1: 0:2 : does not exist [ 469.545759][ T932] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 469.614307][ T932] usb 2-1: USB disconnect, device number 88 [ 469.645654][ T5870] m920x_read = error: -19 [ 469.650104][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 469.728851][ T5898] usb 6-1: USB disconnect, device number 61 [ 469.736957][ T5898] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 469.748316][ T5898] option 6-1:0.32: device disconnected [ 469.785387][ T5870] usb 4-1: USB disconnect, device number 62 [ 469.848078][ T5911] m920x_read = error: -19 [ 469.852555][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 469.965715][ T8] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 470.030004][ T5911] m920x_read = error: -19 [ 470.034445][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 470.138154][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 470.150063][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 24929, setting to 64 [ 470.165544][ T8] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 470.175789][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.190180][ T932] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 470.199798][ T8] usb 3-1: Product: syz [ 470.204286][ T8] usb 3-1: Manufacturer: syz [ 470.209051][ T8] usb 3-1: SerialNumber: syz [ 470.211537][ T5911] m920x_read = error: -19 [ 470.218975][ T8] usb 3-1: config 0 descriptor?? [ 470.219172][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 470.224903][T12214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 470.297011][ T8] rc_core: IR keymap rc-streamzap not found [ 470.303077][ T8] Registered IR keymap rc-empty [ 470.308863][ T8] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 470.321543][ T8] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input47 [ 470.374430][ T932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.390550][ T932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.402946][ T932] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 470.403954][ T5911] m920x_read = error: -19 [ 470.417620][ T932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.429495][ T932] usb 1-1: config 0 descriptor?? [ 470.430918][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 470.454672][ T8] usb 3-1: USB disconnect, device number 65 [ 470.495077][ T5866] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 470.618024][ T5911] m920x_read = error: -19 [ 470.622515][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 470.681997][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 470.689472][ T5866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 470.705064][ T5866] usb 2-1: config 127 has an invalid interface number: 25 but max is 0 [ 470.713618][ T5866] usb 2-1: config 127 has no interface number 0 [ 470.726320][ T5866] usb 2-1: config 127 interface 25 has no altsetting 0 [ 470.739267][ T5866] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 470.751030][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.761877][ T5866] usb 2-1: Product: syz [ 470.766154][ T5866] usb 2-1: Manufacturer: syz [ 470.774365][ T5866] usb 2-1: SerialNumber: syz [ 470.799586][ T5870] m920x_read = error: -19 [ 470.804015][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 470.949237][ T5911] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 470.991931][ T5870] m920x_read = error: -19 [ 470.996420][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 471.002019][ T5866] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 471.193405][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.210550][ T5870] m920x_read = error: -19 [ 471.215005][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 471.224325][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.272412][ T5911] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 471.312763][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.337235][ T5911] usb 4-1: config 0 descriptor?? [ 471.638726][ T5866] usb 2-1: reset high-speed USB device number 89 using dummy_hcd [ 471.876867][ T5866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 471.939210][ T5866] usb 2-1: device firmware changed [ 471.979286][ T5897] m920x_read = error: -19 [ 471.983793][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 472.082298][ T5866] ueagle-atm 2-1:127.25: usbatm_usb_probe: bind failed: -19! [ 472.093409][ T5866] usb 2-1: USB disconnect, device number 89 [ 472.157398][ T5897] m920x_read = error: -19 [ 472.161915][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 472.192798][ T5911] usbhid 4-1:0.0: can't add hid device: -71 [ 472.198955][ T5911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 472.223036][ T5911] usb 