last executing test programs: 21m37.972930016s ago: executing program 0 (id=68): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xf000000}, 0x1c) 21m37.765450506s ago: executing program 0 (id=70): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1, 0x0, 0x0, 0xf4000000}, 0x0) 21m36.820949423s ago: executing program 0 (id=75): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0xd}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0xa) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) getrandom(&(0x7f00000003c0)=""/277, 0x115, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 21m34.816712644s ago: executing program 0 (id=81): sigaltstack(0x0, 0x0) membarrier(0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x206, 0x10b481) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x3, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd26, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "72f01afe02000000366a6a849a739045"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000080)=0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="4400028040000100240001"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x0) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 21m32.836684117s ago: executing program 0 (id=84): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff000705810200020007050202000200070583"], 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x7, 0x0, 0x4, 0xe000, 0x6, {}, {0x4, 0x8, 0x1, 0x5, 0x3, 0x4, "d2522e09"}, 0xb6, 0x1, {&(0x7f0000000300)=[{0x9, 0x37, {0x7a2000000000000}, 0x3}, {0x2809, 0x800, {0x1}}]}, 0x1}) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000440)='./sys\x00', 0x6000, 0x7ff, &(0x7f0000000640)) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xfffffff3) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000900)=ANY=[@ANYBLOB, @ANYBLOB="01002c", @ANYRESDEC=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x20040820}, 0x80) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) accept$inet(r5, &(0x7f0000000000), 0x0) mount$9p_unix(&(0x7f00000001c0)='./sys/class/net/bond0/bonding/slaves\x00', &(0x7f0000000280)='./sys/class/net/bond0/bonding/slaves\x00', &(0x7f0000000500), 0x51050, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d756e69782c63616368653d6e6f6e652c6159856177cb34cbdbb4b9ff69643d3078303030303030303030303030303030392c6163636573733d616e792c666f776e65723e", @ANYRES32=r4, @ANYBLOB=',nolazytime,fscontext=unconfined_u,euid=', @ANYRESDEC=r2, @ANYRES8]) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'veth0_to_batadv\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bonding_masters\x00', 0xb99e5a1840c4a720, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) 21m26.649013926s ago: executing program 0 (id=99): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x9c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfffe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x4}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffff00, 0xffffff00, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0xf1}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0xf, 0x2}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 21m10.085148305s ago: executing program 32 (id=99): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x9c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfffe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x4}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffff00, 0xffffff00, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0xf1}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0xf, 0x2}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14m26.170201477s ago: executing program 1 (id=1430): futex_waitv(&(0x7f0000001fc0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x2) 14m26.04077816s ago: executing program 1 (id=1432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = io_uring_setup(0x178e, &(0x7f00000001c0)={0x0, 0x52c1, 0x80, 0xfffffffe, 0xc}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x5) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT(r1, 0x400caed0, &(0x7f0000000240)={[{0x2, 0x6, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0xffff}, {0xfffffff9, 0xfffd, 0x0, 0x4, 0x0, 0x4, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c0001"], 0xbc}, 0x1, 0x0, 0x0, 0x40000811}, 0x0) 14m25.62335195s ago: executing program 1 (id=1435): r0 = socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='8086 10d3 ffffffff ffffffff 0 0 c', 0x21) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) gettid() r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x2, @rand_addr, 0xed9f}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c200000000000000000086dd601b000000641100fe80000000000000000000000000000000000000000140000e22006490780200000000000000020000001983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4bb6af91bfb69252b136c8f50eaee89ebe26e39726e261b1997fe90de7841c2e1f8def414079f0925c29959cfe0b9a5285fe39df2b9c11e876f120"], 0x0) creat(0x0, 0xa) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 14m23.979432831s ago: executing program 1 (id=1439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) gettid() syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000002140)={0x0, 0x0}, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) read$FUSE(r1, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r5 = fcntl$dupfd(r4, 0x406, r4) sendto$inet(r4, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001, 0x3}, 0x8) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) write(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) 14m21.820307704s ago: executing program 1 (id=1444): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, 0x0, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x300, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 14m19.524609264s ago: executing program 1 (id=1448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0xa) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) 14m3.135941955s ago: executing program 33 (id=1448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0xa) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) 6.512899247s ago: executing program 3 (id=3890): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}, {{0x0, 0x0, 0x0}, 0x8}], 0x5, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) 6.311833376s ago: executing program 3 (id=3893): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 6.185772056s ago: executing program 3 (id=3896): r0 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000340)=""/102400, 0x19000) process_vm_writev(r3, &(0x7f000001a480)=[{&(0x7f0000000100)=""/45, 0x2d}, {0x0}], 0x2, &(0x7f000001a800)=[{&(0x7f000001a500)=""/181, 0xb5}, {0x0}], 0x2, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000540)={0x8}) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x6, 0x4) 5.193437074s ago: executing program 3 (id=3899): socket$nl_netfilter(0x10, 0x3, 0xc) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 5.143217641s ago: executing program 5 (id=3900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @random="b92e35ac622e"}, 0x0, @default, 0xb, @void, @void, @val={0x3, 0x1, 0x95}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.940814257s ago: executing program 5 (id=3903): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = userfaultfd(0x80001) mremap(&(0x7f0000003000/0x14000)=nil, 0x14000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 4.043757261s ago: executing program 5 (id=3904): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000080)={0x5, 0x0, [{0x80000019, 0xdd6, 0x5, 0x2, 0x7, 0x0, 0x80000000}, {0x2, 0x4, 0x6, 0x8, 0x10, 0xfff, 0x3}, {0xd, 0x7, 0x1, 0x4, 0x852, 0x1ff, 0x9a}, {0x7, 0x10, 0x0, 0x10, 0x0, 0x9cc, 0x6}, {0xc0000001, 0x280, 0x4, 0x3, 0x8b40, 0xfffffff8, 0x8001}]}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000100)=0x3) 3.889003363s ago: executing program 4 (id=3905): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) close(0x3) 3.648613036s ago: executing program 4 (id=3906): unshare(0x22020600) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 3.374885961s ago: executing program 2 (id=3908): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc001102c, 0xec000000, 0xcd}]}) 3.2647041s ago: executing program 5 (id=3909): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.236438479s ago: executing program 2 (id=3910): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 3.170802322s ago: executing program 4 (id=3911): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x840) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x12, 0xf1, 0x400000000050, 0x12, 0x5, 0x0, 0x1d497c23, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x2b, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x1, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x3, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0xdddd1000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x2, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xe000, 0xf, 0x3, 0x16, 0x3, 0xab, 0x8, 0x80, 0x8, 0xf7, 0x97}, {0x2000, 0xa000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x8080000, 0x3000, 0xc, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x10, 0x2, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xac, 0x81}, {0x4000}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x0, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.049025523s ago: executing program 2 (id=3912): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x2, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 3.025970951s ago: executing program 4 (id=3913): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040)=r0, 0x12) 2.919026402s ago: executing program 2 (id=3914): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000700)) accept4(r0, 0x0, 0x0, 0x0) 2.668974632s ago: executing program 4 (id=3915): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.254452466s ago: executing program 3 (id=3916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0x40, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff2}, {0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xb, 0x9, 0x0, 0x5, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x140, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x1, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7ff, 0x8, 0x400}}}}]}, 0x44}}, 0x0) 2.117574554s ago: executing program 3 (id=3917): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/dvb_as102/parameters/fw_upload\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vidtv/unbind\x00', 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xba, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000020630712204000010203010902a80003060000950904000000010100000a2401d4003d000201020a240703060001de3fc509240602060103000407240401f347ec0924030205030205fc09240303060301060807240801810087090401000001020000090401010101020000072401f5f900000e2402010604b1020c47148017f30905010910"], 0x0) write(r1, &(0x7f0000000300)='vidtv.0\x00', 0x7) syz_usb_connect(0x2, 0x2b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) nanosleep(0x0, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_getevents(r2, 0x9, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)={0x77359400}) 1.958216786s ago: executing program 6 (id=3919): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='0', 0x1) 1.86035375s ago: executing program 2 (id=3920): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4008010) 1.819063036s ago: executing program 6 (id=3921): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x28020480) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000200), 0x12) 1.684924663s ago: executing program 6 (id=3922): syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_wolinfo={0x5, 0x1, 0xdf4, "d3e2ae09a105"}}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r2, 0x1) 1.680797746s ago: executing program 2 (id=3923): write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000840)={0x35b, 0x2, 0x2, {{0x51f, 0x21a, 0x0, 0xffffffff, {}, 0x2810000, 0x8, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\xfd\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x83\x00\xb5\x00\x00+YN\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x103, '\x00\x00\x9f\xd2\x8f43\xb6\x02\"K\xdd_MR\xb8=a\xcb\v!\x89A\x16\x95\xef\xe2\xefH\xb2\x11\x1d\x1c6\x04\x82\xe6\xc7\x8e\x1e{\xb8\x8e7\x9d*\xec\xff\xfe\xc3\xa1\x9e^\x17<\x8b\x04\xcfr\f\xa4+\xfd3\x8c\xb7\x0f\xdaP+\x89/\xb0\xdd\x83{\x9e\xc6S\x05\x0f\r|\xdcE\x99\x7f\xa6w;\xbf\xe1\xbdp\xee\x03\xe4\xaf\xb4\x99\xa2\x9b\xd3\xde\xce/F@\xf8V\x02\x1c\xde\xe9\xdcoR\x1e{\xc0jv\xa9\x1eg\xba\x8d\xf3\xcc%:\xbcY\x1a\x15\a\x7f\x89\x92\xeaWv\x80\xff\xec\x87\xa9\x06\xd0(\x8am\xbf2\xa2$\x01T6{\x1e\x05v\x1a;\xac\xde\xab\xba\x82\xb3\xccLFl\xe0\x0e&\x81\xb2\xffk\x94\"\xd8\x01\b\n\x96\xc8\xc8r\xa6\xad\xd7\xd7 D3\x82\xaea\xb3U89\xde#4]\v\xdd\xcc\t\x878\x97\x03\xf81\xa0\x948\x91\xf0\xfa\x9eo\x9b\xb5w\x86\xd9R\xc2\x9a\x8c\xbd\xb8M\xd5\xed~\xd8\xab\xf6\x0f\xacKC\x1b\xbfo\x0e\xc9\x006\xf5\xe4', 0x91, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8r\x9aE\x1b4\a\xdb\xda\xb2\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x13\x12D\xf7s=\xa4*&%\x00\x00\x00_\ro \xe5\xfd\xac\xfb\xa5l\xf3\xe7\xa3\xc0\x14\x19N\x13\xa4\x92G\x7f\x92\'\xe4{\x1a^,)\xee\xec\x05}d\xc2\xb5\x9e\\\xa6\a\x1e\x06l\xa4\x86,\xff\b\x9f\xd5\x9fo\xb8\x8cLi\x14\xd0\x9a\xf7\xf6'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x35b) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$watch_queue(r0, &(0x7f0000000300)=""/176, 0xb0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x36, 0xc8, "fac392f8e4108cca"}}}, 0xe) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffbfffff, @mcast2, 0x2}, 0x1c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x82}) connect$netlink(r4, &(0x7f00000000c0)=@unspec, 0xc) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000f2, 0x0, 0x5}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000c80)='io\x00') syz_fuse_handle_req(r5, &(0x7f0000003f80)="f773091228a43a58c864f1e0366b07de21fe64fbd0bf85a894f8d30ff6cc5256c4d3abd726c119dbebd0ddca6ad62fdbc55f46668ec0858ba96bf6733f0be147e9108ebf89278ca74e07fed107889459c0a5e30616db71c6973818d14e3571c410aef47e6e54ba02e48ec733ebc921795a1f431faeecbc65696ffb9e08760f45650f650d24af651d9986b956d8dd66017f17012f2358b5f69dd63f9aa5fad2ab7ee6df7c99f0b5601e1dab2ed5ca6aa237c52a838d7d51293628dde608fc4ec691b6e2023ff6a6813c505fc81bd0a0de800a5bd701a401ed07139dfa917e524c7d8fd47094122e9acb0382682d0b2adc54ab61c2d9aac6b5b0d50623187e31ca089585dab35411759db09bc44178011883cd0d5ab3fc6f8be3d0e71f083fb911a229995801eeab83581aa5bde0db85ff5c77aa311fdc9f9b4b4de0a96d371b6371ace3923e5557c7e911f522e132bae799ec6d11a43ff7420d4833d306f261ab6636b1f7d250829700456e3aa69bdfa28f24acd27b4df16cf417a7bbb852fe7b50e3841708110ab82af1e1145c542afb83cd7b542c6e310a86cdb76d492955312ae6665c95f36a0683bd12a394d6a45a0f38fcde7d665c4afbb329f3486e1b21af321b3f933d585d885485e6d9448b35e0f8d825365ce26af6cb8fb7466b66491e34b5313019beb3b2934b369daaa16b73734d3f787dcbe3115a3da3804aca82335ac9b20823728a6ee0d292dbcebb103ecdec0d27ae3a3ad5e0040cb78abfddfe16f98397c5f1f910372454722a612a0cc91ea8f709544f22c4e3bd70840745638d83b74197c0b22331e3b107af26097a37c8dd2b91e5156af1a33e06846eb15aa2fe95b6df98bfa7fe28693e0ed082aacb3181b657f81790d4556506f8f2a3753bfbd2949429dc3cd1e11291e82dc3db974a13d88d9cb4242165201f3d9b130c128d057bb9167f12859fbef6de8216d70eec7d3706b9013f9b8f61d8059ab50904b66a32376840d8c3e714bd6ae87640f352ca2b4fa2c1cd83f28d5de889f1454605fdd49c7a7cf1af226895ad6ce6612063d88ae60f5b8af22ef1306f55205152f0e72f2edee901bd89136eebed01475edd572f5a4da8b34bc6db8f29944cc720cf2b03cd2f768a34a81fdd58693fe859edfb2799b3f90cae32b6d2c577dfb9e03ab2bb25a41f53a42c11c89a615bf1c44f5c61084c70882a55fb3039792e9fff127b323c0783c506b6e4b7079cf27f67fdb191256b7c908e1e30a8f72072ac4323337062da5132369135408bf74e1b1f6c1bae332f75291d7a4f4aad4b9f70be298868305486c519434652da2535ff7924324472fb23c84558a5b1578ae94c8805becdb99eba47add535fcb7a72ad9b5d631b824a35d58807ea066bbe53859c50b5adb3508ccb3ae974ee187e40dbfc09a326b06a6004aa81c6c91eadf97ccc77cf9ccf4ed92199d95c2c8d5c965594e306d4e8b78d99d2ab0d282890c9d34639d719488b8d5fd3832a01f1a5f75449f460688e63825421aecef8a43a187739d8b1e14e54c658d57e4cf607430ea530720b3308609b57a9148ad5b921d94b6bb775880d492bb515bbd30caeb4ab8fc8b0c392a6c76dc63ca136d6e76e49a0878ea9577831e7bb3b4e3915b09222d3ccbec1b3dc4b1fd1515f302ba48d15adb9fd7aeb26fe553a60dcf82ff70b6c5d7389c54194e46bf7768584acbc18c7fd7fe0fdb11dd32a322f0ae97b481da34b47d0abc16c6d12f8e9d12db2dee5a1d66d5876bc6e100e02f3a921088947fc1d0a4d8e4e878e92cee18ceb78c7d9bf0204cc515eb8185b985e967134a1400b6a5b945b3ff86f62c2da8fe6dc8628ad36910b863a4b7cc519d853e6e3c6aff4d91862dc8c1364a8559f0c58f88a90ca4bc4a9d1aa2026229d46482819df72902a8d77615042340d758bb49153eb695823d43ef50e10e700a7303a4b798499464f39412a7b2cd7c460717364c595f3711d9ccb710075ae301100ce9f0c5d8b6ccf4f673112e2a7c2b29e56ab556d3e9dc0e777da840e1e304a24227bc9d1ba3c31f2bfc39b6ffe06e7dfc08ffbb799f56c5e9b4ce9120d10bc52d4d105167b30be7d4afa0007c59c3324121568fd4f48778d7b17a1ef117036520d25367253d763dd2f1369ef6562afeaa89dcbdd433ef80f92c41143cfeaf46325f2191b1b29b6a457e0a88e7a54dfede8e186ad4fd4d3eab77136d9e403dda03ddfb24708d648840427087481424d21b25a52922a359129ce109fec903fd33f03ea6176cb7cb64567d08204902acd1f1d0146c7c8ef5ca24d04209f2b55974ed7e11eb081beed06eb03ddb5ae80e3424d52741a5e7c8c89006a62f6ba37a7e39b75566b8d57cb11fd23ff73f7f251bfcfb74336760296a801488f77a8f0a830eb4ca2987be3ce42e2aad2f4a975d95eaf0834fbab05a7e97837c0d49ba31c93b2cd3ea05319ce1d223df3a08fc35d6d99bbc863602bc84d26926241ff70d7715d27d60b201315264f2ee3ed0ee2d1959228d9b388019151580a4a68449fd37cd2c894d749a0a281c4e458f5bfc76189e7c2ae21e318a99792090e7bb8bc73ead76439a4408b2ca49678ed93ececfdaedde0bea7f8df33910ab08518829435e642bad3aa9e373fdeb80c981e8f6f11602a8cb23b25dd718296c698aa602889638041b286c3234ae10d7d0c8ff1fe301735a467475db85fe88d155f4a8ac86937392129141f2784ff559c7dc79f0fc6a43c940fe735d91c74e3975415969548a9d7e996b5d6a0801e09519ab3852e8c5cc23f380be09fb7fd37e0cbc9f540a613aa289cce31fa3ee913e364a8a8fc1490087863222160b6899e32a391e090d41bfc961943d03f7b2f8e49750a04a20f2e2ca2951498e0fa8cf0d33d022d490704015c0a83ffb9f44114e37a386f2c7f940cce802edca5ff4ddeae0666167c2a466aecd919629185f491a210d407ebd09600406178ecc818a7cc4867ff14234efad41453027f6cbc62b4649fea7b227ede841e9816d98636c2a2c950680983d2375233a7dd64dc71c9733f5502ff4016724506ff026ba71df2623446f083df9e6df6e7fb701da63c640f8599e09cd7ea1b818bc34349a051430fe5791df7724eda9eae0adb53ec1e844565abe44063a465bb2ea15fa53342cd1229f0b6092c7d544dd0ffb9cadda6930115a66a5ae892f3661e32eb3ace734f4386da1ed040dfb0155ee3f079ec72a3bd8da69b943250a3d33fdc8f4666d77c680db12e0aacd2ea7adf4b00f86733ed27d3c7d677f6a7b60c3657a599a7a36c88e5c805eb7bc022613b6ed3489ac3217bc25e862973d9b3f2235049452aeeac96f3e40044df6d2dbde64b819bf1ee67c6a03566e1e5c8d123adc7eb0410be047cfecce48a5eaf41a718f5d1b78c17fbb6fbcf003f6b1dba0a00558ae60e6413c271bb0dbf733aedd68eab4f8d884bb46b5fd833dd718e6c4ea58ff44f4137372494ae1c74d2ce3cd66526518a798f095fa804088d18d2695740e930b8d57eb55ade001c1cc9c734b77da57482e024503a1ea9e2a43943a308b5285d622ab623b860603122b41fcc249f224212cfbdc8dbc15e791ea6f51c44154619c98661664b11a34d20ecec388d69f5b32fc674d0ddf2b1365c8709a529b2eb3ba0a0547bdde3adcd272e0a41de9904999fd890b75fed8e60f1f00bc8aac46d8043ff2451541f644f270d9fc65a0b772078b05a6ce60c0df8b2540d89d052fae472867edf3b03a252bfe8e9ca3d2e31c7950851d2e7e7273c0109f2ac002747d277b6c9e6a9bd51d57c59b178a6e329c81c7bf2f5c5d345b2e990093b2e47f79807a62017fcd34efc671c7c6270a1a80f60fba3fbabb48f294ee3b1425b6e8c0fe7b14c31c2b0100d8c5f50349cff1e4e0d3aaee1f4afe10f5c234c1c4ba670111ba0d29694811f3dc242a73a9b042535f3ae8ec5b94240fd091cdfa157e7d27bf26412cdbe54ef55eb5d7183ca5ef0a9f5e81aa6dbf705e3a0d542a7573ec99ae67293970aceb8ca52c9eb5786196cb61947436581745df8a5ca11706001844f581317d43e29fc6eb1d1b011278eb4d77cc6a2e1defabaf87177a162f6269abd97503cc26aa73a18a5954e88692b63e34ba673a6b302ea2a59679ef60094c3db6f3874dab8affd12a7d12c53e77efa807d3ad845b908438b59461da39c072c6ef2fb1889f9a9e39a9256bdc71179c98399e60df6b8224a30e22ffd9010488cbc101ef020ea78a90977fe35586b4140339bffbcf32d81b04f789a195a44f289f44c714e6163afada072871122aaf6f60da967554de66cc4ecbf50aef5d02af874873ae5a36a576eb5dfd749b6168e395ce5817d6275b25d6c6ecdc6d8c4a39fa98f749d6584ec0312bd781a0a14fca35c8b0ac2cdb5a4b15d03966ce40cae66ded0cf7afbc5f1a580bcc596360f9253a70f05ebf3a58ca30b05b6edf4367