last executing test programs: 7.220093838s ago: executing program 2 (id=7794): openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 7.060556841s ago: executing program 2 (id=7795): r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000b40)=ANY=[], 0x98) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = syz_open_dev$video4linux(&(0x7f0000002c00), 0xb244, 0x80000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000002c40)={0x9, 0x0, 0x1007, 0x1, 0x3, {0x280, 0xffff}, 0x1}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000440)=0x3d3a, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x6, 'vlan0\x00', {0x2}, 0x80}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00', {0x1}, 0x8}) sendfile(r0, r1, 0x0, 0x2) 6.798647709s ago: executing program 4 (id=7797): personality(0x4000000) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000480)={0xa2, 0x6576, 0xd}) r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x0, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r4 = openat$incfs(0xffffffffffffffff, 0x0, 0x452a00, 0x77) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000001c0)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000200)={@desc={0x1, 0x0, @desc2}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44c40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000003e10ac057402c2f90102030109021b000100000000090445000103630200090504020000000000a67e3b8e53826ab540790f2b97dc2d5d984c3365e0d8f5b5630e7ce1741cd4feb2190626229f5c561169cc57edaa5f339f3c8e388889194cc42eb73d43667ef07a542ff940cf3229fc6905e861c59955df782f7a003c43671541e3a8077a41c4891093761a2f00ae"], 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @local}}, 0x6, 0x5, 0x1000, 0x101, 0x20, 0x7ff, 0x4}, &(0x7f0000000400)=0x9c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r7, 0x120, 0x5}, 0xc) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000000c0)) 6.562021708s ago: executing program 2 (id=7798): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000080)={0x40, 0xf, 0x4, "237c1a73"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp6\x00') openat$cgroup_procs(r1, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$isdn(r1, &(0x7f0000000000)={0x22, 0xfc, 0x5, 0x9, 0x5}, 0x6) 6.292151111s ago: executing program 0 (id=7800): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0x8, {0x5, 0x0, 0x200007, 0x6}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c00210009"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 5.920305063s ago: executing program 0 (id=7803): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="d1d18fc3676d17f16432ffb72c57acb3", 0x10}], 0x1}}], 0x1, 0x20000040) io_submit(r2, 0x0, &(0x7f0000000580)) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) (async) accept4$alg(r0, 0x0, 0x0, 0x0) (async) io_setup(0x20000000001005, &(0x7f0000000880)) (async) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000080)) (async) sendmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="d1d18fc3676d17f16432ffb72c57acb3", 0x10}], 0x1}}], 0x1, 0x20000040) (async) io_submit(r2, 0x0, &(0x7f0000000580)) (async) 5.737966938s ago: executing program 0 (id=7804): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xf, "012720dcfe14c639a500ba17162716"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="9f4b01"], 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b14, 0x0) 4.980244896s ago: executing program 1 (id=7806): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) (fail_nth: 3) 4.975371404s ago: executing program 4 (id=7807): syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x66, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) exit(0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) brk(0x400000ffc000) r5 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '/dev/fuse\x00'}) ioctl$FS_IOC_RESVSP(r5, 0x80086601, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r4) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="cf57205935042ee4bbb830f71a6f461ab0e17bcdc990e61197ea45ac064c6d33202b6f380c853754737f0f298b914768", @ANYRESOCT=r6, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x40015}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, 0x0) 4.933913575s ago: executing program 1 (id=7808): r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000b40)=ANY=[], 0x98) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = syz_open_dev$video4linux(&(0x7f0000002c00), 0xb244, 0x80000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000002c40)={0x9, 0x0, 0x1007, 0x1, 0x3, {0x280, 0xffff}, 0x1}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f00000000c0)={0x6, 'vlan0\x00', {0x2}, 0x80}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00', {0x1}, 0x8}) sendfile(r0, r1, 0x0, 0x2) 4.859132885s ago: executing program 1 (id=7809): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7fff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x66) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x49}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x4000000}) pread64(r2, &(0x7f0000000180)=""/244, 0xf4, 0x100000000) write$cgroup_int(r0, &(0x7f00000000c0)=0x8, 0x12) 4.788175964s ago: executing program 2 (id=7810): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000401e59cd906e0000000001090224000100004020090400000203000000092107080001220500090581032000060000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x140d, 0x2e4d0a838f674d49, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x80047456, &(0x7f0000000100)={0x3, 0x4, 0xff6, 0x5, 0x0, "23f5000000000000000000000000000300", 0xffffffff}) r8 = socket$inet6(0xa, 0x3, 0x7) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000000c0), 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) r10 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r10, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10180, 0x0) 2.603048303s ago: executing program 0 (id=7813): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1a1040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000240), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc2900, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001100)=""/216, 0xd8, 0x401) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)={0x10000, 0x80000000}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400000006a882, 0x0) r5 = dup(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) read$snddsp(r5, &(0x7f0000000100)=""/44, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) sync() mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x16010080) gettid() 2.468383753s ago: executing program 3 (id=7814): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="0518", 0x2, 0x801, 0x0, 0x0) shutdown(r0, 0x1) 2.309521977s ago: executing program 3 (id=7815): syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0xc177ad3, 0x9}) r1 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x2, 0x2de, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000040000000400000001"], 0x48) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000740)={r4, 0x58, &(0x7f00000006c0)}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) io_uring_enter(r1, 0x2def, 0xb80c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) ioctl$UI_SET_PHYS(r7, 0x4004556e, &(0x7f0000000dc0)='syz1\x00') openat$cgroup_procs(r5, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f00000001c0)=0x5) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl(r8, 0x8000, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 1.852233189s ago: executing program 4 (id=7816): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.823494375s ago: executing program 4 (id=7817): personality(0x4000000) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000480)={0xa2, 0x6576, 0xd}) r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x0, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r4 = openat$incfs(0xffffffffffffffff, 0x0, 0x452a00, 0x77) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000001c0)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000200)={@desc={0x1, 0x0, @desc2}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44c40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000003e10ac057402c2f90102030109021b000100000000090445000103630200090504020000000000a67e3b8e53826ab540790f2b97dc2d5d984c3365e0d8f5b5630e7ce1741cd4feb2190626229f5c561169cc57edaa5f339f3c8e388889194cc42eb73d43667ef07a542ff940cf3229fc6905e861c59955df782f7a003c43671541e3a8077a41c4891093761a2f00ae"], 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @local}}, 0x6, 0x5, 0x1000, 0x101, 0x20, 0x7ff, 0x4}, &(0x7f0000000400)=0x9c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r7, 0x120, 0x5}, 0xc) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000000c0)) 1.736785397s ago: executing program 1 (id=7818): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) (fail_nth: 3) 1.596236858s ago: executing program 2 (id=7819): r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000b40)=ANY=[], 0x98) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = syz_open_dev$video4linux(&(0x7f0000002c00), 0xb244, 0x80000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000002c40)={0x9, 0x0, 0x1007, 0x1, 0x3, {0x280, 0xffff}, 0x1}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f00000000c0)={0x6, 'vlan0\x00', {0x2}, 0x80}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00', {0x1}, 0x8}) sendfile(r0, r1, 0x0, 0x2) 1.549794877s ago: executing program 0 (id=7820): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) keyctl$clear(0x11, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r0, @ANYRES64=r1, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0xb0, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xca}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x808) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000200)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x66}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8041}, 0x40814) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, r4, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x16, 0x1, 0x36, 0xc, 0x9, 0x24, 0xc, 0xb, 0x60, 0x12, 0x9, 0xc, 0x9, 0xb, 0x3, 0x6, 0x2, 0x1, 0x1b, 0x4, 0x3, 0x30, 0x1b, 0x9, 0x2, 0x16, 0x9, 0x0, 0x1, 0x6c, 0x5]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{}, {0x6, 0x9}, {0x4, 0x3}, {0x5, 0x4}, {0x2, 0x1}, {0x3}, {0x3, 0xa}, {0x6, 0x5}, {0x1, 0x7}, {0x6}, {0x5, 0x9}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x7}, {0x3, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x5, 0x6}, {0x4, 0x9}, {0x4, 0x4}, {0x0, 0x1}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x9}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x1, 0x18, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004005}, 0x40801) r11 = getpid() syz_pidfd_open(r11, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x134, 0x2f, 0x800, 0x70bd29, 0x25dfdbfe, {0x4}, [@generic="de867c8afafdd4e42400db326bd302f9295f462cb2851c23a744482274284616020fb76543b936ffcb1867d74b09e09edf22c75ebb3644f752f71a3945b3e15d43497c36d80cacb00a5672bc8034a3fee54ba5adc88d53e34ab5d9b64d867fbc6980c7f4cdff207717bce18b2ebd6ddd29bb967dbed70ca23476c41eb00e512a3eaa97aa7e7bf93ba2978381831d30f532c029ba4b3f247c35f22e9651208f591f3b0cc47b94d18e62b149a5480b72f8893a6e0935c795b0c8e0fc5651db7adc69f9bb6a020a4c38217623cbfce2d84d374fd743b6e77706defe84ca22db5fc56d3ee29f3e9ad74aebbec8496e7323091378ef718ebbd225ef33fbb28b", @nested={0x20, 0x116, 0x0, 0x1, [@typed={0x8, 0x14d, 0x0, 0x0, @pid=r11}, @nested={0x4, 0xa1}, @nested={0x4, 0x4d}, @typed={0xc, 0xfb, 0x0, 0x0, @u64=0x58ec}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x40080) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4400000013002f0a2cbd7000fddbcf2507007c00", @ANYRES32=r13, @ANYRES8=r14], 0x44}, 0x1, 0x0, 0x0, 0x40008a1}, 0x50) r15 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r15, r15, &(0x7f0000000000)=0x1, 0x4) syz_io_uring_setup(0xca8, &(0x7f0000000140)={0x0, 0x724, 0x2, 0x0, 0x108, 0x0, r15}, &(0x7f00000000c0), &(0x7f00000001c0)) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r15, 0x2, &(0x7f0000000200)={0x2, 0x1}, 0x0) ioctl$sock_inet_SIOCSARP(r12, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @multicast1}, {0x6, @local}, 0x42, {0x2, 0x4e21, @loopback}, 'team_slave_1\x00'}) 1.523592919s ago: executing program 1 (id=7821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a30000000140a010200000000000000000000000a080003400000000908000340000000030c00064000000000000000045c010000090a0300000000000000000002000008540012802800018008000100666962001c0002800800014000000014080001400000001108000240000000000c00018008000100647570001c0001806d1b531a2494090001006d617371000000000c000280080001400000000008000640ffffff000c000b400000000000008000ca000d4004d9eb8373055a1130321d2ad6ced1185bf3de71a621b48248bce21b0e6df077239d3a3254a4ee79ab015b6302e51a15f2d43d0875bf63463308664368cbebf7cf27a6c5d750a1608b2328985c5b896d7e29af31154a6ee645594420bb3dcfb9469a7b6d410c79c7e7804a806299d0e5b51a89853d7c18f6adf04157ae122866396d239bb252cb9676729d737f0b37bc5580204437bf5d8e6b32951f187b9b1dc3ef8cbeeb55207f8ecdd811aca0d21debe5dc5e2abda5596119bcbbad9b4a612ae6bbe4d2aa00000c001040000000000000000208000c4000005b4e14000000180a010200000000000000000a0000030c010000090a010100000000000000006d0000040900010073797a3000000000080008400000000108000a4000000001dc001280100001800c0001006e6f747261636b00100001800b0001006e756d67656e00000c00018008000100636d7000100001800b00010074756e6e656c000010000180090001006d65746100000000480001800e000100636f6e6e6c696d697400000034000280080001400000002c0800014000800000080002400000000008000240000000010800024000000001080001400000a3a11800018007000100727400000c000280080001400000000a2c0001800b0001006e756d67656e00001c00028008000140000000170800014000000015080003400000000020000000120a01010000000000000000030000080900010073797a300000000050000000090a0101000000000000000000000007080003400000011608000640000000000900020073797a310000000008000c4000000000080004400000000008000340000000e40800074000000025140000001100010000000000000000000200000a"], 0x344}, 0x1, 0x0, 0x0, 0x40}, 0x24004004) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"/4096}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "140cce7a73c78276e565d19ffcc67b8903982ecbbb4a4b6d58532c52694ad7235a98a025dac4e43e0d309dc598a22341ae13e551e25419ff8a635949cecc777af68e5d2b1dfd2011334bd56b708f32babd3e9f61e20003bc31329b2eab1ce6040bd9e0eba1ca12e973b9e8c694e67a1677fdf9dbdb9967a81e1b73aeb5d0b90c25f7a1cca98d074d56a056c416cdcf5fb583ceab6ce330e8d7c843058d898677dcdbd07f727e29c57a2b43d18a3db1caf149de369fa0a42154f97a8779aad05ed472099c8eabc225059872c8354e1a806672ecf2cf5f08077c15784af3039c60fa20675200923cd0bc750d78527e2a7ca7d75d893ba1b6455b135a320c93ec752e42cecc77ff854d7c62c21eff747a01940a5447c9b1504ecf0848bd265dcb46f51dde9156adfb4962f6587be46caec898ec2ca470828db810b27b098cb4b6f87170c14b097c211662f0a7b7252a57507fcc39360275ae5acc2c521dc20c3ae6caf37cf91bbdca2e69d10fd1c4f8a2ac725058c998e1194613bd673ca423b6543106242bd311dec05d402d1888bd305d68c2be7472c6bed2a9f3d580763d84e8a5a65cff508cd5ffea1fa8466913ccdcd79337930c0fbf5fdb16c44ffc283e7655fca308e463121f276d550c1dfdc95e5a118e40a8df6791dcb03796227697481f347317f0773004aa228c0c54cfcf96ac85408d44cb9cd5da4263ef08b1bfe068ad3c51a55da4123fae67dd9fa3e95db12e544364657e67f4a19b3df1601aa2dcff4c5c5587439287cb45e8db53e0300b5de608cf3673b6f6ba2680b6f0178025b6418151bfddbe31657a0425ec1dc511c12002e4da8f87967cefacd2039e6b5d4d46acfe85eb93c09ecc4ee43d963e7ef9be3744672b22829624791b9c1cfd441376338e7c202676b182ffdfc86564681757067fec116923b789fbe5ff3826ecc6eddc7193d7f11e7f5f460fa8f8422744083f0053480632864d53624f18d7b6b87ed85d1ff93219c3dd5835773eb5744fd77fa24c0b313b9b1b0bddd709ef56fcdd37cdaf2cbe3233754d63f1d64ccbeedfdffa215f08cded271a95da47ab717c04b30c6e9116011d14ee2db97cb12947e4dbf14a7ff90bba35e0887002becfbbcae2ef268a83006769d08b0ce08114c8f21cbb5d8ec0a7ff1538ec78b3db5073b0e69a0b07302b033378ffe16dbe5783407c23070539d18b98869711614c08e08e970269270ce9599bee204c043376b195105e4ed3bb9c085bf2abb0838b5c5d8a15e53fb08e19da1208e6ca65b4ea71b7e7b51b3530d9f1bb0fb496c0d6d529626183a103735acb6eaf263c4fb7f326fdef5120eda41e709c21524a8ec335a33e23fccb81b2d84157114c05fc8a280f8217ba77650df08000817ceccb6fbb987baa91810c697168b4a4c80e3572b1157050fe8c82d6b107b3eb8be8da7bf327ee2f6bd02049277633912e61b71e3fa91011c2cbcd6c2dc56d10176b30d1adcd50c83f0469a76661c653de51cf5dcf5efb72c257b8673437fd8c47225400b587dfe293ec6238e2330b6908bb0e60609100f5b136e1e1738ff33c2abec1d66c93d4e5dac71a45e73969372a816f137a5c24f2fc80d11cae84968d4e3befe033c30eea97a1e05b86e1f137458ce08fe942655a4c59f5a7493f5bc9f9fd4a8a6a2bf308a692d9669653f6e0fcd25cd298f52c473b12289af0497740b3c5a8ad0539d3fb743cb3ae42eabf815ee8880dbcf4db828a28ed0349fdbb73ad6802419e9e421094da9ddbbe7380e049e2503387139efa97a2ea3020fb6499a3003422389ff1e2e3d67ea056114dc394832b02c0fb66ee82b4d652d075ca96e046396dd6bd826d30bcfee7300a1ea3875520a420844df2154b35a442826da42be7412659ad96c922ef16ea9aaa85607d1d6f20ef9567da03f3f430260a4ea1444f6780dd65440d63424de2ff877e20f5a66feb1d506fc63059c026ff1c19f1a72d3f3ece453f13198704d183185521992fbc04a925e0ca482561875b9c1addaff96731029a28ff65538921aa7cb75aab67bca10daba71710accbabf22fda8ef25d1e64b2278d2eb1621f12f38b38988db7f91f5e9a4a314948f84fb69edc6b31e274e46a470ac1c23bb607de5b05a13d131cedb35585f72bc90b76cd7a8235760ab8255dea74219b9b1644fc8eaa8ad5f3b82848358e4202d17a9c11f2329f0d234660a5fe1f63b90466af942787169bddd1617c58d53ce496c9ee67318c9a8f53c5dc3c9b2fde7421b4a60df62736b2605af33bcafd9456a4c6c7f14e95104958996247dec5d2aa243d1ba6599b7c03fb6da629ed7707d831af7ba86c97958c26771db96e19afca99002788c66ff843778a0f9dcab8026bd1ee380981a49c44ee30728c880874b6ab5e44bb67052299bd59c8c2038fda364735fcb09eb9e1196c3d2835e19082de2bf2b2e45b66040f617098c1d6198aaf837fcd97891887d37d982ce36c85e1d329a47e31a7d522f712725e27d0a1561ab8e2ff473925ff9e879d8718a65e2c890530a2cac35a7e07d2dc511b8a31b034c435068e73cf5d507ea1bd611c30037fb67fbd87d0749188963003558180aa8ba707b0ac509b357e9e1e6f00bf68691782718862e811d67ce0874cf0db96c6815e52d4a1718fca37e78292922cace16ad4441cd93e122994745a595eadcc488781770d9170f07cc33c694464ac5ba7c3d718df85c6101feaadca98a106612efa003e43aaf56a9adf849de3bc3394daf181bb89e28ee222bab30e2008f3620b67aadc844e0a084a72003e372d0710f21d832a34832ebfae8889585b78a5a8c0db9f51f2cffe4d0e314fa03fde01e93211b35403e5ecabb2b68f814152c336cd0735b1ff1a4c85841c5f4374f850d007aaa3d98d7cff94d0665b29aa32c0be6ed955b122d1a4524ddc25378e78a8b8e31253d62892c60c5d15499dff57ac4e7a4c7705365b643ca674fc7b9b4a5f4243e542afe60bb2f1d8489a8bd2c586b6943223f93f02e51d87e03506e53665fd326197a34e634cfc65beef0fcbc8216fafb2e571550f0bde1f4cdad500587d10864ded300c3518878b59959ee69d39e9403e8cc580101260a073b0890734d1e5d550aea64b39d12b1dfb3978d8aeb9c8ea7eb749add7789f2b7a531656fecec60d30a4c682dee9870c45dfa76724a40ee923ccffd2a11bc44bd5ffa611ca9154735adbc7d9b83ef69086bc5e3d0a96035504ffeb5d848988f0a1e7020dc95a38ed7965796c66206f1e4276270678872a064edf9f892c35e1ad3da4835e8cc3429c9acb08957e38a961af4dbef8649232676692216db2aa4ddfdaad76806cdc8e21a3f0f637de318634b8e65aa26becb65dfbc742f61f31b29060e522a47923b3409962c5c4035c632459bd87216f681532f7979e31c232a94ce35fac71e8f825ef6532a2f826839c67b67dde2a82d8279c2e549edd5cd04d052a78059fa506a300c2b014286821e8dd80fafc7ae2cb986634a28347bdc99c62047ecc0a055a9a32bec3d422ebe9a2339fd5ad7403ca174d8ea7b257f3ce664a49af240b147f4cd1c03bac8498b23baef89f9848182bc04e73991f71cf23d9d61523a01a719e70f4d6bf88ceec67ab42a4af070b002c669f9755eac7776f6ae11f80ad540d887a478a791423b8ebe4693695fffc0335841d3cebbdd794cc47dbb14f8c9cf94ec5431bba9506595e5d046f5befc844a2aa955755ef118363b5a393fb5b53f23bf36000d454bef5b40118eb898f546537928d954b85976855aa404a914b00c9284b2885cdbf30f7ce8fbf96805f041d367271676b68fe5c632910633118288ac51c0ddfdd3aa9904da9959fb64aca255b9ad524bcef160d86a9c91386e033dfdffefafed7f1e693b92f5b52144a942c74094d183019e32dca09ef0e74d505f21451643bbfb3e76f7a5abfdfe895c145fdbf8a5e86bcbc97f952ae5f82a6cc19fd0110fd1ae55943fb40d4108efb4ed43988efac1f6c60468b922696ba0505d9c63996445dd8c8b1fe7bb0c0c6e8d1f91b729d14894bb53e7c37b968dda7c98d58a8def903c576168b5ccd970f8d9633fca4c94306181a90e24ffeeb7168b9227c8f23fbd0c25632f281f819ba01d3da1d42423fa05e81f4d6613ebd6ee81b18a7d32c589ee004cf12b7598d0989b092fc90b1baa73b72db45ad696d0c01cbe1ac5816615da2462fe397e1f6bed48414402217d421d35adb42de097ac25bc3eed99c3438e980f37371ab03869aa74f9bf511f5919c08b3183d0612bafe85328d51636f7fba284067c931c06cec9f57de1ab17fb9d99d0fb8bc808538e4873bc7e8fe823a73ae24de80d7d2a95bfc8998b16435b28061a222df5d4553dc9900a96f6c47b380425849e9be32fb442f09d0f013c83df7b5cb971748c55fe4d2fc5145ed32d9c00ee3677a2b2f590125bff54ea61c7818759499ef6172f0372afe35a4f17a89cbd504813b25f3aef37d68e6881c2778e69839c59cd3a178c60f0e5c5564cdbb53c3176cd83f98d3bc6beb509cc51018167575d016ed68a91aa683ff573fab6c50ad95d139491dc45cd5466e8c41af6b516f26a9e5862add5211c7c008a023eb29dfc90edc5bc9920a17c0fa8166327fbe80e9481eb1f594d29b7178e71d97c350cd0082a7fd9c931903a36900c3cadae8b984a390da95f18514291cfa27905cf4832d5d6152203b82afad9662be223e2a8abbaa874aea59898fdc6996ab620ca466f55b523ab0599d70c575b3bd8478cc646f2353d8cca7d049221e21554f88f1df2446f1d728adf5a617f910d04cb9957da6ddba288ab2ffce3ebdf65ea3365d72b88fdac47100ec86ff38be939d9af52b1c901461bbaeb4f8562f201e618550ae4a37414d94676098082acef2795607090294a392a8757b86f944f97bbf13dd8d8b002de4847836b1d980a32183b2856a3d772037358e2d16f7c3feaf3d802da7a1182bdd9fe5df25ece4024ae0c34aaad4a0701a18387b252f68ceadbfd060c250fb00773fff1d832d6d0899d83efec3a84630116aa995e5e44fc21624287c2ee9683b72d154c609296a3f11fcb1304e5e6f3b6bcce297469d873396f60cbe1dfe2c558ad08501d92bd17b8b3cff15587e336264f5aedfd0fe17d9223c3fa00dcb39541345b94728283cd0a10e28250097e1c776100d34306d00f8920abf67ba5b26b48cd1e6af8966ef222c112498ff9598ed1f174e99ed2f6ea405471edc4e75054f475dffddbec84743e85c593a1c46628006ad79395de94e1801cc3965eb717cbfd3eba99a3b7c47eb15f3d88872277b629fd4bca335e67d711eaa4e878aec799c13e6280c96fc80e025282318676d3eeccc5666f4ee824148d00634876117acdf09eed5a36776cb2ddec6d646d69267e8692159a5a18385adb40628ec9394e1904dd5c77edb53709171827697a3d8cfee655023658dca310b62fd2591f95d3aca05fed6f957411eed6516b48ca8661cde4b1ea320735112ef124e8dcc16da2631fff80fb18339fedaa4fc25f825b05c13ea05cacd7145236360fd02ab525ef933e7b293bde2c7d0be1ad1354a2365e3709fe65b758bf2fd9b8439b58a8e5be7d39d79b5bf5f62e22b287d13834b71c9de1bee2d49ffdcea9d92704d385f63373aa8b3a31f5057f91e64ba62b60bc82ba54a85eb78d9f873a58f4b504a4102013fd4a0c143a26da4110fb8a07aa41a01db58c19a2163c51c9f42ab79d2639eaf8b8034b7fefd185134c1260d3e89f5ba3f887f695b9cab"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc) (rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) (async) r6 