4-1: USB disconnect, device number 63 [ 472.339100][ T5870] m920x_read = error: -19 [ 472.343526][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 472.424478][ T8] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 472.531496][ T5870] m920x_read = error: -19 [ 472.535964][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 472.609426][ T8] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 472.634927][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.659236][ T8] usb 3-1: config 0 descriptor?? [ 472.666870][ T8] cp210x 3-1:0.0: cp210x converter detected [ 472.713712][ T5870] m920x_read = error: -19 [ 472.718350][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 473.588714][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 473.588737][ T29] audit: type=1326 audit(1737048213.770:12697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.0.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d8385d29 code=0x7fc00000 [ 473.621983][ T5870] m920x_read = error: -19 [ 473.626687][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 473.784325][ T932] usbhid 1-1:0.0: can't add hid device: -71 [ 473.790464][ T932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 473.827323][ T5911] m920x_read = error: -19 [ 473.831882][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 473.976370][ T932] usb 1-1: USB disconnect, device number 60 [ 474.004617][ T8] usb 3-1: cp210x converter now attached to ttyUSB0 [ 474.006851][ T5870] m920x_read = error: -19 [ 474.017185][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 474.038740][ T29] audit: type=1400 audit(1737048214.528:12698): avc: denied { read } for pid=12256 comm="syz.0.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 474.091439][T12257] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1555'. [ 474.126832][ T5911] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 474.188424][ T5897] m920x_read = error: -19 [ 474.192867][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 474.254829][ T29] audit: type=1326 audit(1737048214.743:12699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d8385d29 code=0x7ffc0000 [ 474.280528][ T29] audit: type=1326 audit(1737048214.743:12700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d8385d29 code=0x7ffc0000 [ 474.304314][ T5898] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 474.321337][ T29] audit: type=1326 audit(1737048214.752:12701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f36d8385d29 code=0x7ffc0000 [ 474.321845][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.349418][ T29] audit: type=1326 audit(1737048214.752:12702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d8385d29 code=0x7ffc0000 [ 474.370742][ T5897] m920x_read = error: -19 [ 474.385022][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 474.393334][ T5911] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 474.402909][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.510469][ T5911] usb 2-1: config 0 descriptor?? [ 474.510553][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 474.563688][ T5897] m920x_read = error: -19 [ 474.568678][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 474.596523][ T29] audit: type=1326 audit(1737048214.752:12703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f36d8385d29 code=0x7ffc0000 [ 474.601900][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.740144][ T29] audit: type=1326 audit(1737048214.752:12704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d8385d29 code=0x7ffc0000 [ 474.798380][ T5897] m920x_read = error: -19 [ 474.803278][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 474.858675][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.891880][ T29] audit: type=1326 audit(1737048214.752:12705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f36d8385d29 code=0x7ffc0000 [ 474.955833][ T5898] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 474.983379][ T29] audit: type=1326 audit(1737048214.752:12706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d8385d29 code=0x7ffc0000 [ 474.989452][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.016798][ T5897] m920x_read = error: -19 [ 475.023244][ T5898] usb 4-1: config 0 descriptor?? [ 475.031095][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 475.032503][ T5898] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 475.095652][ T5911] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 475.106240][ T5911] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0030/input/input49 [ 475.194088][ T5911] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 475.214857][ T5897] m920x_read = error: -19 [ 475.219520][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 