d988e6dde2cedf37237ebd56da02edcebd9ba841c210ab52bdd869fbf3a783b44670483a012419a50c0114863a97d9f152e63a3ffffc4c83710ef02a3a9c718450f4e8f918c2c551d477a88e91c67bf1337a52f4d680e9607a295feafe09e1a0c5e3c1a18c5390a6a84fa19dbfa2abe421021b471f1e80811a4ba036a9a457fa323b7fa65e666a08f673ca92a02c03d6eba96604f770444b96297307bc23f6a928f0da3d97f522125592c092bb32f97882a59603b268167e970bda981299524929e111e31b3301285cfd9bbbf0263d7e2e19cd42e56920565eb5f45f99455b0851dcefd6d91575ec4e273afaad0f7e831d46a8d5f95244e06febe9d9c76fe2de20e561b11d39a4884d29e68773aa85327279e667884f8d4f965e8b12815076da686c02d17a32bc97de630508b06b091a7fa705bd705a3b5e85975db69d4198f23547686cbd42dfeb495d2c0c2c4c155dd1c8c0522836b271015c8f23a5c129e49c0def56c0fd2a5d010583b4d2849b97dffa9d28dbf783be484de51b8c1facf821d8f6a295caa97f5245c8b3fbe71b47a3390f2c2ab9f6ee41ab082c6ddaed769ddbd9188c970be2843f4fdfe32d3b9242628e3a1d037746b564b4bf6cbc37824444a78605c010a00f2f8abded984e664c63a10cb24e0c1d2d53873d519475651d73e1e228fba31b3165de6572c3f4ca692b73652bb77c423a191d45e90b122e0a66b956302ff7bacccce85e7428d8c574ef3d78884495c95f1416c3f500f5be2c0a70303ee19d4e81c1360db322a0400f311caffe568d07adaf9d6bd6f136f0886db4fc6c2cb956b79064b61afe3abd2ca638c62bf89ba91cfab89aeb6fb4eee6b8a6a321076ed5efbeb369259390e780454eb1666c4fe8366b00765b5639e20827349f4df49c90bf5dd320b36510fedf5c18f59ee14e1a8e436f02506d6c6c3c8c3328eff00bcb66ea3a99f2e9cb20f0efcfb09876f7860ce4294de8c5ce007604031a8dadaa20955701736218a159845f8cc7a485412bebaf653462459380a2cb0900721d570391f8e62869546a610e8478d9536d473945a46d9a89686d1dba43690a5a4dcad2d4fbacd877e38495d4a1696bbf46ae8fc6a764faf7c67101a785d259ac8a6df1c7fbd006e9327e24d8fa4c569a5e37fc047521cf520e2bf11dff07f6c47442db2fe7a94a7b557454363043ad4fb00d2842a16a2b25fcdd5aa38d585600cf81e9d202822c4571a12668cc202ef3af5704337bd134b99c6df8538316c9e423032e4c3b73b1e26571b9890ee5a5f9885321281c1371614b57464647c8d5387dcc9878ba4f9c4f65cb3d34fcde5b5fa1610c28f50ddf5a1ccd682ddf4590adc3d3f98b8f98fcd1845dadfb142dde12116bf36d7b738d930e10c3317a0222914e059370b463611c7e8d37bab1f834ba690c98af9924540256cb073ce89d05715e50cb79948451c8c4fbb07f497e860ed293803689ba1895af65c8d97c276e2cd0e7bdbe50655293462dbe64499184a7b8a89a454e38219b5e979c98badc75513d7a6862e2db939347d9941d906432ae41b67df54c2c92568d847fbaef8773dd466bdaf52bffde53fdc2514ae006e19a9599e0fde9c5772c3b30ce30d8fd5e0f91fdd8c66a8884575adc7d2970321520722ab1ddeaa64aa21855f9263d0b51d2b2df0ab28cd32d709c0984ed7f0ef4ced427e99230553a0b0453b1f6daa0ff63cd7750cbdb5f3373ea044ead7c91acfcfdac09648c06f4520a6766d530b37ad2aea22b50419b26f3a40df01f4970a104df6893d6e0b6b3cf88eac9c3edd9e724c5357283e933173dce77bbf70c99367b68e55cb0a3e16d1696c571b483640c33b9f229d837fd1d303608ea286643ccf46dfbd26d2484c79827c6cf896e4904a1febc39932c76a17606c0a62010932fe29877c00dcf7d65fb006594d8869bbe7f78138a78a125a475da225920235b47ba8bd631815926f7a5c4ff69d61c39b26b078760dbceefaea9aa5f08c97d2e97bd478d014ee739db93824bfa7d3167f789624e5a98873422a0176c8b2a69eb5a01dfdb22ac1cb7f9294df6ac1245d50ec44fbdfaeb145c9bacad2abc7e160993afbad2abcb9c1019cfe0e358d1c44676cf002cf844d83de959c3c3f074bad5ac0326d0ca4864b2fd724beb5338e81fa81fd178e14e267c06189ac51fc6a248398986d25d6791c98d330b37a59b3d9c46f94e6170ec499fb3f27443c185e261761d9fac5fa44bc4912c41f93a642b89d51afa016c87d086a145255e808082a2036ead976bd2b78079f8410dfd8fbd15048e3264f15491204529f6b0e5dd560caa9113f9491433b9ba54dba2fcd648928717a1499582e6acba3dd28364b368a1e16b13a2cdaf13ef8b0d4046f8c2a5f280d538b0efe3297bcc226c17688be16315383fe043a7c51a8bb02497277bb1dcc9a16db9d04dabfb0bf6eb9f408d18266fa45d2fbbe3b18b89d6dc7c5b947b741925ac93991554216773ac5e0dc903d966e8fab10ae2eb22e002aebdea2d800ba75fe33082561b9222997bcfd8d246dcee7c46ba0a12a361880b6c4bbcf966a2ac0600d69d39c6c43c783859e5212dea9944a658c6fcf33df2be59da18f1385d3425bfcafda04071b83539311884d4cc8db5838dd84c3d8355292fee226e5a69c6c9a31f1b5406cebd486ffd050928f3916d748f159436fe37dbef68656842624063833cd1811151e9f05dc5ca63191587f51274b6ba07ad44e104a20dd2fc6d43e0274c35f926b56591cee7670856d5d5194df8bdbf608f77cd8701f0ef26a0e38e4cca58e4cc699065d27eb74bd6f89755779f3b2a73a3a0d0f655755dc7cb91772bbe0b89d360353335e545d8c3133260b2ade1814e2fb4e9bea7db3e30fb62c936544a91170ec2f86e3ae75319da0d873a05dc9f0e14bc709028e11da854a03d3941a51e6f3e0d363528c9d203fa5166d9aba23a49df941d5c902aaa68a3b99a709e9d9e3adc96b581494fd2c7e4605af5891261533ee403218c6901a37dec5e2d65dcfec9449cefef4eb4c4b793f34c9b0187ac1e9302c880149843a66feddfcfe47c5e33eaf1ab1eb0ed48cab980df0fe3e11c46a27d2be9972af5ecef3081f77ffb8640a8f3694085228f7400dbf177931fed7a9fada79fcb76251e5b64087e3e4d4fe0a5b86d7e6ddf47fcd131f68796de8c9e86bd6b08cf54ffdd5e10389e0d2122d72de173535a09defea837a519f96e1e795e6e767a2ea7ebcb44e96a11a2910bfc1b5221012732bca14534a2a97afb0faca2bee78f96b59930e27b7b410b53889a190ba70fd1b5fa4418f8fe6df52457a9f814eab291bd45471c20fdf973c0f75bb052417b69592e83cf8cb34b7b8189c01ade45736c77cfde6f44448b78e02ef376d75fd2f95fb0dd91f9321837777f5f514f083bab481b66639af323383a4d715a0c3a216536c52d3fb3933895e1709b25a84a8637a125a5fede40a90d84218efed8b65c021bffc279a4b30fd0cb390a95d1225862f37df93bc97f1192e725bc38e81ca4a4d59f18afc9d89793d3834e1781a8d5e4d521aa3c34b4335817f0dd88771a31d3336e14645323ad54c728cf1b0fe515602c064b41885ff14ff394d4deef3c5de136fec1a05e3662cf61f29a74e9da23f116585d85d3806d015fc8783c08916546e18c92c737f31a7d35c72b3bea01fd852e7dc6d68f24bc787ef7b7df2c4acff86981597a7dd2aadbf40e26109a10e856a78929e698c308960d999783134d7f5abf90a9ecf67e496818ee42afe66888b41707047ecf3374be56e6be6d878531057d4b16b7ca749ec672842c057868ca4c0f9e69e6d92432d6331c4c32db2a93d50a690a0659d4c9bc6fd75f7201f943c603bf7caed8d218ebcf947ea685c0710c26aa11ec886480983e06b9be0168313de87b0e068f98bd14f2066e3fc3a058c32ca0da2a1b449814755e935ab360b15bc91f5d44e54ba2a8db07d1c3854f6b38efa006263300f2113c6d3481868e08d406545a25a8dc75b01e429853e26747023913298e7b5b174c8dfd4e36a81061ba46beeaa200d6003b9f0cf50caf3d5b06632d25fe7ba91d2a97f7562555a67876e334c642e48e753ce6f12a78329c381a1349cf5d89413d04a6b93c566aa2e335f4f0732567388a9df0b3084d57f6393eaf5c20fd7c3c29981500dfd3573a16ee4bc56836b5c3e75ebdce347e46f3d1247a936df69a259fb35ff4372b774f960aa4e8d84e4ae54caaea634d37d2d4f3a276e15176e1f00a906b2fe6ceaec16cba278d0eacdfac9dbbe5af60c5f923ce670315bbc29ac72e9f848d2c168949d7fae8d19fb86ac5511c36035c6c101063cd5b8b9902f8f51b6de2e59da3e5ddb25eb6e9dcd0a64492da36f8a61c9e2b33dd731f0423fd407048346d5a19fbb84c1d23e34f5e43afb32f3c6b85c550dae394285b233ec5ae2ac8646e2804f2c59e870caf6fae5d6df810bf6bd64562b288af75a5d42478475dd72e81651453558e4f7370cea3def6439ccc1ff644e7d0e9c5c286b8aa1881b5bf641ceef24f557b68bb7532af2139b5a890cddf0b1e26328070a43fe509609fdc6de4dfcf8f2f4a79ada37a05b9a2bcac4df7774a79f6aa569b4dd4cfcd944d64982c13349f5a880baa7b5f20aa55af6077299c6d53e0c6ea063d45d8217d72104012b5d82ec46fde056dfc94e6cc9d61bbd1bf08401d1ee163f3d7f88d3481c0f395765e6653d6678dd73a71d411e0ea02608b226357ead909c8d5643527dcd1e0f0b7a785cf691b59812593bcba54624fa2ad1db9547b78bdfe0d6ba2dbc3298dd0c539260235adb385a00989685705cf3631ae545dfd8e2813d5a2ae507f357ef3ed5dd46a868e04cfca7d01edf77c19c6d4477b9a57c7629dff4afef542d19a1b559e55488a3083ad29b98019bc54cc59299e30aa5cdf96e073ae593f644ca0e7f334b1979d16b436e624747e9c86cd985d126bc7495dc27d010347f7a76266894de2ec5d2c9e460e723b0857313e17a17a6a2ad9983867cb78dc5dd3eec56056fcf4a76acf11af6e74fa9c08dc30df7590fccc00e8e972736397ba8680fd56f2fd3758d628c3c93c4222ded9de6b2341cd49325af64d48de4e1c62dea24b19e82f3ae3cf1212671774b510d2e2c18141b5b0ca54376d311443bf5bea59d9f07cb83767904e644a5cb77830f4f7f92de93dd6498ad091384d8899fea4d539ea6dd9178b07bcb47704e37ce6412ab52e24108c890848f9ae08f3c7bd72362cea73dfd0ffc8b77baab1fb43f9b2247f3c20e1a67839ddb28ba7ebef67abe121c3f55d1b63cf32698e068ed11b514f23b8762d55e6394613bb895b5f6bd256ca0732acb067f916bdce9120dffa8a9473815ccd35b3d622ee25ffb98bbdbd17955a0694cac0a64254ae997a9a15137b7f923f611a1adaea3fb6ef547d5a3be44a14be44202b1679968ded791d3a7632cdf4cd3c762d022cc3109e0b10b62b3e779836756ca3bb65a1c8a7fff871113f1975b556831aaaba1850acf0953383e223d3371ae4753a323dda2ea9298cf94c15abb084f8548672b257225544adb2b5eb8fa348a32a20f15d6873bf5dabde8fd89a76903d6f75e0c57c4d6918a3c3120ba5e5cb955cf224a17bd49bb08212d585ce979199247a40757ab81d9e1fbddbb14f015908a9aee690382cb07557beb1b157f5a3b279615d5b7c64a83d229a87cd16a6d401c06dc84ae286075c4d634e6f91dc7a284bbfc1795acedb1fd43c5c2e8ed6fa237e3d06a69b4fb83aa47a12e4ef83a5c5741d85d8342247d4d979601b66867313b1b8f19f769d13c9fbf6c1b2e272d0b0e875743c138ef0c014e1d8985642b029d35aa073d283da1367e869561913a1a0463cf3cc6c41835dcb60d69f6f71aafeede9bc6987c4a68c9e0fb3c1986433e6e45d23a5b03ec664b00cf6a207a8e7dccf7d493bee9a44331e8c1ed92d5cec7afd206d3a3cb78f213b4d2aa8c1c9b0730d818747ddf1027aeb8684944c5b9696ea935f55b5be94f69bdcecc50186cff82a73de8bd231314d9217b6089b8cd8a292793f1fdec1c5af1a2df89c1e300d2fb93516d56060e08f7e4c50b5f227325d0908677653d64dc5cf838f39e271ad79f0033b6b2a5611d5d1f9bb984e6f7d735c5bf0924d873e20e5869bd6d94d9f0994a78614dec3f36325299d189293dc5a4df8cbad29d1fd7f9b51c1c9e48e2238aaff3243cd346deb4ba8545af524776300f648c6728b0f97d17f7ec45daddd62478890a166e7db997047df69ded08cc4d9d8297259dc4100c88359c880dc855ffd5ef3b0922a5b00dae3daeb70441e15dffb415adafaaafb5f5c03b610a3c9903662c236e23baf01337a669f5e174cca1ec79ad7f3cd8635fdcea958cb67400bd01dd03a845fe820f0e7f19776867f247e9c2536ad2776de00480246ace33002c284d7a8929d1e708da9059212ae6d7da49afb9222c97983529158f69bbdbd8f502daae24aef87d0d8a4085dd0740ad1f33178b52447f43192acab0b9aa777262142ec29befefc95de9637f3cb7dff186af2020378870015feadf7b4bf66959cc81543ae33312e4ae3e9c152a65eb76df86b788d11a8534227a8d7e330ef48f5a1069ce4152bc6b311e4636d480272527fcc60c5c3aebbb513d06246ef52e33e7cca789f106ca53df689353c3a518c6dd4719a073f83ea70e1b37c312d216ef26f806f13ddb40e12e3c8b31ccab1440fcd2a2f2f7766997a610a1ad51108163ab4da30219c9a5a2545b19041bdff4e2569f3c281784ac3982de68af9405d634ea1c8d814d0f15b946a1e2130a2995e2d2330be135f21bf5abeb851c65cc3227aff2ce2d88325436409d725a5523253a722af8360a0dee622adc4690ae49f6c3445d2bc4ae75595874849b54798724a0a9f6161caeb83ad17c2d7325524d9acb94e80c7626458167e624f62e9dbf2c49ea52f8c978481f6fdce7222a4c353d8a77034d7a3e3237d253ce3402553ae63a4519298e96b534bab3aadba3dbae70c07fa06e03f89b711e1deb0e9f4dacbad30374777a2710dec408fb8531acb5d89376c07b5673cac6e361935", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setflags(r1, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1, 0x1, 0x7) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x2, 0x4}) lseek(r5, 0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8, 0x200) 1.54927284s ago: executing program 6 (id=3924): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x10) bind$inet(r1, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000400), &(0x7f0000000200), 0x400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) getegid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) 402.656568ms ago: executing program 5 (id=3925): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="b9", 0x1}], 0x1) 393.666458ms ago: executing program 4 (id=3926): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) close(r2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n', 0x2) close(r4) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='zonefs\x00', 0x0, 0x0) 228.019478ms ago: executing program 6 (id=3927): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0xff}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x200000, 0x2}}, 0xe8) 50.357548ms ago: executing program 6 (id=3928): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_emit_ethernet(0x3a, &(0x7f0000000480)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa0100fd, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 0s ago: executing program 5 (id=3929): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x15) kernel console output (not intermixed with test programs): w USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1277.769022][T13382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.783090][ T5786] m920x_read = error: -19 [ 1277.792203][ T5786] dvb-usb: error while querying for an remote control event. [ 1277.833858][T13382] usb 6-1: config 0 descriptor?? [ 1277.840135][ T5697] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1277.878637][T13382] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1277.934065][T13368] m920x_read = error: -19 [ 1277.953386][T13368] dvb-usb: error while querying for an remote control event. [ 1278.016474][T18984] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004 [ 1278.064969][ T5697] usb 5-1: Using ep0 maxpacket: 8 [ 1278.097028][ T5697] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1278.108139][T13368] m920x_read = error: -19 [ 1278.132680][T13368] dvb-usb: error while querying for an remote control event. [ 1278.168111][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.224660][ T5697] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1278.269314][ T5697] pvrusb2: ********** [ 1278.291480][T13368] m920x_read = error: -19 [ 1278.291523][ T5697] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1278.330337][T13368] dvb-usb: error while querying for an remote control event. [ 1278.408743][ T5697] pvrusb2: Important functionality might not be entirely working. [ 1278.455884][T13382] gspca_vc032x: reg_r err -110 [ 1278.470806][ T5697] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1278.486681][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1278.486742][ T5786] m920x_read = error: -19 [ 1278.524277][ T5786] dvb-usb: error while querying for an remote control event. [ 1278.550863][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1278.587613][ T5697] pvrusb2: ********** [ 1278.594743][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1278.625999][ T2352] pvrusb2: Invalid write control endpoint [ 1278.635200][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1278.688115][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1278.709321][T13368] m920x_read = error: -19 [ 1278.718916][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1278.731168][T13368] dvb-usb: error while querying for an remote control event. [ 1278.768666][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1278.800241][ T2352] pvrusb2: Invalid write control endpoint [ 1278.804308][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1278.903617][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1278.980452][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1279.035398][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1279.129577][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1279.212535][ T5596] Bluetooth: hci3: command 0x0405 tx timeout [ 1279.247619][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1279.491863][ T5786] m920x_read = error: -19 [ 1281.170272][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1281.414047][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1281.755731][ T5786] dvb-usb: error while querying for an remote control event. [ 1282.001659][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1282.014992][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1282.017662][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1282.054272][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1282.069050][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1282.090209][ T2352] pvrusb2: Device being rendered inoperable [ 1282.100410][T13382] gspca_vc032x: I2c Bus Busy Wait 00 [ 1282.111972][ T5697] usb 5-1: USB disconnect, device number 111 [ 1282.133640][ T2352] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1282.142267][T13382] gspca_vc032x: Unknown sensor... [ 1282.143641][ T5719] m920x_read = error: -19 [ 1282.178073][T13382] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1282.187841][ T2352] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 1282.208843][ T5719] dvb-usb: error while querying for an remote control event. [ 1282.261653][T13382] usb 6-1: USB disconnect, device number 121 [ 1282.273537][ T2352] pvrusb2: Attached sub-driver cx25840 [ 1282.313840][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1282.363648][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1282.412455][T13368] m920x_read = error: -19 [ 1282.432744][T13368] dvb-usb: error while querying for an remote control event. [ 1282.581430][T13368] m920x_read = error: -19 [ 1282.603900][T13368] dvb-usb: error while querying for an remote control event. [ 1282.695847][T19017] Cannot find del_set index 4 as target [ 1282.764490][T13368] m920x_read = error: -19 [ 1282.779055][T13368] dvb-usb: error while querying for an remote control event. [ 1282.928209][T13368] m920x_read = error: -19 [ 1282.942843][T13368] dvb-usb: error while querying for an remote control event. [ 1283.090661][T13363] m920x_read = error: -19 [ 1283.102099][T13363] dvb-usb: error while querying for an remote control event. [ 1283.247932][T19024] block nbd4: shutting down sockets [ 1283.350032][ T5786] m920x_read = error: -19 [ 1283.603551][T13363] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1284.039540][ T5786] dvb-usb: error while querying for an remote control event. [ 1284.164417][ T5786] m920x_read = error: -19 [ 1284.172672][ T5786] dvb-usb: error while querying for an remote control event. [ 1284.218794][T13363] usb 4-1: Using ep0 maxpacket: 16 [ 1284.227170][T13363] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 4.00 [ 1284.243408][T13363] usb 4-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30 [ 1284.261449][T13363] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1284.291561][T19048] jffs2: notice: (19048) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1284.310134][T13363] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1284.320726][ T5786] m920x_read = error: -19 [ 1284.328658][T13363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.336952][ T5786] dvb-usb: error while querying for an remote control event. [ 1284.369343][T13363] usb 4-1: config 0 descriptor?? [ 1284.478269][T13368] m920x_read = error: -19 [ 1284.493721][T13368] dvb-usb: error while querying for an remote control event. [ 1284.660732][T13368] m920x_read = error: -19 [ 1284.675991][T13368] dvb-usb: error while querying for an remote control event. [ 1284.708559][T13363] usbhid 4-1:0.0: can't add hid device: -71 [ 1284.733229][T13363] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1284.792107][T13363] usb 4-1: USB disconnect, device number 120 [ 1284.838842][T13368] m920x_read = error: -19 [ 1284.862216][T13368] dvb-usb: error while querying for an remote control event. [ 1285.018170][T13363] m920x_read = error: -19 [ 1285.053781][T13363] dvb-usb: error while querying for an remote control event. [ 1285.137219][ T5786] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1285.202387][T13368] m920x_read = error: -19 [ 1285.207569][T13368] dvb-usb: error while querying for an remote control event. [ 1285.324747][ T5786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1285.361107][ T5786] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1285.370622][T13363] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 1285.390376][T13368] m920x_read = error: -19 [ 1285.401351][T13368] dvb-usb: error while querying for an remote control event. [ 1285.414135][ T5786] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1285.457671][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.475552][ T5786] usb 3-1: Product: â°‰ [ 1285.515671][ T5786] usb 3-1: Manufacturer: 嵣㵼뫭 [ 1285.549735][ T5719] m920x_read = error: -19 [ 1285.560562][T13363] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1285.578057][ T5719] dvb-usb: error while querying for an remote control event. [ 1285.587773][ T5786] usb 3-1: SerialNumber: 銂豙ꛡヹ㒾뻀⸕橀â±â«—ê¡äŽŒè±ˆëˆë¦¥ì¼ ç¢î­‚Þˆç²á°¨è§£ç“‡å¸¸ä†¹ì«°è¸Žæ‹‹ë¤îŽ–×½ã´‡ï¬‰Ö†ï‘閯垔ç£ì£ˆã®®ç‰§ç²šê¼ˆê‘šé‹î­‡à®™ë¾²à¿ï¢™åºïŽ¨ê³·î€œì‡Œè„•çµë¥—厰ㄟ㄄垱쇠 [ 1285.637264][T13363] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1285.658018][T13363] usb 7-1: config 0 has no interface number 0 [ 1285.705948][T13363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.744629][T13363] usb 7-1: Product: syz [ 1285.786510][T13363] usb 7-1: Manufacturer: syz [ 1285.791423][T13368] m920x_read = error: -19 [ 1285.819789][T13368] dvb-usb: error while querying for an remote control event. [ 1285.830839][T13363] usb 7-1: SerialNumber: syz [ 1285.872707][T13363] usb 7-1: config 0 descriptor?? [ 1285.939492][ T5786] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1285.982252][ T5719] m920x_read = error: -19 [ 1285.986739][ T5719] dvb-usb: error while querying for an remote control event. [ 1286.122979][ T5719] m920x_read = error: -19 [ 1286.127558][ T5719] dvb-usb: error while querying for an remote control event. [ 1286.147311][ T5786] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1286.161650][T19087] Cannot find del_set index 4 as target [ 1286.185191][ T5786] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1286.285531][ T5719] m920x_read = error: -19 [ 1286.292496][ T5719] dvb-usb: error while querying for an remote control event. [ 1286.417501][ T5719] m920x_read = error: -19 [ 1286.424634][ T5719] dvb-usb: error while querying for an remote control event. [ 1286.545482][ T5719] m920x_read = error: -19 [ 1286.550043][ T5719] dvb-usb: error while querying for an remote control event. [ 1286.651740][ T5786] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1286.683018][ T5786] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1286.690011][T19092] block nbd5: shutting down sockets [ 1286.784251][ T5785] m920x_read = error: -19 [ 1286.792664][ T5785] dvb-usb: error while querying for an remote control event. [ 1286.811381][T13363] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1286.837910][T13363] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1286.851245][T19066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.859922][T13363] asix 7-1:0.251: probe with driver asix failed with error -71 [ 1286.895980][T13363] usb 7-1: USB disconnect, device number 59 [ 1286.921343][T19066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.935361][ T5785] m920x_read = error: -19 [ 1286.940525][ T5785] dvb-usb: error while querying for an remote control event. [ 1286.961844][ T5786] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1287.056348][ T5786] usb 3-1: USB disconnect, device number 118 [ 1287.075387][ T5719] m920x_read = error: -19 [ 1287.081450][ T5719] dvb-usb: error while querying for an remote control event. [ 1287.102316][ T30] audit: type=1800 audit(2000000029.930:1344): pid=19094 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3553" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1287.155519][T17571] udevd[17571]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1287.227132][T19104] lo speed is unknown, defaulting to 1000 [ 1287.227805][ T5719] m920x_read = error: -19 [ 1287.237806][ T5719] dvb-usb: error while querying for an remote control event. [ 1287.295816][T19104] lo speed is unknown, defaulting to 1000 [ 1287.311076][T19105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3556'. [ 1287.342587][T19104] lo speed is unknown, defaulting to 1000 [ 1287.357902][ T5786] m920x_read = error: -19 [ 1287.363294][ T5786] dvb-usb: error while querying for an remote control event. [ 1287.378871][T19104] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1287.432013][T19104] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1287.487933][ T5786] m920x_read = error: -19 [ 1287.499155][ T5786] dvb-usb: error while querying for an remote control event. [ 1287.571487][T19104] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1287.642534][ T5786] m920x_read = error: -19 [ 1287.651884][ T5786] dvb-usb: error while querying for an remote control event. [ 1287.688693][T19104] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1287.781060][ T5786] m920x_read = error: -19 [ 1287.787381][ T5786] dvb-usb: error while querying for an remote control event. [ 1287.811554][T19104] lo speed is unknown, defaulting to 1000 [ 1287.820890][T19104] lo speed is unknown, defaulting to 1000 [ 1287.831171][T19104] lo speed is unknown, defaulting to 1000 [ 1287.850504][T19104] lo speed is unknown, defaulting to 1000 [ 1287.896812][T19104] lo speed is unknown, defaulting to 1000 [ 1287.907113][T19104] lo speed is unknown, defaulting to 1000 [ 1287.922146][ T5786] m920x_read = error: -19 [ 1287.930071][ T5786] dvb-usb: error while querying for an remote control event. [ 1287.954979][T13382] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 1288.072696][ T5786] m920x_read = error: -19 [ 1288.080982][ T5786] dvb-usb: error while querying for an remote control event. [ 1288.116049][ T5697] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1288.214088][ T5786] m920x_read = error: -19 [ 1288.224088][ T5786] dvb-usb: error while querying for an remote control event. [ 1288.290626][ T5697] usb 3-1: Using ep0 maxpacket: 8 [ 1288.322314][ T5697] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1288.354365][ T5786] m920x_read = error: -19 [ 1288.373003][ T5786] dvb-usb: error while querying for an remote control event. [ 1288.379775][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.429139][T19126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3562'. [ 1288.459015][ T5697] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1288.489945][ T5697] pvrusb2: ********** [ 1288.512379][ T5697] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1288.517600][ T5786] m920x_read = error: -19 [ 1288.556827][ T5697] pvrusb2: Important functionality might not be entirely working. [ 1288.567387][ T5786] dvb-usb: error while querying for an remote control event. [ 1288.588803][T19129] netlink: 'syz.6.3563': attribute type 1 has an invalid length. [ 1288.606301][ T5697] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1288.650572][ T5697] pvrusb2: ********** [ 1288.682432][ T2352] pvrusb2: Invalid write control endpoint [ 1288.722687][ T5786] m920x_read = error: -19 [ 1288.741411][ T5786] dvb-usb: error while querying for an remote control event. [ 1288.812501][T19134] netlink: 'syz.5.3564': attribute type 10 has an invalid length. [ 1289.018260][ T5719] m920x_read = error: -19 [ 1289.079485][ T5719] dvb-usb: error while querying for an remote control event. [ 1289.329213][ T5719] m920x_read = error: -19 [ 1289.377409][T19117] m920x_read = error: -19 [ 1289.386961][ T5719] dvb-usb: error while querying for an remote control event. [ 1289.406985][ T2352] pvrusb2: Invalid write control endpoint [ 1289.448142][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1289.516130][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1289.544195][ T5719] usb 3-1: USB disconnect, device number 119 [ 1289.563793][T19129] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1289.577832][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1289.606555][T13363] m920x_read = error: -19 [ 1289.624419][T13363] dvb-usb: error while querying for an remote control event. [ 1289.683323][ T2352] pvrusb2: Device being rendered inoperable [ 1289.711582][ T2352] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1289.736065][ T2352] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 1289.760648][ T2352] pvrusb2: Attached sub-driver cx25840 [ 1289.770270][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1289.809847][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1289.824203][T13363] m920x_read = error: -19 [ 1289.855579][T13363] dvb-usb: error while querying for an remote control event. [ 1290.001455][T13363] m920x_read = error: -19 [ 1290.006606][T13363] dvb-usb: error while querying for an remote control event. [ 1290.131872][ T5719] m920x_read = error: -19 [ 1290.136286][ T5719] dvb-usb: error while querying for an remote control event. [ 1290.271767][ T5719] m920x_read = error: -19 [ 1290.278006][ T5719] dvb-usb: error while querying for an remote control event. [ 1290.291690][T19154] netlink: 'syz.2.3571': attribute type 1 has an invalid length. [ 1290.301124][T19154] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3571'. [ 1290.312885][T19155] veth0_to_batadv: entered allmulticast mode [ 1290.423896][ T5719] m920x_read = error: -19 [ 1290.423921][ T5719] dvb-usb: error while querying for an remote control event. [ 1290.494882][T19161] netlink: 'syz.6.3570': attribute type 4 has an invalid length. [ 1290.531278][T19162] jffs2: notice: (19162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1290.555619][ T5719] m920x_read = error: -19 [ 1290.561863][ T5719] dvb-usb: error while querying for an remote control event. [ 1290.694033][ T5719] m920x_read = error: -19 [ 1290.703069][ T5719] dvb-usb: error while querying for an remote control event. [ 1290.834862][ T5719] m920x_read = error: -19 [ 1290.847406][ T5719] dvb-usb: error while querying for an remote control event. [ 1290.873752][ T30] audit: type=1400 audit(2000000033.410:1345): avc: denied { listen } for pid=19170 comm="syz.2.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1290.905925][ T30] audit: type=1400 audit(2000000033.410:1346): avc: denied { accept } for pid=19170 comm="syz.2.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1290.987103][ T5719] m920x_read = error: -19 [ 1290.991610][ T5719] dvb-usb: error while querying for an remote control event. [ 1291.001314][ T30] audit: type=1400 audit(2000000033.530:1347): avc: denied { read } for pid=19170 comm="syz.2.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1291.058180][T19173] hsr0: entered allmulticast mode [ 1291.069460][T19173] hsr_slave_0: entered allmulticast mode [ 1291.087789][T19173] hsr_slave_1: entered allmulticast mode [ 1291.103854][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3574'. [ 1291.130265][T19172] hsr_slave_0: left promiscuous mode [ 1291.145682][T19172] hsr_slave_1: left promiscuous mode [ 1291.151814][ T5719] m920x_read = error: -19 [ 1291.156299][ T5719] dvb-usb: error while querying for an remote control event. [ 1291.188884][T19172] hsr0 (unregistering): left allmulticast mode [ 1291.279636][ T5719] m920x_read = error: -19 [ 1291.298169][ T5719] dvb-usb: error while querying for an remote control event. [ 1291.443214][ T5719] m920x_read = error: -19 [ 1291.457729][ T5719] dvb-usb: error while querying for an remote control event. [ 1291.593433][ T5719] m920x_read = error: -19 [ 1291.746221][T13387] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1292.015731][T13387] usb 3-1: Using ep0 maxpacket: 32 [ 1292.105295][T13387] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1292.325519][T13387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.426475][T13387] usb 3-1: Product: syz [ 1292.479031][T13387] usb 3-1: Manufacturer: syz [ 1292.536729][T13387] usb 3-1: SerialNumber: syz [ 1292.540098][ T5719] dvb-usb: error while querying for an remote control event. [ 1292.668773][ T5719] m920x_read = error: -19 [ 1292.675607][ T5719] dvb-usb: error while querying for an remote control event. [ 1292.795641][ T5719] m920x_read = error: -19 [ 1292.814878][ T5719] dvb-usb: error while querying for an remote control event. [ 1292.845362][T19184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.923478][T19184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.957872][ T5786] m920x_read = error: -19 [ 1292.964398][ T5786] dvb-usb: error while querying for an remote control event. [ 1292.999491][T13387] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1293.027452][T13387] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1293.112279][T13363] m920x_read = error: -19 [ 1293.128937][T13363] dvb-usb: error while querying for an remote control event. [ 1293.169796][T13387] usb 3-1: USB disconnect, device number 120 [ 1293.186180][ T5719] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 1293.272028][T13363] m920x_read = error: -19 [ 1293.294410][T13363] dvb-usb: error while querying for an remote control event. [ 1293.300815][T17571] udevd[17571]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1293.304937][ T5786] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1293.456956][T13363] m920x_read = error: -19 [ 1293.462194][T13363] dvb-usb: error while querying for an remote control event. [ 1293.554800][ T5786] usb 4-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 1293.607780][T13363] m920x_read = error: -19 [ 1293.614033][T13363] dvb-usb: error while querying for an remote control event. [ 1293.624271][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.643383][ T5786] usb 4-1: Product: syz [ 1293.658823][ T5786] usb 4-1: Manufacturer: syz [ 1293.674534][ T5786] usb 4-1: SerialNumber: syz [ 1293.759447][T13363] m920x_read = error: -19 [ 1293.775672][T13363] dvb-usb: error while querying for an remote control event. [ 1293.911706][ T5785] m920x_read = error: -19 [ 1293.920291][ T5785] dvb-usb: error while querying for an remote control event. [ 1293.968044][ T5786] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1294.074385][ T5785] m920x_read = error: -19 [ 1294.079036][T13363] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1294.087110][ T5785] dvb-usb: error while querying for an remote control event. [ 1294.145748][ T5786] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1294.198481][ T5786] usb 4-1: USB disconnect, device number 122 [ 1294.230195][T13368] m920x_read = error: -19 [ 1294.236666][T13363] usb 3-1: device descriptor read/64, error -71 [ 1294.243080][T13368] dvb-usb: error while querying for an remote control event. [ 1294.245096][T17571] udevd[17571]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1294.387729][T13368] m920x_read = error: -19 [ 1294.400980][T13368] dvb-usb: error while querying for an remote control event. [ 1294.529125][T13363] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1294.552135][ T5786] m920x_read = error: -19 [ 1294.562012][ T5786] dvb-usb: error while querying for an remote control event. [ 1294.694878][T13363] usb 3-1: device descriptor read/64, error -71 [ 1294.725165][T19226] kAFS: bad VL server IP address [ 1295.650977][T13368] m920x_read = error: -19 [ 1295.655669][T13368] dvb-usb: error while querying for an remote control event. [ 1295.764432][T13363] usb usb3-port1: attempt power cycle [ 1295.774184][T13368] m920x_read = error: -19 [ 1295.780545][T13368] dvb-usb: error while querying for an remote control event. [ 1295.915425][T13368] m920x_read = error: -19 [ 1295.929486][T13368] dvb-usb: error while querying for an remote control event. [ 1296.077709][T13368] m920x_read = error: -19 [ 1296.091484][T13368] dvb-usb: error while querying for an remote control event. [ 1296.131745][T13363] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1296.197770][T13363] usb 3-1: device descriptor read/8, error -71 [ 1296.229106][T13368] m920x_read = error: -19 [ 1296.233628][T13368] dvb-usb: error while querying for an remote control event. [ 1296.520213][T13368] m920x_read = error: -19 [ 1296.524982][T13363] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1296.533152][T13368] dvb-usb: error while querying for an remote control event. [ 1296.588725][T13363] usb 3-1: device descriptor read/8, error -71 [ 1296.717549][T13368] m920x_read = error: -19 [ 1296.739194][T13368] dvb-usb: error while querying for an remote control event. [ 1296.759202][T13363] usb usb3-port1: unable to enumerate USB device [ 1296.912194][ T5786] m920x_read = error: -19 [ 1296.924489][ T5786] dvb-usb: error while querying for an remote control event. [ 1298.028435][T13363] m920x_read = error: -19 [ 1298.032820][T13363] dvb-usb: error while querying for an remote control event. [ 1298.143509][ T30] audit: type=1400 audit(2000000040.039:1348): avc: denied { getopt } for pid=19263 comm="syz.3.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1298.700004][T13363] m920x_read = error: -19 [ 1298.704407][T13363] dvb-usb: error while querying for an remote control event. [ 1298.839716][T13363] m920x_read = error: -19 [ 1298.853118][T19272] netlink: 'syz.5.3612': attribute type 4 has an invalid length. [ 1298.862806][T13363] dvb-usb: error while querying for an remote control event. [ 1299.002136][T13363] m920x_read = error: -19 [ 1299.011203][T13363] dvb-usb: error while querying for an remote control event. [ 1299.045789][T19276] hpfs: Bad magic ... probably not HPFS [ 1299.208765][T13363] m920x_read = error: -19 [ 1299.221877][T13363] dvb-usb: error while querying for an remote control event. [ 1299.271871][T19283] Bluetooth: MGMT ver 1.23 [ 1299.359573][T13363] m920x_read = error: -19 [ 1299.369078][T13363] dvb-usb: error while querying for an remote control event. [ 1299.417034][T13387] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1299.516263][T13363] m920x_read = error: -19 [ 1299.542009][T13363] dvb-usb: error while querying for an remote control event. [ 1299.664251][T13387] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1299.680661][T13387] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1299.691438][T13387] usb 7-1: config 0 has no interface number 0 [ 1299.706355][T13363] m920x_read = error: -19 [ 1299.709201][T13387] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1299.724503][T13363] dvb-usb: error while querying for an remote control event. [ 1299.733916][T13387] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1299.762359][T13387] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1299.780976][T13387] usb 7-1: Manufacturer: syz [ 1299.794953][T13387] usb 7-1: SerialNumber: syz [ 1299.819221][T13387] usb 7-1: config 0 descriptor?? [ 1299.893092][T13363] m920x_read = error: -19 [ 1299.910851][T13363] dvb-usb: error while querying for an remote control event. [ 1299.918700][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3619'. [ 1299.952836][T19290] netlink: 'syz.2.3619': attribute type 10 has an invalid length. [ 1299.970456][ T30] audit: type=1326 audit(2000000041.811:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19291 comm="syz.3.3618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10c39e0d9 code=0x7ffc0000 [ 1300.053197][T13363] m920x_read = error: -19 [ 1300.057705][T13363] dvb-usb: error while querying for an remote control event. [ 1300.094840][ T30] audit: type=1326 audit(2000000041.811:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19291 comm="syz.3.3618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10c39e0d9 code=0x7ffc0000 [ 1300.174666][ T30] audit: type=1326 audit(2000000041.839:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19291 comm="syz.3.3618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc10c39e0d9 code=0x7ffc0000 [ 1300.289488][ T5719] m920x_read = error: -19 [ 1300.295340][ T5719] dvb-usb: error while querying for an remote control event. [ 1300.321161][T13387] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1300.329916][ T30] audit: type=1326 audit(2000000041.839:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19291 comm="syz.3.3618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10c39e0d9 code=0x7ffc0000 [ 1300.868074][ T5719] m920x_read = error: -19 [ 1300.872519][ T5719] dvb-usb: error while querying for an remote control event. [ 1300.882788][ T30] audit: type=1326 audit(2000000041.839:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19291 comm="syz.3.3618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10c39e0d9 code=0x7ffc0000 [ 1300.922462][ T30] audit: type=1326 audit(2000000041.839:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19291 comm="syz.3.3618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fc10c39e0d9 code=0x7ffc0000 [ 1300.954338][T13387] usb 7-1: USB disconnect, device number 60 [ 1300.963099][ T30] audit: type=1326 audit(2000000041.839:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19291 comm="syz.3.3618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10c39e0d9 code=0x7ffc0000 [ 1300.997689][T13363] m920x_read = error: -19 [ 1301.002097][T13363] dvb-usb: error while querying for an remote control event. [ 1301.048933][ T30] audit: type=1326 audit(2000000041.839:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19291 comm="syz.3.3618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10c39e0d9 code=0x7ffc0000 [ 1301.080259][ T30] audit: type=1326 audit(2000000041.839:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19291 comm="syz.3.3618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc10c39e0d9 code=0x7ffc0000 [ 1301.156198][T19309] jffs2: notice: (19309) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1301.222721][T13363] m920x_read = error: -19 [ 1301.227254][T13363] dvb-usb: error while querying for an remote control event. [ 1301.375508][T13363] m920x_read = error: -19 [ 1301.380119][T13363] dvb-usb: error while querying for an remote control event. [ 