last executing test programs: 11.222481392s ago: executing program 3 (id=1022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000008a00)=[{{&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000001640)=""/166, 0xa6}], 0x7, &(0x7f0000001780)=""/79, 0x4f}, 0x2}, {{&(0x7f0000002880)=@phonet, 0x80, &(0x7f0000000380)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000240)=""/51, 0x33}], 0x2, &(0x7f0000004500)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000003900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003980)=""/208, 0xd0}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/163, 0xa3}, {&(0x7f0000003b40)=""/81, 0x51}, {&(0x7f0000003bc0)=""/106, 0x6a}, {&(0x7f0000001800)=""/8, 0x8}], 0x6, &(0x7f0000003cc0)=""/76, 0x4c}, 0xc6a9}, {{&(0x7f0000003d40)=@caif, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003dc0)=""/42, 0x2a}, {&(0x7f0000003e00)=""/169, 0xa9}, {&(0x7f0000003ec0)=""/252, 0xfc}], 0x3, &(0x7f0000004000)=""/198, 0xc6}, 0x1}, {{&(0x7f0000004100)=@x25={0x9, @remote}, 0x80, &(0x7f00000075c0)=[{&(0x7f0000004180)=""/16, 0x10}, {&(0x7f00000041c0)=""/253, 0xfd}, {&(0x7f00000042c0)=""/211, 0xd3}, {&(0x7f00000043c0)}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000004400)=""/125, 0x7d}, {&(0x7f0000007500)=""/187, 0xbb}], 0x7, &(0x7f0000004480)=""/3, 0x3}, 0x6}, {{&(0x7f0000007640)=@qipcrtr, 0x80, &(0x7f0000007700)=[{&(0x7f00000076c0)=""/60, 0x3c}], 0x1, &(0x7f0000007740)=""/210, 0xd2}, 0x1dda}, {{&(0x7f0000007840)=@nfc_llcp, 0x80, &(0x7f0000008940)=[{&(0x7f00000078c0)=""/69, 0x45}, {&(0x7f0000007940)=""/4096, 0x1000}], 0x2, &(0x7f0000008980)=""/74, 0x4a}, 0x8}], 0x7, 0x12062, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r8 = getpid() sched_setattr(r8, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 10.246926926s ago: executing program 3 (id=1027): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x111240, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000002480)='net/raw6\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) umount2(&(0x7f0000002100)='./file0\x00', 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000024c0), 0xffffffffffffa19a, 0x0) read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f00000027c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4041030}, 0xc, &(0x7f0000002780)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x20000080}, 0x4091) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x30) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x36, [0x4, 0xad03, 0x0, 0x2, 0x80000000, 0xfffffffffffffffb], 0x4, &(0x7f00000020c0)=[{}, {}, {}, {}], &(0x7f0000000080)=""/54}, &(0x7f0000000140)=0x78) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r9, 0x4004550c, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r10, 0x4, 0x10}, 0xc) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 7.900002546s ago: executing program 3 (id=1043): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x38, 0x2, 0xfd, @time={0x8}, {}, {0xe}, @result}, {0x3, 0x7, 0xf2, 0x3, @tick=0xfa, {0x7}, {0x7d}, @queue={0x3, {0x400, 0x3}}}, {0x4, 0x4, 0x9, 0x8, @tick=0x10000, {0xb, 0x8}, {0xfc}, @time=@tick=0x2}, {0x2, 0x40, 0xc9, 0x3, @time={0x80000000, 0x449e}, {0x9, 0x7}, {0x8, 0xf7}, @note={0x3, 0x40, 0x7, 0x8, 0x1}}], 0x70) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/514], 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x42, 0x1f00c00e}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) setreuid(0xee00, 0xffffffffffffffff) setreuid(0xffffffffffffffff, 0x0) r8 = open(0x0, 0x145142, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/126, 0x7e) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f00000002c0)={0x1e, 0x2}) sendfile(r8, r8, 0x0, 0x800000009) kcmp(r0, r1, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) prlimit64(r1, 0xb, &(0x7f0000000140)={0x33af, 0xa}, &(0x7f0000000180)) 7.34508795s ago: executing program 1 (id=1044): getpid() socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0xf000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') futimesat(r6, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r7, 0x4004e502, 0x0) 7.132827774s ago: executing program 4 (id=1045): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x4000006, 0x200, 0x3], [0x776, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x3, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) (fail_nth: 3) 6.314266531s ago: executing program 1 (id=1046): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d000100"], 0x34}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000180)={0x1, r0, 'id1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0), 0x0) close(r7) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r6, 0x0, r8, 0x0, 0x10d00, 0xf) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}}}, &(0x7f0000000480)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={r10, @in6={{0xa, 0x4e20, 0x96, @rand_addr=' \x01\x00', 0x3d13}}, 0x0, 0xfffb, 0xfffffff7, 0xbf77, 0x0, 0xc1be, 0x4}, &(0x7f0000000580)=0x9c) 5.835226685s ago: executing program 1 (id=1049): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x11, 0x80, 0x3, 0x7b, 0xa, 0x80, 0x6, 0x2, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x200003, 0x4]}}) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0xd, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004010) timer_create(0x0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x4000006, 0x200, 0x3], [0x776, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x3, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) timer_create(0x2, &(0x7f00000022c0)={0x0, 0x24, 0x2, @thr={&(0x7f0000002240)="778526f9e7acfb1d974f2ca6dba4104d6dea74b0ae1f2eff8d7b04a1e06d161eeb0c5da948664906b6585a747bd82d18fefb49e37fac23b6b54e2f6f553de5195d4162ce2b447d2f40378f7b751d8b29f8ed15a2ae712a15bbe5", &(0x7f00000001c0)="c092ba6caba012da17e8f0a986c3b3eb817bc2c8ab9cbf21f42fb56ab19783ef"}}, &(0x7f0000002300)=0x0) timer_settime(r5, 0x1, &(0x7f0000002480)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000024c0)) r6 = syz_open_dev$usbfs(&(0x7f0000002500), 0xd20, 0x422000) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f00000025c0)=@usbdevfs_driver={0x200, 0x9, &(0x7f0000002540)="8673fb75d0213105f46d7fd4e497ecfce6588adfb4d8eb45d9c864dcb8f81f17748d559cee820acb64d731176a8cad0adda15500fd9435bac93aae2afeef36414964af899c654fbdebc6240d35cd427e3e3049899873230ef4461f3db9597f69333b3c0bf2bd96b488f29af319bab72b1bd993d70564bbb4e254e1"}) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r7, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 4.757097752s ago: executing program 0 (id=1053): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x2400c084}, 0x4040005) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) 4.732263693s ago: executing program 4 (id=1054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000008a00)=[{{&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000001640)=""/166, 0xa6}], 0x7, &(0x7f0000001780)=""/79, 0x4f}, 0x2}, {{&(0x7f0000002880)=@phonet, 0x80, &(0x7f0000000380)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000240)=""/51, 0x33}], 0x2, &(0x7f0000004500)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000003900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003980)=""/208, 0xd0}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/163, 0xa3}, {&(0x7f0000003b40)=""/81, 0x51}, {&(0x7f0000003bc0)=""/106, 0x6a}, {&(0x7f0000001800)=""/8, 0x8}], 0x6, &(0x7f0000003cc0)=""/76, 0x4c}, 0xc6a9}, {{&(0x7f0000003d40)=@caif, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003dc0)=""/42, 0x2a}, {&(0x7f0000003e00)=""/169, 0xa9}, {&(0x7f0000003ec0)=""/252, 0xfc}], 0x3, &(0x7f0000004000)=""/198, 0xc6}, 0x1}, {{&(0x7f0000004100)=@x25={0x9, @remote}, 0x80, &(0x7f00000075c0)=[{&(0x7f0000004180)=""/16, 0x10}, {&(0x7f00000041c0)=""/253, 0xfd}, {&(0x7f00000042c0)=""/211, 0xd3}, {&(0x7f00000043c0)}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000004400)=""/125, 0x7d}, {&(0x7f0000007500)=""/187, 0xbb}], 0x7, &(0x7f0000004480)=""/3, 0x3}, 0x6}, {{&(0x7f0000007640)=@qipcrtr, 0x80, &(0x7f0000007700)=[{&(0x7f00000076c0)=""/60, 0x3c}], 0x1, &(0x7f0000007740)=""/210, 0xd2}, 0x1dda}, {{&(0x7f0000007840)=@nfc_llcp, 0x80, &(0x7f0000008940)=[{&(0x7f00000078c0)=""/69, 0x45}, {&(0x7f0000007940)=""/4096, 0x1000}], 0x2, &(0x7f0000008980)=""/74, 0x4a}, 0x8}], 0x7, 0x12062, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r8 = getpid() sched_setattr(r8, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 4.568444207s ago: executing program 0 (id=1055): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r1 = syz_io_uring_setup(0xcd, &(0x7f0000000340)={0x0, 0xfffffffc, 0x400, 0x0, 0xdc}, &(0x7f00000004c0)=0x0, &(0x7f0000000000)=0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.490095443s ago: executing program 3 (id=1056): r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000340)=0x107) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(r0, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d04}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x6) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x3, 0x51, 0x82, 0x200, 0x73e, 0x4, 0x7}, 0xfffffffffffffeab) r9 = socket(0x1e, 0x4, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 4.257074191s ago: executing program 1 (id=1057): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000008c0)=[{0x16}]}) msgctl$IPC_RMID(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000480)=0x7fffffff, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) cachestat(r3, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 3.595496716s ago: executing program 4 (id=1058): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="e625e5e1479260f9ffff44f3"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) msgget(0x0, 0xe5fe9c796870f283) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x80000003) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f40)=@newsa={0x180, 0x10, 0x1, 0x70bd27, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x16}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x180}}, 0x24000058) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000) 2.587835746s ago: executing program 1 (id=1060): syz_open_dev$tty1(0xc, 0x4, 0x4) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a0000000700000006000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) pipe(&(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x108, &(0x7f0000000000)=ANY=[], 0x0) 2.554109442s ago: executing program 4 (id=1061): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x10, 0x30, 0x30, 0x0, @ib={0x1b, 0x4f53, 0xffff, {"15bf3c0782bafb0045c4377b8e39aed9"}, 0x7c4fd0a9, 0xa6, 0x5e}, @ib={0x1b, 0x38e, 0x0, {}, 0x9, 0x0, 0x8}}}, 0x118) epoll_create(0x76f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) creat(0x0, 0x12a) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x8010, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000000)=""/196) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x2}}, 0x18) 2.444976442s ago: executing program 1 (id=1062): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000001c00), 0x12) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e402010902"], 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5ec649da21d7ff4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c080) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000900000000000000000075002800a50000002300000095b7f6747bd08fc51131f90f8db677007c02eed03aef6da99d492b168f3e2635f936fc742b2a4f6c5e205a00c80c11d7856e45fdef2485dd0315d443a139119eb28416455c8953f3a0c55c743e9bc62964aeae157498ee34b000000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x18) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) 2.387636926s ago: executing program 4 (id=1064): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000200)={0x0, 'veth1\x00', {}, 0x1}) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000001e80)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095", @ANYRES8=r0, @ANYRES8=r1, @ANYRESHEX=0x0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x1}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000001c0)="d33dd4ed", 0x4, 0x8011, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.363501961s ago: executing program 3 (id=1065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=0x10, 0x0) getresuid(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000001d80)=[{0x7, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f00000004c0)=""/218, 0xda}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f0000000680)=""/133, 0x85}, {&(0x7f0000000740)=""/61, 0x3d}], &(0x7f0000000800)=[0x1, 0xfffffffffffffff9]}, {0x8, 0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/233, 0xe9}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/35, 0x23}, {&(0x7f0000001a40)=""/236, 0xec}, {&(0x7f0000001b40)=""/89, 0x59}, {&(0x7f0000001bc0)=""/147, 0x93}, {&(0x7f0000001c80)=""/4, 0x4}], &(0x7f0000001d40)=[0xed18, 0x1, 0x7, 0x6, 0x3, 0xffffffffffffffff]}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x40ceb152, 0x4, 0x40, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x10000, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x8000, 0x0, 0x0, r6, 0x0, 0xfffffffc}}, {0x0, 0x0, 0x8, 0x2, 'group_id'}}, {{0x3, 0x2, 0x0, 0x73, 0x746, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf4}}, {0x0, 0x0, 0x8, 0x29, 'group_id'}}]}, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0xbe, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0x200, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r3}}, 0x120) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000180)={r8, r0, 0x100, 0x0, 0x0, 0x0, 0x2, 0x96b4, 0x4, 0x1, 0x1, 0x400, 'syz0\x00'}) 2.295088908s ago: executing program 4 (id=1066): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3e, 0x2, 0x0, "8baadc68379dd10200e6fff749686b10ff85a510ec01000000419d6bc2cb00"}) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.241180824s ago: executing program 2 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0x7, 0x3}}, 0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 2.238599485s ago: executing program 0 (id=1068): r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x6, 0x2, 0x5}) sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="6bd2000001"]) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x40) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f00000008c0)={0x478, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xd6fa, 0x3, 0x9, 0x8}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) 1.478524655s ago: executing program 2 (id=1069): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, {0x4, 0x4e22, @local}, {0x2, 0x4e22, @remote}, 0x104, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0xfffffffffffffffd, 0x1}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x1000000, {0x2, 0xfeff, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) 1.477501797s ago: executing program 2 (id=1070): syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x6) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x120008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="00000800018506000300800006"], 0x96) read$msr(r2, &(0x7f000001b240)=""/102389, 0x23) setreuid(0x0, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0xb, 0x0, @thr={&(0x7f0000000340)="ea7ed9f9150d9d71ad9aadd55e51186108f4ce7591993c422c4489d6f1f6cf670064373ab7e483a4692b8552439a39cbebd3861646b7b50d334e90c1972d710ad5df5beb431644b7ab8513e4316cc5418e6cd9b450c36af30420265a334cced6de7425ea7030324e21fed9189aedabcf13e487e2e74f6353fd27ff6c917c0a33ec26bea9c69a207703049a4459c18e1a979e14c43acbb7fb48a6485c25dfdf8d436c1e20919d223c6d1c343d5b76f6abf6b9c32cc2857b2ae6ab5ce2e5f094ae4d21969069648db128cc27", &(0x7f00000004c0)="714c23a98b7c190f9b34058e87ef41aca993ac0b4a5758f1e248c308a5543dd8ac030f56fc6c65ac60f1e6c2d541a2f72d8d0d3a28ee45c64f96f68ba29bbc13d239fb608421123c0ef3395f45034e71d08a7e3a88c4a86404e6084b5bca5e020d2dd9c17673be57ba3c098518ba73e58b67c86342f8818f92"}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x9}}, 0x0) r4 = socket(0x10, 0xa, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x40104}, 0x4040014) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) stat(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) gettid() inotify_init() getpid() r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x11) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000001c0)={@hyper}) 1.412106616s ago: executing program 2 (id=1071): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) clock_settime(0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_io_uring_setup(0x50c7, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x2, 0x261}, &(0x7f0000000180)=0x0, &(0x7f0000003580)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000600)=@hci}) io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002020000200505a1a440000102030109027c0002010680000904000001020d00000b240600018cee9ae903ca05240003000d240f0100000100c90507000006241a0400230424020505241502000524010104052401012607240a0a0b081109058103c13c0303070904010000020d00000904010102020d0000090582020800040702090503021000000200977a5c4eda4c5ba299a1a4018e20a2199a59a8ca2b85b38b3d0e784379a3d245562aab065348ddcf"], &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x1, 0xc, 0x7f, 0x10, 0x6}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f08dce82c21198a548f7000010333792c9d"], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xea1b7443fa1568a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) fsopen(0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="000103000000ff"], 0x0, 0x0}) 1.303853466s ago: executing program 0 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x62) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200021, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xdf}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x3c, r7, 0x1, 0x0, 0x25dfdbfc, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.217090925s ago: executing program 3 (id=1073): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000880)=@ethtool_stats={0x11}}) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0xc5cee58fe7cea473, 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x7d6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000100)=0x7, 0x5, 0x6) syz_usb_control_io$hid(r2, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "010096dc"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x80000000, 0x9}, 0x10}, 0x94) r5 = syz_io_uring_setup(0x52d6, &(0x7f0000000740)={0x0, 0x1c24, 0x0, 0x3, 0xfffffffd, 0x0, r4}, &(0x7f0000000580)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000140)=0x4) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0xfc2a5000) fadvise64(0xffffffffffffffff, 0x81, 0x1, 0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x40000, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0x2}, 0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x0, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc801}, 0x40004) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000180)=0xd) 577.806477ms ago: executing program 2 (id=1074): r0 = syz_open_dev$vbi(&(0x7f0000000740), 0x2, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200)={0xd9a, 0x668f, 0x800, 0x1}, 0x8) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c2402"], 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00034200000042bff4a1874997f56b17fdfab86d1b8a1482c59d313b756ab40a76432615dcd8d96819cab5e3f76335dcc4c8a82364ba8844c1a5704871a81ec6f9a4108dbd210000"]}, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000780)={0x1, 0x800, "f234dbcb24b5ab12b3f7b536224e9bcef62a1337848ce900", {0x3}, 0xfffffff7}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1192, &(0x7f0000000040)={0x0, 0xc8a2, 0x20c6a, 0x2, 0x308}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x1, 0x0, &(0x7f00000004c0)='c', 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0xfffffffffffffc1f) socket$inet_sctp(0x2, 0x5, 0x84) r3 = io_uring_setup(0x6cb6, &(0x7f0000000880)={0x0, 0x8cbc, 0x2, 0x20000002, 0x10026c}) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8040, &(0x7f0000000080)={0x11, 0x8100, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000500)={{0xa, 0x4, 0x0, @loopback}, {0xa, 0x0, 0x2, @mcast2}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2]}}, 0x5c) socket(0xa, 0x3, 0x3a) signalfd(r4, &(0x7f0000000380)={[0x5]}, 0x8) 327.546567ms ago: executing program 0 (id=1075): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x10, 0x30, 0x30, 0x0, @ib={0x1b, 0x4f53, 0xffff, {"15bf3c0782bafb0045c4377b8e39aed9"}, 0x7c4fd0a9, 0xa6, 0x5e}, @ib={0x1b, 0x38e, 0x0, {}, 0x9, 0x0, 0x8}}}, 0x118) epoll_create(0x76f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) creat(0x0, 0x12a) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x8010, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000000)=""/196) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x2}}, 0x18) 247.846887ms ago: executing program 0 (id=1076): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) write$P9_RXATTRWALK(r1, &(0x7f0000000200)={0xf, 0x1f, 0x2, 0x8000}, 0xf) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r3, 0x200000}) 0s ago: executing program 2 (id=1077): socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9201e001a00"], 0x23) kernel console output (not intermixed with test programs): = error: -19 [ 