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) getsockopt$inet6_buf(r4, 0x29, 0x23, &(0x7f0000000580)=""/4096, &(0x7f0000001580)=0x1000) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, &(0x7f0000000540)) (async, rerun: 32) r7 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0x20002078) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) (async) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x4, 0x0, @tick=0x80000000, {}, {0x0, 0x4}, @raw32={[0x0, 0x0, 0x8]}}], 0x1c) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r8, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) (async, rerun: 32) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x2, 0x0) (async, rerun: 32) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8a002, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r11 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x80601) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r11, 0x400454a4, &(0x7f0000000280)) (async) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYRES16=r12, @ANYRESHEX=r9, @ANYRES16=r10, @ANYRES8=r10, @ANYRES32=r12, @ANYRES64=r10, @ANYRES32]) 1.34815357s ago: executing program 3 (id=7822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008602"]) 1.326522356s ago: executing program 1 (id=7823): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xf, "012720dcfe14c639a500ba17162716"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="9f4b01"], 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b14, 0x0) 1.314221065s ago: executing program 2 (id=7824): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x84401, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xff, 0x400}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x3}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8010) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000006c0)={0x1, 0x0, 0xac1d}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x3}) close_range(r4, r4, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000011d000/0x2000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x7, 0x0, 0x0, 0x1c3}) 1.273640214s ago: executing program 0 (id=7825): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xfffffffe) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000000)={0x60, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x14) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 1.11744024s ago: executing program 3 (id=7826): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x8, 0x700, 0x8000, 0x1, {{0x5, 0x4, 0x0, 0x0, 0xffffffffffffff9c, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @loopback}}}}) r1 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf9, 0x80, 0xfffffffe, 0x172}) close_range(r1, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x9, "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"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000140), &(0x7f0000000180)=0x4) r6 = dup(r4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000240)) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000340)) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r8, 0x4018aee2, &(0x7f0000000000)) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000003c0)={0x1, r6}) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r5, @ANYBLOB="b0f4563aa426db99f48c0602d803a4ff3f970696238d1f61cfe6bad1a67ef40eaaf1b31563b340762372806141400133063ad06c88a0287635b1004b1e150a50d62ed3f506f4fe20907ccbd756e770a610400a9e8a9e2454fe8ba13c6cf1626ec66c1912eed2193c95564690dd7b8a6d3983864f8a26557ca46865553830e4b7904df5460695c9470811cc64090d4b332ac05e", @ANYRES32=r6, @ANYRES8=r2, @ANYRESHEX=r6, @ANYRES16=r9], 0x48) ioctl$BLKFINISHZONE(r6, 0x40101288, &(0x7f0000000000)={0x9, 0xffffffffffff2c8e}) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r10, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 687.936728ms ago: executing program 3 (id=7827): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0xfffffffffffffff9, 0x2, 0x4, 0x5, 0x7, 0xfffffffffffffffd, 0x9, 0x4, 0x6, 0x7, 0xfffffffffffffffd, 0x3ff, 0x1, 0x81}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000000c0)={0x0, r1, "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", "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"}) r2 = syz_open_dev$vivid(&(0x7f00000010c0), 0x0, 0x2) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x6) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000001100)={0x7, 0x0, [{0x3, 0x4, 0x1, 0x0, @adapter={0x65, 0x4, 0x4, 0x9, 0x3}}, {0x3, 0x1, 0x1, 0x0, @irqchip={0x8, 0x9}}, {0x80000001, 0x1, 0x1, 0x0, @msi={0x8, 0x70000000, 0x8, 0x8}}, {0x1, 0x1, 0x0, 0x0, @adapter={0xa, 0xc6e, 0xffffffffffffff81, 0x8, 0x1}}, {0xcb8, 0x5, 0x1, 0x0, @adapter={0xa4, 0x8, 0xd, 0x1, 0xa5db}}, {0xcc, 0x5, 0x1, 0x0, @sint={0x4, 0xfffffff8}}, {0x6, 0x2, 0x0, 0x0, @sint={0xd51, 0x311d}}]}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000001280), &(0x7f00000012c0)=@v1={0x1000000, [{0x18, 0xa00000}]}, 0xc, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) inotify_init1(0x80000) r4 = openat$procfs(0xffffff9c, &(0x7f0000001300)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x1d85) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000013c0)={'gre0\x00', &(0x7f0000001340)={'syztnl1\x00', 0x0, 0x8000, 0x7800, 0x1ff, 0x2, {{0x16, 0x4, 0x2, 0x2d, 0x58, 0x68, 0x0, 0x3f, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010100, {[@timestamp={0x44, 0x1c, 0xba, 0x0, 0x2, [0x0, 0x300, 0x9, 0x6c1d, 0x5, 0x5]}, @noop, @noop, @noop, @rr={0x7, 0x23, 0xec, [@broadcast, @empty, @empty, @remote, @rand_addr=0x64010101, @loopback, @private=0xa010100, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001480)={'erspan0\x00', &(0x7f0000001400)={'tunl0\x00', r5, 0x20, 0x20, 0x5, 0x7, {{0xc, 0x4, 0x1, 0x32, 0x30, 0x66, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x1d, [@dev={0xac, 0x14, 0x14, 0x3e}, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}]}}}}}) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000014c0)=0x104404) r6 = openat$tun(0xffffff9c, &(0x7f0000001500), 0x280000, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001540)={"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"}) syz_io_uring_setup(0x79ec, &(0x7f0000001940)={0x0, 0xdfbb, 0x4000, 0x1, 0x249, 0x0, r4}, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x10, r4, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000001a80)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f0000001a40), 0x1, 0x0, 0x0, {0x0, r9}}) io_setup(0x0, &(0x7f0000001ac0)=0x0) r11 = eventfd(0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c80)={r4, 0xffffffffffffffff}, 0x4) r13 = openat$sysfs(0xffffff9c, &(0x7f0000001dc0)='/sys/kernel/fscaps', 0x440000, 0x21) r14 = eventfd(0x10000) r15 = socket$rxrpc(0x21, 0x2, 0x2) r16 = eventfd(0x5) r17 = eventfd(0x10001) io_submit(r10, 0x6, &(0x7f0000002100)=[&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0xe56, r3, &(0x7f0000001b00), 0x0, 0x7, 0x0, 0x1}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x5, 0x6, r6, &(0x7f0000001b80)="5739b0fb7b73d4788c30890b591e1d744e9093ce70842a83723f794afb3b509f8360c1349fb5f1c48c860b6317d5694dbce07f96301041c8b0b56e2de64657a3f1e77cfaa36896cd0ecc4066798c8073b5ecf7d87b239beec8c706901597c68ca46d1ea3f0fece7fb1e587a8f7c4e842229619049bb795fed29ed8bafbb1992806fb8fcb3ccc7bfe7c566a4e1c3c7d892d7068b74078ae3145dd5f4b78bb1e457ff869b3281c92139c4bbdf54733b26e5a99f183369e06", 0xb7, 0x5, 0x0, 0x2, r11}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x8, 0x6, r12, &(0x7f0000001cc0)="65d0593061238e20b99d0fe7ca1729d09edfa9c706c992ed591274f609354b1e2982c8f546b8c72a6b7bcb3b253b20d01aabc9ba0df05dc595dc8f4ba7828b1016773a2d61447cc91f761afb64b69b1f86247c61750cb7e3bab8c6955709e2f571d8b25736167b01ddad594cb87b1bf0b48999c07f62a958ef11798489fc84c6169a79f6ca110d4e17bf9cee1856487b049e6bf8f5793d", 0x97, 0x200, 0x0, 0x7}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x1, 0xe, r13, &(0x7f0000001e00)="98c190869c117234f1babca702a3d2113b542a79f361a3a9a3315d852b96a5a7d7b6d8bbf05e505cf41d4ab31a4e2446476932a373d8617224cf786b969a17690d37b118a1b9d19932d26b0b8a138443e74399d36ce2b50b3d06d55f9732b26ec5c8cef2ec3693510877b392aae788452868becf2d4569adeab1c110842b9dd68e04d65f94dc5dacc9116352b18a507a6adde258119a3965021a2d8eefe7d4dc6151f2ce8537d5", 0xa7, 0x9, 0x0, 0x1, r14}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x2, 0x5, r15, &(0x7f0000001f00)="79bc73613b31f5fd3e2f989a5d625c971d78e9fa71467cc3256f14e92a6cd07c0b48213d9f2b7accd04302bb24ef2cdea2d98ffc62622274e87a51045719b475f2af7fe9299b9b10ad4828b9432374cd022310beb68d0ecdeab9559531b25456521f2487b45cd479ce057fbb736d3e4d568980d98b610081d47110ca18bcee9d83a8e76af858e1dbb3ac9fe19bc2c10954849c64aa38d8d721caa025550f33d5f8fee44857b1b88ba37284b04a850d0caab306df75bf581b1adcf5", 0xbb, 0x0, 0x0, 0x4, r16}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000002000)="be5166e78ad5d403f9c8b76bbd6ae21991d0254040d20ddb32fb060b8d4757374c7bb3e0987d87656a3bf6017eeb410b768d6615b7129037b2bb7dbf50a6cf65890fc0a8985ceb594c4b7aa99abfd126827dd821c74642c083e9ccdac9f4a68e314928cfba72bf217517c64dd412228cf3c2ebde68b85472b5ef4b008bad187d04f4da5ec9bd729447090225a6834c1e4235e1fe27518a9b56de0d7258537797737eb168a5e1", 0xa6, 0x1, 0x0, 0x2, r17}]) 290.222981ms ago: executing program 4 (id=7828): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x6, 'bridge0\x00', {0x2}, 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000300010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) 167.863164ms ago: executing program 3 (id=7829): syz_open_dev$evdev(0x0, 0xfffffffd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) (fail_nth: 3) 0s ago: executing program 4 (id=7830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x20004801) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x80, 0x0, 0xb47, 0xa, 0x8, 0x80000000, 0x3}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000140)={0x0, 0x31324d4e, 0x2, @discrete={0x1, 0x401}}) r4 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xcb\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88{\x83\xb0r\xd51\xeb\x88\xacC\xa8\xab\xa5\x06\x85GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97\xc6Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0', 0x2) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa, 0x2012, r4, 0x0) lseek(r4, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000b00)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040801}}], 0x1, 0x4000) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r7, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r8 = mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x0, 0x0) mq_getsetattr(r8, 0x0, &(0x7f0000000280)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): ][ T5832] dvb-usb: error while querying for an remote control event. [ 2029.189508][T16479] m920x_read = error: -19 [ 2029.271473][T16479] dvb-usb: error while querying for an remote control event. [ 2029.309527][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 2029.321239][ T5920] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2029.330065][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2029.359329][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2029.369408][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2029.399309][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2029.422947][T32140] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2029.450011][T16479] m920x_read = error: -19 [ 2029.459298][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2029.469587][T16479] dvb-usb: error while querying for an remote control event. [ 2029.487503][T16479] m920x_read = error: -19 [ 2029.489275][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.511817][T16479] dvb-usb: error while querying for an remote control event. [ 2029.589472][T16479] m920x_read = error: -19 [ 2029.593932][T16479] dvb-usb: error while querying for an remote control event. [ 2029.660751][T16479] m920x_read = error: -19 [ 2029.665362][T16479] dvb-usb: error while querying for an remote control event. [ 2029.674961][T32140] fuse: Bad value for 'fd' [ 2029.739993][T16479] m920x_read = error: -19 [ 2029.758686][T16479] dvb-usb: error while querying for an remote control event. [ 2029.809592][T16479] m920x_read = error: -19 [ 2029.814156][T16479] dvb-usb: error while querying for an remote control event. [ 2029.911767][T16479] m920x_read = error: -19 [ 2029.938940][T16479] dvb-usb: error while querying for an remote control event. [ 2029.950453][T27633] m920x_read = error: -19 [ 2029.954918][T27633] dvb-usb: error while querying for an remote control event. [ 2030.079456][T27633] m920x_read = error: -19 [ 2030.084290][T27633] dvb-usb: error while querying for an remote control event. [ 2030.092713][T16479] m920x_read = error: -19 [ 2030.097238][T16479] dvb-usb: error while querying for an remote control event. [ 2030.229573][T16479] m920x_read = error: -19 [ 2030.234366][T16479] dvb-usb: error while querying for an remote control event. [ 2030.242224][T27633] m920x_read = error: -19 [ 2030.273648][T27633] dvb-usb: error while querying for an remote control event. [ 2030.299999][T32155] usbtmc 5-1:16.0: simple control status returned 0 [ 2030.459904][T16479] m920x_read = error: -19 [ 2030.469389][T16479] dvb-usb: error while querying for an remote control event. [ 2030.490079][T32161] FAULT_INJECTION: forcing a failure. [ 2030.490079][T32161] name failslab, interval 1, probability 0, space 0, times 0 [ 2030.505405][ T5920] usb 5-1: USB disconnect, device number 21 [ 2030.549367][T32161] CPU: 1 UID: 0 PID: 32161 Comm: syz.2.7671 Not tainted syzkaller #0 PREEMPT(full) [ 2030.549398][T32161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2030.549413][T32161] Call Trace: [ 2030.549422][T32161] [ 2030.549433][T32161] dump_stack_lvl+0x189/0x250 [ 2030.549466][T32161] ? __pfx____ratelimit+0x10/0x10 [ 2030.549501][T32161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2030.549530][T32161] ? __pfx__printk+0x10/0x10 [ 2030.549560][T32161] ? __pfx___might_resched+0x10/0x10 [ 2030.549590][T32161] ? fs_reclaim_acquire+0x7d/0x100 [ 2030.549623][T32161] should_fail_ex+0x414/0x560 [ 2030.549662][T32161] should_failslab+0xa8/0x100 [ 2030.549693][T32161] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2030.549718][T32161] ? __alloc_skb+0x112/0x2d0 [ 2030.549747][T32161] ? netlink_autobind+0xdb/0x300 [ 2030.549786][T32161] __alloc_skb+0x112/0x2d0 [ 2030.549821][T32161] netlink_sendmsg+0x5c6/0xb30 [ 2030.549863][T32161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2030.549898][T32161] ? __import_iovec+0x5d4/0x7f0 [ 2030.549925][T32161] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2030.549952][T32161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2030.549980][T32161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2030.550012][T32161] __sock_sendmsg+0x21c/0x270 [ 2030.550042][T32161] ____sys_sendmsg+0x505/0x830 [ 2030.550083][T32161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2030.550134][T32161] ___sys_sendmsg+0x21f/0x2a0 [ 2030.550172][T32161] ? __pfx____sys_sendmsg+0x10/0x10 [ 2030.550257][T32161] ? __fget_files+0x2a/0x420 [ 2030.550284][T32161] ? __fget_files+0x3a0/0x420 [ 2030.550322][T32161] __sys_sendmsg+0x164/0x220 [ 2030.550357][T32161] ? __pfx___sys_sendmsg+0x10/0x10 [ 2030.550400][T32161] ? __pfx_ksys_write+0x10/0x10 [ 2030.550427][T32161] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2030.550451][T32161] ? lockdep_hardirqs_on+0x9c/0x150 [ 2030.550475][T32161] __do_fast_syscall_32+0xb6/0x2b0 [ 2030.550500][T32161] ? lockdep_hardirqs_on+0x9c/0x150 [ 2030.550531][T32161] do_fast_syscall_32+0x34/0x80 [ 2030.550555][T32161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2030.550581][T32161] RIP: 0023:0xf7f42539 [ 2030.550600][T32161] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2030.550619][T32161] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2030.550641][T32161] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001080 [ 2030.550656][T32161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2030.550688][T32161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2030.550701][T32161] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2030.550715][T32161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2030.550754][T32161] [ 2030.880642][T27633] m920x_read = error: -19 [ 2030.885074][T27633] dvb-usb: error while querying for an remote control event. [ 2030.893091][T27633] m920x_read = error: -19 [ 2030.897478][T27633] dvb-usb: error while querying for an remote control event. [ 2030.999401][T16479] m920x_read = error: -19 [ 2031.003847][T16479] dvb-usb: error while querying for an remote control event. [ 2031.011760][T16479] m920x_read = error: -19 [ 2031.016131][T16479] dvb-usb: error while querying for an remote control event. [ 2031.119372][ T5832] m920x_read = error: -19 [ 2031.123771][ T5832] dvb-usb: error while querying for an remote control event. [ 2031.131297][ T5832] m920x_read = error: -19 [ 2031.135678][ T5832] dvb-usb: error while querying for an remote control event. [ 2031.149354][T16479] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2031.197389][ T5918] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 2031.203929][ T5918] cdc_ncm 4-1:1.1: bind() failure [ 2031.228349][ T5918] usb 4-1: USB disconnect, device number 121 [ 2031.255310][T29400] m920x_read = error: -19 [ 2031.271345][T29400] dvb-usb: error while querying for an remote control event. [ 2031.295653][T29400] m920x_read = error: -19 [ 2031.303218][T29400] dvb-usb: error while querying for an remote control event. [ 2031.310753][T16479] usb 3-1: Using ep0 maxpacket: 8 [ 2031.324033][T16479] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 2031.343584][T16479] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2031.372424][T16479] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.389842][T16479] usb 3-1: Product: syz [ 2031.394232][T16479] usb 3-1: Manufacturer: syz [ 2031.398855][T16479] usb 3-1: SerialNumber: syz [ 2031.404679][T29400] m920x_read = error: -19 [ 2031.409076][T29400] dvb-usb: error while querying for an remote control event. [ 2031.421958][T16479] usb 3-1: config 0 descriptor?? [ 2031.454540][T16479] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2031.464187][T16479] usb 3-1: setting power ON [ 2031.468759][T16479] dvb-usb: bulk message failed: -22 (2/0) [ 2031.479368][T29400] m920x_read = error: -19 [ 2031.485583][T29400] dvb-usb: error while querying for an remote control event. [ 2031.493377][T16479] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2031.524923][T16479] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2031.549636][T16479] usb 3-1: media controller created [ 2031.559375][ T5918] m920x_read = error: -19 [ 2031.564299][ T5918] dvb-usb: error while querying for an remote control event. [ 2031.609516][T29400] m920x_read = error: -19 [ 2031.613959][T29400] dvb-usb: error while querying for an remote control event. [ 2031.637749][T16479] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2031.652696][T32164] fuse: Unknown parameter 'rootcontext' [ 2031.674144][T16479] usb 3-1: selecting invalid altsetting 6 [ 2031.690249][T29400] m920x_read = error: -19 [ 2031.694718][T29400] dvb-usb: error while querying for an remote control event. [ 2031.718638][T16479] usb 3-1: digital interface selection failed (-22) [ 2031.735652][T16479] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2031.749436][T29400] m920x_read = error: -19 [ 2031.755364][T29400] dvb-usb: error while querying for an remote control event. [ 2031.770121][T16479] usb 3-1: setting power OFF [ 2031.779072][T16479] dvb-usb: bulk message failed: -22 (2/0) [ 2031.821833][T16479] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2031.834934][T29400] m920x_read = error: -19 [ 2031.851532][T29400] dvb-usb: error while querying for an remote control event. [ 2031.859050][T16479] (NULL device *): no alternate interface [ 2031.888375][T27633] m920x_read = error: -19 [ 2031.899903][T27633] dvb-usb: error while querying for an remote control event. [ 2031.975792][T16479] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2031.990223][T16479] m920x_read = error: -19 [ 2032.003916][T16479] dvb-usb: error while querying for an remote control event. [ 2032.011716][T29400] m920x_read = error: -19 [ 2032.016142][T29400] dvb-usb: error while querying for an remote control event. [ 2032.020010][T16499] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2032.140324][T29400] m920x_read = error: -19 [ 2032.144841][T29400] dvb-usb: error while querying for an remote control event. [ 2032.152663][T16479] m920x_read = error: -19 [ 2032.165144][T16479] dvb-usb: error while querying for an remote control event. [ 2032.189037][T16499] usb 4-1: Using ep0 maxpacket: 8 [ 2032.212731][T16499] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2032.222176][T16499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.232216][T16499] usb 4-1: Product: syz [ 2032.244338][T16499] usb 4-1: Manufacturer: syz [ 2032.255056][T16499] usb 4-1: SerialNumber: syz [ 2032.271432][T16499] usb 4-1: config 0 descriptor?? [ 2032.287968][T16499] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2032.292605][T16479] m920x_read = error: -19 [ 2032.297954][T16499] pctv452e: pctv452e_power_ctrl: 1 [ 2032.297954][T16499] [ 2032.301107][T16479] dvb-usb: error while querying for an remote control event. [ 2032.308737][T16499] usb 4-1: selecting invalid altsetting 3 [ 2032.319383][T29400] m920x_read = error: -19 [ 2032.405800][T16499] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2032.405800][T16499] [ 2032.406831][T29400] dvb-usb: error while querying for an remote control event. [ 2032.481626][T16499] dvb-usb: bulk message failed: -22 (5/0) [ 2032.600045][T29400] m920x_read = error: -19 [ 2032.604942][T29400] dvb-usb: error while querying for an remote control event. [ 2032.605399][T16499] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2032.613101][T16479] m920x_read = error: -19 [ 2032.626808][T16479] dvb-usb: error while querying for an remote control event. [ 2032.635126][T16499] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2032.643678][T16499] usb 4-1: media controller created [ 2032.656766][T16499] dvb-usb: bulk message failed: -22 (8/0) [ 2032.673265][T16499] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2032.703250][T16499] dvb-usb: MAC address reading failed. [ 2032.740028][T29400] m920x_read = error: -19 [ 2032.747651][T29400] dvb-usb: error while querying for an remote control event. [ 2032.755266][T27633] m920x_read = error: -19 [ 2032.759882][T27633] dvb-usb: error while querying for an remote control event. [ 2032.869385][T29400] m920x_read = error: -19 [ 2032.873830][T29400] dvb-usb: error while querying for an remote control event. [ 2032.881685][T16479] m920x_read = error: -19 [ 2032.886116][T16479] dvb-usb: error while querying for an remote control event. [ 2032.909398][T16499] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2033.035044][T29400] m920x_read = error: -19 [ 2033.060323][T29400] dvb-usb: error while querying for an remote control event. [ 2033.107700][T29400] m920x_read = error: -19 [ 2033.134363][T29400] dvb-usb: error while querying for an remote control event. [ 2033.137613][T16499] DVB: Unable to find symbol stb0899_attach() [ 2033.177518][T16499] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2033.219495][T29400] m920x_read = error: -19 [ 2033.227501][T29400] dvb-usb: error while querying for an remote control event. [ 2033.299493][T29400] m920x_read = error: -19 [ 2033.304039][T29400] dvb-usb: error while querying for an remote control event. [ 2033.409426][T29400] m920x_read = error: -19 [ 2033.414013][T29400] dvb-usb: error while querying for an remote control event. [ 2033.439406][T16479] m920x_read = error: -19 [ 2033.443931][T16479] dvb-usb: error while querying for an remote control event. [ 2033.521721][T16499] rc_core: IR keymap rc-tt-1500 not found [ 2033.566771][T16499] Registered IR keymap rc-empty [ 2033.589379][T16479] m920x_read = error: -19 [ 2033.596643][T16479] dvb-usb: error while querying for an remote control event. [ 2033.601100][T16499] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 2033.617347][T29400] m920x_read = error: -19 [ 2033.711552][T16499] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input115 [ 2033.732622][T29400] dvb-usb: error while querying for an remote control event. [ 2033.768395][T16499] dvb-usb: schedule remote query interval to 100 msecs. [ 2033.850433][T29400] m920x_read = error: -19 [ 2033.865137][T16499] pctv452e: pctv452e_power_ctrl: 0 [ 2033.865137][T16499] [ 2033.875362][T29400] dvb-usb: error while querying for an remote control event. [ 2033.889689][T16479] m920x_read = error: -19 [ 2033.899308][T16479] dvb-usb: error while querying for an remote control event. [ 2033.917017][T16499] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2033.957041][T32207] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.964313][T32207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2033.969949][T25019] dvb-usb: bulk message failed: -22 (4/0) [ 2034.032505][T16499] usb 4-1: USB disconnect, device number 122 [ 2034.049644][T25019] dvb-usb: error -22 while querying for an remote control event. [ 2034.061204][T29400] m920x_read = error: -19 [ 2034.065617][T29400] dvb-usb: error while querying for an remote control event. [ 2034.073228][T27633] m920x_read = error: -19 [ 2034.078580][T25019] usb 3-1: USB disconnect, device number 45 [ 2034.108990][T27633] dvb-usb: error while querying for an remote control event. [ 2034.239400][T16479] m920x_read = error: -19 [ 2034.249141][T16479] dvb-usb: error while querying for an remote control event. [ 2034.259383][T29400] m920x_read = error: -19 [ 2034.263778][T29400] dvb-usb: error while querying for an remote control event. [ 2034.312411][ C1] Unknown status report in ack skb [ 2034.389797][T29400] m920x_read = error: -19 [ 2034.394667][T29400] dvb-usb: error while querying for an remote control event. [ 2034.395193][T16499] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2034.419678][T16479] m920x_read = error: -19 [ 2034.448263][T16479] dvb-usb: error while querying for an remote control event. [ 2034.489591][ T30] audit: type=1326 audit(1760303973.763:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.4.7685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2034.522252][T32215] fuse: Unknown parameter 'user_i00000000000000000000' [ 2034.576397][T24683] Bluetooth: hci2: command 0x0406 tx timeout [ 2034.583597][ T30] audit: type=1326 audit(1760303973.763:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.4.7685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2034.619438][T16479] m920x_read = error: -19 [ 2034.623878][T16479] dvb-usb: error while querying for an remote control event. [ 2034.660067][T29400] m920x_read = error: -19 [ 2034.664488][T29400] dvb-usb: error while querying for an remote control event. [ 2034.773562][ T30] audit: type=1326 audit(1760303973.763:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.4.7685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2034.800854][T29400] m920x_read = error: -19 [ 2034.805231][T29400] dvb-usb: error while querying for an remote control event. [ 2034.813043][T16479] m920x_read = error: -19 [ 2034.842537][ T30] audit: type=1326 audit(1760303973.763:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.4.7685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2034.850956][T16479] dvb-usb: error while querying for an remote control event. [ 2035.010179][T29400] m920x_read = error: -19 [ 2035.015604][ T30] audit: type=1326 audit(1760303973.763:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.4.7685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2035.015641][T29400] dvb-usb: error while querying for an remote control event. [ 2035.099674][ T30] audit: type=1326 audit(1760303973.783:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.4.7685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=118 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2035.130195][T29400] m920x_read = error: -19 [ 2035.158538][T29400] dvb-usb: error while querying for an remote control event. [ 2035.186742][ T30] audit: type=1326 audit(1760303973.783:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.4.7685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2035.190212][T16479] m920x_read = error: -19 [ 2035.294805][T16479] dvb-usb: error while querying for an remote control event. [ 2035.339462][T16479] m920x_read = error: -19 [ 2035.343862][T16479] dvb-usb: error while querying for an remote control event. [ 2035.422319][ T5918] m920x_read = error: -19 [ 2035.426820][ T5918] dvb-usb: error while querying for an remote control event. [ 2035.477152][ T30] audit: type=1326 audit(1760303973.783:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.4.7685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2035.550584][T16479] m920x_read = error: -19 [ 2035.555470][T16479] dvb-usb: error while querying for an remote control event. [ 2035.563760][ T5918] m920x_read = error: -19 [ 2035.573919][ T5918] dvb-usb: error while querying for an remote control event. [ 2035.613070][ T30] audit: type=1326 audit(1760303973.783:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.4.7685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2035.675162][ T30] audit: type=1326 audit(1760303973.783:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.4.7685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2035.701770][ T5918] m920x_read = error: -19 [ 2035.706205][ T5918] dvb-usb: error while querying for an remote control event. [ 2035.714121][T16479] m920x_read = error: -19 [ 2035.718503][T16479] dvb-usb: error while querying for an remote control event. [ 2035.859538][ T5918] m920x_read = error: -19 [ 2035.863986][ T5918] dvb-usb: error while querying for an remote control event. [ 2035.872299][T16479] m920x_read = error: -19 [ 2035.876942][T16479] dvb-usb: error while querying for an remote control event. [ 2035.989448][T16479] m920x_read = error: -19 [ 2035.993879][T16479] dvb-usb: error while querying for an remote control event. [ 2036.001697][ T5918] m920x_read = error: -19 [ 2036.007508][ T5918] dvb-usb: error while querying for an remote control event. [ 2036.082752][T32236] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2036.479559][ T5918] m920x_read = error: -19 [ 2036.488570][ T5918] dvb-usb: error while querying for an remote control event. [ 2036.514501][ T5918] m920x_read = error: -19 [ 2036.534717][ T5918] dvb-usb: error while querying for an remote control event. [ 2036.640054][ T5918] m920x_read = error: -19 [ 2036.654721][ T5918] dvb-usb: error while querying for an remote control event. [ 2036.662606][T16479] m920x_read = error: -19 [ 2036.668152][T16479] dvb-usb: error while querying for an remote control event. [ 2037.014490][ T5918] m920x_read = error: -19 [ 2037.014776][T32241] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2037.043426][ T5918] dvb-usb: error while querying for an remote control event. [ 2037.079416][T16479] m920x_read = error: -19 [ 2037.083949][T16479] dvb-usb: error while querying for an remote control event. [ 2037.164451][T16479] m920x_read = error: -19 [ 2037.171539][T16479] dvb-usb: error while querying for an remote control event. [ 2037.239383][T16479] m920x_read = error: -19 [ 2037.243929][T16479] dvb-usb: error while querying for an remote control event. [ 2037.379937][ T5918] m920x_read = error: -19 [ 2037.425013][ T5918] dvb-usb: error while querying for an remote control event. [ 2037.559431][T16479] m920x_read = error: -19 [ 2037.563840][T16479] dvb-usb: error while querying for an remote control event. [ 2037.579507][ T5918] m920x_read = error: -19 [ 2037.589548][ T5918] dvb-usb: error while querying for an remote control event. [ 2037.778060][ T5918] m920x_read = error: -19 [ 2037.794144][ T5918] dvb-usb: error while querying for an remote control event. [ 2037.804557][T16479] m920x_read = error: -19 [ 2037.808970][T16479] dvb-usb: error while querying for an remote control event. [ 2037.904741][T32257] FAULT_INJECTION: forcing a failure. [ 2037.904741][T32257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2037.960744][T29400] m920x_read = error: -19 [ 2037.965416][T29400] dvb-usb: error while querying for an remote control event. [ 2037.979299][T16479] m920x_read = error: -19 [ 2037.985694][T32257] CPU: 1 UID: 0 PID: 32257 Comm: syz.3.7698 Not tainted syzkaller #0 PREEMPT(full) [ 2037.985720][T32257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2037.985734][T32257] Call Trace: [ 2037.985742][T32257] [ 2037.985759][T32257] dump_stack_lvl+0x189/0x250 [ 2037.985788][T32257] ? __pfx____ratelimit+0x10/0x10 [ 2037.985822][T32257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2037.985845][T32257] ? __pfx__printk+0x10/0x10 [ 2037.985886][T32257] ? __might_fault+0xb0/0x130 [ 2037.985922][T32257] should_fail_ex+0x414/0x560 [ 2037.985962][T32257] _copy_from_iter+0x1de/0x1790 [ 2037.985995][T32257] ? rcu_is_watching+0x15/0xb0 [ 2037.986032][T32257] ? kmalloc_reserve+0xbd/0x290 [ 2037.986064][T32257] ? __pfx__copy_from_iter+0x10/0x10 [ 2037.986093][T32257] ? __build_skb_around+0x262/0x3f0 [ 2037.986128][T32257] ? netlink_sendmsg+0x642/0xb30 [ 2037.986158][T32257] ? skb_put+0x11b/0x210 [ 2037.986193][T32257] netlink_sendmsg+0x6b2/0xb30 [ 2037.986235][T32257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2037.986271][T32257] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2037.986298][T32257] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2037.986326][T32257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2037.986359][T32257] __sock_sendmsg+0x21c/0x270 [ 2037.986389][T32257] sock_write_iter+0x279/0x360 [ 2037.986417][T32257] ? __pfx_sock_write_iter+0x10/0x10 [ 2037.986465][T32257] do_iter_readv_writev+0x623/0x8c0 [ 2037.986499][T32257] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2037.986524][T32257] ? common_file_perm+0x1b5/0x230 [ 2037.986553][T32257] ? bpf_lsm_file_permission+0x9/0x20 [ 2037.986583][T32257] ? security_file_permission+0x75/0x290 [ 2037.986617][T32257] ? rw_verify_area+0x255/0x4d0 [ 2037.986644][T32257] vfs_writev+0x31a/0x960 [ 2037.986678][T32257] ? __lock_acquire+0xab9/0xd20 [ 2037.986710][T32257] ? __pfx_vfs_writev+0x10/0x10 [ 2037.986765][T32257] ? __fget_files+0x2a/0x420 [ 2037.986797][T32257] ? __fget_files+0x3a0/0x420 [ 2037.986833][T32257] ? __fget_files+0x2a/0x420 [ 2037.986886][T32257] do_writev+0x14d/0x2d0 [ 2037.986919][T32257] ? __pfx_do_writev+0x10/0x10 [ 2037.986953][T32257] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2037.986979][T32257] ? lockdep_hardirqs_on+0x9c/0x150 [ 2037.987004][T32257] __do_fast_syscall_32+0xb6/0x2b0 [ 2037.987029][T32257] ? lockdep_hardirqs_on+0x9c/0x150 [ 2037.987055][T32257] do_fast_syscall_32+0x34/0x80 [ 2037.987091][T32257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2037.987116][T32257] RIP: 0023:0xf7f74539 [ 2037.987134][T32257] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2037.987152][T32257] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 2037.987174][T32257] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 2037.987189][T32257] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2037.987202][T32257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2037.987214][T32257] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2037.987226][T32257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2037.987257][T32257] [ 2037.987522][T16479] dvb-usb: error while querying for an remote control event. [ 2038.429816][ T5918] m920x_read = error: -19 [ 2038.434775][ T5918] dvb-usb: error while querying for an remote control event. [ 2038.609568][ T5918] m920x_read = error: -19 [ 2038.614005][ T5918] dvb-usb: error while querying for an remote control event. [ 2038.749446][ T5918] m920x_read = error: -19 [ 2038.753872][ T5918] dvb-usb: error while querying for an remote control event. [ 2038.869458][T16479] m920x_read = error: -19 [ 2038.873876][T16479] dvb-usb: error while querying for an remote control event. [ 2038.909402][T16479] m920x_read = error: -19 [ 2038.913809][T16479] dvb-usb: error while querying for an remote control event. [ 2038.980283][ T5920] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 2039.194487][T16479] m920x_read = error: -19 [ 2039.199106][T16479] dvb-usb: error while querying for an remote control event. [ 2039.316912][T16479] m920x_read = error: -19 [ 2039.317002][ T5920] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2039.329758][T16479] dvb-usb: error while querying for an remote control event. [ 2039.409372][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.419525][T16479] m920x_read = error: -19 [ 2039.454729][T16479] dvb-usb: error while querying for an remote control event. [ 2039.462670][T29400] m920x_read = error: -19 [ 2039.467160][T29400] dvb-usb: error while querying for an remote control event. [ 2039.493188][ T5920] usb 4-1: Product: syz [ 2039.550935][ T5920] usb 4-1: Manufacturer: syz [ 2039.585900][ T5920] usb 4-1: SerialNumber: syz [ 2039.589464][T16479] m920x_read = error: -19 [ 2039.595084][ T5920] usb 4-1: config 0 descriptor?? [ 2039.767585][T16479] dvb-usb: error while querying for an remote control event. [ 2039.931364][ T5920] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2039.949429][T29400] m920x_read = error: -19 [ 2039.953850][T29400] dvb-usb: error while querying for an remote control event. [ 2040.080425][T29400] m920x_read = error: -19 [ 2040.105196][T29400] dvb-usb: error while querying for an remote control event. [ 2040.159886][T29400] m920x_read = error: -19 [ 2040.164301][T29400] dvb-usb: error while querying for an remote control event. [ 2040.259403][T29400] m920x_read = error: -19 [ 2040.263813][T29400] dvb-usb: error while querying for an remote control event. [ 2040.339559][T29400] m920x_read = error: -19 [ 2040.354247][T29400] dvb-usb: error while querying for an remote control event. [ 2040.439563][T29400] m920x_read = error: -19 [ 2040.444031][T29400] dvb-usb: error while querying for an remote control event. [ 2040.490210][T29400] m920x_read = error: -19 [ 2040.509600][T29400] dvb-usb: error while querying for an remote control event. [ 2040.596500][T29400] m920x_read = error: -19 [ 2040.616315][T29400] dvb-usb: error while querying for an remote control event. [ 2040.639598][T29400] m920x_read = error: -19 [ 2040.644033][T29400] dvb-usb: error while querying for an remote control event. [ 2040.739425][T29400] m920x_read = error: -19 [ 2040.750997][T29400] dvb-usb: error while querying for an remote control event. [ 2040.789362][T29400] m920x_read = error: -19 [ 2040.812020][T29400] dvb-usb: error while querying for an remote control event. [ 2040.889549][T29400] m920x_read = error: -19 [ 2040.911183][T29400] dvb-usb: error while querying for an remote control event. [ 2040.965769][T29400] m920x_read = error: -19 [ 2040.992478][T29400] dvb-usb: error while querying for an remote control event. [ 2041.006493][T32278] vhci_hcd vhci_hcd.0: port 0 already used [ 2041.040436][T32278] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2 [ 2041.050388][T32278] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits [ 2041.075903][T29400] m920x_read = error: -19 [ 2041.080668][T29400] dvb-usb: error while querying for an remote control event. [ 2041.207565][T29400] m920x_read = error: -19 [ 2041.216034][T29400] dvb-usb: error while querying for an remote control event. [ 2041.223708][T27633] m920x_read = error: -19 [ 2041.228332][T27633] dvb-usb: error while querying for an remote control event. [ 2041.434168][ T5920] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2041.999430][T29400] m920x_read = error: -19 [ 2042.018895][T29400] dvb-usb: error while querying for an remote control event. [ 2042.026963][T27633] m920x_read = error: -19 [ 2042.028772][ T5920] usb 4-1: USB disconnect, device number 123 [ 2042.060157][T27633] dvb-usb: error while querying for an remote control event. [ 2042.099720][T32290] FAULT_INJECTION: forcing a failure. [ 2042.099720][T32290] name failslab, interval 1, probability 0, space 0, times 0 [ 2042.114394][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 2042.114409][ T30] audit: type=1326 audit(1760303981.413:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.4.7707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2042.142675][ C1] vkms_vblank_simulate: vblank timer overrun [ 2042.151088][T32290] CPU: 1 UID: 0 PID: 32290 Comm: syz.4.7707 Not tainted syzkaller #0 PREEMPT(full) [ 2042.151117][T32290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2042.151132][T32290] Call Trace: [ 2042.151141][T32290] [ 2042.151150][T32290] dump_stack_lvl+0x189/0x250 [ 2042.151179][T32290] ? __pfx____ratelimit+0x10/0x10 [ 2042.151214][T32290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2042.151238][T32290] ? __pfx__printk+0x10/0x10 [ 2042.151267][T32290] ? __pfx___might_resched+0x10/0x10 [ 2042.151297][T32290] ? fs_reclaim_acquire+0x7d/0x100 [ 2042.151329][T32290] should_fail_ex+0x414/0x560 [ 2042.151369][T32290] should_failslab+0xa8/0x100 [ 2042.151400][T32290] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2042.151425][T32290] ? __alloc_skb+0x112/0x2d0 [ 2042.151454][T32290] ? rcu_is_watching+0x15/0xb0 [ 2042.151491][T32290] __alloc_skb+0x112/0x2d0 [ 2042.151526][T32290] audit_log_start+0x1ad/0xa20 [ 2042.151555][T32290] ? __pfx_audit_log_start+0x10/0x10 [ 2042.151588][T32290] ? __pfx___cant_migrate+0x10/0x10 [ 2042.151626][T32290] audit_seccomp+0x64/0x190 [ 2042.151645][T32290] ? clear_bhb_loop+0x60/0xb0 [ 2042.151667][T32290] ? clear_bhb_loop+0xe/0xb0 [ 2042.151713][T32290] __seccomp_filter+0xce4/0x1e10 [ 2042.151768][T32290] ? __pfx___seccomp_filter+0x10/0x10 [ 2042.151801][T32290] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2042.151826][T32290] ? __pfx_vfs_write+0x10/0x10 [ 2042.151854][T32290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2042.151883][T32290] ? __fget_files+0x3a0/0x420 [ 2042.151940][T32290] ? __pfx_ksys_write+0x10/0x10 [ 2042.151965][T32290] ? __secure_computing+0xe2/0x2a0 [ 2042.152002][T32290] syscall_trace_enter+0xaa/0x160 [ 2042.152034][T32290] __do_fast_syscall_32+0x99/0x2b0 [ 2042.152067][T32290] do_fast_syscall_32+0x34/0x80 [ 2042.152091][T32290] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2042.152122][T32290] RIP: 0023:0xf7f42539 [ 2042.152141][T32290] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2042.152161][T32290] RSP: 002b:00000000f53f455c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2042.152184][T32290] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240 [ 2042.152199][T32290] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2042.152213][T32290] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2042.152226][T32290] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2042.152239][T32290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2042.152271][T32290] [ 2042.152368][T32290] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 2042.432305][T27633] m920x_read = error: -19 [ 2042.436694][T27633] dvb-usb: error while querying for an remote control event. [ 2042.519460][T27633] m920x_read = error: -19 [ 2042.523923][T27633] dvb-usb: error while querying for an remote control event. [ 2042.548866][ T30] audit: type=1326 audit(1760303981.413:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.4.7707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2042.620088][T27633] m920x_read = error: -19 [ 2042.638537][T27633] dvb-usb: error while querying for an remote control event. [ 2042.653261][T32298] tipc: Enabled bearer , priority 0 [ 2042.671034][T32298] syzkaller0: entered promiscuous mode [ 2042.676533][T32298] syzkaller0: entered allmulticast mode [ 2042.689913][ T30] audit: type=1326 audit(1760303981.413:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.4.7707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2042.719529][T27633] m920x_read = error: -19 [ 2042.724060][T27633] dvb-usb: error while querying for an remote control event. [ 2042.738224][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.740289][T32290] audit: out of memory in audit_log_start [ 2042.760754][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.770662][ T30] audit: type=1326 audit(1760303981.413:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.4.7707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2042.792783][ C1] vkms_vblank_simulate: vblank timer overrun [ 2042.799024][T27633] m920x_read = error: -19 [ 2042.804480][T32303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7710'. [ 2042.814173][T27633] dvb-usb: error while querying for an remote control event. [ 2042.836889][ T30] audit: type=1326 audit(1760303981.413:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.4.7707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2042.859058][ C1] vkms_vblank_simulate: vblank timer overrun [ 2042.869398][T27633] m920x_read = error: -19 [ 2042.873774][T27633] dvb-usb: error while querying for an remote control event. [ 2042.884897][T32306] vivid-000: ================= START STATUS ================= [ 2042.908241][T32306] vivid-000: Test Pattern: 75% Colorbar [ 2042.949489][T16479] m920x_read = error: -19 [ 2042.973211][T32305] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2042.985395][T32306] vivid-000: Fill Percentage of Frame: 100 [ 2043.030030][T16479] dvb-usb: error while querying for an remote control event. [ 2043.041986][T32306] vivid-000: Horizontal Movement: No Movement [ 2043.051293][T32306] vivid-000: Vertical Movement: Move Down [ 2043.057255][T32306] vivid-000: OSD Text Mode: All [ 2043.063383][T32306] vivid-000: Show Border: false [ 2043.067317][ T30] audit: type=1326 audit(1760303981.423:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.4.7707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2043.094682][T32306] [ 2043.097075][T32306] vivid-000: Show Square: false [ 2043.118824][T32306] vivid-000: Sensor Flipped Horizontally: false [ 2043.144283][T32306] vivid-000: Sensor Flipped Vertically: false [ 2043.149586][T27633] m920x_read = error: -19 [ 2043.165582][T16479] m920x_read = error: -19 [ 2043.167149][T32298] tipc: Resetting bearer [ 2043.204334][T32306] vivid-000: Insert SAV Code in Image: false [ 2043.220941][T16479] dvb-usb: error while querying for an remote control event. [ 2043.229139][T32306] vivid-000: Insert EAV Code in Image: false [ 2043.264372][T32306] vivid-000: Insert Video Guard Band: false [ 2043.271589][T27633] dvb-usb: error while querying for an remote control event. [ 2043.290612][ T30] audit: type=1326 audit(1760303981.423:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.4.7707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2043.313550][ T30] audit: type=1326 audit(1760303981.423:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32287 comm="syz.4.7707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2043.337062][T32306] vivid-000: Reduced Framerate: false [ 2043.359472][T27633] m920x_read = error: -19 [ 2043.364066][T27633] dvb-usb: error while querying for an remote control event. [ 2043.376226][T32306] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2043.392349][T32306] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 2043.397276][T32291] tipc: Resetting bearer [ 2043.413003][T32306] [ 2043.424771][T27633] m920x_read = error: -19 [ 2043.431189][T32306] vivid-000: Enable Capture Cropping: [ 2043.431222][T27633] dvb-usb: error while querying for an remote control event. [ 2043.444081][T32306] true [ 2043.446972][T32306] vivid-000: Enable Capture Composing: false [ 2043.471190][T32306] vivid-000: Enable Capture Scaler: true [ 2043.477043][T32306] vivid-000: Timestamp Source: End of Frame [ 2043.496012][T29400] m920x_read = error: -19 [ 2043.504510][T29400] dvb-usb: error while querying for an remote control event. [ 2043.505286][T32291] tipc: Disabling bearer [ 2043.519348][T32306] vivid-000: Colorspace: sRGB [ 2043.556725][T32306] vivid-000: Transfer Function: Default [ 2043.568755][T32306] vivid-000: Y'CbCr Encoding: Default [ 2043.679987][T32306] vivid-000: HSV Encoding: Hue 0-179 [ 2043.689485][T29400] m920x_read = error: -19 [ 2043.694056][T29400] dvb-usb: error while querying for an remote control event. [ 2043.701575][T27633] m920x_read = error: -19 [ 2043.709877][T27633] dvb-usb: error while querying for an remote control event. [ 2043.733987][T32306] vivid-000: Quantization: Default [ 2043.776921][T32306] vivid-000: Apply Alpha To Red Only: false [ 2043.786688][T32306] vivid-000: Standard Aspect Ratio: 4x3 [ 2043.794957][T32306] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2043.804823][T32306] vivid-000: DV Timings: 640x480p59 inactive [ 2043.814482][T32306] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2043.826903][T27633] m920x_read = error: -19 [ 2043.831459][T32306] vivid-000: Maximum EDID Blocks: 2 [ 2043.843387][T32306] vivid-000: Limited RGB Range (16-235): [ 2043.844089][T27633] dvb-usb: error while querying for an remote control event. [ 2043.859283][T32306] false [ 2043.862916][T32306] vivid-000: Rx RGB Quantization Range: Automatic [ 2043.878876][T32306] vivid-000: Power Present: 0x00000001 [ 2043.886315][T32316] FAULT_INJECTION: forcing a failure. [ 2043.886315][T32316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2043.903810][T32306] tpg source WxH: 3840x2160 (Y'CbCr) [ 2043.911165][T32306] tpg field: 1 [ 2043.916089][T32306] tpg crop: (0,0)/3840x2160 [ 2043.921925][T29400] m920x_read = error: -19 [ 2043.926348][T32306] tpg compose: (0,0)/3840x2160 [ 2043.934085][T32316] CPU: 0 UID: 0 PID: 32316 Comm: syz.0.7713 Not tainted syzkaller #0 PREEMPT(full) [ 2043.934121][T32316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2043.934134][T32316] Call Trace: [ 2043.934143][T32316] [ 2043.934152][T32316] dump_stack_lvl+0x189/0x250 [ 2043.934184][T32316] ? __pfx____ratelimit+0x10/0x10 [ 2043.934222][T32316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2043.934248][T32316] ? __pfx__printk+0x10/0x10 [ 2043.934274][T32316] ? __might_fault+0xb0/0x130 [ 2043.934312][T32316] should_fail_ex+0x414/0x560 [ 2043.934356][T32316] _copy_from_iter+0x1de/0x1790 [ 2043.934392][T32316] ? rcu_is_watching+0x15/0xb0 [ 2043.934433][T32316] ? kmalloc_reserve+0xbd/0x290 [ 2043.934468][T32316] ? __pfx__copy_from_iter+0x10/0x10 [ 2043.934498][T32316] ? __build_skb_around+0x262/0x3f0 [ 2043.934544][T32316] ? netlink_sendmsg+0x642/0xb30 [ 2043.934578][T32316] ? skb_put+0x11b/0x210 [ 2043.934615][T32316] netlink_sendmsg+0x6b2/0xb30 [ 2043.934662][T32316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2043.934702][T32316] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2043.934730][T32316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2043.934763][T32316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2043.934799][T32316] __sock_sendmsg+0x21c/0x270 [ 2043.934832][T32316] sock_write_iter+0x279/0x360 [ 2043.934862][T32316] ? __pfx_sock_write_iter+0x10/0x10 [ 2043.934914][T32316] do_iter_readv_writev+0x623/0x8c0 [ 2043.934951][T32316] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2043.934978][T32316] ? common_file_perm+0x1b5/0x230 [ 2043.935008][T32316] ? bpf_lsm_file_permission+0x9/0x20 [ 2043.935041][T32316] ? security_file_permission+0x75/0x290 [ 2043.935077][T32316] ? rw_verify_area+0x255/0x4d0 [ 2043.935108][T32316] vfs_writev+0x31a/0x960 [ 2043.935147][T32316] ? __lock_acquire+0xab9/0xd20 [ 2043.935182][T32316] ? __pfx_vfs_writev+0x10/0x10 [ 2043.935233][T32316] ? __fget_files+0x2a/0x420 [ 2043.935267][T32316] ? __fget_files+0x3a0/0x420 [ 2043.935297][T32316] ? __fget_files+0x2a/0x420 [ 2043.935335][T32316] do_writev+0x14d/0x2d0 [ 2043.935371][T32316] ? __pfx_do_writev+0x10/0x10 [ 2043.935408][T32316] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2043.935435][T32316] ? lockdep_hardirqs_on+0x9c/0x150 [ 2043.935464][T32316] __do_fast_syscall_32+0xb6/0x2b0 [ 2043.935491][T32316] ? lockdep_hardirqs_on+0x9c/0x150 [ 2043.935524][T32316] do_fast_syscall_32+0x34/0x80 [ 2043.935550][T32316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2043.935581][T32316] RIP: 0023:0xf7fb4539 [ 2043.935602][T32316] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2043.935624][T32316] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 2043.935667][T32316] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 2043.935685][T32316] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2043.935701][T32316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2043.935716][T32316] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2043.935731][T32316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2043.935768][T32316] [ 2044.248052][T32306] tpg colorspace: 8 [ 2044.252096][T29400] dvb-usb: error while querying for an remote control event. [ 2044.259592][T32306] tpg transfer function: 0/0 [ 2044.270095][T32306] tpg Y'CbCr encoding: 0/0 [ 2044.276923][T32306] tpg quantization: 0/0 [ 2044.286706][T32306] tpg RGB range: 0/2 [ 2044.292034][T32306] vivid-000: ================== END STATUS ================== [ 2044.389492][T27633] m920x_read = error: -19 [ 2044.394071][T27633] dvb-usb: error while querying for an remote control event. [ 2044.402068][T29400] m920x_read = error: -19 [ 2044.406536][T29400] dvb-usb: error while querying for an remote control event. [ 2044.519505][T27633] m920x_read = error: -19 [ 2044.523986][T27633] dvb-usb: error while querying for an remote control event. [ 2044.531600][T16479] m920x_read = error: -19 [ 2044.535965][T16479] dvb-usb: error while querying for an remote control event. [ 2044.659663][T27633] m920x_read = error: -19 [ 2044.664698][T27633] dvb-usb: error while querying for an remote control event. [ 2044.672435][T16479] m920x_read = error: -19 [ 2044.676967][T16479] dvb-usb: error while querying for an remote control event. [ 2044.800044][T16479] m920x_read = error: -19 [ 2044.828552][T16479] dvb-usb: error while querying for an remote control event. [ 2044.844187][T27633] m920x_read = error: -19 [ 2044.858862][T27633] dvb-usb: error while querying for an remote control event. [ 2044.969502][T16479] m920x_read = error: -19 [ 2044.974104][T16479] dvb-usb: error while querying for an remote control event. [ 2044.982514][ T5918] m920x_read = error: -19 [ 2044.987183][ T5918] dvb-usb: error while querying for an remote control event. [ 2045.119511][ T5918] m920x_read = error: -19 [ 2045.124116][ T5918] dvb-usb: error while querying for an remote control event. [ 2045.131739][T16479] m920x_read = error: -19 [ 2045.136186][T16479] dvb-usb: error while querying for an remote control event. [ 2045.149357][T27633] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2045.243007][T16479] m920x_read = error: -19 [ 2045.247466][T16479] dvb-usb: error while querying for an remote control event. [ 2045.255242][ T5918] m920x_read = error: -19 [ 2045.261130][ T5918] dvb-usb: error while querying for an remote control event. [ 2045.300028][ T5920] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2045.306870][T27633] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2045.317388][T27633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.325877][T27633] usb 2-1: Product: syz [ 2045.331368][T27633] usb 2-1: Manufacturer: syz [ 2045.336011][T27633] usb 2-1: SerialNumber: syz [ 2045.346504][T27633] usb 2-1: config 0 descriptor?? [ 2045.370276][ T5918] m920x_read = error: -19 [ 2045.375195][ T5918] dvb-usb: error while querying for an remote control event. [ 2045.385882][T16479] m920x_read = error: -19 [ 2045.391939][T16479] dvb-usb: error while querying for an remote control event. [ 2045.471603][ T5920] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2045.482671][ T5920] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2045.492392][ T5920] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2045.501884][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.510405][T16479] m920x_read = error: -19 [ 2045.515091][T16479] dvb-usb: error while querying for an remote control event. [ 2045.522681][ T5918] m920x_read = error: -19 [ 2045.527768][ T5918] dvb-usb: error while querying for an remote control event. [ 2045.557514][ T5918] usb 2-1: USB disconnect, device number 107 [ 2045.649433][T16479] m920x_read = error: -19 [ 2045.653875][T16479] dvb-usb: error while querying for an remote control event. [ 2045.661556][T27633] m920x_read = error: -19 [ 2045.665921][T27633] dvb-usb: error while querying for an remote control event. [ 2045.785184][T27633] m920x_read = error: -19 [ 2045.825024][T27633] dvb-usb: error while querying for an remote control event. [ 2045.835685][T16479] m920x_read = error: -19 [ 2045.853536][T16479] dvb-usb: error while querying for an remote control event. [ 2045.889334][ T5918] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2045.980084][T16479] m920x_read = error: -19 [ 2045.984535][T16479] dvb-usb: error while querying for an remote control event. [ 2045.995419][T27633] m920x_read = error: -19 [ 2046.001415][T27633] dvb-usb: error while querying for an remote control event. [ 2046.091760][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2046.100969][ T5918] usb 2-1: config 9 has an invalid interface number: 53 but max is 0 [ 2046.105154][T32346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7722'. [ 2046.119107][ T5918] usb 2-1: config 9 has no interface number 0 [ 2046.125535][T27633] m920x_read = error: -19 [ 2046.130149][T27633] dvb-usb: error while querying for an remote control event. [ 2046.170410][ T5918] usb 2-1: config 9 interface 53 has no altsetting 0 [ 2046.177447][T27633] m920x_read = error: -19 [ 2046.207343][T27633] dvb-usb: error while querying for an remote control event. [ 2046.218907][ T5918] usb 2-1: New USB device found, idVendor=0403, idProduct=9e90, bcdDevice=7e.4b [ 2046.232662][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.241049][ T5918] usb 2-1: Product: syz [ 2046.245235][ T5918] usb 2-1: Manufacturer: syz [ 2046.250011][ T5918] usb 2-1: SerialNumber: syz [ 2046.289684][T27633] m920x_read = error: -19 [ 2046.294144][T27633] dvb-usb: error while querying for an remote control event. [ 2046.341926][T27633] m920x_read = error: -19 [ 2046.346408][T27633] dvb-usb: error while querying for an remote control event. [ 2046.439398][T27633] m920x_read = error: -19 [ 2046.443874][T27633] dvb-usb: error while querying for an remote control event. [ 2046.500501][T27633] m920x_read = error: -19 [ 2046.507873][T27633] dvb-usb: error while querying for an remote control event. [ 2046.619315][T27633] m920x_read = error: -19 [ 2046.623761][T27633] dvb-usb: error while querying for an remote control event. [ 2046.678745][T27633] m920x_read = error: -19 [ 2046.690709][T27633] dvb-usb: error while querying for an remote control event. [ 2046.702382][T32356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7726'. [ 2046.779972][T16479] m920x_read = error: -19 [ 2046.784561][T16479] dvb-usb: error while querying for an remote control event. [ 2046.825681][T16479] m920x_read = error: -19 [ 2046.831025][T16479] dvb-usb: error while querying for an remote control event. [ 2046.909403][T16479] m920x_read = error: -19 [ 2046.913907][T16479] dvb-usb: error while querying for an remote control event. [ 2046.934521][T32358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7727'. [ 2046.949917][T16479] m920x_read = error: -19 [ 2046.951315][T32358] FAULT_INJECTION: forcing a failure. [ 2046.951315][T32358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2046.954424][T16479] dvb-usb: error while querying for an remote control event. [ 2046.971443][T32358] CPU: 0 UID: 0 PID: 32358 Comm: syz.2.7727 Not tainted syzkaller #0 PREEMPT(full) [ 2046.971477][T32358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2046.971494][T32358] Call Trace: [ 2046.971504][T32358] [ 2046.971515][T32358] dump_stack_lvl+0x189/0x250 [ 2046.971548][T32358] ? __pfx____ratelimit+0x10/0x10 [ 2046.971587][T32358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2046.971614][T32358] ? __pfx__printk+0x10/0x10 [ 2046.971646][T32358] ? __might_fault+0xb0/0x130 [ 2046.971686][T32358] should_fail_ex+0x414/0x560 [ 2046.971733][T32358] _copy_from_iter+0x1de/0x1790 [ 2046.971768][T32358] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2046.971814][T32358] ? policy_nodemask+0x27c/0x720 [ 2046.971846][T32358] ? __pfx__copy_from_iter+0x10/0x10 [ 2046.971883][T32358] ? set_page_refcounted+0xa0/0x1e0 [ 2046.971914][T32358] ? page_copy_sane+0x4e/0x280 [ 2046.971947][T32358] copy_page_from_iter+0xdd/0x170 [ 2046.971983][T32358] tun_get_user+0x1d7b/0x3e90 [ 2046.972032][T32358] ? tun_get_user+0x6f6/0x3e90 [ 2046.972080][T32358] ? aa_file_perm+0x44d/0x1550 [ 2046.972110][T32358] ? __pfx_tun_get_user+0x10/0x10 [ 2046.972140][T32358] ? _parse_integer_limit+0x1ae/0x1f0 [ 2046.972176][T32358] ? __lock_acquire+0xab9/0xd20 [ 2046.972217][T32358] ? ref_tracker_alloc+0x318/0x460 [ 2046.972241][T32358] ? __lock_acquire+0xab9/0xd20 [ 2046.972280][T32358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2046.972316][T32358] ? tun_get+0x1c/0x2f0 [ 2046.972352][T32358] ? tun_get+0x1c/0x2f0 [ 2046.972381][T32358] ? tun_get+0x1c/0x2f0 [ 2046.972417][T32358] tun_chr_write_iter+0x113/0x200 [ 2046.972451][T32358] vfs_write+0x5c9/0xb30 [ 2046.972489][T32358] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2046.972520][T32358] ? __pfx_vfs_write+0x10/0x10 [ 2046.972558][T32358] ? __fget_files+0x2a/0x420 [ 2046.972601][T32358] ksys_write+0x145/0x250 [ 2046.972630][T32358] ? __pfx_ksys_write+0x10/0x10 [ 2046.972660][T32358] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2046.972690][T32358] ? lockdep_hardirqs_on+0x9c/0x150 [ 2046.972718][T32358] __do_fast_syscall_32+0xb6/0x2b0 [ 2046.972746][T32358] ? lockdep_hardirqs_on+0x9c/0x150 [ 2046.972775][T32358] do_fast_syscall_32+0x34/0x80 [ 2046.972802][T32358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2046.972832][T32358] RIP: 0023:0xf7f42539 [ 2046.972855][T32358] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2046.972876][T32358] RSP: 002b:00000000f5436520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2046.972902][T32358] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000140 [ 2046.972921][T32358] RDX: 0000000000000042 RSI: 00000000f73d5ff4 RDI: 0000000000000000 [ 2046.972936][T32358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2046.972951][T32358] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2046.972967][T32358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2046.973003][T32358] [ 2047.269844][T27633] m920x_read = error: -19 [ 2047.274239][T27633] dvb-usb: error while querying for an remote control event. [ 2047.495088][T29400] m920x_read = error: -19 [ 2047.499710][T29400] dvb-usb: error while querying for an remote control event. [ 2047.517308][T32366] FAULT_INJECTION: forcing a failure. [ 2047.517308][T32366] name failslab, interval 1, probability 0, space 0, times 0 [ 2047.530923][T32366] CPU: 0 UID: 0 PID: 32366 Comm: syz.2.7728 Not tainted syzkaller #0 PREEMPT(full) [ 2047.530952][T32366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2047.530965][T32366] Call Trace: [ 2047.530973][T32366] [ 2047.530982][T32366] dump_stack_lvl+0x189/0x250 [ 2047.531011][T32366] ? __pfx____ratelimit+0x10/0x10 [ 