last executing test programs: 5m19.460470329s ago: executing program 2 (id=67): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000240)={&(0x7f0000000100)=0x7, 0xe8e, &(0x7f0000000140)=[{}], &(0x7f0000000200)}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbdf25010002000900030073797a3000000000090001"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 5m19.222837297s ago: executing program 2 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) mount(&(0x7f0000000900)=@filename='mtd1\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000a00)='jffs2\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x32, 0x2, 0x100, "d5470000002f1a0e00000007000000000000000000000200", 0xa0363159}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000005c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000740)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r9, r10, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000008c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0xffffffff, 0x2}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000380)={0x1e8, 0x12, 0x2, 0x70bd2c, 0x25dfdbff, "", [@generic="90d4ba488e12b7181206ddb246fa0ca9cc18714a1e67ee2a81ae79dc8516a0449671981c027ee32eea43b78b18d1b43fdba7ffe988f358258436d542f9d1f03c8d490a70db822c76491ef898541d8d70b2bdc435077dd83162cfaf7a3bf490bce2eaab37cebe1786f5ea024ca75d847429f2dd0137db478009d74e16ef33c5701585690af4e2cb1bbe5be05c5865ea7826eb7ba3819545dc45537d113e210e95ea14da73d2bae1ebd8b904a44a54e70c5cd314bcc73b3234b01efa7b39df20c0b1bdfcef842a5f89b38e22351aad6e72edac3505e03f82d952daf3d310d6df9bd53ce1cb1294", @nested={0xd5, 0x33, 0x0, 0x1, [@generic="6fafacd950204671fea688cb43398a125eaf64ca7467beabda12d4fe824383d3b059338b1269f92cc4ccf0de703574e3dc97035fbe8014a750e4f3c4420c3d437ab4a9ad40904a8a795078ebadb1dcb1b081a4dc3dcdabcb3967a6a3014302072fdb87b385970142755badf0dc29707d8ca517cd962653a56056d1501235", @generic="7ae664ff899450fd1f7c6a2fd5df038b7939f636a2bb0296cd03086988d48c32eb3b473b5461d2bd1e083f5174ad6de34667235b44e5e19b5929895e386d41946fa89efa46662e05a72574e12aa563d1ddf2fe"]}, @generic="cc6308d779541daf6dab2e517a7f159b67f6d24aa3ea82"]}, 0x1e8}], 0x1, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, r10}}}], 0x40, 0x40010}, 0x8042) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000240)='~', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/exports\x00', 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x6, 0xffffffff, 0x9, 0x5c312501]}, &(0x7f00000000c0)=0x78) r11 = syz_open_dev$hidraw(&(0x7f0000000180), 0x3, 0x40000) ioctl$HIDIOCGRAWINFO(r11, 0x80084803, &(0x7f0000000280)=""/219) 5m18.87127486s ago: executing program 2 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001300)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0xe}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x40, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x33, 0x0, @local, @loopback, [], "a542e5fa78122afa"}}}}}}, 0x76) 5m18.399656598s ago: executing program 2 (id=75): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xd, 0x7}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001040)=""/4083, 0xff3}], 0x1, 0x21}}], 0x48, 0x29ff1109601b30a4}, 0x0) 5m18.153109275s ago: executing program 2 (id=77): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r0, 0x1) flock(r1, 0x1) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff000705810240000007050102400000070582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000003c40)='/dev/comedi4\x00', 0x840, 0x0) ioctl$COMEDI_CMDTEST(r4, 0x8050640a, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8=r3, @ANYRESHEX=r4], 0x7c}}, 0xc5) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0904000000000000000002000000300004802c0001800a0001007175537eaeb3cf6f74610000001c0002800c00014000000000000000020c00044000000000000080010900010073797a30000000003500074013df2f377a228aec01d52b8ed13a5c93a0314358be0583a4e800d83560e9834ca33f7a073fe014cbc1bca69043322d94210000001400000011003e4300000000000000000000000a"], 0xb0}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f0000000340)={0x89, 0x1000b, 0x1, 0x3170ae2, 0x80007fff, 0x8000, 0x5}) writev(r6, &(0x7f0000000900)=[{&(0x7f0000000980)="eab0", 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x21, "d350aa4add2ac6edc3ca7072cf6f6511bc614b80aaded2824a0ae7c2aa3bccdd64"}, &(0x7f0000000080)=0x29) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000000100)) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r8, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}]}, 0x20}}, 0x40000) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000380)='@', 0x1}], 0x1) 5m16.188633801s ago: executing program 2 (id=88): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x60080, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f00000002c0)={0x1, 0x2, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}}, 0xc0c0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200", @ANYRES32], 0x1c}], 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000340)={r1, &(0x7f0000000000)='@\x00', 0x10000, &(0x7f0000000180)={@_ha_fsid={[0x2, 0x101]}, {0x2, 0x1, 0xbd4, 0x2}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000300)=0x7}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "37b40500", "000000faffffa84c00", "eccedf3e", "3d8efa05fdffffff"}, 0x28) mkdir(&(0x7f0000000000)='./file0\x00', 0x34) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents(r4, &(0x7f0000000d40)=""/4096, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 5m0.925661608s ago: executing program 32 (id=88): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x60080, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f00000002c0)={0x1, 0x2, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}}, 0xc0c0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200", @ANYRES32], 0x1c}], 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000340)={r1, &(0x7f0000000000)='@\x00', 0x10000, &(0x7f0000000180)={@_ha_fsid={[0x2, 0x101]}, {0x2, 0x1, 0xbd4, 0x2}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000300)=0x7}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "37b40500", "000000faffffa84c00", "eccedf3e", "3d8efa05fdffffff"}, 0x28) mkdir(&(0x7f0000000000)='./file0\x00', 0x34) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents(r4, &(0x7f0000000d40)=""/4096, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 4m17.139584417s ago: executing program 0 (id=296): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fe}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r5 = socket(0x40000000015, 0x5, 0x0) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r1, r0, 0x0) read$FUSE(r6, &(0x7f0000003100)={0x2020}, 0x2020) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x2, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fe}, 0x10) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) socket(0x40000000015, 0x5, 0x0) (async) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) dup3(r1, r0, 0x0) (async) read$FUSE(r6, &(0x7f0000003100)={0x2020}, 0x2020) (async) 4m16.575561147s ago: executing program 0 (id=299): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='Xj', 0x2, 0x4000004, &(0x7f000005ffe4)={0xa, 0x8000, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mremap(&(0x7f0000880000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xd, 0x7}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001040)=""/4083, 0xff3}], 0x1, 0x21}}], 0x48, 0x29ff1109601b30a4}, 0x0) 4m13.33637034s ago: executing program 0 (id=312): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01"], 0x1a4}}, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x80000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x80000000, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x200000003, 0x4100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x80000002, 0xfffffffffffffffd], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m12.518126689s ago: executing program 0 (id=307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x4}, 0x1c) r1 = socket(0x10, 0x3, 0x0) unshare(0x40480) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ad8efa05fd9614ff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='gretap0\x00', 0x100000000, 0x9, 0xfff5}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000039c0)=[{&(0x7f0000001140)="8a3deb7cc711a5e63c1f31b73c99deae82b35c83639a1be4b1e61b725be1e39e4206bf4d13b3fed4503df5deca8cacdc61cd0f765589d76f688616f9aacd8dd07dae1bc4fdb6b4b351dad6f657bb777175a81269555432582a24f41ebfc40856bc430923f58ca84ae0bf161c61735a474826ef4fa87a4fbf33e622f7c83e09cbbb5eb4c16d63419b587f5e7887eeaf85c6e785899ebdf0f25dc52fb0d84697b463ce3f328f74005b9ce8fb16a9e073088ef0913d225cf1a8dd44e84f773681b4b8222abb4505a9aa6f64e7af81256eae2f1e9fa609437f", 0xd7}, {&(0x7f0000001240)="3e384c13754478f72faa64ed431f1bd69d7b77c71bd47c0148df02eb787335d5f2ed2ce74ca70aa187186d65916a7d7b082a26467c47c61155820e4fe825d8829811a497ad13e1fdeef29dec3e418030f863a51019ccc1bf1fe41c22a594b29d9330cadc799e43064ea1070ffcb31f5c3e092dadcbbcae525bb7419ba16488795f73cf10394c1cd6d2b6b9642968b6c25128e1fbeb9d0435f245fcf3a3331f894ccb6724721d40c8", 0xa8}, {&(0x7f00000029c0)="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", 0xdbc}], 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xf3a, 0x0) 4m11.067842363s ago: executing program 0 (id=314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "608ccd52dc3b4d10", "af34b8e2c8df79094e99e058e7897aa6", "970c891a", "0201b8478f9ecee4"}, 0x0) 4m10.638673802s ago: executing program 0 (id=316): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4004"], 0x7) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) futex(0x0, 0x85, 0x3, 0x0, 0x0, 