last executing test programs: 10m45.819339687s ago: executing program 3 (id=1974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x80}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4000804) 10m45.655990651s ago: executing program 3 (id=1976): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x1}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 10m45.565096802s ago: executing program 3 (id=1979): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 10m45.447563593s ago: executing program 3 (id=1982): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x2}, 0x8) 10m45.192249644s ago: executing program 3 (id=1983): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 10m45.137448024s ago: executing program 3 (id=1984): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7fff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40}, 0x1c) 10m29.996113842s ago: executing program 32 (id=1984): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7fff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40}, 0x1c) 9m51.103703341s ago: executing program 2 (id=2374): pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 9m50.162479165s ago: executing program 2 (id=2379): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 9m50.011812449s ago: executing program 2 (id=2380): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0xe, 0x80002, 0x5, {0x0, 0x0, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x40, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x47e63e8106e3054c) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000200)=""/85, 0x2160}], 0x1) 9m49.892389878s ago: executing program 2 (id=2381): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 9m49.890256305s ago: executing program 2 (id=2382): mkdir(&(0x7f0000000040)='./file1\x00', 0x20) mkdir(&(0x7f0000000100)='./file0\x00', 0x1b0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x10000, 0xd1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 9m49.843975628s ago: executing program 2 (id=2383): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d", 0x3}], 0x2) 9m49.559228336s ago: executing program 33 (id=2383): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d", 0x3}], 0x2) 4m8.870536403s ago: executing program 5 (id=4138): mount(0x0, 0x0, 0x0, 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4m8.744554946s ago: executing program 5 (id=4139): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) umount2(0x0, 0x8c) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000180)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="000e0200000002292c11e50f6d03e14252a1e9345a3cbf4682ca03c687833b8e23dc9317efb20be1d27e1cf00f9c7c6d1a615e8b8d6189634959090000008e81a5f490ef73b2a84b487e3087c7fbd17fb768251a20b45c1b1de26f137ef4a5de5592c17e183a316046405c64bf9d9ca9b00043da04000000000000000d35d5907e60d7f8e59759cb27bcacb0a0dc0fcff2c896235905150c5b962115434e14b85ae8da289d4746e1c5d39fdccaec2a7c6bbe1177deec6a8e7aa3036abd3702ff00d20d1d63f9d19e8048bca7a4cae2844a9d03b849b9c089377be1c81d5ed75eac7db3b36099af30cb86d09f37ca"], 0x0}, 0x0) 4m6.787054486s ago: executing program 5 (id=4142): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2d, 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 4m6.572232795s ago: executing program 5 (id=4145): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = open$dir(&(0x7f0000000040)='./file1\x00', 0x101000, 0x154) linkat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x1400) rmdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f0000000100)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4m6.436337924s ago: executing program 5 (id=4146): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 4m6.206980475s ago: executing program 5 (id=4147): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbmon(&(0x7f00000005c0), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e"], 0x88}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) 4m5.952210764s ago: executing program 34 (id=4147): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbmon(&(0x7f00000005c0), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e"], 0x88}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) 4m2.426070664s ago: executing program 0 (id=4158): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000001c0)={0x1, 0x1004, 0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x34, 0x1, 0x470bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000009c0)=@ccm_128={{0x304}, "763f9fd52d04ac59", "32b25ffe92452927ca1fc077f421f330", "8cc850ce", "d50fe0e3d8799200"}, 0x28) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x3, r5, 0x2}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 4m1.164826521s ago: executing program 0 (id=4164): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8911090}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xb0, 0x1405, 0x200, 0x70bd29, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x12}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0xb0}}, 0x40) syz_usb_connect$uac1(0x2, 0x94, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000a60201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582", @ANYRESOCT], 0x0) 3m59.814267796s ago: executing program 0 (id=4167): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1, 0x4}}, 0x30) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e9e528bd7000fcdbdf2505000000140001800800050001000000ec00010002000000080004000d2e857e1400018008000500030000000600010002"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) 3m59.6636151s ago: executing program 0 (id=4168): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="4014060000003653f4f0efd40a09b59655855b1b72d29eadfeae60"], 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x5f14) accept$phonet_pipe(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 3m56.452588559s ago: executing program 0 (id=4173): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$update(0x2, 0x0, 0x0, 0x27) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x40, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}}, 0x0) 3m56.102378219s ago: executing program 0 (id=4174): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='children\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000001400038008000240f4ff0000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24040880) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) r5 = accept4(r4, &(0x7f00000005c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000500)=0x80, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000640)={0x6, 0x5, 0x28000000, 0x9, 0x4}, 0x14) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @mcast1, 0x1}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002900)={0x1c, 0x5f, 0x101, 0x0, 0x25dfdbff, "", [@nested={0xc, 0x50, 0x0, 0x1, [@nested={0x8, 0x87, 0x0, 0x1, [@generic="9909b9a3"]}]}]}, 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000130a0101000000000000000002000000080003400000a4"], 0x1c}}, 0x4044040) 3m55.537799521s ago: executing program 35 (id=4174): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='children\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000001400038008000240f4ff0000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24040880) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) r5 = accept4(r4, &(0x7f00000005c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000500)=0x80, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000640)={0x6, 0x5, 0x28000000, 0x9, 0x4}, 0x14) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @mcast1, 0x1}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002900)={0x1c, 0x5f, 0x101, 0x0, 0x25dfdbff, "", [@nested={0xc, 0x50, 0x0, 0x1, [@nested={0x8, 0x87, 0x0, 0x1, [@generic="9909b9a3"]}]}]}, 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000130a0101000000000000000002000000080003400000a4"], 0x1c}}, 0x4044040) 1m32.366560374s ago: executing program 1 (id=5306): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x87, 0x1, 0x0, 0x0, @sint={0xc, 0xa}}]}) 1m32.259584395s ago: executing program 1 (id=5309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf252300000008000200", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) 1m32.214201216s ago: executing program 1 (id=5311): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2a242, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000d40)=""/95, 0x5f) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0x3}, 0x2) 1m31.334223734s ago: executing program 1 (id=5326): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x13, 0x7, 0x106c, 0x8, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0xa, 0xb9, 0x1, 0x11, 0xd, 0x204}, {0x804, 0x1, 0x1, 0x49, 0x87, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x8, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x4}], 0xffffffff}) syz_kvm_add_vcpu$x86(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a60, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x4, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000100000, 0xfffffffffffffffa], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m31.063202587s ago: executing program 1 (id=5331): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={[], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m30.931355342s ago: executing program 1 (id=5333): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$rtc(0x0, 0x0, 0x109a02) poll(0x0, 0x0, 0x1) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xfffffdef) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@local}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) 1m15.863073966s ago: executing program 36 (id=5333): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$rtc(0x0, 0x0, 0x109a02) poll(0x0, 0x0, 0x1) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xfffffdef) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@local}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) 11.218323658s ago: executing program 6 (id=6063): socket$rxrpc(0x21, 0x2, 0x2) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2716, &(0x7f0000000440)=""/102400, &(0x7f0000000000)=0x19000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x900, 0x0) ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000140)={0x1, 0x10001}) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES32=r6, @ANYRES32=r3], 0x4) 10.23541557s ago: executing program 6 (id=6071): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000c05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a3200000000140000"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff006) 10.032449259s ago: executing program 6 (id=6073): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x6) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c10"]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r7, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="b0000000000000000000000000000000fdffffffffffffff010000000000000080000000000000002823000000000000060000000300000005000000020000000600000000000000090000000000000003000000000000000900000000000000070000000000000006000000df000000070000000060000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="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"], 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="e73a8ae425ecefa1f15bb0fdaa1234f38dcfcce8629ce8f7e35c43d8dcdd446238e95acc841133f7875a00321879057c3a50e69deb8be92401d9248893c0971e9eb745fbfb8587158efd6673526e02ec3df2f3f0205d058205c956a6fbcbe0bec063b939402b2f268b91ba7a88bd75f3ec169173b257ac0216d4fd77b6c30170a9a82929f4a1634b30327d2e63632d48e5dacb31aad431d83ff55a612eafde821fa51b02ddba5f925bb9"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x18) socket(0x3a, 0x2, 0x3) syz_usb_control_io$hid(r9, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e080083"], 0x0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4c841) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r8) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 6.85973181s ago: executing program 6 (id=6088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca4b5e00281ad251f9", 0xfca8}, {&(0x7f0000000100)="b9a7c60c94d422f271df2fa4f14f04b10fa53885ffff54a461", 0x20}], 0x2) 4.673854741s ago: executing program 7 (id=6100): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x40824) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x3}}}}) 4.186793606s ago: executing program 8 (id=6103): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 4.04805423s ago: executing program 8 (id=6104): r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000140)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000040)={r8}) 3.903736528s ago: executing program 8 (id=6105): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 3.722748591s ago: executing program 8 (id=6106): r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="140000004e0001000000f4f90023d45fedc4f511", 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x7, 0x0, [{0xc0010140, 0x0, 0x5}, {0xbc0, 0x0, 0x2}, {0xb3b, 0x0, 0xe}, {0x402, 0x0, 0x6}, {0xb76, 0x0, 0x8}, {0xbab}, {0x93e}]}) 2.588067134s ago: executing program 8 (id=6108): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x2008040, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES32]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.532226871s ago: executing program 7 (id=6109): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.508501629s ago: executing program 6 (id=6110): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) syz_open_dev$cec(&(0x7f0000001f80), 0x0, 0xa0100) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) 2.346422783s ago: executing program 6 (id=6111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000003}]}]}], {0x14}}, 0xc0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="000f04"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 2.198212965s ago: executing program 7 (id=6112): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 2.124029331s ago: executing program 7 (id=6113): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000040)={r7}) 2.055884445s ago: executing program 7 (id=6114): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 1.931706307s ago: executing program 7 (id=6116): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.628740072s ago: executing program 8 (id=6117): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) memfd_create(&(0x7f0000000200)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\xff\x0f\x00\x00\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x05\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^x\f\xf8\xa56\f\rjKo\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaafK\xe6\xdcb\x9fr\x18\xd3\x1cD%\x8b\xc8\xca\xfc!\x9bsO\x1f\xb1\xd9!\xd4\x97\x1bs\x83y$\xcb\xcb\xb6\xcd\x9f\xa5\v+\x10c\xfd\x97Kexd]\xe2[\x00\xb0\x84\xd8\x80\xf0b\xd8\x06-l\xe2e\xe6>\x10\xf0\xe0\xc0\xa7\xe4\x05/\xcc\x8cic\x9a\x05G%X,\xcc\x86\xf7\x91\xe2\x7f\xcf@\xc6\xf7\x02M\xf3\xe9\x1bD(\xd2]~0,z2\xa2\x1c\x1f*\r\xa4\x9d\xb0t\x063x\xf9\xc8\xfb\x00V\\\xe8L\xadK]\x9c\n\xc1j\xb3:$c\xe5\xc8\x14V\xf1\"@52\xa5\xc5\xff\xf1\xb9|\xba\xc8\x0f', 0x5) fallocate(0xffffffffffffffff, 0x7d, 0x400000000000000, 0x4) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) syz_usb_control_io(r0, 0x0, 0x0) 687.645374ms ago: executing program 4 (id=6118): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) (fail_nth: 11) 223.634947ms ago: executing program 4 (id=6119): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) syz_open_dev$cec(&(0x7f0000001f80), 0x0, 0xa0100) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) 180.445919ms ago: executing program 4 (id=6120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2ee, 0x282) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x1016, 0x2, 0xa, 0x0, 0x1, 0x5}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000080)={0x0, {0xff, 0xa}}) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0xffffffbb, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r1, 0x20, 0x0, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000180)={r6}) 113.088859ms ago: executing program 4 (id=6121): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 58.588612ms ago: executing program 4 (id=6122): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000040)={r7}) 0s ago: executing program 4 (id=6123): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x4a, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff35a1e107fa5c8d3cbb1fa61229a00ecd207d9e6f2a208bf148e6bc56955cb53300000000"}) kernel console output (not intermixed with test programs): [ T5833] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 898.385629][T18028] m920x_read = error: -19 [ 898.396854][T18028] dvb-usb: error while querying for an remote control event. [ 898.478984][ T5833] usb 5-1: config 0 has an invalid interface number: 47 but max is 0 [ 898.497712][ T5833] usb 5-1: config 0 has no interface number 0 [ 898.503872][ T5833] usb 5-1: config 0 interface 47 has no altsetting 0 [ 898.515756][T18028] m920x_read = error: -19 [ 898.521622][T18028] dvb-usb: error while querying for an remote control event. [ 898.522927][ T5833] usb 5-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b [ 898.539026][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.550817][ T5833] usb 5-1: config 0 descriptor?? [ 898.558268][ T5833] usb-storage 5-1:0.47: USB Mass Storage device detected [ 898.648629][T18028] m920x_read = error: -19 [ 898.653397][T18028] dvb-usb: error while querying for an remote control event. [ 898.766597][T18028] usb 5-1: USB disconnect, device number 64 [ 898.786427][ T9] m920x_read = error: -19 [ 898.790804][ T9] dvb-usb: error while querying for an remote control event. [ 898.915437][ T5910] m920x_read = error: -19 [ 898.919830][ T5910] dvb-usb: error while querying for an remote control event. [ 898.944417][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 899.034490][T18028] m920x_read = error: -19 [ 899.038861][T18028] dvb-usb: error while querying for an remote control event. [ 899.065373][ T5833] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 899.094459][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 899.101069][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 899.109305][ T9] usb 9-1: config 0 has no interface number 0 [ 899.115500][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.126659][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.136626][ T9] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.149507][ T9] usb 9-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 