2047.531042][T32366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2047.531062][T32366] ? __pfx__printk+0x10/0x10 [ 2047.531089][T32366] ? __pfx___might_resched+0x10/0x10 [ 2047.531116][T32366] ? fs_reclaim_acquire+0x7d/0x100 [ 2047.531146][T32366] should_fail_ex+0x414/0x560 [ 2047.531183][T32366] should_failslab+0xa8/0x100 [ 2047.531210][T32366] __kmalloc_noprof+0xcb/0x7f0 [ 2047.531241][T32366] ? tomoyo_encode+0x28b/0x550 [ 2047.531270][T32366] tomoyo_encode+0x28b/0x550 [ 2047.531298][T32366] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2047.531324][T32366] ? tomoyo_domain+0xd9/0x130 [ 2047.531354][T32366] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2047.531386][T32366] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2047.531420][T32366] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2047.531469][T32366] ? __lock_acquire+0xab9/0xd20 [ 2047.531521][T32366] ? __fget_files+0x2a/0x420 [ 2047.531551][T32366] ? __fget_files+0x3a0/0x420 [ 2047.531575][T32366] ? __fget_files+0x2a/0x420 [ 2047.531604][T32366] security_file_ioctl_compat+0xcb/0x2d0 [ 2047.531637][T32366] __ia32_compat_sys_ioctl+0x128/0x840 [ 2047.531661][T32366] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2047.531682][T32366] ? __fget_files+0x3a0/0x420 [ 2047.531713][T32366] ? fput+0xa0/0xd0 [ 2047.531760][T32366] ? ksys_write+0x22a/0x250 [ 2047.531781][T32366] ? exc_page_fault+0x82/0x100 [ 2047.531804][T32366] ? __pfx_ksys_write+0x10/0x10 [ 2047.531830][T32366] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2047.531860][T32366] ? lockdep_hardirqs_on+0x9c/0x150 [ 2047.531885][T32366] __do_fast_syscall_32+0xb6/0x2b0 [ 2047.531910][T32366] ? lockdep_hardirqs_on+0x9c/0x150 [ 2047.531947][T32366] do_fast_syscall_32+0x34/0x80 [ 2047.531969][T32366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2047.531993][T32366] RIP: 0023:0xf7f42539 [ 2047.532011][T32366] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2047.532029][T32366] RSP: 002b:00000000f53f455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2047.532051][T32366] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040a0ae49 [ 2047.532065][T32366] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2047.532078][T32366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2047.532090][T32366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2047.532102][T32366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2047.532133][T32366] [ 2047.532191][T32366] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2047.574308][ T5918] ftdi_sio 2-1:9.53: FTDI USB Serial Device converter detected [ 2047.826137][T29400] m920x_read = error: -19 [ 2047.830537][T29400] dvb-usb: error while querying for an remote control event. [ 2047.960084][T27633] m920x_read = error: -19 [ 2047.964571][T27633] dvb-usb: error while querying for an remote control event. [ 2047.979397][T16479] m920x_read = error: -19 [ 2047.983794][T16479] dvb-usb: error while querying for an remote control event. [ 2048.066613][T16500] usb 5-1: USB disconnect, device number 22 [ 2048.111323][ T5918] ftdi_sio ttyUSB0: unknown device type: 0x7e4b [ 2048.136958][ T5918] usb 2-1: USB disconnect, device number 108 [ 2048.193462][ T5918] ftdi_sio 2-1:9.53: device disconnected [ 2048.199411][T16479] m920x_read = error: -19 [ 2048.203824][T16479] dvb-usb: error while querying for an remote control event. [ 2048.213589][T27633] m920x_read = error: -19 [ 2048.220007][T27633] dvb-usb: error while querying for an remote control event. [ 2048.312203][T32376] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2048.329453][T27633] m920x_read = error: -19 [ 2048.336713][T27633] dvb-usb: error while querying for an remote control event. [ 2048.346584][T16479] m920x_read = error: -19 [ 2048.357431][T16479] dvb-usb: error while querying for an remote control event. [ 2048.479465][ T5918] m920x_read = error: -19 [ 2048.484070][ T5918] dvb-usb: error while querying for an remote control event. [ 2048.492214][T16479] m920x_read = error: -19 [ 2048.497089][T16479] dvb-usb: error while querying for an remote control event. [ 2048.525673][T32383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7732'. [ 2048.588313][T32385] vivid-000: ================= START STATUS ================= [ 2048.596697][T32385] vivid-000: Test Pattern: 75% Colorbar [ 2048.603718][T32385] vivid-000: Fill Percentage of Frame: 100 [ 2048.611707][T32385] vivid-000: Horizontal Movement: No Movement [ 2048.618305][T32385] vivid-000: Vertical Movement: Move Down [ 2048.620114][T16479] m920x_read = error: -19 [ 2048.625713][T32385] vivid-000: OSD Text Mode: All [ 2048.639034][T32385] vivid-000: Show Border: false [ 2048.646163][T32385] vivid-000: Show Square: false [ 2048.654468][T32385] vivid-000: Sensor Flipped Horizontally: false [ 2048.684340][T32385] vivid-000: Sensor Flipped Vertically: false [ 2048.738243][T32385] vivid-000: Insert SAV Code in Image: false [ 2048.761931][T16479] dvb-usb: error while querying for an remote control event. [ 2048.765399][T32385] vivid-000: Insert EAV Code in Image: false [ 2048.800697][T32385] vivid-000: Insert Video Guard Band: false [ 2048.952533][T32385] vivid-000: Reduced Framerate: false [ 2049.168040][T16479] m920x_read = error: -19 [ 2049.183123][T16479] dvb-usb: error while querying for an remote control event. [ 2049.213280][T32385] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2049.268419][T32385] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 2049.277724][T32385] vivid-000: Enable Capture Cropping: [ 2049.279554][T16479] m920x_read = error: -19 [ 2049.291013][T32385] true [ 2049.291094][T16479] dvb-usb: error while querying for an remote control event. [ 2049.305247][T32385] [ 2049.309961][T32385] vivid-000: Enable Capture Composing: [ 2049.310040][T16479] m920x_read = error: -19 [ 2049.322991][T32385] false [ 2049.323073][T16479] dvb-usb: error while querying for an remote control event. [ 2049.325987][T32385] vivid-000: Enable Capture Scaler: true [ 2049.341963][T32385] vivid-000: Timestamp Source: End of Frame [ 2049.359140][T32385] vivid-000: Colorspace: sRGB [ 2049.372855][T32385] vivid-000: Transfer Function: Default [ 2049.385163][T32385] vivid-000: Y'CbCr Encoding: Default [ 2049.395566][T32385] vivid-000: HSV Encoding: Hue 0-179 [ 2049.408248][T32385] vivid-000: Quantization: [ 2049.409644][T16479] m920x_read = error: -19 [ 2049.463243][T32385] Default [ 2049.463273][T16479] dvb-usb: error while querying for an remote control event. [ 2049.473643][T32385] [ 2049.474005][T27633] m920x_read = error: -19 [ 2049.490851][T32385] vivid-000: Apply Alpha To Red Only: false [ 2049.492639][T27633] dvb-usb: error while querying for an remote control event. [ 2049.510546][T32385] [ 2049.516592][T32385] vivid-000: Standard Aspect Ratio: 4x3 [ 2049.532427][T32385] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2049.547047][T32385] vivid-000: DV Timings: 640x480p59 inactive [ 2049.566578][T32385] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2049.583459][T32385] vivid-000: Maximum EDID Blocks: 2 [ 2049.599155][T32385] vivid-000: Limited RGB Range (16-235): false [ 2049.615864][T32385] vivid-000: Rx RGB Quantization Range: [ 2049.619937][T27633] m920x_read = error: -19 [ 2049.630191][T32385] Automatic [ 2049.630493][T27633] dvb-usb: error while querying for an remote control event. [ 2049.641008][T32385] [ 2049.641458][T16479] m920x_read = error: -19 [ 2049.643407][T32385] vivid-000: Power Present: 0x00000001 [ 2049.647822][T16479] dvb-usb: error while querying for an remote control event. [ 2049.662480][T32385] tpg source WxH: 3840x2160 (Y'CbCr) [ 2049.671948][T32385] tpg field: 1 [ 2049.678604][T32385] tpg crop: (0,0)/3840x2160 [ 2049.685391][T32385] tpg compose: (0,0)/3840x2160 [ 2049.692473][T32385] tpg colorspace: 8 [ 2049.698001][T32385] tpg transfer function: 0/0 [ 2049.705308][T32385] tpg Y'CbCr encoding: 0/0 [ 2049.711972][T32385] tpg quantization: 0/0 [ 2049.718587][T32385] tpg RGB range: 0/2 [ 2049.727794][T32385] vivid-000: ================== END STATUS ================== [ 2049.779771][T27633] m920x_read = error: -19 [ 2049.784264][T27633] dvb-usb: error while querying for an remote control event. [ 2049.798042][T16479] m920x_read = error: -19 [ 2049.803458][T16479] dvb-usb: error while querying for an remote control event. [ 2049.909453][T16479] m920x_read = error: -19 [ 2049.914043][T16479] dvb-usb: error while querying for an remote control event. [ 2049.929387][ T5918] m920x_read = error: -19 [ 2049.933830][ T5918] dvb-usb: error while querying for an remote control event. [ 2050.059679][T16479] m920x_read = error: -19 [ 2050.066500][T16479] dvb-usb: error while querying for an remote control event. [ 2050.079419][ T5918] m920x_read = error: -19 [ 2050.090593][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2050.090607][ T30] audit: type=1326 audit(1760303989.413:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32401 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2050.131270][ T5918] dvb-usb: error while querying for an remote control event. [ 2050.165950][ T30] audit: type=1326 audit(1760303989.413:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32401 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2050.260134][ T5918] m920x_read = error: -19 [ 2050.264723][ T5918] dvb-usb: error while querying for an remote control event. [ 2050.277066][T27633] m920x_read = error: -19 [ 2050.285012][ T30] audit: type=1326 audit(1760303989.413:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32401 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2050.307357][T27633] dvb-usb: error while querying for an remote control event. [ 2050.367383][ T30] audit: type=1326 audit(1760303989.413:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32401 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2050.439383][T27633] m920x_read = error: -19 [ 2050.443969][T27633] dvb-usb: error while querying for an remote control event. [ 2050.452174][ T5918] m920x_read = error: -19 [ 2050.456727][ T5918] dvb-usb: error while querying for an remote control event. [ 2050.466017][ T30] audit: type=1326 audit(1760303989.413:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32401 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2050.548214][ T30] audit: type=1326 audit(1760303989.463:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32401 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2050.571140][ T5918] m920x_read = error: -19 [ 2050.577136][ T5918] dvb-usb: error while querying for an remote control event. [ 2050.586542][ T30] audit: type=1326 audit(1760303989.473:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32401 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2050.602027][T16500] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2050.609335][ T5918] m920x_read = error: -19 [ 2050.630111][ T5918] dvb-usb: error while querying for an remote control event. [ 2050.647289][ T30] audit: type=1326 audit(1760303989.473:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32401 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2050.689413][ T5918] m920x_read = error: -19 [ 2050.696203][ T5918] dvb-usb: error while querying for an remote control event. [ 2050.712688][ T30] audit: type=1326 audit(1760303989.473:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32401 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2050.739155][ T30] audit: type=1326 audit(1760303989.473:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32401 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2050.761909][ T5918] m920x_read = error: -19 [ 2050.766342][ T5918] dvb-usb: error while querying for an remote control event. [ 2050.782129][T16500] usb 3-1: Using ep0 maxpacket: 32 [ 2050.796682][T16500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2050.828573][T16500] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 2050.840028][ T5918] m920x_read = error: -19 [ 2050.844555][T16500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.844580][ T5918] dvb-usb: error while querying for an remote control event. [ 2050.878400][T16500] usb 3-1: Product: syz [ 2050.887584][T16500] usb 3-1: Manufacturer: syz [ 2050.889426][ T5918] m920x_read = error: -19 [ 2050.904620][T16500] usb 3-1: SerialNumber: syz [ 2050.906547][ T5918] dvb-usb: error while querying for an remote control event. [ 2050.928193][T16500] usb 3-1: config 0 descriptor?? [ 2050.959552][ T5918] m920x_read = error: -19 [ 2050.998341][ T5918] dvb-usb: error while querying for an remote control event. [ 2051.039396][T27633] m920x_read = error: -19 [ 2051.043948][T27633] dvb-usb: error while querying for an remote control event. [ 2051.159683][T27633] m920x_read = error: -19 [ 2051.168243][T27633] dvb-usb: error while querying for an remote control event. [ 2051.176008][ T5918] m920x_read = error: -19 [ 2051.181150][ T5918] dvb-usb: error while querying for an remote control event. [ 2051.200418][T32405] fuse: Bad value for 'fd' [ 2051.217444][T32405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2051.227868][T32405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2051.240607][ T5920] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2051.288997][T16499] usb 3-1: USB disconnect, device number 46 [ 2051.371564][T27633] m920x_read = error: -19 [ 2051.375971][T27633] dvb-usb: error while querying for an remote control event. [ 2051.419549][T32433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.439622][T16479] m920x_read = error: -19 [ 2051.454597][T16479] dvb-usb: error while querying for an remote control event. [ 2051.474695][ T5920] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2051.491554][T32435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.543877][ T5920] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2051.581839][T16479] m920x_read = error: -19 [ 2051.585862][ T5920] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2051.587662][T16479] dvb-usb: error while querying for an remote control event. [ 2051.603067][T27633] m920x_read = error: -19 [ 2051.606419][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.607444][T27633] dvb-usb: error while querying for an remote control event. [ 2051.698686][T32441] fuse: Unknown parameter 'ÿròup_id' [ 2051.719499][T27633] m920x_read = error: -19 [ 2051.723919][T27633] dvb-usb: error while querying for an remote control event. [ 2051.875259][T32441] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2051.896372][T16499] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 2051.910473][T27633] m920x_read = error: -19 [ 2051.914971][T27633] dvb-usb: error while querying for an remote control event. [ 2051.926419][T16479] m920x_read = error: -19 [ 2051.942950][T16479] dvb-usb: error while querying for an remote control event. [ 2052.094271][T16479] m920x_read = error: -19 [ 2052.167402][T16479] dvb-usb: error while querying for an remote control event. [ 2052.175425][T16499] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 2052.184453][T27633] m920x_read = error: -19 [ 2052.184563][T16499] usb 2-1: config 0 has no interface number 0 [ 2052.188959][T27633] dvb-usb: error while querying for an remote control event. [ 2052.289412][T16479] m920x_read = error: -19 [ 2052.292923][T16499] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2052.298498][T16479] dvb-usb: error while querying for an remote control event. [ 2052.357254][T16499] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2052.452007][T16499] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 2052.461845][T16499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.474403][T16499] usb 2-1: Product: syz [ 2052.478787][T16499] usb 2-1: Manufacturer: syz [ 2052.484173][T16499] usb 2-1: SerialNumber: syz [ 2052.484535][T27633] m920x_read = error: -19 [ 2052.519274][T27633] dvb-usb: error while querying for an remote control event. [ 2052.527274][T27633] m920x_read = error: -19 [ 2052.561752][T27633] dvb-usb: error while querying for an remote control event. [ 2052.577603][T16499] usb 2-1: config 0 descriptor?? [ 2052.636916][T27633] m920x_read = error: -19 [ 2052.676628][T27633] dvb-usb: error while querying for an remote control event. [ 2052.699462][ T5918] m920x_read = error: -19 [ 2052.703968][ T5918] dvb-usb: error while querying for an remote control event. [ 2052.781497][T32452] geneve2: entered promiscuous mode [ 2052.819473][T27633] m920x_read = error: -19 [ 2052.823980][T27633] dvb-usb: error while querying for an remote control event. [ 2052.839455][ T5918] m920x_read = error: -19 [ 2052.844118][ T5918] dvb-usb: error while querying for an remote control event. [ 2052.893584][T16499] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 2052.959615][T27633] m920x_read = error: -19 [ 2052.964148][T27633] dvb-usb: error while querying for an remote control event. [ 2052.974631][ T5918] m920x_read = error: -19 [ 2052.979688][ T5918] dvb-usb: error while querying for an remote control event. [ 2053.015634][T16499] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 2053.119485][T27633] m920x_read = error: -19 [ 2053.123889][T27633] dvb-usb: error while querying for an remote control event. [ 2053.136685][ T5918] m920x_read = error: -19 [ 2053.159363][ T5918] dvb-usb: error while querying for an remote control event. [ 2053.198278][T16499] usb 2-1: USB disconnect, device number 109 [ 2053.279421][ T5918] m920x_read = error: -19 [ 2053.290575][ T5918] dvb-usb: error while querying for an remote control event. [ 2053.395328][ T5918] m920x_read = error: -19 [ 2053.421941][ T5918] dvb-usb: error while querying for an remote control event. [ 2053.440395][T27633] m920x_read = error: -19 [ 2053.454625][T27633] dvb-usb: error while querying for an remote control event. [ 2053.545508][T32465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2053.582997][T32465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.599445][T27633] m920x_read = error: -19 [ 2053.613514][T27633] dvb-usb: error while querying for an remote control event. [ 2053.624934][ T5918] m920x_read = error: -19 [ 2053.653115][ T5918] dvb-usb: error while querying for an remote control event. [ 2053.769708][ T5918] m920x_read = error: -19 [ 2053.770167][T16499] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2053.774158][ T5918] dvb-usb: error while querying for an remote control event. [ 2053.779441][ T5918] m920x_read = error: -19 [ 2053.801967][ T5918] dvb-usb: error while querying for an remote control event. [ 2053.879616][ T5918] m920x_read = error: -19 [ 2053.884047][ T5918] dvb-usb: error while querying for an remote control event. [ 2053.920126][ T5918] m920x_read = error: -19 [ 2053.929143][ T5918] dvb-usb: error while querying for an remote control event. [ 2053.929936][T16499] usb 2-1: device descriptor read/64, error -71 [ 2053.999578][ T5918] m920x_read = error: -19 [ 2054.004358][ T5918] dvb-usb: error while querying for an remote control event. [ 2054.049562][ T5918] m920x_read = error: -19 [ 2054.054287][ T5918] dvb-usb: error while querying for an remote control event. [ 2054.098434][T32477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7756'. [ 2054.119477][ T5918] m920x_read = error: -19 [ 2054.124121][ T5918] dvb-usb: error while querying for an remote control event. [ 2054.146895][T32477] vivid-000: ================= START STATUS ================= [ 2054.155564][T32477] vivid-000: Test Pattern: 75% Colorbar [ 2054.161651][T32477] vivid-000: Fill Percentage of Frame: 100 [ 2054.171289][T16499] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2054.172635][ T5918] m920x_read = error: -19 [ 2054.183685][T32477] vivid-000: Horizontal Movement: No Movement [ 2054.192151][T32477] vivid-000: Vertical Movement: Move Down [ 2054.198148][ T5918] dvb-usb: error while querying for an remote control event. [ 2054.206603][T32477] vivid-000: OSD Text Mode: All [ 2054.212047][T32477] vivid-000: Show Border: false [ 2054.218172][T32477] vivid-000: Show Square: false [ 2054.223992][T32477] vivid-000: Sensor Flipped Horizontally: false [ 2054.239534][ T5918] m920x_read = error: -19 [ 2054.252171][ T5918] dvb-usb: error while querying for an remote control event. [ 2054.275383][T32477] vivid-000: Sensor Flipped Vertically: false [ 2054.291220][T32477] vivid-000: Insert SAV Code in Image: false [ 2054.297405][T32477] vivid-000: Insert EAV Code in Image: false [ 2054.304907][T32477] vivid-000: Insert Video Guard Band: false [ 2054.314313][T32477] vivid-000: Reduced Framerate: false [ 2054.319434][ T5918] m920x_read = error: -19 [ 2054.326110][ T5918] dvb-usb: error while querying for an remote control event. [ 2054.334422][T32477] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2054.345697][T32481] netlink: 'syz.2.7757': attribute type 21 has an invalid length. [ 2054.354236][T32481] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7757'. [ 2054.367354][T32477] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 2054.367708][T16499] usb 2-1: device descriptor read/64, error -71 [ 2054.380547][ T5918] m920x_read = error: -19 [ 2054.386752][ T5918] dvb-usb: error while querying for an remote control event. [ 2054.396696][T32477] [ 2054.402928][T32477] vivid-000: Enable Capture Cropping: true [ 2054.414326][T32477] vivid-000: Enable Capture Composing: false [ 2054.423552][T32477] vivid-000: Enable Capture Scaler: true [ 2054.435530][T32477] vivid-000: Timestamp Source: End of Frame [ 2054.439475][ T5918] m920x_read = error: -19 [ 