1301.526620][T13363] m920x_read = error: -19 [ 1301.531199][T13363] dvb-usb: error while querying for an remote control event. [ 1301.585248][T19321] vlan1: entered allmulticast mode [ 1301.590417][T19321] veth0_vlan: entered allmulticast mode [ 1301.658130][T19322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.664325][T13363] m920x_read = error: -19 [ 1301.686869][T13363] dvb-usb: error while querying for an remote control event. [ 1301.752078][T19292] syz.3.3618 (19292): drop_caches: 2 [ 1301.830983][T13363] m920x_read = error: -19 [ 1301.849989][T13363] dvb-usb: error while querying for an remote control event. [ 1301.892691][T19325] tmpfs: Unknown parameter '' [ 1302.199955][T13363] m920x_read = error: -19 [ 1302.205816][T13363] dvb-usb: error while querying for an remote control event. [ 1302.214201][T14765] Bluetooth: hci3: command 0x0405 tx timeout [ 1302.628090][T13363] m920x_read = error: -19 [ 1302.633260][T13363] dvb-usb: error while querying for an remote control event. [ 1303.102765][T19331] Mount JFS Failure: -22 [ 1303.107421][T19331] jfs_mount failed w/return code = -22 [ 1303.187258][T13363] m920x_read = error: -19 [ 1303.191892][T13363] dvb-usb: error while querying for an remote control event. [ 1303.713149][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3631'. [ 1304.205031][T19342] Cannot find del_set index 4 as target [ 1304.314411][T13363] m920x_read = error: -19 [ 1304.318808][T13363] dvb-usb: error while querying for an remote control event. [ 1304.372805][T19341] 9p: Bad value for 'rfdno' [ 1304.504745][ T5786] m920x_read = error: -19 [ 1304.509159][ T5786] dvb-usb: error while querying for an remote control event. [ 1304.656460][ T5719] m920x_read = error: -19 [ 1304.664999][ T5719] dvb-usb: error while querying for an remote control event. [ 1304.694136][T19343] block nbd3: shutting down sockets [ 1305.036751][T13387] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1305.171814][T19351] binder: 19349:19351 ioctl c0306201 200000000080 returned -14 [ 1305.192914][ T5697] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1305.229728][T19351] binder: 19349:19351 ioctl c0306201 2000000003c0 returned -14 [ 1305.239230][T13387] usb 3-1: device descriptor read/64, error -71 [ 1305.251203][ T5697] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1305.284542][ T5786] m920x_read = error: -19 [ 1305.305608][ T5786] dvb-usb: error while querying for an remote control event. [ 1305.397193][T19354] fido_id[19354]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1305.513310][T13387] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1305.549614][ T5786] m920x_read = error: -19 [ 1305.554704][ T5786] dvb-usb: error while querying for an remote control event. [ 1305.684215][T19363] Can't find a SQUASHFS superblock on nullb0 [ 1306.100106][ T5719] m920x_read = error: -19 [ 1306.105928][ T5719] dvb-usb: error while querying for an remote control event. [ 1306.217623][T13387] usb 3-1: device descriptor read/64, error -71 [ 1306.239071][ T5719] m920x_read = error: -19 [ 1306.372487][ T5719] dvb-usb: error while querying for an remote control event. [ 1306.434559][T13387] usb usb3-port1: attempt power cycle [ 1306.508701][ T5719] m920x_read = error: -19 [ 1306.517107][ T5719] dvb-usb: error while querying for an remote control event. [ 1306.651011][ T5719] m920x_read = error: -19 [ 1306.668307][ T5719] dvb-usb: error while querying for an remote control event. [ 1306.785085][T19373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3639'. [ 1306.813808][T13363] m920x_read = error: -19 [ 1306.823503][T13363] dvb-usb: error while querying for an remote control event. [ 1306.963836][T13363] m920x_read = error: -19 [ 1307.068920][T19379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.306430][T13387] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1307.332175][T13363] dvb-usb: error while querying for an remote control event. [ 1307.333305][T13387] usb 3-1: device descriptor read/8, error -71 [ 1307.462927][T13363] m920x_read = error: -19 [ 1307.467455][T13363] dvb-usb: error while querying for an remote control event. [ 1307.607037][T13363] m920x_read = error: -19 [ 1307.611474][T13363] dvb-usb: error while querying for an remote control event. [ 1307.625828][T13387] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1307.658829][T13387] usb 3-1: device descriptor read/8, error -71 [ 1307.737863][T13363] m920x_read = error: -19 [ 1307.742348][T13363] dvb-usb: error while querying for an remote control event. [ 1307.803916][T13387] usb usb3-port1: unable to enumerate USB device [ 1307.865220][T13363] m920x_read = error: -19 [ 1307.869680][T13363] dvb-usb: error while querying for an remote control event. [ 1307.998657][T13363] m920x_read = error: -19 [ 1308.003113][T13363] dvb-usb: error while querying for an remote control event. [ 1308.125508][T13363] m920x_read = error: -19 [ 1308.130090][T13363] dvb-usb: error while querying for an remote control event. [ 1308.263395][T13363] m920x_read = error: -19 [ 1308.270011][T13363] dvb-usb: error while querying for an remote control event. [ 1308.393716][T13363] m920x_read = error: -19 [ 1308.400246][T13363] dvb-usb: error while querying for an remote control event. [ 1308.523680][T13363] m920x_read = error: -19 [ 1308.533786][T13363] dvb-usb: error while querying for an remote control event. [ 1308.653339][T13363] m920x_read = error: -19 [ 1308.658385][T13363] dvb-usb: error while querying for an remote control event. [ 1308.791919][T13363] m920x_read = error: -19 [ 1308.796709][T13363] dvb-usb: error while querying for an remote control event. [ 1308.913761][T13363] m920x_read = error: -19 [ 1308.919286][T13363] dvb-usb: error while querying for an remote control event. [ 1309.043260][T13363] m920x_read = error: -19 [ 1309.053159][T13363] dvb-usb: error while querying for an remote control event. [ 1309.181835][T13363] m920x_read = error: -19 [ 1309.187004][T13363] dvb-usb: error while querying for an remote control event. [ 1309.314793][T13363] m920x_read = error: -19 [ 1309.319518][T13363] dvb-usb: error while querying for an remote control event. [ 1309.445023][T13363] m920x_read = error: -19 [ 1309.452786][T13363] dvb-usb: error while querying for an remote control event. [ 1309.574655][T13363] m920x_read = error: -19 [ 1309.588692][T13363] dvb-usb: error while querying for an remote control event. [ 1309.716075][T13363] m920x_read = error: -19 [ 1309.727927][T13363] dvb-usb: error while querying for an remote control event. [ 1309.845082][ T5719] m920x_read = error: -19 [ 1309.851798][ T5719] dvb-usb: error while querying for an remote control event. [ 1309.984051][ T5719] m920x_read = error: -19 [ 1309.989725][ T5719] dvb-usb: error while querying for an remote control event. [ 1310.115896][ T5719] m920x_read = error: -19 [ 1310.121017][ T5719] dvb-usb: error while querying for an remote control event. [ 1310.248806][ T5719] m920x_read = error: -19 [ 1310.254194][ T5719] dvb-usb: error while querying for an remote control event. [ 1310.390742][ T5719] m920x_read = error: -19 [ 1310.395157][ T5719] dvb-usb: error while querying for an remote control event. [ 1310.517920][ T5719] m920x_read = error: -19 [ 1310.522447][ T5719] dvb-usb: error while querying for an remote control event. [ 1310.646973][ T5719] m920x_read = error: -19 [ 1310.660221][ T5719] dvb-usb: error while querying for an remote control event. [ 1310.788470][ T5719] m920x_read = error: -19 [ 1310.792989][ T5719] dvb-usb: error while querying for an remote control event. [ 1310.917689][ T5719] m920x_read = error: -19 [ 1310.931753][ T5719] dvb-usb: error while querying for an remote control event. [ 1311.062381][ T5719] m920x_read = error: -19 [ 1311.066851][ T5719] dvb-usb: error while querying for an remote control event. [ 1311.244380][ T5719] m920x_read = error: -19 [ 1311.249774][ T5719] dvb-usb: error while querying for an remote control event. [ 1311.495228][ T5719] m920x_read = error: -19 [ 1311.509220][ T5719] dvb-usb: error while querying for an remote control event. [ 1311.758576][T13363] m920x_read = error: -19 [ 1311.759891][T19401] FAULT_INJECTION: forcing a failure. [ 1311.759891][T19401] name failslab, interval 1, probability 0, space 0, times 0 [ 1311.776407][T19401] CPU: 0 UID: 0 PID: 19401 Comm: syz.5.3643 Tainted: G L syzkaller #0 PREEMPT(full) [ 1311.776435][T19401] Tainted: [L]=SOFTLOCKUP [ 1311.776442][T19401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1311.776447][T13363] dvb-usb: error while querying for an remote control event. [ 1311.776452][T19401] Call Trace: [ 1311.776459][T19401] [ 1311.776467][T19401] dump_stack_lvl+0x100/0x190 [ 1311.776495][T19401] should_fail_ex.cold+0x5/0xa [ 1311.776516][T19401] should_failslab+0xc2/0x120 [ 1311.776541][T19401] __kmalloc_noprof+0xfc/0x820 [ 1311.776562][T19401] ? __pfx_dynamic_dname+0x10/0x10 [ 1311.776581][T19401] ? tomoyo_encode2+0xfb/0x3c0 [ 1311.776603][T19401] tomoyo_encode2+0xfb/0x3c0 [ 1311.776623][T19401] tomoyo_encode+0x29/0x50 [ 1311.776639][T19401] tomoyo_realpath_from_path+0x18c/0x690 [ 1311.776661][T19401] tomoyo_path_number_perm+0x23c/0x580 [ 1311.776684][T19401] ? tomoyo_path_number_perm+0x22e/0x580 [ 1311.776709][T19401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1311.776754][T19401] ? find_held_lock+0x2b/0x80 [ 1311.776771][T19401] ? hook_file_ioctl_common+0x140/0x440 [ 1311.776796][T19401] ? __fget_files+0x21f/0x3d0 [ 1311.776820][T19401] security_file_ioctl+0xd3/0x230 [ 1311.776837][T19401] __x64_sys_ioctl+0xb7/0x210 [ 1311.776857][T19401] do_syscall_64+0x123/0x790 [ 1311.776882][T19401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.776899][T19401] RIP: 0033:0x7f1fa399e0d9 [ 1311.776913][T19401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1311.776927][T19401] RSP: 002b:00007f1fa1bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1311.776942][T19401] RAX: ffffffffffffffda RBX: 00007f1fa3c26090 RCX: 00007f1fa399e0d9 [ 1311.776953][T19401] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 1311.776962][T19401] RBP: 00007f1fa1bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1311.776971][T19401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.776981][T19401] R13: 00007f1fa3c26128 R14: 00007f1fa3c26090 R15: 00007ffc4b4fffa8 [ 1311.777002][T19401] [ 1311.781252][T19401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1313.318762][T13363] m920x_read = error: -19 [ 1313.345054][T13363] dvb-usb: error while querying for an remote control event. [ 1313.525703][T13363] m920x_read = error: -19 [ 1313.549302][T13363] dvb-usb: error while querying for an remote control event. [ 1313.658549][T19410] kvm: pic: non byte write [ 1313.690193][T13363] m920x_read = error: -19 [ 1313.711134][T13363] dvb-usb: error while querying for an remote control event. [ 1313.842321][T13363] m920x_read = error: -19 [ 1313.846714][T13363] dvb-usb: error while querying for an remote control event. [ 1313.972170][T13363] m920x_read = error: -19 [ 1313.981109][T13363] dvb-usb: error while querying for an remote control event. [ 1314.115381][T13363] m920x_read = error: -19 [ 1314.119847][T13363] dvb-usb: error while querying for an remote control event. [ 1314.249015][T13363] m920x_read = error: -19 [ 1314.253789][T13363] dvb-usb: error while querying for an remote control event. [ 1314.374413][T13363] m920x_read = error: -19 [ 1314.378937][T13363] dvb-usb: error while querying for an remote control event. [ 1314.506868][T13363] m920x_read = error: -19 [ 1314.511335][T13363] dvb-usb: error while querying for an remote control event. [ 1314.637717][T13363] m920x_read = error: -19 [ 1314.642224][T13363] dvb-usb: error while querying for an remote control event. [ 1314.774352][T13363] m920x_read = error: -19 [ 1314.778794][T13363] dvb-usb: error while querying for an remote control event. [ 1314.920921][T13363] m920x_read = error: -19 [ 1314.927336][T13363] dvb-usb: error while querying for an remote control event. [ 1315.068753][T13363] m920x_read = error: -19 [ 1315.073206][T13363] dvb-usb: error while querying for an remote control event. [ 1315.195738][T13363] m920x_read = error: -19 [ 1315.200138][T13363] dvb-usb: error while querying for an remote control event. [ 1315.347478][T13363] m920x_read = error: -19 [ 1315.352835][T13363] dvb-usb: error while querying for an remote control event. [ 1315.481635][T13363] m920x_read = error: -19 [ 1315.486822][T13363] dvb-usb: error while querying for an remote control event. [ 1315.618851][T13363] m920x_read = error: -19 [ 1315.626460][T13363] dvb-usb: error while querying for an remote control event. [ 1315.748508][T13363] m920x_read = error: -19 [ 1315.753144][T13363] dvb-usb: error while querying for an remote control event. [ 1315.889359][T13363] m920x_read = error: -19 [ 1315.897171][T13363] dvb-usb: error while querying for an remote control event. [ 1316.029915][T13363] m920x_read = error: -19 [ 1316.035438][T13363] dvb-usb: error while querying for an remote control event. [ 1316.183022][T13363] m920x_read = error: -19 [ 1316.187463][T13363] dvb-usb: error while querying for an remote control event. [ 1316.332147][T13363] m920x_read = error: -19 [ 1316.344081][T13363] dvb-usb: error while querying for an remote control event. [ 1316.463509][T13363] m920x_read = error: -19 [ 1316.467957][T13363] dvb-usb: error while querying for an remote control event. [ 1316.604278][T13363] m920x_read = error: -19 [ 1316.628909][T13363] dvb-usb: error while querying for an remote control event. [ 1316.777869][T13363] m920x_read = error: -19 [ 1316.790189][T13363] dvb-usb: error while querying for an remote control event. [ 1316.927848][T13363] m920x_read = error: -19 [ 1316.932703][T13363] dvb-usb: error while querying for an remote control event. [ 1317.070041][T13363] m920x_read = error: -19 [ 1317.074585][T13363] dvb-usb: error while querying for an remote control event. [ 1317.210686][T13363] m920x_read = error: -19 [ 1317.215538][T13363] dvb-usb: error while querying for an remote control event. [ 1317.352098][T13363] m920x_read = error: -19 [ 1317.362305][T13363] dvb-usb: error while querying for an remote control event. [ 1317.496880][T13363] m920x_read = error: -19 [ 1317.501632][T13363] dvb-usb: error while querying for an remote control event. [ 1317.624152][T13363] m920x_read = error: -19 [ 1317.645629][T13363] dvb-usb: error while querying for an remote control event. [ 1317.785242][T13363] m920x_read = error: -19 [ 1317.796402][T13363] dvb-usb: error while querying for an remote control event. [ 1317.897361][T19447] binder: 19438:19447 ioctl 40046205 0 returned -22 [ 1317.907501][T19447] binder: 19438:19447 ioctl c0306201 0 returned -14 [ 1317.940255][T13363] m920x_read = error: -19 [ 1317.973281][T13363] dvb-usb: error while querying for an remote control event. [ 1318.177420][T13363] m920x_read = error: -19 [ 1318.202267][T13363] dvb-usb: error while querying for an remote control event. [ 1318.359824][T13363] m920x_read = error: -19 [ 1318.384753][T13363] dvb-usb: error while querying for an remote control event. [ 1318.605019][T13363] m920x_read = error: -19 [ 1318.665750][T13363] dvb-usb: error while querying for an remote control event. [ 1318.890500][T13363] m920x_read = error: -19 [ 1318.906477][T13363] dvb-usb: error while querying for an remote control event. [ 1318.956710][T19452] Bluetooth: MGMT ver 1.23 [ 1319.015943][T19457] jffs2: notice: (19457) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1319.982046][T13363] m920x_read = error: -19 [ 1319.991915][T13363] dvb-usb: error while querying for an remote control event. [ 1320.032884][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1320.032901][ T30] audit: type=1400 audit(2000000060.331:1374): avc: denied { nlmsg_write } for pid=19455 comm="syz.6.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1320.146610][T13363] m920x_read = error: -19 [ 1320.160071][T13363] dvb-usb: error while querying for an remote control event. [ 1320.260405][T19441] bridge0: port 3(erspan0) entered blocking state [ 1320.282539][T19441] bridge0: port 3(erspan0) entered disabled state [ 1320.308976][ T5719] m920x_read = error: -19 [ 1320.313849][T19441] erspan0: entered allmulticast mode [ 1320.324055][ T5719] dvb-usb: error while querying for an remote control event. [ 1320.335876][T19441] erspan0: entered promiscuous mode [ 1320.343246][T19441] bridge0: port 3(erspan0) entered blocking state [ 1320.352276][T19441] bridge0: port 3(erspan0) entered forwarding state [ 1320.366836][T19445] erspan0: left allmulticast mode [ 1320.396037][T19445] erspan0: left promiscuous mode [ 1320.410739][T19445] bridge0: port 3(erspan0) entered disabled state [ 1320.449221][ T5719] m920x_read = error: -19 [ 1320.459710][ T5719] dvb-usb: error while querying for an remote control event. [ 1320.563314][T13392] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1320.604758][T13363] m920x_read = error: -19 [ 1320.609146][T13363] dvb-usb: error while querying for an remote control event. [ 1320.742296][T13363] m920x_read = error: -19 [ 1320.746826][T13363] dvb-usb: error while querying for an remote control event. [ 1320.904531][T13363] m920x_read = error: -19 [ 1320.909172][T13363] dvb-usb: error while querying for an remote control event. [ 1321.056692][T13363] m920x_read = error: -19 [ 1321.085977][T13363] dvb-usb: error while querying for an remote control event. [ 1321.153472][T13392] usb 4-1: Using ep0 maxpacket: 32 [ 1321.165489][T13392] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1321.189067][T13392] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.207694][T13392] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1321.220303][T13363] m920x_read = error: -19 [ 1321.233039][T13392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.248457][T13392] usb 4-1: Product: syz [ 1321.252826][T13392] usb 4-1: Manufacturer: syz [ 1321.257797][T13392] usb 4-1: SerialNumber: syz [ 1321.262038][T13363] dvb-usb: error while querying for an remote control event. [ 1321.413690][T13363] m920x_read = error: -19 [ 1321.431065][T13363] dvb-usb: error while querying for an remote control event. [ 1321.473136][T19490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3676'. [ 1321.482603][T19490] bridge_slave_1: left allmulticast mode [ 1321.488329][T19490] bridge_slave_1: left promiscuous mode [ 1321.495286][T19490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.576139][ T5719] m920x_read = error: -19 [ 1321.594786][ T5719] dvb-usb: error while querying for an remote control event. [ 1321.760380][ T5719] m920x_read = error: -19 [ 1321.780473][ T5719] dvb-usb: error while querying for an remote control event. [ 1321.977566][ T5719] m920x_read = error: -19 [ 1322.004364][ T5719] dvb-usb: error while querying for an remote control event. [ 1322.203992][ T5719] m920x_read = error: -19 [ 1322.253970][ T5719] dvb-usb: error while querying for an remote control event. [ 1323.220233][T13392] usb 4-1: USB disconnect, device number 123 [ 1323.271609][T19490] bridge_slave_0: left allmulticast mode [ 1323.331398][ T5719] m920x_read = error: -19 [ 1323.341269][ T5719] dvb-usb: error while querying for an remote control event. [ 1323.361316][T19490] bridge_slave_0: left promiscuous mode [ 1323.379054][T19490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.472180][ T5719] m920x_read = error: -19 [ 1323.478176][ T5719] dvb-usb: error while querying for an remote control event. [ 1323.495804][ T30] audit: type=1400 audit(2000000063.534:1375): avc: denied { bind } for pid=19504 comm="syz.2.3682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1323.612320][ T5719] m920x_read = error: -19 [ 1323.616803][ T5719] dvb-usb: error while querying for an remote control event. [ 1323.764674][ T5719] m920x_read = error: -19 [ 1323.769120][ T5719] dvb-usb: error while querying for an remote control event. [ 1323.915425][T13363] m920x_read = error: -19 [ 1323.953544][T13363] dvb-usb: error while querying for an remote control event. [ 1324.082197][T13363] m920x_read = error: -19 [ 1324.088136][T13363] dvb-usb: error while querying for an remote control event. [ 1324.143183][ T5719] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1324.226278][T19539] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3695'. [ 