475.287052][ T5898] usb 4-1: USB disconnect, device number 64 [ 475.425614][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 475.428217][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 475.430680][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 475.433952][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 475.436223][ T5822] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 475.436518][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 475.447574][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 475.447834][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 475.448063][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 475.452088][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 475.452512][ T5826] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 475.452731][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 475.519419][ T5870] m920x_read = error: -19 [ 475.519444][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 475.685512][ T5870] m920x_read = error: -19 [ 475.685629][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 475.866987][ T5870] m920x_read = error: -19 [ 475.867083][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 476.038416][ T46] m920x_read = error: -19 [ 476.038534][ T46] dvb-usb: error -19 while querying for an remote control event. [ 476.133113][T12282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.133275][T12282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.151308][ T46] usb 3-1: USB disconnect, device number 66 [ 476.154150][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 476.230833][ T5870] m920x_read = error: -19 [ 476.230857][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 476.253318][ T5897] [ 476.253334][ T5897] ====================================================== [ 476.253341][ T5897] WARNING: possible circular locking dependency detected [ 476.253348][ T5897] 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 Not tainted [ 476.253359][ T5897] ------------------------------------------------------ [ 476.253365][ T5897] kworker/1:5/5897 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 476.253375][ T5897] ffff88801b0990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 476.253422][ T5897] [ 476.253422][ T5897] but task is already holding lock: [ 476.253428][ T5897] ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 476.253470][ T5897] [ 476.253470][ T5897] which lock already depends on the new lock. [ 476.253470][ T5897] [ 476.253475][ T5897] [ 476.253475][ T5897] the existing dependency chain (in reverse order) is: [ 476.253481][ T5897] [ 476.253481][ T5897] -> #2 (console_lock){+.+.}-{0:0}: [ 476.253505][ T5897] console_lock+0x7a/0xa0 [ 476.253527][ T5897] con_flush_chars+0x5e/0x80 [ 476.253547][ T5897] n_tty_receive_buf_common+0xa99/0x1980 [ 476.253565][ T5897] tty_ioctl+0x575/0x15d0 [ 476.253579][ T5897] __x64_sys_ioctl+0x190/0x200 [ 476.253601][ T5897] do_syscall_64+0xcd/0x250 [ 476.253623][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.253648][ T5897] [ 476.253648][ T5897] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 476.253670][ T5897] down_write+0x93/0x200 [ 476.253692][ T5897] n_tty_flush_buffer+0x25/0x1b0 [ 476.253709][ T5897] tty_buffer_flush+0x236/0x310 [ 476.253722][ T5897] tty_ldisc_flush+0x64/0xe0 [ 476.253741][ T5897] tty_port_close_start+0x337/0x540 [ 476.253758][ T5897] tty_port_close+0x26/0x160 [ 476.253772][ T5897] uart_close+0x7b/0x220 [ 476.253791][ T5897] tty_release+0x3a8/0x1410 [ 476.253806][ T5897] __fput+0x3f8/0xb60 [ 476.253826][ T5897] task_work_run+0x14e/0x250 [ 476.253844][ T5897] syscall_exit_to_user_mode+0x27b/0x2a0 [ 476.253864][ T5897] do_syscall_64+0xda/0x250 [ 476.253886][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.253908][ T5897] [ 476.253908][ T5897] -> #0 (&buf->lock){+.+.}-{4:4}: [ 476.253930][ T5897] __lock_acquire+0x249e/0x3c40 [ 476.253954][ T5897] lock_acquire.part.0+0x11b/0x380 [ 476.253971][ T5897] __mutex_lock+0x19b/0xa60 [ 476.253992][ T5897] tty_buffer_flush+0x72/0x310 [ 476.254006][ T5897] tty_ldisc_flush+0x64/0xe0 [ 476.254026][ T5897] __do_SAK+0x6a1/0x800 [ 476.254040][ T5897] vc_SAK+0x7f/0x310 [ 476.254057][ T5897] process_one_work+0x9c5/0x1ba0 [ 476.254072][ T5897] worker_thread+0x6c8/0xf00 [ 476.254086][ T5897] kthread+0x2c1/0x3a0 [ 476.254102][ T5897] ret_from_fork+0x45/0x80 [ 476.254118][ T5897] ret_from_fork_asm+0x1a/0x30 [ 476.254140][ T5897] [ 476.254140][ T5897] other info that might help us debug this: [ 476.254140][ T5897] [ 476.254144][ T5897] Chain exists of: [ 476.254144][ T5897] &buf->lock --> &tty->termios_rwsem --> console_lock [ 476.254144][ T5897] [ 476.254173][ T5897] Possible unsafe locking scenario: [ 476.254173][ T5897] [ 476.254177][ T5897] CPU0 CPU1 [ 476.254182][ T5897] ---- ---- [ 476.254186][ T5897] lock(console_lock); [ 476.254197][ T5897] lock(&tty->termios_rwsem); [ 476.254207][ T5897] lock(console_lock); [ 476.254219][ T5897] lock(&buf->lock); [ 476.254229][ T5897] [ 476.254229][ T5897] *** DEADLOCK *** [ 476.254229][ T5897] [ 476.254233][ T5897] 4 locks held by kworker/1:5/5897: [ 476.254242][ T5897] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 476.254278][ T5897] #1: ffffc900048e7d80 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 476.254317][ T5897] #2: ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 476.254359][ T5897] #3: ffff88807aabb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 476.254406][ T5897] [ 476.254406][ T5897] stack backtrace: [ 476.254413][ T5897] CPU: 1 UID: 0 PID: 5897 Comm: kworker/1:5 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 476.254433][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 476.254443][ T5897] Workqueue: events vc_SAK [ 476.254463][ T5897] Call Trace: [ 476.254468][ T5897] [ 476.254475][ T5897] dump_stack_lvl+0x116/0x1f0 [ 476.254498][ T5897] print_circular_bug+0x419/0x5d0 [ 476.254517][ T5897] check_noncircular+0x31a/0x400 [ 476.254535][ T5897] ? __pfx_check_noncircular+0x10/0x10 [ 476.254554][ T5897] ? lockdep_lock+0xc6/0x200 [ 476.254578][ T5897] ? __pfx_lockdep_lock+0x10/0x10 [ 476.254605][ T5897] __lock_acquire+0x249e/0x3c40 [ 476.254627][ T5897] ? __pfx___lock_acquire+0x10/0x10 [ 476.254648][ T5897] lock_acquire.part.0+0x11b/0x380 [ 476.254668][ T5897] ? tty_buffer_flush+0x72/0x310 [ 476.254685][ T5897] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 476.254704][ T5897] ? rcu_is_watching+0x12/0xc0 [ 476.254726][ T5897] ? trace_lock_acquire+0x14e/0x1f0 [ 476.254746][ T5897] ? __pfx___lock_acquire+0x10/0x10 [ 476.254764][ T5897] ? tty_buffer_flush+0x72/0x310 [ 476.254779][ T5897] ? lock_acquire+0x2f/0xb0 [ 476.254797][ T5897] ? tty_buffer_flush+0x72/0x310 [ 476.254813][ T5897] __mutex_lock+0x19b/0xa60 [ 476.254833][ T5897] ? tty_buffer_flush+0x72/0x310 [ 476.254848][ T5897] ? tty_buffer_flush+0x72/0x310 [ 476.254862][ T5897] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 476.254878][ T5897] ? __pfx___mutex_lock+0x10/0x10 [ 476.254897][ T5897] ? trace_lock_acquire+0x14e/0x1f0 [ 476.254917][ T5897] ? lock_acquire.part.0+0x11b/0x380 [ 476.254932][ T5897] ? tty_ldisc_flush+0x1c/0xe0 [ 476.254963][ T5897] ? ldsem_down_read_trylock+0x11b/0x180 [ 476.254986][ T5897] ? tty_buffer_flush+0x72/0x310 [ 476.255002][ T5897] tty_buffer_flush+0x72/0x310 [ 476.255018][ T5897] tty_ldisc_flush+0x64/0xe0 [ 476.255043][ T5897] __do_SAK+0x6a1/0x800 [ 476.255061][ T5897] ? lock_acquire+0x2f/0xb0 [ 476.255078][ T5897] ? vc_SAK+0x13/0x310 [ 476.255099][ T5897] vc_SAK+0x7f/0x310 [ 476.255121][ T5897] process_one_work+0x9c5/0x1ba0 [ 476.255144][ T5897] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 476.255162][ T5897] ? __pfx_process_one_work+0x10/0x10 [ 476.255181][ T5897] ? rcu_is_watching+0x12/0xc0 [ 476.255208][ T5897] ? assign_work+0x1a0/0x250 [ 476.255226][ T5897] worker_thread+0x6c8/0xf00 [ 476.255250][ T5897] ? __kthread_parkme+0x148/0x220 [ 476.255274][ T5897] ? __pfx_worker_thread+0x10/0x10 [ 476.255293][ T5897] kthread+0x2c1/0x3a0 [ 476.255315][ T5897] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.255335][ T5897] ? __pfx_kthread+0x10/0x10 [ 476.255357][ T5897] ret_from_fork+0x45/0x80 [ 476.255374][ T5897] ? __pfx_kthread+0x10/0x10 [ 476.255398][ T5897] ret_from_fork_asm+0x1a/0x30 [ 476.255429][ T5897] [ 476.256692][ T5897] tty tty1: SAK: killed process 8248 (syz.1.552): by fd#4 [ 476.356936][ T46] cp210x 3-1:0.0: device disconnected [ 476.403039][ T5911] m920x_read = error: -19 [ 476.403062][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 476.521929][T12293] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1562'. [ 476.867892][ T5911] m920x_read = error: -19 [ 476.867908][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 477.032092][ T46] m920x_read = error: -19 [ 477.032132][ T46] dvb-usb: error -19 while querying for an remote control event. [ 477.203756][ T46] m920x_read = error: -19 [ 477.203778][ T46] dvb-usb: error -19 while querying for an remote control event. [ 477.374794][ T5911] m920x_read = error: -19 [ 477.374816][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 477.553606][ T5911] m920x_read = error: -19 [ 477.553621][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 477.620685][ T5826] Bluetooth: hci0: command tx timeout [ 477.720846][ T5911] m920x_read = error: -19 [ 477.720864][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 