2054.446582][T32477] vivid-000: Colorspace: sRGB [ 2054.453481][T32477] vivid-000: Transfer Function: Default [ 2054.459147][T32477] vivid-000: Y'CbCr Encoding: [ 2054.459179][ T5918] dvb-usb: error while querying for an remote control event. [ 2054.471604][T32477] Default [ 2054.475253][T32477] vivid-000: HSV Encoding: Hue 0-179 [ 2054.510191][ T5918] m920x_read = error: -19 [ 2054.862713][T16499] usb usb2-port1: attempt power cycle [ 2054.919325][T32477] vivid-000: Quantization: Default [ 2054.929834][T32477] vivid-000: Apply Alpha To Red Only: [ 2054.931187][ T5918] dvb-usb: error while querying for an remote control event. [ 2054.961088][ T5832] m920x_read = error: -19 [ 2054.992965][T25019] usb 4-1: USB disconnect, device number 124 [ 2055.034359][T32477] false [ 2055.037326][ T5832] dvb-usb: error while querying for an remote control event. [ 2055.054699][T32477] vivid-000: Standard Aspect Ratio: 4x3 [ 2055.077890][T32477] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2055.089004][T32477] vivid-000: DV Timings: 640x480p59 inactive [ 2055.108132][T32477] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2055.123349][T32477] vivid-000: Maximum EDID Blocks: 2 [ 2055.137824][T32477] vivid-000: Limited RGB Range (16-235): false [ 2055.143690][T32484] FAULT_INJECTION: forcing a failure. [ 2055.143690][T32484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2055.163304][T32477] [ 2055.172769][T32477] vivid-000: Rx RGB Quantization Range: [ 2055.172800][T32484] CPU: 1 UID: 0 PID: 32484 Comm: syz.3.7758 Not tainted syzkaller #0 PREEMPT(full) [ 2055.172825][T32484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2055.172837][T32484] Call Trace: [ 2055.172845][T32484] [ 2055.172854][T32484] dump_stack_lvl+0x189/0x250 [ 2055.172881][T32484] ? __pfx____ratelimit+0x10/0x10 [ 2055.172910][T32484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2055.172931][T32484] ? __pfx__printk+0x10/0x10 [ 2055.172966][T32484] should_fail_ex+0x414/0x560 [ 2055.173004][T32484] _copy_to_user+0x31/0xb0 [ 2055.173031][T32484] simple_read_from_buffer+0xe1/0x170 [ 2055.173058][T32484] proc_fail_nth_read+0x1b3/0x220 [ 2055.173090][T32484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2055.173125][T32484] ? rw_verify_area+0x2a6/0x4d0 [ 2055.173145][T32484] ? __lock_acquire+0xab9/0xd20 [ 2055.173170][T32484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2055.173204][T32484] vfs_read+0x200/0xa30 [ 2055.173224][T32484] ? fdget_pos+0x247/0x320 [ 2055.173254][T32484] ? __pfx___mutex_lock+0x10/0x10 [ 2055.173276][T32484] ? __pfx_vfs_read+0x10/0x10 [ 2055.173299][T32484] ? __fget_files+0x2a/0x420 [ 2055.173335][T32484] ? __fget_files+0x3a0/0x420 [ 2055.173359][T32484] ? __fget_files+0x2a/0x420 [ 2055.173394][T32484] ksys_read+0x145/0x250 [ 2055.173416][T32484] ? exc_page_fault+0x82/0x100 [ 2055.173448][T32484] ? __pfx_ksys_read+0x10/0x10 [ 2055.173474][T32484] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2055.173498][T32484] ? lockdep_hardirqs_on+0x9c/0x150 [ 2055.173523][T32484] __do_fast_syscall_32+0xb6/0x2b0 [ 2055.173547][T32484] ? lockdep_hardirqs_on+0x9c/0x150 [ 2055.173572][T32484] do_fast_syscall_32+0x34/0x80 [ 2055.173595][T32484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2055.173621][T32484] RIP: 0023:0xf7f74539 [ 2055.173641][T32484] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2055.173660][T32484] RSP: 002b:00000000f5466590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2055.173681][T32484] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5466620 [ 2055.173696][T32484] RDX: 000000000000000f RSI: 00000000f7405ff4 RDI: 0000000000000000 [ 2055.173708][T32484] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2055.173721][T32484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2055.173734][T32484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2055.173767][T32484] [ 2055.214591][ T5918] m920x_read = error: -19 [ 2055.226886][T32477] Automatic [ 2055.241119][ T5918] dvb-usb: error while querying for an remote control event. [ 2055.300145][T16499] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2055.303158][ T5832] m920x_read = error: -19 [ 2055.327534][T32477] [ 2055.462737][T32477] vivid-000: Power Present: 0x00000001 [ 2055.476436][T16499] usb 2-1: device descriptor read/8, error -71 [ 2055.483224][T32477] tpg source WxH: 3840x2160 (Y'CbCr) [ 2055.488575][T32477] tpg field: 1 [ 2055.493233][T32487] FAULT_INJECTION: forcing a failure. [ 2055.493233][T32487] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.519905][T32477] tpg crop: (0,0)/3840x2160 [ 2055.520804][ T5832] dvb-usb: error while querying for an remote control event. [ 2055.524520][T32477] tpg compose: (0,0)/3840x2160 [ 2055.538177][T32477] tpg colorspace: 8 [ 2055.559261][T32487] CPU: 1 UID: 0 PID: 32487 Comm: syz.0.7759 Not tainted syzkaller #0 PREEMPT(full) [ 2055.559292][T32487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2055.559307][T32487] Call Trace: [ 2055.559317][T32487] [ 2055.559328][T32487] dump_stack_lvl+0x189/0x250 [ 2055.559357][T32487] ? __pfx____ratelimit+0x10/0x10 [ 2055.559391][T32487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2055.559414][T32487] ? __pfx__printk+0x10/0x10 [ 2055.559443][T32487] ? __pfx___might_resched+0x10/0x10 [ 2055.559473][T32487] ? fs_reclaim_acquire+0x7d/0x100 [ 2055.559505][T32487] should_fail_ex+0x414/0x560 [ 2055.559544][T32487] should_failslab+0xa8/0x100 [ 2055.559575][T32487] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2055.559599][T32487] ? alloc_empty_file+0x55/0x1d0 [ 2055.559628][T32487] ? kernel_text_address+0xa5/0xe0 [ 2055.559665][T32487] alloc_empty_file+0x55/0x1d0 [ 2055.559697][T32487] path_openat+0x107/0x3830 [ 2055.559729][T32487] ? stack_trace_save+0x9c/0xe0 [ 2055.559754][T32487] ? stack_depot_save_flags+0x40/0x860 [ 2055.559788][T32487] ? kasan_save_track+0x4f/0x80 [ 2055.559813][T32487] ? getname_flags+0xb8/0x540 [ 2055.559839][T32487] ? do_sys_openat2+0xbc/0x1c0 [ 2055.559868][T32487] ? __ia32_sys_creat+0x8f/0xc0 [ 2055.559899][T32487] ? do_fast_syscall_32+0x34/0x80 [ 2055.559921][T32487] ? __pfx_path_openat+0x10/0x10 [ 2055.559958][T32487] do_filp_open+0x1fa/0x410 [ 2055.559977][T32487] ? __lock_acquire+0xab9/0xd20 [ 2055.560007][T32487] ? __pfx_do_filp_open+0x10/0x10 [ 2055.560048][T32487] ? _raw_spin_unlock+0x28/0x50 [ 2055.560078][T32487] ? alloc_fd+0x64c/0x6c0 [ 2055.560116][T32487] do_sys_openat2+0x121/0x1c0 [ 2055.560151][T32487] ? __pfx_do_sys_openat2+0x10/0x10 [ 2055.560184][T32487] ? ksys_write+0x22a/0x250 [ 2055.560216][T32487] ? exc_page_fault+0x82/0x100 [ 2055.560236][T32487] ? __pfx_ksys_write+0x10/0x10 [ 2055.560257][T32487] ? arch_syscall_is_vdso_sigreturn+0x175/0x1a0 [ 2055.560288][T32487] __ia32_sys_creat+0x8f/0xc0 [ 2055.560320][T32487] __do_fast_syscall_32+0xb6/0x2b0 [ 2055.560343][T32487] ? lockdep_hardirqs_on+0x9c/0x150 [ 2055.560368][T32487] do_fast_syscall_32+0x34/0x80 [ 2055.560390][T32487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2055.560417][T32487] RIP: 0023:0xf7fb4539 [ 2055.560436][T32487] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2055.560455][T32487] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000008 [ 2055.560478][T32487] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 0000000000000040 [ 2055.560493][T32487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2055.560505][T32487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2055.560517][T32487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2055.560530][T32487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2055.560561][T32487] [ 2055.864727][ T5918] m920x_read = error: -19 [ 2055.869133][ T5918] dvb-usb: error while querying for an remote control event. [ 2055.890046][T32477] tpg transfer function: 0/0 [ 2055.896318][T32477] tpg Y'CbCr encoding: 0/0 [ 2055.902862][T32477] tpg quantization: 0/0 [ 2055.907161][T32477] tpg RGB range: 0/2 [ 2055.911122][T32477] vivid-000: ================== END STATUS ================== [ 2055.969593][T27633] m920x_read = error: -19 [ 2055.974057][T27633] dvb-usb: error while querying for an remote control event. [ 2055.981839][T27633] m920x_read = error: -19 [ 2055.986316][T27633] dvb-usb: error while querying for an remote control event. [ 2055.990099][T16499] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2056.033477][T16499] usb 2-1: device descriptor read/8, error -71 [ 2056.089961][T27633] m920x_read = error: -19 [ 2056.094389][T27633] dvb-usb: error while querying for an remote control event. [ 2056.108479][ T5918] m920x_read = error: -19 [ 2056.112957][ T5918] dvb-usb: error while querying for an remote control event. [ 2056.150905][T16499] usb usb2-port1: unable to enumerate USB device [ 2056.219563][ T5918] m920x_read = error: -19 [ 2056.224065][ T5918] dvb-usb: error while querying for an remote control event. [ 2056.231754][ T5832] m920x_read = error: -19 [ 2056.236283][ T5832] dvb-usb: error while querying for an remote control event. [ 2056.350800][T27633] m920x_read = error: -19 [ 2056.361428][T27633] dvb-usb: error while querying for an remote control event. [ 2056.377696][T27633] m920x_read = error: -19 [ 2056.388616][T27633] dvb-usb: error while querying for an remote control event. [ 2056.486799][T27633] m920x_read = error: -19 [ 2056.501725][T27633] dvb-usb: error while querying for an remote control event. [ 2056.521053][ T5918] m920x_read = error: -19 [ 2056.537744][ T5918] dvb-usb: error while querying for an remote control event. [ 2056.639845][T27633] m920x_read = error: -19 [ 2056.645649][T27633] dvb-usb: error while querying for an remote control event. [ 2056.660710][T27633] m920x_read = error: -19 [ 2056.684134][T27633] dvb-usb: error while querying for an remote control event. [ 2056.781131][ T5918] m920x_read = error: -19 [ 2056.807332][ T5918] dvb-usb: error while querying for an remote control event. [ 2056.941787][T27633] m920x_read = error: -19 [ 2057.010141][T27633] dvb-usb: error while querying for an remote control event. [ 2057.060256][T27633] m920x_read = error: -19 [ 2057.075465][T27633] dvb-usb: error while querying for an remote control event. [ 2057.225238][T27633] m920x_read = error: -19 [ 2057.234682][T27633] dvb-usb: error while querying for an remote control event. [ 2057.242465][ T5918] m920x_read = error: -19 [ 2057.247012][ T5918] dvb-usb: error while querying for an remote control event. [ 2057.349574][T27633] m920x_read = error: -19 [ 2057.354073][T27633] dvb-usb: error while querying for an remote control event. [ 2057.361646][T16479] m920x_read = error: -19 [ 2057.488917][T16479] dvb-usb: error while querying for an remote control event. [ 2057.610315][T16479] m920x_read = error: -19 [ 2057.675743][T16479] dvb-usb: error while querying for an remote control event. [ 2057.683446][ T5918] m920x_read = error: -19 [ 2057.697086][ T5918] dvb-usb: error while querying for an remote control event. [ 2057.771247][T32517] fuse: Bad value for 'fd' [ 2057.829404][T16479] m920x_read = error: -19 [ 2057.833823][T16479] dvb-usb: error while querying for an remote control event. [ 2057.841441][T27633] m920x_read = error: -19 [ 2057.845815][T27633] dvb-usb: error while querying for an remote control event. [ 2057.914039][T32520] FAULT_INJECTION: forcing a failure. [ 2057.914039][T32520] name failslab, interval 1, probability 0, space 0, times 0 [ 2057.930501][T32520] CPU: 1 UID: 0 PID: 32520 Comm: syz.3.7770 Not tainted syzkaller #0 PREEMPT(full) [ 2057.930531][T32520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2057.930544][T32520] Call Trace: [ 2057.930553][T32520] [ 2057.930563][T32520] dump_stack_lvl+0x189/0x250 [ 2057.930589][T32520] ? __pfx____ratelimit+0x10/0x10 [ 2057.930621][T32520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2057.930643][T32520] ? __pfx__printk+0x10/0x10 [ 2057.930671][T32520] ? __pfx___might_resched+0x10/0x10 [ 2057.930699][T32520] ? fs_reclaim_acquire+0x7d/0x100 [ 2057.930729][T32520] should_fail_ex+0x414/0x560 [ 2057.930767][T32520] should_failslab+0xa8/0x100 [ 2057.930795][T32520] __kmalloc_noprof+0xcb/0x7f0 [ 2057.930817][T32520] ? tomoyo_encode+0x28b/0x550 [ 2057.930845][T32520] tomoyo_encode+0x28b/0x550 [ 2057.930876][T32520] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2057.930903][T32520] ? tomoyo_domain+0xd9/0x130 [ 2057.930934][T32520] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2057.930967][T32520] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2057.931003][T32520] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2057.931054][T32520] ? __lock_acquire+0xab9/0xd20 [ 2057.931104][T32520] ? __fget_files+0x2a/0x420 [ 2057.931135][T32520] ? __fget_files+0x3a0/0x420 [ 2057.931159][T32520] ? __fget_files+0x2a/0x420 [ 2057.931190][T32520] security_file_ioctl_compat+0xcb/0x2d0 [ 2057.931226][T32520] __ia32_compat_sys_ioctl+0x128/0x840 [ 2057.931252][T32520] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2057.931274][T32520] ? __fget_files+0x3a0/0x420 [ 2057.931307][T32520] ? fput+0xa0/0xd0 [ 2057.931338][T32520] ? ksys_write+0x22a/0x250 [ 2057.931359][T32520] ? exc_page_fault+0x82/0x100 [ 2057.931380][T32520] ? __pfx_ksys_write+0x10/0x10 [ 2057.931406][T32520] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2057.931431][T32520] ? lockdep_hardirqs_on+0x9c/0x150 [ 2057.931456][T32520] __do_fast_syscall_32+0xb6/0x2b0 [ 2057.931480][T32520] ? lockdep_hardirqs_on+0x9c/0x150 [ 2057.931512][T32520] do_fast_syscall_32+0x34/0x80 [ 2057.931536][T32520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2057.931562][T32520] RIP: 0023:0xf7f74539 [ 2057.931581][T32520] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2057.931600][T32520] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2057.931622][T32520] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 2057.931636][T32520] RDX: 0000000080000f00 RSI: 0000000000000000 RDI: 0000000000000000 [ 2057.931650][T32520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2057.931662][T32520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2057.931675][T32520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2057.931707][T32520] [ 2057.931729][T32520] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2058.223000][T27633] m920x_read = error: -19 [ 2058.229623][T27633] dvb-usb: error while querying for an remote control event. [ 2058.240664][T27633] m920x_read = error: -19 [ 2058.284842][ T5918] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2058.334577][T32526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2058.390164][T27633] dvb-usb: error while querying for an remote control event. [ 2058.427144][T16479] m920x_read = error: -19 [ 2058.439750][T16479] dvb-usb: error while querying for an remote control event. [ 2058.475375][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 2058.482467][ T5918] usb 1-1: config 0 has no interfaces? [ 2058.488287][ T5918] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2058.504182][T16479] m920x_read = error: -19 [ 2058.508925][T16479] dvb-usb: error while querying for an remote control event. [ 2058.549663][T27633] m920x_read = error: -19 [ 2058.554167][T27633] dvb-usb: error while querying for an remote control event. [ 2058.564373][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.624909][ T5918] usb 1-1: config 0 descriptor?? [ 2058.680417][ T5918] m920x_read = error: -19 [ 2058.684862][ T5918] dvb-usb: error while querying for an remote control event. [ 2058.732372][ T5918] m920x_read = error: -19 [ 2058.739532][ T5918] dvb-usb: error while querying for an remote control event. [ 2058.858717][ T5918] m920x_read = error: -19 [ 2058.979362][ T5918] dvb-usb: error while querying for an remote control event. [ 2058.986893][ T5918] m920x_read = error: -19 [ 2059.066501][T32518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7769'. [ 2059.090175][T16479] m920x_read = error: -19 [ 2059.114746][T16479] dvb-usb: error while querying for an remote control event. [ 2059.122890][ T5918] dvb-usb: error while querying for an remote control event. [ 2059.124018][T32538] binder: 32531:32538 ioctl c0306201 0 returned -14 [ 2059.192098][T32518] vlan0: entered promiscuous mode [ 2059.198074][T32518] team0: entered promiscuous mode [ 2059.217514][T32518] team_slave_0: entered promiscuous mode [ 2059.248494][ T5918] m920x_read = error: -19 [ 2059.253280][ T5918] dvb-usb: error while querying for an remote control event. [ 2059.261155][T16479] m920x_read = error: -19 [ 2059.265559][T16479] dvb-usb: error while querying for an remote control event. [ 2059.287304][T32518] team_slave_1: entered promiscuous mode [ 2059.312598][T32518] batadv1: entered promiscuous mode [ 2059.374478][T16479] m920x_read = error: -19 [ 2059.379008][T16479] dvb-usb: error while querying for an remote control event. [ 2059.389310][ T5918] m920x_read = error: -19 [ 2059.393890][ T5918] dvb-usb: error while querying for an remote control event. [ 2059.460241][T25019] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2059.509462][T27633] m920x_read = error: -19 [ 2059.516161][T27633] dvb-usb: error while querying for an remote control event. [ 2059.525101][ T5918] m920x_read = error: -19 [ 2059.529711][ T5918] dvb-usb: error while querying for an remote control event. [ 2059.620305][T25019] usb 5-1: Using ep0 maxpacket: 32 [ 2059.661005][ T5918] m920x_read = error: -19 [ 2059.672391][T25019] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 2059.755319][T25019] usb 5-1: config 0 has no interface number 0 [ 2059.769002][ T5918] dvb-usb: error while querying for an remote control event. [ 2059.777386][T27633] m920x_read = error: -19 [ 2059.784066][T27633] dvb-usb: error while querying for an remote control event. [ 2059.905878][T25019] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2059.909455][T27633] m920x_read = error: -19 [ 2059.930122][T25019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.938767][T27633] dvb-usb: error while querying for an remote control event. [ 2059.938852][T27633] m920x_read = error: -19 [ 2059.938875][T27633] dvb-usb: error while querying for an remote control event. [ 2060.018737][T25019] usb 5-1: Product: syz [ 2060.028849][T32553] input: syz1 as /devices/virtual/input/input119 [ 2060.037187][T25019] usb 5-1: Manufacturer: syz [ 2060.039403][T27633] m920x_read = error: -19 [ 2060.046970][T27633] dvb-usb: error while querying for an remote control event. [ 2060.050432][T25019] usb 5-1: SerialNumber: syz [ 2060.056663][ T5918] m920x_read = error: -19 [ 2060.072789][T25019] usb 5-1: config 0 descriptor?? [ 2060.081366][ T5918] dvb-usb: error while querying for an remote control event. [ 2060.139046][T25019] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2060.180322][T16479] m920x_read = error: -19 [ 2060.184803][T16479] dvb-usb: error while querying for an remote control event. [ 2060.209388][T27633] m920x_read = error: -19 [ 2060.215050][T27633] dvb-usb: error while querying for an remote control event. [ 2060.346339][T27633] m920x_read = error: -19 [ 2060.351329][T27633] dvb-usb: error while querying for an remote control event. [ 2060.356938][T25019] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2060.359022][T27633] m920x_read = error: -19 [ 2060.373733][T27633] dvb-usb: error while querying for an remote control event. [ 2060.389526][ T5918] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2060.395371][T25019] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2060.459433][T27633] m920x_read = error: -19 [ 2060.463967][T27633] dvb-usb: error while querying for an remote control event. [ 2060.491844][T27633] m920x_read = error: -19 [ 2060.496416][T27633] dvb-usb: error while querying for an remote control event. [ 2060.580362][T27633] m920x_read = error: -19 [ 2060.611006][T27633] dvb-usb: error while querying for an remote control event. [ 2060.619573][T27633] m920x_read = error: -19 [ 2060.624110][T27633] dvb-usb: error while querying for an remote control event. [ 2060.647007][ T5918] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2060.668903][ T5918] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2060.686940][ T5918] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2060.696692][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.719643][T27633] m920x_read = error: -19 [ 2060.724081][T27633] dvb-usb: error while querying for an remote control event. [ 2060.751319][T27633] m920x_read = error: -19 [ 2060.760602][T27633] dvb-usb: error while querying for an remote control event. [ 2060.776378][T32556] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2060.832723][ T5918] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2060.841012][T27633] m920x_read = error: -19 [ 2060.846303][T27633] dvb-usb: error while querying for an remote control event. [ 2060.899387][T27633] m920x_read = error: -19 [ 2060.927783][T27633] dvb-usb: error while querying for an remote control event. [ 2060.935959][T16479] usb 1-1: USB disconnect, device number 18 [ 2060.969726][T27633] m920x_read = error: -19 [ 2061.076199][T27633] dvb-usb: error while querying for an remote control event. [ 2061.086365][ T5918] m920x_read = error: -19 [ 2061.095005][ T5918] dvb-usb: error while querying for an remote control event. [ 2061.169769][T16479] usb 3-1: USB disconnect, device number 47 [ 2061.243172][T27633] m920x_read = error: -19 [ 2061.247974][T27633] dvb-usb: error while querying for an remote control event. [ 2061.260459][ T5918] m920x_read = error: -19 [ 2061.264968][ T5918] dvb-usb: error while querying for an remote control event. [ 2061.379418][ T5918] m920x_read = error: -19 [ 2061.389314][ T5918] dvb-usb: error while querying for an remote control event. [ 2061.406434][ T5918] m920x_read = error: -19 [ 2061.417069][ T5918] dvb-usb: error while querying for an remote control event. [ 2061.510110][ T5918] m920x_read = error: -19 [ 2061.514564][ T5918] dvb-usb: error while querying for an remote control event. [ 2061.584881][T29400] m920x_read = error: -19 [ 2061.592510][T29400] dvb-usb: error while querying for an remote control event. [ 2061.714761][ T5832] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2061.729487][T29400] m920x_read = error: -19 [ 2061.734104][T29400] dvb-usb: error while querying for an remote control event. [ 2061.790823][T29400] m920x_read = error: -19 [ 2061.795858][T29400] dvb-usb: error while querying for an remote control event. [ 2061.804049][T32588] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 2, id = 0 [ 2061.850060][T29400] m920x_read = error: -19 [ 2061.854636][T29400] dvb-usb: error while querying for an remote control event. [ 2061.876762][ T5832] usb 4-1: config 0 has no interfaces? [ 2061.904912][ T5832] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2061.993416][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.001674][T29030] m920x_read = error: -19 [ 2062.006199][T29030] dvb-usb: error while querying for an remote control event. [ 2062.051827][ T5832] usb 4-1: Product: syz [ 2062.065385][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2062.074799][T25019] usb 5-1: USB disconnect, device number 23 [ 2062.085560][T25019] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2062.102218][ T5832] usb 4-1: Manufacturer: syz [ 2062.114554][ T5832] usb 4-1: SerialNumber: syz [ 2062.129678][T29030] m920x_read = error: -19 [ 2062.135370][T29030] dvb-usb: error while querying for an remote control event. [ 2062.149364][T29400] m920x_read = error: -19 [ 2062.163402][ T5832] usb 4-1: config 0 descriptor?? [ 2062.201963][T29400] dvb-usb: error while querying for an remote control event. [ 2062.225349][T25019] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2062.319420][ T5832] m920x_read = error: -19 [ 2062.323805][ T5832] dvb-usb: error while querying for an remote control event. [ 2062.332281][T29400] m920x_read = error: -19 [ 2062.333255][T25019] quatech2 5-1:0.51: device disconnected [ 2062.336672][T29400] dvb-usb: error while querying for an remote control event. [ 2062.448274][T32578] pimreg: entered allmulticast mode [ 2062.457832][ T5832] m920x_read = error: -19 [ 2062.463422][ T5832] dvb-usb: error while querying for an remote control event. [ 2062.472725][T32578] pimreg: left allmulticast mode [ 2062.503228][T29400] m920x_read = error: -19 [ 2062.507635][T29400] dvb-usb: error while querying for an remote control event. [ 2062.623520][ T5832] m920x_read = error: -19 [ 2062.627914][ T5832] dvb-usb: error while querying for an remote control event. [ 2062.639430][T29400] m920x_read = error: -19 [ 2062.643849][T29400] dvb-usb: error while querying for an remote control event. [ 2062.730089][T25019] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2062.749852][ T5920] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2062.759419][T29400] m920x_read = error: -19 [ 2062.764286][T29400] dvb-usb: error while querying for an remote control event. [ 2062.771836][ T5832] m920x_read = error: -19 [ 2062.776209][ T5832] dvb-usb: error while querying for an remote control event. [ 2062.811603][T32611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7800'. [ 2062.838189][T32611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7800'. [ 2062.889641][ T5832] m920x_read = error: -19 [ 2062.894088][ T5832] dvb-usb: error while querying for an remote control event. [ 2062.905946][T25019] usb 5-1: config 0 has no interfaces? [ 2062.913265][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 2062.924207][ T5920] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2062.930473][ T5832] m920x_read = error: -19 [ 2062.934385][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.938368][ T5832] dvb-usb: error while querying for an remote control event. [ 2062.967802][T25019] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2062.988164][ T5920] usb 3-1: Product: syz [ 2062.997499][T25019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.007849][ T5920] usb 3-1: Manufacturer: syz [ 2063.009430][ T5832] m920x_read = error: -19 [ 2063.017855][ T5920] usb 3-1: SerialNumber: syz [ 2063.018819][ T5832] dvb-usb: error while querying for an remote control event. [ 2063.030671][T25019] usb 5-1: Product: syz [ 2063.037299][T25019] usb 5-1: Manufacturer: syz [ 2063.055875][T25019] usb 5-1: SerialNumber: syz [ 2063.063906][ T5920] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2063.069410][ T5832] m920x_read = error: -19 [ 2063.074914][ T5832] dvb-usb: error while querying for an remote control event. [ 2063.082547][ T5920] r8152-cfgselector 3-1: config 0 descriptor?? [ 2063.097123][T25019] usb 5-1: config 0 descriptor?? [ 2063.151197][ T5832] m920x_read = error: -19 [ 2063.155644][ T5832] dvb-usb: error while querying for an remote control event. [ 2063.190277][ T5832] m920x_read = error: -19 [ 2063.195228][ T5832] dvb-usb: error while querying for an remote control event. [ 2063.269353][ T5832] m920x_read = error: -19 [ 2063.276034][ T5832] dvb-usb: error while querying for an remote control event. [ 2063.309382][ T5832] m920x_read = error: -19 [ 2063.331141][T32600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.339837][ T5832] dvb-usb: error while querying for an remote control event. [ 2063.350317][T32600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.378542][ T5832] usb 5-1: USB disconnect, device number 24 [ 2063.389629][T29400] m920x_read = error: -19 [ 2063.395053][T29400] dvb-usb: error while querying for an remote control event. [ 2063.459352][T29400] m920x_read = error: -19 [ 2063.466211][T29400] dvb-usb: error while querying for an remote control event. [ 2063.519468][T29400] m920x_read = error: -19 [ 2063.519966][T16499] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2063.523900][T29400] dvb-usb: error while querying for an remote control event. [ 2063.553170][T29400] r8152-cfgselector 3-1: USB disconnect, device number 48 [ 2063.589348][ T5832] m920x_read = error: -19 [ 2063.594463][ T5832] dvb-usb: error while querying for an remote control event. [ 2063.649572][ T5832] m920x_read = error: -19 [ 2063.654326][ T5832] dvb-usb: error while querying for an remote control event. [ 2063.669687][T16499] usb 1-1: device descriptor read/64, error -71 [ 2063.710062][ T5832] m920x_read = error: -19 [ 2063.714611][ T5832] dvb-usb: error while querying for an remote control event. [ 2063.769451][T29400] m920x_read = error: -19 [ 2063.774143][T29400] dvb-usb: error while querying for an remote control event. [ 2063.840154][T29400] m920x_read = error: -19 [ 2063.844703][T29400] dvb-usb: error while querying for an remote control event. [ 2063.889428][T29400] m920x_read = error: -19 [ 2063.893846][T29400] dvb-usb: error while querying for an remote control event. [ 2063.910149][T16499] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2063.959345][T29400] m920x_read = error: -19 [ 2063.968433][T29400] dvb-usb: error while querying for an remote control event. [ 2064.019537][T29400] m920x_read = error: -19 [ 2064.024015][T29400] dvb-usb: error while querying for an remote control event. [ 2064.060077][T16499] usb 1-1: device descriptor read/64, error -71 [ 2064.091697][T29400] m920x_read = error: -19 [ 2064.099794][T29400] dvb-usb: error while querying for an remote control event. [ 2064.139873][T29400] m920x_read = error: -19 [ 2064.145729][T29400] dvb-usb: error while querying for an remote control event. [ 2064.180587][T16499] usb usb1-port1: attempt power cycle [ 2064.229660][ T5832] m920x_read = error: -19 [ 2064.234320][ T5832] dvb-usb: error while querying for an remote control event. [ 2064.240338][ T5920] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2064.259820][ T5832] m920x_read = error: -19 [ 2064.264688][ T5832] dvb-usb: error while querying for an remote control event. [ 2064.349461][ T5832] m920x_read = error: -19 [ 2064.353943][ T5832] dvb-usb: error while querying for an remote control event. [ 2064.379779][ T5920] usb 5-1: device descriptor read/64, error -71 [ 2064.389496][ T5832] m920x_read = error: -19 [ 2064.394045][ T5832] dvb-usb: error while querying for an remote control event. [ 2064.401627][T29400] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2064.469403][ T5832] m920x_read = error: -19 [ 2064.473873][ T5832] dvb-usb: error while querying for an remote control event. [ 2064.519544][ T5832] m920x_read = error: -19 [ 2064.519996][T16499] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2064.532270][ T5832] dvb-usb: error while querying for an remote control event. [ 2064.550435][T16499] usb 1-1: device descriptor read/8, error -71 [ 2064.561500][T29400] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2064.574626][T29400] usb 3-1: New USB device found, idVendor=591e, idProduct=90cd, bcdDevice= 0.6e [ 2064.583823][T29400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.592039][ T5832] m920x_read = error: -19 [ 2064.596417][ T5832] dvb-usb: error while querying for an remote control event. [ 2064.607030][T29400] usb 3-1: config 0 descriptor?? [ 2064.619333][ T5920] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2064.649957][ T5832] m920x_read = error: -19 [ 2064.654741][ T5832] dvb-usb: error while querying for an remote control event. [ 2064.718938][ T5832] usb 4-1: USB disconnect, device number 125 [ 2064.744927][T27633] m920x_read = error: -19 [ 2064.751380][ T5920] usb 5-1: device descriptor read/64, error -71 [ 2064.756458][T27633] dvb-usb: error while querying for an remote control event. [ 2064.780334][T27633] m920x_read = error: -19 [ 2064.784831][T27633] dvb-usb: error while querying for an remote control event. [ 2064.790385][T16499] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2064.821422][T16499] usb 1-1: device descriptor read/8, error -71 [ 2064.834426][T32636] FAULT_INJECTION: forcing a failure. [ 2064.834426][T32636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2064.848447][T32636] CPU: 0 UID: 0 PID: 32636 Comm: syz.3.7811 Not tainted syzkaller #0 PREEMPT(full) [ 2064.848474][T32636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2064.848484][T32636] Call Trace: [ 2064.848490][T32636] [ 2064.848496][T32636] dump_stack_lvl+0x189/0x250 [ 2064.848516][T32636] ? __pfx____ratelimit+0x10/0x10 [ 2064.848547][T32636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2064.848569][T32636] ? __pfx__printk+0x10/0x10 [ 2064.848589][T32636] ? __might_fault+0xb0/0x130 [ 2064.848622][T32636] should_fail_ex+0x414/0x560 [ 2064.848657][T32636] _copy_from_user+0x2d/0xb0 [ 2064.848681][T32636] get_compat_msghdr+0xad/0x4a0 [ 2064.848718][T32636] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2064.848749][T32636] ? ___sys_recvmsg+0x1c4/0x510 [ 2064.848766][T32636] ? kfree+0x4d/0x6d0 [ 2064.848790][T32636] ___sys_recvmsg+0x17f/0x510 [ 2064.848809][T32636] ? __pfx____sys_recvmsg+0x10/0x10 [ 2064.848839][T32636] ? __fget_files+0x3a0/0x420 [ 2064.848876][T32636] do_recvmmsg+0x36a/0x770 [ 2064.848904][T32636] ? __pfx_do_recvmmsg+0x10/0x10 [ 2064.848923][T32636] ? ksys_write+0x1cb/0x250 [ 2064.848956][T32636] ? __fget_files+0x3a0/0x420 [ 2064.848982][T32636] __sys_recvmmsg+0x19d/0x280 [ 2064.849002][T32636] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2064.849041][T32636] ? __pfx_ksys_write+0x10/0x10 [ 2064.849086][T32636] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2064.849124][T32636] __do_fast_syscall_32+0xb6/0x2b0 [ 2064.849142][T32636] ? lockdep_hardirqs_on+0x9c/0x150 [ 2064.849160][T32636] do_fast_syscall_32+0x34/0x80 [ 2064.849188][T32636] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2064.849214][T32636] RIP: 0023:0xf7f74539 [ 2064.849234][T32636] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2064.849255][T32636] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2064.849277][T32636] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2064.849292][T32636] RDX: 0000000000000284 RSI: 0000000000000002 RDI: 0000000000000000 [ 2064.849305][T32636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2064.849318][T32636] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2064.849328][T32636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2064.849351][T32636] [ 2064.910207][T27633] m920x_read = error: -19 [ 2064.915161][ T5920] usb usb5-port1: attempt power cycle [ 2064.925173][T27633] dvb-usb: error while querying for an remote control event. [ 2064.930561][T16499] usb usb1-port1: unable to enumerate USB device [ 2064.933663][ T5918] m920x_read = error: -19 [ 2065.110743][ T5918] dvb-usb: error while querying for an remote control event. [ 2065.219515][ T5918] m920x_read = error: -19 [ 2065.223982][ T5918] dvb-usb: error while querying for an remote control event. [ 2065.231512][ T5832] m920x_read = error: -19 [ 2065.235885][ T5832] dvb-usb: error while querying for an remote control event. [ 2065.299537][ T5920] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2065.320695][ T5920] usb 5-1: device descriptor read/8, error -71 [ 2065.378965][ T5832] m920x_read = error: -19 [ 2065.419677][ T5832] dvb-usb: error while querying for an remote control event. [ 2065.432762][ T5832] m920x_read = error: -19 [ 2065.440662][ T5832] dvb-usb: error while querying for an remote control event. [ 2065.592186][T16499] m920x_read = error: -19 [ 2065.592761][ T5832] m920x_read = error: -19 [ 2065.610917][T16499] dvb-usb: error while querying for an remote control event. [ 2065.632581][ T5832] dvb-usb: error while querying for an remote control event. [ 2065.669899][ T5920] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2065.691974][ T5920] usb 5-1: device descriptor read/8, error -71 [ 2065.720587][T16499] m920x_read = error: -19 [ 2065.727153][T16499] dvb-usb: error while querying for an remote control event. [ 2065.749401][ T5832] m920x_read = error: -19 [ 2065.755657][ T5832] dvb-usb: error while querying for an remote control event. [ 2065.800370][ T5920] usb usb5-port1: unable to enumerate USB device [ 2065.840026][ T5920] m920x_read = error: -19 [ 2065.844759][ T5920] dvb-usb: error while querying for an remote control event. [ 2065.869387][ T5832] m920x_read = error: -19 [ 2065.905694][ T5832] dvb-usb: error while querying for an remote control event. [ 2066.182489][ T5832] m920x_read = error: -19 [ 2066.182928][ T5920] m920x_read = error: -19 [ 2066.195843][ T5920] dvb-usb: error while querying for an remote control event. [ 2066.195996][ T5832] dvb-usb: error while querying for an remote control event. [ 2066.310768][T16499] m920x_read = error: -19 [ 2066.315328][T16499] dvb-usb: error while querying for an remote control event. [ 2066.331194][ T5918] m920x_read = error: -19 [ 2066.335633][ T5918] dvb-usb: error while querying for an remote control event. [ 2066.430006][T16499] m920x_read = error: -19 [ 2066.434600][T16499] dvb-usb: error while querying for an remote control event. [ 2066.480250][ T5918] m920x_read = error: -19 [ 2066.484709][ T5918] dvb-usb: error while querying for an remote control event. [ 2066.550065][T16499] m920x_read = error: -19 [ 2066.555514][T16499] dvb-usb: error while querying for an remote control event. [ 2066.583008][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2066.583027][ T30] audit: type=1326 audit(1760304005.913:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.0.7813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2066.619931][ T5918] m920x_read = error: -19 [ 2066.624555][ T5918] dvb-usb: error while querying for an remote control event. [ 2066.632317][ T30] audit: type=1326 audit(1760304005.923:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.0.7813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2066.670355][T16499] m920x_read = error: -19 [ 2066.674784][T16499] dvb-usb: error while querying for an remote control event. [ 2066.713845][ T30] audit: type=1326 audit(1760304006.043:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.0.7813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2066.737083][ T30] audit: type=1326 audit(1760304006.043:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.0.7813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 2066.759476][ T5918] m920x_read = error: -19 [ 2066.763860][ T5918] dvb-usb: error while querying for an remote control event. [ 2066.789977][T16499] m920x_read = error: -19 [ 2066.794608][T16499] dvb-usb: error while querying for an remote control event. [ 2066.879533][ T5918] m920x_read = error: -19 [ 2066.883948][ T5918] dvb-usb: error while querying for an remote control event. [ 2066.909975][T16499] m920x_read = error: -19 [ 2066.914556][T16499] dvb-usb: error while querying for an remote control event. [ 2067.009567][ T5918] m920x_read = error: -19 [ 2067.014260][ T5918] dvb-usb: error while querying for an remote control event. [ 2067.030044][ T5920] m920x_read = error: -19 [ 2067.035506][ T5920] dvb-usb: error while querying for an remote control event. [ 2067.129516][ T5918] m920x_read = error: -19 [ 2067.137578][ T5918] dvb-usb: error while querying for an remote control event. [ 2067.160519][T16499] m920x_read = error: -19 [ 2067.164945][T16499] dvb-usb: error while querying for an remote control event. [ 2067.259453][ T5918] m920x_read = error: -19 [ 2067.263984][ T5918] dvb-usb: error while querying for an remote control event. [ 2067.290008][ T5920] m920x_read = error: -19 [ 2067.294426][ T5920] dvb-usb: error while querying for an remote control event. [ 2067.296918][T29400] usbhid 3-1:0.0: can't add hid device: -71 [ 2067.334940][T29400] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2067.368417][T29400] usb 3-1: USB disconnect, device number 49 [ 2067.397807][ T5918] m920x_read = error: -19 [ 2067.406373][ T5918] dvb-usb: error while querying for an remote control event. [ 2067.430007][T16499] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2067.450428][ T5920] m920x_read = error: -19 [ 2067.454845][ T5920] dvb-usb: error while querying for an remote control event. [ 2067.467180][T32663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7820'. [ 2067.490496][T32666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7821'. [ 2067.500984][T32666] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7821'. [ 2067.532510][ T5918] m920x_read = error: -19 [ 2067.539534][ T5918] dvb-usb: error while querying for an remote control event. [ 2067.581369][ T5920] m920x_read = error: -19 [ 2067.590769][ T5920] dvb-usb: error while querying for an remote control event. [ 2067.614667][T16499] usb 5-1: config 0 has no interfaces? [ 2067.625474][T16499] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2067.639987][T16499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.648037][T16499] usb 5-1: Product: syz [ 2067.661582][T29400] m920x_read = error: -19 [ 2067.664196][T16499] usb 5-1: Manufacturer: syz [ 2067.671555][T16499] usb 5-1: SerialNumber: syz [ 2067.679398][T29400] dvb-usb: error while querying for an remote control event. [ 2067.697305][T16499] usb 5-1: config 0 descriptor?? [ 2067.703904][ T5920] m920x_read = error: -19 [ 2067.708288][ T5920] dvb-usb: error while querying for an remote control event. [ 2067.809390][T29400] m920x_read = error: -19 [ 2067.813826][T29400] dvb-usb: error while querying for an remote control event. [ 2067.830253][ T5920] m920x_read = error: -19 [ 2067.835000][ T5920] dvb-usb: error while querying for an remote control event. [ 2067.940467][ T5918] m920x_read = error: -19 [ 2067.944923][ T5918] dvb-usb: error while querying for an remote control event. [ 2067.960443][ T5920] m920x_read = error: -19 [ 2067.967182][T32658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2067.975154][ T5920] dvb-usb: error while querying for an remote control event. [ 2067.984285][T32658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.000213][T16499] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2068.008565][T16500] usb 5-1: USB disconnect, device number 29 [ 2068.056754][T32687] delete_channel: no stack [ 2068.126440][ T5918] m920x_read = error: -19 [ 2068.139291][ T5918] dvb-usb: error while querying for an remote control event. [ 2068.160541][ T5920] m920x_read = error: -19 [ 2068.164955][ T5920] dvb-usb: error while querying for an remote control event. [ 2068.179579][T16499] usb 2-1: device descriptor read/64, error -71 [ 2068.259589][ T5918] m920x_read = error: -19 [ 2068.264141][ T5918] dvb-usb: error while querying for an remote control event. [ 2068.290127][T16500] m920x_read = error: -19 [ 2068.295423][T16500] dvb-usb: error while querying for an remote control event. [ 2068.379621][ T5918] m920x_read = error: -19 [ 2068.419907][T16499] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2068.434675][T16500] m920x_read = error: -19 [ 2068.442464][T16500] dvb-usb: error while querying for an remote control event. [ 2068.490550][ T5918] dvb-usb: error while querying for an remote control event. [ 2068.573159][T16500] m920x_read = error: -19 [ 2068.577601][T16499] usb 2-1: device descriptor read/64, error -71 [ 2068.589127][T16500] dvb-usb: error while querying for an remote control