263.605242][ T90] dvb-usb: error while querying for an remote control event. [ 263.643568][ T8560] netlink: 'syz.0.698': attribute type 12 has an invalid length. [ 263.691890][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 263.726502][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 263.746185][ T8563] netlink: 'syz.4.699': attribute type 6 has an invalid length. [ 263.755178][ T90] m920x_read = error: -19 [ 263.773060][ T90] dvb-usb: error while querying for an remote control event. [ 263.782085][ T8563] netlink: 'syz.4.699': attribute type 13 has an invalid length. [ 263.874618][ T8564] netlink: 76 bytes leftover after parsing attributes in process `syz.4.699'. [ 263.883632][ T8564] netlink: 76 bytes leftover after parsing attributes in process `syz.4.699'. [ 263.919518][ T8564] bridge_slave_1: left allmulticast mode [ 263.925316][ T8564] bridge_slave_1: left promiscuous mode [ 263.931690][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.933259][ T90] m920x_read = error: -19 [ 263.944499][ T90] dvb-usb: error while querying for an remote control event. [ 264.133313][ T90] m920x_read = error: -19 [ 264.248766][ T90] dvb-usb: error while querying for an remote control event. [ 264.281193][ T8564] bridge_slave_0: left allmulticast mode [ 264.829432][ T90] m920x_read = error: -19 [ 264.836518][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.896019][ T90] dvb-usb: error while querying for an remote control event. [ 264.920906][ T8564] bridge_slave_0: left promiscuous mode [ 264.926550][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.941126][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.045450][ T90] m920x_read = error: -19 [ 265.045470][ T90] dvb-usb: error while querying for an remote control event. [ 265.153089][ T90] m920x_read = error: -19 [ 265.153110][ T90] dvb-usb: error while querying for an remote control event. [ 265.260888][ T90] m920x_read = error: -19 [ 265.260909][ T90] dvb-usb: error while querying for an remote control event. [ 265.770947][ T90] m920x_read = error: -19 [ 265.771082][ T90] dvb-usb: error while querying for an remote control event. [ 265.995865][ T90] m920x_read = error: -19 [ 265.995886][ T90] dvb-usb: error while querying for an remote control event. [ 266.100881][ T7476] m920x_read = error: -19 [ 266.105267][ T7476] dvb-usb: error while querying for an remote control event. [ 266.158027][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 266.763713][ T7476] m920x_read = error: -19 [ 266.770831][ T7476] dvb-usb: error while querying for an remote control event. [ 266.938217][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 266.963294][ T7476] m920x_read = error: -19 [ 267.057937][ T7476] dvb-usb: error while querying for an remote control event. [ 267.182733][ T7476] m920x_read = error: -19 [ 267.341248][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.420869][ T7476] dvb-usb: error while querying for an remote control event. [ 267.468825][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.530979][ T7476] m920x_read = error: -19 [ 267.535335][ T7476] dvb-usb: error while querying for an remote control event. [ 267.542799][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 267.584257][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.621721][ T9] usb 4-1: config 0 descriptor?? [ 267.712404][ T7476] m920x_read = error: -19 [ 267.720953][ T7476] dvb-usb: error while querying for an remote control event. [ 267.844953][ T7476] m920x_read = error: -19 [ 267.849606][ T7476] dvb-usb: error while querying for an remote control event. [ 268.000972][ T7476] m920x_read = error: -19 [ 268.010819][ T7476] dvb-usb: error while querying for an remote control event. [ 268.137134][ T7476] m920x_read = error: -19 [ 268.153256][ T7476] dvb-usb: error while querying for an remote control event. [ 268.291219][ T7476] m920x_read = error: -19 [ 268.296650][ T7476] dvb-usb: error while querying for an remote control event. [ 268.367947][ T8609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.519474][ T8609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.612642][ T7476] m920x_read = error: -19 [ 268.680598][ T7476] dvb-usb: error while querying for an remote control event. [ 268.833738][ T7476] m920x_read = error: -19 [ 268.861345][ T7476] dvb-usb: error while querying for an remote control event. [ 268.981010][ T7476] m920x_read = error: -19 [ 268.995320][ T7476] dvb-usb: error while querying for an remote control event. [ 269.661773][ T24] m920x_read = error: -19 [ 269.666206][ T24] dvb-usb: error while querying for an remote control event. [ 269.801218][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 269.808000][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 269.818318][ T9] usb 4-1: USB disconnect, device number 19 [ 269.950899][ T24] m920x_read = error: -19 [ 269.955259][ T24] dvb-usb: error while querying for an remote control event. [ 270.493877][ T24] m920x_read = error: -19 [ 270.505886][ T24] dvb-usb: error while querying for an remote control event. [ 270.579501][ T8626] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 270.676118][ T24] m920x_read = error: -19 [ 270.684699][ T24] dvb-usb: error while querying for an remote control event. [ 270.871035][ T6004] m920x_read = error: -19 [ 270.875603][ T6004] dvb-usb: error while querying for an remote control event. [ 271.326152][ T6004] m920x_read = error: -19 [ 271.338097][ T30] audit: type=1804 audit(1765471931.547:872): pid=8636 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.716" name="/newroot/150/file0" dev="tmpfs" ino=805 res=1 errno=0 [ 271.410912][ T6004] dvb-usb: error while querying for an remote control event. [ 271.530867][ T6004] m920x_read = error: -19 [ 271.535250][ T6004] dvb-usb: error while querying for an remote control event. [ 271.643468][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 271.657390][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.718'. [ 271.670831][ T8644] netlink: 'syz.3.718': attribute type 6 has an invalid length. [ 271.687330][ T8644] netlink: 'syz.3.718': attribute type 13 has an invalid length. [ 271.846362][ T6004] m920x_read = error: -19 [ 271.858650][ T6004] dvb-usb: error while querying for an remote control event. [ 271.986488][ T6004] m920x_read = error: -19 [ 271.991226][ T6004] dvb-usb: error while querying for an remote control event. [ 272.022213][ T8647] netlink: 76 bytes leftover after parsing attributes in process `syz.3.718'. [ 272.031334][ T8647] netlink: 76 bytes leftover after parsing attributes in process `syz.3.718'. [ 272.101292][ T6004] m920x_read = error: -19 [ 272.105792][ T6004] dvb-usb: error while querying for an remote control event. [ 272.271257][ T6004] m920x_read = error: -19 [ 272.275810][ T6004] dvb-usb: error while querying for an remote control event. [ 272.400883][ T6004] m920x_read = error: -19 [ 272.486376][ T6004] dvb-usb: error while querying for an remote control event. [ 272.817987][ T6004] m920x_read = error: -19 [ 272.822648][ T6004] dvb-usb: error while querying for an remote control event. [ 272.831260][ T30] audit: type=1400 audit(1765471933.387:873): avc: denied { watch watch_reads } for pid=8658 comm="syz.3.721" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.952165][ T5917] m920x_read = error: -19 [ 272.956527][ T5917] dvb-usb: error while querying for an remote control event. [ 272.969333][ T30] audit: type=1400 audit(1765471933.527:874): avc: denied { bind } for pid=8665 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 273.010788][ T6004] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 273.164506][ T5917] m920x_read = error: -19 [ 273.169610][ T5917] dvb-usb: error while querying for an remote control event. [ 273.219685][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 273.228607][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 273.243806][ T6004] usb 5-1: unable to get BOS descriptor or descriptor too short [ 273.257891][ T6004] usb 5-1: not running at top speed; connect to a high speed hub [ 273.664418][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 273.670534][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 273.699508][ T6004] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 273.799631][ T8671] ceph: No mds server is up or the cluster is laggy [ 274.027905][ T8681] ip6tnl1: entered promiscuous mode [ 274.039268][ T5917] m920x_read = error: -19 [ 274.136629][ T6004] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 274.144266][ T5917] dvb-usb: error while querying for an remote control event. [ 274.310895][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 274.470234][ T90] m920x_read = error: -19 [ 274.475852][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 274.476039][ T6004] usb 5-1: can't read configurations, error -61 [ 274.510956][ T90] dvb-usb: error while querying for an remote control event. [ 274.727321][ T90] m920x_read = error: -19 [ 274.731696][ T90] dvb-usb: error while querying for an remote control event. [ 274.747945][ T8686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.791314][ T8686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.802370][ T6004] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 274.854357][ T90] m920x_read = error: -19 [ 274.903133][ T90] dvb-usb: error while querying for an remote control event. [ 275.016777][ T90] m920x_read = error: -19 [ 275.021696][ T90] dvb-usb: error while querying for an remote control event. [ 275.131102][ T90] m920x_read = error: -19 [ 275.135533][ T90] dvb-usb: error while querying for an remote control event. [ 275.630813][ T90] m920x_read = error: -19 [ 276.212460][ T90] dvb-usb: error while querying for an remote control event. [ 276.322890][ T90] m920x_read = error: -19 [ 276.432526][ T90] dvb-usb: error while querying for an remote control event. [ 276.540879][ T90] m920x_read = error: -19 [ 276.546207][ T90] dvb-usb: error while querying for an remote control event. [ 276.831106][ T90] m920x_read = error: -19 [ 276.835534][ T90] dvb-usb: error while querying for an remote control event. [ 276.840860][ T5875] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 276.924861][ T8715] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 276.969958][ T8715] bond1: (slave lo): Enslaving as a backup interface with an up link [ 276.986968][ T90] m920x_read = error: -19 [ 276.991515][ T90] dvb-usb: error while querying for an remote control event. [ 277.097869][ T5875] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 277.109338][ T5875] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 277.109803][ T8715] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 277.145558][ T90] m920x_read = error: -19 [ 277.150053][ T90] dvb-usb: error while querying for an remote control event. [ 277.200954][ T5875] usb 5-1: config 220 has no interface number 2 [ 277.207261][ T5875] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 277.240803][ T5875] usb 5-1: config 220 interface 0 has no altsetting 0 [ 277.247611][ T5875] usb 5-1: config 220 interface 76 has no altsetting 0 [ 277.255827][ T5875] usb 5-1: config 220 interface 1 has no altsetting 0 [ 277.270858][ T90] m920x_read = error: -19 [ 277.275257][ T90] dvb-usb: error while querying for an remote control event. [ 277.275376][ T5875] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 277.293853][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.331088][ T5875] usb 5-1: Product: syz [ 277.337290][ T5875] usb 5-1: Manufacturer: syz [ 277.344568][ T5875] usb 5-1: SerialNumber: syz [ 277.409100][ T8719] netlink: 32 bytes leftover after parsing attributes in process `syz.0.735'. [ 277.487701][ T90] m920x_read = error: -19 [ 277.530751][ T90] dvb-usb: error while querying for an remote control event. [ 277.613946][ T8705] syz.4.732 (8705): drop_caches: 2 [ 277.619314][ T8705] syz.4.732 (8705): drop_caches: 2 [ 277.662153][ T5875] usb 5-1: selecting invalid altsetting 0 [ 277.669264][ T5875] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 277.743085][ T90] m920x_read = error: -19 [ 277.747344][ T5875] uvcvideo 5-1:220.0: No valid video chain found. [ 277.747612][ T90] dvb-usb: error while querying for an remote control event. [ 277.757569][ T5875] usb 5-1: selecting invalid altsetting 0 [ 277.767184][ T5875] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 277.776433][ T8722] netlink: 104 bytes leftover after parsing attributes in process `syz.1.736'. [ 277.778355][ T5875] usb 5-1: USB disconnect, device number 16 [ 278.337952][ T90] m920x_read = error: -19 [ 278.370520][ T90] dvb-usb: error while querying for an remote control event. [ 278.511225][ T90] m920x_read = error: -19 [ 278.571763][ T90] dvb-usb: error while querying for an remote control event. [ 278.646104][ T8731] veth1_macvtap: entered allmulticast mode [ 278.692936][ T90] m920x_read = error: -19 [ 278.697295][ T90] dvb-usb: error while querying for an remote control event. [ 279.540782][ T7476] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 279.640815][ T90] m920x_read = error: -19 [ 279.645174][ T90] dvb-usb: error while querying for an remote control event. [ 279.702358][ T7476] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 279.710715][ T7476] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 279.732176][ T7476] usb 2-1: config 220 has no interface number 2 [ 279.747547][ T7476] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 279.775742][ T7476] usb 2-1: config 220 interface 0 has no altsetting 0 [ 279.790835][ T7476] usb 2-1: config 220 interface 76 has no altsetting 0 [ 279.790851][ T5875] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 279.808300][ T90] m920x_read = error: -19 [ 279.814163][ T90] dvb-usb: error while querying for an remote control event. [ 279.832500][ T7476] usb 2-1: config 220 interface 1 has no altsetting 0 [ 279.849913][ T7476] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 279.859075][ T7476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.877228][ T7476] usb 2-1: Product: syz [ 279.883517][ T7476] usb 2-1: Manufacturer: syz [ 279.888116][ T7476] usb 2-1: SerialNumber: syz [ 279.945187][ T5875] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 279.951714][ T90] m920x_read = error: -19 [ 279.953704][ T5875] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 279.958876][ T90] dvb-usb: error while querying for an remote control event. [ 279.978372][ T30] audit: type=1326 audit(1765471940.527:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8750 comm="syz.2.744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e9d58f749 code=0x0 [ 280.010881][ T5875] usb 5-1: config 220 has no interface number 2 [ 280.018469][ T5875] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 280.030672][ T8752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.041049][ T5875] usb 5-1: config 220 interface 0 has no altsetting 0 [ 280.048557][ T5875] usb 5-1: config 220 interface 76 has no altsetting 0 [ 280.056702][ T8752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.064782][ T5875] usb 5-1: config 220 interface 1 has no altsetting 0 [ 280.074773][ T5875] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 280.087927][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.090779][ T90] m920x_read = error: -19 [ 280.112117][ T90] dvb-usb: error while querying for an remote control event. [ 280.125304][ T8739] syz.1.741 (8739): drop_caches: 2 [ 280.130667][ T8739] syz.1.741 (8739): drop_caches: 2 [ 280.158992][ T7476] usb 2-1: selecting invalid altsetting 0 [ 280.177140][ T7476] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 280.180857][ T5875] usb 5-1: Product: syz [ 280.194661][ T7476] uvcvideo 2-1:220.0: No valid video chain found. [ 280.208060][ T5875] usb 5-1: Manufacturer: syz [ 280.218269][ T7476] usb 2-1: selecting invalid altsetting 0 [ 280.225047][ T5875] usb 5-1: SerialNumber: syz [ 280.232418][ T7476] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 280.261795][ T7476] usb 2-1: USB disconnect, device number 22 [ 280.281738][ T6222] m920x_read = error: -19 [ 280.286107][ T6222] dvb-usb: error while querying for an remote control event. [ 280.410780][ T6222] m920x_read = error: -19 [ 280.415141][ T6222] dvb-usb: error while querying for an remote control event. [ 280.580848][ T6222] m920x_read = error: -19 [ 280.590755][ T6222] dvb-usb: error while querying for an remote control event. [ 280.646630][ T8747] syz.4.742 (8747): drop_caches: 2 [ 280.652580][ T8747] syz.4.742 (8747): drop_caches: 2 [ 280.687887][ T5875] usb 5-1: selecting invalid altsetting 0 [ 280.694177][ T5875] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 280.704902][ T5875] uvcvideo 5-1:220.0: No valid video chain found. [ 280.730885][ T6222] m920x_read = error: -19 [ 280.735244][ T6222] dvb-usb: error while querying for an remote control event. [ 280.739173][ T5875] usb 5-1: selecting invalid altsetting 0 [ 280.765032][ T5875] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 280.801090][ T5875] usb 5-1: USB disconnect, device number 17 [ 280.870809][ T6222] m920x_read = error: -19 [ 280.875173][ T6222] dvb-usb: error while querying for an remote control event. [ 281.053247][ T6222] m920x_read = error: -19 [ 281.057612][ T6222] dvb-usb: error while querying for an remote control event. [ 281.363349][ T6222] m920x_read = error: -19 [ 281.369268][ T6222] dvb-usb: error while querying for an remote control event. [ 281.503626][ T90] m920x_read = error: -19 [ 281.510130][ T90] dvb-usb: error while querying for an remote control event. [ 281.637968][ T90] m920x_read = error: -19 [ 281.645835][ T8774] FAULT_INJECTION: forcing a failure. [ 281.645835][ T8774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.660170][ T8774] CPU: 0 UID: 0 PID: 8774 Comm: syz.4.748 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.660194][ T8774] Tainted: [L]=SOFTLOCKUP [ 281.660199][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.660208][ T8774] Call Trace: [ 281.660214][ T8774] [ 281.660220][ T8774] dump_stack_lvl+0x16c/0x1f0 [ 281.660241][ T8774] should_fail_ex+0x512/0x640 [ 281.660258][ T8774] _copy_from_user+0x2e/0xd0 [ 281.660272][ T8774] snd_seq_oss_write+0x397/0x7d0 [ 281.660288][ T8774] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 281.660304][ T8774] ? bpf_lsm_file_permission+0x9/0x10 [ 281.660316][ T8774] ? __pfx_odev_write+0x10/0x10 [ 281.660325][ T8774] odev_write+0x51/0xa0 [ 281.660335][ T8774] vfs_write+0x2a0/0x11d0 [ 281.660351][ T8774] ? __pfx_vfs_write+0x10/0x10 [ 281.660367][ T8774] ? find_held_lock+0x2b/0x80 [ 281.660383][ T8774] ? __fget_files+0x204/0x3c0 [ 281.660399][ T8774] ? __fget_files+0x20e/0x3c0 [ 281.660416][ T8774] ksys_write+0x12a/0x250 [ 281.660429][ T8774] ? __pfx_ksys_write+0x10/0x10 [ 281.660445][ T8774] do_syscall_64+0xcd/0xf80 [ 281.660456][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.660467][ T8774] RIP: 0033:0x7f4bae38f749 [ 281.660476][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.660485][ T8774] RSP: 002b:00007f4baf1ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.660496][ T8774] RAX: ffffffffffffffda RBX: 00007f4bae5e6090 RCX: 00007f4bae38f749 [ 281.660502][ T8774] RDX: 000000000000021e RSI: 0000200000000280 RDI: 0000000000000003 [ 281.660508][ T8774] RBP: 00007f4baf1ca090 R08: 0000000000000000 R09: 0000000000000000 [ 281.660514][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.660520][ T8774] R13: 00007f4bae5e6128 R14: 00007f4bae5e6090 R15: 00007ffc4d239b98 [ 281.660533][ T8774] [ 281.684027][ T90] dvb-usb: error while querying for an remote control event. [ 281.970877][ T90] m920x_read = error: -19 [ 281.988455][ T90] dvb-usb: error while querying for an remote control event. [ 282.120840][ T90] m920x_read = error: -19 [ 282.127411][ T90] dvb-usb: error while querying for an remote control event. [ 282.159073][ T8783] 9p: Bad value for 'rfdno' [ 282.190470][ T30] audit: type=1326 audit(1765471942.737:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ce58f749 code=0x7ffc0000 [ 282.238636][ T30] audit: type=1326 audit(1765471942.767:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f32ce58f749 code=0x7ffc0000 [ 282.273334][ T90] m920x_read = error: -19 [ 282.277879][ T90] dvb-usb: error while querying for an remote control event. [ 282.392975][ T90] m920x_read = error: -19 [ 282.397410][ T90] dvb-usb: error while querying for an remote control event. [ 282.527260][ T90] m920x_read = error: -19 [ 282.532481][ T90] dvb-usb: error while querying for an remote control event. [ 282.857166][ T90] m920x_read = error: -19 [ 282.861609][ T90] dvb-usb: error while querying for an remote control event. [ 282.971309][ T90] m920x_read = error: -19 [ 282.979832][ T90] dvb-usb: error while querying for an remote control event. [ 283.140800][ T90] m920x_read = error: -19 [ 283.155313][ T90] dvb-usb: error while querying for an remote control event. [ 283.312688][ T90] m920x_read = error: -19 [ 283.317273][ T90] dvb-usb: error while querying for an remote control event. [ 283.734898][ T90] m920x_read = error: -19 [ 283.744214][ T90] dvb-usb: error while querying for an remote control event. [ 283.938395][ T90] m920x_read = error: -19 [ 283.971245][ T90] dvb-usb: error while querying for an remote control event. [ 284.075056][ T30] audit: type=1400 