899.158720][T18028] m920x_read = error: -19 [ 899.163067][T18028] dvb-usb: error while querying for an remote control event. [ 899.170540][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.181178][ T9] usb 9-1: config 0 descriptor?? [ 899.214424][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 899.230124][ T5833] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 899.238544][ T5833] usb 7-1: config 179 has no interface number 0 [ 899.248709][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 899.260051][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 899.271600][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 899.282850][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 899.294475][T18028] m920x_read = error: -19 [ 899.298904][T18028] dvb-usb: error while querying for an remote control event. [ 899.306285][ T5833] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 899.306337][ T5833] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 899.306360][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.339754][T22932] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 899.402450][T22928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.431317][T22928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.462282][ T9] usbhid 9-1:0.1: can't add hid device: -71 [ 899.472256][T18028] m920x_read = error: -19 [ 899.491373][T18028] dvb-usb: error while querying for an remote control event. [ 899.500310][ T9] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 899.532336][ T9] usb 9-1: USB disconnect, device number 6 [ 899.587034][ T5833] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input83 [ 899.626157][T18028] m920x_read = error: -19 [ 899.644892][T18028] dvb-usb: error while querying for an remote control event. [ 899.787466][ T9] m920x_read = error: -19 [ 899.796501][ T9] dvb-usb: error while querying for an remote control event. [ 899.906990][ T9] m920x_read = error: -19 [ 899.915223][ T9] dvb-usb: error while querying for an remote control event. [ 900.044800][ T9] m920x_read = error: -19 [ 900.049314][ T9] dvb-usb: error while querying for an remote control event. [ 900.164727][ T9] m920x_read = error: -19 [ 900.172624][ T9] dvb-usb: error while querying for an remote control event. [ 900.176815][ T5833] usb 7-1: USB disconnect, device number 36 [ 900.180051][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 900.180094][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 900.294507][ T9] m920x_read = error: -19 [ 900.302609][ T9] dvb-usb: error while querying for an remote control event. [ 900.429181][ T9] m920x_read = error: -19 [ 900.435374][ T9] dvb-usb: error while querying for an remote control event. [ 900.548403][ T9] m920x_read = error: -19 [ 900.552840][ T9] dvb-usb: error while querying for an remote control event. [ 900.674917][ T9] m920x_read = error: -19 [ 900.694736][ T9] dvb-usb: error while querying for an remote control event. [ 900.783989][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 900.834755][ T9] m920x_read = error: -19 [ 900.845587][ T9] dvb-usb: error while querying for an remote control event. [ 900.886811][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 900.980584][T18028] m920x_read = error: -19 [ 900.992808][T18028] dvb-usb: error while querying for an remote control event. [ 901.074665][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 901.084195][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 901.103986][T10055] udevd[10055]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 901.158416][T18028] m920x_read = error: -19 [ 901.163999][T18028] dvb-usb: error while querying for an remote control event. [ 901.169819][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 901.227773][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 901.258865][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 901.272349][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 901.294912][ T9] usb 5-1: config 0 has no interface number 0 [ 901.308254][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 901.316220][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.330776][T18028] m920x_read = error: -19 [ 901.345865][T18028] dvb-usb: error while querying for an remote control event. [ 901.360714][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.384385][ T9] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 901.400506][ T9] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 901.411372][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.426603][ T9] usb 5-1: config 0 descriptor?? [ 901.445904][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 901.474519][T18028] m920x_read = error: -19 [ 901.478929][T18028] dvb-usb: error while querying for an remote control event. [ 901.517326][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 901.589527][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 901.614525][T18028] m920x_read = error: -19 [ 901.622089][T18028] dvb-usb: error while querying for an remote control event. [ 901.647457][T22980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.659917][T22980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.702844][ T9] usbhid 5-1:0.1: can't add hid device: -71 [ 901.721439][ T9] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 901.734180][ T9] usb 5-1: USB disconnect, device number 65 [ 901.764979][T18028] m920x_read = error: -19 [ 901.769365][T18028] dvb-usb: error while querying for an remote control event. [ 901.894635][T18028] m920x_read = error: -19 [ 901.899107][T18028] dvb-usb: error while querying for an remote control event. [ 902.004488][T15538] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 902.014585][ T9] m920x_read = error: -19 [ 902.018938][ T9] dvb-usb: error while querying for an remote control event. [ 902.134732][ T9] m920x_read = error: -19 [ 902.139139][ T9] dvb-usb: error while querying for an remote control event. [ 902.154461][T15538] usb 9-1: Using ep0 maxpacket: 8 [ 902.161118][T15538] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 902.170032][T15538] usb 9-1: config 179 has no interface number 0 [ 902.176457][T15538] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 902.188204][T15538] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 902.199576][T15538] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 902.214461][T15538] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 902.233730][T15538] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 902.248033][T15538] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 902.257198][T15538] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.265371][ T9] m920x_read = error: -19 [ 902.269806][ T9] dvb-usb: error while querying for an remote control event. [ 902.282376][T23009] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 902.394560][ T9] m920x_read = error: -19 [ 902.399088][ T9] dvb-usb: error while querying for an remote control event. [ 902.513614][ T5952] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input84 [ 902.524410][ T9] m920x_read = error: -19 [ 902.538275][ T9] dvb-usb: error while querying for an remote control event. [ 902.665907][ T9] m920x_read = error: -19 [ 902.673835][ T9] dvb-usb: error while querying for an remote control event. [ 902.824541][ T9] m920x_read = error: -19 [ 902.839125][ T9] dvb-usb: error while querying for an remote control event. [ 902.965165][ T9] m920x_read = error: -19 [ 902.969548][ T9] dvb-usb: error while querying for an remote control event. [ 903.114501][ T9] m920x_read = error: -19 [ 903.119907][ T9] dvb-usb: error while querying for an remote control event. [ 903.145044][ T5952] usb 9-1: USB disconnect, device number 7 [ 903.145101][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 903.159251][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 903.254534][ T9] m920x_read = error: -19 [ 903.258920][ T9] dvb-usb: error while querying for an remote control event. [ 903.375462][T18028] m920x_read = error: -19 [ 903.379928][T18028] dvb-usb: error while querying for an remote control event. [ 903.445368][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 903.494752][T18028] m920x_read = error: -19 [ 903.499120][T18028] dvb-usb: error while querying for an remote control event. [ 903.594405][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 903.601620][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 903.612650][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 903.621947][T18028] m920x_read = error: -19 [ 903.625275][T15538] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 903.626476][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.641889][T18028] dvb-usb: error while querying for an remote control event. [ 903.651126][ T9] usb 5-1: config 0 descriptor?? [ 903.755568][T18028] m920x_read = error: -19 [ 903.770372][T18028] dvb-usb: error while querying for an remote control event. [ 903.804966][T15538] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 903.818805][T15538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.843126][T15538] usb 7-1: config 0 descriptor?? [ 903.861772][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 903.880566][T15538] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 903.884703][T18028] m920x_read = error: -19 [ 903.894124][T18028] dvb-usb: error while querying for an remote control event. [ 904.004837][ T9] m920x_read = error: -19 [ 904.009219][ T9] dvb-usb: error while querying for an remote control event. [ 904.064291][T23027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.073325][T23027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.084436][T18028] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 904.126974][ T9] m920x_read = error: -19 [ 904.131344][ T9] dvb-usb: error while querying for an remote control event. [ 904.234461][T18028] usb 9-1: Using ep0 maxpacket: 16 [ 904.241452][T18028] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 904.249683][T18028] usb 9-1: config 0 has no interface number 0 [ 904.255947][ T9] m920x_read = error: -19 [ 904.260295][ T9] dvb-usb: error while querying for an remote control event. [ 904.267794][T18028] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.278720][T18028] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.289701][T18028] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.291367][T15538] gspca_cpia1: usb_control_msg 03, error -32 [ 904.302576][T18028] usb 9-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 904.302606][T18028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.320225][T18028] usb 9-1: config 0 descriptor?? [ 904.326433][ T5952] usb 5-1: USB disconnect, device number 66 [ 904.357704][T15538] gspca_cpia1: usb_control_msg 03, error -71 [ 904.370475][T15538] gspca_cpia1: usb_control_msg 01, error -71 [ 904.378486][T15538] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 904.389396][T15538] usb 7-1: USB disconnect, device number 37 [ 904.394841][ T9] m920x_read = error: -19 [ 904.400939][ T9] dvb-usb: error while querying for an remote control event. [ 904.514515][ T9] m920x_read = error: -19 [ 904.518895][ T9] dvb-usb: error while querying for an remote control event. [ 904.559211][T23031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.569549][T23031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.582009][T18028] usbhid 9-1:0.1: can't add hid device: -71 [ 904.588134][T18028] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 904.598831][T18028] usb 9-1: USB disconnect, device number 8 [ 904.634474][ T9] m920x_read = error: -19 [ 904.639022][ T9] dvb-usb: error while querying for an remote control event. [ 904.754466][ T9] m920x_read = error: -19 [ 904.758848][ T9] dvb-usb: error while querying for an remote control event. [ 904.874461][ T9] m920x_read = error: -19 [ 904.878844][ T9] dvb-usb: error while querying for an remote control event. [ 905.024452][ T9] m920x_read = error: -19 [ 905.029796][ T9] dvb-usb: error while querying for an remote control event. [ 905.123310][T23042] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 905.151722][ T9] m920x_read = error: -19 [ 905.156555][ T9] dvb-usb: error while querying for an remote control event. [ 905.223716][T23042] syzkaller0: entered promiscuous mode [ 905.236927][T23042] syzkaller0: entered allmulticast mode [ 905.264796][ T9] m920x_read = error: -19 [ 905.269181][ T9] dvb-usb: error while querying for an remote control event. [ 905.288392][T23046] netlink: 'syz.8.5861': attribute type 10 has an invalid length. [ 905.384758][ T9] m920x_read = error: -19 [ 905.389231][ T9] dvb-usb: error while querying for an remote control event. [ 905.504692][ T9] m920x_read = error: -19 [ 905.509076][ T9] dvb-usb: error while querying for an remote control event. [ 905.627150][ T9] m920x_read = error: -19 [ 905.631527][ T9] dvb-usb: error while querying for an remote control event. [ 905.704469][ T5833] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 905.748904][ T9] m920x_read = error: -19 [ 905.753295][ T9] dvb-usb: error while querying for an remote control event. [ 905.855449][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 905.864521][ T9] m920x_read = error: -19 [ 905.869195][ T9] dvb-usb: error while querying for an remote control event. [ 905.870742][ T5833] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 905.896923][ T5833] usb 5-1: config 179 has no interface number 0 [ 905.910832][ T5833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 905.922025][ T5833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 905.933768][ T5833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 905.953134][ T5833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 905.974185][ T5833] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 905.984508][ T9] m920x_read = error: -19 [ 905.992135][ T9] dvb-usb: error while querying for an remote control event. [ 905.997462][ T5833] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 906.016180][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.043475][T23049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 906.104918][ T9] m920x_read = error: -19 [ 906.109362][ T9] dvb-usb: error while querying for an remote control event. [ 906.224734][ T9] m920x_read = error: -19 [ 906.229248][ T9] dvb-usb: error while querying for an remote control event. [ 906.276863][ T5833] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input85 [ 906.344609][ T9] m920x_read = error: -19 [ 906.348992][ T9] dvb-usb: error while querying for an remote control event. [ 906.475664][ T9] m920x_read = error: -19 [ 906.480139][ T9] dvb-usb: error while querying for an remote control event. [ 906.597104][ T9] m920x_read = error: -19 [ 906.601725][ T9] dvb-usb: error while querying for an remote control event. [ 906.716112][ T9] m920x_read = error: -19 [ 906.720501][ T9] dvb-usb: error while querying for an remote control event. [ 906.839620][ T9] m920x_read = error: -19 [ 906.844215][ T9] dvb-usb: error while querying for an remote control event. [ 906.954463][ T9] m920x_read = error: -19 [ 906.958974][ T9] dvb-usb: error while querying for an remote control event. [ 907.076856][ T9] m920x_read = error: -19 [ 907.083811][ T9] dvb-usb: error while querying for an remote control event. [ 907.198967][ T9] m920x_read = error: -19 [ 907.203478][ T9] dvb-usb: error while querying for an remote control event. [ 907.318189][ T9] m920x_read = error: -19 [ 907.322592][ T9] dvb-usb: error while querying for an remote control event. [ 907.436265][ T9] m920x_read = error: -19 [ 907.440652][ T9] dvb-usb: error while querying for an remote control event. [ 907.558842][ T9] m920x_read = error: -19 [ 907.563240][ T9] dvb-usb: error while querying for an remote control event. [ 907.597082][T23046] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.606502][T23046] bond0: (slave team0): Enslaving as an active interface with an up link [ 907.674982][ T9] m920x_read = error: -19 [ 907.679369][ T9] dvb-usb: error while querying for an remote control event. [ 907.712839][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 907.795704][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 907.818574][T18028] usb 5-1: USB disconnect, device number 67 [ 907.818599][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 907.845490][ T9] m920x_read = error: -19 [ 907.854368][ T9] dvb-usb: error while querying for an remote control event. [ 907.907386][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 907.948567][T10385] udevd[10385]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 907.964606][ T9] m920x_read = error: -19 [ 907.968974][ T9] dvb-usb: error while querying for an remote control event. [ 908.011869][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 908.105569][T18028] m920x_read = error: -19 [ 908.109956][T18028] dvb-usb: error while querying for an remote control event. [ 908.117544][ T5910] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 908.157441][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 908.170616][T23070] FAULT_INJECTION: forcing a failure. [ 908.170616][T23070] name failslab, interval 1, probability 0, space 0, times 0 [ 908.184001][T23070] CPU: 0 UID: 0 PID: 23070 Comm: syz.8.5871 Not tainted syzkaller #0 PREEMPT(full) [ 908.184018][T23070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 908.184025][T23070] Call Trace: [ 908.184030][T23070] [ 908.184035][T23070] dump_stack_lvl+0x189/0x250 [ 908.184052][T23070] ? __pfx____ratelimit+0x10/0x10 [ 908.184067][T23070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 908.184080][T23070] ? __pfx__printk+0x10/0x10 [ 908.184096][T23070] ? __pfx___might_resched+0x10/0x10 [ 908.184111][T23070] should_fail_ex+0x414/0x560 [ 908.184128][T23070] should_failslab+0xa8/0x100 [ 908.184143][T23070] __kmalloc_noprof+0xdf/0x7f0 [ 908.184153][T23070] ? kfree+0x4d/0x660 [ 908.184167][T23070] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 908.184181][T23070] tomoyo_realpath_from_path+0xe3/0x5d0 [ 908.184191][T23070] ? tomoyo_domain+0xd8/0x130 [ 908.184204][T23070] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 908.184229][T23070] tomoyo_path_number_perm+0x1e8/0x5a0 [ 908.184244][T23070] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 908.184266][T23070] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 908.184302][T23070] ? __fget_files+0x2a/0x420 [ 908.184328][T23070] ? __fget_files+0x3a0/0x420 [ 