477.887598][ T5911] m920x_read = error: -19 [ 477.887619][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 477.917407][ T8812] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.998981][ T8812] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.039076][ T8] usb 2-1: USB disconnect, device number 90 [ 478.063051][ T5911] m920x_read = error: -19 [ 478.063070][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 478.070065][ T8812] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.232475][ T5897] m920x_read = error: -19 [ 478.305305][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 478.338930][ T8812] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.431657][ T8812] erspan0: left allmulticast mode [ 478.437230][ T8812] erspan0: left promiscuous mode [ 478.448375][ T8812] bridge0: port 3(erspan0) entered disabled state [ 478.455822][ T8812] bridge_slave_1: left allmulticast mode [ 478.461479][ T8812] bridge_slave_1: left promiscuous mode [ 478.467750][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.475327][ T5911] m920x_read = error: -19 [ 478.479687][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 478.488386][ T8812] bridge_slave_0: left promiscuous mode [ 478.494013][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.512881][ T8812] infiniband syz0: set down [ 478.585959][ T1080] smc: removing ib device syz0 [ 478.591115][ T8812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.601293][ T8812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.610637][ T8812] bond0 (unregistering): Released all slaves [ 478.618393][ T8812] bond1 (unregistering): Released all slaves [ 478.679019][ T5911] m920x_read = error: -19 [ 478.686808][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 478.873467][ T8812] tipc: Left network mode [ 478.903352][ T8812] IPVS: stopping master sync thread 7400 ... [ 478.913710][ T5911] m920x_read = error: -19 [ 478.918099][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 479.074615][ T8812] hsr_slave_0: left promiscuous mode [ 479.080291][ T8812] hsr_slave_1: left promiscuous mode [ 479.086031][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.093432][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.103868][ T5911] m920x_read = error: -19 [ 479.108377][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 479.108811][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.125006][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.133223][ T8812] bridge_slave_0: left allmulticast mode [ 479.139567][ T8812] veth1_macvtap: left promiscuous mode [ 479.145041][ T8812] veth0_macvtap: left promiscuous mode [ 479.230656][ T8812] team0 (unregistering): Port device team_slave_1 removed [ 479.258728][ T8812] team0 (unregistering): Port device team_slave_0 removed [ 479.277568][ T5911] m920x_read = error: -19 [ 479.281909][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 479.482735][ T5911] m920x_read = error: -19 [ 479.487150][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 479.647182][ T8812] IPVS: stop unused estimator thread 0... [ 479.662090][ T5911] m920x_read = error: -19 [ 479.666477][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 479.708179][ T8812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.760442][ T8812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.803128][ T8812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.843800][ T5911] m920x_read = error: -19 [ 479.848201][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 479.858784][ T8812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.918012][ T8812] erspan0: left allmulticast mode [ 479.923161][ T8812] erspan0: left promiscuous mode [ 479.928160][ T8812] bridge0: port 3(erspan0) entered disabled state [ 479.935360][ T8812] bridge_slave_1: left allmulticast mode [ 479.941104][ T8812] bridge_slave_1: left promiscuous mode [ 479.946728][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.954527][ T8812] bridge_slave_0: left allmulticast mode [ 479.960151][ T8812] bridge_slave_0: left promiscuous mode [ 479.965814][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.999299][ T8812] dvmrp8 (unregistering): left allmulticast mode [ 480.026312][ T46] m920x_read = error: -19 [ 480.030674][ T46] dvb-usb: error -19 while querying for an remote control event. [ 480.051296][ T8812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.062247][ T8812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.072117][ T8812] bond0 (unregistering): Released all slaves [ 480.080493][ T8812] bond1 (unregistering): Released all slaves [ 480.134463][ T8812] tipc: Disabling bearer [ 480.139850][ T8812] tipc: Disabling bearer [ 