audit(1765471944.627:878): avc: denied { mount } for pid=8815 comm="syz.2.760" name="/" dev="autofs" ino=21389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 284.097456][ T90] m920x_read = error: -19 [ 284.102223][ T90] dvb-usb: error while querying for an remote control event. [ 284.124935][ T8819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.133443][ T8819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.211262][ T90] m920x_read = error: -19 [ 284.215616][ T90] dvb-usb: error while querying for an remote control event. [ 284.330884][ T90] m920x_read = error: -19 [ 284.335291][ T90] dvb-usb: error while querying for an remote control event. [ 284.451479][ T90] m920x_read = error: -19 [ 284.451499][ T90] dvb-usb: error while querying for an remote control event. [ 284.562623][ T5917] m920x_read = error: -19 [ 284.566991][ T5917] dvb-usb: error while querying for an remote control event. [ 284.698952][ T90] m920x_read = error: -19 [ 284.710841][ T90] dvb-usb: error while querying for an remote control event. [ 284.770806][ T5811] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 284.809509][ T30] audit: type=1400 audit(1765471945.357:879): avc: denied { ioctl } for pid=8831 comm="syz.3.764" path="/164/file0/file0" dev="fuse" ino=64 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 284.836702][ T5917] m920x_read = error: -19 [ 284.845011][ T5917] dvb-usb: error while querying for an remote control event. [ 284.973140][ T5917] m920x_read = error: -19 [ 284.977565][ T5917] dvb-usb: error while querying for an remote control event. [ 284.996226][ T5811] usb 1-1: Using ep0 maxpacket: 32 [ 285.010123][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.021625][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.033528][ T5811] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 285.042758][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.092258][ T5917] m920x_read = error: -19 [ 285.237520][ T5811] usb 1-1: config 0 descriptor?? [ 285.263166][ T5917] dvb-usb: error while querying for an remote control event. [ 285.381245][ T5917] m920x_read = error: -19 [ 285.386013][ T5917] dvb-usb: error while querying for an remote control event. [ 285.531730][ T5917] m920x_read = error: -19 [ 285.543386][ T5811] usbhid 1-1:0.0: can't add hid device: -71 [ 285.545634][ T5917] dvb-usb: error while querying for an remote control event. [ 285.549405][ T5811] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 285.575704][ T5811] usb 1-1: USB disconnect, device number 25 [ 285.778424][ T5917] m920x_read = error: -19 [ 285.796413][ T5917] dvb-usb: error while querying for an remote control event. [ 286.018282][ T5917] m920x_read = error: -19 [ 286.022740][ T5917] dvb-usb: error while querying for an remote control event. [ 286.130815][ T5917] m920x_read = error: -19 [ 286.135503][ T5917] dvb-usb: error while querying for an remote control event. [ 286.250796][ T5917] m920x_read = error: -19 [ 286.256619][ T5917] dvb-usb: error while querying for an remote control event. [ 286.340767][ T5811] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 286.370866][ T5917] m920x_read = error: -19 [ 286.428591][ T5917] dvb-usb: error while querying for an remote control event. [ 286.530731][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 286.561846][ T5917] m920x_read = error: -19 [ 286.566242][ T5917] dvb-usb: error while querying for an remote control event. [ 286.586295][ T5811] usb 2-1: config 0 has an invalid interface number: 165 but max is 0 [ 286.615266][ T5811] usb 2-1: config 0 has no interface number 0 [ 286.637775][ T5811] usb 2-1: config 0 interface 165 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 286.674757][ T5811] usb 2-1: New USB device found, idVendor=06a3, idProduct=ff04, bcdDevice= 5.fa [ 286.690824][ T5917] m920x_read = error: -19 [ 286.696518][ T5917] dvb-usb: error while querying for an remote control event. [ 286.712401][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.745877][ T5811] usb 2-1: config 0 descriptor?? [ 286.843635][ T5917] m920x_read = error: -19 [ 286.863586][ T5917] dvb-usb: error while querying for an remote control event. [ 286.990879][ T5917] m920x_read = error: -19 [ 287.003923][ T5917] dvb-usb: error while querying for an remote control event. [ 287.089073][ T30] audit: type=1400 audit(1765471947.637:880): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 287.199723][ T5917] m920x_read = error: -19 [ 287.211319][ T5917] dvb-usb: error while querying for an remote control event. [ 287.365352][ T5917] m920x_read = error: -19 [ 287.370001][ T5917] dvb-usb: error while querying for an remote control event. [ 287.518343][ T8864] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 287.548702][ T30] audit: type=1400 audit(1765471948.087:881): avc: denied { getopt } for pid=8861 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 287.568427][ T5917] m920x_read = error: -19 [ 287.573739][ T5917] dvb-usb: error while querying for an remote control event. [ 287.870812][ T90] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 287.961318][ T5917] m920x_read = error: -19 [ 287.965672][ T5917] dvb-usb: error while querying for an remote control event. [ 288.034428][ T30] audit: type=1400 audit(1765471948.587:882): avc: denied { read } for pid=8871 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.082963][ T90] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 288.093019][ T90] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 288.111546][ T90] usb 5-1: config 8 has no interface number 0 [ 288.120783][ T5917] m920x_read = error: -19 [ 288.125145][ T5917] dvb-usb: error while querying for an remote control event. [ 288.137067][ T90] usb 5-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 288.247264][ T90] usb 5-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.260283][ T5917] m920x_read = error: -19 [ 288.264652][ T5917] dvb-usb: error while querying for an remote control event. [ 288.272833][ T90] usb 5-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 288.283651][ T90] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 288.299438][ T90] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 288.309244][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.384162][ T5917] m920x_read = error: -19 [ 288.389731][ T5917] dvb-usb: error while querying for an remote control event. [ 288.714010][ T5917] m920x_read = error: -19 [ 288.722443][ T90] usb 5-1: NFC: intf ffff88801feaa000 id ffffffff8f322480 [ 288.737812][ T5917] dvb-usb: error while querying for an remote control event. [ 288.756561][ T90] nfcmrvl 5-1:8.80: NFC: registered with nci successfully [ 288.850810][ T90] m920x_read = error: -19 [ 288.864143][ T90] dvb-usb: error while querying for an remote control event. [ 288.980949][ T90] m920x_read = error: -19 [ 288.988281][ T90] dvb-usb: error while querying for an remote control event. [ 289.307594][ T90] m920x_read = error: -19 [ 289.314219][ T90] dvb-usb: error while querying for an remote control event. [ 289.345388][ T5811] usb 2-1: USB disconnect, device number 23 [ 289.445751][ T6222] m920x_read = error: -19 [ 289.459711][ T6222] dvb-usb: error while querying for an remote control event. [ 289.656540][ T8894] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 289.666555][ T6222] m920x_read = error: -19 [ 289.673879][ T6222] dvb-usb: error while querying for an remote control event. [ 289.790817][ T6222] m920x_read = error: -19 [ 289.806793][ T6222] dvb-usb: error while querying for an remote control event. [ 289.941745][ T6222] m920x_read = error: -19 [ 289.941802][ T5811] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 289.953904][ T6222] dvb-usb: error while querying for an remote control event. [ 290.510907][ T6222] m920x_read = error: -19 [ 290.515538][ T6222] dvb-usb: error while querying for an remote control event. [ 290.529932][ T90] usb 5-1: USB disconnect, device number 18 [ 290.617342][ T90] usb 5-1: NFC: intf ffff88801feaa000 [ 290.630963][ T6222] m920x_read = error: -19 [ 290.632743][ T5811] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.655356][ T5811] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.656478][ T6222] dvb-usb: error while querying for an remote control event. [ 290.860742][ T5811] usb 2-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 290.869916][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.882866][ T5811] usb 2-1: config 0 descriptor?? [ 290.925848][ T7476] m920x_read = error: -19 [ 290.931029][ T7476] dvb-usb: error while querying for an remote control event. [ 291.052292][ T90] m920x_read = error: -19 [ 291.058968][ T90] dvb-usb: error while querying for an remote control event. [ 291.069054][ T8912] block nbd0: shutting down sockets [ 291.180775][ T90] m920x_read = error: -19 [ 291.205318][ T90] dvb-usb: error while querying for an remote control event. [ 291.350804][ T90] m920x_read = error: -19 [ 291.364532][ T90] dvb-usb: error while querying for an remote control event. [ 291.501267][ T90] m920x_read = error: -19 [ 291.505794][ T90] dvb-usb: error while querying for an remote control event. [ 291.721130][ T90] m920x_read = error: -19 [ 291.725676][ T90] dvb-usb: error while querying for an remote control event. [ 291.900818][ T90] m920x_read = error: -19 [ 291.907493][ T90] dvb-usb: error while querying for an remote control event. [ 292.062749][ T90] m920x_read = error: -19 [ 292.074013][ T90] dvb-usb: error while querying for an remote control event. [ 292.165604][ T90] usb 2-1: USB disconnect, device number 24 [ 292.215128][ T7476] m920x_read = error: -19 [ 292.225270][ T7476] dvb-usb: error while querying for an remote control event. [ 292.361616][ T24] m920x_read = error: -19 [ 292.366045][ T24] dvb-usb: error while querying for an remote control event. [ 292.410527][ T30] audit: type=1400 audit(1765471952.957:883): avc: denied { create } for pid=8928 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 292.460378][ T30] audit: type=1400 audit(1765471953.007:884): avc: denied { sys_admin } for pid=8928 comm="syz.4.793" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 292.506244][ T24] m920x_read = error: -19 [ 292.510629][ T24] dvb-usb: error while querying for an remote control event. [ 292.596644][ T30] audit: type=1400 audit(1765471953.147:885): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 292.650882][ T24] m920x_read = error: -19 [ 292.656622][ T24] dvb-usb: error while querying for an remote control event. [ 292.824929][ T24] m920x_read = error: -19 [ 292.829587][ T24] dvb-usb: error while querying for an remote control event. [ 293.070873][ T24] m920x_read = error: -19 [ 293.075232][ T24] dvb-usb: error while querying for an remote control event. [ 293.099697][ T30] audit: type=1400 audit(1765471953.647:886): avc: denied { connect } for pid=8939 comm="syz.4.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 293.213249][ T24] m920x_read = error: -19 [ 293.217581][ T24] dvb-usb: error while querying for an remote control event. [ 293.264077][ T30] audit: type=1326 audit(1765471953.817:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8941 comm="syz.1.796" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6fcd8f749 code=0x0 [ 293.267193][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.797'. [ 293.336698][ T8944] netlink: 31 bytes leftover after parsing attributes in process `syz.2.797'. [ 293.744931][ T24] m920x_read = error: -19 [ 293.745694][ T8944] netlink: 'syz.2.797': attribute type 3 has an invalid length. [ 293.749288][ T24] dvb-usb: error while querying for an remote control event. [ 293.791702][ T8944] netlink: 'syz.2.797': attribute type 2 has an invalid length. [ 293.820511][ T8944] netlink: 31 bytes leftover after parsing attributes in process `syz.2.797'. [ 293.881069][ T24] m920x_read = error: -19 [ 293.885534][ T24] dvb-usb: error while querying for an remote control event. [ 294.017994][ T30] audit: type=1400 audit(1765471954.557:888): avc: denied { read } for pid=8943 comm="syz.2.797" name="file1" dev="tmpfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 294.101284][ T6004] m920x_read = error: -19 [ 294.105647][ T6004] dvb-usb: error while querying for an remote control event. [ 294.626300][ T6004] m920x_read = error: -19 [ 294.661783][ T6004] dvb-usb: error while querying for an remote control event. [ 294.812214][ T6004] m920x_read = error: -19 [ 294.816579][ T6004] dvb-usb: error while querying for an remote control event. [ 294.931946][ T6004] m920x_read = error: -19 [ 294.946417][ T6004] dvb-usb: error while querying for an remote control event. [ 295.080976][ T6004] m920x_read = error: -19 [ 295.085324][ T6004] dvb-usb: error while querying for an remote control event. [ 295.213857][ T90] m920x_read = error: -19 [ 295.219022][ T90] dvb-usb: error while querying for an remote control event. [ 295.381521][ T90] m920x_read = error: -19 [ 295.386352][ T90] dvb-usb: error while querying for an remote control event. [ 295.541257][ T90] m920x_read = error: -19 [ 295.546765][ T90] dvb-usb: error while querying for an remote control event. [ 295.704277][ T90] m920x_read = error: -19 [ 295.708653][ T90] dvb-usb: error while querying for an remote control event. [ 295.860772][ T90] m920x_read = error: -19 [ 295.865469][ T90] dvb-usb: error while querying for an remote control event. [ 295.940784][ T30] audit: type=1400 audit(1765471956.487:889): avc: denied { read } for pid=8953 comm="syz.1.800" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.047453][ T8975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.800'. [ 297.048675][ T24] m920x_read = error: -19 [ 297.098181][ T24] dvb-usb: error while querying for an remote control event. [ 297.280952][ T7476] m920x_read = error: -19 [ 297.280975][ T7476] dvb-usb: error while querying for an remote control event. [ 297.338440][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.376082][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.390782][ T90] m920x_read = error: -19 [ 297.397947][ T90] dvb-usb: error while querying for an remote control event. [ 297.850804][ T90] m920x_read = error: -19 [ 297.857246][ T90] dvb-usb: error while querying for an remote control event. [ 297.942491][ T30] audit: type=1400 audit(1765471958.497:890): avc: denied { read } for pid=8993 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 298.058845][ T90] m920x_read = error: -19 [ 298.073662][ T90] dvb-usb: error while querying for an remote control event. [ 298.258838][ T5917] m920x_read = error: -19 [ 298.263590][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 298.290722][ T5917] dvb-usb: error while querying for an remote control event. [ 298.447771][ T5917] m920x_read = error: -19 [ 298.452227][ T5917] dvb-usb: error while querying for an remote control event. [ 298.471996][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.493796][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 298.523263][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 298.560822][ T5917] m920x_read = error: -19 [ 298.565193][ T5917] dvb-usb: error while querying for an remote control event. [ 298.583045][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.635685][ T8992] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 298.653231][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.678266][ T30] audit: type=1400 audit(1765471959.227:891): avc: denied { connect } for pid=9001 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 298.700634][ T90] m920x_read = error: -19 [ 298.707112][ T90] dvb-usb: error while querying for an remote control event. [ 298.787256][ T30] audit: type=1400 audit(1765471959.317:892): avc: denied { ioctl } for pid=9001 comm="syz.0.812" path="socket:[23778]" dev="sockfs" ino=23778 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 298.790889][ T9009] smc: net device bond0 applied user defined pnetid SYZ0 [ 298.850789][ T24] m920x_read = error: -19 [ 298.855697][ T24] dvb-usb: error while querying for an remote control event. [ 298.907091][ T9009] smc: net device bond0 erased user defined pnetid SYZ0 [ 298.918364][ T30] audit: type=1400 audit(1765471959.467:893): avc: denied { write } for pid=9001 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 299.580792][ T24] m920x_read = error: -19 [ 299.585140][ T24] dvb-usb: error while querying for an remote control event. [ 299.623963][ T8992] netlink: 21 bytes leftover after parsing attributes in process `syz.1.809'. [ 299.751925][ T24] m920x_read = error: -19 [ 299.756259][ T24] dvb-usb: error while querying for an remote control event. [ 299.930767][ T90] m920x_read = error: -19 [ 299.935137][ T90] dvb-usb: error while querying for an remote control event. [ 300.036517][ T90] usb 2-1: USB disconnect, device number 25 [ 300.070995][ T24] m920x_read = error: -19 [ 300.076668][ T24] dvb-usb: error while querying for an remote control event. [ 300.191187][ T24] m920x_read = error: -19 [ 300.210747][ T24] dvb-usb: error while querying for an remote control event. [ 300.421373][ T24] m920x_read = error: -19 [ 300.426797][ T24] dvb-usb: error while querying for an remote control event. [ 300.435765][ T30] audit: type=1400 audit(1765471960.827:894): avc: denied { watch_reads } for pid=9026 comm="syz.3.819" path="/180" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 300.541228][ T24] m920x_read = error: -19 [ 300.560775][ T24] dvb-usb: error while querying for an remote control event. [ 300.690776][ T90] m920x_read = error: -19 [ 300.705704][ T90] dvb-usb: error while querying for an remote control event. [ 300.820989][ T30] audit: type=1400 audit(1765471961.377:895): avc: denied { setopt } for pid=9034 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.841842][ T90] m920x_read = error: -19 [ 300.859871][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 300.872178][ T90] dvb-usb: error while querying for an remote control event. [ 301.011790][ T90] m920x_read = error: -19 [ 301.133573][ T90] dvb-usb: error while querying for an remote control event. [ 301.581594][ T24] m920x_read = error: -19 [ 301.585953][ T24] dvb-usb: error while querying for an remote control event. [ 301.710824][ T5917] m920x_read = error: -19 [ 301.715609][ T5917] dvb-usb: error while querying for an remote control event. [ 301.851018][ T24] m920x_read = error: -19 [ 301.855394][ T24] dvb-usb: error while querying for an remote control event. [ 304.692631][ T30] audit: type=1326 audit(1765471965.247:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.2.