event. [ 2068.612999][ T5918] m920x_read = error: -19 [ 2068.617591][ T5918] dvb-usb: error while querying for an remote control event. [ 2068.718497][T16499] usb usb2-port1: attempt power cycle [ 2068.725069][T16500] m920x_read = error: -19 [ 2068.731436][T16500] dvb-usb: error while querying for an remote control event. [ 2068.779457][ T5918] m920x_read = error: -19 [ 2068.783876][ T5918] dvb-usb: error while querying for an remote control event. [ 2068.851791][T16500] m920x_read = error: -19 [ 2068.856207][T16500] dvb-usb: error while querying for an remote control event. [ 2068.897567][T32695] FAULT_INJECTION: forcing a failure. [ 2068.897567][T32695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2068.919497][ T5918] m920x_read = error: -19 [ 2068.924108][ T5918] dvb-usb: error while querying for an remote control event. [ 2068.934219][T32695] CPU: 0 UID: 0 PID: 32695 Comm: syz.3.7829 Not tainted syzkaller #0 PREEMPT(full) [ 2068.934247][T32695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2068.934259][T32695] Call Trace: [ 2068.934268][T32695] [ 2068.934278][T32695] dump_stack_lvl+0x189/0x250 [ 2068.934306][T32695] ? __pfx____ratelimit+0x10/0x10 [ 2068.934339][T32695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2068.934360][T32695] ? __pfx__printk+0x10/0x10 [ 2068.934382][T32695] ? __might_fault+0xb0/0x130 [ 2068.934416][T32695] should_fail_ex+0x414/0x560 [ 2068.934454][T32695] _copy_from_user+0x2d/0xb0 [ 2068.934484][T32695] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 2068.934539][T32695] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 2068.934580][T32695] ? rcu_is_watching+0x15/0xb0 [ 2068.934611][T32695] ? trace_kmalloc+0x1f/0xd0 [ 2068.934631][T32695] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 2068.934660][T32695] ip_generic_getfrag+0x12f/0x2b0 [ 2068.934689][T32695] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2068.934725][T32695] ? skb_put+0x11b/0x210 [ 2068.934758][T32695] __ip6_append_data+0x3974/0x3f30 [ 2068.934799][T32695] ? __lock_acquire+0xab9/0xd20 [ 2068.934849][T32695] ? __pfx_raw6_getfrag+0x10/0x10 [ 2068.934897][T32695] ? __pfx___ip6_append_data+0x10/0x10 [ 2068.934919][T32695] ? __pfx_ip6_mtu+0x10/0x10 [ 2068.934951][T32695] ip6_append_data+0x1c1/0x380 [ 2068.934981][T32695] ? __pfx_raw6_getfrag+0x10/0x10 [ 2068.935012][T32695] rawv6_sendmsg+0x1286/0x1830 [ 2068.935058][T32695] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 2068.935113][T32695] ? __pfx_aa_sk_perm+0x10/0x10 [ 2068.935138][T32695] ? sock_rps_record_flow+0x19/0x410 [ 2068.935170][T32695] ? inet_sendmsg+0x2f4/0x370 [ 2068.935198][T32695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2068.935230][T32695] __sock_sendmsg+0x19c/0x270 [ 2068.935259][T32695] sock_write_iter+0x279/0x360 [ 2068.935286][T32695] ? __pfx_sock_write_iter+0x10/0x10 [ 2068.935334][T32695] do_iter_readv_writev+0x623/0x8c0 [ 2068.935368][T32695] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2068.935390][T32695] ? common_file_perm+0x1b5/0x230 [ 2068.935419][T32695] ? bpf_lsm_file_permission+0x9/0x20 [ 2068.935448][T32695] ? security_file_permission+0x75/0x290 [ 2068.935481][T32695] ? rw_verify_area+0x255/0x4d0 [ 2068.935508][T32695] vfs_writev+0x31a/0x960 [ 2068.935542][T32695] ? __lock_acquire+0xab9/0xd20 [ 2068.935571][T32695] ? __pfx_vfs_writev+0x10/0x10 [ 2068.935616][T32695] ? __fget_files+0x2a/0x420 [ 2068.935648][T32695] ? __fget_files+0x3a0/0x420 [ 2068.935673][T32695] ? __fget_files+0x2a/0x420 [ 2068.935714][T32695] do_writev+0x14d/0x2d0 [ 2068.935747][T32695] ? __pfx_do_writev+0x10/0x10 [ 2068.935779][T32695] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2068.935804][T32695] ? lockdep_hardirqs_on+0x9c/0x150 [ 2068.935829][T32695] __do_fast_syscall_32+0xb6/0x2b0 [ 2068.935853][T32695] ? lockdep_hardirqs_on+0x9c/0x150 [ 2068.935879][T32695] do_fast_syscall_32+0x34/0x80 [ 2068.935902][T32695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2068.935928][T32695] RIP: 0023:0xf7f74539 [ 2068.935946][T32695] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2068.935966][T32695] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 2068.935989][T32695] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2068.936003][T32695] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2068.936016][T32695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2068.936028][T32695] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2068.936040][T32695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2068.936073][T32695] [ 2069.310642][T16500] m920x_read = error: -19 [ 2069.314391][ T5832] m920x_read = error: -19 [ 2069.315018][T16500] dvb-usb: error while querying for an remote control event. [ 2069.319538][ T5832] dvb-usb: error while querying for an remote control event. [ 2069.399830][ T31] INFO: task kworker/0:2:25958 blocked for more than 143 seconds. [ 2069.418175][ T31] Not tainted syzkaller #0 [ 2069.447392][T16500] m920x_read = error: -19 [ 2069.452533][T16500] dvb-usb: error while querying for an remote control event. [ 2069.492353][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2069.501894][ T5918] m920x_read = error: -19 [ 2069.508764][ T5918] dvb-usb: error while querying for an remote control event. [ 2069.520536][ T31] task:kworker/0:2 state:D stack:22952 pid:25958 tgid:25958 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2069.533326][ T31] Workqueue: usb_hub_wq hub_event [ 2069.538413][ T31] Call Trace: [ 2069.545482][ T31] [ 2069.548462][ T31] __schedule+0x1798/0x4cc0 [ 2069.550255][T16499] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2069.556922][ T31] ? __pfx___schedule+0x10/0x10 [ 2069.566537][ T31] ? schedule+0x91/0x360 [ 2069.570074][ T5920] m920x_read = error: -19 [ 2069.575219][ T5920] dvb-usb: error while querying for an remote control event. [ 2069.600004][T16499] usb 2-1: device descriptor read/8, error -71 [ 2069.615583][ T31] schedule+0x165/0x360 [ 2069.625706][ T31] schedule_preempt_disabled+0x13/0x30 [ 2069.652056][ T5918] m920x_read = error: -19 [ 2069.656515][ T5918] dvb-usb: error while querying for an remote control event. [ 2069.685568][ T31] __mutex_lock+0x7e6/0x1350 [ 2069.690149][ T5920] m920x_read = error: -19 [ 2069.694247][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2069.695149][ T5920] dvb-usb: error while querying for an remote control event. [ 2069.711282][ T31] ? hub_event+0x21e5/0x4a20 [ 2069.718002][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2069.724476][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2069.739282][ T31] hub_event+0x21e5/0x4a20 [ 2069.746177][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2069.752714][ T31] ? __pfx_hub_event+0x10/0x10 [ 2069.759105][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2069.765829][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2069.775051][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2069.781018][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2069.788334][ T31] process_scheduled_works+0xae1/0x17b0 [ 2069.794827][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2069.801020][ T5918] m920x_read = error: -19 [ 2069.805416][ T5918] dvb-usb: error while querying for an remote control event. [ 2069.810143][ T5920] m920x_read = error: -19 [ 2069.817374][ T5920] dvb-usb: error while querying for an remote control event. [ 2069.826621][ T31] worker_thread+0x8a0/0xda0 [ 2069.831574][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2069.839082][ T31] ? __kthread_parkme+0x7b/0x200 [ 2069.840098][T16499] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2069.844738][ T31] kthread+0x711/0x8a0 [ 2069.844774][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2069.863376][ T31] ? __pfx_kthread+0x10/0x10 [ 2069.868973][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2069.871105][T16499] usb 2-1: device descriptor read/8, error -71 [ 2069.885435][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2069.893010][ T31] ? __pfx_kthread+0x10/0x10 [ 2069.902496][ T31] ret_from_fork+0x4bc/0x870 [ 2069.911328][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2069.919417][ T31] ? __switch_to_asm+0x39/0x70 [ 2069.926337][ T31] ? __switch_to_asm+0x33/0x70 [ 2069.930464][ T5920] m920x_read = error: -19 [ 2069.936233][ T5920] dvb-usb: error while querying for an remote control event. [ 2069.988507][ T5918] m920x_read = error: -19 [ 2069.990628][T16499] usb usb2-port1: unable to enumerate USB device [ 2069.994180][ T5918] dvb-usb: error while querying for an remote control event. [ 2070.007268][ T31] ? __pfx_kthread+0x10/0x10 [ 2070.014464][ T31] ret_from_fork_asm+0x1a/0x30 [ 2070.019660][ T31] [ 2070.044958][ T31] [ 2070.044958][ T31] Showing all locks held in the system: [ 2070.055582][ T31] 2 locks held by ksoftirqd/0/15: [ 2070.089526][ T31] #0: ffff8880b863a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2070.100594][ T31] #1: ffff8880b8624048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2070.113956][ T31] 1 lock held by khungtaskd/31: [ 2070.119016][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2070.120148][T16499] m920x_read = error: -19 [ 2070.134209][T16499] dvb-usb: error while querying for an remote control event. [ 2070.134252][ T5918] m920x_read = error: -19 [ 2070.147021][ T5918] dvb-usb: error while querying for an remote control event. [ 2070.155788][ T31] 2 locks held by getty/5584: [ 2070.160855][ T31] #0: ffff8880300be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2070.171198][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2070.182240][ T31] 5 locks held by kworker/1:3/5830: [ 2070.187559][ T31] #0: ffff888020aff148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2070.199172][ T31] #1: ffffc9000432fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2070.211764][ T31] #2: ffff8880289d9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2070.222510][ T31] #3: ffff8880289dc518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2070.235646][ T31] #4: ffff888145377e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2070.246255][ T31] 5 locks held by kworker/1:5/22136: [ 2070.251894][T16499] m920x_read = error: -19 [ 2070.252229][ T31] #0: ffff888020aff148 [ 2070.256441][T16499] dvb-usb: error while querying for an remote control event. [ 2070.269027][ T31] ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2070.309882][ T5918] m920x_read = error: -19 [ 2070.309912][ T5918] dvb-usb: error while querying for an remote control event. [ 2070.322765][ T31] #1: ffffc90003a6fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2070.336179][ T31] #2: ffff8880283db198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2070.348911][ T31] #3: ffff88814572f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2070.359762][T16499] m920x_read = error: -19 [ 2070.364146][T16499] dvb-usb: error while querying for an remote control event. [ 2070.373041][ T31] #4: ffff888145784168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2070.383384][ T31] 5 locks held by kworker/1:0/24978: [ 2070.390373][ T31] #0: ffff888020aff148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2070.405706][ T31] #1: ffffc9000417fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2070.419110][ T31] #2: [ 2070.419712][T29400] m920x_read = error: -19 [ 2070.419884][ T31] ffff888145b32198 [ 2070.422787][T29400] dvb-usb: error while querying for an remote control event. [ 2070.426859][ T31] (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2070.446631][ T31] #3: ffff8881457ff518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2070.461137][ T31] #4: ffff88802890bc68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2070.473870][ T31] 5 locks held by kworker/0:2/25958: [ 2070.480016][T16499] m920x_read = error: -19 [ 2070.484472][T16499] dvb-usb: error while querying for an remote control event. [ 2070.493452][ T31] #0: ffff888020aff148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2070.508593][ T31] #1: ffffc90004af7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2070.523176][ T31] #2: ffff888145b35198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2070.534379][ T31] #3: ffff888145b91518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2070.547428][ T31] #4: ffff88802890bc68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2070.561373][ T31] 5 locks held by kworker/1:8/27652: [ 2070.568048][ T31] #0: ffff888020aff148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2070.582589][ T31] #1: ffffc90003defba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2070.599784][T16499] m920x_read = error: -19 [ 2070.604186][T16499] dvb-usb: error while querying for an remote control event. [ 2070.612163][T29400] m920x_read = error: -19 [ 2070.612212][T29400] dvb-usb: error while querying for an remote control event. [ 2070.612272][ T31] #2: ffff888145b4b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2070.633606][ T31] #3: ffff888145b4e518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2070.649397][ T31] #4: ffff888145bcc268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2070.660477][ T31] 5 locks held by kworker/1:11/30184: [ 2070.666996][ T31] #0: ffff888020aff148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2070.684582][ T31] #1: ffffc90003ddfba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2070.702557][ T31] #2: ffff888028a2c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2070.716101][ T31] #3: ffff8881457ef518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2070.726688][T29400] m920x_read = error: -19 [ 2070.730267][T16499] m920x_read = error: -19 [ 2070.735521][T16499] dvb-usb: error while querying for an remote control event. [ 2070.740828][T29400] dvb-usb: error while querying for an remote control event. [ 2070.750569][ T31] #4: ffff888028900068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2070.760593][ T31] 1 lock held by syz.1.7823/32675: [ 2070.765934][ T31] 1 lock held by syz.2.7824/32678: [ 2070.771311][ T31] #0: ffffffff8e142c40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2070.781523][ T31] 1 lock held by syz.4.7830/32698: [ 2070.786801][ T31] [ 2070.791601][ T31] ============================================= [ 2070.791601][ T31] [ 2070.806564][ T31] NMI backtrace for cpu 1 [ 2070.806585][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2070.806610][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2070.806625][ T31] Call Trace: [ 2070.806635][ T31] [ 2070.806645][ T31] dump_stack_lvl+0x189/0x250 [ 2070.806677][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2070.806700][ T31] ? __pfx__printk+0x10/0x10 [ 2070.806737][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2070.806770][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2070.806802][ T31] ? __pfx__printk+0x10/0x10 [ 2070.806829][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2070.806859][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2070.806892][ T31] watchdog+0xf60/0xfa0 [ 2070.806927][ T31] ? watchdog+0x1e2/0xfa0 [ 2070.806963][ T31] kthread+0x711/0x8a0 [ 2070.806990][ T31] ? __pfx_watchdog+0x10/0x10 [ 2070.807016][ T31] ? __pfx_kthread+0x10/0x10 [ 2070.807033][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2070.807057][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2070.807070][ T31] ? __pfx_kthread+0x10/0x10 [ 2070.807100][ T31] ret_from_fork+0x4bc/0x870 [ 2070.807122][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2070.807147][ T31] ? __switch_to_asm+0x39/0x70 [ 2070.807164][ T31] ? __switch_to_asm+0x33/0x70 [ 2070.807181][ T31] ? __pfx_kthread+0x10/0x10 [ 2070.807196][ T31] ret_from_fork_asm+0x1a/0x30 [ 2070.807245][ T31] [ 2070.807252][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2070.850161][T16499] m920x_read = error: -19 [ 2070.852652][ C0] NMI backtrace for cpu 0 [ 2070.852667][ C0] CPU: 0 UID: 0 PID: 16499 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 2070.852688][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2070.852700][ C0] Workqueue: events legacy_dvb_usb_read_remote_control [ 2070.852734][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 2070.852753][ C0] Code: e8 9e 3f a4 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f ef 09 fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 1a e0 32 06 cc 44 89 f9 80 e1 07 [ 2070.852770][ C0] RSP: 0018:ffffc9000e66f2b0 EFLAGS: 00000002 [ 2070.852784][ C0] RAX: 1ffffffff33a3760 RBX: 00000000000003fd RCX: 0000000000000000 [ 2070.852797][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 2070.852808][ C0] RBP: ffffffff99d1c250 R08: ffff888141b40237 R09: 1ffff11028368046 [ 2070.852822][ C0] R10: dffffc0000000000 R11: ffffffff851c0400 R12: dffffc0000000000 [ 2070.852836][ C0] R13: 0000000000000000 R14: ffffffff99d1bfc0 R15: 0000000000000000 [ 2070.852848][ C0] FS: 0000000000000000(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 2070.852863][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2070.852875][ C0] CR2: 00000000801ff000 CR3: 0000000064d78000 CR4: 00000000003526f0 [ 2070.852891][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2070.852903][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2070.852921][ C0] Call Trace: [ 2070.852928][ C0] [ 2070.852938][ C0] wait_for_lsr+0xd1/0x2f0 [ 2070.852964][ C0] serial8250_console_write+0x134c/0x1ba0 [ 2070.852989][ C0] ? __lock_acquire+0xab9/0xd20 [ 2070.853013][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 2070.853052][ C0] ? console_flush_all+0x13a/0xb10 [ 2070.853070][ C0] ? console_flush_all+0x13a/0xb10 [ 2070.853092][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 2070.853116][ C0] ? console_flush_all+0x13a/0xb10 [ 2070.853142][ C0] console_flush_all+0x6f3/0xb10 [ 2070.853166][ C0] ? console_flush_all+0x13a/0xb10 [ 2070.853188][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 2070.853212][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2070.853234][ C0] console_unlock+0xbb/0x190 [ 2070.853261][ C0] ? vprintk_emit+0x2ee/0x590 [ 2070.853287][ C0] ? __pfx_console_unlock+0x10/0x10 [ 2070.853317][ C0] ? vprintk_emit+0x2ee/0x590 [ 2070.853342][ C0] ? vprintk_emit+0x2ee/0x590 [ 2070.853369][ C0] vprintk_emit+0x4c5/0x590 [ 2070.853397][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 2070.853434][ C0] _printk+0xcf/0x120 [ 2070.853455][ C0] ? __pfx__printk+0x10/0x10 [ 2070.853474][ C0] ? usb_control_msg+0x2bf/0x3e0 [ 2070.853504][ C0] m920x_rc_query+0x2f6/0x830 [ 2070.853531][ C0] legacy_dvb_usb_read_remote_control+0x100/0x470 [ 2070.853575][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2070.853599][ C0] ? __pfx_legacy_dvb_usb_read_remote_control+0x10/0x10 [ 2070.853627][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2070.853651][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2070.853673][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2070.853697][ C0] process_scheduled_works+0xae1/0x17b0 [ 2070.853734][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2070.853766][ C0] worker_thread+0x8a0/0xda0 [ 2070.853820][ C0] kthread+0x711/0x8a0 [ 2070.853840][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2070.853864][ C0] ? __pfx_kthread+0x10/0x10 [ 2070.853882][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2070.853908][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2070.853923][ C0] ? __pfx_kthread+0x10/0x10 [ 2070.853941][ C0] ret_from_fork+0x4bc/0x870 [ 2070.853966][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2070.853993][ C0] ? __switch_to_asm+0x39/0x70 [ 2070.854014][ C0] ? __switch_to_asm+0x33/0x70 [ 2070.854033][ C0] ? __pfx_kthread+0x10/0x10 [ 2070.854051][ C0] ret_from_fork_asm+0x1a/0x30 [ 2070.854081][ C0] [ 2070.887582][T29400] m920x_read = error: -19 [ 2070.914061][T16499] dvb-usb: error while querying for an remote control event. [ 2071.039329][T29400] dvb-usb: error while querying for an remote control event. [ 2071.095765][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2071.095789][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2071.095814][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2071.095828][ T31] Call Trace: [ 2071.095838][ T31] [ 2071.095848][ T31] dump_stack_lvl+0x99/0x250 [ 2071.095878][ T31] ? __asan_memcpy+0x40/0x70 [ 2071.095901][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2071.095924][ T31] ? __pfx__printk+0x10/0x10 [ 2071.095961][ T31] vpanic+0x237/0x6d0 [ 2071.418322][ T31] ? __pfx_vpanic+0x10/0x10 [ 2071.422863][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2071.428365][ T31] panic+0xb9/0xc0 [ 2071.432106][ T31] ? __pfx_panic+0x10/0x10 [ 2071.436537][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2071.441933][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2071.448158][ T31] watchdog+0xf9f/0xfa0 [ 2071.452335][ T31] ? watchdog+0x1e2/0xfa0 [ 2071.456694][ T31] kthread+0x711/0x8a0 [ 2071.460775][ T31] ? __pfx_watchdog+0x10/0x10 [ 2071.465467][ T31] ? __pfx_kthread+0x10/0x10 [ 2071.470066][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2071.475975][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2071.481190][ T31] ? __pfx_kthread+0x10/0x10 [ 2071.485789][ T31] ret_from_fork+0x4bc/0x870 [ 2071.490407][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2071.495544][ T31] ? __switch_to_asm+0x39/0x70 [ 2071.500408][ T31] ? __switch_to_asm+0x33/0x70 [ 2071.505194][ T31] ? __pfx_kthread+0x10/0x10 [ 2071.509807][ T31] ret_from_fork_asm+0x1a/0x30 [ 2071.514717][ T31] [ 2071.518072][ T31] Kernel Offset: disabled [ 2071.522402][ T31] Rebooting in 86400 seconds..