908.184348][T23070] ? __fget_files+0x2a/0x420 [ 908.184374][T23070] security_file_ioctl+0xcb/0x2d0 [ 908.184398][T23070] __se_sys_ioctl+0x47/0x170 [ 908.184418][T23070] do_syscall_64+0xfa/0xf80 [ 908.184443][T23070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.184461][T23070] ? clear_bhb_loop+0x60/0xb0 [ 908.184486][T23070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.184505][T23070] RIP: 0033:0x7f663d18f749 [ 908.184523][T23070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.184542][T23070] RSP: 002b:00007f663b3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.184563][T23070] RAX: ffffffffffffffda RBX: 00007f663d3e5fa0 RCX: 00007f663d18f749 [ 908.184579][T23070] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 908.184593][T23070] RBP: 00007f663b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 908.184604][T23070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.184613][T23070] R13: 00007f663d3e6038 R14: 00007f663d3e5fa0 R15: 00007fffe895d598 [ 908.184643][T23070] [ 908.412589][ T5873] m920x_read = error: -19 [ 908.419649][ T5873] dvb-usb: error while querying for an remote control event. [ 908.428002][T23070] ERROR: Out of memory at tomoyo_realpath_from_path. [ 908.435941][T23070] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 908.479232][T23070] syzkaller0: entered promiscuous mode [ 908.485000][T23070] syzkaller0: entered allmulticast mode [ 908.514459][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 908.521744][ T5910] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 908.530790][ T5910] usb 7-1: config 0 has no interface number 0 [ 908.537398][ T5910] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.548517][ T5910] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.558350][ T5910] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.571329][ T5910] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 908.580503][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.591999][ T5910] usb 7-1: config 0 descriptor?? [ 908.598295][T18028] m920x_read = error: -19 [ 908.603222][T18028] dvb-usb: error while querying for an remote control event. [ 908.714865][T18028] m920x_read = error: -19 [ 908.724514][T18028] dvb-usb: error while querying for an remote control event. [ 908.802812][T23064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.820876][T23064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.832964][T23064] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5868'. [ 908.852611][T18028] m920x_read = error: -19 [ 908.857459][T18028] dvb-usb: error while querying for an remote control event. [ 908.865358][ T5910] usbhid 7-1:0.1: can't add hid device: -71 [ 908.871322][ T5910] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 908.886606][ T5910] usb 7-1: USB disconnect, device number 38 [ 908.995378][ T5873] m920x_read = error: -19 [ 908.999753][ T5873] dvb-usb: error while querying for an remote control event. [ 909.024434][T18028] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 909.124465][ T5910] m920x_read = error: -19 [ 909.128937][ T5910] dvb-usb: error while querying for an remote control event. [ 909.196231][T18028] usb 5-1: Using ep0 maxpacket: 32 [ 909.203980][T18028] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 909.213248][T18028] usb 5-1: config 0 has no interface number 0 [ 909.219408][T18028] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 909.232268][T18028] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 909.241481][T18028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.251678][ T5873] m920x_read = error: -19 [ 909.256098][T18028] usb 5-1: Product: syz [ 909.260387][T18028] usb 5-1: Manufacturer: syz [ 909.265300][ T5873] dvb-usb: error while querying for an remote control event. [ 909.272783][T18028] usb 5-1: SerialNumber: syz [ 909.281687][T18028] usb 5-1: config 0 descriptor?? [ 909.289723][T23072] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 909.385167][ T5873] m920x_read = error: -19 [ 909.389616][ T5873] dvb-usb: error while querying for an remote control event. [ 909.433391][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 909.509061][ T5873] m920x_read = error: -19 [ 909.513476][ T5873] dvb-usb: error while querying for an remote control event. [ 909.527844][T23072] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 909.541741][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 909.654510][ T5910] m920x_read = error: -19 [ 909.659043][ T5910] dvb-usb: error while querying for an remote control event. [ 909.784477][ T5910] m920x_read = error: -19 [ 909.796567][ T5910] dvb-usb: error while querying for an remote control event. [ 909.935947][ T5910] m920x_read = error: -19 [ 909.940393][ T5910] dvb-usb: error while querying for an remote control event. [ 910.085461][ T5910] m920x_read = error: -19 [ 910.089866][ T5910] dvb-usb: error while querying for an remote control event. [ 910.234558][ T5910] m920x_read = error: -19 [ 910.244527][ T5910] dvb-usb: error while querying for an remote control event. [ 910.362594][T18028] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 910.374084][ T5910] m920x_read = error: -19 [ 910.386812][ T5910] dvb-usb: error while querying for an remote control event. [ 910.405324][T18028] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 910.424759][T18028] asix 5-1:0.188: probe with driver asix failed with error -61 [ 910.535718][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 910.549614][T18028] m920x_read = error: -19 [ 910.553990][T18028] dvb-usb: error while querying for an remote control event. [ 910.633761][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 910.692636][ T5910] m920x_read = error: -19 [ 910.697663][ T5910] dvb-usb: error while querying for an remote control event. [ 910.816791][ T5910] m920x_read = error: -19 [ 910.821318][ T5910] dvb-usb: error while querying for an remote control event. [ 910.955012][ T5910] m920x_read = error: -19 [ 910.959526][ T5910] dvb-usb: error while querying for an remote control event. [ 911.084889][ T5910] m920x_read = error: -19 [ 911.092724][ T5910] dvb-usb: error while querying for an remote control event. [ 911.208594][ T5910] m920x_read = error: -19 [ 911.212974][ T5910] dvb-usb: error while querying for an remote control event. [ 911.325495][ T5910] m920x_read = error: -19 [ 911.329894][ T5910] dvb-usb: error while querying for an remote control event. [ 911.456866][T18028] m920x_read = error: -19 [ 911.461245][T18028] dvb-usb: error while querying for an remote control event. [ 911.564499][ T5910] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 911.574491][T18028] m920x_read = error: -19 [ 911.578839][T18028] dvb-usb: error while querying for an remote control event. [ 911.684502][ T5833] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 911.694802][T18028] m920x_read = error: -19 [ 911.699296][T18028] dvb-usb: error while querying for an remote control event. [ 911.714403][ T5910] usb 9-1: Using ep0 maxpacket: 16 [ 911.721149][ T5910] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 911.729248][ T5910] usb 9-1: config 0 has no interface number 0 [ 911.735531][ T5910] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.746434][ T5910] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.756227][ T5910] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 911.769146][ T5910] usb 9-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 911.778281][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.788933][ T5910] usb 9-1: config 0 descriptor?? [ 911.811212][T15538] usb 5-1: USB disconnect, device number 68 [ 911.814678][T18028] m920x_read = error: -19 [ 911.823452][T18028] dvb-usb: error while querying for an remote control event. [ 911.838506][ T5833] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 911.857639][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.876059][ T5833] usb 7-1: config 0 descriptor?? [ 911.894115][ T5833] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 911.954628][T18028] m920x_read = error: -19 [ 911.959008][T18028] dvb-usb: error while querying for an remote control event. [ 911.997815][T23098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.008777][T23098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.022324][T23098] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5881'. [ 912.036603][ T5910] usbhid 9-1:0.1: can't add hid device: -71 [ 912.054501][ T5910] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 912.075058][T18028] m920x_read = error: -19 [ 912.079436][T18028] dvb-usb: error while querying for an remote control event. [ 912.087344][ T5910] usb 9-1: USB disconnect, device number 9 [ 912.215045][T18028] m920x_read = error: -19 [ 912.219437][T18028] dvb-usb: error while querying for an remote control event. [ 912.286811][ T5833] gspca_cpia1: usb_control_msg 03, error -71 [ 912.293326][ T5833] gspca_cpia1: usb_control_msg 01, error -71 [ 912.300677][ T5833] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 912.310433][ T5833] usb 7-1: USB disconnect, device number 39 [ 912.334716][ T5910] m920x_read = error: -19 [ 912.339215][ T5910] dvb-usb: error while querying for an remote control event. [ 912.454454][ T5910] m920x_read = error: -19 [ 912.458809][ T5910] dvb-usb: error while querying for an remote control event. [ 912.574522][ T5910] m920x_read = error: -19 [ 912.590773][ T5910] dvb-usb: error while querying for an remote control event. [ 912.704553][ T5910] m920x_read = error: -19 [ 912.708927][ T5910] dvb-usb: error while querying for an remote control event. [ 912.771997][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 912.824582][ T5910] m920x_read = error: -19 [ 912.834413][ T5910] dvb-usb: error while querying for an remote control event. [ 912.852636][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 912.974736][ T9] m920x_read = error: -19 [ 912.979121][ T9] dvb-usb: error while querying for an remote control event. [ 913.027026][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 913.078459][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 913.136375][ T9] m920x_read = error: -19 [ 913.144880][T10387] udevd[10387]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 913.146021][ T9] dvb-usb: error while querying for an remote control event. [ 913.190609][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 913.249392][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 913.275812][T18028] m920x_read = error: -19 [ 913.281791][T18028] dvb-usb: error while querying for an remote control event. [ 913.344507][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 913.404445][ T5910] m920x_read = error: -19 [ 913.408799][ T5910] dvb-usb: error while querying for an remote control event. [ 913.504536][T18028] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 913.512188][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 913.519350][ T9] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 913.527895][ T5910] m920x_read = error: -19 [ 913.532240][ T5910] dvb-usb: error while querying for an remote control event. [ 913.539662][ T9] usb 9-1: config 0 has no interface number 0 [ 913.546027][ T9] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 913.558285][ T9] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 913.564410][T15538] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 913.567513][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.583332][ T9] usb 9-1: Product: syz [ 913.587939][ T9] usb 9-1: Manufacturer: syz [ 913.592526][ T9] usb 9-1: SerialNumber: syz [ 913.599129][ T9] usb 9-1: config 0 descriptor?? [ 913.605179][T23130] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 913.664619][ T5910] m920x_read = error: -19 [ 913.669375][ T5910] dvb-usb: error while querying for an remote control event. [ 913.679144][T18028] usb 5-1: unable to get BOS descriptor or descriptor too short [ 913.687988][T18028] usb 5-1: not running at top speed; connect to a high speed hub [ 913.715486][T18028] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.725991][T18028] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 913.741192][T15538] usb 7-1: Using ep0 maxpacket: 16 [ 913.743943][T18028] usb 5-1: string descriptor 0 read error: -22 [ 913.753597][T18028] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 913.755033][T15538] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 913.763327][T18028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.770941][T15538] usb 7-1: config 0 has no interface number 0 [ 913.770996][T15538] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.771024][T15538] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.771047][T15538] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 913.771090][T15538] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 913.771114][T15538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.784539][ T5910] m920x_read = error: -19 [ 913.789321][T15538] usb 7-1: config 0 descriptor?? [ 913.798020][ T5910] dvb-usb: error while querying for an remote control event. [ 913.838341][T23130] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 913.845864][T18028] usb 5-1: 0:2 : does not exist [ 913.975348][ T5910] m920x_read = error: -19 [ 913.979893][ T5910] dvb-usb: error while querying for an remote control event. [ 914.067799][T23138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.076775][T23138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.087422][T23138] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5896'. [ 914.096964][ T5910] m920x_read = error: -19 [ 914.101340][ T5910] dvb-usb: error while querying for an remote control event. [ 914.109346][T15538] usbhid 7-1:0.1: can't add hid device: -71 [ 914.117792][T15538] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 914.129986][T15538] usb 7-1: USB disconnect, device number 40 [ 914.224538][ T5910] m920x_read = error: -19 [ 914.229079][ T5910] dvb-usb: error while querying for an remote control event. [ 914.238240][T23136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.247136][T23136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.354477][ T5910] m920x_read = error: -19 [ 914.358988][ T5910] dvb-usb: error while querying for an remote control event. [ 914.463885][T18028] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 914.474458][ T5910] m920x_read = error: -19 [ 914.478910][ T5910] dvb-usb: error while querying for an remote control event. [ 914.487149][T18028] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 914.499180][T18028] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 914.526844][T18028] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 914.540962][T18028] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 914.552789][T18028] usb 5-1: USB disconnect, device number 69 [ 914.594446][ T5910] m920x_read = error: -19 [ 914.598828][ T5910] dvb-usb: error while querying for an remote control event. [ 914.649935][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 914.672773][ T9] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 914.687486][ T9] asix 9-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 914.699241][ T9] asix 9-1:0.188: probe with driver asix failed with error -61 [ 914.714775][ T5910] m920x_read = error: -19 [ 914.719179][ T5910] dvb-usb: error while querying for an remote control event. [ 914.742301][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 914.835187][ T9] m920x_read = error: -19 [ 914.839535][ T9] dvb-usb: error while querying for an remote control event. [ 914.873129][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 914.955787][ T9] m920x_read = error: -19 [ 914.960175][ T9] dvb-usb: error while querying for an remote control event. [ 915.074512][ T9] m920x_read = error: -19 [ 915.078974][ T9] dvb-usb: error while querying for an remote control event. [ 915.194676][ T9] m920x_read = error: -19 [ 915.200635][ T9] dvb-usb: error while querying for an remote control event. [ 915.326770][ T9] m920x_read = error: -19 [ 915.331673][ T9] dvb-usb: error while querying for an remote control event. [ 915.444570][ T9] m920x_read = error: -19 [ 915.448925][ T9] dvb-usb: error while querying for an remote control event. [ 915.504423][ T5833] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 915.565155][ T9] m920x_read = error: -19 [ 915.569598][ T9] dvb-usb: error while querying for an remote control event. [ 915.674485][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 915.681050][ T5833] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 915.684646][ T9] m920x_read = error: -19 [ 915.689725][ T5833] usb 7-1: config 179 has no interface number 0 [ 915.701407][ T9] dvb-usb: error while querying for an remote control event. [ 915.702173][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 915.719895][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 915.731984][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 915.743859][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 915.755287][ T5833] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 915.768737][ T5833] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 915.778147][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.788889][T23160] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 915.814618][ T9] m920x_read = error: -19 [ 915.818992][ T9] dvb-usb: error while querying for an remote control event. [ 915.936328][ T9] m920x_read = error: -19 [ 915.941088][ T9] dvb-usb: error while querying for an remote control event. [ 916.007250][T15538] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input86 [ 916.055116][ T9] m920x_read = error: -19 [ 916.059550][ T9] dvb-usb: error while querying for an remote control event. [ 916.094017][ T9] usb 9-1: USB disconnect, device number 10 [ 916.175694][T18028] m920x_read = error: -19 [ 916.180076][T18028] dvb-usb: error while querying for an remote control event. [ 916.194456][ T5910] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 916.295198][ T9] m920x_read = error: -19 [ 916.304165][ T9] dvb-usb: error while querying for an remote control event. [ 916.354435][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 916.373317][ T5910] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 916.381542][ T5910] usb 5-1: config 0 has no interface number 0 [ 916.387812][ T5910] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.399037][ T5910] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.408961][ T5910] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 916.422425][ T5910] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 916.431642][ T9] m920x_read = error: -19 [ 916.436341][ T9] dvb-usb: error while querying for an remote control event. [ 916.443747][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.455281][ T5910] usb 5-1: config 0 descriptor?? [ 916.544495][ T9] m920x_read = error: -19 [ 916.548922][ T9] dvb-usb: error while querying for an remote control event. [ 916.601386][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 916.601393][ T9] usb 7-1: USB disconnect, device number 41 [ 916.601517][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 916.669114][T23163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.686754][T18028] m920x_read = error: -19 [ 916.691154][T18028] dvb-usb: error while querying for an remote control event. [ 916.702880][T23175] ip6gretap0 speed is unknown, defaulting to 1000 [ 916.708336][T23163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.728709][T23175] ip6gretap0 speed is unknown, defaulting to 1000 [ 916.736313][T23163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5907'. [ 916.752505][ T5910] usbhid 5-1:0.1: can't add hid device: -71 [ 916.760266][T23175] ip6gretap0 speed is unknown, defaulting to 1000 [ 916.766473][ T5910] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 916.788060][ T5910] usb 5-1: USB disconnect, device number 70 [ 916.825591][ T9] m920x_read = error: -19 [ 916.829974][ T9] dvb-usb: error while querying for an remote control event. [ 916.944453][ T9] m920x_read = error: -19 [ 916.948840][ T9] dvb-usb: error while querying for an remote control event. [ 917.020811][T23175] infiniband syz1: set active [ 917.026728][T23175] infiniband syz1: added ip6gretap0 [ 917.026803][ T5833] ip6gretap0 speed is unknown, defaulting to 1000 [ 917.072735][T23175] RDS/IB: syz1: added [ 917.084494][ T9] m920x_read = error: -19 [ 917.085967][T23175] smc: adding ib device syz1 with port count 1 [ 917.088930][ T9] dvb-usb: error while querying for an remote control event. [ 917.098552][T23175] smc: ib device syz1 port 1 has no pnetid [ 917.109175][ T5833] ip6gretap0 speed is unknown, defaulting to 1000 [ 917.123369][T23175] ip6gretap0 speed is unknown, defaulting to 1000 [ 917.214438][ T9] m920x_read = error: -19 [ 917.224582][ T9] dvb-usb: error while querying for an remote control event. [ 917.344465][ T9] m920x_read = error: -19 [ 917.355512][ T9] dvb-usb: error while querying for an remote control event. [ 917.415643][T23187] syzkaller1: entered promiscuous mode [ 917.424683][T23187] syzkaller1: entered allmulticast mode [ 917.508736][ T9] m920x_read = error: -19 [ 917.513122][ T9] dvb-usb: error while querying for an remote control event. [ 917.635162][ T9] m920x_read = error: -19 [ 917.639647][ T9] dvb-usb: error while querying for an remote control event. [ 917.749577][T23175] ip6gretap0 speed is unknown, defaulting to 1000 [ 917.784500][ T9] m920x_read = error: -19 [ 917.788898][ T9] dvb-usb: error while querying for an remote control event. [ 917.914501][ T5910] m920x_read = error: -19 [ 917.918959][ T5910] dvb-usb: error while querying for an remote control event. [ 917.946531][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 918.001609][T23175] ip6gretap0 speed is unknown, defaulting to 1000 [ 918.035038][T18028] m920x_read = error: -19 [ 918.039605][T18028] dvb-usb: error while querying for an remote control event. [ 918.069981][ T5910] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 918.121071][ T9] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 918.140958][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.155067][T18028] m920x_read = error: -19 [ 918.164430][T18028] dvb-usb: error while querying for an remote control event. [ 918.179749][ T9] usb 7-1: config 0 descriptor?? [ 918.208294][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 918.234531][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 918.241583][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 918.264016][ T5910] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 918.287216][ T5910] usb 5-1: config 179 has no interface number 0 [ 918.309181][ T5910] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 918.313589][T23175] ip6gretap0 speed is unknown, defaulting to 1000 [ 918.321068][T18028] m920x_read = error: -19 [ 918.331788][T18028] dvb-usb: error while querying for an remote control event. [ 918.341610][ T5910] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 918.353931][ T5910] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 918.366143][ T5910] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 918.377936][ T5910] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 918.391595][ T5910] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 918.400999][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.425658][T23205] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 918.454754][T18028] m920x_read = error: -19 [ 918.459204][T18028] dvb-usb: error while querying for an remote control event. [ 918.545160][T23175] ip6gretap0 speed is unknown, defaulting to 1000 [ 918.584577][T18028] m920x_read = error: -19 [ 918.589100][T18028] dvb-usb: error while querying for an remote control event. [ 918.617594][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 918.628856][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 918.640906][ T9] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 918.669834][ T9] usb 7-1: USB disconnect, device number 42 [ 918.676572][T18028] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input87 [ 918.704579][T18028] m920x_read = error: -19 [ 918.710978][T18028] dvb-usb: error while querying for an remote control event. [ 918.824580][T18028] m920x_read = error: -19 [ 918.828978][T18028] dvb-usb: error while querying for an remote control event. [ 918.919451][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 918.944561][ T9] m920x_read = error: -19 [ 918.951645][T23205] ip6gretap0 speed is unknown, defaulting to 1000 [ 918.953259][ T9] dvb-usb: error while querying for an remote control event. [ 919.087095][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 919.104650][ T9] m920x_read = error: -19 [ 919.121902][ T9] dvb-usb: error while querying for an remote control event. [ 919.261847][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 919.274489][ T9] m920x_read = error: -19 [ 919.278926][ T9] dvb-usb: error while querying for an remote control event. [ 919.364239][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 919.445105][ T9] m920x_read = error: -19 [ 919.449570][ T9] dvb-usb: error while querying for an remote control event. [ 919.545989][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 919.584560][ T9] m920x_read = error: -19 [ 919.594531][T18028] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 919.611449][ T9] dvb-usb: error while querying for an remote control event. [ 919.626406][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 919.724522][ T9] m920x_read = error: -19 [ 919.729168][ T9] dvb-usb: error while querying for an remote control event. [ 919.742798][T15538] usb 5-1: USB disconnect, device number 71 [ 919.742878][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 919.757683][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 919.784483][T18028] usb 9-1: Using ep0 maxpacket: 8 [ 919.801127][T18028] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 919.811048][T18028] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.828599][T18028] usb 9-1: Product: syz [ 919.832767][T18028] usb 9-1: Manufacturer: syz [ 919.837424][T18028] usb 9-1: SerialNumber: syz [ 919.843840][T18028] usb 9-1: config 0 descriptor?? [ 919.849263][ T5910] m920x_read = error: -19 [ 919.853601][ T5910] dvb-usb: error while querying for an remote control event. [ 919.900803][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 919.964568][ T5910] m920x_read = error: -19 [ 919.970223][ T5910] dvb-usb: error while querying for an remote control event. [ 920.069623][T18028] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 920.084710][ T5910] m920x_read = error: -19 [ 920.089219][ T5910] dvb-usb: error while querying for an remote control event. [ 920.126077][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 920.178555][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 920.204659][ T5910] m920x_read = error: -19 [ 920.209084][ T5910] dvb-usb: error while querying for an remote control event. [ 920.235246][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5934'. [ 920.244194][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5934'. [ 920.324928][ T5910] m920x_read = error: -19 [ 920.332943][ T5910] dvb-usb: error while querying for an remote control event. [ 920.457852][ T5910] m920x_read = error: -19 [ 920.471544][ T5910] dvb-usb: error while querying for an remote control event. [ 920.585101][ T5910] m920x_read = error: -19 [ 920.589508][ T5910] dvb-usb: error while querying for an remote control event. [ 920.679769][T18028] usb write operation failed. (-71) [ 920.690877][T18028] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 920.702909][T18028] dvbdev: DVB: registering new adapter (Terratec H7) [ 920.710598][T18028] usb 9-1: media controller created [ 920.724511][ T5910] m920x_read = error: -19 [ 920.728950][T18028] usb read operation failed. (-71) [ 920.734221][ T5910] dvb-usb: error while querying for an remote control event. [ 920.741934][ T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 920.754198][T18028] usb write operation failed. (-71) [ 920.768654][T18028] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 920.790710][T18028] usb 9-1: USB disconnect, device number 11 [ 920.864679][ T5910] m920x_read = error: -19 [ 920.869058][ T5910] dvb-usb: error while querying for an remote control event. [ 920.916833][ T9] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 920.927269][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.938042][ T9] usb 7-1: config 0 descriptor?? [ 920.945636][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 920.963309][T23250] binder: 23248:23250 ioctl c0306201 0 returned -14 [ 920.984466][ T5910] m920x_read = error: -19 [ 920.989308][ T5910] dvb-usb: error while querying for an remote control event. [ 921.107126][ T5910] m920x_read = error: -19 [ 921.111590][ T5910] dvb-usb: error while querying for an remote control event. [ 921.225517][ T5910] m920x_read = error: -19 [ 921.230076][ T5910] dvb-usb: error while querying for an remote control event. [ 921.355181][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 921.378406][ T5910] m920x_read = error: -19 [ 921.382780][ T5910] dvb-usb: error while querying for an remote control event. [ 921.392579][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 921.405370][ T9] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 921.426086][ T9] usb 7-1: USB disconnect, device number 43 [ 921.524456][ T5910] m920x_read = error: -19 [ 921.528905][ T5910] dvb-usb: error while querying for an remote control event. [ 921.644631][ T9] m920x_read = error: -19 [ 921.649132][ T9] dvb-usb: error while querying for an remote control event. [ 921.764647][T15538] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 921.765910][ T5910] m920x_read = error: -19 [ 921.800544][ T5910] dvb-usb: error while querying for an remote control event. [ 921.944957][ T5910] m920x_read = error: -19 [ 921.949312][ T5910] dvb-usb: error while querying for an remote control event. [ 921.995609][T15538] usb 9-1: Using ep0 maxpacket: 8 [ 922.003256][T15538] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 922.015326][T15538] usb 9-1: config 179 has no interface number 0 [ 922.022141][T15538] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 922.040160][T15538] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 922.072608][T15538] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 922.088788][T15538] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 922.120120][T15650] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 922.136320][ T5910] m920x_read = error: -19 [ 922.140882][ T5910] dvb-usb: error while querying for an remote control event. [ 922.191088][T15538] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 922.240464][T15538] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 922.265461][T18028] m920x_read = error: -19 [ 922.271069][T18028] dvb-usb: error while querying for an remote control event. [ 922.301690][T15538] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.306055][T15650] usb 5-1: Using ep0 maxpacket: 16 [ 922.336978][T15650] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 922.355682][T15650] usb 5-1: config 0 has no interface number 0 [ 922.362449][T15650] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.365071][T23262] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 922.411954][T15650] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.422307][T15650] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 922.436983][T18028] m920x_read = error: -19 [ 922.441353][T18028] dvb-usb: error while querying for an remote control event. [ 922.452461][T15650] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 922.464375][T15650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.535132][T15650] usb 5-1: config 0 descriptor?? [ 922.560389][T18028] m920x_read = error: -19 [ 922.571169][T18028] dvb-usb: error while querying for an remote control event. [ 922.732373][T15538] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input88 [ 922.734572][T18028] m920x_read = error: -19 [ 922.756366][T23274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.791293][T18028] dvb-usb: error while querying for an remote control event. [ 922.823285][T23274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.888411][T23274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5952'. [ 922.908480][T15650] usbhid 5-1:0.1: can't add hid device: -71 [ 922.914587][T18028] m920x_read = error: -19 [ 922.923926][T18028] dvb-usb: error while querying for an remote control event. [ 922.937347][T15650] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 922.962615][T15650] usb 5-1: USB disconnect, device number 72 [ 923.060083][T18028] m920x_read = error: -19 [ 923.074805][T18028] dvb-usb: error while querying for an remote control event. [ 923.108500][T23262] ip6gretap0 speed is unknown, defaulting to 1000 [ 923.136153][T23284] No control pipe specified [ 923.195429][T15650] m920x_read = error: -19 [ 923.205230][T15650] dvb-usb: error while querying for an remote control event. [ 923.334536][T15650] m920x_read = error: -19 [ 923.344581][T15650] dvb-usb: error while querying for an remote control event. [ 923.412283][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 923.466374][T15650] m920x_read = error: -19 [ 923.470945][T15650] dvb-usb: error while querying for an remote control event. [ 923.602054][T15650] m920x_read = error: -19 [ 923.613974][T15650] dvb-usb: error while querying for an remote control event. [ 923.735449][T15650] m920x_read = error: -19 [ 923.746416][T15650] dvb-usb: error while querying for an remote control event. [ 923.785024][T23294] binder: 23292:23294 ioctl c0306201 0 returned -14 [ 923.812378][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 923.874710][T15650] m920x_read = error: -19 [ 923.879081][T15650] dvb-usb: error while querying for an remote control event. [ 923.996921][T15650] m920x_read = error: -19 [ 924.001311][T15650] dvb-usb: error while querying for an remote control event. [ 924.035411][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 924.134450][T15650] m920x_read = error: -19 [ 924.138832][T15650] dvb-usb: error while querying for an remote control event. [ 924.228853][T15538] usb 9-1: USB disconnect, device number 12 [ 924.228908][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 924.230389][T23306] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5964'. [ 924.234889][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 924.274581][T15650] m920x_read = error: -19 [ 924.278955][T15650] dvb-usb: error while querying for an remote control event. [ 924.290262][T18028] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 924.404761][ T5910] m920x_read = error: -19 [ 924.409196][ T5910] dvb-usb: error while querying for an remote control event. [ 924.446287][T18028] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 924.455400][T18028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.465260][T18028] usb 7-1: config 0 descriptor?? [ 924.474016][T18028] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 924.523719][T23311] FAULT_INJECTION: forcing a failure. [ 924.523719][T23311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 924.524487][ T5910] m920x_read = error: -19 [ 924.537248][T23311] CPU: 1 UID: 0 PID: 23311 Comm: syz.4.5966 Not tainted syzkaller #0 PREEMPT(full) [ 924.537272][T23311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 924.537285][T23311] Call Trace: [ 924.537295][T23311] [ 924.537304][T23311] dump_stack_lvl+0x189/0x250 [ 924.537333][T23311] ? __pfx____ratelimit+0x10/0x10 [ 924.537359][T23311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 924.537382][T23311] ? __pfx__printk+0x10/0x10 [ 924.537407][T23311] ? fs_reclaim_acquire+0x7d/0x100 [ 924.537437][T23311] should_fail_ex+0x414/0x560 [ 924.537467][T23311] prepare_alloc_pages+0x22b/0x650 [ 924.537497][T23311] __alloc_frozen_pages_noprof+0x123/0x370 [ 924.537525][T23311] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 924.537556][T23311] ? policy_nodemask+0x27c/0x720 [ 924.537584][T23311] alloc_pages_mpol+0x232/0x4a0 [ 924.537613][T23311] folio_alloc_mpol_noprof+0x39/0x70 [ 924.537640][T23311] shmem_alloc_and_add_folio+0x423/0xf40 [ 924.537673][T23311] ? filemap_get_entry+0xad/0x2f0 [ 924.537691][T23311] ? filemap_get_entry+0xad/0x2f0 [ 924.537711][T23311] ? filemap_get_entry+0x28f/0x2f0 [ 924.537730][T23311] ? __pfx_filemap_get_entry+0x10/0x10 [ 924.537757][T23311] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 924.537786][T23311] ? filemap_map_pages+0x1b99/0x1fd0 [ 924.537806][T23311] ? shmem_allowable_huge_orders+0x1e0/0x4e0 [ 924.537839][T23311] shmem_get_folio_gfp+0x59d/0x1660 [ 924.537883][T23311] shmem_fault+0x179/0x390 [ 924.537909][T23311] __do_fault+0x138/0x390 [ 924.537932][T23311] do_pte_missing+0x2206/0x3330 [ 924.537964][T23311] ? handle_mm_fault+0xdb/0x32b0 [ 924.537995][T23311] handle_mm_fault+0x1b26/0x32b0 [ 924.538021][T23311] ? __pte_offset_map_lock+0x13e/0x210 [ 924.538061][T23311] ? handle_mm_fault+0xdb/0x32b0 [ 924.538096][T23311] ? __pfx_handle_mm_fault+0x10/0x10 [ 924.538123][T23311] ? follow_page_pte+0x7ef/0x13e0 [ 924.538159][T23311] ? __pfx_follow_page_pte+0x10/0x10 [ 924.538185][T23311] ? vma_is_secretmem+0xd/0x50 [ 924.538213][T23311] __get_user_pages+0x1650/0x29f0 [ 924.538268][T23311] populate_vma_page_range+0x29f/0x3a0 [ 924.538296][T23311] ? __pfx_populate_vma_page_range+0x10/0x10 [ 924.538325][T23311] ? down_read+0x274/0x2e0 [ 924.538341][T23311] ? __mm_populate+0x160/0x380 [ 924.538367][T23311] __mm_populate+0x24c/0x380 [ 924.538394][T23311] ? __pfx___mm_populate+0x10/0x10 [ 924.538428][T23311] vm_mmap_pgoff+0x387/0x4d0 [ 924.538458][T23311] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 924.538482][T23311] ? __fget_files+0x2a/0x420 [ 924.538509][T23311] ? __fget_files+0x2a/0x420 [ 924.538534][T23311] ? __fget_files+0x2a/0x420 [ 924.538562][T23311] ksys_mmap_pgoff+0x51f/0x760 [ 924.538596][T23311] do_syscall_64+0xfa/0xf80 [ 924.538623][T23311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.538643][T23311] ? clear_bhb_loop+0x60/0xb0 [ 924.538666][T23311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.538684][T23311] RIP: 0033:0x7f877678f749 [ 924.538701][T23311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.538718][T23311] RSP: 002b:00007f87775e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 924.538749][T23311] RAX: ffffffffffffffda RBX: 00007f87769e5fa0 RCX: 00007f877678f749 [ 924.538764][T23311] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 924.538776][T23311] RBP: 00007f87775e3090 R08: 0000000000000003 R09: 0000000000000000 [ 924.538789][T23311] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000002 [ 924.538801][T23311] R13: 00007f87769e6038 R14: 00007f87769e5fa0 R15: 00007ffd7f366738 [ 924.538833][T23311] [ 924.897345][T18028] gspca_cpia1: usb_control_msg 03, error -71 [ 924.903692][T18028] gspca_cpia1: usb_control_msg 01, error -71 [ 924.912746][T18028] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 924.923153][T18028] usb 7-1: USB disconnect, device number 44 [ 924.931201][ T5910] dvb-usb: error while querying for an remote control event. [ 924.992952][T10055] udevd[10055]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 925.044663][ T5910] m920x_read = error: -19 [ 925.049075][ T5910] dvb-usb: error while querying for an remote control event. [ 925.170545][T18028] m920x_read = error: -19 [ 925.199241][T18028] dvb-usb: error while querying for an remote control event. [ 925.206811][ T5910] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 925.241546][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 925.324555][T18028] m920x_read = error: -19 [ 925.328940][T18028] dvb-usb: error while querying for an remote control event. [ 925.353919][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 925.397655][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 925.406552][ T5910] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 925.420069][ T5910] usb 5-1: config 0 has no interface number 0 [ 925.427706][ T5910] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 925.447183][ T5910] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 925.480413][T10055] udevd[10055]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 925.491711][T18028] m920x_read = error: -19 [ 925.498792][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.508748][T18028] dvb-usb: error while querying for an remote control event. [ 925.540957][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 925.552344][ T5910] usb 5-1: Product: syz [ 925.557556][ T5910] usb 5-1: Manufacturer: syz [ 925.562505][ T5910] usb 5-1: SerialNumber: syz [ 925.575425][ T5910] usb 5-1: config 0 descriptor?? [ 925.585596][T23313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 925.607647][T23328] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5973'. [ 925.642901][T10055] udevd[10055]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 925.648707][ T9] m920x_read = error: -19 [ 925.660010][T23330] binder: BINDER_SET_CONTEXT_MGR already set [ 925.673509][T23330] binder: 23329:23330 ioctl 4018620d 200000000040 returned -16 [ 925.681594][ T9] dvb-usb: error while querying for an remote control event. [ 925.740805][T23333] binder: 23329:23333 ioctl c0306201 0 returned -14 [ 925.751805][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 925.804895][ T9] m920x_read = error: -19 [ 925.811326][ T9] dvb-usb: error while querying for an remote control event. [ 925.815028][T23313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 925.924502][T18028] m920x_read = error: -19 [ 925.929065][T18028] dvb-usb: error while querying for an remote control event. [ 926.034406][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 926.046295][T18028] m920x_read = error: -19 [ 926.047312][T15538] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 926.050688][T18028] dvb-usb: error while querying for an remote control event. [ 926.174512][T18028] m920x_read = error: -19 [ 926.178890][T18028] dvb-usb: error while querying for an remote control event. [ 926.186504][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 926.193018][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 926.201482][ T9] usb 7-1: config 179 has no interface number 0 [ 926.207987][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 926.215255][T15538] usb 9-1: Using ep0 maxpacket: 32 [ 926.219312][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 926.231599][T15538] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 926.236307][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 926.245168][T15538] usb 9-1: config 0 has no interface number 0 [ 926.255398][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 926.264206][T15538] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 926.272677][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 926.295738][T18028] m920x_read = error: -19 [ 926.300289][T18028] dvb-usb: error while querying for an remote control event. [ 926.300331][T15538] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.308799][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 926.320726][T15538] usb 9-1: Product: syz [ 926.325818][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.329552][T15538] usb 9-1: Manufacturer: syz [ 926.342304][T15538] usb 9-1: SerialNumber: syz [ 926.345207][T23337] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 926.356604][T15538] usb 9-1: config 0 descriptor?? [ 926.369841][T15538] smsc95xx v2.0.0 [ 926.435411][ T9] m920x_read = error: -19 [ 926.439871][ T9] dvb-usb: error while querying for an remote control event. [ 926.554555][ T9] m920x_read = error: -19 [ 926.560313][ T9] dvb-usb: error while querying for an remote control event. [ 926.601240][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input89 [ 926.650545][ T5910] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 926.662067][ T5910] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 926.675053][ T9] m920x_read = error: -19 [ 926.679839][ T9] dvb-usb: error while querying for an remote control event. [ 926.689457][ T5910] asix 5-1:0.188: probe with driver asix failed with error -61 [ 926.777255][T15538] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 926.788218][T15538] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 926.804527][ T5910] m920x_read = error: -19 [ 926.808902][ T5910] dvb-usb: error while querying for an remote control event. [ 926.850829][T23337] ip6gretap0 speed is unknown, defaulting to 1000 [ 926.944653][ T5910] m920x_read = error: -19 [ 926.949118][ T5910] dvb-usb: error while querying for an remote control event. [ 927.094886][ T5910] m920x_read = error: -19 [ 927.099361][ T5910] dvb-usb: error while querying for an remote control event. [ 927.256774][ T5910] m920x_read = error: -19 [ 927.281640][ T5910] dvb-usb: error while querying for an remote control event. [ 927.385974][ T5937] usb 7-1: USB disconnect, device number 45 [ 927.385996][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 927.405256][ T5910] m920x_read = error: -19 [ 927.411130][ T5910] dvb-usb: error while querying for an remote control event. [ 927.436690][T23355] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5984'. [ 927.493164][T23357] FAULT_INJECTION: forcing a failure. [ 927.493164][T23357] name failslab, interval 1, probability 0, space 0, times 0 [ 927.508975][T23357] CPU: 0 UID: 0 PID: 23357 Comm: syz.7.5985 Not tainted syzkaller #0 PREEMPT(full) [ 927.509004][T23357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 927.509016][T23357] Call Trace: [ 927.509025][T23357] [ 927.509034][T23357] dump_stack_lvl+0x189/0x250 [ 927.509064][T23357] ? __pfx____ratelimit+0x10/0x10 [ 927.509090][T23357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 927.509114][T23357] ? __pfx__printk+0x10/0x10 [ 927.509137][T23357] ? __pfx___might_resched+0x10/0x10 [ 927.509159][T23357] ? fs_reclaim_acquire+0x7d/0x100 [ 927.509186][T23357] should_fail_ex+0x414/0x560 [ 927.509212][T23357] should_failslab+0xa8/0x100 [ 927.509227][T23357] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 927.509257][T23357] ? __alloc_skb+0x255/0x430 [ 927.509284][T23357] ? napi_skb_cache_get+0x4a5/0x780 [ 927.509311][T23357] ? napi_skb_cache_get+0x151/0x780 [ 927.509336][T23357] __alloc_skb+0x255/0x430 [ 927.509353][T23357] ? __pfx___alloc_skb+0x10/0x10 [ 927.509369][T23357] ? netlink_autobind+0xdb/0x300 [ 927.509381][T23357] ? netlink_autobind+0x2c2/0x300 [ 927.509403][T23357] netlink_sendmsg+0x5c6/0xb30 [ 927.509423][T23357] ? aa_sk_perm+0x15f/0x920 [ 927.509464][T23357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.509484][T23357] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 927.509499][T23357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.509509][T23357] sock_sendmsg_nosec+0x18f/0x1d0 [ 927.509524][T23357] ____sys_sendmsg+0x577/0x880 [ 927.509542][T23357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 927.509571][T23357] ? import_iovec+0x74/0xa0 [ 927.509595][T23357] ___sys_sendmsg+0x21f/0x2a0 [ 927.509619][T23357] ? __pfx____sys_sendmsg+0x10/0x10 [ 927.509637][T23357] ? rcu_read_lock_any_held+0xb3/0x120 [ 927.509664][T23357] ? __fget_files+0x2a/0x420 [ 927.509678][T23357] ? __fget_files+0x3a0/0x420 [ 927.509706][T23357] __x64_sys_sendmsg+0x19b/0x260 [ 927.509730][T23357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 927.509760][T23357] ? __pfx_ksys_write+0x10/0x10 [ 927.509782][T23357] ? do_syscall_64+0xbe/0xf80 [ 927.509798][T23357] do_syscall_64+0xfa/0xf80 [ 927.509812][T23357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.509823][T23357] ? clear_bhb_loop+0x60/0xb0 [ 927.509835][T23357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.509852][T23357] RIP: 0033:0x7fae7b78f749 [ 927.509870][T23357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.509888][T23357] RSP: 002b:00007fae7c597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.509909][T23357] RAX: ffffffffffffffda RBX: 00007fae7b9e5fa0 RCX: 00007fae7b78f749 [ 927.509924][T23357] RDX: 0000000020004800 RSI: 0000200000000100 RDI: 0000000000000004 [ 927.509933][T23357] RBP: 00007fae7c597090 R08: 0000000000000000 R09: 0000000000000000 [ 927.509939][T23357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.509946][T23357] R13: 00007fae7b9e6038 R14: 00007fae7b9e5fa0 R15: 00007fff70d61478 [ 927.509962][T23357] [ 927.813302][ T5910] m920x_read = error: -19 [ 927.817691][ T5910] dvb-usb: error while querying for an remote control event. [ 927.935251][ T5910] m920x_read = error: -19 [ 927.939780][ T5910] dvb-usb: error while querying for an remote control event. [ 927.972020][ T5937] usb 5-1: USB disconnect, device number 73 [ 928.054504][ T5910] m920x_read = error: -19 [ 928.058987][ T5910] dvb-usb: error while querying for an remote control event. [ 928.174480][ T5910] m920x_read = error: -19 [ 928.183840][ T5910] dvb-usb: error while querying for an remote control event. [ 928.304499][ T5910] m920x_read = error: -19 [ 928.311321][ T5910] dvb-usb: error while querying for an remote control event. [ 928.448223][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 928.465707][ T5910] m920x_read = error: -19 [ 928.470054][ T5910] dvb-usb: error while querying for an remote control event. [ 928.591907][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 928.604614][ T5910] m920x_read = error: -19 [ 928.609202][ T5910] dvb-usb: error while querying for an remote control event. [ 928.621548][T15538] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 928.652199][T15538] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 928.676633][T15538] usb 9-1: USB disconnect, device number 13 [ 928.725742][ T5910] m920x_read = error: -19 [ 928.746513][ T5910] dvb-usb: error while querying for an remote control event. [ 928.810256][T23379] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5993'. [ 928.866100][T23381] overlayfs: failed to resolve './file0': -2 [ 928.876659][ T5910] m920x_read = error: -19 [ 928.881694][ T5910] dvb-usb: error while querying for an remote control event. [ 928.953183][T23384] binder: 23383:23384 ioctl c0306201 0 returned -14 [ 928.965389][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 928.994720][ T5910] m920x_read = error: -19 [ 928.999246][ T5910] dvb-usb: error while querying for an remote control event. [ 929.027129][T23387] binder: 23383:23387 ioctl c0502100 0 returned -22 [ 929.096074][T23388] binder: 23383:23388 ioctl 540a 3 returned -22 [ 929.114521][ T5910] m920x_read = error: -19 [ 929.118919][ T5910] dvb-usb: error while querying for an remote control event. [ 929.214439][T15538] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 929.234689][ T5910] m920x_read = error: -19 [ 929.244512][ T5910] dvb-usb: error while querying for an remote control event. [ 929.266197][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 929.320629][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 929.369155][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 929.375261][T15538] usb 7-1: Using ep0 maxpacket: 32 [ 929.386116][ T5910] m920x_read = error: -19 [ 929.391464][ T5910] dvb-usb: error while querying for an remote control event. [ 929.401033][T15538] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 929.410886][T15538] usb 7-1: config 0 has no interface number 0 [ 929.417280][T15538] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 929.446214][T15538] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 929.448946][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 929.460256][T15538] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.476852][T15538] usb 7-1: Product: syz [ 929.481050][T15538] usb 7-1: Manufacturer: syz [ 929.488141][T15538] usb 7-1: SerialNumber: syz [ 929.503136][T15538] usb 7-1: config 0 descriptor?? [ 929.509176][T23386] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 929.515034][ T5910] m920x_read = error: -19 [ 929.521623][ T5910] dvb-usb: error while querying for an remote control event. [ 929.635049][ T5910] m920x_read = error: -19 [ 929.639415][ T5910] dvb-usb: error while querying for an remote control event. [ 929.721116][T23386] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 929.754447][ T5910] m920x_read = error: -19 [ 929.758858][ T5910] dvb-usb: error while querying for an remote control event. [ 929.813161][T23402] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6002'. [ 929.875257][ T5910] m920x_read = error: -19 [ 929.893347][ T5910] dvb-usb: error while querying for an remote control event. [ 930.004471][ T5910] m920x_read = error: -19 [ 930.012341][ T5910] dvb-usb: error while querying for an remote control event. [ 930.125754][ T5910] m920x_read = error: -19 [ 930.131604][ T5910] dvb-usb: error while querying for an remote control event. [ 930.244555][ T5910] m920x_read = error: -19 [ 930.254474][ T5910] dvb-usb: error while querying for an remote control event. [ 930.262825][T23411] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6006'. [ 930.325028][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 930.374790][ T5910] m920x_read = error: -19 [ 930.389048][ T5910] dvb-usb: error while querying for an remote control event. [ 930.412492][T10055] udevd[10055]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 930.481495][T23419] pimreg: entered allmulticast mode [ 930.491011][T10055] udevd[10055]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 930.497130][T19983] Bluetooth: hci2: SCO packet for unknown connection handle 3273 [ 930.535196][ T5910] m920x_read = error: -19 [ 930.548847][T15538] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 930.559291][T15538] asix 7-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 930.571137][T15538] asix 7-1:0.188: probe with driver asix failed with error -61 [ 930.574803][ T5910] dvb-usb: error while querying for an remote control event. [ 930.586785][T23422] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6011'. [ 930.715649][ T5910] m920x_read = error: -19 [ 930.720034][ T5910] dvb-usb: error while querying for an remote control event. [ 930.845394][ T5910] m920x_read = error: -19 [ 930.850283][ T5910] dvb-usb: error while querying for an remote control event. [ 930.964644][ T5910] m920x_read = error: -19 [ 930.982777][ T5910] dvb-usb: error while querying for an remote control event. [ 931.124503][ T5910] m920x_read = error: -19 [ 931.129069][ T5910] dvb-usb: error while querying for an remote control event. [ 931.265561][ T5910] m920x_read = error: -19 [ 931.269956][ T5910] dvb-usb: error while querying for an remote control event. [ 931.405725][ T5910] m920x_read = error: -19 [ 931.411243][ T5910] dvb-usb: error while querying for an remote control event. [ 931.489756][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.496430][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.513665][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 931.524711][ T5910] m920x_read = error: -19 [ 931.539995][ T5910] dvb-usb: error while querying for an remote control event. [ 931.665693][ T5910] m920x_read = error: -19 [ 931.670819][ T5910] dvb-usb: error while querying for an remote control event. [ 931.784567][ T5910] m920x_read = error: -19 [ 931.788973][ T5910] dvb-usb: error while querying for an remote control event. [ 931.894434][T15538] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 931.914591][ T5910] m920x_read = error: -19 [ 931.919027][ T5910] dvb-usb: error while querying for an remote control event. [ 931.981874][ T5910] usb 7-1: USB disconnect, device number 46 [ 932.038641][ T9] m920x_read = error: -19 [ 932.056893][ T9] dvb-usb: error while querying for an remote control event. [ 932.072465][T23453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6023'. [ 932.094453][T15538] usb 5-1: Using ep0 maxpacket: 32 [ 932.101481][T15538] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 932.109923][T15538] usb 5-1: config 0 has no interface number 0 [ 932.116229][T15538] usb 5-1: config 0 interface 12 has no altsetting 0 [ 932.129143][T15538] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 932.138543][T15538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.146659][T15538] usb 5-1: Product: syz [ 932.151401][T15538] usb 5-1: Manufacturer: syz [ 932.156381][T15538] usb 5-1: SerialNumber: syz [ 932.176009][ T5910] m920x_read = error: -19 [ 932.176565][T15538] usb 5-1: config 0 descriptor?? [ 932.191528][ T5910] dvb-usb: error while querying for an remote control event. [ 932.198896][T23455] syz.6.6024 (23455): /proc/23454/oom_adj is deprecated, please use /proc/23454/oom_score_adj instead. [ 932.325156][ T5910] m920x_read = error: -19 [ 932.329778][ T5910] dvb-usb: error while querying for an remote control event. [ 932.446902][ T5910] m920x_read = error: -19 [ 932.459454][ T5910] dvb-usb: error while querying for an remote control event. [ 932.574550][ T5910] m920x_read = error: -19 [ 932.579000][ T5910] dvb-usb: error while querying for an remote control event. [ 932.694551][ T5910] m920x_read = error: -19 [ 932.700098][ T5910] dvb-usb: error while querying for an remote control event. [ 932.851059][ T5910] m920x_read = error: -19 [ 932.869112][ T5910] dvb-usb: error while querying for an remote control event. [ 932.995425][ T5910] m920x_read = error: -19 [ 933.009320][ T5910] dvb-usb: error while querying for an remote control event. [ 933.124694][ T5910] m920x_read = error: -19 [ 933.147694][ T5910] dvb-usb: error while querying for an remote control event. [ 933.284676][ T5910] m920x_read = error: -19 [ 933.293447][ T5910] dvb-usb: error while querying for an remote control event. [ 933.414502][ T5910] m920x_read = error: -19 [ 933.418882][ T5910] dvb-usb: error while querying for an remote control event. [ 933.449020][T23469] FAULT_INJECTION: forcing a failure. [ 933.449020][T23469] name failslab, interval 1, probability 0, space 0, times 0 [ 933.461987][T23469] CPU: 0 UID: 0 PID: 23469 Comm: syz.6.6030 Not tainted syzkaller #0 PREEMPT(full) [ 933.462019][T23469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 933.462031][T23469] Call Trace: [ 933.462040][T23469] [ 933.462049][T23469] dump_stack_lvl+0x189/0x250 [ 933.462078][T23469] ? __pfx____ratelimit+0x10/0x10 [ 933.462104][T23469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.462128][T23469] ? __pfx__printk+0x10/0x10 [ 933.462153][T23469] ? __pfx___might_resched+0x10/0x10 [ 933.462174][T23469] ? fs_reclaim_acquire+0x7d/0x100 [ 933.462201][T23469] should_fail_ex+0x414/0x560 [ 933.462232][T23469] should_failslab+0xa8/0x100 [ 933.462257][T23469] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 933.462288][T23469] ? __alloc_skb+0x255/0x430 [ 933.462314][T23469] ? napi_skb_cache_get+0x4a5/0x780 [ 933.462341][T23469] ? napi_skb_cache_get+0x151/0x780 [ 933.462370][T23469] __alloc_skb+0x255/0x430 [ 933.462397][T23469] ? __pfx___alloc_skb+0x10/0x10 [ 933.462424][T23469] ? netlink_autobind+0xdb/0x300 [ 933.462445][T23469] ? netlink_autobind+0x2c2/0x300 [ 933.462471][T23469] netlink_sendmsg+0x5c6/0xb30 [ 933.462490][T23469] ? aa_sk_perm+0x15f/0x920 [ 933.462525][T23469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.462549][T23469] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 933.462569][T23469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.462579][T23469] sock_sendmsg_nosec+0x18f/0x1d0 [ 933.462594][T23469] ____sys_sendmsg+0x577/0x880 [ 933.462609][T23469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 933.462632][T23469] ? import_iovec+0x74/0xa0 [ 933.462656][T23469] ___sys_sendmsg+0x21f/0x2a0 [ 933.462679][T23469] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.462706][T23469] ? rcu_read_lock_any_held+0xb3/0x120 [ 933.462736][T23469] ? __fget_files+0x2a/0x420 [ 933.462753][T23469] ? __fget_files+0x3a0/0x420 [ 933.462774][T23469] __x64_sys_sendmsg+0x19b/0x260 [ 933.462798][T23469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 933.462828][T23469] ? __pfx_ksys_write+0x10/0x10 [ 933.462852][T23469] ? do_syscall_64+0xbe/0xf80 [ 933.462871][T23469] do_syscall_64+0xfa/0xf80 [ 933.462886][T23469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.462897][T23469] ? clear_bhb_loop+0x60/0xb0 [ 933.462909][T23469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.462920][T23469] RIP: 0033:0x7f98f5d8f749 [ 933.462937][T23469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.462955][T23469] RSP: 002b:00007f98f6c47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.462976][T23469] RAX: ffffffffffffffda RBX: 00007f98f5fe5fa0 RCX: 00007f98f5d8f749 [ 933.462992][T23469] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 933.463010][T23469] RBP: 00007f98f6c47090 R08: 0000000000000000 R09: 0000000000000000 [ 933.463017][T23469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.463023][T23469] R13: 00007f98f5fe6038 R14: 00007f98f5fe5fa0 R15: 00007ffcb5350378 [ 933.463040][T23469] [ 933.756654][ T9] m920x_read = error: -19 [ 933.761019][ T9] dvb-usb: error while querying for an remote control event. [ 933.805609][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 933.835624][T15538] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 933.849613][T15538] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 933.857382][T15538] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 933.867302][T15538] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 933.874639][T18028] m920x_read = error: -19 [ 933.879814][T18028] dvb-usb: error while querying for an remote control event. [ 933.884267][T15538] usb 5-1: USB disconnect, device number 74 [ 934.004502][ T5910] m920x_read = error: -19 [ 934.008954][ T5910] dvb-usb: error while querying for an remote control event. [ 934.074429][T18028] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 934.124667][ T5910] m920x_read = error: -19 [ 934.129800][ T5910] dvb-usb: error while querying for an remote control event. [ 934.155079][T23473] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6032'. [ 934.225273][T18028] usb 7-1: Using ep0 maxpacket: 32 [ 934.240280][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 934.252390][ T5910] m920x_read = error: -19 [ 934.257392][ T5910] dvb-usb: error while querying for an remote control event. [ 934.265663][T18028] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 934.278453][T18028] usb 7-1: config 0 has no interface number 0 [ 934.285870][T18028] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 934.308310][T18028] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 934.331496][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 934.343192][T18028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.357947][T18028] usb 7-1: Product: syz [ 934.362132][T18028] usb 7-1: Manufacturer: syz [ 934.367318][T18028] usb 7-1: SerialNumber: syz [ 934.375110][ T5910] m920x_read = error: -19 [ 934.384412][ T5910] dvb-usb: error while querying for an remote control event. [ 934.396517][T18028] usb 7-1: config 0 descriptor?? [ 934.402305][T23471] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 934.494509][ T5910] m920x_read = error: -19 [ 934.500369][ T5910] dvb-usb: error while querying for an remote control event. [ 934.613499][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 934.627249][ T5910] m920x_read = error: -19 [ 934.631634][ T5910] dvb-usb: error while querying for an remote control event. [ 934.645315][T23471] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 934.754666][ T5910] m920x_read = error: -19 [ 934.759236][ T5910] dvb-usb: error while querying for an remote control event. [ 934.884649][ T5910] m920x_read = error: -19 [ 934.892525][ T5910] dvb-usb: error while querying for an remote control event. [ 935.004526][ T5910] m920x_read = error: -19 [ 935.009230][ T5910] dvb-usb: error while querying for an remote control event. [ 935.127582][ T5910] m920x_read = error: -19 [ 935.147176][ T5910] dvb-usb: error while querying for an remote control event. [ 935.204381][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 935.274618][ T5910] m920x_read = error: -19 [ 935.284552][ T5910] dvb-usb: error while querying for an remote control event. [ 935.358814][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 935.418985][ T5910] m920x_read = error: -19 [ 935.424514][ T5910] dvb-usb: error while querying for an remote control event. [ 935.428635][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 935.466358][T18028] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 935.494379][T18028] asix 7-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 935.519645][T18028] asix 7-1:0.188: probe with driver asix failed with error -61 [ 935.530977][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 935.535253][T18028] m920x_read = error: -19 [ 935.562396][T18028] dvb-usb: error while querying for an remote control event. [ 935.581278][T23509] IPv6: syztnl2: Disabled Multicast RS [ 935.636931][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 935.674478][T18028] m920x_read = error: -19 [ 935.679023][T18028] dvb-usb: error while querying for an remote control event. [ 935.795330][T18028] m920x_read = error: -19 [ 935.799875][T18028] dvb-usb: error while querying for an remote control event. [ 935.914894][T18028] m920x_read = error: -19 [ 935.919281][T18028] dvb-usb: error while querying for an remote control event. [ 936.055360][T18028] m920x_read = error: -19 [ 936.059763][T18028] dvb-usb: error while querying for an remote control event. [ 936.158261][T23518] pimreg: left allmulticast mode [ 936.185787][T18028] m920x_read = error: -19 [ 936.190214][T18028] dvb-usb: error while querying for an remote control event. [ 936.221782][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 936.314645][T18028] m920x_read = error: -19 [ 936.319024][T18028] dvb-usb: error while querying for an remote control event. [ 936.434429][T18028] m920x_read = error: -19 [ 936.438894][T18028] dvb-usb: error while querying for an remote control event. [ 936.552325][T23533] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6058'. [ 936.574860][T18028] m920x_read = error: -19 [ 936.579263][T18028] dvb-usb: error while querying for an remote control event. [ 936.704444][T18028] m920x_read = error: -19 [ 936.714420][T18028] dvb-usb: error while querying for an remote control event. [ 936.834480][T18028] m920x_read = error: -19 [ 936.843428][T18028] dvb-usb: error while querying for an remote control event. [ 936.906491][ T24] usb 7-1: USB disconnect, device number 47 [ 936.964893][T18028] m920x_read = error: -19 [ 936.969311][T18028] dvb-usb: error while querying for an remote control event. [ 937.127097][T18028] m920x_read = error: -19 [ 937.131476][T18028] dvb-usb: error while querying for an remote control event. [ 937.209097][T23548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 937.264515][T18028] m920x_read = error: -19 [ 937.268920][T18028] dvb-usb: error while querying for an remote control event. [ 937.404856][T18028] m920x_read = error: -19 [ 937.409489][T18028] dvb-usb: error while querying for an remote control event. [ 937.525088][T18028] m920x_read = error: -19 [ 937.530332][T18028] dvb-usb: error while querying for an remote control event. [ 937.644764][ T5910] m920x_read = error: -19 [ 937.649170][ T5910] dvb-usb: error while querying for an remote control event. [ 937.764553][ T5910] m920x_read = error: -19 [ 937.769013][ T5910] dvb-usb: error while querying for an remote control event. [ 937.884748][ T5910] m920x_read = error: -19 [ 937.889196][ T5910] dvb-usb: error while querying for an remote control event. [ 937.954424][ T5937] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 938.019739][ T5910] m920x_read = error: -19 [ 938.024119][ T5910] dvb-usb: error while querying for an remote control event. [ 938.104525][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 938.125886][ T5937] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 938.134078][ T5937] usb 5-1: config 0 has no interface number 0 [ 938.157987][ T5937] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 938.177153][ T5937] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 938.187384][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.194588][ T5910] m920x_read = error: -19 [ 938.195753][ T5937] usb 5-1: Product: syz [ 938.205682][ T5937] usb 5-1: Manufacturer: syz [ 938.207293][ T5910] dvb-usb: error while querying for an remote control event. [ 938.210532][ T5937] usb 5-1: SerialNumber: syz [ 938.239790][ T5937] usb 5-1: config 0 descriptor?? [ 938.252363][T23568] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 938.344438][ T5910] m920x_read = error: -19 [ 938.348449][ T30] audit: type=1326 audit(1764102829.582:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f5d8f749 code=0x7ffc0000 [ 938.355502][ T5910] dvb-usb: error while querying for an remote control event. [ 938.387513][ T30] audit: type=1326 audit(1764102829.582:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f5d8f749 code=0x7ffc0000 [ 938.411054][ T30] audit: type=1326 audit(1764102829.582:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f5d8f749 code=0x7ffc0000 [ 938.455537][ T30] audit: type=1326 audit(1764102829.582:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f5d8f749 code=0x7ffc0000 [ 938.508470][T23568] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 938.508649][ T30] audit: type=1326 audit(1764102829.582:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98f5d8df90 code=0x7ffc0000 [ 938.515799][ T5910] m920x_read = error: -19 [ 938.515823][ T5910] dvb-usb: error while querying for an remote control event. [ 938.557512][ T30] audit: type=1326 audit(1764102829.612:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f5d8f749 code=0x7ffc0000 [ 938.586087][ T30] audit: type=1326 audit(1764102829.612:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f5d8f749 code=0x7ffc0000 [ 938.609004][ T30] audit: type=1326 audit(1764102829.612:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f5d8f749 code=0x7ffc0000 [ 938.631537][ T30] audit: type=1326 audit(1764102829.612:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f98f5d8f749 code=0x7ffc0000 [ 938.634572][ T5910] m920x_read = error: -19 [ 938.654686][ T30] audit: type=1326 audit(1764102829.612:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f5d8f749 code=0x7ffc0000 [ 938.692440][ T5910] dvb-usb: error while querying for an remote control event. [ 938.825892][T18028] m920x_read = error: -19 [ 938.830275][T18028] dvb-usb: error while querying for an remote control event. [ 938.944898][ T5910] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 938.952674][T18028] m920x_read = error: -19 [ 938.964461][T18028] dvb-usb: error while querying for an remote control event. [ 939.074463][T18028] m920x_read = error: -19 [ 939.078845][T18028] dvb-usb: error while querying for an remote control event. [ 939.104692][ T5910] usb 7-1: device descriptor read/64, error -71 [ 939.136373][T10055] udevd[10055]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 939.203316][T23583] tipc: Enabled bearer , priority 0 [ 939.214464][T15650] m920x_read = error: -19 [ 939.218997][T15650] dvb-usb: error while querying for an remote control event. [ 939.330849][T23583] syzkaller0: entered promiscuous mode [ 939.336738][T23583] syzkaller0: entered allmulticast mode [ 939.345431][T23583] tipc: Resetting bearer [ 939.345666][T15650] m920x_read = error: -19 [ 939.355873][ T5910] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 939.364710][T23582] tipc: Resetting bearer [ 939.371122][ T5937] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 939.383548][ T5937] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 939.384535][T15650] dvb-usb: error while querying for an remote control event. [ 939.413182][ T5937] asix 5-1:0.188: probe with driver asix failed with error -61 [ 939.514510][ T5910] usb 7-1: device descriptor read/64, error -71 [ 939.544495][T18028] m920x_read = error: -19 [ 939.548870][T18028] dvb-usb: error while querying for an remote control event. [ 939.631652][T23588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6079'. [ 939.641311][ T5910] usb usb7-port1: attempt power cycle [ 939.665298][T18028] m920x_read = error: -19 [ 939.669712][T18028] dvb-usb: error while querying for an remote control event. [ 939.758188][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 939.794431][T18028] m920x_read = error: -19 [ 939.803540][T18028] dvb-usb: error while querying for an remote control event. [ 939.934468][T18028] m920x_read = error: -19 [ 939.938884][T18028] dvb-usb: error while querying for an remote control event. [ 939.948051][T23595] binder: 23593:23595 ioctl c0306201 0 returned -14 [ 939.996486][ T5910] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 940.031076][ T5910] usb 7-1: device descriptor read/8, error -71 [ 940.059053][T18028] m920x_read = error: -19 [ 940.063403][T18028] dvb-usb: error while querying for an remote control event. [ 940.175094][T18028] m920x_read = error: -19 [ 940.179478][T18028] dvb-usb: error while querying for an remote control event. [ 940.286737][ T5910] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 940.294746][T18028] m920x_read = error: -19 [ 940.308398][T18028] dvb-usb: error while querying for an remote control event. [ 940.336412][ T5910] usb 7-1: device descriptor read/8, error -71 [ 940.436990][T18028] m920x_read = error: -19 [ 940.441510][T18028] dvb-usb: error while querying for an remote control event. [ 940.450010][ T5910] usb usb7-port1: unable to enumerate USB device [ 940.565628][ T5910] m920x_read = error: -19 [ 940.570101][ T5910] dvb-usb: error while querying for an remote control event. [ 