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d58f749 code=0x7ffc0000 [ 305.204314][ T24] m920x_read = error: -19 [ 305.210726][ T24] dvb-usb: error while querying for an remote control event. [ 305.321053][ T24] m920x_read = error: -19 [ 305.325487][ T24] dvb-usb: error while querying for an remote control event. [ 305.451105][ T5889] m920x_read = error: -19 [ 305.455468][ T5889] dvb-usb: error while querying for an remote control event. [ 305.590867][ T5889] m920x_read = error: -19 [ 305.595229][ T5889] dvb-usb: error while querying for an remote control event. [ 305.740753][ T5889] m920x_read = error: -19 [ 305.748710][ T5889] dvb-usb: error while querying for an remote control event. [ 305.826905][ T185] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 305.895002][ T30] audit: type=1400 audit(1765471966.447:897): avc: denied { create } for pid=9077 comm="syz.4.834" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 306.011192][ T185] usb 4-1: device descriptor read/64, error -71 [ 306.790795][ T185] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 306.930772][ T185] usb 4-1: device descriptor read/64, error -71 [ 306.930812][ T5868] m920x_read = error: -19 [ 306.948619][ T5868] dvb-usb: error while querying for an remote control event. [ 307.041056][ T185] usb usb4-port1: attempt power cycle [ 307.168330][ T5868] m920x_read = error: -19 [ 307.190745][ T5868] dvb-usb: error while querying for an remote control event. [ 307.300770][ T5868] m920x_read = error: -19 [ 307.307519][ T9102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.839'. [ 307.317497][ T5868] dvb-usb: error while querying for an remote control event. [ 307.431205][ T185] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 307.440765][ T5868] m920x_read = error: -19 [ 307.451407][ T185] usb 4-1: device descriptor read/8, error -71 [ 307.451495][ T5868] dvb-usb: error while querying for an remote control event. [ 307.490744][ T9110] macsec1: entered promiscuous mode [ 307.505349][ T9112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.841'. [ 307.516472][ T9110] macsec1: entered allmulticast mode [ 307.608828][ T5875] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 307.634645][ T5868] m920x_read = error: -19 [ 307.634667][ T5868] dvb-usb: error while querying for an remote control event. [ 307.733540][ T9114] 9p: Bad value for 'rfdno' [ 307.743859][ T5889] m920x_read = error: -19 [ 307.743940][ T5889] dvb-usb: error while querying for an remote control event. [ 307.862990][ T5889] m920x_read = error: -19 [ 307.863055][ T5889] dvb-usb: error while querying for an remote control event. [ 307.979902][ T90] m920x_read = error: -19 [ 307.980020][ T90] dvb-usb: error while querying for an remote control event. [ 308.093297][ T90] m920x_read = error: -19 [ 308.093313][ T90] dvb-usb: error while querying for an remote control event. [ 308.110797][ T185] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 308.145373][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.145400][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.145414][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.145434][ T5875] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 308.145446][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.146742][ T5875] usb 5-1: config 0 descriptor?? [ 308.149359][ T185] usb 4-1: device descriptor read/8, error -71 [ 308.252063][ T185] usb usb4-port1: unable to enumerate USB device [ 308.460324][ T5868] m920x_read = error: -19 [ 308.460346][ T5868] dvb-usb: error while querying for an remote control event. [ 308.571054][ T5868] m920x_read = error: -19 [ 308.571078][ T5868] dvb-usb: error while querying for an remote control event. [ 308.660550][ T5875] wacom 0003:056A:0010.0007: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 308.669791][ T5875] wacom 0003:056A:0010.0007: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.4-1/input0 [ 308.671681][ T5875] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0010.0007/input/input14 [ 308.690816][ T5868] m920x_read = error: -19 [ 308.690831][ T5868] dvb-usb: error while querying for an remote control event. [ 308.842267][ T5868] m920x_read = error: -19 [ 308.842385][ T5868] dvb-usb: error while querying for an remote control event. [ 308.966086][ T90] m920x_read = error: -19 [ 308.966202][ T90] dvb-usb: error while querying for an remote control event. [ 309.090749][ T90] m920x_read = error: -19 [ 309.090764][ T90] dvb-usb: error while querying for an remote control event. [ 309.091882][ T90] usb 5-1: USB disconnect, device number 19 [ 309.254866][ T5917] m920x_read = error: -19 [ 309.254881][ T5917] dvb-usb: error while querying for an remote control event. [ 309.360841][ T5917] m920x_read = error: -19 [ 309.360874][ T5917] dvb-usb: error while querying for an remote control event. [ 309.470872][ T5917] m920x_read = error: -19 [ 310.042671][ T5917] dvb-usb: error while querying for an remote control event. [ 310.168467][ T30] audit: type=1400 audit(1765471970.707:898): avc: denied { setopt } for pid=9121 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 310.184495][ T5917] m920x_read = error: -19 [ 310.220572][ T5917] dvb-usb: error while querying for an remote control event. [ 310.331102][ T5917] m920x_read = error: -19 [ 310.427244][ T5917] dvb-usb: error while querying for an remote control event. [ 310.861317][ T5917] m920x_read = error: -19 [ 310.865753][ T5917] dvb-usb: error while querying for an remote control event. [ 310.990763][ T5917] m920x_read = error: -19 [ 311.010867][ T5917] dvb-usb: error while querying for an remote control event. [ 311.170800][ T5917] m920x_read = error: -19 [ 311.176023][ T5917] dvb-usb: error while querying for an remote control event. [ 311.471065][ T5917] m920x_read = error: -19 [ 311.780028][ T5917] dvb-usb: error while querying for an remote control event. [ 311.920829][ T5917] m920x_read = error: -19 [ 311.925209][ T5917] dvb-usb: error while querying for an remote control event. [ 312.060799][ T5917] m920x_read = error: -19 [ 312.076606][ T5917] dvb-usb: error while querying for an remote control event. [ 312.642090][ T5917] m920x_read = error: -19 [ 312.684993][ T5917] dvb-usb: error while querying for an remote control event. [ 312.810775][ T5917] m920x_read = error: -19 [ 312.963274][ T5917] dvb-usb: error while querying for an remote control event. [ 313.325489][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'. [ 313.340798][ T5917] m920x_read = error: -19 [ 313.358671][ T5917] dvb-usb: error while querying for an remote control event. [ 313.370910][ T185] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 313.482331][ T5917] m920x_read = error: -19 [ 313.492144][ T5917] dvb-usb: error while querying for an remote control event. [ 313.530080][ T5875] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 313.553148][ T30] audit: type=1400 audit(1765471974.027:899): avc: denied { setattr } for pid=9173 comm="syz.0.860" name="route" dev="proc" ino=4026533374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 313.575900][ T185] usb 2-1: Using ep0 maxpacket: 32 [ 313.603257][ T5917] m920x_read = error: -19 [ 313.609866][ T5917] dvb-usb: error while querying for an remote control event. [ 313.854645][ T185] usb 2-1: config 32 has an invalid interface number: 85 but max is 0 [ 313.863186][ T185] usb 2-1: config 32 has no interface number 0 [ 313.877642][ T185] usb 2-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.910773][ T5875] usb 4-1: device descriptor read/64, error -71 [ 313.931212][ T5917] m920x_read = error: -19 [ 313.933310][ T185] usb 2-1: config 32 interface 85 has no altsetting 0 [ 313.935657][ T5917] dvb-usb: error while querying for an remote control event. [ 313.981330][ T6504] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 314.071160][ T185] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 314.090773][ T185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.196828][ T5917] m920x_read = error: -19 [ 314.201412][ T5875] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 314.257091][ T5917] dvb-usb: error while querying for an remote control event. [ 314.731478][ T185] usb 2-1: Product: syz [ 314.735685][ T185] usb 2-1: Manufacturer: syz [ 314.740291][ T185] usb 2-1: SerialNumber: syz [ 314.826335][ T6504] usb 1-1: config 0 has no interfaces? [ 314.832547][ T6504] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 314.842043][ T6504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.902525][ T5917] m920x_read = error: -19 [ 314.903890][ T6504] usb 1-1: config 0 descriptor?? [ 314.932173][ T5875] usb 4-1: device descriptor read/64, error -71 [ 314.932303][ T5917] dvb-usb: error while querying for an remote control event. [ 314.994806][ T9168] netlink: 'syz.1.858': attribute type 53 has an invalid length. [ 315.108654][ T5875] usb usb4-port1: attempt power cycle [ 315.142756][ T5917] m920x_read = error: -19 [ 315.147245][ T5917] dvb-usb: error while querying for an remote control event. [ 315.612451][ T5917] m920x_read = error: -19 [ 315.616883][ T5917] dvb-usb: error while querying for an remote control event. [ 315.639533][ T185] appletouch 2-1:32.85: Failed to read mode from device. [ 315.651372][ T185] appletouch 2-1:32.85: probe with driver appletouch failed with error -5 [ 315.690765][ T5875] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 315.710093][ T6504] usb 1-1: USB disconnect, device number 26 [ 315.716561][ T5875] usb 4-1: device descriptor read/8, error -71 [ 315.780901][ T5917] m920x_read = error: -19 [ 315.791878][ T5917] dvb-usb: error while querying for an remote control event. [ 315.920844][ T5917] m920x_read = error: -19 [ 315.939339][ T5917] dvb-usb: error while querying for an remote control event. [ 315.960996][ T5875] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 315.995952][ T5875] usb 4-1: device descriptor read/8, error -71 [ 316.070787][ T5917] m920x_read = error: -19 [ 316.093929][ T5917] dvb-usb: error while querying for an remote control event. [ 316.123813][ T5875] usb usb4-port1: unable to enumerate USB device [ 316.220784][ T5917] m920x_read = error: -19 [ 316.227273][ T5917] dvb-usb: error while querying for an remote control event. [ 316.370826][ T5917] m920x_read = error: -19 [ 316.380336][ T5917] dvb-usb: error while querying for an remote control event. [ 316.512158][ T5917] m920x_read = error: -19 [ 316.521734][ T5917] dvb-usb: error while querying for an remote control event. [ 316.640974][ T5917] m920x_read = error: -19 [ 316.645633][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.660708][ T5917] dvb-usb: error while querying for an remote control event. [ 316.796064][ T185] usb 2-1: USB disconnect, device number 26 [ 316.801393][ T5917] m920x_read = error: -19 [ 316.829606][ T5917] dvb-usb: error while querying for an remote control event. [ 316.965735][ T5917] m920x_read = error: -19 [ 316.978427][ T5917] dvb-usb: error while querying for an remote control event. [ 317.160786][ T5917] m920x_read = error: -19 [ 317.165142][ T5917] dvb-usb: error while querying for an remote control event. [ 317.171800][ T9196] syzkaller0: entered promiscuous mode [ 317.194400][ T9196] syzkaller0: entered allmulticast mode [ 317.301199][ T5917] m920x_read = error: -19 [ 317.309493][ T5917] dvb-usb: error while querying for an remote control event. [ 317.901012][ T5917] m920x_read = error: -19 [ 317.905367][ T5917] dvb-usb: error while querying for an remote control event. [ 318.124511][ T5917] m920x_read = error: -19 [ 318.139719][ T5917] dvb-usb: error while querying for an remote control event. [ 318.208520][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 318.241579][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 318.280762][ T5917] m920x_read = error: -19 [ 318.294813][ T5917] dvb-usb: error while querying for an remote control event. [ 318.317731][ T9217] netlink: 'syz.3.871': attribute type 6 has an invalid length. [ 318.385183][ T9217] netlink: 'syz.3.871': attribute type 13 has an invalid length. [ 318.493425][ T5917] m920x_read = error: -19 [ 318.539523][ T5917] dvb-usb: error while querying for an remote control event. [ 318.643602][ T9221] netlink: 76 bytes leftover after parsing attributes in process `syz.3.871'. [ 318.762552][ T5917] m920x_read = error: -19 [ 318.766905][ T5917] dvb-usb: error while querying for an remote control event. [ 318.786488][ T9221] netlink: 76 bytes leftover after parsing attributes in process `syz.3.871'. [ 319.177030][ T90] m920x_read = error: -19 [ 319.230796][ T90] dvb-usb: error while querying for an remote control event. [ 319.382409][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.871'. [ 319.540909][ T90] m920x_read = error: -19 [ 319.546641][ T90] dvb-usb: error while querying for an remote control event. [ 319.590037][ T9217] bridge0: entered allmulticast mode [ 319.671192][ T90] m920x_read = error: -19 [ 319.678910][ T90] dvb-usb: error while querying for an remote control event. [ 319.793541][ T90] m920x_read = error: -19 [ 319.797900][ T90] dvb-usb: error while querying for an remote control event. [ 319.836065][ T5875] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 319.944030][ T90] m920x_read = error: -19 [ 319.956168][ T90] dvb-usb: error while querying for an remote control event. [ 320.007236][ T5875] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 320.024451][ T5875] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 320.060715][ T5875] usb 2-1: config 220 has no interface number 2 [ 320.085751][ T5875] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 320.110242][ T5875] usb 2-1: config 220 interface 0 has no altsetting 0 [ 320.118647][ T90] m920x_read = error: -19 [ 320.123036][ T90] dvb-usb: error while querying for an remote control event. [ 320.143220][ T5875] usb 2-1: config 220 interface 76 has no altsetting 0 [ 320.173062][ T5875] usb 2-1: config 220 interface 1 has no altsetting 0 [ 320.218851][ T5875] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 320.235745][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.260616][ T5875] usb 2-1: Product: syz [ 320.260776][ T90] m920x_read = error: -19 [ 320.282372][ T5875] usb 2-1: Manufacturer: syz [ 320.289505][ T90] dvb-usb: error while querying for an remote control event. [ 320.325942][ T5875] usb 2-1: SerialNumber: syz [ 320.420768][ T90] m920x_read = error: -19 [ 320.428384][ T90] dvb-usb: error while querying for an remote control event. [ 320.561562][ T5875] usb 2-1: selecting invalid altsetting 0 [ 320.567622][ T5875] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 320.578475][ T5875] uvcvideo 2-1:220.0: No valid video chain found. [ 320.587417][ T90] m920x_read = error: -19 [ 320.614114][ T90] dvb-usb: error while querying for an remote control event. [ 320.617280][ T5875] usb 2-1: selecting invalid altsetting 0 [ 320.673042][ T5875] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 320.760202][ T5875] usb 2-1: USB disconnect, device number 27 [ 320.808028][ T5889] m920x_read = error: -19 [ 320.820763][ T5889] dvb-usb: error while querying for an remote control event. [ 321.075018][ T24] m920x_read = error: -19 [ 321.081786][ T24] dvb-usb: error while querying for an remote control event. [ 321.231085][ T24] m920x_read = error: -19 [ 321.243977][ T24] dvb-usb: error while querying for an remote control event. [ 321.252070][ T30] audit: type=1400 audit(1765471981.807:900): avc: denied { read } for pid=9253 comm="syz.4.884" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 321.604503][ T24] m920x_read = error: -19 [ 321.622540][ T30] audit: type=1400 audit(1765471981.807:901): avc: denied { open } for pid=9253 comm="syz.4.884" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 321.890893][ T24] dvb-usb: error while querying for an remote control event. [ 322.091864][ T5889] m920x_read = error: -19 [ 322.556660][ T5889] dvb-usb: error while querying for an remote control event. [ 322.737166][ T24] m920x_read = error: -19 [ 322.753625][ T24] dvb-usb: error while querying for an remote control event. [ 322.820748][ T5889] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 322.880812][ T90] m920x_read = error: -19 [ 322.885193][ T90] dvb-usb: error while querying for an remote control event. [ 322.970740][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 322.973557][ T9274] dlm: plock device version mismatch: kernel (1.2.0), user (1.3.0) [ 322.990793][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 323.007264][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.039051][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.049335][ T90] m920x_read = error: -19 [ 323.055382][ T90] dvb-usb: error while querying for an remote control event. [ 323.118314][ T9278] netlink: 'syz.3.889': attribute type 8 has an invalid length. [ 323.138013][ T5889] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 323.154905][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.174051][ T5889] usb 1-1: config 0 descriptor?? [ 323.200182][ T5889] hub 1-1:0.0: USB hub found [ 323.204852][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 323.212998][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.236150][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.250872][ T5917] m920x_read = error: -19 [ 323.255210][ T5917] dvb-usb: error while querying for an remote control event. [ 323.277462][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 323.312313][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.352746][ T24] usb 5-1: config 0 descriptor?? [ 323.370813][ T5917] m920x_read = error: -19 [ 323.375327][ T5917] dvb-usb: error while querying for an remote control event. [ 323.391208][ T24] hub 5-1:0.0: USB hub found [ 323.404204][ T5889] hub 1-1:0.0: 15 ports detected [ 323.411697][ T5889] hub 1-1:0.0: insufficient power available to use all downstream ports [ 323.510883][ T5917] m920x_read = error: -19 [ 323.517683][ T5917] dvb-usb: error while querying for an remote control event. [ 323.588918][ T24] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 323.607491][ T5889] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 323.632583][ T5889] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 323.641065][ T5917] m920x_read = error: -19 [ 323.649988][ T5917] dvb-usb: error while querying for an remote control event. [ 323.702357][ T5889] usbhid 1-1:0.0: can't add hid device: -71 [ 323.725022][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 323.800815][ T5917] m920x_read = error: -19 [ 323.805953][ T5889] usb 1-1: USB disconnect, device number 27 [ 323.811996][ T5917] dvb-usb: error while querying for an remote control event. [ 324.194722][ T5868] m920x_read = error: -19 [ 324.199091][ T5868] dvb-usb: error while querying for an remote control event. [ 324.220242][ T24] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 324.340759][ T24] m920x_read = error: -19 [ 324.345100][ T24] dvb-usb: error while querying for an remote control event. [ 324.520835][ T24] m920x_read = error: -19 [ 324.540749][ T24] dvb-usb: error while querying for an remote control event. [ 324.833789][ T5889] m920x_read = error: -19 [ 324.838156][ T5889] dvb-usb: error while querying for an remote control event. [ 324.850945][ T5811] usb 5-1: USB disconnect, device number 20 [ 325.293940][ T5889] m920x_read = error: -19 [ 325.313276][ T5889] dvb-usb: error while querying for an remote control event. [ 325.450843][ T5889] m920x_read = error: -19 [ 325.455491][ T5889] dvb-usb: error while querying for an remote control event. [ 325.581487][ T24] m920x_read = error: -19 [ 325.589346][ T24] dvb-usb: error while querying for an remote control event. [ 325.680787][ T5889] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 325.804404][ T24] m920x_read = error: -19 [ 325.816425][ T24] dvb-usb: error while querying for an remote control event. [ 325.882271][ T5889] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 325.894836][ T5889] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 325.928989][ T5889] usb 4-1: config 220 has no interface number 2 [ 325.981733][ T24] m920x_read = error: -19 [ 325.992596][ T24] dvb-usb: error while querying for an remote control event. [ 326.001805][ T5889] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 326.048490][ T5889] usb 4-1: config 220 interface 0 has no altsetting 0 [ 326.056970][ T5889] usb 4-1: config 220 interface 76 has no altsetting 0 [ 326.063972][ T5889] usb 4-1: config 220 interface 1 has no altsetting 0 [ 326.079666][ T5889] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 326.108376][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.135404][ T5889] usb 4-1: Product: syz [ 326.147956][ T5889] usb 4-1: Manufacturer: syz [ 326.153709][ T24] m920x_read = error: -19 [ 326.158790][ T24] dvb-usb: error while querying for an remote control event. [ 326.185401][ T5889] usb 4-1: SerialNumber: syz [ 326.280870][ T24] m920x_read = error: -19 [ 326.285282][ T24] dvb-usb: error while querying for an remote control event. [ 326.468343][ T5868] m920x_read = error: -19 [ 326.496075][ T5868] dvb-usb: error while querying for an remote control event. [ 326.507957][ T5889] usb 4-1: selecting invalid altsetting 0 [ 326.565728][ T5889] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 326.573208][ T5889] uvcvideo 4-1:220.0: No valid video chain found. [ 326.675224][ T5889] usb 4-1: selecting invalid altsetting 0 [ 326.681076][ T5868] m920x_read = error: -19 [ 326.685408][ T5868] dvb-usb: error while querying for an remote control event. [ 326.700713][ T5889] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 327.180031][ T5889] usb 4-1: USB disconnect, device number 28 [ 327.192413][ T5868] m920x_read = error: -19 [ 327.196770][ T5868] dvb-usb: error while querying for an remote control event. [ 327.320939][ T5868] m920x_read = error: -19 [ 327.330461][ T5868] dvb-usb: error while querying for an remote control event. [ 327.450956][ T5889] m920x_read = error: -19 [ 327.451841][ T30] audit: type=1400 audit(1765471988.007:902): avc: denied { ioctl } for pid=9323 comm="syz.4.903" path="socket:[23497]" dev="sockfs" ino=23497 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 327.483976][ T9325] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 327.528159][ T5889] dvb-usb: error while querying for an remote control event. [ 327.543061][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 327.664384][ T30] audit: type=1400 audit(1765471988.217:903): avc: denied { getopt } for pid=9327 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 327.680838][ T5889] m920x_read = error: -19 [ 327.690038][ T5889] dvb-usb: error while querying for an remote control event. [ 328.067066][ T9338] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 328.087877][ T9338] binder: 9329:9338 ioctl c0306201 200000000040 returned -14 [ 328.105897][ T30] audit: type=1400 audit(1765471988.617:904): avc: denied { ioctl } for pid=9329 comm="syz.3.905" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 328.875839][ T5889] m920x_read = error: -19 [ 328.880207][ T5889] dvb-usb: error while querying for an remote control event. [ 329.048997][ T24] m920x_read = error: -19 [ 329.126627][ T24] dvb-usb: error while querying for an remote control event. [ 329.208054][ T9345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.263539][ T9345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.273846][ T24] m920x_read = error: -19 [ 329.357177][ T24] dvb-usb: error while querying for an remote control event. [ 329.502086][ T5889] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 330.272468][ T24] m920x_read = error: -19 [ 330.337937][ T24] dvb-usb: error while querying for an remote control event. [ 330.565700][ T24] m920x_read = error: -19 [ 330.570372][ T24] dvb-usb: error while querying for an remote control event. [ 330.578295][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 330.593367][ T5889] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.611536][ T5889] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.625986][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 330.638467][ T5889] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 330.647645][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.701322][ T24] m920x_read = error: -19 [ 330.707587][ T24] dvb-usb: error while querying for an remote control event. [ 330.909165][ T5889] usb 4-1: config 0 descriptor?? [ 331.000874][ T24] m920x_read = error: -19 [ 331.005305][ T24] dvb-usb: error while querying for an remote control event. [ 331.182573][ T24] m920x_read = error: -19 [ 331.208354][ T5889] usbhid 4-1:0.0: can't add hid device: -71 [ 331.219959][ T24] dvb-usb: error while querying for an remote control event. [ 331.229786][ T5889] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 331.249499][ T5889] usb 4-1: USB disconnect, device number 29 [ 331.754955][ T90] m920x_read = error: -19 [ 331.760549][ T90] dvb-usb: error while querying for an remote control event. [ 331.805842][ T30] audit: type=1400 audit(1765471992.357:905): avc: denied { mounton } for pid=9371 comm="syz.2.914" path="/" dev="hugetlbfs" ino=24591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 331.971762][ T90] m920x_read = error: -19 [ 331.976125][ T90] dvb-usb: error while querying for an remote control event. [ 332.147031][ T90] m920x_read = error: -19 [ 332.153832][ T90] dvb-usb: error while querying for an remote control event. [ 332.228101][ T9383] tmpfs: Bad value for 'mpol' [ 332.255173][ T9383] netlink: 164 bytes leftover after parsing attributes in process `syz.3.918'. [ 332.266409][ T9383] unsupported nla_type 13342 [ 332.306144][ T90] m920x_read = error: -19 [ 332.310565][ T90] dvb-usb: error while querying for an remote control event. [ 332.340919][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 332.441282][ T90] m920x_read = error: -19 [ 332.448400][ T90] dvb-usb: error while querying for an remote control event. [ 332.492418][ T24] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 332.506212][ T24] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 332.525637][ T24] usb 5-1: config 220 has no interface number 2 [ 332.537611][ T24] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 332.559682][ T24] usb 5-1: config 220 interface 0 has no altsetting 0 [ 332.600703][ T5889] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 332.621486][ T90] m920x_read = error: -19 [ 332.625840][ T24] usb 5-1: config 220 interface 76 has no altsetting 0 [ 332.634547][ T90] dvb-usb: error while querying for an remote control event. [ 332.656811][ T24] usb 5-1: config 220 interface 1 has no altsetting 0 [ 332.665736][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 332.675092][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.792564][ T90] m920x_read = error: -19 [ 332.868222][ T90] dvb-usb: error while querying for an remote control event. [ 332.910424][ T24] usb 5-1: Product: syz [ 332.920724][ T24] usb 5-1: Manufacturer: syz [ 332.927769][ T24] usb 5-1: SerialNumber: syz [ 332.984277][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 332.992336][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.006377][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 333.022146][ T90] m920x_read = error: -19 [ 333.026553][ T90] dvb-usb: error while querying for an remote control event. [ 333.039103][ T5889] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 333.070072][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.080821][ T5889] usb 4-1: config 0 descriptor?? [ 333.090315][ T5889] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 333.151482][ T5889] m920x_read = error: -19 [ 333.160366][ T5889] dvb-usb: error while querying for an remote control event. [ 333.184168][ T24] usb 5-1: selecting invalid altsetting 0 [ 333.201147][ T24] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 333.211702][ T24] uvcvideo 5-1:220.0: No valid video chain found. [ 333.237086][ T24] usb 5-1: selecting invalid altsetting 0 [ 333.262737][ T24] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 333.300746][ T5889] m920x_read = error: -19 [ 333.305072][ T5889] dvb-usb: error while querying for an remote control event. [ 333.332216][ T24] usb 5-1: USB disconnect, device number 21 [ 333.511097][ T5889] m920x_read = error: -19 [ 333.515785][ T5889] dvb-usb: error while querying for an remote control event. [ 333.641123][ T24] m920x_read = error: -19 [ 333.645584][ T24] dvb-usb: error while querying for an remote control event. [ 333.681385][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.694631][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.003160][ T5889] m920x_read = error: -19 [ 334.024836][ T5889] dvb-usb: error while querying for an remote control event. [ 334.150992][ T5889] m920x_read = error: -19 [ 334.156808][ T5889] dvb-usb: error while querying for an remote control event. [ 334.271055][ T5889] m920x_read = error: -19 [ 334.275486][ T5889] dvb-usb: error while querying for an remote control event. [ 334.400009][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.408719][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.418409][ T9414] netlink: 'syz.3.921': attribute type 21 has an invalid length. [ 334.841481][ T5889] m920x_read = error: -19 [ 334.845827][ T5889] dvb-usb: error while querying for an remote control event. [ 334.971082][ T5889] m920x_read = error: -19 [ 334.977826][ T30] audit: type=1400 audit(1765471995.527:906): avc: denied { read } for pid=9426 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 334.998326][ T5889] dvb-usb: error while querying for an remote control event. [ 335.193362][ T24] m920x_read = error: -19 [ 335.197722][ T24] dvb-usb: error while querying for an remote control event. [ 335.526736][ T24] m920x_read = error: -19 [ 335.542264][ T24] dvb-usb: error while querying for an remote control event. [ 335.677525][ T24] m920x_read = error: -19 [ 335.687621][ T24] dvb-usb: error while querying for an remote control event. [ 336.156186][ T24] m920x_read = error: -19 [ 336.177110][ T24] dvb-usb: error while querying for an remote control event. [ 336.210816][ T185] usb 4-1: USB disconnect, device number 30 [ 336.340769][ T24] m920x_read = error: -19 [ 336.348314][ T24] dvb-usb: error while querying for an remote control event. [ 336.485332][ T6004] m920x_read = error: -19 [ 336.489701][ T6004] dvb-usb: error while querying for an remote control event. [ 336.697030][ T6004] m920x_read = error: -19 [ 336.705917][ T6004] dvb-usb: error while querying for an remote control event. [ 336.741291][ T185] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 337.254875][ T6004] m920x_read = error: -19 [ 337.259328][ T6004] dvb-usb: error while querying for an remote control event. [ 337.276824][ T185] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 337.289324][ T185] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 337.301009][ T185] usb 4-1: config 220 has no interface number 2 [ 337.311088][ T185] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 337.329426][ T185] usb 4-1: config 220 interface 0 has no altsetting 0 [ 337.337244][ T185] usb 4-1: config 220 interface 76 has no altsetting 0 [ 337.347321][ T185] usb 4-1: config 220 interface 1 has no altsetting 0 [ 337.401298][ T6004] m920x_read = error: -19 [ 337.401965][ T185] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 337.420103][ T6004] dvb-usb: error while querying for an remote control event. [ 337.799881][ T185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.822714][ T185] usb 4-1: Product: syz [ 337.845749][ T185] usb 4-1: Manufacturer: syz [ 337.858648][ T185] usb 4-1: SerialNumber: syz [ 337.871414][ T6004] m920x_read = error: -19 [ 337.875966][ T6004] dvb-usb: error while querying for an remote control event. [ 337.913526][ T30] audit: type=1400 audit(1765471998.467:907): avc: denied { setopt } for pid=9473 comm="syz.4.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.001041][ T6004] m920x_read = error: -19 [ 338.006595][ T6004] dvb-usb: error while querying for an remote control event. [ 338.115693][ T185] usb 4-1: selecting invalid altsetting 0 [ 338.129980][ T185] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 338.137889][ T185] uvcvideo 4-1:220.0: No valid video chain found. [ 338.589625][ T6004] m920x_read = error: -19 [ 338.607627][ T185] usb 4-1: selecting invalid altsetting 0 [ 338.610729][ T6004] dvb-usb: error while querying for an remote control event. [ 338.659157][ T185] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 338.744206][ T6004] m920x_read = error: -19 [ 338.987456][ T185] usb 4-1: USB disconnect, device number 31 [ 339.013240][ T6004] dvb-usb: error while querying for an remote control event. [ 339.175041][ T6004] m920x_read = error: -19 [ 339.179405][ T6004] dvb-usb: error while querying for an remote control event. [ 339.353734][ T5889] m920x_read = error: -19 [ 339.358082][ T5889] dvb-usb: error while querying for an remote control event. [ 339.530826][ T6004] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 339.580786][ T5889] m920x_read = error: -19 [ 339.585934][ T5889] dvb-usb: error while querying for an remote control event. [ 339.704380][ T30] audit: type=1400 audit(1765472000.257:908): avc: denied { relabelfrom } for pid=9497 comm="syz.1.953" name="" dev="pipefs" ino=25823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 339.732998][ T90] m920x_read = error: -19 [ 339.737347][ T90] dvb-usb: error while querying for an remote control event. [ 339.746344][ T6004] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 339.768586][ T30] audit: type=1400 audit(1765472000.317:909): avc: denied { watch watch_reads } for pid=9499 comm="syz.3.954" path="/proc/743/map_files" dev="proc" ino=25826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 339.776329][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.824288][ T6004] usb 5-1: Product: syz [ 339.828469][ T6004] usb 5-1: Manufacturer: syz [ 339.847364][ T6004] usb 5-1: SerialNumber: syz [ 340.070802][ T5875] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 340.211896][ T5889] m920x_read = error: -19 [ 340.216352][ T5889] dvb-usb: error while querying for an remote control event. [ 340.224121][ T6004] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 340.277748][ T6004] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 340.326864][ T6004] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 340.339696][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 340.351390][ T5889] m920x_read = error: -19 [ 340.355873][ T5889] dvb-usb: error while querying for an remote control event. [ 340.384391][ T5875] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 340.551389][ T5889] m920x_read = error: -19 [ 340.555757][ T5889] dvb-usb: error while querying for an remote control event. [ 340.564450][ T6004] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 340.579858][ T5875] usb 2-1: config 0 has no interface number 0 [ 340.587450][ T6004] usb 5-1: USB disconnect, device number 22 [ 340.594878][ T5875] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 340.624372][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.655803][ T5875] usb 2-1: Product: syz [ 340.659970][ T5875] usb 2-1: Manufacturer: syz [ 340.688931][ T5875] usb 2-1: SerialNumber: syz [ 340.696861][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 340.715557][ T5875] usb 2-1: config 0 descriptor?? [ 340.719725][ T5889] m920x_read = error: -19 [ 340.748228][ T5875] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 340.773410][ T5875] uvcvideo 2-1:0.105: No valid video chain found. [ 340.779721][ T5889] dvb-usb: error while querying for an remote control event. [ 340.933564][ T6004] m920x_read = error: -19 [ 340.938033][ T6004] dvb-usb: error while querying for an remote control event. [ 341.020148][ T30] audit: type=1400 audit(1765472001.567:910): avc: denied { mount } for pid=9504 comm="syz.1.955" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 341.051206][ T5889] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 341.069796][ T90] m920x_read = error: -19 [ 341.074570][ T90] dvb-usb: error while querying for an remote control event. [ 341.236954][ T5889] usb 5-1: unable to get BOS descriptor or descriptor too short [ 341.261687][ T90] m920x_read = error: -19 [ 341.266346][ T5889] usb 5-1: not running at top speed; connect to a high speed hub [ 341.279244][ T90] dvb-usb: error while querying for an remote control event. [ 341.298281][ T5889] usb 5-1: config 2 has an invalid interface number: 96 but max is 0 [ 341.313808][ T5889] usb 5-1: config 2 has no interface number 0 [ 341.329131][ T5889] usb 5-1: config 2 interface 96 has no altsetting 0 [ 341.349859][ T5889] usb 5-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=59.b1 [ 341.372586][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.411064][ T90] m920x_read = error: -19 [ 341.415450][ T5889] usb 5-1: Product: syz [ 341.423351][ T90] dvb-usb: error while querying for an remote control event. [ 341.438596][ T5889] usb 5-1: Manufacturer: syz [ 341.449532][ T5889] usb 5-1: SerialNumber: syz [ 341.480785][ T5875] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 341.550796][ T90] m920x_read = error: -19 [ 341.564192][ T90] dvb-usb: error while querying for an remote control event. [ 341.654400][ T5875] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 341.666142][ T5875] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 341.689188][ T5875] usb 4-1: config 220 has no interface number 2 [ 341.705048][ T5875] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 341.720348][ T90] m920x_read = error: -19 [ 341.725906][ T5889] mos7840 5-1:2.96: required endpoints missing [ 341.748017][ T90] dvb-usb: error while querying for an remote control event. [ 341.759954][ T5875] usb 4-1: config 220 interface 0 has no altsetting 0 [ 341.777481][ T5875] usb 4-1: config 220 interface 76 has no altsetting 0 [ 341.798236][ T5889] usb 5-1: USB disconnect, device number 23 [ 341.818323][ T5875] usb 4-1: config 220 interface 1 has no altsetting 0 [ 341.839091][ T5875] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 341.859593][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.875822][ T30] audit: type=1400 audit(1765472002.427:911): avc: denied { connect } for pid=9548 comm="syz.2.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.901449][ T5875] usb 4-1: Product: syz [ 341.905590][ T5875] usb 4-1: Manufacturer: syz [ 341.910149][ T5875] usb 4-1: SerialNumber: syz [ 341.926457][ T6004] m920x_read = error: -19 [ 341.949606][ T6004] dvb-usb: error while querying for an remote control event. [ 342.091163][ T5889] m920x_read = error: -19 [ 342.100269][ T5889] dvb-usb: error while querying for an remote control event. [ 342.152201][ T5875] usb 4-1: selecting invalid altsetting 0 [ 342.164976][ T5875] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 342.179495][ T5875] uvcvideo 4-1:220.0: No valid video chain found. [ 342.195762][ T5875] usb 4-1: selecting invalid altsetting 0 [ 342.205402][ T5875] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 342.236026][ T5875] usb 4-1: USB disconnect, device number 32 [ 342.240779][ T90] m920x_read = error: -19 [ 342.247338][ T90] dvb-usb: error while querying for an remote control event. [ 342.392773][ T90] m920x_read = error: -19 [ 342.402439][ T90] dvb-usb: error while querying for an remote control event. [ 342.412565][ T9558] Driver unsupported XDP return value 0 on prog (id 203) dev N/A, expect packet loss! [ 342.540854][ T90] m920x_read = error: -19 [ 342.545217][ T90] dvb-usb: error while querying for an remote control event. [ 342.558788][ T9556] libceph: resolve '0' (ret=-3): failed [ 342.990641][ T9562] SELinux: policydb magic number 0x72756f73 does not match expected magic number 0xf97cff8c [ 343.001285][ T9562] SELinux: failed to load policy [ 343.146307][ T90] m920x_read = error: -19 [ 343.155250][ T90] dvb-usb: error while querying for an remote control event. [ 343.191741][ T90] usb 2-1: USB disconnect, device number 28 [ 343.199025][ T30] audit: type=1400 audit(1765472003.747:912): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 343.290977][ T5868] m920x_read = error: -19 [ 343.295484][ T5868] dvb-usb: error while querying for an remote control event. [ 343.296901][ T30] audit: type=1400 audit(1765472003.847:913): avc: denied { write } for pid=9567 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 343.306626][ T9569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9569 comm=syz.3.969 [ 343.530752][ T6004] m920x_read = error: -19 [ 343.541096][ T6004] dvb-usb: error while querying for an remote control event. [ 343.665600][ T6004] m920x_read = error: -19 [ 343.670443][ T6004] dvb-usb: error while querying for an remote control event. [ 343.688893][ T9575] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 343.811399][ T6004] m920x_read = error: -19 [ 343.836255][ T6004] dvb-usb: error while querying for an remote control event. [ 343.913874][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 344.173986][ T6004] m920x_read = error: -19 [ 344.185759][ T6004] dvb-usb: error while querying for an remote control event. [ 344.298269][ T9579] bond1: Invalid ad_actor_system MAC address. [ 344.315289][ T9579] bond1: option ad_actor_system: invalid value (1) [ 344.344147][ T9579] bond1 (unregistering): Released all slaves [ 344.351081][ T6004] m920x_read = error: -19 [ 344.364359][ T6004] dvb-usb: error while querying for an remote control event. [ 344.460731][ T5875] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 344.602668][ T6004] m920x_read = error: -19 [ 344.607030][ T6004] dvb-usb: error while querying for an remote control event. [ 344.642451][ T5875] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.655581][ T5875] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 344.682572][ T5875] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 344.706417][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.734302][ T9583] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 344.747936][ T5875] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.851329][ T6004] m920x_read = error: -19 [ 344.855985][ T6004] dvb-usb: error while querying for an remote control event. [ 345.050020][ T6004] m920x_read = error: -19 [ 345.366290][ T6004] dvb-usb: error while querying for an remote control event. [ 345.424987][ T9583] netlink: 21 bytes leftover after parsing attributes in process `syz.4.972'. [ 345.500798][ T6004] m920x_read = error: -19 [ 345.710895][ T6004] dvb-usb: error while querying for an remote control event. [ 345.823098][ T5875] usb 5-1: USB disconnect, device number 24 [ 345.829570][ T6004] m920x_read = error: -19 [ 345.837941][ T6004] dvb-usb: error while querying for an remote control event. [ 345.960816][ T6004] m920x_read = error: -19 [ 345.966804][ T6004] dvb-usb: error while querying for an remote control event. [ 346.100764][ T6004] m920x_read = error: -19 [ 346.116651][ T6004] dvb-usb: error while querying for an remote control event. [ 346.250827][ T6004] m920x_read = error: -19 [ 346.258763][ T6004] dvb-usb: error while querying for an remote control event. [ 346.393418][ T5889] m920x_read = error: -19 [ 346.397783][ T5889] dvb-usb: error while querying for an remote control event. [ 346.531267][ T5889] m920x_read = error: -19 [ 346.537224][ T5889] dvb-usb: error while querying for an remote control event. [ 346.661339][ T5889] m920x_read = error: -19 [ 346.665671][ T5889] dvb-usb: error while querying for an remote control event. [ 346.680737][ T6004] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 346.731129][ T5875] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 346.806583][ T90] m920x_read = error: -19 [ 346.814678][ T90] dvb-usb: error while querying for an remote control event. [ 346.880763][ T6004] usb 1-1: Using ep0 maxpacket: 8 [ 346.945145][ T9623] FAULT_INJECTION: forcing a failure. [ 346.945145][ T9623] name failslab, interval 1, probability 0, space 0, times 0 [ 346.957988][ T9623] CPU: 1 UID: 0 PID: 9623 Comm: syz.1.983 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.958015][ T9623] Tainted: [L]=SOFTLOCKUP [ 346.958020][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.958030][ T9623] Call Trace: [ 346.958036][ T9623] [ 346.958043][ T9623] dump_stack_lvl+0x16c/0x1f0 [ 346.958065][ T9623] should_fail_ex+0x512/0x640 [ 346.958090][ T9623] should_failslab+0xc2/0x120 [ 346.958112][ T9623] kmem_cache_alloc_noprof+0x83/0x770 [ 346.958130][ T9623] ? inet_bind2_bucket_create+0x36/0x5f0 [ 346.958161][ T9623] ? inet_bind2_bucket_create+0x36/0x5f0 [ 346.958183][ T9623] inet_bind2_bucket_create+0x36/0x5f0 [ 346.958209][ T9623] __inet_hash_connect+0x153b/0x1ee0 [ 346.958241][ T9623] ? __pfx___inet_check_established+0x10/0x10 [ 346.958269][ T9623] ? __pfx___inet_hash_connect+0x10/0x10 [ 346.958299][ T9623] ? inet_hash_connect+0x125/0x260 [ 346.958327][ T9623] tcp_v4_connect+0xe66/0x1c10 [ 346.958357][ T9623] ? __pfx_tcp_v4_connect+0x10/0x10 [ 346.958381][ T9623] ? tcp_v6_connect+0x368/0x21d0 [ 346.958405][ T9623] tcp_v6_connect+0x768/0x21d0 [ 346.958431][ T9623] ? __pfx_tcp_v6_connect+0x10/0x10 [ 346.958453][ T9623] ? lockdep_hardirqs_on+0x7c/0x110 [ 346.958470][ T9623] ? rcu_is_watching+0x12/0xc0 [ 346.958497][ T9623] ? __pfx_tcp_v6_connect+0x10/0x10 [ 346.958519][ T9623] ? __inet_stream_connect+0x915/0xf50 [ 346.958540][ T9623] __inet_stream_connect+0x915/0xf50 [ 346.958568][ T9623] ? __pfx___inet_stream_connect+0x10/0x10 [ 346.958590][ T9623] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 346.958615][ T9623] ? __pfx_inet_stream_connect+0x10/0x10 [ 346.958638][ T9623] ? __local_bh_enable_ip+0xa4/0x120 [ 346.958666][ T9623] ? __pfx_inet_stream_connect+0x10/0x10 [ 346.958686][ T9623] inet_stream_connect+0x57/0xa0 [ 346.958710][ T9623] __sys_connect_file+0x141/0x1a0 [ 346.958734][ T9623] __sys_connect+0x13b/0x160 [ 346.958759][ T9623] ? __pfx___sys_connect+0x10/0x10 [ 346.958796][ T9623] __x64_sys_connect+0x72/0xb0 [ 346.958814][ T9623] ? lockdep_hardirqs_on+0x7c/0x110 [ 346.958830][ T9623] do_syscall_64+0xcd/0xf80 [ 346.958849][ T9623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.958865][ T9623] RIP: 0033:0x7fc6fcd8f749 [ 346.958879][ T9623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.958894][ T9623] RSP: 002b:00007fc6fdca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 346.958911][ T9623] RAX: ffffffffffffffda RBX: 00007fc6fcfe6180 RCX: 00007fc6fcd8f749 [ 346.958922][ T9623] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000007 [ 346.958931][ T9623] RBP: 00007fc6fdca7090 R08: 0000000000000000 R09: 0000000000000000 [ 346.958940][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.958950][ T9623] R13: 00007fc6fcfe6218 R14: 00007fc6fcfe6180 R15: 00007ffe75524e18 [ 346.958975][ T9623] [ 347.112017][ T5875] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 347.119615][ T90] m920x_read = error: -19 [ 347.121646][ T5875] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 347.126566][ T90] dvb-usb: error while querying for an remote control event. [ 347.131480][ T5875] usb 4-1: config 220 has no interface number 2 [ 347.151491][ T6004] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.156379][ T5875] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 347.196583][ T6004] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 347.216915][ T5875] usb 4-1: config 220 interface 0 has no altsetting 0 [ 347.244009][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.268673][ T5875] usb 4-1: config 220 interface 76 has no altsetting 0 [ 347.276492][ T90] m920x_read = error: -19 [ 347.280333][ T5875] usb 4-1: config 220 interface 1 has no altsetting 0 [ 347.328700][ T90] dvb-usb: error while querying for an remote control event. [ 347.339969][ T5875] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 347.364007][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.372218][ T5875] usb 4-1: Product: syz [ 347.376423][ T5875] usb 4-1: Manufacturer: syz [ 347.383811][ T5875] usb 4-1: SerialNumber: syz [ 347.410348][ T6004] usb 1-1: Product: syz [ 347.419006][ T6004] usb 1-1: Manufacturer: syz [ 347.439675][ T6004] usb 1-1: SerialNumber: syz [ 347.453813][ T6004] usb 1-1: config 0 descriptor?? [ 347.510798][ T6004] m920x_read = error: -19 [ 347.515201][ T6004] dvb-usb: error while querying for an remote control event. [ 347.644561][ T6004] m920x_read = error: -19 [ 347.649189][ T6004] dvb-usb: error while querying for an remote control event. [ 347.652927][ T5875] usb 4-1: selecting invalid altsetting 0 [ 347.694204][ T5875] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 347.712153][ T5875] uvcvideo 4-1:220.0: No valid video chain found. [ 347.733333][ T5875] usb 4-1: selecting invalid altsetting 0 [ 347.741183][ T5875] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 347.760785][ T6004] m920x_read = error: -19 [ 347.765115][ T6004] dvb-usb: error while querying for an remote control event. [ 347.779054][ T5875] usb 4-1: USB disconnect, device number 33 [ 347.843250][ T9634] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 348.031272][ T6004] m920x_read = error: -19 [ 348.043988][ T6004] dvb-usb: error while querying for an remote control event. [ 348.191685][ T6004] m920x_read = error: -19 [ 348.196899][ T6004] dvb-usb: error while querying for an remote control event. [ 348.320805][ T6004] m920x_read = error: -19 [ 348.325246][ T6004] dvb-usb: error while querying for an remote control event. [ 348.450800][ T6004] m920x_read = error: -19 [ 348.455271][ T6004] dvb-usb: error while querying for an remote control event. [ 348.962789][ T6004] m920x_read = error: -19 [ 348.967149][ T6004] dvb-usb: error while querying for an remote control event. [ 349.091561][ T6004] m920x_read = error: -19 [ 349.097411][ T6004] dvb-usb: error while querying for an remote control event. [ 349.173516][ T9646] netlink: 'syz.4.991': attribute type 1 has an invalid length. [ 349.220808][ T6004] m920x_read = error: -19 [ 349.227617][ T6004] dvb-usb: error while querying for an remote control event. [ 349.350829][ T6004] m920x_read = error: -19 [ 349.356794][ T6004] dvb-usb: error while querying for an remote control event. [ 349.742522][ T6004] m920x_read = error: -19 [ 349.746888][ T6004] dvb-usb: error while querying for an remote control event. [ 349.823660][ T185] usb 1-1: USB disconnect, device number 28 [ 349.968778][ T6004] m920x_read = error: -19 [ 349.973221][ T6004] dvb-usb: error while querying for an remote control event. [ 350.101354][ T6004] m920x_read = error: -19 [ 350.446229][ T6004] dvb-usb: error while querying for an remote control event. [ 350.622109][ T6004] m920x_read = error: -19 [ 350.626779][ T6004] dvb-usb: error while querying for an remote control event. [ 351.340893][ T6004] m920x_read = error: -19 [ 351.345275][ T6004] dvb-usb: error while querying for an remote control event. [ 351.475185][ T6004] m920x_read = error: -19 [ 351.479835][ T6004] dvb-usb: error while querying for an remote control event. [ 351.491649][ T185] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 351.676841][ T6004] m920x_read = error: -19 [ 351.683115][ T6004] dvb-usb: error while querying for an remote control event. [ 351.735432][ T185] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 351.744633][ T185] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 351.986021][ T9682] FAULT_INJECTION: forcing a failure. [ 351.986021][ T9682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.999142][ T9682] CPU: 0 UID: 0 PID: 9682 Comm: syz.0.1003 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.999169][ T9682] Tainted: [L]=SOFTLOCKUP [ 351.999175][ T9682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.999185][ T9682] Call Trace: [ 351.999193][ T9682] [ 351.999201][ T9682] dump_stack_lvl+0x16c/0x1f0 [ 351.999222][ T9682] should_fail_ex+0x512/0x640 [ 351.999247][ T9682] _copy_to_user+0x32/0xd0 [ 351.999269][ T9682] syslog_print_all+0x1cb/0x400 [ 351.999294][ T9682] ? __pfx_syslog_print_all+0x10/0x10 [ 351.999334][ T9682] do_syslog+0x32c/0x6c0 [ 351.999357][ T9682] ? __pfx_do_syslog+0x10/0x10 [ 351.999390][ T9682] ? rcu_is_watching+0x12/0xc0 [ 351.999411][ T9682] __x64_sys_syslog+0x74/0xb0 [ 351.999433][ T9682] ? lockdep_hardirqs_on+0x7c/0x110 [ 351.999449][ T9682] do_syscall_64+0xcd/0xf80 [ 351.999474][ T9682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.999491][ T9682] RIP: 0033:0x7f8b2c38f749 [ 351.999505][ T9682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.999520][ T9682] RSP: 002b:00007f8b2a5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 351.999537][ T9682] RAX: ffffffffffffffda RBX: 00007f8b2c5e6180 RCX: 00007f8b2c38f749 [ 351.999548][ T9682] RDX: 00000000000000d2 RSI: 00002000000007c0 RDI: 0000000000000003 [ 351.999558][ T9682] RBP: 00007f8b2a5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 351.999567][ T9682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.999577][ T9682] R13: 00007f8b2c5e6218 R14: 00007f8b2c5e6180 R15: 00007ffc20fe84b8 [ 351.999601][ T9682] [ 352.166501][ T185] usb 4-1: config 220 has no interface number 2 [ 352.185541][ T185] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 352.190708][ T6004] m920x_read = error: -19 [ 352.205526][ T185] usb 4-1: config 220 interface 0 has no altsetting 0 [ 352.214473][ T185] usb 4-1: config 220 interface 76 has no altsetting 0 [ 352.224918][ T185] usb 4-1: config 220 interface 1 has no altsetting 0 [ 352.306292][ T185] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 352.317346][ T185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.320814][ T6004] dvb-usb: error while querying for an remote control event. [ 352.325557][ T185] usb 4-1: Product: syz [ 352.339916][ T185] usb 4-1: Manufacturer: syz [ 352.346200][ T185] usb 4-1: SerialNumber: syz [ 352.620944][ T90] m920x_read = error: -19 [ 352.625307][ T90] dvb-usb: error while querying for an remote control event. [ 352.697692][ T185] usb 4-1: selecting invalid altsetting 0 [ 352.734083][ T185] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 352.752635][ T185] uvcvideo 4-1:220.0: No valid video chain found. [ 352.775812][ T90] m920x_read = error: -19 [ 352.776975][ T185] usb 4-1: selecting invalid altsetting 0 [ 352.781020][ T90] dvb-usb: error while querying for an remote control event. [ 352.800611][ T185] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 352.838981][ T185] usb 4-1: USB disconnect, device number 34 [ 352.955439][ T90] m920x_read = error: -19 [ 352.960076][ T90] dvb-usb: error while querying for an remote control event. [ 353.100855][ T90] m920x_read = error: -19 [ 353.109806][ T90] dvb-usb: error while querying for an remote control event. [ 353.182764][ T30] audit: type=1400 audit(1765472013.737:914): avc: denied { listen } for pid=9696 comm="syz.4.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 353.269121][ T90] m920x_read = error: -19 [ 353.273932][ T90] dvb-usb: error while querying for an remote control event. [ 353.281480][ T5889] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 353.335881][ T9704] sp0: Synchronizing with TNC [ 353.517199][ T6004] m920x_read = error: -19 [ 353.558664][ T6004] dvb-usb: error while querying for an remote control event. [ 353.580910][ T90] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 353.636918][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 353.669921][ T5889] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 353.688901][ T5889] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 353.698399][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.706823][ T5889] usb 1-1: Product: syz [ 353.712443][ T5889] usb 1-1: Manufacturer: syz [ 353.717294][ T30] audit: type=1400 audit(1765472014.267:915): avc: denied { setopt } for pid=9705 comm="syz.3.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 353.717321][ T5889] usb 1-1: SerialNumber: syz [ 353.753206][ T5868] m920x_read = error: -19 [ 353.758313][ T5889] usb 1-1: config 0 descriptor?? [ 353.765469][ T5868] dvb-usb: error while querying for an remote control event. [ 353.814597][ T9708] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 353.822557][ T90] usb 2-1: Using ep0 maxpacket: 32 [ 353.832939][ T90] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 353.833217][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 353.841613][ T90] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 353.859002][ T90] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 353.868337][ T90] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 353.907047][ T5868] m920x_read = error: -19 [ 353.911629][ T5868] dvb-usb: error while querying for an remote control event. [ 353.919040][ T90] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 353.937764][ T90] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 353.948989][ T90] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 353.959272][ T90] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 353.972328][ T90] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 353.999801][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.023532][ T5868] m920x_read = error: -19 [ 354.028041][ T5868] dvb-usb: error while querying for an remote control event. [ 354.091774][ T90] usb 2-1: config 0 descriptor?? [ 354.102917][ T9701] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 354.124723][ T9715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1013'. [ 354.150848][ T5868] m920x_read = error: -19 [ 354.171338][ T5868] dvb-usb: error while querying for an remote control event. [ 354.187914][ T9717] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 2, id = 0 [ 354.376527][ T30] audit: type=1400 audit(1765472014.927:916): avc: denied { ioctl } for pid=9709 comm="syz.3.1012" path="socket:[26443]" dev="sockfs" ino=26443 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 354.402922][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.414970][ T90] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 354.420991][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.426985][ T5868] m920x_read = error: -19 [ 354.447329][ T5868] dvb-usb: error while querying for an remote control event. [ 354.581692][ T5868] m920x_read = error: -19 [ 354.586230][ T5868] dvb-usb: error while querying for an remote control event. [ 354.701696][ T5868] m920x_read = error: -19 [ 354.733477][ T5868] dvb-usb: error while querying for an remote control event. [ 354.819529][ T5889] usb 2-1: USB disconnect, device number 29 [ 354.838698][ T5889] usblp0: removed [ 354.930779][ T5868] m920x_read = error: -19 [ 354.980211][ T5868] dvb-usb: error while querying for an remote control event. [ 355.037800][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 355.110930][ T5889] m920x_read = error: -19 [ 355.115284][ T5889] dvb-usb: error while querying for an remote control event. [ 355.231003][ T5868] m920x_read = error: -19 [ 355.235697][ T5868] dvb-usb: error while querying for an remote control event. [ 355.290765][ T5889] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 355.350857][ T5868] m920x_read = error: -19 [ 355.355305][ T5868] dvb-usb: error while querying for an remote control event. [ 355.441986][ T5889] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 355.453203][ T5889] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 355.463470][ T5889] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 355.472883][ T5868] m920x_read = error: -19 [ 355.477359][ T5868] dvb-usb: error while querying for an remote control event. [ 355.488567][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.543773][ T9728] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 355.567833][ T5889] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.590958][ T5868] m920x_read = error: -19 [ 355.596203][ T5868] dvb-usb: error while querying for an remote control event. [ 355.720770][ T5868] m920x_read = error: -19 [ 355.731299][ T5868] dvb-usb: error while querying for an remote control event. [ 355.805888][ T9728] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1017'. [ 355.830863][ T185] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 355.860839][ T5868] m920x_read = error: -19 [ 355.870437][ T5868] dvb-usb: error while querying for an remote control event. [ 355.922999][ T5811] usb 5-1: USB disconnect, device number 25 [ 356.000759][ T185] usb 2-1: Using ep0 maxpacket: 16 [ 356.001007][ T5868] m920x_read = error: -19 [ 356.007898][ T185] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 356.010294][ T5868] dvb-usb: error while querying for an remote control event. [ 356.018774][ T185] usb 2-1: config 0 has no interface number 0 [ 356.033674][ T185] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 356.046386][ T185] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 356.055711][ T185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.102345][ T185] usb 2-1: Product: syz [ 356.106606][ T185] usb 2-1: Manufacturer: syz [ 356.115723][ T185] usb 2-1: SerialNumber: syz [ 356.123297][ T185] usb 2-1: config 0 descriptor?? [ 356.135338][ T5868] usb 1-1: USB disconnect, device number 29 [ 356.240768][ T5889] m920x_read = error: -19 [ 356.245164][ T5889] dvb-usb: error while querying for an remote control event. [ 356.319462][ T9752] overlayfs: overlapping lowerdir path [ 356.411307][ T5889] m920x_read = error: -19 [ 356.415803][ T5889] dvb-usb: error while querying for an remote control event. [ 356.591101][ T5889] m920x_read = error: -19 [ 356.595456][ T5889] dvb-usb: error while querying for an remote control event. [ 356.741265][ T5889] m920x_read = error: -19 [ 356.748641][ T5889] dvb-usb: error while querying for an remote control event. [ 356.875890][ T9763] Cannot find add_set index 0 as target [ 356.880969][ T90] m920x_read = error: -19 [ 356.885842][ T90] dvb-usb: error while querying for an remote control event. [ 356.967699][ T185] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input18 [ 357.012093][ T90] m920x_read = error: -19 [ 357.024682][ T90] dvb-usb: error while querying for an remote control event. [ 357.188499][ T90] m920x_read = error: -19 [ 357.378975][ T90] dvb-usb: error while querying for an remote control event. [ 357.389465][ T5889] usb 2-1: USB disconnect, device number 30 [ 357.520842][ T90] m920x_read = error: -19 [ 357.529674][ T90] dvb-usb: error while querying for an remote control event. [ 357.672231][ T5889] m920x_read = error: -19 [ 357.682475][ T5889] dvb-usb: error while querying for an remote control event. [ 358.167658][ T5889] m920x_read = error: -19 [ 358.190623][ T5889] dvb-usb: error while querying for an remote control event. [ 358.660904][ T5889] m920x_read = error: -19 [ 358.666822][ T5889] dvb-usb: error while querying for an remote control event. [ 358.775181][ T30] audit: type=1400 audit(1765472019.327:917): avc: denied { mount } for pid=9790 comm="syz.4.1040" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 358.791258][ T6004] m920x_read = error: -19 [ 358.800446][ T9791] ipt_REJECT: ECHOREPLY no longer supported. [ 358.809772][ T6004] dvb-usb: error while querying for an remote control event. [ 358.830927][ T5889] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 358.997640][ T6004] m920x_read = error: -19 [ 359.003566][ T6004] dvb-usb: error while querying for an remote control event. [ 359.456195][ T6004] m920x_read = error: -19 [ 359.464065][ T5889] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 359.477213][ T6004] dvb-usb: error while querying for an remote control event. [ 359.496793][ T5889] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 359.508319][ T5889] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 359.518647][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.529583][ T9785] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 359.535236][ T30] audit: type=1400 audit(1765472020.087:918): avc: denied { ioctl } for pid=9797 comm="syz.3.1043" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 359.539674][ T5889] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 359.601459][ T6004] m920x_read = error: -19 [ 359.605951][ T6004] dvb-usb: error while querying for an remote control event. [ 359.721110][ T5889] m920x_read = error: -19 [ 359.726465][ T5889] dvb-usb: error while querying for an remote control event. [ 360.325033][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.346503][ T9804] random: crng reseeded on system resumption [ 360.357257][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.369405][ T9785] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1038'. [ 360.379761][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.388988][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.421390][ T30] audit: type=1400 audit(1765472020.897:919): avc: denied { ioctl } for pid=9797 comm="syz.3.1043" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 360.431444][ T6004] m920x_read = error: -19 [ 360.529444][ T6004] dvb-usb: error while querying for an remote control event. [ 360.656189][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 360.692288][ T6004] m920x_read = error: -19 [ 360.693550][ T5811] usb 1-1: USB disconnect, device number 30 [ 360.696723][ T6004] dvb-usb: error while querying for an remote control event. [ 360.840618][ T9814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9814 comm=syz.1.1046 [ 360.891602][ T6004] m920x_read = error: -19 [ 360.903193][ T6004] dvb-usb: error while querying for an remote control event. [ 360.921074][ T9814] netlink: 'syz.1.1046': attribute type 5 has an invalid length. [ 360.987954][ T9821] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1046'. [ 360.997098][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 361.006508][ T9821] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1046'. [ 361.015535][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 361.024992][ T6004] m920x_read = error: -19 [ 361.029303][ T6004] dvb-usb: error while querying for an remote control event. [ 361.037794][ T9821] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1046'. [ 361.140870][ T6004] m920x_read = error: -19 [ 361.147642][ T6004] dvb-usb: error while querying for an remote control event. [ 361.226461][ T9829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=9829 comm=syz.1.1049 [ 361.260876][ T6004] m920x_read = error: -19 [ 361.340434][ T6004] dvb-usb: error while querying for an remote control event. [ 361.390138][ T9833] FAULT_INJECTION: forcing a failure. [ 361.390138][ T9833] name failslab, interval 1, probability 0, space 0, times 0 [ 361.430947][ T9833] CPU: 1 