480.151039][ T8812] tipc: Left network mode [ 480.207632][ T5897] m920x_read = error: -19 [ 480.211978][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 480.361599][ T8812] hsr_slave_0: left promiscuous mode [ 480.367291][ T8812] hsr_slave_1: left promiscuous mode [ 480.373529][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.389781][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.390257][ T5897] m920x_read = error: -19 [ 480.401624][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 480.405244][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.416954][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.425316][ T8812] veth1_macvtap: left promiscuous mode [ 480.430835][ T8812] veth0_macvtap: left promiscuous mode [ 480.436567][ T8812] veth1_vlan: left promiscuous mode [ 480.441835][ T8812] veth0_vlan: left promiscuous mode [ 480.458384][ T8812] infiniband syz2: set down [ 480.566613][ T8812] team0 (unregistering): Port device team_slave_1 removed [ 480.574130][ T3505] smc: removing ib device syz2 [ 480.592092][ T5870] m920x_read = error: -19 [ 480.596441][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 480.614962][ T8812] team0 (unregistering): Port device team_slave_0 removed [ 480.784613][ T5897] m920x_read = error: -19 [ 480.794417][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 481.009091][ T5897] m920x_read = error: -19 [ 481.013469][ T5897] dvb-usb: error -19 while querying for an remote control event. [ 481.027730][ T8812] IPVS: stop unused estimator thread 0... [ 481.201519][ T5911] m920x_read = error: -19 [ 481.205903][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 481.383166][ T5911] m920x_read = error: -19 [ 481.387554][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 481.565484][ T5911] m920x_read = error: -19 [ 481.569840][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 481.746705][ T5911] m920x_read = error: -19 [ 481.751087][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 481.939446][ T5911] m920x_read = error: -19 [ 481.943796][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 482.120821][ T5911] m920x_read = error: -19 [ 482.125172][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 482.313234][ T5911] m920x_read = error: -19 [ 482.317600][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 482.495768][ T5911] m920x_read = error: -19 [ 482.500159][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 482.676755][ T5911] m920x_read = error: -19 [ 482.681107][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 482.858793][ T5911] m920x_read = error: -19 [ 482.863150][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 483.040530][ T5911] m920x_read = error: -19 [ 483.044882][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 483.222241][ T5911] m920x_read = error: -19 [ 483.226635][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 483.403776][ T5911] m920x_read = error: -19 [ 483.408200][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 483.585461][ T5911] m920x_read = error: -19 [ 483.589817][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 483.767222][ T5911] m920x_read = error: -19 [ 483.771603][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 483.949808][ T5911] m920x_read = error: -19 [ 483.954177][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 484.130694][ T5911] m920x_read = error: -19 [ 484.135058][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 484.312737][ T5911] m920x_read = error: -19 [ 484.317099][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 484.494234][ T5911] m920x_read = error: -19 [ 484.498642][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 484.675969][ T5911] m920x_read = error: -19 [ 484.680342][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 484.857691][ T5911] m920x_read = error: -19 [ 484.862085][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 485.039472][ T5911] m920x_read = error: -19 [ 485.043848][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 485.221104][ T5911] m920x_read = error: -19 [ 485.225451][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 485.403562][ T5911] m920x_read = error: -19 [ 485.407912][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 485.584614][ T5911] m920x_read = error: -19 [ 485.589007][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 485.766714][ T5911] m920x_read = error: -19 [ 485.771087][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 485.948111][ T5911] m920x_read = error: -19 [ 485.952517][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 486.129781][ T5911] m920x_read = error: -19 [ 486.134151][ T5911] dvb-usb: error -19 while querying for an remote control event.