1324.235927][T13363] m920x_read = error: -19 [ 1324.244383][T13363] dvb-usb: error while querying for an remote control event. [ 1324.255329][T19539] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3695'. [ 1324.307162][ T5719] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1324.317138][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3696'. [ 1326.401403][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.416223][T13368] m920x_read = error: -19 [ 1326.432105][T13368] dvb-usb: error while querying for an remote control event. [ 1326.441630][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.452981][ T5719] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1326.474258][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.489326][ T5719] usb 5-1: config 0 descriptor?? [ 1326.596245][T19551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3698'. [ 1326.728430][T13368] m920x_read = error: -19 [ 1326.733444][T13368] dvb-usb: error while querying for an remote control event. [ 1326.952451][T13368] m920x_read = error: -19 [ 1326.957204][T13368] dvb-usb: error while querying for an remote control event. [ 1327.101285][T13368] m920x_read = error: -19 [ 1327.111662][T13368] dvb-usb: error while querying for an remote control event. [ 1327.139474][ T5719] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1327.285893][ T5719] m920x_read = error: -19 [ 1327.293637][ T5719] dvb-usb: error while querying for an remote control event. [ 1327.439538][ T5719] m920x_read = error: -19 [ 1327.454882][ T5719] dvb-usb: error while querying for an remote control event. [ 1327.664012][T13368] m920x_read = error: -19 [ 1327.668508][T13368] dvb-usb: error while querying for an remote control event. [ 1327.804725][T13368] m920x_read = error: -19 [ 1327.816881][T13368] dvb-usb: error while querying for an remote control event. [ 1327.869426][ T5719] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1327.967753][T13368] m920x_read = error: -19 [ 1327.975819][T13368] dvb-usb: error while querying for an remote control event. [ 1328.002639][ T30] audit: type=1326 audit(2000000067.689:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19587 comm="syz.3.3713" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc10c39e0d9 code=0x0 [ 1328.063974][ T5719] usb 7-1: Using ep0 maxpacket: 8 [ 1328.069916][ T5719] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1328.080663][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3713'. [ 1328.081461][ T5719] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1328.098880][T13368] m920x_read = error: -19 [ 1328.103609][T13368] dvb-usb: error while querying for an remote control event. [ 1328.116973][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.125481][ T5719] usb 7-1: Product: syz [ 1328.133390][ T5719] usb 7-1: Manufacturer: syz [ 1328.144041][ T5719] usb 7-1: SerialNumber: syz [ 1328.162295][ T5719] usb 7-1: config 0 descriptor?? [ 1328.189896][ T5719] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1328.226503][T13368] m920x_read = error: -19 [ 1328.230969][T13368] dvb-usb: error while querying for an remote control event. [ 1328.356474][T13368] m920x_read = error: -19 [ 1328.364563][T13368] dvb-usb: error while querying for an remote control event. [ 1328.388459][T13392] usb 5-1: USB disconnect, device number 112 [ 1328.498680][T13368] m920x_read = error: -19 [ 1328.506805][T13368] dvb-usb: error while querying for an remote control event. [ 1328.566849][T19612] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3722'. [ 1328.612480][T19612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.625870][T19612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.637303][T19612] bond0 (unregistering): Released all slaves [ 1328.649554][ T5786] m920x_read = error: -19 [ 1328.657517][ T5786] dvb-usb: error while querying for an remote control event. [ 1328.786926][ T30] audit: type=1400 audit(2000000068.418:1377): avc: denied { write } for pid=19617 comm="syz.5.3725" name="configs" dev="configfs" ino=114295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1328.792494][T19618] Config c/1 of g_uac2 needs at least one function. [ 1328.822294][ T5786] m920x_read = error: -19 [ 1328.824316][T19618] udc usbip-vudc.0: failed to start g_uac2: -22 [ 1328.827254][ T5786] dvb-usb: error while querying for an remote control event. [ 1328.833740][T19618] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 1328.865933][T19618] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 1328.887313][T13368] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1328.963958][ T5786] m920x_read = error: -19 [ 1328.968975][ T5786] dvb-usb: error while querying for an remote control event. [ 1329.034066][T19000] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 1329.049697][T13368] usb 5-1: Using ep0 maxpacket: 8 [ 1329.055422][T13368] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1329.066404][T13368] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1329.074942][T13368] usb 5-1: config 2 has no interface number 0 [ 1329.081592][T13368] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1329.090315][T13368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.099016][ T5786] m920x_read = error: -19 [ 1329.103416][ T5786] dvb-usb: error while querying for an remote control event. [ 1329.111883][T13368] usb 5-1: Product: syz [ 1329.116144][T13368] usb 5-1: Manufacturer: syz [ 1329.120767][T13368] usb 5-1: SerialNumber: syz [ 1329.234501][ T5786] m920x_read = error: -19 [ 1329.240041][ T5786] dvb-usb: error while querying for an remote control event. [ 1329.380496][ T5786] m920x_read = error: -19 [ 1329.399509][ T5786] dvb-usb: error while querying for an remote control event. [ 1329.527023][ T5786] m920x_read = error: -19 [ 1329.531869][ T5786] dvb-usb: error while querying for an remote control event. [ 1329.656396][ T5786] m920x_read = error: -19 [ 1329.662659][ T5786] dvb-usb: error while querying for an remote control event. [ 1329.790590][ T5786] m920x_read = error: -19 [ 1329.795111][ T5786] dvb-usb: error while querying for an remote control event. [ 1329.833755][T13368] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1329.846091][T13368] usb 5-1: USB disconnect, device number 113 [ 1329.916997][ T5785] m920x_read = error: -19 [ 1329.921563][ T5785] dvb-usb: error while querying for an remote control event. [ 1330.047697][T13368] m920x_read = error: -19 [ 1330.055574][T13368] dvb-usb: error while querying for an remote control event. [ 1330.187161][T13368] m920x_read = error: -19 [ 1330.191949][T13368] dvb-usb: error while querying for an remote control event. [ 1330.327962][T13368] m920x_read = error: -19 [ 1330.333153][T13368] dvb-usb: error while querying for an remote control event. [ 1330.352526][ T30] audit: type=1400 audit(2000000069.858:1378): avc: denied { connect } for pid=19629 comm="syz.2.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1330.468755][T13368] m920x_read = error: -19 [ 1330.473341][T13368] dvb-usb: error while querying for an remote control event. [ 1330.599307][T13368] m920x_read = error: -19 [ 1330.717056][T13368] dvb-usb: error while querying for an remote control event. [ 1330.867657][T13368] m920x_read = error: -19 [ 1331.184120][T13368] dvb-usb: error while querying for an remote control event. [ 1331.313689][T13368] m920x_read = error: -19 [ 1331.336841][T13368] dvb-usb: error while querying for an remote control event. [ 1331.455361][ T30] audit: type=1800 audit(2000000070.883:1379): pid=19650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3735" name="addr_trtype" dev="configfs" ino=138919 res=0 errno=0 [ 1331.481141][T13368] m920x_read = error: -19 [ 1331.508342][T19650] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1331.518040][T13368] dvb-usb: error while querying for an remote control event. [ 1331.531674][ T30] audit: type=1800 audit(2000000070.947:1380): pid=19650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3735" name="addr_trsvcid" dev="configfs" ino=138920 res=0 errno=0 [ 1331.556884][T19650] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1331.573700][ T30] audit: type=1800 audit(2000000070.975:1381): pid=19650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3735" name="addr_adrfam" dev="configfs" ino=138921 res=0 errno=0 [ 1331.639523][T13368] m920x_read = error: -19 [ 1331.645068][T13368] dvb-usb: error while querying for an remote control event. [ 1331.649767][T19653] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1331.791083][T13368] m920x_read = error: -19 [ 1331.795985][T13368] dvb-usb: error while querying for an remote control event. [ 1332.466848][ T5719] gspca_zc3xx: reg_w_i err -110 [ 1333.036294][T13368] m920x_read = error: -19 [ 1333.041012][T13368] dvb-usb: error while querying for an remote control event. [ 1333.068389][ T5719] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1333.102385][T19622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1333.148482][T13392] usb 7-1: USB disconnect, device number 61 [ 1333.176652][ T5719] m920x_read = error: -19 [ 1333.186274][ T5719] dvb-usb: error while querying for an remote control event. [ 1333.235883][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3742'. [ 1333.362217][ T5719] m920x_read = error: -19 [ 1333.514524][T19671] trusted_key: encrypted_key: master key parameter 'truste' is invalid [ 1333.819423][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1334.362044][ T5719] dvb-usb: error while querying for an remote control event. [ 1334.770296][ T30] audit: type=1400 audit(2000000073.939:1382): avc: denied { accept } for pid=19678 comm="syz.5.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1334.834936][ T5719] m920x_read = error: -19 [ 1334.839459][ T5719] dvb-usb: error while querying for an remote control event. [ 1334.968883][ T5719] m920x_read = error: -19 [ 1334.979625][ T5719] dvb-usb: error while querying for an remote control event. [ 1335.116084][ T5719] m920x_read = error: -19 [ 1335.124974][ T5719] dvb-usb: error while querying for an remote control event. [ 1335.673407][T19697] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3752'. [ 1336.112323][ T5719] m920x_read = error: -19 [ 1336.134318][ T5719] dvb-usb: error while querying for an remote control event. [ 1336.286505][ T5719] m920x_read = error: -19 [ 1336.290903][ T5719] dvb-usb: error while querying for an remote control event. [ 1336.418375][ T5719] m920x_read = error: -19 [ 1336.431254][ T5719] dvb-usb: error while querying for an remote control event. [ 1336.431778][T19700] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3232572832 (12930291328 ns) > initial count (691901412 ns). Using initial count to start timer. [ 1336.479472][ T30] audit: type=1800 audit(2000000075.508:1383): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3739" name="idVendor" dev="configfs" ino=139196 res=0 errno=0 [ 1336.621569][ T5719] m920x_read = error: -19 [ 1336.626068][ T5719] dvb-usb: error while querying for an remote control event. [ 1336.774030][ T5719] m920x_read = error: -19 [ 1336.781944][ T5719] dvb-usb: error while querying for an remote control event. [ 1336.905403][T19717] CacheFiles: No cache directory specified [ 1336.927539][ T5719] m920x_read = error: -19 [ 1336.949857][ T5719] dvb-usb: error while querying for an remote control event. [ 1337.125082][ T5719] m920x_read = error: -19 [ 1337.418279][ T5719] dvb-usb: error while querying for an remote control event. [ 1337.704853][ T5719] m920x_read = error: -19 [ 1337.722328][ T5719] dvb-usb: error while querying for an remote control event. [ 1337.856740][ T5719] m920x_read = error: -19 [ 1337.861906][ T5719] dvb-usb: error while querying for an remote control event. [ 1339.045451][T19724] syz.3.3763: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1339.069946][ T5785] m920x_read = error: -19 [ 1339.082245][ T5785] dvb-usb: error while querying for an remote control event. [ 1339.082553][T19724] CPU: 0 UID: 0 PID: 19724 Comm: syz.3.3763 Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.082580][T19724] Tainted: [L]=SOFTLOCKUP [ 1339.082587][T19724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1339.082598][T19724] Call Trace: [ 1339.082604][T19724] [ 1339.082612][T19724] dump_stack_lvl+0x100/0x190 [ 1339.082639][T19724] warn_alloc.cold+0x94/0xa8 [ 1339.082659][T19724] ? __pfx_warn_alloc+0x10/0x10 [ 1339.082678][T19724] ? do_syscall_64+0x123/0x790 [ 1339.082701][T19724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.082725][T19724] ? find_held_lock+0x2b/0x80 [ 1339.082744][T19724] ? avc_has_extended_perms+0x33a/0x1080 [ 1339.082771][T19724] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1339.082792][T19724] ? rcu_is_watching+0x13/0xc0 [ 1339.082810][T19724] ? trace_contention_end+0x126/0x160 [ 1339.082834][T19724] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1339.082858][T19724] ? __mutex_lock+0x26c/0x1bc0 [ 1339.082880][T19724] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1339.082903][T19724] ? kasan_quarantine_put+0x104/0x240 [ 1339.082929][T19724] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1339.082951][T19724] ? tomoyo_path_number_perm+0x188/0x580 [ 1339.082980][T19724] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1339.083006][T19724] __vmalloc_node_noprof+0xad/0xf0 [ 1339.083023][T19724] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1339.083050][T19724] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1339.083081][T19724] ? do_vfs_ioctl+0x226/0x13e0 [ 1339.083103][T19724] dvb_usercopy+0x167/0x340 [ 1339.083124][T19724] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1339.083148][T19724] ? __pfx_dvb_usercopy+0x10/0x10 [ 1339.083184][T19724] ? selinux_file_ioctl+0x13b/0x290 [ 1339.083202][T19724] ? selinux_file_ioctl+0xb6/0x290 [ 1339.083222][T19724] dvb_demux_ioctl+0x29/0x40 [ 1339.083243][T19724] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1339.083264][T19724] __x64_sys_ioctl+0x18e/0x210 [ 1339.083284][T19724] do_syscall_64+0x123/0x790 [ 1339.083309][T19724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.083325][T19724] RIP: 0033:0x7fc10c39e0d9 [ 1339.083340][T19724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.083355][T19724] RSP: 002b:00007fc10d32b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1339.083370][T19724] RAX: ffffffffffffffda RBX: 00007fc10c625fa0 RCX: 00007fc10c39e0d9 [ 1339.083381][T19724] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 1339.083391][T19724] RBP: 00007fc10c435024 R08: 0000000000000000 R09: 0000000000000000 [ 1339.083400][T19724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1339.083410][T19724] R13: 00007fc10c626038 R14: 00007fc10c625fa0 R15: 00007ffd9368de18 [ 1339.083432][T19724] [ 1339.085177][T19724] Mem-Info: [ 1339.679363][T19724] active_anon:48888 inactive_anon:0 isolated_anon:0 [ 1339.679363][T19724] active_file:4372 inactive_file:65831 isolated_file:0 [ 1339.679363][T19724] unevictable:0 dirty:193 writeback:0 [ 1339.679363][T19724] slab_reclaimable:8579 slab_unreclaimable:123765 [ 1339.679363][T19724] mapped:44274 shmem:35565 pagetables:1626 [ 1339.679363][T19724] sec_pagetables:0 bounce:0 [ 1339.679363][T19724] kernel_misc_reclaimable:0 [ 1339.679363][T19724] free:1207876 free_pcp:19264 free_cma:0 [ 1339.916930][ T5785] m920x_read = error: -19 [ 1340.147359][T19724] Node 0 active_anon:196552kB inactive_anon:0kB active_file:17488kB inactive_file:263084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180160kB dirty:768kB writeback:0kB shmem:143260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14100kB pagetables:6360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1340.210577][ T5785] dvb-usb: error while querying for an remote control event. [ 1340.401598][T13368] m920x_read = error: -19 [ 1340.412735][T19724] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1340.451438][T13368] dvb-usb: error while querying for an remote control event. [ 1340.546755][T19724] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.599021][T13368] m920x_read = error: -19 [ 1340.608418][T13368] dvb-usb: error while querying for an remote control event. [ 1340.706867][T19724] lowmem_reserve[]: 0 2472 2472 2472 2472 [ 1340.712761][T19724] Node 0 DMA32 free:886204kB boost:0kB min:33996kB low:42492kB high:50988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:156084kB inactive_anon:0kB active_file:17488kB inactive_file:263092kB unevictable:0kB writepending:784kB zspages:316kB present:3129332kB managed:2531764kB mlocked:0kB bounce:0kB free_pcp:102704kB local_pcp:35960kB free_cma:0kB [ 1340.769907][T13368] m920x_read = error: -19 [ 1340.778360][T13368] dvb-usb: error while querying for an remote control event. [ 1340.816133][T19724] lowmem_reserve[]: 0 0 0 0 0 [ 1340.820898][T19724] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.883549][T19724] lowmem_reserve[]: 0 0 0 0 0 [ 1340.888312][T19724] Node 1 Normal free:3948140kB boost:0kB min:55900kB low:69872kB high:83844kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.920504][T13368] m920x_read = error: -19 [ 1340.924934][T13368] dvb-usb: error while querying for an remote control event. [ 1340.964936][T19724] lowmem_reserve[]: 0 0 0 0 0 [ 1340.969717][T19724] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1341.024482][T19724] Node 0 DMA32: 567*4kB (UME) 1048*8kB (UME) 761*16kB (ME) 598*32kB (UME) 191*64kB (UME) 94*128kB (UME) 113*256kB (UME) 49*512kB (UME) 23*1024kB (UME) 10*2048kB (ME) 183*4096kB (UM) = 913836kB [ 1341.051673][ T5785] m920x_read = error: -19 [ 1341.056411][ T5785] dvb-usb: error while querying for an remote control event. [ 1341.075696][T19724] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1341.093123][T19724] Node 1 Normal: 23*4kB (UM) 0*8kB 9*16kB (UM) 12*32kB (U) 12*64kB (UM) 8*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 962*4096kB (UM) = 3948140kB [ 1341.143295][T19724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.181646][ T5785] m920x_read = error: -19 [ 1341.184096][T19733] kvm: kvm [19730]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1341.194860][ T5785] dvb-usb: error while querying for an remote control event. [ 1341.233104][T19724] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1341.237858][T19733] kvm: kvm [19730]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1341.307317][T19724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.317199][ T5785] m920x_read = error: -19 [ 1341.321802][T13368] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1341.329675][ T5785] dvb-usb: error while querying for an remote control event. [ 1341.379405][T19724] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1341.428818][T19724] 91875 total pagecache pages [ 1341.452882][ T5719] m920x_read = error: -19 [ 1341.457343][ T5719] dvb-usb: error while querying for an remote control event. [ 1341.475755][T19724] 276 pages in swap cache [ 1341.498104][T19724] Free swap = 120080kB [ 1341.507219][T13368] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1341.524451][T19724] Total swap = 124996kB [ 1341.541459][T13368] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1341.558546][T19724] 2097051 pages RAM [ 1341.570916][T13368] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1341.585465][T19724] 0 pages HighMem/MovableOnly [ 1341.593631][ T5719] m920x_read = error: -19 [ 1341.598012][ T5719] dvb-usb: error while querying for an remote control event. [ 1341.613260][T19724] 432463 pages reserved [ 1341.621515][T13368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.641283][T19724] 0 pages cma reserved [ 1341.670067][T19735] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1341.699977][T19735] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1341.734655][ T5719] m920x_read = error: -19 [ 1341.742616][ T5719] dvb-usb: error while querying for an remote control event. [ 1341.771829][T13368] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1341.896866][ T5719] m920x_read = error: -19 [ 1341.905781][ T5719] dvb-usb: error while querying for an remote control event. [ 1342.059952][ T5719] m920x_read = error: -19 [ 1342.074870][ T5719] dvb-usb: error while querying for an remote control event. [ 1342.084510][T13368] usb 