UID: 0 PID: 9833 Comm: syz.0.1051 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.430977][ T9833] Tainted: [L]=SOFTLOCKUP [ 361.430982][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.430991][ T9833] Call Trace: [ 361.430996][ T9833] [ 361.431002][ T9833] dump_stack_lvl+0x16c/0x1f0 [ 361.431022][ T9833] should_fail_ex+0x512/0x640 [ 361.431041][ T9833] ? kmem_cache_alloc_noprof+0x62/0x770 [ 361.431058][ T9833] should_failslab+0xc2/0x120 [ 361.431079][ T9833] kmem_cache_alloc_noprof+0x83/0x770 [ 361.431095][ T9833] ? security_file_alloc+0x34/0x2b0 [ 361.431119][ T9833] ? security_file_alloc+0x34/0x2b0 [ 361.431135][ T9833] security_file_alloc+0x34/0x2b0 [ 361.431155][ T9833] init_file+0x93/0x4c0 [ 361.431181][ T9833] alloc_empty_file+0x73/0x1e0 [ 361.431197][ T9833] path_openat+0xde/0x3140 [ 361.431218][ T9833] ? do_syscall_64+0xcd/0xf80 [ 361.431233][ T9833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.431257][ T9833] ? __pfx_path_openat+0x10/0x10 [ 361.431288][ T9833] do_filp_open+0x20b/0x470 [ 361.431311][ T9833] ? __pfx_do_filp_open+0x10/0x10 [ 361.431352][ T9833] ? alloc_fd+0x471/0x7d0 [ 361.431382][ T9833] do_sys_openat2+0x11f/0x280 [ 361.431398][ T9833] ? __pfx_do_sys_openat2+0x10/0x10 [ 361.431423][ T9833] ? __fget_files+0x20e/0x3c0 [ 361.431448][ T9833] __x64_sys_openat+0x174/0x210 [ 361.431465][ T9833] ? __pfx___x64_sys_openat+0x10/0x10 [ 361.431480][ T9833] ? ksys_write+0x1ac/0x250 [ 361.431508][ T9833] do_syscall_64+0xcd/0xf80 [ 361.431526][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.431542][ T9833] RIP: 0033:0x7f8b2c38f749 [ 361.431557][ T9833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.431572][ T9833] RSP: 002b:00007f8b2d148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 361.431589][ T9833] RAX: ffffffffffffffda RBX: 00007f8b2c5e5fa0 RCX: 00007f8b2c38f749 [ 361.431599][ T9833] RDX: 0000000000002000 RSI: 0000200000000940 RDI: ffffffffffffff9c [ 361.431610][ T9833] RBP: 00007f8b2d148090 R08: 0000000000000000 R09: 0000000000000000 [ 361.431620][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.431630][ T9833] R13: 00007f8b2c5e6038 R14: 00007f8b2c5e5fa0 R15: 00007ffc20fe84b8 [ 361.431653][ T9833] [ 361.670333][ T5868] m920x_read = error: -19 [ 361.680759][ T5868] dvb-usb: error while querying for an remote control event. [ 361.790972][ T24] m920x_read = error: -19 [ 361.795494][ T24] dvb-usb: error while querying for an remote control event. [ 361.915551][ T24] m920x_read = error: -19 [ 361.921432][ T24] dvb-usb: error while querying for an remote control event. [ 362.060804][ T24] m920x_read = error: -19 [ 362.098211][ T24] dvb-usb: error while querying for an remote control event. [ 362.222396][ T24] m920x_read = error: -19 [ 362.229283][ T24] dvb-usb: error while querying for an remote control event. [ 362.244620][ T30] audit: type=1400 audit(1765472022.797:920): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 362.363152][ T24] m920x_read = error: -19 [ 362.367534][ T24] dvb-usb: error while querying for an remote control event. [ 362.575251][ T24] m920x_read = error: -19 [ 362.586460][ T24] dvb-usb: error while querying for an remote control event. [ 362.711746][ T5868] m920x_read = error: -19 [ 362.716305][ T5868] dvb-usb: error while querying for an remote control event. [ 362.831015][ T5868] m920x_read = error: -19 [ 362.835366][ T5868] dvb-usb: error while querying for an remote control event. [ 363.081150][ T5868] m920x_read = error: -19 [ 363.085622][ T5868] dvb-usb: error while querying for an remote control event. [ 363.213343][ T5868] m920x_read = error: -19 [ 363.220547][ T5868] dvb-usb: error while querying for an remote control event. [ 363.228665][ T30] audit: type=1326 audit(1765472023.767:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9847 comm="syz.1.1057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6fcd8f749 code=0x0 [ 363.341275][ T5868] m920x_read = error: -19 [ 363.349219][ T5868] dvb-usb: error while querying for an remote control event. [ 363.472393][ T5868] m920x_read = error: -19 [ 363.478356][ T5868] dvb-usb: error while querying for an remote control event. [ 363.606778][ T5868] m920x_read = error: -19 [ 363.612500][ T5868] dvb-usb: error while querying for an remote control event. [ 363.753029][ T24] m920x_read = error: -19 [ 363.757581][ T24] dvb-usb: error while querying for an remote control event. [ 363.961424][ T24] m920x_read = error: -19 [ 363.977759][ T24] dvb-usb: error while querying for an remote control event. [ 364.195649][ T24] m920x_read = error: -19 [ 364.229689][ T24] dvb-usb: error while querying for an remote control event. [ 364.438463][ T24] m920x_read = error: -19 [ 364.447251][ T24] dvb-usb: error while querying for an remote control event. [ 364.591217][ T24] m920x_read = error: -19 [ 364.597981][ T24] dvb-usb: error while querying for an remote control event. [ 364.730787][ T24] m920x_read = error: -19 [ 364.735167][ T24] dvb-usb: error while querying for an remote control event. [ 364.827940][ T6504] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 364.887809][ T90] m920x_read = error: -19 [ 364.892987][ T90] dvb-usb: error while querying for an remote control event. [ 365.011032][ T90] m920x_read = error: -19 [ 365.015464][ T90] dvb-usb: error while querying for an remote control event. [ 365.261703][ T24] m920x_read = error: -19 [ 365.275244][ T24] dvb-usb: error while querying for an remote control event. [ 365.327819][ T90] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 365.372157][ T6504] usb 2-1: config 0 has no interfaces? [ 365.379715][ T6504] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 365.389554][ T6504] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 365.397833][ T6504] usb 2-1: Product: syz [ 365.402143][ T6504] usb 2-1: Manufacturer: syz [ 365.406756][ T6504] usb 2-1: SerialNumber: syz [ 365.413437][ T6504] usb 2-1: config 0 descriptor?? [ 365.481142][ T24] m920x_read = error: -19 [ 365.487596][ T24] dvb-usb: error while querying for an remote control event. [ 365.521209][ T90] usb 5-1: Using ep0 maxpacket: 16 [ 365.624111][ T90] usb 5-1: too many configurations: 116, using maximum allowed: 8 [ 365.641055][ T24] m920x_read = error: -19 [ 365.645723][ T24] dvb-usb: error while querying for an remote control event. [ 365.657428][ T90] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 365.666099][ T90] usb 5-1: can't read configurations, error -61 [ 365.825199][ T24] m920x_read = error: -19 [ 365.829987][ T24] dvb-usb: error while querying for an remote control event. [ 365.890804][ T90] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 366.061166][ T6504] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 366.269443][ T6504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.328503][ T5889] m920x_read = error: -19 [ 366.333029][ T5889] dvb-usb: error while querying for an remote control event. [ 366.355803][ T6504] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 366.376227][ T185] usb 2-1: USB disconnect, device number 31 [ 366.383348][ T6504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.394701][ T6504] usb 4-1: config 0 descriptor?? [ 366.440966][ T5889] m920x_read = error: -19 [ 366.445314][ T5889] dvb-usb: error while querying for an remote control event. [ 366.500724][ T90] usb 5-1: Using ep0 maxpacket: 16 [ 366.506345][ T90] usb 5-1: too many configurations: 116, using maximum allowed: 8 [ 366.515593][ T90] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 366.523209][ T90] usb 5-1: can't read configurations, error -61 [ 366.530852][ T90] usb usb5-port1: attempt power cycle [ 366.598664][ T24] m920x_read = error: -19 [ 366.603359][ T24] dvb-usb: error while querying for an remote control event. [ 366.731234][ T24] m920x_read = error: -19 [ 366.735708][ T24] dvb-usb: error while querying for an remote control event. [ 366.820249][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.831676][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.843427][ T6504] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 366.855329][ T6504] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0009/input/input19 [ 366.860731][ T24] m920x_read = error: -19 [ 366.872500][ T24] dvb-usb: error while querying for an remote control event. [ 366.890769][ T90] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 366.921544][ T90] usb 5-1: Using ep0 maxpacket: 16 [ 366.944819][ T90] usb 5-1: too many configurations: 116, using maximum allowed: 8 [ 366.965147][ T90] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 366.990746][ T24] m920x_read = error: -19 [ 366.995093][ T24] dvb-usb: error while querying for an remote control event. [ 367.002548][ T90] usb 5-1: can't read configurations, error -61 [ 367.020472][ T6504] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 367.048092][ C0] [ 367.050429][ C0] ======================================================== [ 367.057607][ C0] WARNING: possible irq lock inversion dependency detected [ 367.064794][ C0] syzkaller #0 Tainted: G L [ 367.070761][ C0] -------------------------------------------------------- [ 367.077934][ C0] kworker/0:10/6504 just changed the state of lock: [ 367.084502][ C0] ffff8880798b9230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x74/0xd0 [ 367.093474][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 367.101437][ C0] (tasklist_lock){.+.+}-{3:3} [ 367.101458][ C0] [ 367.101458][ C0] [ 367.101458][ C0] and interrupts could create inverse lock ordering between them. [ 367.101458][ C0] [ 367.120473][ C0] [ 367.120473][ C0] other info that might help us debug this: [ 367.128509][ C0] Chain exists of: [ 367.128509][ C0] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 367.128509][ C0] [ 367.142045][ C0] Possible interrupt unsafe locking scenario: [ 367.142045][ C0] [ 367.150343][ C0] CPU0 CPU1 [ 367.155686][ C0] ---- ---- [ 367.161031][ C0] lock(tasklist_lock); [ 367.165253][ C0] local_irq_disable(); [ 367.171984][ C0] lock(&dev->event_lock#2); [ 367.179165][ C0] lock(&client->buffer_lock); [ 367.186514][ C0] [ 367.189943][ C0] lock(&dev->event_lock#2); [ 367.194779][ C0] [ 367.194779][ C0] *** DEADLOCK *** [ 367.194779][ C0] [ 367.202898][ C0] 7 locks held by kworker/0:10/6504: [ 367.208156][ C0] #0: ffff888141a87d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 367.218927][ C0] #1: ffffc9000e4a7c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 367.230219][ C0] #2: ffff8880298d6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 367.239086][ C0] #3: ffff88801bf62198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4e0 [ 367.248291][ C0] #4: ffff888020692160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4e0 [ 367.257498][ C0] #5: ffff888056ecda20 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4e0 [ 367.266703][ C0] #6: ffff88801ded7128 (&k->list_lock){+.+.}-{3:3}, at: bus_to_subsys+0x3e/0x160 [ 367.275906][ C0] [ 367.275906][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 367.285272][ C0] -> (tasklist_lock){.+.+}-{3:3} { [ 367.290751][ C0] HARDIRQ-ON-R at: [ 367.295065][ C0] lock_acquire+0x179/0x330 [ 367.301896][ C0] _raw_read_lock+0x5f/0x70 [ 367.308731][ C0] __do_wait+0x105/0x890 [ 367.315319][ C0] do_wait+0x21d/0x570 [ 367.321712][ C0] kernel_wait+0x9f/0x160 [ 367.328365][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 367.336586][ C0] process_one_work+0x9ba/0x1b20 [ 367.343851][ C0] worker_thread+0x6c8/0xf10 [ 367.350767][ C0] kthread+0x3c5/0x780 [ 367.357161][ C0] ret_from_fork+0x983/0xb10 [ 367.364075][ C0] ret_from_fork_asm+0x1a/0x30 [ 367.371168][ C0] SOFTIRQ-ON-R at: [ 367.375474][ C0] lock_acquire+0x179/0x330 [ 367.382304][ C0] _raw_read_lock+0x5f/0x70 [ 367.389138][ C0] __do_wait+0x105/0x890 [ 367.395704][ C0] do_wait+0x21d/0x570 [ 367.402098][ C0] kernel_wait+0x9f/0x160 [ 367.408753][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 367.416973][ C0] process_one_work+0x9ba/0x1b20 [ 367.424237][ C0] worker_thread+0x6c8/0xf10 [ 367.431152][ C0] kthread+0x3c5/0x780 [ 367.437544][ C0] ret_from_fork+0x983/0xb10 [ 367.444455][ C0] ret_from_fork_asm+0x1a/0x30 [ 367.451565][ C0] INITIAL USE at: [ 367.455784][ C0] lock_acquire+0x179/0x330 [ 367.462522][ C0] _raw_write_lock_irq+0x36/0x50 [ 367.469701][ C0] copy_process+0x4668/0x7430 [ 367.476621][ C0] kernel_clone+0xfc/0x910 [ 367.483269][ C0] user_mode_thread+0xc8/0x110 [ 367.490269][ C0] rest_init+0x23/0x2b0 [ 367.496663][ C0] start_kernel+0x3ef/0x4d0 [ 367.503403][ C0] x86_64_start_reservations+0x18/0x30 [ 367.511096][ C0] x86_64_start_kernel+0x130/0x190 [ 367.518443][ C0] common_startup_64+0x13e/0x148 [ 367.525615][ C0] INITIAL READ USE at: [ 367.530265][ C0] lock_acquire+0x179/0x330 [ 367.537439][ C0] _raw_read_lock+0x5f/0x70 [ 367.544616][ C0] __do_wait+0x105/0x890 [ 367.551527][ C0] do_wait+0x21d/0x570 [ 367.558265][ C0] kernel_wait+0x9f/0x160 [ 367.565266][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 367.573853][ C0] process_one_work+0x9ba/0x1b20 [ 367.581461][ C0] worker_thread+0x6c8/0xf10 [ 367.588723][ C0] kthread+0x3c5/0x780 [ 367.595461][ C0] ret_from_fork+0x983/0xb10 [ 367.602722][ C0] ret_from_fork_asm+0x1a/0x30 [ 367.610162][ C0] } [ 367.612983][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 367.621029][ C0] ... acquired at: [ 367.625154][ C0] _raw_read_lock+0x5f/0x70 [ 367.629813][ C0] send_sigurg+0xed/0xc80 [ 367.634293][ C0] sk_send_sigurg+0x76/0x360 [ 367.639039][ C0] unix_stream_sendmsg+0xfa3/0x1320 [ 367.644391][ C0] ____sys_sendmsg+0xa5d/0xc30 [ 367.649307][ C0] ___sys_sendmsg+0x134/0x1d0 [ 367.654140][ C0] __sys_sendmmsg+0x200/0x420 [ 367.658970][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 367.664060][ C0] do_syscall_64+0xcd/0xf80 [ 367.668712][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.674754][ C0] [ 367.677053][ C0] -> (&f_owner->lock){....}-{3:3} { [ 367.682500][ C0] INITIAL USE at: [ 367.686629][ C0] lock_acquire+0x179/0x330 [ 367.693194][ C0] _raw_write_lock_irq+0x36/0x50 [ 367.700203][ C0] __f_setown+0x61/0x3c0 [ 367.706515][ C0] f_setown+0x122/0x290 [ 367.712731][ C0] sock_ioctl+0x467/0x6b0 [ 367.719119][ C0] __x64_sys_ioctl+0x18e/0x210 [ 367.725944][ C0] do_syscall_64+0xcd/0xf80 [ 367.732509][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.740470][ C0] INITIAL READ USE at: [ 367.745045][ C0] lock_acquire+0x179/0x330 [ 367.752057][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 367.759765][ C0] send_sigurg+0x5f/0xc80 [ 367.766597][ C0] sk_send_sigurg+0x76/0x360 [ 367.773691][ C0] unix_stream_sendmsg+0xfa3/0x1320 [ 367.781395][ C0] ____sys_sendmsg+0xa5d/0xc30 [ 367.788665][ C0] ___sys_sendmsg+0x134/0x1d0 [ 367.795854][ C0] __sys_sendmmsg+0x200/0x420 [ 367.803040][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 367.810489][ C0] do_syscall_64+0xcd/0xf80 [ 367.817501][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.825892][ C0] } [ 367.828627][ C0] ... key at: [] __key.1+0x0/0x40 [ 367.835973][ C0] ... acquired at: [ 367.840020][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 367.845379][ C0] send_sigio+0x31/0x3e0 [ 367.849776][ C0] kill_fasync+0x214/0x510 [ 367.854345][ C0] sock_wake_async+0x132/0x160 [ 367.859272][ C0] sock_def_readable+0x4f7/0x5d0 [ 367.864372][ C0] unix_stream_sendmsg+0xfdb/0x1320 [ 367.869728][ C0] ____sys_sendmsg+0xa5d/0xc30 [ 367.874643][ C0] ___sys_sendmsg+0x134/0x1d0 [ 367.879476][ C0] __sys_sendmmsg+0x200/0x420 [ 367.884306][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 367.889402][ C0] do_syscall_64+0xcd/0xf80 [ 367.894053][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.900095][ C0] [ 367.902393][ C0] -> (&new->fa_lock){....}-{3:3} { [ 367.907670][ C0] INITIAL USE at: [ 367.911713][ C0] lock_acquire+0x179/0x330 [ 367.918108][ C0] _raw_write_lock_irq+0x36/0x50 [ 367.924940][ C0] fasync_remove_entry+0xb2/0x1e0 [ 367.931850][ C0] fasync_helper+0xaf/0xd0 [ 367.938155][ C0] lease_modify+0x232/0x500 [ 367.944548][ C0] generic_setlease+0x3a0/0x1330 [ 367.951379][ C0] kernel_setlease+0x106/0x140 [ 367.958034][ C0] vfs_setlease+0x1e8/0x280 [ 367.964428][ C0] fcntl_setlease+0x151/0x180 [ 367.970999][ C0] do_fcntl+0x153b/0x1660 [ 367.977212][ C0] __x64_sys_fcntl+0x163/0x200 [ 367.983859][ C0] do_syscall_64+0xcd/0xf80 [ 367.990248][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.998027][ C0] INITIAL READ USE at: [ 368.002504][ C0] lock_acquire+0x179/0x330 [ 368.009330][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 368.016858][ C0] kill_fasync+0x138/0x510 [ 368.023595][ C0] sock_wake_async+0xf1/0x160 [ 368.030600][ C0] sk_send_sigurg+0x179/0x360 [ 368.037602][ C0] unix_stream_sendmsg+0xfa3/0x1320 [ 368.045138][ C0] ____sys_sendmsg+0xa5d/0xc30 [ 368.052225][ C0] ___sys_sendmsg+0x134/0x1d0 [ 368.059228][ C0] __sys_sendmmsg+0x200/0x420 [ 368.066228][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 368.073491][ C0] do_syscall_64+0xcd/0xf80 [ 368.080317][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.088536][ C0] } [ 368.091186][ C0] ... key at: [] __key.0+0x0/0x40 [ 368.098448][ C0] ... acquired at: [ 368.102398][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 368.107763][ C0] kill_fasync+0x138/0x510 [ 368.112333][ C0] evdev_pass_values+0x619/0x9b0 [ 368.117432][ C0] evdev_events+0x1bb/0x390 [ 368.122090][ C0] input_pass_values+0x74e/0x880 [ 368.127182][ C0] input_handle_event+0xf00/0x14d0 [ 368.132448][ C0] input_inject_event+0x1e8/0x3b0 [ 368.137627][ C0] evdev_write+0x457/0x750 [ 368.142199][ C0] vfs_write+0x2a0/0x11d0 [ 368.146682][ C0] ksys_write+0x1f8/0x250 [ 368.151164][ C0] do_syscall_64+0xcd/0xf80 [ 368.155816][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.161860][ C0] [ 368.164159][ C0] -> (&client->buffer_lock){....}-{3:3} { [ 368.169954][ C0] INITIAL USE at: [ 368.173910][ C0] lock_acquire+0x179/0x330 [ 368.180129][ C0] _raw_spin_lock+0x2e/0x40 [ 368.186364][ C0] evdev_pass_values+0x10e/0x9b0 [ 368.193045][ C0] evdev_events+0x1bb/0x390 [ 368.199285][ C0] input_pass_values+0x74e/0x880 [ 368.205954][ C0] input_handle_event+0xf00/0x14d0 [ 368.212785][ C0] input_inject_event+0x1e8/0x3b0 [ 368.219530][ C0] evdev_write+0x457/0x750 [ 368.225668][ C0] vfs_write+0x2a0/0x11d0 [ 368.231715][ C0] ksys_write+0x1f8/0x250 [ 368.237758][ C0] do_syscall_64+0xcd/0xf80 [ 368.243976][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.251584][ C0] } [ 368.254147][ C0] ... key at: [] __key.88+0x0/0x40 [ 368.261407][ C0] ... acquired at: [ 368.265269][ C0] _raw_spin_lock+0x2e/0x40 [ 368.269935][ C0] evdev_pass_values+0x10e/0x9b0 [ 368.275027][ C0] evdev_events+0x1bb/0x390 [ 368.279685][ C0] input_pass_values+0x74e/0x880 [ 368.284780][ C0] input_handle_event+0xf00/0x14d0 [ 368.290047][ C0] input_inject_event+0x1e8/0x3b0 [ 368.295227][ C0] evdev_write+0x457/0x750 [ 368.299799][ C0] vfs_write+0x2a0/0x11d0 [ 368.304288][ C0] ksys_write+0x1f8/0x250 [ 368.308768][ C0] do_syscall_64+0xcd/0xf80 [ 368.313430][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.319497][ C0] [ 368.321803][ C0] -> (&dev->event_lock#2){..-.