0xc6000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) 4m10.265182423s ago: executing program 33 (id=316): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4004"], 0x7) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) futex(0x0, 0x85, 0x3, 0x0, 0x0, 0xc6000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) 8.906946875s ago: executing program 4 (id=1521): syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, 0x0}]) 5.807738579s ago: executing program 4 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001300)={@val={0xf5, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x42, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x33, 0x0, @local, @loopback, [@routing={0x2b, 0x0, 0x1, 0xf}], "a542"}}}}}}, 0x78) 5.68525417s ago: executing program 4 (id=1536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001300)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x42, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x33, 0x0, @local, @loopback, [@routing={0x2b, 0x0, 0x1, 0xf}], "a542"}}}}}}, 0x78) (fail_nth: 4) 5.576696795s ago: executing program 4 (id=1537): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x1, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000200)='3', 0x1) write(r2, &(0x7f00000000c0)='R', 0x1) close(0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1017c2, 0x80) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4008840) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) write$cgroup_subtree(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="2d688d77911dbde91768e5f196418fa593287b"], 0x9) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'}) fsmount(0xffffffffffffffff, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 3.519320001s ago: executing program 1 (id=1548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="fdffffffbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0500000000000000000000000000014f194e20"], 0x9e) 3.410534958s ago: executing program 1 (id=1549): mmap(&(0x7f0000b0a000/0x2000)=nil, 0x2000, 0x2000000, 0x3b071, 0xffffffffffffffff, 0x1544000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') clock_nanosleep(0x2, 0x0, &(0x7f0000000140), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, 0x0, 0xfffffee2) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) getdents(r0, &(0x7f0000000ec0)=""/4114, 0x1012) 3.367615058s ago: executing program 1 (id=1550): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="2015a2000000941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f30a887ce29f74da4509a83fc9f0cdca73eb9a10591ba4f25b98a18d80000733384db9bb277986ae6eba09127db1f3785904c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06ca"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0xee01, 0x0) setuid(0xee01) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x52, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0xc, &(0x7f00000001c0)={0x0, 0xe, 0x6, {0xfffffcd1, 0x30, "c39aed3c"}}, 0x0}, 0x0) prctl$PR_GET_FPEXC(0xb, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x24, 0x2, {0x2, 0x2}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000100)={0x40, 0xf, 0x6e, {0x6e, 0x21, "f7660717a36be6961be504d332a561540da1e2afa223f1110d25878a793eb868bf424ef96ae7b76961ab0d6db9b058353fdd1559666ecccc1d629f2bbb0c60187ce8d6b6159905473991389bcc7ca44adf817caecf07e0e803aea9289f752d0c5cf17d4bd2c3c0068f8a181d"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000000080)={0x0, 0x22, 0x12, {[@global=@item_012={0x1, 0x1, 0x7, "aa"}, @main=@item_4={0x3, 0x0, 0x752197aeee0e7e18, "a05d3dbc"}, @main=@item_012={0x2, 0x0, 0x9, "53df"}, @main=@item_4={0x3, 0x0, 0x9, "48bcea45"}, @local=@item_012={0x2, 0x2, 0x8, "e29b"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0x6ac}}}}, &(0x7f0000000940)={0x2c, &(0x7f0000000580)={0x0, 0x15, 0xc9, "19f9288d231dbe3908c1ed57f6719f09f33644049420a9ae6f04a7e380645cc39b8a678280c3b63f044e007373d60f1b8ea70d40302e11c9e80f4084e1a63904718a51d1b16c5a83582ffda8dd85ee127914f0e83a32b6862bc28bca5c8bb3803a4d5a656dfade5ea47c2298f602b0280d9d8beffe1f23df462e06c03b635e7abcf5cfe7f16c3e07840e57c9a036e52c43cca73fdbf1d161712e2fe45523b09f36a7a124b0afdcdff0c043ad54e6445356f0564fbbcd11dced8b5c08cb42e3ae5661c25b78e6df1a04"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000007c0)={0x20, 0x1, 0xfd, "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"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0xb}}) r2 = semget$private(0x0, 0x6, 0x1b5) semop(r2, &(0x7f0000000040)=[{0x0, 0xff43}], 0x1) semop(r2, &(0x7f00000000c0)=[{0x4}], 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x10, 0x803, 0x0) recvfrom(r4, 0x0, 0x0, 0x40002041, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000a80)) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="54010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000d36d0000000000001400004000000000030000010000000004000000000000000000000000000000ffffffffffffffffffffffffffffffff000000805600000003000000000000000000000000000000000000000000000010000000018000000200000000000000000000000200010000000000000000004800010073686132353600"], 0x154}}, 0x0) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000000a00)=""/85) mmap(&(0x7f0000202000/0x1000)=nil, 0x1000, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) semctl$SEM_INFO(r2, 0x7, 0x13, &(0x7f0000000980)=""/122) 2.952140006s ago: executing program 3 (id=1552): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) lseek(r0, 0xd2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x1410, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x60}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = semget(0x1, 0x4, 0x2bc) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') preadv(r6, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/203, 0xcb}], 0x1, 0x20000008, 0xffffffff) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000100)="64f080620c00d9f40f20d86635200000000f22d86766c7442400009000006766c7442402000800006766c744240600000000670f011c2466b8000000000f23d00f21f86635200000040f23f866b9800000c00f326635004000000f3066b9800000c00f326635002000000f300f090fc79ce6ff0ff95500", 0x77}], 0x1, 0x70, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x40}) 2.729268667s ago: executing program 3 (id=1553): syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, 0x0}]) 2.46357479s ago: executing program 4 (id=1554): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.238720293s ago: executing program 4 (id=1555): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff000000070581020002000705010200020007"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) 1.950182284s ago: executing program 5 (id=1556): socket$inet(0x2, 0x80000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', '', [], 0xa, "332da36131070ec121cf92682cb96268ebd399640c919f068d0d1cf90425d312c3127a6bfabbb98e514ffa052d2e08236510e6c8dc8c1bec4a500f919a35c5c60013d7e8bf6ac09a000000ccf22586c788f17c3cf06adce7b607e01c36332507fdce63e75f273ba50d16f75559c7d4232641ab343827"}, 0x7a) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c46020d0c070400000000000000030003007f0000009e010000000000004000000000a6000000000000000600000003003800020000e4030200020300000001000000000000000000000000001000000000000007000000000000000e000100000000002700000000000080fcffffffffffff1bff010000000000000800000000000000060000000000000000000100000000003100000000000000161e2f53b92f696f644a8a4b2b8d20cf3e830a5ffa043c3fed746c639fdeb100817de567089e01cc6d224898a858d9f041a685450c49aba24789d14f8f38d827f200"/238], 0xdd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f00007d8000/0x2000)=nil, 0x2000, 0x15) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000019b, &(0x7f0000000040)}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000900)="341c6970826c8d4b5c11b970df9ba99356da67926a9ec3ade529abcdb90bd856d940b30d62502e8bd2da2273e46adca15152c3ada09720c93730f8a240b97dc3ddaf3933416584aeea0849e24c15887cf481a02d1fac21c4741da961105b326e43fc2389a5dac54db82491d54d0fe46230d76297c86effdba339d1eeea410793dc09c0117a422e04d047174251dec07a31cb58e4773ab8715a2a4189fa87ab20b6c6153fc96fe645fa33a965ed60bcc4fc93319cb4397ad0e0e5671cf342697e8f01c11fed", 0xc5}], 0x1}}], 0x1, 0x4008041) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xc7, "19a4e572f0535139f3a35cf08200939aa61e27a4b7b7b943a8497376a5afc8c158f464883a7c2d35bb59197d62282d4352c7610d9b21e842adb301e5395b5b6723f633de2512c1d7a65730400b1eea0fba08f8a419e9ed79cbf584c6e2ecc61c3e32f7c37951cfc8ad51db7828ccfd2e74ad899afb766524978f28ab050089c59cc69eb4757875f93c1848fe1474334d78a541335932257a12029674e443a7fa188797eb82a596a924ad73528cbaca5cec490bb6194b53e6fc3e79408c48879e0410792a99b7c4"}, &(0x7f0000000340)=0xcf) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000800)={r3, @in6={{0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd}}}, &(0x7f0000000440)=0x84) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x320) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='\\x', 0x2) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000640)=[{r6, 0x2103}], 0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x44, @private0, 0x3}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 1.803963811s ago: executing program 5 (id=1557): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000180)={0x1f3, 0xfffffffd, 0x5, 0x9}, 0x10) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r3, &(0x7f0000000580)=[{&(0x7f00000006c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff923d587505a66033816d9d554d83669efc751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfda67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d564", 0xb1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000240)=""/135, 0x87}], 