940.694662][T18028] m920x_read = error: -19 [ 940.699053][T18028] dvb-usb: error while querying for an remote control event. [ 940.733984][T15538] usb 5-1: USB disconnect, device number 75 [ 940.824493][T15650] m920x_read = error: -19 [ 940.828876][T15650] dvb-usb: error while querying for an remote control event. [ 940.944620][T15650] m920x_read = error: -19 [ 940.949001][T15650] dvb-usb: error while querying for an remote control event. [ 941.074464][T15650] m920x_read = error: -19 [ 941.078853][T15650] dvb-usb: error while querying for an remote control event. [ 941.216058][T15650] m920x_read = error: -19 [ 941.228814][T15650] dvb-usb: error while querying for an remote control event. [ 941.355953][T15650] m920x_read = error: -19 [ 941.360353][T15650] dvb-usb: error while querying for an remote control event. [ 941.448634][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 941.494528][T15650] m920x_read = error: -19 [ 941.504374][T15650] dvb-usb: error while querying for an remote control event. [ 941.645022][T15650] m920x_read = error: -19 [ 941.658195][T15650] dvb-usb: error while querying for an remote control event. [ 941.788562][T15650] m920x_read = error: -19 [ 941.792983][T15650] dvb-usb: error while querying for an remote control event. [ 941.954423][T15650] m920x_read = error: -19 [ 941.958816][T15650] dvb-usb: error while querying for an remote control event. [ 942.097543][T15650] m920x_read = error: -19 [ 942.102019][T15650] dvb-usb: error while querying for an remote control event. [ 942.234739][T15650] m920x_read = error: -19 [ 942.242643][T15650] dvb-usb: error while querying for an remote control event. [ 942.302348][T23582] tipc: Disabling bearer [ 942.322095][T23631] binder: 23628:23631 ioctl c0306201 0 returned -14 [ 942.329171][T23615] tipc: Started in network mode [ 942.334146][T23615] tipc: Node identity 8615ccf55011, cluster identity 4711 [ 942.342570][T23615] tipc: Enabled bearer , priority 0 [ 942.362322][T15650] m920x_read = error: -19 [ 942.374622][T15650] dvb-usb: error while querying for an remote control event. [ 942.389695][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 942.446874][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 942.514578][T15650] m920x_read = error: -19 [ 942.519911][T15650] dvb-usb: error while querying for an remote control event. [ 942.559473][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 942.573611][T23616] syzkaller0: entered promiscuous mode [ 942.595476][T23616] syzkaller0: entered allmulticast mode [ 942.621512][T23616] tipc: Resetting bearer [ 942.631343][T23612] tipc: Resetting bearer [ 942.654965][T15650] m920x_read = error: -19 [ 942.664043][T15650] dvb-usb: error while querying for an remote control event. [ 942.738179][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 942.794734][T15650] m920x_read = error: -19 [ 942.804417][T15650] dvb-usb: error while querying for an remote control event. [ 942.935419][T18028] m920x_read = error: -19 [ 942.944379][T18028] dvb-usb: error while querying for an remote control event. [ 943.004463][T15650] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 943.075269][T18028] m920x_read = error: -19 [ 943.079655][T18028] dvb-usb: error while querying for an remote control event. [ 943.194694][T15650] usb 9-1: Using ep0 maxpacket: 16 [ 943.207238][T15650] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 943.234042][ T5910] m920x_read = error: -19 [ 943.241978][T15650] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 943.264443][ T5910] dvb-usb: error while querying for an remote control event. [ 943.273517][T15650] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.294418][T15650] usb 9-1: Product: syz [ 943.300662][T15650] usb 9-1: Manufacturer: syz [ 943.322016][T15650] usb 9-1: SerialNumber: syz [ 943.330737][T15650] usb 9-1: config 0 descriptor?? [ 943.352201][T15650] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 943.375828][T15650] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 943.404896][ T5910] m920x_read = error: -19 [ 943.409320][ T5910] dvb-usb: error while querying for an remote control event. [ 943.474539][T15538] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 943.559732][ T5910] m920x_read = error: -19 [ 943.564148][ T5910] dvb-usb: error while querying for an remote control event. [ 943.656916][T15538] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 943.665141][T15538] usb 5-1: config 0 has no interface number 0 [ 943.671279][T15538] usb 5-1: config 0 interface 41 has no altsetting 0 [ 943.695974][ T5910] m920x_read = error: -19 [ 943.699783][T15538] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 943.702535][ T5910] dvb-usb: error while querying for an remote control event. [ 943.710777][T15538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.744702][T15538] usb 5-1: Product: syz [ 943.748993][T15538] usb 5-1: Manufacturer: syz [ 943.753601][T15538] usb 5-1: SerialNumber: syz [ 943.786629][T15538] usb 5-1: config 0 descriptor?? [ 943.811210][T15650] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 943.845317][ T5910] m920x_read = error: -19 [ 943.854598][ T5910] dvb-usb: error while querying for an remote control event. [ 943.865957][T10055] udevd[10055]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 943.924795][T15650] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 943.944015][T15650] em28xx 9-1:0.0: board has no eeprom [ 943.989583][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 944.005555][ T5910] m920x_read = error: -19 [ 944.012671][ T5910] dvb-usb: error while querying for an remote control event. [ 944.045734][T10055] udevd[10055]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 944.053244][T15650] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 944.069084][T15650] em28xx 9-1:0.0: dvb set to bulk mode. [ 944.087318][ T5910] em28xx 9-1:0.0: Binding DVB extension [ 944.118194][T15650] usb 9-1: USB disconnect, device number 14 [ 944.131793][T15650] em28xx 9-1:0.0: Disconnecting em28xx [ 944.147552][ T9] m920x_read = error: -19 [ 944.152497][ T9] dvb-usb: error while querying for an remote control event. [ 944.189917][T10385] udevd[10385]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 944.227779][ T5910] em28xx 9-1:0.0: Registering input extension [ 944.250738][T15650] em28xx 9-1:0.0: Closing input extension [ 944.294479][ T5910] m920x_read = error: -19 [ 944.298921][ T5910] dvb-usb: error while querying for an remote control event. [ 944.319682][T15650] em28xx 9-1:0.0: Freeing device [ 944.322101][T10055] udevd[10055]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 944.425193][ T5910] m920x_read = error: -19 [ 944.429859][ T5910] dvb-usb: error while querying for an remote control event. [ 944.450842][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 944.564892][T15650] m920x_read = error: -19 [ 944.565479][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 944.569294][T15650] dvb-usb: error while querying for an remote control event. [ 944.622908][T15538] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 944.704704][T15650] m920x_read = error: -19 [ 944.709543][T15650] dvb-usb: error while querying for an remote control event. [ 944.819306][T15650] m920x_read = error: -19 [ 944.823684][T15650] dvb-usb: error while querying for an remote control event. [ 944.852812][T15538] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 944.868215][T15538] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 944.878761][T15538] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 944.892333][T15538] usb 5-1: USB disconnect, device number 76 [ 944.940089][T15650] m920x_read = error: -19 [ 944.944627][T15650] dvb-usb: error while querying for an remote control event. [ 945.056720][T15650] m920x_read = error: -19 [ 945.061087][T15650] dvb-usb: error while querying for an remote control event. [ 945.187759][T15650] m920x_read = error: -19 [ 945.192641][T15650] dvb-usb: error while querying for an remote control event. [ 945.296843][T15650] m920x_read = error: -19 [ 945.301331][T15650] dvb-usb: error while querying for an remote control event. [ 945.438694][T15650] m920x_read = error: -19 [ 945.443078][T15650] dvb-usb: error while querying for an remote control event. [ 945.511573][T23674] binder: 23672:23674 ioctl c0306201 0 returned -14 [ 945.567652][ T9] m920x_read = error: -19 [ 945.572030][ T9] dvb-usb: error while querying for an remote control event. [ 945.675356][T23612] tipc: Disabling bearer [ 945.684524][ T9] m920x_read = error: -19 [ 945.688897][ T9] dvb-usb: error while querying for an remote control event. [ 945.696534][ T24] tipc: Node number set to 3590638837 [ 945.771972][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 945.804720][ T9] m920x_read = error: -19 [ 945.817575][ T9] dvb-usb: error while querying for an remote control event. [ 945.843786][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 945.917351][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 945.944580][ T9] m920x_read = error: -19 [ 945.949148][ T9] dvb-usb: error while querying for an remote control event. [ 946.031930][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 946.065112][ T9] m920x_read = error: -19 [ 946.069601][ T9] dvb-usb: error while querying for an remote control event. [ 946.191630][ T9] m920x_read = error: -19 [ 946.206776][ T9] dvb-usb: error while querying for an remote control event. [ 946.274529][T15538] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 946.336790][T15650] m920x_read = error: -19 [ 946.347952][T15650] dvb-usb: error while querying for an remote control event. [ 946.424980][T15538] usb 7-1: Using ep0 maxpacket: 32 [ 946.432914][T15538] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 946.441690][T15538] usb 7-1: config 0 has no interface number 0 [ 946.450912][T15538] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 946.460518][T15538] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.468890][T15538] usb 7-1: Product: syz [ 946.473310][T15538] usb 7-1: Manufacturer: syz [ 946.479721][T15538] usb 7-1: SerialNumber: syz [ 946.484445][T15650] m920x_read = error: -19 [ 946.484470][T15650] dvb-usb: error while querying for an remote control event. [ 946.495815][T15538] usb 7-1: config 0 descriptor?? [ 946.517231][T15538] smsc95xx v2.0.0 [ 946.614452][ T5937] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 946.634487][T15650] m920x_read = error: -19 [ 946.639774][T15650] dvb-usb: error while querying for an remote control event. [ 946.733303][T10055] udevd[10055]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 946.755355][T15650] m920x_read = error: -19 [ 946.759828][T15650] dvb-usb: error while querying for an remote control event. [ 946.774903][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 946.781515][ T5937] usb 5-1: config 0 has an invalid interface number: 131 but max is 0 [ 946.789812][ T5937] usb 5-1: config 0 has no interface number 0 [ 946.796663][ T5937] usb 5-1: config 0 interface 131 has no altsetting 0 [ 946.805901][ T5937] usb 5-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=b2.13 [ 946.815060][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.823064][ T5937] usb 5-1: Product: syz [ 946.829605][ T5937] usb 5-1: Manufacturer: syz [ 946.834248][ T5937] usb 5-1: SerialNumber: syz [ 946.840973][ T5937] usb 5-1: config 0 descriptor?? [ 946.848858][ T5937] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 946.859236][ T5937] dvb-usb: bulk message failed: -22 (2/0) [ 946.865052][ T5937] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 946.873907][ T5937] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 946.884632][ T5937] usb 5-1: media controller created [ 946.891214][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 946.895578][ T9] m920x_read = error: -19 [ 946.907383][ T9] dvb-usb: error while querying for an remote control event. [ 946.908520][ T5937] usb 5-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 946.923602][ T5937] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 946.937306][T15538] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 946.950615][T15538] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 946.954402][T15650] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 947.015241][ T5937] rc_core: IR keymap rc-dtt200u not found [ 947.023414][ T5937] Registered IR keymap rc-empty [ 947.029845][ T5937] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 947.045350][ T9] m920x_read = error: -19 [ 947.047133][ T5937] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input93 [ 947.051110][ T9] dvb-usb: error while querying for an remote control event. [ 947.073918][ T5937] dvb-usb: schedule remote query interval to 300 msecs. [ 947.082247][ T5937] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 947.102563][ T5937] usb 5-1: USB disconnect, device number 77 [ 947.134970][T15650] usb 9-1: Using ep0 maxpacket: 32 [ 947.144201][T15650] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 947.153835][T15650] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.166403][T15650] usb 9-1: config 0 descriptor?? [ 947.175508][ T9] m920x_read = error: -19 [ 947.180096][ T9] dvb-usb: error while querying for an remote control event. [ 947.190022][T15650] gspca_main: sq930x-2.14.0 probing 041e:403c [ 947.213193][ T5937] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 947.314708][ T9] m920x_read = error: -19 [ 947.319171][ T9] dvb-usb: error while querying for an remote control event. [ 947.434477][ T9] m920x_read = error: -19 [ 947.438871][ T9] dvb-usb: error while querying for an remote control event. [ 947.555210][ T9] m920x_read = error: -19 [ 947.559661][ T9] dvb-usb: error while querying for an remote control event. [ 947.652909][T23700] FAULT_INJECTION: forcing a failure. [ 947.652909][T23700] name failslab, interval 1, probability 0, space 0, times 0 [ 947.665782][T23700] CPU: 0 UID: 0 PID: 23700 Comm: syz.4.6118 Not tainted syzkaller #0 PREEMPT(full) [ 947.665812][T23700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 947.665824][T23700] Call Trace: [ 947.665834][T23700] [ 947.665843][T23700] dump_stack_lvl+0x189/0x250 [ 947.665873][T23700] ? __pfx____ratelimit+0x10/0x10 [ 947.665900][T23700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 947.665915][T23700] ? __pfx__printk+0x10/0x10 [ 947.665929][T23700] ? __pfx___might_resched+0x10/0x10 [ 947.665942][T23700] ? fs_reclaim_acquire+0x7d/0x100 [ 947.665957][T23700] should_fail_ex+0x414/0x560 [ 947.665994][T23700] should_failslab+0xa8/0x100 [ 947.666021][T23700] __kmalloc_cache_noprof+0x84/0x6f0 [ 947.666043][T23700] ? snd_seq_prioq_new+0x47/0xa0 [ 947.666065][T23700] snd_seq_prioq_new+0x47/0xa0 [ 947.666080][T23700] snd_seq_queue_alloc+0x133/0x790 [ 947.666097][T23700] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 947.666114][T23700] snd_seq_ioctl_create_queue+0x7f/0x3d0 [ 947.666160][T23700] snd_seq_oss_open+0x5e0/0xed0 [ 947.666194][T23700] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 947.666238][T23700] ? trace_contention_end+0x39/0x100 [ 947.666254][T23700] ? __mutex_lock+0x335/0x1350 [ 947.666298][T23700] ? __pfx___mutex_lock+0x10/0x10 [ 947.666332][T23700] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 947.666351][T23700] ? __pfx_free_devinfo+0x10/0x10 [ 947.666363][T23700] ? do_raw_spin_unlock+0x122/0x240 [ 947.666381][T23700] ? soundcore_open+0x2da/0x490 [ 947.666396][T23700] odev_open+0x67/0xd0 [ 947.666410][T23700] chrdev_open+0x4cc/0x5e0 [ 947.666436][T23700] ? __pfx_chrdev_open+0x10/0x10 [ 947.666460][T23700] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 947.666494][T23700] ? __pfx_chrdev_open+0x10/0x10 [ 947.666506][T23700] do_dentry_open+0x7ce/0x1420 [ 947.666527][T23700] vfs_open+0x3b/0x340 [ 947.666540][T23700] ? path_openat+0x33b3/0x3d90 [ 947.666551][T23700] path_openat+0x33ce/0x3d90 [ 947.666584][T23700] ? stack_depot_save_flags+0x40/0x850 [ 947.666622][T23700] ? __kasan_slab_alloc+0x6c/0x80 [ 947.666645][T23700] ? __pfx_path_openat+0x10/0x10 [ 947.666656][T23700] ? __lock_acquire+0x6b6/0x2cf0 [ 947.666685][T23700] do_filp_open+0x1fa/0x410 [ 947.666697][T23700] ? __pfx_do_filp_open+0x10/0x10 [ 947.666732][T23700] ? _raw_spin_unlock+0x28/0x50 [ 947.666756][T23700] ? alloc_fd+0x64c/0x6c0 [ 947.666791][T23700] do_sys_openat2+0x121/0x200 [ 947.666809][T23700] ? __pfx_do_sys_openat2+0x10/0x10 [ 947.666830][T23700] __se_sys_openat2+0x226/0x2c0 [ 947.666847][T23700] ? __pfx___se_sys_openat2+0x10/0x10 [ 947.666875][T23700] ? do_syscall_64+0xbe/0xf80 [ 947.666907][T23700] do_syscall_64+0xfa/0xf80 [ 947.666935][T23700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.666949][T23700] ? clear_bhb_loop+0x60/0xb0 [ 947.666962][T23700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.666977][T23700] RIP: 0033:0x7f877678f749 [ 947.666987][T23700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.666997][T23700] RSP: 002b:00007f87775e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 947.667013][T23700] RAX: ffffffffffffffda RBX: 00007f87769e5fa0 RCX: 00007f877678f749 [ 947.667028][T23700] RDX: 0000200000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 947.667043][T23700] RBP: 00007f87775e3090 R08: 0000000000000000 R09: 0000000000000000 [ 947.667056][T23700] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000002 [ 947.667069][T23700] R13: 00007f87769e6038 R14: 00007f87769e5fa0 R15: 00007ffd7f366738 [ 947.667097][T23700] [ 948.027403][T18028] m920x_read = error: -19 [ 948.031816][T18028] dvb-usb: error while querying for an remote control event. [ 948.092567][T10055] udevd[10055]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 948.144742][ T9] m920x_read = error: -19 [ 948.149296][ T9] dvb-usb: error while querying for an remote control event. [ 948.264637][ T9] m920x_read = error: -19 [ 948.269128][ T9] dvb-usb: error while querying for an remote control event. [ 948.386361][ T9] m920x_read = error: -19 [ 948.390847][ T9] dvb-usb: error while querying for an remote control event. [ 948.495071][T23697] [ 948.497426][T23697] ====================================================== [ 948.504432][T23697] WARNING: possible circular locking dependency detected [ 948.511455][T23697] syzkaller #0 Not tainted [ 948.515855][T23697] ------------------------------------------------------ [ 948.522858][T23697] syz.8.6117/23697 is trying to acquire lock: [ 948.528910][T23697] ffff88801e3b7698 