}-{3:3} { [ 368.327352][ C0] IN-SOFTIRQ-W at: [ 368.331317][ C0] lock_acquire+0x179/0x330 [ 368.337451][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 368.344284][ C0] input_event+0x74/0xd0 [ 368.350166][ C0] hidinput_hid_event+0x1d3b/0x2470 [ 368.357003][ C0] hid_process_event+0x4b7/0x5e0 [ 368.363569][ C0] hid_report_raw_event+0xa33/0x12c0 [ 368.370485][ C0] __hid_input_report.constprop.0+0x33f/0x470 [ 368.378192][ C0] hid_irq_in+0x35e/0x870 [ 368.384173][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 368.391181][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 368.398018][ C0] dummy_timer+0x1809/0x3ad0 [ 368.404247][ C0] __hrtimer_run_queues+0x202/0xc40 [ 368.411102][ C0] hrtimer_run_softirq+0x17d/0x350 [ 368.417850][ C0] handle_softirqs+0x219/0x950 [ 368.424251][ C0] __irq_exit_rcu+0x109/0x170 [ 368.430574][ C0] irq_exit_rcu+0x9/0x30 [ 368.436465][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 368.443737][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.451351][ C0] bus_to_subsys+0xae/0x160 [ 368.457483][ C0] bus_notify+0x37/0x70 [ 368.463269][ C0] driver_bound+0x157/0x260 [ 368.469408][ C0] really_probe+0x651/0xb20 [ 368.475548][ C0] __driver_probe_device+0x1de/0x470 [ 368.482470][ C0] driver_probe_device+0x4c/0x1b0 [ 368.489124][ C0] __device_attach_driver+0x1df/0x350 [ 368.496129][ C0] bus_for_each_drv+0x159/0x1e0 [ 368.502607][ C0] __device_attach+0x1e4/0x4e0 [ 368.509001][ C0] device_initial_probe+0xaa/0xc0 [ 368.515655][ C0] bus_probe_device+0x64/0x150 [ 368.522049][ C0] device_add+0x116e/0x1980 [ 368.528186][ C0] hid_add_device+0x31b/0x5c0 [ 368.534492][ C0] usbhid_probe+0xd5d/0x1410 [ 368.540717][ C0] usb_probe_interface+0x303/0xa80 [ 368.547475][ C0] really_probe+0x241/0xb20 [ 368.553607][ C0] __driver_probe_device+0x1de/0x470 [ 368.560524][ C0] driver_probe_device+0x4c/0x1b0 [ 368.567178][ C0] __device_attach_driver+0x1df/0x350 [ 368.574180][ C0] bus_for_each_drv+0x159/0x1e0 [ 368.580659][ C0] __device_attach+0x1e4/0x4e0 [ 368.587051][ C0] device_initial_probe+0xaa/0xc0 [ 368.593704][ C0] bus_probe_device+0x64/0x150 [ 368.600093][ C0] device_add+0x116e/0x1980 [ 368.606228][ C0] usb_set_configuration+0x1187/0x1e50 [ 368.613321][ C0] usb_generic_driver_probe+0xb1/0x110 [ 368.620406][ C0] usb_probe_device+0xef/0x400 [ 368.626800][ C0] really_probe+0x241/0xb20 [ 368.632932][ C0] __driver_probe_device+0x1de/0x470 [ 368.639848][ C0] driver_probe_device+0x4c/0x1b0 [ 368.646502][ C0] __device_attach_driver+0x1df/0x350 [ 368.653508][ C0] bus_for_each_drv+0x159/0x1e0 [ 368.659985][ C0] __device_attach+0x1e4/0x4e0 [ 368.666377][ C0] device_initial_probe+0xaa/0xc0 [ 368.673032][ C0] bus_probe_device+0x64/0x150 [ 368.679422][ C0] device_add+0x116e/0x1980 [ 368.685557][ C0] usb_new_device+0xd07/0x1a90 [ 368.691956][ C0] hub_event+0x313a/0x52f0 [ 368.698001][ C0] process_one_work+0x9ba/0x1b20 [ 368.704568][ C0] worker_thread+0x6c8/0xf10 [ 368.710786][ C0] kthread+0x3c5/0x780 [ 368.716483][ C0] ret_from_fork+0x983/0xb10 [ 368.722702][ C0] ret_from_fork_asm+0x1a/0x30 [ 368.729099][ C0] INITIAL USE at: [ 368.732969][ C0] lock_acquire+0x179/0x330 [ 368.739014][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 368.745757][ C0] input_inject_event+0x9f/0x3b0 [ 368.752242][ C0] led_set_brightness+0x217/0x290 [ 368.758812][ C0] kbd_led_trigger_activate+0xcb/0x110 [ 368.765816][ C0] led_trigger_set+0x59a/0xc50 [ 368.772118][ C0] led_trigger_set_default+0x1e0/0x2e0 [ 368.779119][ C0] led_classdev_register_ext+0x71d/0xa30 [ 368.786295][ C0] input_leds_connect+0x552/0x8e0 [ 368.792867][ C0] input_attach_handler.isra.0+0x176/0x250 [ 368.800216][ C0] input_register_device+0xab9/0x11b0 [ 368.807130][ C0] atkbd_connect+0x5f8/0xa60 [ 368.813260][ C0] serio_driver_probe+0x7f/0xd0 [ 368.819654][ C0] really_probe+0x241/0xb20 [ 368.825699][ C0] __driver_probe_device+0x1de/0x470 [ 368.832527][ C0] driver_probe_device+0x4c/0x1b0 [ 368.839094][ C0] __driver_attach+0x283/0x5e0 [ 368.845405][ C0] bus_for_each_dev+0x13e/0x1d0 [ 368.851794][ C0] serio_handle_event+0x281/0xb30 [ 368.858364][ C0] process_one_work+0x9ba/0x1b20 [ 368.864845][ C0] worker_thread+0x6c8/0xf10 [ 368.870981][ C0] kthread+0x3c5/0x780 [ 368.876593][ C0] ret_from_fork+0x983/0xb10 [ 368.882743][ C0] ret_from_fork_asm+0x1a/0x30 [ 368.889056][ C0] } [ 368.891532][ C0] ... key at: [] __key.7+0x0/0x40 [ 368.898622][ C0] ... acquired at: [ 368.902398][ C0] __lock_acquire+0xc38/0x2890 [ 368.907315][ C0] lock_acquire+0x179/0x330 [ 368.911970][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 368.917325][ C0] input_event+0x74/0xd0 [ 368.921724][ C0] hidinput_hid_event+0x1d3b/0x2470 [ 368.927087][ C0] hid_process_event+0x4b7/0x5e0 [ 368.932191][ C0] hid_report_raw_event+0xa33/0x12c0 [ 368.937640][ C0] __hid_input_report.constprop.0+0x33f/0x470 [ 368.943869][ C0] hid_irq_in+0x35e/0x870 [ 368.948366][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 368.953912][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 368.959282][ C0] dummy_timer+0x1809/0x3ad0 [ 368.964030][ C0] __hrtimer_run_queues+0x202/0xc40 [ 368.969400][ C0] hrtimer_run_softirq+0x17d/0x350 [ 368.974679][ C0] handle_softirqs+0x219/0x950 [ 368.979607][ C0] __irq_exit_rcu+0x109/0x170 [ 368.984445][ C0] irq_exit_rcu+0x9/0x30 [ 368.988846][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 368.994641][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.000777][ C0] bus_to_subsys+0xae/0x160 [ 369.005431][ C0] bus_notify+0x37/0x70 [ 369.009739][ C0] driver_bound+0x157/0x260 [ 369.014396][ C0] really_probe+0x651/0xb20 [ 369.019055][ C0] __driver_probe_device+0x1de/0x470 [ 369.024495][ C0] driver_probe_device+0x4c/0x1b0 [ 369.029678][ C0] __device_attach_driver+0x1df/0x350 [ 369.035208][ C0] bus_for_each_drv+0x159/0x1e0 [ 369.040211][ C0] __device_attach+0x1e4/0x4e0 [ 369.045131][ C0] device_initial_probe+0xaa/0xc0 [ 369.050312][ C0] bus_probe_device+0x64/0x150 [ 369.055228][ C0] device_add+0x116e/0x1980 [ 369.059886][ C0] hid_add_device+0x31b/0x5c0 [ 369.064712][ C0] usbhid_probe+0xd5d/0x1410 [ 369.069461][ C0] usb_probe_interface+0x303/0xa80 [ 369.074727][ C0] really_probe+0x241/0xb20 [ 369.079384][ C0] __driver_probe_device+0x1de/0x470 [ 369.084822][ C0] driver_probe_device+0x4c/0x1b0 [ 369.090001][ C0] __device_attach_driver+0x1df/0x350 [ 369.095528][ C0] bus_for_each_drv+0x159/0x1e0 [ 369.100533][ C0] __device_attach+0x1e4/0x4e0 [ 369.105456][ C0] device_initial_probe+0xaa/0xc0 [ 369.110637][ C0] bus_probe_device+0x64/0x150 [ 369.115555][ C0] device_add+0x116e/0x1980 [ 369.120214][ C0] usb_set_configuration+0x1187/0x1e50 [ 369.125826][ C0] usb_generic_driver_probe+0xb1/0x110 [ 369.131438][ C0] usb_probe_device+0xef/0x400 [ 369.136356][ C0] really_probe+0x241/0xb20 [ 369.141017][ C0] __driver_probe_device+0x1de/0x470 [ 369.146470][ C0] driver_probe_device+0x4c/0x1b0 [ 369.151654][ C0] __device_attach_driver+0x1df/0x350 [ 369.157179][ C0] bus_for_each_drv+0x159/0x1e0 [ 369.162181][ C0] __device_attach+0x1e4/0x4e0 [ 369.167101][ C0] device_initial_probe+0xaa/0xc0 [ 369.172282][ C0] bus_probe_device+0x64/0x150 [ 369.177200][ C0] device_add+0x116e/0x1980 [ 369.181861][ C0] usb_new_device+0xd07/0x1a90 [ 369.186779][ C0] hub_event+0x313a/0x52f0 [ 369.191347][ C0] process_one_work+0x9ba/0x1b20 [ 369.196440][ C0] worker_thread+0x6c8/0xf10 [ 369.201185][ C0] kthread+0x3c5/0x780 [ 369.205407][ C0] ret_from_fork+0x983/0xb10 [ 369.210150][ C0] ret_from_fork_asm+0x1a/0x30 [ 369.215071][ C0] [ 369.217371][ C0] [ 369.217371][ C0] stack backtrace: [ 369.223237][ C0] CPU: 0 UID: 0 PID: 6504 Comm: kworker/0:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.223259][ C0] Tainted: [L]=SOFTLOCKUP [ 369.223263][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.223274][ C0] Workqueue: usb_hub_wq hub_event [ 369.223292][ C0] Call Trace: [ 369.223299][ C0] [ 369.223304][ C0] dump_stack_lvl+0x116/0x1f0 [ 369.223320][ C0] print_irq_inversion_bug.part.0+0x212/0x270 [ 369.223339][ C0] mark_lock+0x399/0x9f0 [ 369.223356][ C0] ? save_trace+0x1ad/0x380 [ 369.223369][ C0] __lock_acquire+0xc38/0x2890 [ 369.223385][ C0] ? lockdep_unlock+0x64/0xd0 [ 369.223406][ C0] ? mark_lock+0x40d/0x9f0 [ 369.223422][ C0] lock_acquire+0x179/0x330 [ 369.223438][ C0] ? input_event+0x74/0xd0 [ 369.223461][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 369.223482][ C0] ? input_event+0x74/0xd0 [ 369.223501][ C0] input_event+0x74/0xd0 [ 369.223521][ C0] hidinput_hid_event+0x1d3b/0x2470 [ 369.223541][ C0] ? __pfx_hidinput_hid_event+0x10/0x10 [ 369.223564][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 369.223583][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 369.223606][ C0] hid_process_event+0x4b7/0x5e0 [ 369.223619][ C0] ? hidraw_report_event+0x288/0x350 [ 369.223640][ C0] hid_report_raw_event+0xa33/0x12c0 [ 369.223654][ C0] ? _mutex_lock_killable+0x7/0x20 [ 369.223671][ C0] __hid_input_report.constprop.0+0x33f/0x470 [ 369.223688][ C0] hid_irq_in+0x35e/0x870 [ 369.223710][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 369.223731][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 369.223753][ C0] dummy_timer+0x1809/0x3ad0 [ 369.223773][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 369.223797][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 369.223811][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 369.223825][ C0] ? mark_held_locks+0x49/0x80 [ 369.223840][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 369.223862][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 369.223875][ C0] __hrtimer_run_queues+0x202/0xc40 [ 369.223899][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 369.223921][ C0] ? read_tsc+0x9/0x20 [ 369.223943][ C0] hrtimer_run_softirq+0x17d/0x350 [ 369.223965][ C0] handle_softirqs+0x219/0x950 [ 369.223986][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 369.224008][ C0] __irq_exit_rcu+0x109/0x170 [ 369.224027][ C0] irq_exit_rcu+0x9/0x30 [ 369.224046][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 369.224070][ C0] [ 369.224074][ C0] [ 369.224079][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.224094][ C0] RIP: 0010:bus_to_subsys+0xae/0x160 [ 369.224109][ C0] Code: bc 00 00 00 00 00 fc ff df eb 28 e8 5c 97 d7 fb 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 9f 00 00 00 48 8b 43 08 <48> 8d 58 f8 48 39 c5 74 6b e8 34 97 d7 fb 48 8d bb 60 02 00 00 48 [ 369.224123][ C0] RSP: 0018:ffffc9000e4a6ba0 EFLAGS: 00000246 [ 369.224135][ C0] RAX: ffff888143ad4858 RBX: ffff888143ad4050 RCX: ffffc9001a915000 [ 369.224144][ C0] RDX: 0000000000100000 RSI: ffffffff85e74c64 RDI: ffff888143ad4058 [ 369.224153][ C0] RBP: ffff88801ded7100 R08: 0000000000000001 R09: fffff52001c94d66 [ 369.224163][ C0] R10: 0000000000000003 R11: ffff88802f1c0b30 R12: dffffc0000000000 [ 369.224172][ C0] R13: ffffffff8ca2cfa0 R14: 0000000000000000 R15: ffff888056ecd998 [ 369.224183][ C0] ? bus_to_subsys+0x94/0x160 [ 369.224198][ C0] bus_notify+0x37/0x70 [ 369.224213][ C0] driver_bound+0x157/0x260 [ 369.224229][ C0] ? __pfx_hid_device_probe+0x10/0x10 [ 369.224244][ C0] really_probe+0x651/0xb20 [ 369.224262][ C0] __driver_probe_device+0x1de/0x470 [ 369.224281][ C0] driver_probe_device+0x4c/0x1b0 [ 369.224299][ C0] __device_attach_driver+0x1df/0x350 [ 369.224318][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 369.224336][ C0] bus_for_each_drv+0x159/0x1e0 [ 369.224350][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 369.224365][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 369.224378][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 369.224400][ C0] __device_attach+0x1e4/0x4e0 [ 369.224418][ C0] ? __pfx___device_attach+0x10/0x10 [ 369.224436][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 369.224457][ C0] device_initial_probe+0xaa/0xc0 [ 369.224476][ C0] bus_probe_device+0x64/0x150 [ 369.224492][ C0] device_add+0x116e/0x1980 [ 369.224513][ C0] ? __pfx_device_add+0x10/0x10 [ 369.224534][ C0] ? debugfs_create_file_full+0x41/0x60 [ 369.224553][ C0] hid_add_device+0x31b/0x5c0 [ 369.224565][ C0] ? mutex_init_lockep+0x110/0x150 [ 369.224582][ C0] usbhid_probe+0xd5d/0x1410 [ 369.224603][ C0] usb_probe_interface+0x303/0xa80 [ 369.224624][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 369.224644][ C0] really_probe+0x241/0xb20 [ 369.224662][ C0] __driver_probe_device+0x1de/0x470 [ 369.224681][ C0] driver_probe_device+0x4c/0x1b0 [ 369.224699][ C0] __device_attach_driver+0x1df/0x350 [ 369.224718][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 369.224736][ C0] bus_for_each_drv+0x159/0x1e0 [ 369.224750][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 369.224764][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 369.224777][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 369.224800][ C0] __device_attach+0x1e4/0x4e0 [ 369.224817][ C0] ? __pfx___device_attach+0x10/0x10 [ 369.224836][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 369.224856][ C0] device_initial_probe+0xaa/0xc0 [ 369.224874][ C0] bus_probe_device+0x64/0x150 [ 369.224890][ C0] device_add+0x116e/0x1980 [ 369.224911][ C0] ? __pfx_device_add+0x10/0x10 [ 369.224930][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 369.224947][ C0] usb_set_configuration+0x1187/0x1e50 [ 369.224969][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 369.224984][ C0] usb_generic_driver_probe+0xb1/0x110 [ 369.224999][ C0] usb_probe_device+0xef/0x400 [ 369.225016][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 369.225035][ C0] really_probe+0x241/0xb20 [ 369.225053][ C0] __driver_probe_device+0x1de/0x470 [ 369.225070][ C0] ? usb_driver_applicable+0x1c7/0x220 [ 369.225091][ C0] driver_probe_device+0x4c/0x1b0 [ 369.225109][ C0] __device_attach_driver+0x1df/0x350 [ 369.225128][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 369.225145][ C0] bus_for_each_drv+0x159/0x1e0 [ 369.225160][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 369.225174][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 369.225187][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 369.225210][ C0] __device_attach+0x1e4/0x4e0 [ 369.225227][ C0] ? __pfx___device_attach+0x10/0x10 [ 369.225246][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 369.225273][ C0] device_initial_probe+0xaa/0xc0 [ 369.225292][ C0] bus_probe_device+0x64/0x150 [ 369.225308][ C0] device_add+0x116e/0x1980 [ 369.225328][ C0] ? __pfx_device_add+0x10/0x10 [ 369.225348][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 369.225366][ C0] usb_new_device+0xd07/0x1a90 [ 369.225384][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 369.225402][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 369.225419][ C0] ? mark_held_locks+0x49/0x80 [ 369.225435][ C0] hub_event+0x313a/0x52f0 [ 369.225459][ C0] ? __pfx_hub_event+0x10/0x10 [ 369.225476][ C0] ? assoc_array_apply_edit+0x6b0/0x6c0 [ 369.225497][ C0] ? finish_task_switch.isra.0+0x202/0xbd0 [ 369.225522][ C0] ? rcu_is_watching+0x12/0xc0 [ 369.225536][ C0] process_one_work+0x9ba/0x1b20 [ 369.225561][ C0] ? __pfx_process_one_work+0x10/0x10 [ 369.225581][ C0] ? assign_work+0x1a0/0x250 [ 369.225598][ C0] worker_thread+0x6c8/0xf10 [ 369.225617][ C0] ? __kthread_parkme+0x19e/0x250 [ 369.225630][ C0] ? __pfx_worker_thread+0x10/0x10 [ 369.225648][ C0] kthread+0x3c5/0x780 [ 369.225664][ C0] ? __pfx_kthread+0x10/0x10 [ 369.225680][ C0] ? rcu_is_watching+0x12/0xc0 [ 369.225692][ C0] ? __pfx_kthread+0x10/0x10 [ 369.225708][ C0] ret_from_fork+0x983/0xb10 [ 369.225723][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 369.225739][ C0] ? __switch_to+0x7af/0x10d0 [ 369.225756][ C0] ? __pfx_kthread+0x10/0x10 [ 369.225772][ C0] ret_from_fork_asm+0x1a/0x30 [ 369.225796][ C0] [ 369.240719][ T24] m920x_read = error: -19 [ 370.015917][ T24] dvb-usb: error while querying for an remote control event. [ 370.040118][ T90] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 370.052906][ T90] usb 5-1: device descriptor read/8, error -71 [ 370.120788][ T5889] m920x_read = error: -19 [ 370.125199][ T5889] dvb-usb: error while querying for an remote control event. [ 370.137217][ T9912] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 370.152487][ T9911] Device name cannot be null; rc = [-22] [ 370.160849][ T90] usb usb5-port1: unable to enumerate USB device [ 370.211696][ T9912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.246071][ T5889] usb 4-1: USB disconnect, device number 35 [ 370.260984][ T24] m920x_read = error: -19 [ 370.265336][ T24] dvb-usb: error while querying for an remote control event. [ 370.274501][ T9914] bond1: (slave ip6erspan0): making interface the new active one [ 370.284084][ T9914] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 370.380967][ T90] m920x_read = error: -19 [ 370.385344][ T90] dvb-usb: error while querying for an remote control event. [ 370.501107][ T90] m920x_read = error: -19 [ 370.505491][ T90] dvb-usb: error while querying for an remote control event. [ 370.621077][ T90] m920x_read = error: -19 [ 370.625463][ T90] dvb-usb: error while querying for an remote control event. [ 370.740771][ T90] m920x_read = error: -19 [ 370.745154][ T90] dvb-usb: error while querying for an remote control event. [ 370.861147][ T90] m920x_read = error: -19 [ 370.865475][ T90] dvb-usb: error while querying for an remote control event. [ 370.981470][ T90] m920x_read = error: -19 [ 370.985807][ T90] dvb-usb: error while querying for an remote control event. [ 371.110915][ T90] m920x_read = error: -19 [ 371.115259][ T90] dvb-usb: error while querying for an remote control event. [ 371.231424][ T90] m920x_read = error: -19 [ 371.235760][ T90] dvb-usb: error while querying for an remote control event. [ 371.351146][ T90] m920x_read = error: -19 [ 371.355484][ T90] dvb-usb: error while querying for an remote control event. [ 371.471352][ T90] m920x_read = error: -19 [ 371.475689][ T90] dvb-usb: error while querying for an remote control event. [ 371.591088][ T90] m920x_read = error: -19 [ 371.595432][ T90] dvb-usb: error while querying for an remote control event. [ 371.711065][ T5875] m920x_read = error: -19 [ 371.715414][ T5875] dvb-usb: error while querying for an remote control event. [ 371.831344][ T5875] m920x_read = error: -19 [ 371.835698][ T5875] dvb-usb: error while querying for an remote control event. [ 371.961142][ T5875] m920x_read = error: -19 [ 371.965571][ T5875] dvb-usb: error while querying for an remote control event. [ 372.081158][ T6504] m920x_read = error: -19 [ 372.085521][ T6504] dvb-usb: error while querying for an remote control event. [ 372.211008][ T6504] m920x_read = error: -19 [ 372.215363][ T6504] dvb-usb: error while querying for an remote control event. [ 372.330788][ T6504] m920x_read = error: -19 [ 372.335142][ T6504] dvb-usb: error while querying for an remote control event. [ 372.451056][ T5875] m920x_read = error: -19 [ 372.455387][ T5875] dvb-usb: error while querying for an remote control event. [ 372.571160][ T5875] m920x_read = error: -19 [ 372.575489][ T5875] dvb-usb: error while querying for an remote control event. [ 372.691156][ T5875] m920x_read = error: -19 [ 372.695504][ T5875] dvb-usb: error while querying for an remote control event. [ 372.810779][ T5875] m920x_read = error: -19 [ 372.815113][ T5875] dvb-usb: error while querying for an remote control event. [ 372.931106][ T5875] m920x_read = error: -19 [ 372.935472][ T5875] dvb-usb: error while querying for an remote control event. [ 373.051045][ T5875] m920x_read = error: -19 [ 373.055376][ T5875] dvb-usb: error while querying for an remote control event. [ 373.170795][ T5875] m920x_read = error: -19 [ 373.175195][ T5875] dvb-usb: error while querying for an remote control event. [ 373.291190][ T6504] m920x_read = error: -19 [ 373.295547][ T6504] dvb-usb: error while querying for an remote control event. [ 373.411780][ T6504] m920x_read = error: -19 [ 373.416188][ T6504] dvb-usb: error while querying for an remote control event. [ 373.530859][ T6504] m920x_read = error: -19 [ 373.535236][ T6504] dvb-usb: error while querying for an remote control event. [ 373.661050][ T6504] m920x_read = error: -19 [ 373.665398][ T6504] dvb-usb: error while querying for an remote control event. [ 373.791384][ T6504] m920x_read = error: -19 [ 373.795735][ T6504] dvb-usb: error while querying for an remote control event. [ 373.910749][ T6504] m920x_read = error: -19 [ 373.915106][ T6504] dvb-usb: error while querying for an remote control event. [ 374.031009][ T5875] m920x_read = error: -19 [ 374.035381][ T5875] dvb-usb: error while querying for an remote control event. [ 374.150774][ T5875] m920x_read = error: -19 [ 374.155168][ T5875] dvb-usb: error while querying for an remote control event. [ 374.271434][ T5875] m920x_read = error: -19 [ 374.275770][ T5875] dvb-usb: error while querying for an remote control event. [ 374.390981][ T5875] m920x_read = error: -19 [ 374.395347][ T5875] dvb-usb: error while querying for an remote control event. [ 374.510731][ T5875] m920x_read = error: -19 [ 374.515079][ T5875] dvb-usb: error while querying for an remote control event. [ 374.641313][ T5875] m920x_read = error: -19 [ 374.645659][ T5875] dvb-usb: error while querying for an remote control event. [ 374.771615][ T6504] m920x_read = error: -19 [ 374.775945][ T6504] dvb-usb: error while querying for an remote control event. [ 374.890733][ T5875] m920x_read = error: -19 [ 374.895090][ T5875] dvb-usb: error while querying for an remote control event. [ 375.021249][ T5875] m920x_read = error: -19 [ 375.025580][ T5875] dvb-usb: error while querying for an remote control event. [ 375.141131][ T5875] m920x_read = error: -19 [ 375.145472][ T5875] dvb-usb: error while querying for an remote control event. [ 375.261131][ T5875] m920x_read = error: -19 [ 375.265478][ T5875] dvb-usb: error while querying for an remote control event. [ 375.380800][ T5875] m920x_read = error: -19 [ 375.385142][ T5875] dvb-usb: error while querying for an remote control event. [ 375.501426][ T5875] m920x_read = error: -19 [ 375.505760][ T5875] dvb-usb: error while querying for an remote control event. [ 375.620763][ T5875] m920x_read = error: -19 [ 375.625114][ T5875] dvb-usb: error while querying for an remote control event. [ 375.740780][ T5875] m920x_read = error: -19 [ 375.745139][ T5875] dvb-usb: error while querying for an remote control event. [ 375.871408][ T5875] m920x_read = error: -19 [ 375.875748][ T5875] dvb-usb: error while querying for an remote control event. [ 375.990913][ T5875] m920x_read = error: -19 [ 375.995477][ T5875] dvb-usb: error while querying for an remote control event. [ 376.110814][ T5875] m920x_read = error: -19 [ 376.115174][ T5875] dvb-usb: error while querying for an remote control event. [ 376.231505][ T5875] m920x_read = error: -19 [ 376.235888][ T5875] dvb-usb: error while querying for an remote control event. [ 376.351388][ T5875] m920x_read = error: -19 [ 376.355732][ T5875] dvb-usb: error while querying for an remote control event. [ 376.471303][ T5875] m920x_read = error: -19 [ 376.475668][ T5875] dvb-usb: error while querying for an remote control event. [ 376.600817][ T5875] m920x_read = error: -19 [ 376.605247][ T5875] dvb-usb: error while querying for an remote control event. [ 376.721557][ T5875] m920x_read = error: -19 [ 376.725885][ T5875] dvb-usb: error while querying for an remote control event. [ 376.840839][ T5875] m920x_read = error: -19 [ 376.845210][ T5875] dvb-usb: error while querying for an remote control event. [ 376.960843][ T5875] m920x_read = error: -19 [ 376.965286][ T5875] dvb-usb: error while querying for an remote control event.