0x2) fsmount(r0, 0x0, 0x75) fchdir(r1) fchdir(r2) mkdir(&(0x7f0000000140)='./file0\x00', 0x30) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x1e, 0x0, 0x3c) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000700)=[0x2a, 0x2ff]) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000100)) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) setsockopt$RDS_RECVERR(r6, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) 1.765058722s ago: executing program 5 (id=1558): mmap(&(0x7f0000b0a000/0x2000)=nil, 0x2000, 0x2000000, 0x3b071, 0xffffffffffffffff, 0x1544000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') clock_nanosleep(0x2, 0x0, &(0x7f0000000140), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xfffffee2) gettid() timer_create(0x1, 0x0, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) getdents(r0, &(0x7f0000000ec0)=""/4114, 0x1012) 1.599519134s ago: executing program 5 (id=1559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.504462105s ago: executing program 3 (id=1560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0xc1000, 0x2) openat(r0, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x537182, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000380)="a4921aaf3ffd93dad503500000e90000000000", 0x13}, {&(0x7f0000000300)='M@', 0x2}], 0x2) write(r2, &(0x7f0000000100)="424f7f1c892f7638e27c1977f4c9e149a76ef16aad0572fbf161fd305db7328fcd8822800c571d3faf7f96745a", 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0xc1000, 0x2) (async) openat(r0, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x537182, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000380)="a4921aaf3ffd93dad503500000e90000000000", 0x13}, {&(0x7f0000000300)='M@', 0x2}], 0x2) (async) write(r2, &(0x7f0000000100)="424f7f1c892f7638e27c1977f4c9e149a76ef16aad0572fbf161fd305db7328fcd8822800c571d3faf7f96745a", 0x2d) (async) 1.315362251s ago: executing program 3 (id=1561): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a4}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) (fail_nth: 1) 1.126630332s ago: executing program 3 (id=1562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000004780)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000004700)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x3f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4000801) 1.110118072s ago: executing program 5 (id=1563): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a4}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="eb020000a388bd07249a2fa21c3a2bc29948d162b142aa0cf494d5efe5f738629469456a42bc0ee8a5b7407bed60c8eebebd107b604b57276c88bb2fb6ce3ca161fedf39441424e306651b9c27536bcb31255d12b46d4d8de6a4f507e33dc4712b1073bf3e5ba5bdd5b1875cc07e8fed7c6492a572a135a4f909ec520909060f9724f9b85ba66577f82b6d5c4b484e0e044d", @ANYRES16=0x0, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4080}, 0x40020) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000000)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed6ee3738256e06a40e07fff0797e00", 0x29) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 984.171474ms ago: executing program 3 (id=1564): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000001180)={0x0, 0x9, 0xe3, {0xe3, 0x8, "2933a6e30438c6d9341f5827b2d12ba38f54a716d2dfc8b19ca933a446701bbea50324a8c74e89eb41d5fce390a20000000010542b405618778036f5bbb33ac5bf43e613daedf00be2a189eb8b87c2f428b457ac27e8ff40070f41498a337faf1a237fbc1296a43df1e0c269a71ea8a8d17ffa5a1936a88bf476d7c8981f85487cc2db8d88180c3c2d1cb59a8c80352c7ba6950a2336c927024e9ac1ed6c7719a361b7c46773c9f60a9dba0e0efeae185dd9712ce2e9d991c3cb6aa13ea9c5970318d247eaf540411cd115b0c4bd80ab0385c19d1e70411cc3a9d4625c5c4f74bd"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, &(0x7f00000006c0)={0x0, 0xf, 0xf3, {0x5, 0xf, 0xf3, 0x2, [@ptm_cap={0x3}, @generic={0xeb, 0x10, 0x1, "a8b4a4a6d50ae3e90fba74787813ad2ea0dd3528d734ca873cc9ed967de25234fce9d6ec995058d515518040cc7caa3da7ccf9332413f81c984cfb03a263698acf52429da31f45a1b022d3341848d1cd3cd4e198307398d8bc59d229a8edf3de5c744ebd92501e6be5e7ee41485b04435124ee8bb0e2ca792e20c11261b24fc523ad166d2f8a55dd2a939e9b5429babb1616845e86dd3990001a121d44ad53593b6e643b4690f25c7abaad3bfe3d2241bc3a48eddfd168d4a5cfa43091a6b055d905aba30a6db07369bc6c1dd554392ca6baaef001ca33b18ad65023fb8fa4e1a651633f9c8b7d4b"}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0xf8, 0x70, "7acf22fa", "712d749e"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x0, 0x3, 0x84, 0x1, 0xffff, 0xff}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000940)={0x0, 0x5, 0x100, "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"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x8, 0x4}}, &(0x7f0000000e00)={0x40, 0x7, 0x2}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "ea64"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000f00)={0x40, 0x13, 0x6}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "0dec"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x3}}) landlock_restrict_self(r2, 0xe) unshare(0x8000080) 984.031591ms ago: executing program 5 (id=1565): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405f0500a800010102030109022e00010100a0320904000004ff00000007050102080000070582030800010705030240000007058402400000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x20) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00') clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r2, r3+10000000}, &(0x7f00000000c0)) write$char_usb(r1, &(0x7f0000000200)='U\x00\x00\x00\x00\x00\x00\x00', 0x8) clock_nanosleep(0x2, 0x1, &(0x7f0000000140), 0x0) 298.538542ms ago: executing program 1 (id=1566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x700, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc00"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) 226.411634ms ago: executing program 1 (id=1567): mmap(&(0x7f0000b0a000/0x2000)=nil, 0x2000, 0x2000000, 0x3b071, 0xffffffffffffffff, 0x1544000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') clock_nanosleep(0x2, 0x0, &(0x7f0000000140), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xfffffee2) gettid() timer_create(0x1, 0x0, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) getdents(r0, &(0x7f0000000ec0)=""/4114, 0x1012) 0s ago: executing program 1 (id=1568): syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, 0x0}]) kernel console output (not intermixed with test programs): Google 07/24/2026 [ 379.493643][T10571] Call Trace: [ 379.493650][T10571] [ 379.493658][T10571] dump_stack_lvl+0xe8/0x150 [ 379.493686][T10571] should_fail_ex+0x410/0x560 [ 379.493715][T10571] _copy_to_user+0x31/0xb0 [ 379.493734][T10571] drm_ioctl+0x731/0xba0 [ 379.493869][T10571] ? __pfx_drm_setmaster_ioctl+0x10/0x10 [ 379.493945][T10571] ? __pfx_drm_ioctl+0x10/0x10 [ 379.493976][T10571] ? __fget_files+0x2a/0x420 [ 379.494002][T10571] ? bpf_lsm_file_ioctl+0x9/0x20 [ 379.494023][T10571] ? __pfx_drm_ioctl+0x10/0x10 [ 379.494041][T10571] __se_sys_ioctl+0xfc/0x170 [ 379.494068][T10571] do_syscall_64+0x166/0x520 [ 379.494086][T10571] ? trace_irq_disable+0x3b/0x140 [ 379.494112][T10571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.494130][T10571] ? clear_bhb_loop+0x70/0xc0 [ 379.494152][T10571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.494171][T10571] RIP: 0033:0x7f276eb9e0d9 [ 379.494188][T10571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.494204][T10571] RSP: 002b:00007f276fb32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.494226][T10571] RAX: ffffffffffffffda RBX: 00007f276ee25fa0 RCX: 00007f276eb9e0d9 [ 379.494239][T10571] RDX: 0000000000000000 RSI: 000000000000641e RDI: 0000000000000003 [ 379.494251][T10571] RBP: 00007f276fb32090 R08: 0000000000000000 R09: 0000000000000000 [ 379.494263][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.494276][T10571] R13: 00007f276ee26038 R14: 00007f276ee25fa0 R15: 00007ffeea23f538 [ 379.494305][T10571] [ 379.511765][T10569] vxcan0: tx address claim with dest, not broadcast [ 379.583657][ T5690] m920x_read = error: -19 [ 379.583685][ T5690] dvb-usb: error while querying for an remote control event. [ 379.595079][T10569] openvswitch: netlink: Duplicate or invalid key (type 0). [ 379.595115][T10569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.649048][T10569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.693828][ T5690] m920x_read = error: -19 [ 379.693855][ T5690] dvb-usb: error while querying for an remote control event. [ 379.711661][ T6075] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 379.738612][ T6075] usb 4-1: device descriptor read/8, error -71 [ 379.805265][ T5690] m920x_read = error: -19 [ 379.805960][ T5690] dvb-usb: error while querying for an remote control event. [ 379.914358][ T5622] m920x_read = error: -19 [ 379.914586][ T5622] dvb-usb: error while querying for an remote control event. [ 379.984390][ T6075] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 380.025409][ T6075] usb 4-1: device descriptor read/8, error -71 [ 380.026870][ T5622] m920x_read = error: -19 [ 380.026895][ T5622] dvb-usb: error while querying for an remote control event. [ 380.064234][ T5690] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 380.133850][ T25] m920x_read = error: -19 [ 380.133883][ T25] dvb-usb: error while querying for an remote control event. [ 380.154142][ T6075] usb usb4-port1: unable to enumerate USB device [ 380.200511][T10588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1435'. [ 380.218017][ T5690] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 380.220179][ T5690] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 380.220215][ T5690] usb 2-1: can't read configurations, error -61 [ 380.243482][ T25] m920x_read = error: -19 [ 380.243530][ T25] dvb-usb: error while querying for an remote control event. [ 380.343438][ T5690] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 380.343621][ T5622] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 380.353749][ T25] m920x_read = error: -19 [ 380.353774][ T25] dvb-usb: error while querying for an remote control event. [ 380.463456][ T25] m920x_read = error: -19 [ 380.463501][ T25] dvb-usb: error while querying for an remote control event. [ 380.493552][ T5622] usb 6-1: Using ep0 maxpacket: 32 [ 380.494403][ T5690] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 380.494794][ T5622] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 380.496256][ T5622] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 380.496299][ T5622] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 380.496382][ T5622] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.496408][ T5622] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 380.497666][ T5690] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 380.497720][ T5690] usb 2-1: can't read configurations, error -61 [ 380.498614][ T5690] usb usb2-port1: attempt power cycle [ 380.499559][ T5622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.499581][ T5622] usb 6-1: Product: syz [ 380.499595][ T5622] usb 6-1: Manufacturer: syz [ 380.499609][ T5622] usb 6-1: SerialNumber: syz [ 380.508267][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 380.512326][ T5622] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input86 [ 380.573478][ T25] m920x_read = error: -19 [ 380.573508][ T25] dvb-usb: error while querying for an remote control event. [ 380.683757][ T25] m920x_read = error: -19 [ 380.683815][ T25] dvb-usb: error while querying for an remote control event. [ 380.724436][ T5622] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 380.724477][ T5622] (id 0x00) [ 380.773393][ T5622] rc_core: IR keymap rc-imon-pad not found [ 380.773423][ T5622] Registered IR keymap rc-empty [ 380.774118][ T5622] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 380.774138][ T5622] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 380.793445][ T25] m920x_read = error: -19 [ 380.793475][ T25] dvb-usb: error while querying for an remote control event. [ 380.833436][ T5690] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 380.854624][ T5690] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 380.856810][ T5690] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 380.856867][ T5690] usb 2-1: can't read configurations, error -61 [ 380.903412][ T25] m920x_read = error: -19 [ 380.903446][ T25] dvb-usb: error while querying for an remote control event. [ 380.924702][ T5622] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 380.927132][ T5622] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input87 [ 380.933068][ T5622] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:45> initialized [ 380.983879][ T5690] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 381.008881][ T5690] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 381.011451][ T5690] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 381.011505][ T5690] usb 2-1: can't read configurations, error -61 [ 381.012234][ T5690] usb usb2-port1: unable to enumerate USB device [ 381.013726][ T5690] m920x_read = error: -19 [ 381.013747][ T5690] dvb-usb: error while querying for an remote control event. [ 381.123477][ T5690] m920x_read = error: -19 [ 381.123523][ T5690] dvb-usb: error while querying for an remote control event. [ 381.238694][ T5690] m920x_read = error: -19 [ 381.238735][ T5690] dvb-usb: error while querying for an remote control event. [ 381.255327][T10599] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 381.261526][T10599] kvm: pic: level sensitive irq not supported [ 381.261611][T10599] kvm: pic: non byte read [ 381.261806][T10599] kvm: pic: level sensitive irq not supported [ 381.261855][T10599] kvm: pic: non byte read [ 381.344591][ T5622] m920x_read = error: -19 [ 381.344635][ T5622] dvb-usb: error while querying for an remote control event. [ 381.455375][ T5622] m920x_read = error: -19 [ 381.455416][ T5622] dvb-usb: error while querying for an remote control event. [ 381.478085][T10607] FAULT_INJECTION: forcing a failure. [ 381.478085][T10607] name failslab, interval 1, probability 0, space 0, times 0 [ 381.478729][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.4.1441 Not tainted syzkaller #0 PREEMPT(full) [ 381.478750][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.478760][T10607] Call Trace: [ 381.478767][T10607] [ 381.478775][T10607] dump_stack_lvl+0xe8/0x150 [ 381.478802][T10607] should_fail_ex+0x410/0x560 [ 381.478830][T10607] should_failslab+0xa8/0x100 [ 381.478847][T10607] __kmalloc_noprof+0xfe/0x720 [ 381.478869][T10607] ? tcf_idr_create+0x5d/0x6b0 [ 381.478994][T10607] ? tcf_idr_create+0x5d/0x6b0 [ 381.479017][T10607] tcf_idr_create+0x5d/0x6b0 [ 381.479040][T10607] tcf_idr_create_from_flags+0x60/0x80 [ 381.479062][T10607] tcf_gate_init+0x42b/0x15a0 [ 381.479123][T10607] ? __pfx___nla_validate_parse+0x10/0x10 [ 381.479143][T10607] ? __pfx_tcf_gate_init+0x10/0x10 [ 381.479162][T10607] ? __lock_acquire+0x6df/0x2e50 [ 381.479192][T10607] ? __pfx___nla_validate_parse+0x10/0x10 [ 381.479205][T10607] ? __lock_acquire+0x6df/0x2e50 [ 381.479232][T10607] ? __nla_validate_parse+0x2429/0x2d50 [ 381.479258][T10607] ? __nla_parse+0x40/0x60 [ 381.479279][T10607] tcf_action_init_1+0x4ba/0x740 [ 381.479304][T10607] ? __pfx_tcf_action_init_1+0x10/0x10 [ 381.479323][T10607] ? _raw_read_unlock+0x28/0x50 [ 381.479348][T10607] ? tc_action_load_ops+0x247/0x540 [ 381.479401][T10607] ? is_bpf_text_address+0x292/0x2b0 [ 381.479436][T10607] ? __nla_parse+0x40/0x60 [ 381.479458][T10607] tcf_action_init+0x30e/0xb10 [ 381.479495][T10607] ? __pfx_tcf_action_init+0x10/0x10 [ 381.479538][T10607] ? netlink_sendmsg+0x813/0xb40 [ 381.479564][T10607] ? sock_sendmsg_nosec+0x13a/0x180 [ 381.479590][T10607] ? __pfx___nla_validate_parse+0x10/0x10 [ 381.479608][T10607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.479660][T10607] tc_ctl_action+0x43b/0xc70 [ 381.479690][T10607] ? __pfx_tc_ctl_action+0x10/0x10 [ 381.479718][T10607] ? rcu_is_watching+0x16/0xb0 [ 381.479779][T10607] ? __pfx_tc_ctl_action+0x10/0x10 [ 381.479801][T10607] rtnetlink_rcv_msg+0x7b9/0xc00 [ 381.479872][T10607] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 381.479892][T10607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.479913][T10607] ? ref_tracker_free+0x689/0x830 [ 381.479944][T10607] ? __pfx_ref_tracker_free+0x10/0x10 [ 381.479973][T10607] ? __asan_memcpy+0x40/0x70 [ 381.479996][T10607] ? __skb_clone+0x5c/0x6c0 [ 381.480027][T10607] netlink_rcv_skb+0x226/0x4a0 [ 381.480054][T10607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.480078][T10607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.480114][T10607] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.480140][T10607] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.480171][T10607] netlink_unicast+0x7bd/0x940 [ 381.480203][T10607] netlink_sendmsg+0x813/0xb40 [ 381.480236][T10607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.480270][T10607] ? apparmor_socket_sendmsg+0x98/0x360 [ 381.480297][T10607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.480322][T10607] sock_sendmsg_nosec+0x13a/0x180 [ 381.480354][T10607] __sys_sendto+0x408/0x5a0 [ 381.480376][T10607] ? ksys_write+0x1e6/0x270 [ 381.480401][T10607] ? __pfx___sys_sendto+0x10/0x10 [ 381.480421][T10607] ? __mutex_unlock_slowpath+0x731/0x900 [ 381.480465][T10607] ? __pfx_ksys_write+0x10/0x10 [ 381.480500][T10607] __x64_sys_sendto+0xde/0x100 [ 381.480526][T10607] do_syscall_64+0x166/0x520 [ 381.480542][T10607] ? trace_irq_disable+0x3b/0x140 [ 381.480566][T10607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.480587][T10607] ? clear_bhb_loop+0x70/0xc0 [ 381.480608][T10607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.480627][T10607] RIP: 0033:0x7f5faa79e0d9 [ 381.480646][T10607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.480663][T10607] RSP: 002b:00007f5fab5ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 381.480684][T10607] RAX: ffffffffffffffda RBX: 00007f5faaa25fa0 RCX: 00007f5faa79e0d9 [ 381.480699][T10607] RDX: 0000000000000068 RSI: 0000200000000000 RDI: 0000000000000003 [ 381.480712][T10607] RBP: 00007f5fab5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 381.480725][T10607] R10: 0000000000040006 R11: 0000000000000246 R12: 0000000000000001 [ 381.480738][T10607] R13: 00007f5faaa26038 R14: 00007f5faaa25fa0 R15: 00007ffe972c5f58 [ 381.480768][T10607] [ 381.582181][ T5622] m920x_read = error: -19 [ 381.582205][ T5622] dvb-usb: error while querying for an remote control event. [ 381.690907][ T5622] m920x_read = error: -19 [ 381.690933][ T5622] dvb-usb: error while querying for an remote control event. [ 381.796174][ T5622] m920x_read = error: -19 [ 381.796199][ T5622] dvb-usb: error while querying for an remote control event. [ 381.905894][ T5622] m920x_read = error: -19 [ 381.905912][ T5622] dvb-usb: error while querying for an remote control event. [ 382.013449][ T5622] m920x_read = error: -19 [ 382.013486][ T5622] dvb-usb: error while querying for an remote control event. [ 382.073394][ T9] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 382.123453][ T5622] m920x_read = error: -19 [ 382.123495][ T5622] dvb-usb: error while querying for an remote control event. [ 382.233460][ T5622] m920x_read = error: -19 [ 382.233531][ T5622] dvb-usb: error while querying for an remote