6-1: USB disconnect, device number 123 [ 1342.253526][ T5719] m920x_read = error: -19 [ 1342.279052][ T5719] dvb-usb: error while querying for an remote control event. [ 1342.289388][T19750] syz.2.3771 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1342.341018][T19750] CPU: 0 UID: 0 PID: 19750 Comm: syz.2.3771 Tainted: G L syzkaller #0 PREEMPT(full) [ 1342.341052][T19750] Tainted: [L]=SOFTLOCKUP [ 1342.341060][T19750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1342.341071][T19750] Call Trace: [ 1342.341078][T19750] [ 1342.341087][T19750] dump_stack_lvl+0x100/0x190 [ 1342.341117][T19750] dump_header+0xfb/0x606 [ 1342.341140][T19750] oom_kill_process.cold+0xd/0x330 [ 1342.341163][T19750] out_of_memory+0x340/0x14f0 [ 1342.341190][T19750] ? __pfx_out_of_memory+0x10/0x10 [ 1342.341218][T19750] mem_cgroup_out_of_memory+0xc6/0x130 [ 1342.341242][T19750] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1342.341264][T19750] ? find_held_lock+0x2b/0x80 [ 1342.341290][T19750] ? do_raw_spin_unlock+0x145/0x1e0 [ 1342.341309][T19750] ? _raw_spin_unlock+0x28/0x50 [ 1342.341336][T19750] try_charge_memcg+0x6e1/0xdf0 [ 1342.341360][T19750] ? __pfx_try_charge_memcg+0x10/0x10 [ 1342.341379][T19750] ? find_held_lock+0x2b/0x80 [ 1342.341399][T19750] ? rcu_read_unlock+0x17/0x60 [ 1342.341418][T19750] ? rcu_read_unlock+0x17/0x60 [ 1342.341445][T19750] __memcg_slab_post_alloc_hook+0x46c/0x1160 [ 1342.341475][T19750] ? kasan_save_track+0x14/0x30 [ 1342.341504][T19750] kmem_cache_alloc_noprof+0x583/0x6a0 [ 1342.341531][T19750] ? vm_area_dup+0x27/0x8e0 [ 1342.341558][T19750] vm_area_dup+0x27/0x8e0 [ 1342.341582][T19750] __split_vma+0x18c/0xda0 [ 1342.341608][T19750] ? __pfx___split_vma+0x10/0x10 [ 1342.341636][T19750] ? __pfx_mas_prev+0x10/0x10 [ 1342.341653][T19750] ? __kernel_text_address+0xd/0x30 [ 1342.341683][T19750] vms_gather_munmap_vmas+0x3a5/0x1720 [ 1342.341711][T19750] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1342.341744][T19750] ? mas_walk+0x6ef/0x9b0 [ 1342.341781][T19750] __mmap_region+0x4a7/0x2db0 [ 1342.341808][T19750] ? __pfx___mmap_region+0x10/0x10 [ 1342.341838][T19750] ? __lock_acquire+0x4c5/0x1ec0 [ 1342.341883][T19750] ? do_raw_spin_lock+0x128/0x260 [ 1342.341907][T19750] ? __lock_acquire+0x4c5/0x1ec0 [ 1342.341935][T19750] ? do_raw_spin_unlock+0x145/0x1e0 [ 1342.341964][T19750] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 1342.341991][T19750] ? find_held_lock+0x2b/0x80 [ 1342.342010][T19750] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1342.342037][T19750] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1342.342065][T19750] ? rcu_is_watching+0x13/0xc0 [ 1342.342083][T19750] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1342.342109][T19750] ? lockdep_hardirqs_on+0x7d/0x110 [ 1342.342182][T19750] mmap_region+0x35d/0x620 [ 1342.342210][T19750] ? __pfx_mmap_region+0x10/0x10 [ 1342.342232][T19750] ? shmem_get_unmapped_area+0x141/0x960 [ 1342.342254][T19750] ? selinux_mmap_addr+0x2b/0x110 [ 1342.342278][T19750] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1342.342298][T19750] ? security_mmap_addr+0x71/0x1e0 [ 1342.342319][T19750] ? __get_unmapped_area+0x255/0x3e0 [ 1342.342349][T19750] do_mmap+0xc63/0x12f0 [ 1342.342381][T19750] ? __pfx_do_mmap+0x10/0x10 [ 1342.342407][T19750] ? __pfx_down_write_killable+0x10/0x10 [ 1342.342426][T19750] ? __pfx_futex_wait+0x10/0x10 [ 1342.342441][T19750] vm_mmap_pgoff+0x29e/0x470 [ 1342.342460][T19750] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1342.342479][T19750] ? __pfx_do_futex+0x10/0x10 [ 1342.342493][T19750] ksys_mmap_pgoff+0xe4/0x610 [ 1342.342509][T19750] ? __x64_sys_futex+0x358/0x4d0 [ 1342.342520][T19750] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1342.342536][T19750] ? xfd_validate_state+0x129/0x190 [ 1342.342555][T19750] __x64_sys_mmap+0x125/0x190 [ 1342.342572][T19750] do_syscall_64+0x123/0x790 [ 1342.342589][T19750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.342601][T19750] RIP: 0033:0x7faefd99e0d9 [ 1342.342611][T19750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.342621][T19750] RSP: 002b:00007faefbbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1342.342633][T19750] RAX: ffffffffffffffda RBX: 00007faefdc25fa0 RCX: 00007faefd99e0d9 [ 1342.342640][T19750] RDX: 0000000000000000 RSI: 0000000000fbe000 RDI: 0000200000000000 [ 1342.342647][T19750] RBP: 00007faefda35024 R08: 0000000000000003 R09: 0000000020497000 [ 1342.342658][T19750] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000000 [ 1342.342668][T19750] R13: 00007faefdc26038 R14: 00007faefdc25fa0 R15: 00007fff54c02528 [ 1342.342687][T19750] [ 1342.471191][ T5719] m920x_read = error: -19 [ 1342.478173][T19750] memory: usage 8kB, limit 8kB, failcnt 144 [ 1342.710003][ T5719] dvb-usb: error while querying for an remote control event. [ 1342.855070][ T30] audit: type=1326 audit(2000000081.398:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz.5.3773" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa399e0d9 code=0x7ffc0000 [ 1342.883638][T19750] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1342.919778][T19750] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1342.949269][ T30] audit: type=1326 audit(2000000081.398:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz.5.3773" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa399e0d9 code=0x7ffc0000 [ 1342.976624][ T5719] m920x_read = error: -19 [ 1342.981384][ T5719] dvb-usb: error while querying for an remote control event. [ 1343.003842][T19750] Memory cgroup stats for /syz2/test: [ 1343.004124][T19750] cache 0 [ 1343.014653][T19750] rss 0 [ 1343.019064][T19750] rss_huge 0 [ 1343.025848][ T30] audit: type=1326 audit(2000000081.398:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz.5.3773" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fa399e0d9 code=0x7ffc0000 [ 1343.054803][T19750] shmem 0 [ 1343.058047][T19750] mapped_file 0 [ 1343.061590][T19750] dirty 0 [ 1343.065614][T19750] writeback 0 [ 1343.069799][T19750] workingset_refault_anon 0 [ 1343.083156][T19750] workingset_refault_file 0 [ 1343.098675][ T5719] m920x_read = error: -19 [ 1343.103132][ T5719] dvb-usb: error while querying for an remote control event. [ 1343.110629][T19750] swap 0 [ 1343.113524][ T30] audit: type=1326 audit(2000000081.398:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz.5.3773" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa399e0d9 code=0x7ffc0000 [ 1343.140627][T19750] swapcached 0 [ 1343.144137][T19750] pgpgin 0 [ 1343.147167][T19750] pgpgout 0 [ 1343.150253][T19750] pgfault 22 [ 1343.156563][T19750] pgmajfault 0 [ 1343.160793][T19750] inactive_anon 0 [ 1343.169466][T19750] active_anon 0 [ 1343.185954][ T30] audit: type=1326 audit(2000000081.398:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19755 comm="syz.5.3773" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa399e0d9 code=0x7ffc0000 [ 1343.213956][T19750] inactive_file 0 [ 1343.217976][T19750] active_file 0 [ 1343.223583][T19750] unevictable 0 [ 1343.227709][T19750] hierarchical_memory_limit 8192 [ 1343.233210][T19750] hierarchical_memsw_limit 9223372036854771712 [ 1343.249908][T19750] total_cache 0 [ 1343.255481][T19750] total_rss 0 [ 1343.259234][T19750] total_rss_huge 0 [ 1343.264094][ T5719] m920x_read = error: -19 [ 1343.270161][ T5719] dvb-usb: error while querying for an remote control event. [ 1343.286821][T19750] total_shmem 0 [ 1343.290867][T19750] total_mapped_file 0 [ 1343.308559][T19750] total_dirty 0 [ 1343.314462][T19750] total_writeback 0 [ 1343.318903][T19750] total_workingset_refault_anon 0 [ 1343.325109][T19750] total_workingset_refault_file 0 [ 1343.330371][T19750] total_swap 0 [ 1343.355874][T19750] total_swapcached 0 [ 1343.367923][T19750] total_pgpgin 0 [ 1343.380609][T19750] total_pgpgout 0 [ 1343.395576][T19750] total_pgfault 22 [ 1343.420393][T19750] total_pgmajfault 0 [ 1343.425210][ T5719] m920x_read = error: -19 [ 1343.429720][ T5719] dvb-usb: error while querying for an remote control event. [ 1343.437984][T19750] total_inactive_anon 0 [ 1343.443197][T19750] total_active_anon 0 [ 1343.450769][T19750] total_inactive_file 0 [ 1343.455924][T19750] total_active_file 0 [ 1343.474681][T19750] total_unevictable 0 [ 1343.482045][T19750] anon_cost 0 [ 1343.486775][T19750] file_cost 0 [ 1343.501943][T19750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.3771,pid=19749,uid=0 [ 1343.540855][T19750] Memory cgroup out of memory: Killed process 19749 (syz.2.3771) total-vm:102252kB, anon-rss:1428kB, file-rss:23056kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1343.563005][ T5719] m920x_read = error: -19 [ 1343.568938][ T5719] dvb-usb: error while querying for an remote control event. [ 1343.696579][ T5719] m920x_read = error: -19 [ 1343.723905][ T5719] dvb-usb: error while querying for an remote control event. [ 1343.869677][ T5719] m920x_read = error: -19 [ 1343.871568][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3778'. [ 1343.879320][ T5719] dvb-usb: error while querying for an remote control event. [ 1344.008538][ T5719] m920x_read = error: -19 [ 1344.015205][ T5719] dvb-usb: error while querying for an remote control event. [ 1344.102672][T19778] lo speed is unknown, defaulting to 1000 [ 1344.114914][T19783] dlm: non-version read from control device 36 [ 1344.160223][ T5719] m920x_read = error: -19 [ 1344.181690][ T5719] dvb-usb: error while querying for an remote control event. [ 1344.333467][ T5697] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1344.421522][ T5719] m920x_read = error: -19 [ 1344.426421][ T5719] dvb-usb: error while querying for an remote control event. [ 1344.550205][ T5719] m920x_read = error: -19 [ 1344.579336][ T5719] dvb-usb: error while querying for an remote control event. [ 1344.702424][ T5719] m920x_read = error: -19 [ 1344.714087][ T5719] dvb-usb: error while querying for an remote control event. [ 1344.875638][ T5719] m920x_read = error: -19 [ 1344.882472][ T5719] dvb-usb: error while querying for an remote control event. [ 1344.932728][ T5697] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1344.947275][ T5697] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.967602][ T5697] usb 6-1: config 0 has no interfaces? [ 1344.986904][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.010431][ T5697] usb 6-1: Product: syz [ 1345.021602][ T5697] usb 6-1: Manufacturer: syz [ 1345.030729][ T5697] usb 6-1: SerialNumber: syz [ 1345.047851][ T5697] usb 6-1: config 0 descriptor?? [ 1345.060321][ T5719] m920x_read = error: -19 [ 1345.078788][ T5719] dvb-usb: error while querying for an remote control event. [ 1345.267667][T13368] m920x_read = error: -19 [ 1345.281532][T13368] dvb-usb: error while querying for an remote control event. [ 1345.417213][ T5719] m920x_read = error: -19 [ 1345.421645][ T30] audit: type=1400 audit(2000000083.771:1389): avc: denied { mounton } for pid=19801 comm="syz.2.3788" path="/157/file0" dev="tmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1345.446209][T19778] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.456728][ T5719] dvb-usb: error while querying for an remote control event. [ 1345.579116][ T5697] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1345.601012][ T5719] m920x_read = error: -19 [ 1345.624981][ T5719] dvb-usb: error while querying for an remote control event. [ 1345.780326][ T5719] m920x_read = error: -19 [ 1345.822900][ T5719] dvb-usb: error while querying for an remote control event. [ 1346.062889][T13368] m920x_read = error: -19 [ 1346.108998][T13368] dvb-usb: error while querying for an remote control event. [ 1346.308008][T13368] m920x_read = error: -19 [ 1346.349647][T13368] dvb-usb: error while querying for an remote control event. [ 1346.496398][T19778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1346.533881][ T5786] m920x_read = error: -19 [ 1346.539123][ T5786] dvb-usb: error while querying for an remote control event. [ 1346.558791][T13387] usb 6-1: USB disconnect, device number 124 [ 1346.619920][ T5697] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1346.631859][ T5697] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1346.642466][ T5697] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1346.652853][ T5697] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1346.669499][ T5697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1346.677762][ T5697] usb 7-1: Product: syz [ 1346.682124][ T5697] usb 7-1: Manufacturer: syz [ 1346.684083][T13368] m920x_read = error: -19 [ 1346.686914][ T5697] usb 7-1: SerialNumber: syz [ 1346.692220][T13368] dvb-usb: error while querying for an remote control event. [ 1346.767594][T19819] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 1346.777284][T19819] kvm: requested 152533 ns i8254 timer period limited to 200000 ns [ 1346.785535][T19819] kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 1346.795164][T19819] kvm: requested 159238 ns i8254 timer period limited to 200000 ns [ 1346.803552][T19819] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 1346.835692][T13368] m920x_read = error: -19 [ 1346.842880][T13368] dvb-usb: error while querying for an remote control event. [ 1346.949832][ T5697] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1346.976843][T13368] m920x_read = error: -19 [ 1346.982489][T13368] dvb-usb: error while querying for an remote control event. [ 1347.034442][T19826] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 1347.053760][T19826] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 1347.117610][T13368] m920x_read = error: -19 [ 1347.127562][T13368] dvb-usb: error while querying for an remote control event. [ 1347.284075][T13368] m920x_read = error: -19 [ 1347.293933][T13368] dvb-usb: error while querying for an remote control event. [ 1347.317846][ T5786] usb 7-1: USB disconnect, device number 62 [ 1348.782609][ T5786] usblp0: removed [ 1348.823359][ T5719] m920x_read = error: -19 [ 1348.836145][ T5719] dvb-usb: error while querying for an remote control event. [ 1348.889041][ T5596] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 1349.015024][ T5719] m920x_read = error: -19 [ 1349.034695][ T5719] dvb-usb: error while querying for an remote control event. [ 1349.076238][T19848] Config c/1 of g1 needs at least one function. [ 1349.091394][T19848] udc usbip-vudc.0: failed to start g1: -22 [ 1349.112886][T19848] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 1349.131577][T19848] UDC core: g1: couldn't find an available UDC or it's busy [ 1349.175561][ T5719] m920x_read = error: -19 [ 1349.191762][ T5719] dvb-usb: error while querying for an remote control event. [ 1349.250598][ T5596] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1349.338461][ T5719] m920x_read = error: -19 [ 1349.360580][ T5719] dvb-usb: error while querying for an remote control event. [ 1349.502910][ T5719] m920x_read = error: -19 [ 1349.510661][ T5719] dvb-usb: error while querying for an remote control event. [ 1349.655117][ T5719] m920x_read = error: -19 [ 1349.668210][ T5719] dvb-usb: error while querying for an remote control event. [ 1349.769844][T19873] retu-mfd 0-0001: could not read Retu revision: -5 [ 1349.789063][T19873] retu-mfd 0-0001: probe with driver retu-mfd failed with error -5 [ 1349.799658][T19873] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 1349.810887][ T5719] m920x_read = error: -19 [ 1349.819560][ T5719] dvb-usb: error while querying for an remote control event. [ 1349.830935][ T30] audit: type=1400 audit(2000000087.842:1390): avc: denied { write } for pid=19863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1349.930955][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3810'. [ 1349.944625][ T5719] m920x_read = error: -19 [ 1349.949132][ T5719] dvb-usb: error while querying for an remote control event. [ 1349.963256][T19880] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3810'. [ 1349.981282][T19880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1350.008268][ T30] audit: type=1400 audit(2000000087.999:1391): avc: denied { write } for pid=19882 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1350.074424][ T5719] m920x_read = error: -19 [ 1350.079348][ T5719] dvb-usb: error while querying for an remote control event. [ 1350.204727][ T5719] m920x_read = error: -19 [ 1350.209399][ T5719] dvb-usb: error while querying for an remote control event. [ 1350.322578][ T5259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1350.370187][ T5719] m920x_read = error: -19 [ 1350.374847][ T5719] dvb-usb: error while querying for an remote control event. [ 1350.500160][ T5719] m920x_read = error: -19 [ 1350.504700][ T5719] dvb-usb: error while querying for an remote control event. [ 1350.554305][T19890] syz.2.3812 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1350.570396][T19890] CPU: 0 UID: 0 PID: 19890 Comm: syz.2.3812 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.570432][T19890] Tainted: [L]=SOFTLOCKUP [ 1350.570440][T19890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1350.570453][T19890] Call Trace: [ 1350.570460][T19890] [ 1350.570469][T19890] dump_stack_lvl+0x100/0x190 [ 1350.570501][T19890] dump_header+0xfb/0x606 [ 1350.570524][T19890] oom_kill_process.cold+0xd/0x330 [ 1350.570550][T19890] out_of_memory+0x340/0x14f0 [ 1350.570577][T19890] ? __pfx_out_of_memory+0x10/0x10 [ 1350.570606][T19890] mem_cgroup_out_of_memory+0xc6/0x130 [ 1350.570631][T19890] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1350.570654][T19890] ? find_held_lock+0x2b/0x80 [ 1350.570680][T19890] ? do_raw_spin_unlock+0x145/0x1e0 [ 1350.570698][T19890] ? _raw_spin_unlock+0x28/0x50 [ 1350.570724][T19890] try_charge_memcg+0x6e1/0xdf0 [ 1350.570750][T19890] ? __pfx_try_charge_memcg+0x10/0x10 [ 1350.570767][T19890] ? find_held_lock+0x2b/0x80 [ 1350.570792][T19890] ? rcu_read_unlock+0x17/0x60 [ 1350.570812][T19890] ? rcu_read_unlock+0x17/0x60 [ 1350.570840][T19890] __memcg_slab_post_alloc_hook+0x46c/0x1160 [ 1350.570869][T19890] ? kasan_save_track+0x14/0x30 [ 1350.570899][T19890] kmem_cache_alloc_noprof+0x583/0x6a0 [ 1350.570926][T19890] ? sk_prot_alloc+0x60/0x2a0 [ 1350.570953][T19890] sk_prot_alloc+0x60/0x2a0 [ 1350.570976][T19890] sk_alloc+0x36/0xe80 [ 1350.571005][T19890] inet_create+0x3a0/0x1060 [ 1350.571024][T19890] ? inet_create+0x94/0x1060 [ 1350.571046][T19890] __sock_create+0x339/0x860 [ 1350.571073][T19890] smc_create+0x163/0x290 [ 1350.571097][T19890] __sock_create+0x339/0x860 [ 1350.571124][T19890] __sys_socket+0x14d/0x260 [ 1350.571149][T19890] ? __pfx___sys_socket+0x10/0x10 [ 1350.571181][T19890] __x64_sys_socket+0x72/0xb0 [ 1350.571204][T19890] ? lockdep_hardirqs_on+0x7d/0x110 [ 1350.571231][T19890] do_syscall_64+0x123/0x790 [ 1350.571259][T19890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.571278][T19890] RIP: 0033:0x7faefd99e0d9 [ 1350.571295][T19890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.571315][T19890] RSP: 002b:00007faefbbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1350.571334][T19890] RAX: ffffffffffffffda RBX: 00007faefdc25fa0 RCX: 00007faefd99e0d9 [ 1350.571346][T19890] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 1350.571357][T19890] RBP: 00007faefda35024 R08: 0000000000000000 R09: 0000000000000000 [ 1350.571368][T19890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1350.571379][T19890] R13: 00007faefdc26038 R14: 00007faefdc25fa0 R15: 00007fff54c02528 [ 1350.571404][T19890] [ 1350.571411][T19890] memory: usage 8kB, limit 8kB, failcnt 181 [ 1350.604904][T19893] i2c i2c-0: delete_device: Can't find device in list [ 1350.621280][T19894] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3813'. [ 1350.631883][T19890] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1350.638826][ T5719] m920x_read = error: -19 [ 1350.660906][T19890] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1350.673787][ T5719] dvb-usb: error while querying for an remote control event. [ 1350.683758][T19890] Memory cgroup stats for [ 1350.822067][ T5719] m920x_read = error: -19 [ 1350.830715][T19890] /syz2/test [ 1350.843197][ T5719] dvb-usb: error while querying for an remote control event. [ 1350.846423][T19890] : [ 1350.927574][T19890] cache 0 [ 1350.934113][T19890] rss 0 [ 1350.936905][T19890] rss_huge 0 [ 