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x82/0x390 [ 948.537796][T23697] [ 948.537796][T23697] but task is already holding lock: [ 948.545144][T23697] ffff888027b54558 (&q->q_usage_counter(io)#71){++++}-{0:0}, at: blk_throtl_init+0x27a/0x410 [ 948.555328][T23697] [ 948.555328][T23697] which lock already depends on the new lock. [ 948.555328][T23697] [ 948.565715][T23697] [ 948.565715][T23697] the existing dependency chain (in reverse order) is: [ 948.574718][T23697] [ 948.574718][T23697] -> #2 (&q->q_usage_counter(io)#71){++++}-{0:0}: [ 948.583317][T23697] blk_alloc_queue+0x538/0x620 [ 948.588601][T23697] __blk_mq_alloc_disk+0x15c/0x340 [ 948.594226][T23697] loop_add+0x411/0xad0 [ 948.598898][T23697] blk_request_module+0x27d/0x2a0 [ 948.604436][T23697] blkdev_get_no_open+0x3f/0xe0 [ 948.609793][T23697] blkdev_open+0x1de/0x600 [ 948.614715][T23697] do_dentry_open+0x7ce/0x1420 [ 948.620000][T23697] vfs_open+0x3b/0x340 [ 948.624580][T23697] path_openat+0x33ce/0x3d90 [ 948.629678][T23697] do_filp_open+0x1fa/0x410 [ 948.634866][T23697] do_sys_openat2+0x121/0x200 [ 948.640064][T23697] __x64_sys_openat+0x138/0x170 [ 948.645522][T23697] do_syscall_64+0xfa/0xf80 [ 948.650544][T23697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.656948][T23697] [ 948.656948][T23697] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 948.664152][T23697] fs_reclaim_acquire+0x72/0x100 [ 948.669600][T23697] mempool_alloc_noprof+0xab/0x2f0 [ 948.675232][T23697] bio_alloc_bioset+0x241/0x12a0 [ 948.680684][T23697] blkdev_direct_IO+0x9c0/0x17e0 [ 948.686131][T23697] blkdev_read_iter+0x23d/0x440 [ 948.691491][T23697] lo_submit_rw_aio+0x488/0x620 [ 948.696858][T23697] loop_queue_rq+0x6c5/0x8d0 [ 948.701967][T23697] blk_mq_request_issue_directly+0x3c1/0x710 [ 948.708455][T23697] blk_mq_issue_direct+0x2a0/0x660 [ 948.714075][T23697] blk_mq_dispatch_queue_requests+0x621/0x800 [ 948.720653][T23697] blk_mq_flush_plug_list+0x432/0x550 [ 948.726541][T23697] __blk_flush_plug+0x3d3/0x4b0 [ 948.731917][T23697] __submit_bio+0x2d3/0x5a0 [ 948.736931][T23697] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 948.743084][T23697] block_read_full_folio+0x7b7/0x830 [ 948.748880][T23697] filemap_read_folio+0x117/0x380 [ 948.754421][T23697] do_read_cache_folio+0x358/0x590 [ 948.760046][T23697] read_part_sector+0xb6/0x2b0 [ 948.765325][T23697] adfspart_check_ICS+0xa4/0xa50 [ 948.770769][T23697] bdev_disk_changed+0x75f/0x14b0 [ 948.776310][T23697] loop_reread_partitions+0x5f/0xf0 [ 948.782018][T23697] loop_configure+0xbd6/0xe50 [ 948.787204][T23697] lo_ioctl+0x806/0x1c50 [ 948.791964][T23697] blkdev_ioctl+0x60e/0x710 [ 948.796976][T23697] __se_sys_ioctl+0xfc/0x170 [ 948.802075][T23697] do_syscall_64+0xfa/0xf80 [ 948.807096][T23697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.813501][T23697] [ 948.813501][T23697] -> #0 (set->srcu){.+.+}-{0:0}: [ 948.820621][T23697] __lock_acquire+0x15a6/0x2cf0 [ 948.825997][T23697] lock_sync+0xba/0x160 [ 948.830672][T23697] __synchronize_srcu+0x96/0x390 [ 948.836126][T23697] blk_throtl_init+0x298/0x410 [ 948.841402][T23697] tg_set_conf+0x1c6/0x4b0 [ 948.846329][T23697] cgroup_file_write+0x3a1/0x740 [ 948.851779][T23697] kernfs_fop_write_iter+0x3af/0x540 [ 948.857577][T23697] vfs_write+0x5c9/0xb30 [ 948.862325][T23697] ksys_write+0x145/0x250 [ 948.867165][T23697] do_syscall_64+0xfa/0xf80 [ 948.872184][T23697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.878584][T23697] [ 948.878584][T23697] other info that might help us debug this: [ 948.878584][T23697] [ 948.888799][T23697] Chain exists of: [ 948.888799][T23697] set->srcu --> fs_reclaim --> &q->q_usage_counter(io)#71 [ 948.888799][T23697] [ 948.901835][T23697] Possible unsafe locking scenario: [ 948.901835][T23697] [ 948.909268][T23697] CPU0 CPU1 [ 948.914616][T23697] ---- ---- [ 948.919966][T23697] lock(&q->q_usage_counter(io)#71); [ 948.925335][T23697] lock(fs_reclaim); [ 948.931823][T23697] lock(&q->q_usage_counter(io)#71); [ 948.939709][T23697] sync(set->srcu); [ 948.943594][T23697] [ 948.943594][T23697] *** DEADLOCK *** [ 948.943594][T23697] [ 948.951717][T23697] 7 locks held by syz.8.6117/23697: [ 948.956903][T23697] #0: ffff88805d413cf8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 948.965954][T23697] #1: ffff88803423e420 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 948.974921][T23697] #2: ffff888032e2ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 948.984668][T23697] #3: ffff88805db6dc38 (kn->active#90){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 948.994680][T23697] #4: ffff888027b54760 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2a2/0x3d0 [ 949.004777][T23697] #5: ffff888027b54558 (&q->q_usage_counter(io)#71){++++}-{0:0}, at: blk_throtl_init+0x27a/0x410 [ 949.015390][T23697] #6: ffff888027b54590 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: blk_throtl_init+0x27a/0x410 [ 949.026271][T23697] [ 949.026271][T23697] stack backtrace: [ 949.032143][T23697] CPU: 0 UID: 0 PID: 23697 Comm: syz.8.6117 Not tainted syzkaller #0 PREEMPT(full) [ 949.032164][T23697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 949.032176][T23697] Call Trace: [ 949.032184][T23697] [ 949.032191][T23697] dump_stack_lvl+0x189/0x250 [ 949.032214][T23697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 949.032234][T23697] ? __pfx__printk+0x10/0x10 [ 949.032257][T23697] print_circular_bug+0x2e2/0x300 [ 949.032279][T23697] check_noncircular+0x12e/0x150 [ 949.032305][T23697] __lock_acquire+0x15a6/0x2cf0 [ 949.032330][T23697] ? __synchronize_srcu+0x82/0x390 [ 949.032348][T23697] lock_sync+0xba/0x160 [ 949.032364][T23697] ? __synchronize_srcu+0x82/0x390 [ 949.032383][T23697] __synchronize_srcu+0x96/0x390 [ 949.032402][T23697] ? __pfx___synchronize_srcu+0x10/0x10 [ 949.032419][T23697] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 949.032444][T23697] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 949.032464][T23697] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 949.032484][T23697] ? __pfx_autoremove_wake_function+0x10/0x10 [ 949.032507][T23697] ? read_tsc+0x9/0x20 [ 949.032529][T23697] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 949.032555][T23697] ? synchronize_srcu+0x295/0x2c0 [ 949.032576][T23697] blk_throtl_init+0x298/0x410 [ 949.032597][T23697] tg_set_conf+0x1c6/0x4b0 [ 949.032622][T23697] ? __pfx_tg_set_conf+0x10/0x10 [ 949.032641][T23697] ? kernfs_root+0x1c/0x230 [ 949.032658][T23697] ? kernfs_root+0x1c/0x230 [ 949.032674][T23697] ? kernfs_root+0x1c/0x230 [ 949.032691][T23697] ? kernfs_root+0x1ea/0x230 [ 949.032709][T23697] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 949.032729][T23697] cgroup_file_write+0x3a1/0x740 [ 949.032752][T23697] ? __pfx_cgroup_file_write+0x10/0x10 [ 949.032772][T23697] ? rcu_is_watching+0x15/0xb0 [ 949.032795][T23697] ? __pfx_cgroup_file_write+0x10/0x10 [ 949.032814][T23697] kernfs_fop_write_iter+0x3af/0x540 [ 949.032841][T23697] vfs_write+0x5c9/0xb30 [ 949.032859][T23697] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 949.032882][T23697] ? __pfx_vfs_write+0x10/0x10 [ 949.032900][T23697] ? __fget_files+0x2a/0x420 [ 949.032923][T23697] ksys_write+0x145/0x250 [ 949.032940][T23697] ? __pfx_ksys_write+0x10/0x10 [ 949.032956][T23697] ? do_syscall_64+0xbe/0xf80 [ 949.032982][T23697] do_syscall_64+0xfa/0xf80 [ 949.033004][T23697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.033021][T23697] ? clear_bhb_loop+0x60/0xb0 [ 949.033038][T23697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.033054][T23697] RIP: 0033:0x7f663d18f749 [ 949.033070][T23697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.033085][T23697] RSP: 002b:00007f663b3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 949.033104][T23697] RAX: ffffffffffffffda RBX: 00007f663d3e5fa0 RCX: 00007f663d18f749 [ 949.033118][T23697] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000007 [ 949.033129][T23697] RBP: 00007f663d213f91 R08: 0000000000000000 R09: 0000000000000000 [ 949.033139][T23697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.033149][T23697] R13: 00007f663d3e6038 R14: 00007f663d3e5fa0 R15: 00007fffe895d598 [ 949.033167][T23697] [ 949.352038][T18028] m920x_read = error: -19 [ 949.356416][T18028] dvb-usb: error while querying for an remote control event. [ 949.364532][T15538] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 949.397234][T15538] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 949.416377][T15538] usb 7-1: USB disconnect, device number 52 [ 949.466026][T18028] m920x_read = error: -19 [ 949.470721][T18028] dvb-usb: error while querying for an remote control event. [ 949.594486][T15650] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 949.600444][T15650] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 949.609793][T15650] usb 9-1: USB disconnect, device number 15 [ 949.617438][T18028] m920x_read = error: -19 [ 949.621809][T18028] dvb-usb: error while querying for an remote control event. [ 949.734564][T18028] m920x_read = error: -19 [ 949.738935][T18028] dvb-usb: error while querying for an remote control event. [ 949.855313][T18028] m920x_read = error: -19 [ 949.859673][T18028] dvb-usb: error while querying for an remote control event. [ 949.894206][T10379] udevd[10379]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 949.974486][T18028] m920x_read = error: -19 [ 949.978956][T18028] dvb-usb: error while querying for an remote control event. [ 950.072807][T10379] udevd[10379]: symlink '../../loop8' '/dev/disk/by-diskseq/93.tmp-b7:8' failed: Read-only file system [ 950.094599][T18028] m920x_read = error: -19 [ 950.099475][T18028] dvb-usb: error while querying for an remote control event. [ 950.214732][T18028] m920x_read = error: -19 [ 950.219103][T18028] dvb-usb: error while querying for an remote control event. [ 950.335138][T18028] m920x_read = error: -19 [ 950.339550][T18028] dvb-usb: error while querying for an remote control event. [ 950.454639][T18028] m920x_read = error: -19 [ 950.459068][T18028] dvb-usb: error while querying for an remote control event. [ 950.574541][T18028] m920x_read = error: -19 [ 950.578983][T18028] dvb-usb: error while querying for an remote control event. [ 950.694899][T18028] m920x_read = error: -19 [ 950.699375][T18028] dvb-usb: error while querying for an remote control event. [ 950.824511][T18028] m920x_read = error: -19 [ 950.828904][T18028] dvb-usb: error while querying for an remote control event. [ 950.945029][T18028] m920x_read = error: -19 [ 950.949407][T18028] dvb-usb: error while querying for an remote control event. [ 951.064430][T18028] m920x_read = error: -19 [ 951.068804][T18028] dvb-usb: error while querying for an remote control event. [ 951.184952][T18028] m920x_read = error: -19 [ 951.189307][T18028] dvb-usb: error while querying for an remote control event. [ 951.304615][T18028] m920x_read = error: -19 [ 951.308970][T18028] dvb-usb: error while querying for an remote control event. [ 951.434715][T18028] m920x_read = error: -19 [ 951.439063][T18028] dvb-usb: error while querying for an remote control event. [ 951.554876][T18028] m920x_read = error: -19 [ 951.559257][T18028] dvb-usb: error while querying for an remote control event. [ 951.675153][T18028] m920x_read = error: -19 [ 951.679524][T18028] dvb-usb: error while querying for an remote control event. [ 951.804986][T18028] m920x_read = error: -19 [ 951.809357][T18028] dvb-usb: error while querying for an remote control event. [ 951.924735][T18028] m920x_read = error: -19 [ 951.929092][T18028] dvb-usb: error while querying for an remote control event. [ 952.055320][T18028] m920x_read = error: -19 [ 952.059693][T18028] dvb-usb: error while querying for an remote control event. [ 952.174497][T18028] m920x_read = error: -19 [ 952.178851][T18028] dvb-usb: error while querying for an remote control event. [ 952.294925][T18028] m920x_read = error: -19 [ 952.299307][T18028] dvb-usb: error while querying for an remote control event. [ 952.414741][T18028] m920x_read = error: -19 [ 952.419109][T18028] dvb-usb: error while querying for an remote control event. [ 952.534468][T18028] m920x_read = error: -19 [ 952.538838][T18028] dvb-usb: error while querying for an remote control event. [ 952.654984][T18028] m920x_read = error: -19 [ 952.659338][T18028] dvb-usb: error while querying for an remote control event. [ 952.774898][T18028] m920x_read = error: -19 [ 952.779255][T18028] dvb-usb: error while querying for an remote control event. [ 952.895275][T18028] m920x_read = error: -19 [ 952.899641][T18028] dvb-usb: error while querying for an remote control event. [ 953.014533][T18028] m920x_read = error: -19 [ 953.018920][T18028] dvb-usb: error while querying for an remote control event. [ 953.141612][T18028] m920x_read = error: -19 [ 953.146597][T18028] dvb-usb: error while querying for an remote control event. [ 953.255587][T18028] m920x_read = error: -19 [ 953.259970][T18028] dvb-usb: error while querying for an remote control event. [ 953.375023][T18028] m920x_read = error: -19 [ 953.379518][T18028] dvb-usb: error while querying for an remote control event. [ 953.495729][T18028] m920x_read = error: -19 [ 953.500120][T18028] dvb-usb: error while querying for an remote control event. [ 953.614779][T18028] m920x_read = error: -19 [ 953.619143][T18028] dvb-usb: error while querying for an remote control event. [ 953.745156][T18028] m920x_read = error: -19 [ 953.749538][T18028] dvb-usb: error while querying for an remote control event. [ 953.864671][T18028] m920x_read = error: -19 [ 953.869038][T18028] dvb-usb: error while querying for an remote control event. [ 953.985588][T15538] m920x_read = error: -19 [ 953.989937][T15538] dvb-usb: error while querying for an remote control event. [ 954.104447][T15538] m920x_read = error: -19 [ 954.108800][T15538] dvb-usb: error while querying for an remote control event. [ 954.224772][T15538] m920x_read = error: -19 [ 954.229164][T15538] dvb-usb: error while querying for an remote control event. [ 954.345224][T15538] m920x_read = error: -19 [ 954.349568][T15538] dvb-usb: error while querying for an remote control event. [ 954.474962][T15538] m920x_read = error: -19 [ 954.479822][T15538] dvb-usb: error while querying for an remote control event. [ 954.595013][T15538] m920x_read = error: -19 [ 954.599357][T15538] dvb-usb: error while querying for an remote control event. [ 954.714440][T15538] m920x_read = error: -19 [ 954.718803][T15538] dvb-usb: error while querying for an remote control event. [ 954.834712][T18028] m920x_read = error: -19 [ 954.839069][T18028] dvb-usb: error while querying for an remote control event. [ 954.954818][T18028] m920x_read = error: -19 [ 954.959187][T18028] dvb-usb: error while querying for an remote control event. [ 955.074927][T18028] m920x_read = error: -19 [ 955.079274][T18028] dvb-usb: error while querying for an remote control event. [ 955.194510][T18028] m920x_read = error: -19 [ 955.198886][T18028] dvb-usb: error while querying for an remote control event. [ 955.314570][T18028] m920x_read = error: -19 [ 955.318916][T18028] dvb-usb: error while querying for an remote control event. [ 955.435010][T18028] m920x_read = error: -19 [ 955.439393][T18028] dvb-usb: error while querying for an remote control event. [ 955.554433][T18028] m920x_read = error: -19 [ 955.558800][T18028] dvb-usb: error while querying for an remote control event. [ 955.674830][T18028] m920x_read = error: -19 [ 955.679274][T18028] dvb-usb: error while querying for an remote control event. [ 955.805660][T18028] m920x_read = error: -19 [ 955.810046][T18028] dvb-usb: error while querying for an remote control event. [ 955.924778][T18028] m920x_read = error: -19 [ 955.929142][T18028] dvb-usb: error while querying for an remote control event. [ 956.055243][T18028] m920x_read = error: -19 [ 956.059629][T18028] dvb-usb: error while querying for an remote control event. [ 956.175438][T18028] m920x_read = error: -19 [ 956.179803][T18028] dvb-usb: error while querying for an remote control event. [ 956.294815][T18028] m920x_read = error: -19 [ 956.299184][T18028] dvb-usb: error while querying for an remote control event. [ 956.414782][T18028] m920x_read = error: -19 [ 956.419167][T18028] dvb-usb: error while querying for an remote control event. [ 956.534909][T18028] m920x_read = error: -19 [ 956.539282][T18028] dvb-usb: error while querying for an remote control event. [ 956.654890][T18028] m920x_read = error: -19 [ 956.659306][T18028] dvb-usb: error while querying for an remote control event. [ 956.775135][T18028] m920x_read = error: -19 [ 956.779509][T18028] dvb-usb: error while querying for an remote control event. [ 956.894571][T18028] m920x_read = error: -19 [ 956.899023][T18028] dvb-usb: error while querying for an remote control event. [ 957.015244][T18028] m920x_read = error: -19 [ 957.019620][T18028] dvb-usb: error while querying for an remote control event. [ 957.135611][T18028] m920x_read = error: -19 [ 957.139983][T18028] dvb-usb: error while querying for an remote control event. [ 957.255985][T18028] m920x_read = error: -19 [ 957.260379][T18028] dvb-usb: error while querying for an remote control event. [ 957.374520][T18028] m920x_read = error: -19 [ 957.378895][T18028] dvb-usb: error while querying for an remote control event. [ 957.495218][T18028] m920x_read = error: -19 [ 957.499599][T18028] dvb-usb: error while querying for an remote control event. [ 957.615553][T18028] m920x_read = error: -19 [ 957.619906][T18028] dvb-usb: error while querying for an remote control event. [ 957.734721][T18028] m920x_read = error: -19 [ 957.739073][T18028] dvb-usb: error while querying for an remote control event. [ 957.855244][T18028] m920x_read = error: -19 [ 957.859581][T18028] dvb-usb: error while querying for an remote control event. [ 957.974934][T18028] m920x_read = error: -19 [ 957.979302][T18028] dvb-usb: error while querying for an remote control event. [ 958.095430][T18028] m920x_read = error: -19 [ 958.099775][T18028] dvb-usb: error while querying for an remote control event. [ 958.214870][T18028] m920x_read = error: -19 [ 958.219236][T18028] dvb-usb: error while querying for an remote control event. [ 958.335727][T18028] m920x_read = error: -19 [ 958.340156][T18028] dvb-usb: error while querying for an remote control event. [ 958.454521][T18028] m920x_read = error: -19 [ 958.458867][T18028] dvb-usb: error while querying for an remote control event.