control event. [ 382.256483][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 382.257110][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 382.257141][ T9] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 382.258291][ T9] usb 4-1: config 200 has an invalid interface number: 97 but max is 0 [ 382.258316][ T9] usb 4-1: config 200 has no interface number 0 [ 382.258342][ T9] usb 4-1: config 200 interface 97 has no altsetting 0 [ 382.260391][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.260414][ T9] usb 4-1: Product: syz [ 382.260429][ T9] usb 4-1: Manufacturer: syz [ 382.260465][ T9] usb 4-1: SerialNumber: syz [ 382.343427][ T5622] m920x_read = error: -19 [ 382.343492][ T5622] dvb-usb: error while querying for an remote control event. [ 382.453915][ T5690] m920x_read = error: -19 [ 382.453952][ T5690] dvb-usb: error while querying for an remote control event. [ 382.478563][ T9] go7007 4-1:200.97: probe with driver go7007 failed with error -12 [ 382.482716][ T9] usb 4-1: USB disconnect, device number 85 [ 382.563456][ T5690] m920x_read = error: -19 [ 382.563501][ T5690] dvb-usb: error while querying for an remote control event. [ 382.673450][ T5690] m920x_read = error: -19 [ 382.677922][ T5690] dvb-usb: error while querying for an remote control event. [ 382.784013][ T5690] m920x_read = error: -19 [ 382.784049][ T5690] dvb-usb: error while querying for an remote control event. [ 382.893417][ T5690] m920x_read = error: -19 [ 382.893462][ T5690] dvb-usb: error while querying for an remote control event. [ 383.003478][ T5690] m920x_read = error: -19 [ 383.003523][ T5690] dvb-usb: error while querying for an remote control event. [ 383.108084][T10586] imon:send_packet: task interrupted [ 383.108124][T10586] imon:send_packet: packet tx failed (-512) [ 383.108174][T10586] imon:vfd_write: send packet #1 failed [ 383.124265][ T25] m920x_read = error: -19 [ 383.124291][ T25] dvb-usb: error while querying for an remote control event. [ 383.136941][ T25] usb 6-1: USB disconnect, device number 45 [ 383.234818][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 383.235046][ T5622] m920x_read = error: -19 [ 383.235070][ T5622] dvb-usb: error while querying for an remote control event. [ 383.333497][ T5690] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 383.353418][ T5622] m920x_read = error: -19 [ 383.353454][ T5622] dvb-usb: error while querying for an remote control event. [ 383.405135][ T9] usb 2-1: New USB device found, idVendor=2b13, idProduct=0bee, bcdDevice=ee.90 [ 383.406219][ T9] usb 2-1: config 10 has an invalid interface number: 177 but max is 0 [ 383.406244][ T9] usb 2-1: config 10 has no interface number 0 [ 383.406315][ T9] usb 2-1: config 10 interface 177 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 383.406338][ T9] usb 2-1: config 10 interface 177 altsetting 129 endpoint 0xA has invalid maxpacket 28967, setting to 64 [ 383.406365][ T9] usb 2-1: config 10 interface 177 altsetting 129 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 383.406390][ T9] usb 2-1: config 10 interface 177 altsetting 129 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 383.406414][ T9] usb 2-1: config 10 interface 177 altsetting 129 endpoint 0x85 has invalid maxpacket 24936, setting to 1024 [ 383.406440][ T9] usb 2-1: config 10 interface 177 altsetting 129 bulk endpoint 0x85 has invalid maxpacket 1024 [ 383.406463][ T9] usb 2-1: config 10 interface 177 altsetting 129 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 383.406489][ T9] usb 2-1: config 10 interface 177 has no altsetting 0 [ 383.408684][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.408709][ T9] usb 2-1: Product: 斁䏧娣蜴㪻Њ蠎屙伧뱲Ø眯턘楶䘮ﴻ腏⃣㇊姑ᔴ⛣鋞⪌鐤䌽쾉氭ᕲ列ꕛ쉭䯧籫䑫ሖ䚳敿ෝ笔ㇷ⛶翟姦鶝ࢗ铁㸑쐈悬깿僶떶⣳迀璯젛僁諆蘠㗆㝬繝郳綅顶ꭊ瞤꛶꒶߷莄䈘ྴ墄탖濞爏꛿ [ 383.408735][ T9] usb 2-1: Manufacturer: ㏩剷⛜稖Ꝭ鬅椪零尯荅ﭔꄈᐢ军瞒꿋쑂᱁ẅ෰樥悗╸㻭ꩌࡍ씆꼸纍၉豗㊀졈ᷟ巳쭊蘥峒飻α⛼⫊뷹뗽븗汉዆ [ 383.408758][ T9] usb 2-1: SerialNumber: ᥝ륞쩿ffi쎷ዊ︈͢楌愯殴ꏴꃜ툛덭倱䡪૿笓쌭宖壮ኚ贡ኮ⒫먜䬷毁⾣뱫؅鐇Ҧ炢若帠誫錼稗엠蒙⏢呸᧳琉옑㓕倫❥뉩䶁䯦ꨕ簾ㄴ䡡࠯閆규扥왫ℵ荣즹苕Ṹ괩鎺볘挲尋功漄歯벙吓礽㌱듕ঔ铁滃䉠羀䃸ꕖ骗롛岘臉칾頣⋋㫞㐣㎇㛴륜솃瀢薖췭͟䕄ມᧅ㗶 [ 383.412987][T10616] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 383.464852][ T25] m920x_read = error: -19 [ 383.464881][ T25] dvb-usb: error while querying for an remote control event. [ 383.464932][ T5690] usb 4-1: device descriptor read/64, error -71 [ 383.584638][ T25] m920x_read = error: -19 [ 383.584663][ T25] dvb-usb: error while querying for an remote control event. [ 383.683589][ T25] m920x_read = error: -19 [ 383.683646][ T25] dvb-usb: error while querying for an remote control event. [ 383.713451][ T5690] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 383.796804][ T25] m920x_read = error: -19 [ 383.796846][ T25] dvb-usb: error while querying for an remote control event. [ 383.843476][ T5690] usb 4-1: device descriptor read/64, error -71 [ 383.903834][ T25] m920x_read = error: -19 [ 383.903876][ T25] dvb-usb: error while querying for an remote control event. [ 383.953866][ T5690] usb usb4-port1: attempt power cycle [ 384.013643][ T25] m920x_read = error: -19 [ 384.013699][ T25] dvb-usb: error while querying for an remote control event. [ 384.123554][ T25] m920x_read = error: -19 [ 384.123604][ T25] dvb-usb: error while querying for an remote control event. [ 384.235862][ T25] m920x_read = error: -19 [ 384.235911][ T25] dvb-usb: error while querying for an remote control event. [ 384.256487][T10630] FAULT_INJECTION: forcing a failure. [ 384.256487][T10630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.256547][T10630] CPU: 1 UID: 0 PID: 10630 Comm: syz.5.1451 Not tainted syzkaller #0 PREEMPT(full) [ 384.256571][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.256584][T10630] Call Trace: [ 384.256592][T10630] [ 384.256601][T10630] dump_stack_lvl+0xe8/0x150 [ 384.256632][T10630] should_fail_ex+0x410/0x560 [ 384.256666][T10630] _copy_from_iter+0x1d3/0x1660 [ 384.256705][T10630] ? __pfx__copy_from_iter+0x10/0x10 [ 384.256734][T10630] ? alloc_pages_noprof+0x140/0x2b0 [ 384.256757][T10630] ? skb_page_frag_refill+0x119/0x460 [ 384.256792][T10630] tcp_sendmsg_locked+0x2620/0x55c0 [ 384.256901][T10630] ? __lock_acquire+0x6df/0x2e50 [ 384.256971][T10630] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 384.257033][T10630] ? tcp_sendmsg+0x21/0x50 [ 384.257054][T10630] ? __local_bh_enable_ip+0xd6/0x140 [ 384.257089][T10630] tcp_sendmsg+0x2f/0x50 [ 384.257111][T10630] ? __pfx_inet6_sendmsg+0x10/0x10 [ 384.257174][T10630] sock_sendmsg_nosec+0x90/0x180 [ 384.257206][T10630] sock_write_iter+0x2de/0x3e0 [ 384.257235][T10630] ? __pfx_sock_write_iter+0x10/0x10 [ 384.257268][T10630] ? bpf_lsm_file_permission+0x9/0x20 [ 384.257290][T10630] ? security_file_permission+0x75/0x260 [ 384.257329][T10630] vfs_write+0x612/0xba0 [ 384.257362][T10630] ? __pfx_vfs_write+0x10/0x10 [ 384.257395][T10630] ? __fget_files+0x2a/0x420 [ 384.257425][T10630] ksys_write+0x150/0x270 [ 384.257451][T10630] ? __pfx_ksys_write+0x10/0x10 [ 384.257484][T10630] do_syscall_64+0x166/0x520 [ 384.257503][T10630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.257524][T10630] ? clear_bhb_loop+0x70/0xc0 [ 384.257548][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.257567][T10630] RIP: 0033:0x7f9b8059e0d9 [ 384.257585][T10630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.257602][T10630] RSP: 002b:00007f9b8152d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.257624][T10630] RAX: ffffffffffffffda RBX: 00007f9b80825fa0 RCX: 00007f9b8059e0d9 [ 384.257639][T10630] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 384.257652][T10630] RBP: 00007f9b8152d090 R08: 0000000000000000 R09: 0000000000000000 [ 384.257665][T10630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.257677][T10630] R13: 00007f9b80826038 R14: 00007f9b80825fa0 R15: 00007fff087d9eb8 [ 384.257708][T10630] [ 384.303457][ T5690] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 384.324092][ T5690] usb 4-1: device descriptor read/8, error -71 [ 384.343567][ T25] m920x_read = error: -19 [ 384.343592][ T25] dvb-usb: error while querying for an remote control event. [ 384.453736][ T25] m920x_read = error: -19 [ 384.453772][ T25] dvb-usb: error while querying for an remote control event. [ 384.563588][ T5622] m920x_read = error: -19 [ 384.563627][ T5622] dvb-usb: error while querying for an remote control event. [ 384.564057][ T5690] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 384.584412][ T5690] usb 4-1: device descriptor read/8, error -71 [ 384.676410][ T5622] m920x_read = error: -19 [ 384.676461][ T5622] dvb-usb: error while querying for an remote control event. [ 384.694429][ T5690] usb usb4-port1: unable to enumerate USB device [ 384.783573][ T5690] m920x_read = error: -19 [ 384.783650][ T5690] dvb-usb: error while querying for an remote control event. [ 384.790172][T10641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.792353][T10641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.873407][ T6075] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 384.893683][ T5690] m920x_read = error: -19 [ 384.893732][ T5690] dvb-usb: error while querying for an remote control event. [ 385.003612][ T5690] m920x_read = error: -19 [ 385.003668][ T5690] dvb-usb: error while querying for an remote control event. [ 385.037787][ T9] usb-storage 2-1:10.177: USB Mass Storage device detected [ 385.045647][ T6075] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 385.057624][ T6075] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 385.065617][ T6075] usb 6-1: can't read configurations, error -61 [ 385.100403][ T9] usb 2-1: USB disconnect, device number 67 [ 385.113764][ T5690] m920x_read = error: -19 [ 385.113807][ T5690] dvb-usb: error while querying for an remote control event. [ 385.223408][ T6075] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 385.231262][ T5690] m920x_read = error: -19 [ 385.231290][ T5690] dvb-usb: error while querying for an remote control event. [ 385.333859][ T5690] m920x_read = error: -19 [ 385.333895][ T5690] dvb-usb: error while querying for an remote control event. [ 385.374462][ T6075] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 385.386373][ T6075] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 385.386426][ T6075] usb 6-1: can't read configurations, error -61 [ 385.387740][ T6075] usb usb6-port1: attempt power cycle [ 385.443592][ T5690] m920x_read = error: -19 [ 385.443633][ T5690] dvb-usb: error while querying for an remote control event. [ 385.554277][ T25] m920x_read = error: -19 [ 385.554322][ T25] dvb-usb: error while querying for an remote control event. [ 385.663604][ T5690] m920x_read = error: -19 [ 385.663661][ T5690] dvb-usb: error while querying for an remote control event. [ 385.703487][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 385.743415][ T6075] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 385.764837][ T6075] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 385.766239][ T6075] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 385.766272][ T6075] usb 6-1: can't read configurations, error -61 [ 385.781766][ T5690] m920x_read = error: -19 [ 385.781783][ T5690] dvb-usb: error while querying for an remote control event. [ 385.853458][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 385.859157][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 385.860579][ T9] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 385.860624][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 385.860650][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 385.860674][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 385.862734][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.862756][ T9] usb 2-1: Product: syz [ 385.862771][ T9] usb 2-1: Manufacturer: syz [ 385.862785][ T9] usb 2-1: SerialNumber: syz [ 385.867124][ T9] usb 2-1: config 0 descriptor?? [ 385.893728][ T6075] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 385.903105][ T5690] m920x_read = error: -19 [ 385.903132][ T5690] dvb-usb: error while querying for an remote control event. [ 385.915142][ T6075] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 385.917626][ T6075] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 385.917661][ T6075] usb 6-1: can't read configurations, error -61 [ 385.918196][ T6075] usb usb6-port1: unable to enumerate USB device [ 386.003611][ T5690] m920x_read = error: -19 [ 386.003666][ T5690] dvb-usb: error while querying for an remote control event. [ 386.094117][ T9] appledisplay: Apple Cinema Display connected [ 386.113529][ T5622] m920x_read = error: -19 [ 386.113568][ T5622] dvb-usb: error while querying for an remote control event. [ 386.224454][ T5690] m920x_read = error: -19 [ 386.224495][ T5690] dvb-usb: error while querying for an remote control event. [ 386.331825][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.336911][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.340714][ T5690] m920x_read = error: -19 [ 386.340741][ T5690] dvb-usb: error while querying for an remote control event. [ 386.342926][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.346272][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.443622][ T5690] m920x_read = error: -19 [ 386.443672][ T5690] dvb-usb: error while querying for an remote control event. [ 386.533424][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 386.553538][ T5690] m920x_read = error: -19 [ 386.553584][ T5690] dvb-usb: error while querying for an remote control event. [ 386.663579][ T5622] m920x_read = error: -19 [ 386.663635][ T5622] dvb-usb: error while querying for an remote control event. [ 386.685740][ T9] usb 4-1: New USB device found, idVendor=2b13, idProduct=0bee, bcdDevice=ee.90 [ 386.687223][ T9] usb 4-1: config 10 has an invalid interface number: 177 but max is 0 [ 386.687249][ T9] usb 4-1: config 10 has no interface number 0 [ 386.687350][ T9] usb 4-1: config 10 interface 177 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 386.687373][ T9] usb 4-1: config 10 interface 177 altsetting 129 endpoint 0xA has invalid maxpacket 28967, setting to 64 [ 386.687399][ T9] usb 4-1: config 10 interface 177 altsetting 129 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 386.687424][ T9] usb 4-1: config 10 interface 177 altsetting 129 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 386.687508][ T9] usb 4-1: config 10 interface 177 altsetting 129 endpoint 0x85 has invalid maxpacket 24936, setting to 1024 [ 386.687534][ T9] usb 4-1: config 10 interface 177 altsetting 129 bulk endpoint 0x85 has invalid maxpacket 1024 [ 386.687557][ T9] usb 4-1: config 10 interface 177 altsetting 129 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 386.687582][ T9] usb 4-1: config 10 interface 177 has no altsetting 0 [ 386.690770][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.690795][ T9] usb 4-1: Product: 斁䏧娣蜴㪻Њ蠎屙伧뱲Ø眯턘楶䘮ﴻ腏⃣㇊姑ᔴ⛣鋞⪌鐤䌽쾉氭ᕲ列ꕛ쉭䯧籫䑫ሖ䚳敿ෝ笔ㇷ⛶翟姦鶝ࢗ铁㸑쐈悬깿僶떶⣳迀璯젛僁諆蘠㗆㝬繝郳綅顶ꭊ瞤꛶꒶߷莄䈘ྴ墄탖濞爏꛿ [ 386.690822][ T9] usb 4-1: Manufacturer: ㏩剷⛜稖Ꝭ鬅椪零尯荅ﭔꄈᐢ军瞒꿋쑂᱁ẅ෰樥悗╸㻭ꩌࡍ씆꼸纍၉豗㊀졈ᷟ巳쭊蘥峒飻α⛼⫊뷹뗽븗汉዆ [ 386.690845][ T9] usb 4-1: SerialNumber: ᥝ륞쩿ffi쎷ዊ︈͢楌愯殴ꏴꃜ툛덭倱䡪૿笓쌭宖壮ኚ贡ኮ⒫먜䬷毁⾣뱫؅鐇Ҧ炢若帠誫錼稗엠蒙⏢呸᧳琉옑㓕倫❥뉩䶁䯦ꨕ簾ㄴ䡡࠯閆규扥왫ℵ荣즹苕Ṹ괩鎺볘挲尋功漄歯벙吓礽㌱듕ঔ铁滃䉠羀䃸ꕖ骗롛岘臉칾頣⋋㫞㐣㎇㛴륜솃瀢薖췭͟䕄ມᧅ㗶 [ 386.699544][T10654] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 386.778897][ T5622] m920x_read = error: -19 [ 386.778926][ T5622] dvb-usb: error while querying for an remote control event. [ 386.883672][ T5622] m920x_read = error: -19 [ 386.883701][ T5622] dvb-usb: error while querying for an remote control event. [ 386.993644][ T5622] m920x_read = error: -19 [ 386.993689][ T5622] dvb-usb: error while querying for an remote control event. [ 387.103654][ T5622] m920x_read = error: -19 [ 387.103705][ T5622] dvb-usb: error while querying for an remote control event. [ 387.213572][ T5622] m920x_read = error: -19 [ 387.213619][ T5622] dvb-usb: error while querying for an remote control event. [ 387.323645][ T5622] m920x_read = error: -19 [ 387.323688][ T5622] dvb-usb: error while querying for an remote control event. [ 387.433613][ T5622] m920x_read = error: -19 [ 387.433661][ T5622] dvb-usb: error while querying for an remote control event. [ 387.544319][ T5622] m920x_read = error: -19 [ 387.544366][ T5622] dvb-usb: error while querying for an remote control event. [ 387.568144][T10659] syzkaller1: entered allmulticast mode [ 387.622742][T10661] FAULT_INJECTION: forcing a failure. [ 387.622742][T10661] name failslab, interval 1, probability 0, space 0, times 0 [ 387.636123][T10661] CPU: 1 UID: 0 PID: 10661 Comm: syz.3.1464 Not tainted syzkaller #0 PREEMPT(full) [ 387.636154][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.636167][T10661] Call Trace: [ 387.636176][T10661] [ 387.636185][T10661] dump_stack_lvl+0xe8/0x150 [ 387.636217][T10661] should_fail_ex+0x410/0x560 [ 387.636251][T10661] should_failslab+0xa8/0x100 [ 387.636274][T10661] __kmalloc_cache_noprof+0xa3/0x600 [ 387.636303][T10661] ? smc_pnet_add+0xf50/0x1510 [ 387.636454][T10661] ? smc_pnet_add+0xf50/0x1510 [ 387.636483][T10661] smc_pnet_add+0xf50/0x1510 [ 387.636508][T10661] ? smc_pnet_add+0xa01/0x1510 [ 387.636528][T10661] ? __kmalloc_noprof+0x364/0x720 [ 387.636558][T10661] ? __pfx_smc_pnet_add+0x10/0x10 [ 387.636585][T10661] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 387.636609][T10661] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 387.636657][T10661] genl_family_rcv_msg_doit+0x233/0x340 [ 387.636686][T10661] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 387.636722][T10661] ? bpf_lsm_capable+0x9/0x20 [ 387.636756][T10661] ? security_capable+0x7e/0x2c0 [ 387.636856][T10661] genl_rcv_msg+0x614/0x7a0 [ 387.636883][T10661] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.636904][T10661] ? __pfx_smc_pnet_add+0x10/0x10 [ 387.636942][T10661] netlink_rcv_skb+0x226/0x4a0 [ 387.636973][T10661] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.637000][T10661] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.637042][T10661] ? down_read+0x2be/0x330 [ 387.637067][T10661] genl_rcv+0x28/0x40 [ 387.637087][T10661] netlink_unicast+0x7bd/0x940 [ 387.637121][T10661] netlink_sendmsg+0x813/0xb40 [ 387.637159][T10661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.637194][T10661] ? apparmor_socket_sendmsg+0x98/0x360 [ 387.637223][T10661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.637254][T10661] sock_sendmsg_nosec+0x13a/0x180 [ 387.637289][T10661] ____sys_sendmsg+0x54e/0x850 [ 387.637325][T10661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.637360][T10661] ? import_iovec+0x73/0xa0 [ 387.637385][T10661] ___sys_sendmsg+0x2a5/0x360 [ 387.637409][T10661] ? __lock_acquire+0x6df/0x2e50 [ 387.637442][T10661] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.637504][T10661] ? __fget_files+0x2a/0x420 [ 387.637527][T10661] ? __fget_files+0x3a2/0x420 [ 387.637560][T10661] __x64_sys_sendmsg+0x1b1/0x290 [ 387.637589][T10661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.637636][T10661] do_syscall_64+0x166/0x520 [ 387.637654][T10661] ? trace_irq_disable+0x3b/0x140 [ 387.637681][T10661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.637703][T10661] ? clear_bhb_loop+0x70/0xc0 [ 387.637727][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.637748][T10661] RIP: 0033:0x7f007b39e0d9 [ 387.637767][T10661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.637784][T10661] RSP: 