1350.940123][T19890] shmem 0 [ 1350.946079][T19870] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1350.986096][T19890] mapped_file 0 [ 1350.987287][ T5719] m920x_read = error: -19 [ 1350.998570][ T5719] dvb-usb: error while querying for an remote control event. [ 1351.009681][T19890] dirty 0 [ 1351.022243][T19890] writeback 0 [ 1351.044150][T19890] workingset_refault_anon 0 [ 1351.066930][T19890] workingset_refault_file 0 [ 1351.075123][T19890] swap 0 [ 1352.015267][ T5719] m920x_read = error: -19 [ 1352.015447][ T5596] Bluetooth: hci0: command 0x0405 tx timeout [ 1352.034707][ T5719] dvb-usb: error while querying for an remote control event. [ 1352.082818][T19890] swapcached 0 [ 1352.094330][T19905] input: syz1 as /devices/virtual/input/input40 [ 1352.115104][T19890] pgpgin 0 [ 1352.145074][T19890] pgpgout 0 [ 1352.156232][T19890] pgfault 31 [ 1352.171674][T19890] pgmajfault 0 [ 1352.189178][ T5786] m920x_read = error: -19 [ 1352.194319][ T5786] dvb-usb: error while querying for an remote control event. [ 1352.207895][T19890] inactive_anon 0 [ 1352.230429][T19890] active_anon 0 [ 1352.234967][T19890] inactive_file 0 [ 1352.241809][T19890] active_file 0 [ 1352.895272][ T5786] m920x_read = error: -19 [ 1352.899671][ T5786] dvb-usb: error while querying for an remote control event. [ 1352.923544][T19890] unevictable 0 [ 1352.940754][T19890] hierarchical_memory_limit 8192 [ 1352.971738][T19890] hierarchical_memsw_limit 9223372036854771712 [ 1352.999772][T19890] total_cache 0 [ 1353.025023][T19890] total_rss 0 [ 1353.042026][T19890] total_rss_huge 0 [ 1353.057261][ T5786] m920x_read = error: -19 [ 1353.061668][T19890] total_shmem 0 [ 1353.071262][T19890] total_mapped_file 0 [ 1353.076775][ T5786] dvb-usb: error while querying for an remote control event. [ 1353.086490][T19890] total_dirty 0 [ 1353.090487][T19911] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3822'. [ 1353.106289][T19890] total_writeback 0 [ 1353.113534][T19890] total_workingset_refault_anon 0 [ 1353.121514][T19890] total_workingset_refault_file 0 [ 1353.180635][T19890] total_swap 0 [ 1353.185221][T19890] total_swapcached 0 [ 1353.190635][T19890] total_pgpgin 0 [ 1353.205489][T19890] total_pgpgout 0 [ 1353.217415][ T5786] m920x_read = error: -19 [ 1353.277679][ T5786] dvb-usb: error while querying for an remote control event. [ 1353.312156][T19890] total_pgfault 31 [ 1353.346649][T19890] total_pgmajfault 0 [ 1353.353611][T19890] total_inactive_anon 0 [ 1353.358542][T19890] total_active_anon 0 [ 1353.362600][T19890] total_inactive_file 0 [ 1353.366837][T19890] total_active_file 0 [ 1353.425635][T19890] total_unevictable 0 [ 1353.430076][T19890] anon_cost 0 [ 1353.433939][ T5786] m920x_read = error: -19 [ 1353.441073][T19890] file_cost 0 [ 1353.446183][ T5786] dvb-usb: error while querying for an remote control event. [ 1353.453851][T19890] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.3812,pid=19889,uid=0 [ 1353.484502][T19890] Memory cgroup out of memory: Killed process 19890 (syz.2.3812) total-vm:102252kB, anon-rss:1428kB, file-rss:23120kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1353.605801][ T5786] m920x_read = error: -19 [ 1353.610800][ T5786] dvb-usb: error while querying for an remote control event. [ 1353.746813][T13368] m920x_read = error: -19 [ 1353.751274][T13368] dvb-usb: error while querying for an remote control event. [ 1353.876801][T13368] m920x_read = error: -19 [ 1353.886252][T13368] dvb-usb: error while querying for an remote control event. [ 1353.997060][ T5786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1354.032086][T13368] m920x_read = error: -19 [ 1354.038136][T13368] dvb-usb: error while querying for an remote control event. [ 1354.201922][T13368] m920x_read = error: -19 [ 1354.206328][ T5786] usb 3-1: Using ep0 maxpacket: 32 [ 1354.211480][T13368] dvb-usb: error while querying for an remote control event. [ 1354.224595][ T5786] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1354.247284][ T5786] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1354.266847][ T5786] usb 3-1: config 0 has no interface number 0 [ 1354.273016][ T5786] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1354.299577][ T5786] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1354.312163][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.332048][ T5786] usb 3-1: Product: syz [ 1354.336288][ T5786] usb 3-1: Manufacturer: syz [ 1354.340901][ T5786] usb 3-1: SerialNumber: syz [ 1354.355128][ T5786] usb 3-1: config 0 descriptor?? [ 1354.364839][T13368] m920x_read = error: -19 [ 1354.370759][T13368] dvb-usb: error while querying for an remote control event. [ 1354.383075][T19921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1354.516671][T13368] m920x_read = error: -19 [ 1354.526445][T13368] dvb-usb: error while querying for an remote control event. [ 1354.657290][T13368] m920x_read = error: -19 [ 1354.662637][T13368] dvb-usb: error while querying for an remote control event. [ 1354.788760][T13368] m920x_read = error: -19 [ 1354.794710][T13368] dvb-usb: error while querying for an remote control event. [ 1354.939700][T13368] m920x_read = error: -19 [ 1355.043340][T13368] dvb-usb: error while querying for an remote control event. [ 1355.338886][T13368] m920x_read = error: -19 [ 1355.358677][ T5786] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1355.375309][T13368] dvb-usb: error while querying for an remote control event. [ 1355.415504][ T5786] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 1355.482150][ T5786] usb 3-1: USB disconnect, device number 3 [ 1355.544608][T13368] m920x_read = error: -19 [ 1355.561340][T13368] dvb-usb: error while querying for an remote control event. [ 1355.707589][T13368] m920x_read = error: -19 [ 1355.712084][T13368] dvb-usb: error while querying for an remote control event. [ 1355.849163][ T5786] m920x_read = error: -19 [ 1355.853871][ T5719] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1355.864966][ T5786] dvb-usb: error while querying for an remote control event. [ 1356.010813][ T5786] m920x_read = error: -19 [ 1356.015559][ T5786] dvb-usb: error while querying for an remote control event. [ 1356.053529][ T5719] usb 7-1: Using ep0 maxpacket: 32 [ 1356.060579][ T5719] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1356.072190][ T5719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.103072][ T5719] usb 7-1: config 0 descriptor?? [ 1356.140422][ T5786] m920x_read = error: -19 [ 1356.173886][ T5786] dvb-usb: error while querying for an remote control event. [ 1356.245081][ T5719] as10x_usb: device has been detected [ 1356.283938][ T5719] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1356.341175][ T5786] m920x_read = error: -19 [ 1356.353270][ T5786] dvb-usb: error while querying for an remote control event. [ 1356.481063][ T5719] usb 7-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)... [ 1356.543359][ T5786] m920x_read = error: -19 [ 1356.565099][ T5786] dvb-usb: error while querying for an remote control event. [ 1356.786416][ T5786] m920x_read = error: -19 [ 1356.852648][ T5786] dvb-usb: error while querying for an remote control event. [ 1356.972655][ T5719] as10x_usb: error during firmware upload part1 [ 1356.987547][ T5719] Registered device nBox DVB-T Dongle [ 1357.000440][ T5719] usb 7-1: USB disconnect, device number 63 [ 1357.543692][T19974] program syz.3.3839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1357.554867][T19974] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1357.915589][ T5786] m920x_read = error: -19 [ 1357.935642][ T5786] dvb-usb: error while querying for an remote control event. [ 1358.010462][ T5719] Unregistered device nBox DVB-T Dongle [ 1358.017640][ T5719] as10x_usb: device has been disconnected [ 1358.091733][ T5786] m920x_read = error: -19 [ 1358.102998][ T5786] dvb-usb: error while querying for an remote control event. [ 1358.230954][ T5786] m920x_read = error: -19 [ 1358.235359][ T5786] dvb-usb: error while querying for an remote control event. [ 1358.372208][ T5719] m920x_read = error: -19 [ 1358.379870][ T5719] dvb-usb: error while querying for an remote control event. [ 1358.820440][ T5719] m920x_read = error: -19 [ 1360.196569][ T5719] dvb-usb: error while querying for an remote control event. [ 1361.502433][ T5719] m920x_read = error: -19 [ 1361.506834][ T5719] dvb-usb: error while querying for an remote control event. [ 1361.643417][ T5719] m920x_read = error: -19 [ 1361.657972][ T5719] dvb-usb: error while querying for an remote control event. [ 1361.807718][ T5719] m920x_read = error: -19 [ 1362.638415][ T5719] dvb-usb: error while querying for an remote control event. [ 1362.683434][T13382] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1362.791630][ T5785] m920x_read = error: -19 [ 1362.805398][ T5785] dvb-usb: error while querying for an remote control event. [ 1363.372803][ T5785] m920x_read = error: -19 [ 1363.389044][ T5785] dvb-usb: error while querying for an remote control event. [ 1363.441056][T13382] usb 3-1: device descriptor read/64, error -71 [ 1363.506580][ T5785] m920x_read = error: -19 [ 1363.513315][ T5785] dvb-usb: error while querying for an remote control event. [ 1364.116654][ T5785] m920x_read = error: -19 [ 1364.171868][ T30] audit: type=1400 audit(2000000100.711:1392): avc: denied { read } for pid=20020 comm="syz.6.3854" laddr=::ffff:172.20.20.170 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1364.208620][ T5785] dvb-usb: error while querying for an remote control event. [ 1364.387813][ T5719] m920x_read = error: -19 [ 1364.431387][ T5719] dvb-usb: error while querying for an remote control event. [ 1364.787969][ T5719] m920x_read = error: -19 [ 1364.799361][ T5719] dvb-usb: error while querying for an remote control event. [ 1364.958702][ T5719] m920x_read = error: -19 [ 1364.981153][ T5719] dvb-usb: error while querying for an remote control event. [ 1365.196653][ T5719] m920x_read = error: -19 [ 1365.243564][ T5719] dvb-usb: error while querying for an remote control event. [ 1366.292683][ T5719] m920x_read = error: -19 [ 1366.309016][ T5719] dvb-usb: error while querying for an remote control event. [ 1366.463686][ T5719] m920x_read = error: -19 [ 1366.473797][ T5719] dvb-usb: error while querying for an remote control event. [ 1366.614767][ T5719] m920x_read = error: -19 [ 1366.619243][ T5719] dvb-usb: error while querying for an remote control event. [ 1367.646240][ T5719] m920x_read = error: -19 [ 1367.678529][ T5719] dvb-usb: error while querying for an remote control event. [ 1367.850419][ T5719] m920x_read = error: -19 [ 1367.881120][ T5719] dvb-usb: error while querying for an remote control event. [ 1368.058377][ T5719] m920x_read = error: -19 [ 1368.081964][ T5719] dvb-usb: error while querying for an remote control event. [ 1368.272411][ T5719] m920x_read = error: -19 [ 1368.303084][ T5719] dvb-usb: error while querying for an remote control event. [ 1368.467386][ T5719] m920x_read = error: -19 [ 1368.500603][ T5719] dvb-usb: error while querying for an remote control event. [ 1368.694311][ T5719] m920x_read = error: -19 [ 1368.713224][ T5719] dvb-usb: error while querying for an remote control event. [ 1368.911065][ T5719] m920x_read = error: -19 [ 1368.949718][ T5719] dvb-usb: error while querying for an remote control event. [ 1369.128560][ T5719] m920x_read = error: -19 [ 1369.141392][T20061] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=20061 comm=syz.6.3866 [ 1369.159400][ T5719] dvb-usb: error while querying for an remote control event. [ 1369.363040][ T5719] m920x_read = error: -19 [ 1369.423965][ T5719] dvb-usb: error while querying for an remote control event. [ 1369.766526][ T5719] m920x_read = error: -19 [ 1369.777387][ T5719] dvb-usb: error while querying for an remote control event. [ 1369.898339][T20076] dlm: no local IP address has been set [ 1369.904171][T20076] dlm: cannot start dlm midcomms -107 [ 1369.930236][ T5785] m920x_read = error: -19 [ 1370.349147][ T5785] dvb-usb: error while querying for an remote control event. [ 1371.888591][ T5719] m920x_read = error: -19 [ 1371.902625][ T5719] dvb-usb: error while querying for an remote control event. [ 1371.943952][T13387] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 1372.031516][ T5719] m920x_read = error: -19 [ 1372.045176][ T5719] dvb-usb: error while querying for an remote control event. [ 1372.156303][T13387] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1372.193516][ T5785] m920x_read = error: -19 [ 1372.198339][ T5785] dvb-usb: error while querying for an remote control event. [ 1372.198591][T13387] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1372.328866][T20097] netlink: 'syz.6.3877': attribute type 10 has an invalid length. [ 1372.344835][T13387] usb 5-1: config 0 has no interface number 0 [ 1372.353772][T13387] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1372.371094][ T5785] m920x_read = error: -19 [ 1372.372803][T13387] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1372.384981][ T5785] dvb-usb: error while querying for an remote control event. [ 1372.385788][T13387] usb 5-1: Manufacturer: syz [ 1372.442465][T13387] usb 5-1: SerialNumber: syz [ 1372.496049][T13387] usb 5-1: config 0 descriptor?? [ 1372.540282][ T5785] m920x_read = error: -19 [ 1372.544640][ T5785] dvb-usb: error while querying for an remote control event. [ 1372.634659][ T187] kworker/0:2 (187) used greatest stack depth: 16736 bytes left [ 1372.681279][ T5719] m920x_read = error: -19 [ 1372.691362][ T5719] dvb-usb: error while querying for an remote control event. [ 1372.821994][ T5719] m920x_read = error: -19 [ 1372.860469][ T5719] dvb-usb: error while querying for an remote control event. [ 1373.003806][ T30] audit: type=1400 audit(2000000109.196:1393): avc: denied { lock } for pid=20100 comm="syz.6.3879" path="socket:[143369]" dev="sockfs" ino=143369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1373.067551][ T5719] m920x_read = error: -19 [ 1373.097558][ T5719] dvb-usb: error while querying for an remote control event. [ 1373.309632][ T5719] m920x_read = error: -19 [ 1373.314151][ T5719] dvb-usb: error while querying for an remote control event. [ 1373.449620][ T5785] m920x_read = error: -19 [ 1373.656902][ T5785] dvb-usb: error while querying for an remote control event. [ 1373.778344][ T5719] m920x_read = error: -19 [ 1373.794262][ T5719] dvb-usb: error while querying for an remote control event. [ 1373.818590][ T5785] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1373.916495][ T5719] m920x_read = error: -19 [ 1373.927343][ T5719] dvb-usb: error while querying for an remote control event. [ 1374.002024][ T5785] usb 3-1: Using ep0 maxpacket: 32 [ 1374.015504][ T5785] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1374.032155][T13387] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1374.054876][ T5719] m920x_read = error: -19 [ 1374.063478][ T5785] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1374.075715][ T5719] dvb-usb: error while querying for an remote control event. [ 1374.092522][ T5785] usb 3-1: config 0 has no interface number 0 [ 1374.116394][ T5785] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1374.142059][ T5719] usb 5-1: USB disconnect, device number 114 [ 1374.161332][ T5785] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1374.211102][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.222219][T13368] m920x_read = error: -19 [ 1374.231069][T13368] dvb-usb: error while querying for an remote control event. [ 1374.258087][ T5785] usb 3-1: Product: syz [ 1374.313498][ T5785] usb 3-1: Manufacturer: syz [ 1374.387343][ T5785] usb 3-1: SerialNumber: syz [ 1374.441429][T13368] m920x_read = error: -19 [ 1374.491828][T13368] dvb-usb: error while querying for an remote control event. [ 1374.546113][ T5785] usb 3-1: config 0 descriptor?? [ 1374.658907][T20119] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1374.708451][ T5786] m920x_read = error: -19 [ 1374.713005][ T5786] dvb-usb: error while querying for an remote control event. [ 1374.750196][T13387] usb 6-1: Using ep0 maxpacket: 8 [ 1374.765648][T13387] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1374.787186][T13387] usb 6-1: config 0 has no interfaces? [ 1374.798193][T13387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.837179][ T5786] m920x_read = error: -19 [ 1374.842118][ T5786] dvb-usb: error while querying for an remote control event. [ 1374.976366][ T5786] m920x_read = error: -19 [ 1375.114593][ T5786] dvb-usb: error while querying for an remote control event. [ 1375.315423][ T5786] m920x_read = error: -19 [ 1375.325820][ T5786] dvb-usb: error while querying for an remote control event. [ 1375.489054][ T5786] m920x_read = error: -19 [ 1375.497393][ T5786] dvb-usb: error while querying for an remote control event. [ 1375.514286][ T5785] appletouch 3-1:0.85: Geyser mode initialized. [ 1375.566590][ T5785] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input41 [ 1375.638811][ T5786] m920x_read = error: -19 [ 1375.653029][ T5786] dvb-usb: error while querying for an remote control event. [ 1375.812523][ T5786] m920x_read = error: -19 [ 1375.829938][ T30] audit: type=1400 audit(2000000111.845:1394): avc: denied { write } for pid=20133 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1375.852794][ T5786] dvb-usb: error while querying for an remote control event. [ 1375.872979][ T30] audit: type=1400 audit(2000000111.873:1395): avc: denied { read } for pid=20133 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1375.996148][ T5786] m920x_read = error: -19 [ 1376.000679][ T5786] dvb-usb: error while querying for an remote control event. [ 1376.125154][ T5786] m920x_read = error: -19 [ 1376.132571][ T5786] dvb-usb: error while querying for an remote control event. [ 1376.195153][ T5785] usb 3-1: USB disconnect, device number 6 [ 1376.333321][ T5719] m920x_read = error: -19 [ 1376.338286][ T5719] dvb-usb: error while querying for an remote control event. [ 1376.473778][ T5786] m920x_read = error: -19 [ 1376.489664][ T5786] dvb-usb: error while querying for an remote control event. [ 1376.628682][ T5785] appletouch 3-1:0.85: input: appletouch disconnected [ 1376.659267][ T5786] m920x_read = error: -19 [ 1376.676601][ T5786] dvb-usb: error while querying for an remote control event. [ 1376.797522][T13387] usb 6-1: config 0 descriptor?? [ 1376.884688][ T5719] m920x_read = error: -19 [ 1376.927673][T13387] usb 6-1: can't set config #0, error -71 [ 1376.929319][ T5719] dvb-usb: error while querying for an remote control event. [ 1376.952365][T13387] usb 6-1: USB disconnect, device number 125 [ 1377.154337][ T5719] m920x_read = error: -19 [ 1377.170189][ T5719] dvb-usb: error while querying for an remote control event. [ 1377.306380][ T5785] m920x_read = error: -19 [ 1377.311671][ T5785] dvb-usb: error while querying for an remote control event. [ 1377.437491][ T5785] m920x_read = error: -19 [ 1377.445817][T20156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3895'. [ 1377.456579][ T5785] dvb-usb: error while querying for an remote control event. [ 1377.968614][T20161] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[20162] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[20161] [ 1378.400553][ T5785] m920x_read = error: -19 [ 1378.419222][ T5785] dvb-usb: error while querying for an remote control event. [ 1378.563773][ T5596] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1378.584903][ T5785] m920x_read = error: -19 [ 1378.593943][ T5785] dvb-usb: error while querying for an remote control event. [ 1379.558363][ T5785] m920x_read = error: -19 [ 1379.577557][ T5785] dvb-usb: error while querying for an remote control event. [ 1379.754381][ T5785] m920x_read = error: -19 [ 1379.762622][ T5785] dvb-usb: error while querying for an remote control event. [ 1379.784538][T20164] SELinux: Context : is not valid (left unmapped). [ 1379.787223][T20179] ªªªªªª: renamed from vlan0 (while UP) [ 1379.805153][ T30] audit: type=1400 audit(2000000115.510:1396): avc: denied { relabelto } for pid=20163 comm="syz.6.3898" name="rdma.current" dev="tmpfs" ino=2659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 1379.868013][ T30] audit: type=1400 audit(2000000115.510:1397): avc: denied { associate } for pid=20163 comm="syz.6.3898" name="rdma.current" dev="tmpfs" ino=2659 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 1379.906240][ T5785] m920x_read = error: -19 [ 1379.911449][ T5785] dvb-usb: error while querying for an remote control event. [ 1380.046601][ T5785] m920x_read = error: -19 [ 1380.051119][ T5785] dvb-usb: error while querying for an remote control event. [ 1380.095299][ T30] audit: type=1400 audit(2000000115.769:1398): avc: denied { unlink } for pid=11214 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=2659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 1380.177018][ T5785] m920x_read = error: -19 [ 1380.181565][ T5785] dvb-usb: error while querying for an remote control event. [ 1380.317624][ T5785] m920x_read = error: -19 [ 1380.332664][ T5785] dvb-usb: error while querying for an remote control event. [ 1380.404722][T13387] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1380.479651][ T5785] m920x_read = error: -19 [ 1380.486402][ T5785] dvb-usb: error while querying for an remote control event. [ 1380.530408][T20199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3912'. [ 1380.577157][T13387] usb 7-1: Using ep0 maxpacket: 8 [ 1380.590035][T13387] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1380.599570][ T5697] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1380.620539][ T5785] m920x_read = error: -19 [ 1380.621521][T13387] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1380.625083][ T5785] dvb-usb: error while querying for an remote control event. [ 1380.646968][T13387] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1380.658147][T13387] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1380.669095][T13387] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1380.684207][T13387] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.784093][ T5697] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1380.805843][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.825127][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.836367][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.842383][ T5786] m920x_read = error: -19 [ 1380.849034][ T5786] dvb-usb: error while querying for an remote control event. [ 1380.854502][ T5697] usb 6-1: config 0 descriptor?? [ 1380.938268][T13387] usb 7-1: usb_control_msg returned -32 [ 1380.949121][T20183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.960503][T13387] usbtmc 7-1:16.0: can't read capabilities [ 1380.961525][T20183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.975665][ T5786] m920x_read = error: -19 [ 1380.980220][ T5786] dvb-usb: error while querying for an remote control event. [ 1381.016009][T13387] usb 7-1: USB disconnect, device number 64 [ 1381.097495][ T5786] m920x_read = error: -19 [ 1381.102163][ T5786] dvb-usb: error while querying for an remote control event. [ 1381.173140][T13382] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1381.228469][ T5786] m920x_read = error: -19 [ 1381.233737][ T5786] dvb-usb: error while querying for an remote control event. [ 1381.348314][T13382] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1381.368969][ T5786] m920x_read = error: -19 [ 1381.375782][ T5786] dvb-usb: error while querying for an remote control event. [ 1381.383967][T13382] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.400811][T13382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.438910][T13382] usb 5-1: config 0 descriptor?? [ 1381.458333][T13382] pwc: Askey VC010 type 2 USB webcam detected. [ 1381.499104][ T5786] m920x_read = error: -19 [ 1381.507598][ T5786] dvb-usb: error while querying for an remote control event. [ 1381.534977][ T5697] usb 6-1: language id specifier not provided by device, defaulting to English [ 1381.651206][ T5785] m920x_read = error: -19 [ 1381.661238][ T5785] dvb-usb: error while querying for an remote control event. [ 1381.693564][ T30] audit: type=1400 audit(2000000117.264:1399): avc: denied { search } for pid=20216 comm="syz.6.3919" name="/" dev="configfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1381.717473][ T30] audit: type=1400 audit(2000000117.283:1400): avc: denied { search } for pid=20216 comm="syz.6.3919" name="usb_gadget" dev="configfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1381.743980][ T30] audit: type=1400 audit(2000000117.283:1401): avc: denied { search } for pid=20216 comm="syz.6.3919" name="g_uac2" dev="configfs" ino=114293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1381.782591][ T30] audit: type=1400 audit(2000000117.283:1402): avc: denied { search } for pid=20216 comm="syz.6.3919" name="functions" dev="configfs" ino=114294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1381.806426][ T5785] m920x_read = error: -19 [ 1381.810828][ T5785] dvb-usb: error while querying for an remote control event. [ 1381.821673][ T30] audit: type=1400 audit(2000000117.283:1403): avc: denied { search } for pid=20216 comm="syz.6.3919" name="uac2.usb0" dev="configfs" ino=114301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1381.845537][ T5786] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1381.903759][T13382] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1381.925255][T13382] pwc: recv_control_msg error -32 req 02 val 2700 [ 1381.941785][T13382] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1381.942854][T13368] m920x_read = error: -19 [ 1381.956186][T13382] pwc: recv_control_msg error -32 req 04 val 1000 [ 1381.965164][T13382] pwc: recv_control_msg error -32 req 04 val 1300 [ 1381.971971][T13368] dvb-usb: error while querying for an remote control event. [ 1381.972741][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1381.987833][ T5697] uclogic 0003:256C:006D.0039: interface is invalid, ignoring [ 1381.995386][T13382] pwc: recv_control_msg error -32 req 04 val 1400 [ 1382.005587][T13382] pwc: recv_control_msg error -32 req 02 val 2000 [ 1382.017347][ T5697] usb 6-1: USB disconnect, device number 126 [ 1382.029128][ T5786] usb 4-1: Using ep0 maxpacket: 32 [ 1382.037922][ T5786] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 1382.063833][ T5786] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.082046][ T5786] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 1382.115774][ T5785] m920x_read = error: -19 [ 1382.127283][ T5785] dvb-usb: error while querying for an remote control event. [ 1382.148106][ T5786] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1382.233645][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.253264][ T5786] usb 4-1: Product: syz [ 1382.278205][ T5785] m920x_read = error: -19 [ 1382.290539][ T5786] usb 4-1: Manufacturer: syz [ 1382.298720][ T5785] dvb-usb: error while querying for an remote control event. [ 1382.311329][T13382] pwc: recv_control_msg error -71 req 04 val 1500 [ 1382.315645][ T5786] usb 4-1: SerialNumber: syz [ 1382.443720][ T5786] usb 4-1: Fast Track Pro config OK [ 1382.475424][T13368] m920x_read = error: -19 [ 1382.502100][T13368] dvb-usb: error while querying for an remote control event. [ 1382.668593][T13368] m920x_read = error: -19 [ 1382.713870][T13368] dvb-usb: error while querying for an remote control event. [ 1382.939016][T13368] m920x_read = error: -19 [ 1383.033768][T20232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.050615][T13368] dvb-usb: error while querying for an remote control event. [ 1383.159421][T13382] pwc: recv_control_msg error -71 req 02 val 2500 [ 1383.167227][T13382] pwc: recv_control_msg error -71 req 02 val 2400 [ 1383.174011][T13382] pwc: recv_control_msg error -71 req 02 val 2600 [ 1383.181239][T13382] pwc: recv_control_msg error -71 req 02 val 2900 [ 1383.189634][T13382] pwc: recv_control_msg error -71 req 02 val 2800 [ 1383.199588][T13382] pwc: recv_control_msg error -71 req 04 val 1100 [ 1383.208950][T13382] pwc: recv_control_msg error -71 req 04 val 1200 [ 1383.258561][T20232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.274297][T13382] pwc: Registered as video4. [ 1383.285046][ T5785] m920x_read = error: -19 [ 1383.290032][ T5785] dvb-usb: error while querying for an remote control event. [ 1383.334508][T13382] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input42 [ 1383.412198][T13382] usb 5-1: USB disconnect, device number 115 [ 1383.426768][ T5719] m920x_read = error: -19 [ 1383.431231][ T5719] dvb-usb: error while querying for an remote control event. [ 1383.568714][T13363] m920x_read = error: -19 [ 1383.573512][T13363] dvb-usb: error while querying for an remote control event. [ 1383.582024][ T5785] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1383.636320][T20242] ip_tables: iptables: counters copy to user failed while replacing table [ 1383.740708][T13363] m920x_read = error: -19 [ 1383.755075][T13363] dvb-usb: error while querying for an remote control event. [ 1383.785479][T13368] ================================================================== [ 1383.793582][T13368] BUG: KASAN: slab-use-after-free in vidtv_bridge_on_new_pkts_avail+0x126/0x140 [ 1383.802608][T13368] Read of size 8 at addr ffff88802dc67118 by task kworker/1:12/13368 [ 1383.810697][T13368] [ 1383.813025][T13368] CPU: 1 UID: 0 PID: 13368 Comm: kworker/1:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1383.813054][T13368] Tainted: [L]=SOFTLOCKUP [ 1383.813060][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1383.813073][T13368] Workqueue: events vidtv_mux_tick [ 1383.813102][T13368] Call Trace: [ 1383.813110][T13368] [ 1383.813118][T13368] dump_stack_lvl+0x100/0x190 [ 1383.813143][T13368] print_report+0x13d/0x4b0 [ 1383.813169][T13368] ? __virt_addr_valid+0x239/0x430 [ 1383.813194][T13368] ? vidtv_bridge_on_new_pkts_avail+0x126/0x140 [ 1383.813212][T13368] kasan_report+0xdf/0x1c0 [ 1383.813240][T13368] ? vidtv_bridge_on_new_pkts_avail+0x126/0x140 [ 1383.813260][T13368] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1383.813278][T13368] vidtv_bridge_on_new_pkts_avail+0x126/0x140 [ 1383.813297][T13368] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1383.813316][T13368] ? __asan_memset+0x23/0x50 [ 1383.813338][T13368] vidtv_mux_tick+0xb95/0x1460 [ 1383.813369][T13368] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1383.813392][T13368] ? __lock_acquire+0x4c5/0x1ec0 [ 1383.813417][T13368] ? debug_object_deactivate+0x2e4/0x3b0 [ 1383.813443][T13368] ? rcu_is_watching+0x13/0xc0 [ 1383.813463][T13368] process_one_work+0xa23/0x1940 [ 1383.813487][T13368] ? __pfx_process_one_work+0x10/0x10 [ 1383.813511][T13368] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1383.813534][T13368] worker_thread+0x5ef/0xe50 [ 1383.813558][T13368] ? kthread+0x13a/0x450 [ 1383.813576][T13368] ? __pfx_worker_thread+0x10/0x10 [ 1383.813596][T13368] kthread+0x373/0x450 [ 1383.813612][T13368] ? __pfx_kthread+0x10/0x10 [ 1383.813632][T13368] ret_from_fork+0x730/0xd60 [ 1383.813659][T13368] ? __pfx_ret_from_fork+0x10/0x10 [ 1383.813682][T13368] ? rcu_is_watching+0x13/0xc0 [ 1383.813699][T13368] ? __switch_to+0x800/0x10f0 [ 1383.813719][T13368] ? __pfx_kthread+0x10/0x10 [ 1383.813738][T13368] ret_from_fork_asm+0x1a/0x30 [ 1383.813769][T13368] [ 1383.813775][T13368] [ 1384.002142][T13368] Allocated by task 1: [ 1384.006202][T13368] kasan_save_stack+0x30/0x50 [ 1384.010884][T13368] kasan_save_track+0x14/0x30 [ 1384.015560][T13368] __kasan_kmalloc+0xaa/0xb0 [ 1384.020150][T13368] __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1384.025513][T13368] vidtv_demod_i2c_probe+0x6e/0x8a0 [ 1384.030709][T13368] i2c_device_probe+0x658/0xd10 [ 1384.035576][T13368] really_probe+0x241/0xa60 [ 1384.040081][T13368] __driver_probe_device+0x210/0x460 [ 1384.045359][T13368] driver_probe_device+0x4a/0x140 [ 1384.050378][T13368] __device_attach_driver+0x1df/0x320 [ 1384.055745][T13368] bus_for_each_drv+0x159/0x1e0 [ 1384.060597][T13368] __device_attach+0x1e4/0x4d0 [ 1384.065353][T13368] device_initial_probe+0xaf/0xd0 [ 1384.070373][T13368] bus_probe_device+0x64/0x160 [ 1384.075131][T13368] device_add+0x121d/0x1970 [ 1384.079635][T13368] i2c_new_client_device+0x660/0xd30 [ 1384.084921][T13368] dvb_module_probe+0x165/0x310 [ 1384.089793][T13368] vidtv_bridge_probe+0x370/0xa30 [ 1384.094824][T13368] platform_probe+0x106/0x1d0 [ 1384.099548][T13368] really_probe+0x241/0xa60 [ 1384.104051][T13368] __driver_probe_device+0x210/0x460 [ 1384.109329][T13368] driver_probe_device+0x4a/0x140 [ 1384.114349][T13368] __driver_attach+0x21f/0x5b0 [ 1384.119214][T13368] bus_for_each_dev+0x13e/0x1d0 [ 1384.124110][T13368] bus_add_driver+0x305/0x5b0 [ 1384.128824][T13368] driver_register+0x1e2/0x360 [ 1384.133588][T13368] vidtv_bridge_init+0x52/0x80 [ 1384.138354][T13368] do_one_initcall+0x11c/0x6f0 [ 1384.143117][T13368] kernel_init_freeable+0x6ea/0x7b0 [ 1384.148360][T13368] kernel_init+0x21/0x1e0 [ 1384.152676][T13368] ret_from_fork+0x730/0xd60 [ 1384.157262][T13368] ret_from_fork_asm+0x1a/0x30 [ 1384.162025][T13368] [ 1384.164337][T13368] Freed by task 20213: [ 1384.168391][T13368] kasan_save_stack+0x30/0x50 [ 1384.173069][T13368] kasan_save_track+0x14/0x30 [ 1384.177743][T13368] kasan_save_free_info+0x3b/0x70 [ 1384.182774][T13368] __kasan_slab_free+0x5f/0x80 [ 1384.187535][T13368] kfree+0x22b/0x6c0 [ 1384.191422][T13368] i2c_device_remove+0x81/0x280 [ 1384.196275][T13368] device_remove+0xcb/0x180 [ 1384.200775][T13368] device_release_driver_internal+0x44e/0x620 [ 1384.206837][T13368] bus_remove_device+0x2bc/0x560 [ 1384.211762][T13368] device_del+0x376/0x9b0 [ 1384.216081][T13368] device_unregister+0x1d/0xe0 [ 1384.220836][T13368] i2c_unregister_device+0xf5/0x270 [ 1384.226034][T13368] dvb_module_release+0x69/0x90 [ 1384.230885][T13368] vidtv_bridge_remove+0xd8/0x140 [ 1384.235915][T13368] platform_remove+0x5f/0x80 [ 1384.240524][T13368] device_remove+0xcb/0x180 [ 1384.245024][T13368] device_release_driver_internal+0x44e/0x620 [ 1384.251095][T13368] unbind_store+0xf8/0x110 [ 1384.255509][T13368] drv_attr_store+0x74/0xb0 [ 1384.260014][T13368] sysfs_kf_write+0xf2/0x150 [ 1384.264614][T13368] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1384.267930][T20236] zonefs (nullb1) ERROR: Not a zoned block device [ 1384.270065][T13368] vfs_write+0x6af/0x1050 [ 1384.270087][T13368] ksys_write+0x12a/0x250 [ 1384.270105][T13368] do_syscall_64+0x123/0x790 [ 1384.270125][T13368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.270139][T13368] [ 1384.298199][T13368] The buggy address belongs to the object at ffff88802dc67000 [ 1384.298199][T13368] which belongs to the cache kmalloc-2k of size 2048 [ 1384.312246][T13368] The buggy address is located 280 bytes inside of [ 1384.312246][T13368] freed 2048-byte region [ffff88802dc67000, ffff88802dc67800) [ 1384.326132][T13368] [ 1384.328455][T13368] The buggy address belongs to the physical page: [ 1384.334853][T13368] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2dc60 [ 1384.343636][T13368] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1384.352129][T13368] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1384.359677][T13368] page_type: f5(slab) [ 1384.363647][T13368] raw: 00fff00000000040 ffff88801c022000 dead000000000100 dead000000000122 [ 1384.372215][T13368] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1384.380797][T13368] head: 00fff00000000040 ffff88801c022000 dead000000000100 dead000000000122 [ 1384.389448][T13368] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1384.398101][T13368] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1384.406755][T13368] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1384.415398][T13368] page dumped because: kasan: bad access detected [ 1384.421786][T13368] page_owner tracks the page as allocated [ 1384.427532][T13368] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1210, tgid 1210 (kworker/1:2), ts 13830241599, free_ts 0 [ 1384.447931][T13368] post_alloc_hook+0xfd/0x120 [ 1384.452629][T13368] get_page_from_freelist+0xf46/0x3500 [ 1384.458071][T13368] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1384.463947][T13368] new_slab+0xa2/0x660 [ 1384.467996][T13368] refill_objects+0xe3/0x410 [ 1384.472566][T13368] __pcs_replace_empty_main+0x372/0x680 [ 1384.478101][T13368] __kmalloc_cache_noprof+0x47b/0x6b0 [ 1384.483467][T13368] mousedev_create+0x95/0xb40 [ 1384.488125][T13368] mousedev_connect+0x26/0x310 [ 1384.492870][T13368] input_attach_handler.isra.0+0x177/0x1e0 [ 1384.498659][T13368] input_register_device.cold+0x139/0x375 [ 1384.504380][T13368] psmouse_connect+0x772/0xf50 [ 1384.509127][T13368] serio_driver_probe+0x77/0xa0 [ 1384.513969][T13368] really_probe+0x241/0xa60 [ 1384.518450][T13368] __driver_probe_device+0x210/0x460 [ 1384.523713][T13368] driver_probe_device+0x4a/0x140 [ 1384.528715][T13368] page_owner free stack trace missing [ 1384.534061][T13368] [ 1384.536362][T13368] Memory state around the buggy address: [ 1384.541967][T13368] ffff88802dc67000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1384.550005][T13368] ffff88802dc67080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1384.558042][T13368] >ffff88802dc67100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1384.566077][T13368] ^ [ 1384.570914][T13368] ffff88802dc67180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1384.578951][T13368] ffff88802dc67200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1384.586988][T13368] ================================================================== [ 1384.618617][T13363] m920x_read = error: -19 [ 1384.623311][T13363] dvb-usb: error while querying for an remote control event. [ 1384.670016][ T30] audit: type=1400 audit(2000000120.006:1404): avc: denied { read } for pid=4946 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1384.692628][ T30] audit: type=1400 audit(2000000120.006:1405): avc: denied { search } for pid=4946 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1384.717504][T13368] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1384.724708][T13368] CPU: 1 UID: 0 PID: 13368 Comm: kworker/1:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1384.735807][T13368] Tainted: [L]=SOFTLOCKUP [ 1384.740108][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1384.750144][T13368] Workqueue: events vidtv_mux_tick [ 1384.755241][T13368] Call Trace: [ 1384.758507][T13368] [ 1384.761427][T13368] dump_stack_lvl+0x100/0x190 [ 1384.766094][T13368] vpanic+0x553/0x970 [ 1384.770052][T13368] ? __pfx_vpanic+0x10/0x10 [ 1384.774535][T13368] ? vidtv_bridge_on_new_pkts_avail+0x126/0x140 [ 1384.780760][T13368] panic+0xd1/0xe0 [ 1384.784478][T13368] ? __pfx_panic+0x10/0x10 [ 1384.788870][T13368] ? vidtv_bridge_on_new_pkts_avail+0x126/0x140 [ 1384.795086][T13368] ? preempt_schedule_common+0x3c/0xb0 [ 1384.800538][T13368] check_panic_on_warn.cold+0x19/0x34 [ 1384.805921][T13368] end_report.part.0+0x3a/0x90 [ 1384.810672][T13368] kasan_report.cold+0xe/0x18 [ 1384.815331][T13368] ? vidtv_bridge_on_new_pkts_avail+0x126/0x140 [ 1384.821559][T13368] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1384.828149][T13368] vidtv_bridge_on_new_pkts_avail+0x126/0x140 [ 1384.834214][T13368] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1384.840820][T13368] ? __asan_memset+0x23/0x50 [ 1384.845409][T13368] vidtv_mux_tick+0xb95/0x1460 [ 1384.850198][T13368] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1384.855384][T13368] ? __lock_acquire+0x4c5/0x1ec0 [ 1384.860335][T13368] ? debug_object_deactivate+0x2e4/0x3b0 [ 1384.865951][T13368] ? rcu_is_watching+0x13/0xc0 [ 1384.870866][T13368] process_one_work+0xa23/0x1940 [ 1384.875798][T13368] ? __pfx_process_one_work+0x10/0x10 [ 1384.881152][T13368] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1384.886388][T13368] worker_thread+0x5ef/0xe50 [ 1384.890985][T13368] ? kthread+0x13a/0x450 [ 1384.895212][T13368] ? __pfx_worker_thread+0x10/0x10 [ 1384.900310][T13368] kthread+0x373/0x450 [ 1384.904370][T13368] ? __pfx_kthread+0x10/0x10 [ 1384.908942][T13368] ret_from_fork+0x730/0xd60 [ 1384.913520][T13368] ? __pfx_ret_from_fork+0x10/0x10 [ 1384.918711][T13368] ? rcu_is_watching+0x13/0xc0 [ 1384.923466][T13368] ? __switch_to+0x800/0x10f0 [ 1384.928124][T13368] ? __pfx_kthread+0x10/0x10 [ 1384.932703][T13368] ret_from_fork_asm+0x1a/0x30 [ 1384.937451][T13368] [ 1384.940670][T13368] Kernel Offset: disabled [ 1384.944990][T13368] Rebooting in 86400 seconds..