002b:00007f007c2cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.637807][T10661] RAX: ffffffffffffffda RBX: 00007f007b625fa0 RCX: 00007f007b39e0d9 [ 387.637822][T10661] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 387.637835][T10661] RBP: 00007f007c2cc090 R08: 0000000000000000 R09: 0000000000000000 [ 387.637849][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.637861][T10661] R13: 00007f007b626038 R14: 00007f007b625fa0 R15: 00007ffc1c710c68 [ 387.637895][T10661] [ 387.676815][ T5622] m920x_read = error: -19 [ 387.676841][ T5622] dvb-usb: error while querying for an remote control event. [ 387.992033][ T5690] m920x_read = error: -19 [ 387.996524][ T5690] dvb-usb: error while querying for an remote control event. [ 388.113505][ T5690] m920x_read = error: -19 [ 388.119448][ T5690] dvb-usb: error while querying for an remote control event. [ 388.223431][ T5690] m920x_read = error: -19 [ 388.223473][ T5690] dvb-usb: error while querying for an remote control event. [ 388.333428][ T5690] m920x_read = error: -19 [ 388.333469][ T5690] dvb-usb: error while querying for an remote control event. [ 388.375009][ T2255] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 388.443446][ T5690] m920x_read = error: -19 [ 388.449818][ T5690] dvb-usb: error while querying for an remote control event. [ 388.550922][ T5690] usb 2-1: USB disconnect, device number 68 [ 388.551062][ C0] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 388.554467][ T2255] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 388.559527][ T2255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.559553][ T2255] usb 6-1: Product: syz [ 388.559568][ T2255] usb 6-1: Manufacturer: syz [ 388.559583][ T2255] usb 6-1: SerialNumber: syz [ 388.606594][ T25] m920x_read = error: -19 [ 388.606628][ T25] dvb-usb: error while querying for an remote control event. [ 388.614396][ T5690] appledisplay: Apple Cinema Display disconnected [ 388.628162][ T9] usb-storage 4-1:10.177: USB Mass Storage device detected [ 388.666049][ T2255] usb 6-1: config 0 descriptor?? [ 388.698480][ T9] usb 4-1: USB disconnect, device number 90 [ 388.713621][T10674] netlink: NAT attribute has 5 unknown bytes [ 388.714830][ T5622] m920x_read = error: -19 [ 388.714853][ T5622] dvb-usb: error while querying for an remote control event. [ 388.740757][T10674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.823409][ T25] m920x_read = error: -19 [ 388.823460][ T25] dvb-usb: error while querying for an remote control event. [ 388.879108][ T2255] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 388.933442][ T25] m920x_read = error: -19 [ 388.933485][ T25] dvb-usb: error while querying for an remote control event. [ 389.043645][ T25] m920x_read = error: -19 [ 389.043694][ T25] dvb-usb: error while querying for an remote control event. [ 389.153424][ T25] m920x_read = error: -19 [ 389.153476][ T25] dvb-usb: error while querying for an remote control event. [ 389.264120][ T25] m920x_read = error: -19 [ 389.264167][ T25] dvb-usb: error while querying for an remote control event. [ 389.373570][ T25] m920x_read = error: -19 [ 389.373610][ T25] dvb-usb: error while querying for an remote control event. [ 389.483475][ T25] m920x_read = error: -19 [ 389.487994][ T25] dvb-usb: error while querying for an remote control event. [ 389.593446][ T25] m920x_read = error: -19 [ 389.593483][ T25] dvb-usb: error while querying for an remote control event. [ 389.703434][ T25] m920x_read = error: -19 [ 389.703475][ T25] dvb-usb: error while querying for an remote control event. [ 389.814219][ T25] m920x_read = error: -19 [ 389.814268][ T25] dvb-usb: error while querying for an remote control event. [ 389.923500][ T25] m920x_read = error: -19 [ 389.923540][ T25] dvb-usb: error while querying for an remote control event. [ 390.033890][ T25] m920x_read = error: -19 [ 390.033945][ T25] dvb-usb: error while querying for an remote control event. [ 390.143442][ T25] m920x_read = error: -19 [ 390.143490][ T25] dvb-usb: error while querying for an remote control event. [ 390.254289][ T25] m920x_read = error: -19 [ 390.254356][ T25] dvb-usb: error while querying for an remote control event. [ 390.298427][ T2255] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 390.304576][ T2255] usb 6-1: USB disconnect, device number 50 [ 390.364207][ T25] m920x_read = error: -19 [ 390.364247][ T25] dvb-usb: error while querying for an remote control event. [ 390.473643][ T25] m920x_read = error: -19 [ 390.473702][ T25] dvb-usb: error while querying for an remote control event. [ 390.583861][ T25] m920x_read = error: -19 [ 390.583923][ T25] dvb-usb: error while querying for an remote control event. [ 390.693513][ T25] m920x_read = error: -19 [ 390.697962][ T25] dvb-usb: error while querying for an remote control event. [ 390.803525][ T25] m920x_read = error: -19 [ 390.808025][ T25] dvb-usb: error while querying for an remote control event. [ 390.915293][ T5690] m920x_read = error: -19 [ 390.919847][ T5690] dvb-usb: error while querying for an remote control event. [ 391.036914][ T5622] m920x_read = error: -19 [ 391.036955][ T5622] dvb-usb: error while querying for an remote control event. [ 391.143512][ T25] m920x_read = error: -19 [ 391.143546][ T25] dvb-usb: error while querying for an remote control event. [ 391.183431][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 391.184012][ T5690] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 391.220883][T10689] FAULT_INJECTION: forcing a failure. [ 391.220883][T10689] name failslab, interval 1, probability 0, space 0, times 0 [ 391.220919][T10689] CPU: 1 UID: 0 PID: 10689 Comm: syz.4.1476 Not tainted syzkaller #0 PREEMPT(full) [ 391.220940][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.220951][T10689] Call Trace: [ 391.220960][T10689] [ 391.220967][T10689] dump_stack_lvl+0xe8/0x150 [ 391.220994][T10689] should_fail_ex+0x410/0x560 [ 391.221032][T10689] should_failslab+0xa8/0x100 [ 391.221055][T10689] __kmalloc_noprof+0xfe/0x720 [ 391.221082][T10689] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 391.221106][T10689] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 391.221134][T10689] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 391.221163][T10689] genl_family_rcv_msg_doit+0xda/0x340 [ 391.221190][T10689] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 391.221218][T10689] ? apparmor_capable+0x126/0x170 [ 391.221243][T10689] ? bpf_lsm_capable+0x9/0x20 [ 391.221266][T10689] ? security_capable+0x7e/0x2c0 [ 391.221298][T10689] genl_rcv_msg+0x614/0x7a0 [ 391.221325][T10689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.221343][T10689] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 391.221490][T10689] ? __pfx_nl80211_new_mpath+0x10/0x10 [ 391.221515][T10689] ? __pfx_nl80211_post_doit+0x10/0x10 [ 391.221536][T10689] ? __pfx_ref_tracker_free+0x10/0x10 [ 391.221559][T10689] ? __asan_memcpy+0x40/0x70 [ 391.221579][T10689] ? __skb_clone+0x5c/0x6c0 [ 391.221608][T10689] netlink_rcv_skb+0x226/0x4a0 [ 391.221635][T10689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.221656][T10689] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.221696][T10689] ? down_read+0x2be/0x330 [ 391.221722][T10689] genl_rcv+0x28/0x40 [ 391.221740][T10689] netlink_unicast+0x7bd/0x940 [ 391.221773][T10689] netlink_sendmsg+0x813/0xb40 [ 391.221807][T10689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.221841][T10689] ? apparmor_socket_sendmsg+0x98/0x360 [ 391.221868][T10689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.221893][T10689] sock_sendmsg_nosec+0x13a/0x180 [ 391.221926][T10689] ____sys_sendmsg+0x54e/0x850 [ 391.221954][T10689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.221987][T10689] ? import_iovec+0x73/0xa0 [ 391.222010][T10689] ___sys_sendmsg+0x2a5/0x360 [ 391.222056][T10689] ? __lock_acquire+0x6df/0x2e50 [ 391.222087][T10689] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.222143][T10689] ? __fget_files+0x2a/0x420 [ 391.222165][T10689] ? __fget_files+0x3a2/0x420 [ 391.222196][T10689] __x64_sys_sendmsg+0x1b1/0x290 [ 391.222223][T10689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.222267][T10689] do_syscall_64+0x166/0x520 [ 391.222284][T10689] ? trace_irq_disable+0x3b/0x140 [ 391.222311][T10689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.222332][T10689] ? clear_bhb_loop+0x70/0xc0 [ 391.222355][T10689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.222374][T10689] RIP: 0033:0x7f5faa79e0d9 [ 391.222393][T10689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.222410][T10689] RSP: 002b:00007f5fab5ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.222431][T10689] RAX: ffffffffffffffda RBX: 00007f5faaa25fa0 RCX: 00007f5faa79e0d9 [ 391.222446][T10689] RDX: 0000000004000080 RSI: 0000200000000b40 RDI: 0000000000000004 [ 391.222460][T10689] RBP: 00007f5fab5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 391.222472][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.222484][T10689] R13: 00007f5faaa26038 R14: 00007f5faaa25fa0 R15: 00007ffe972c5f58 [ 391.222516][T10689] [ 391.253482][ T25] m920x_read = error: -19 [ 391.253508][ T25] dvb-usb: error while querying for an remote control event. [ 391.309405][T10691] FAULT_INJECTION: forcing a failure. [ 391.309405][T10691] name failslab, interval 1, probability 0, space 0, times 0 [ 391.309438][T10691] CPU: 1 UID: 0 PID: 10691 Comm: syz.4.1477 Not tainted syzkaller #0 PREEMPT(full) [ 391.309460][T10691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.309472][T10691] Call Trace: [ 391.309479][T10691] [ 391.309488][T10691] dump_stack_lvl+0xe8/0x150 [ 391.309518][T10691] should_fail_ex+0x410/0x560 [ 391.309551][T10691] should_failslab+0xa8/0x100 [ 391.309573][T10691] __kmalloc_noprof+0xfe/0x720 [ 391.309600][T10691] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 391.309623][T10691] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 391.309652][T10691] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 391.309680][T10691] genl_family_rcv_msg_doit+0xda/0x340 [ 391.309707][T10691] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 391.309736][T10691] ? apparmor_capable+0x126/0x170 [ 391.309760][T10691] ? bpf_lsm_capable+0x9/0x20 [ 391.309784][T10691] ? security_capable+0x7e/0x2c0 [ 391.309817][T10691] genl_rcv_msg+0x614/0x7a0 [ 391.309843][T10691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.309862][T10691] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 391.309884][T10691] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 391.309912][T10691] ? __pfx_nl80211_post_doit+0x10/0x10 [ 391.309936][T10691] ? __pfx_ref_tracker_free+0x10/0x10 [ 391.309965][T10691] ? __asan_memcpy+0x40/0x70 [ 391.309988][T10691] ? __skb_clone+0x5c/0x6c0 [ 391.310026][T10691] netlink_rcv_skb+0x226/0x4a0 [ 391.310053][T10691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.310078][T10691] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.310117][T10691] ? down_read+0x2be/0x330 [ 391.310142][T10691] genl_rcv+0x28/0x40 [ 391.310160][T10691] netlink_unicast+0x7bd/0x940 [ 391.310193][T10691] netlink_sendmsg+0x813/0xb40 [ 391.310228][T10691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.310262][T10691] ? apparmor_socket_sendmsg+0x98/0x360 [ 391.310288][T10691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.310314][T10691] sock_sendmsg_nosec+0x13a/0x180 [ 391.310346][T10691] ____sys_sendmsg+0x54e/0x850 [ 391.310375][T10691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.310408][T10691] ? import_iovec+0x73/0xa0 [ 391.310431][T10691] ___sys_sendmsg+0x2a5/0x360 [ 391.310454][T10691] ? __lock_acquire+0x6df/0x2e50 [ 391.310493][T10691] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.310550][T10691] ? __fget_files+0x2a/0x420 [ 391.310571][T10691] ? __fget_files+0x3a2/0x420 [ 391.310603][T10691] __x64_sys_sendmsg+0x1b1/0x290 [ 391.310630][T10691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.310673][T10691] do_syscall_64+0x166/0x520 [ 391.310691][T10691] ? trace_irq_disable+0x3b/0x140 [ 391.310717][T10691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.310737][T10691] ? clear_bhb_loop+0x70/0xc0 [ 391.310761][T10691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.310781][T10691] RIP: 0033:0x7f5faa79e0d9 [ 391.310799][T10691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.310816][T10691] RSP: 002b:00007f5fab5ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.310837][T10691] RAX: ffffffffffffffda RBX: 00007f5faaa25fa0 RCX: 00007f5faa79e0d9 [ 391.310851][T10691] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 391.310864][T10691] RBP: 00007f5fab5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 391.310877][T10691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.310889][T10691] R13: 00007f5faaa26038 R14: 00007f5faaa25fa0 R15: 00007ffe972c5f58 [ 391.310919][T10691] [ 391.334188][ T5690] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 391.334708][ T5690] usb 2-1: config 0 has no interfaces? [ 391.334739][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.339892][ T5690] usb 2-1: config 0 descriptor?? [ 391.363441][ T5690] m920x_read = error: -19 [ 391.363465][ T5690] dvb-usb: error while querying for an remote control event. [ 391.415541][ T6075] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 391.457829][ T9] usb 6-1: New USB device found, idVendor=2b13, idProduct=0bee, bcdDevice=ee.90 [ 391.474436][ T5690] m920x_read = error: -19 [ 391.474462][ T5690] dvb-usb: error while querying for an remote control event. [ 391.496765][ T9] usb 6-1: config 10 has an invalid interface number: 177 but max is 0 [ 391.496795][ T9] usb 6-1: config 10 has no interface number 0 [ 391.496837][ T9] usb 6-1: config 10 interface 177 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 391.496860][ T9] usb 6-1: config 10 interface 177 altsetting 129 endpoint 0xA has invalid maxpacket 28967, setting to 64 [ 391.496887][ T9] usb 6-1: config 10 interface 177 altsetting 129 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 391.496913][ T9] usb 6-1: config 10 interface 177 altsetting 129 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 391.496937][ T9] usb 6-1: config 10 interface 177 altsetting 129 endpoint 0x85 has invalid maxpacket 24936, setting to 1024 [ 391.496961][ T9] usb 6-1: config 10 interface 177 altsetting 129 bulk endpoint 0x85 has invalid maxpacket 1024 [ 391.496983][ T9] usb 6-1: config 10 interface 177 altsetting 129 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 391.497008][ T9] usb 6-1: config 10 interface 177 has no altsetting 0 [ 391.583528][ T5690] m920x_read = error: -19 [ 391.583554][ T5690] dvb-usb: error while querying for an remote control event. [ 391.585182][ T6075] usb 4-1: Using ep0 maxpacket: 32 [ 391.585377][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.597643][ T6075] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 391.610535][ T9] usb 6-1: Product: 斁䏧娣蜴㪻Њ蠎屙伧뱲Ø眯턘楶䘮ﴻ腏⃣㇊姑ᔴ⛣鋞⪌鐤䌽쾉氭ᕲ列ꕛ쉭䯧籫䑫ሖ䚳敿ෝ笔ㇷ⛶翟姦鶝ࢗ铁㸑쐈悬깿僶떶⣳迀璯젛僁諆蘠㗆㝬繝郳綅顶ꭊ瞤꛶꒶߷莄䈘ྴ墄탖濞爏꛿ [ 391.610567][ T9] usb 6-1: Manufacturer: ㏩剷⛜稖Ꝭ鬅椪零尯荅ﭔꄈᐢ军瞒꿋쑂᱁ẅ෰樥悗╸㻭ꩌࡍ씆꼸纍၉豗㊀졈ᷟ巳쭊蘥峒飻α⛼⫊뷹뗽븗汉዆ [ 391.610590][ T9] usb 6-1: SerialNumber: ᥝ륞쩿ffi쎷ዊ︈͢楌愯殴ꏴꃜ툛덭倱䡪૿笓쌭宖壮ኚ贡ኮ⒫먜䬷毁⾣뱫؅鐇Ҧ炢若帠誫錼稗엠蒙⏢呸᧳琉옑㓕倫❥뉩䶁䯦ꨕ簾ㄴ䡡࠯閆규扥왫ℵ荣즹苕Ṹ괩鎺볘挲尋功漄歯벙吓礽㌱듕ঔ铁滃䉠羀䃸ꕖ骗롛岘臉칾頣⋋㫞㐣㎇㛴륜솃瀢薖췭͟䕄ມᧅ㗶 [ 391.681005][ T6075] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 391.681060][ T6075] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 391.681084][ T6075] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.681109][ T6075] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 391.693900][T10681] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 391.697802][ T5690] m920x_read = error: -19 [ 391.697827][ T5690] dvb-usb: error while querying for an remote control event. [ 391.739665][ T6075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.739692][ T6075] usb 4-1: Product: syz [ 391.739706][ T6075] usb 4-1: Manufacturer: syz [ 391.739721][ T6075] usb 4-1: SerialNumber: syz [ 391.754012][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 391.757174][ T6075] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input88 [ 391.804253][ T5690] m920x_read = error: -19 [ 391.804279][ T5690] dvb-usb: error while querying for an remote control event. [ 391.834240][ T5697] usb 2-1: USB disconnect, device number 69 [ 391.917064][ T25] m920x_read = error: -19 [ 391.917091][ T25] dvb-usb: error while querying for an remote control event. [ 391.983384][ T6075] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 391.983412][ T6075] (id 0x00) [ 392.030224][ T25] m920x_read = error: -19 [ 392.030251][ T25] dvb-usb: error while querying for an remote control event. [ 392.133363][ T6075] rc_core: IR keymap rc-imon-pad not found [ 392.133412][ T6075] Registered IR keymap rc-empty [ 392.133488][ T6075] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 392.133505][ T6075] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 392.177529][ T6075] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 392.186124][ T6075] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input89 [ 392.213717][ T6075] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:91> initialized [ 392.477702][ T5690] m920x_read = error: -19 [ 392.477741][ T5690] dvb-usb: error while querying for an remote control event. [ 392.583611][ T5690] m920x_read = error: -19 [ 392.589545][ T5690] dvb-usb: error while querying for an remote control event. [ 392.658877][T10706] FAULT_INJECTION: forcing a failure. [ 392.658877][T10706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.658959][T10706] CPU: 0 UID: 0 PID: 10706 Comm: syz.1.1480 Not tainted syzkaller #0 PREEMPT(full) [ 392.658987][T10706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.658998][T10706] Call Trace: [ 392.659007][T10706] [ 392.659015][T10706] dump_stack_lvl+0xe8/0x150 [ 392.659043][T10706] should_fail_ex+0x410/0x560 [ 392.659070][T10706] strncpy_from_user+0x36/0x2c0 [ 392.659097][T10706] do_getname+0x77/0x250 [ 392.659120][T10706] user_path_at+0x2a/0x160 [ 392.659147][T10706] __se_sys_mount+0x2dc/0x420 [ 392.659174][T10706] ? __pfx___se_sys_mount+0x10/0x10 [ 392.659200][T10706] ? __x64_sys_mount+0x20/0xc0 [ 392.659223][T10706] do_syscall_64+0x166/0x520 [ 392.659242][T10706] ? trace_irq_disable+0x3b/0x140 [ 392.659269][T10706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.659289][T10706] ? clear_bhb_loop+0x70/0xc0 [ 392.659312][T10706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.659332][T10706] RIP: 0033:0x7f276eb9e0d9 [ 392.659350][T10706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.659366][T10706] RSP: 002b:00007f276fb32028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 392.659387][T10706] RAX: ffffffffffffffda RBX: 00007f276ee25fa0 RCX: 00007f276eb9e0d9 [ 392.659403][T10706] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000 [ 392.659416][T10706] RBP: 00007f276fb32090 R08: 0000200000000000 R09: 0000000000000000 [ 392.659429][T10706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.659441][T10706] R13: 00007f276ee26038 R14: 00007f276ee25fa0 R15: 00007ffeea23f538 [ 392.659471][T10706] [ 392.717333][ T5690] m920x_read = error: -19 [ 392.717359][ T5690] dvb-usb: error while querying for an remote control event. [ 392.828423][ T5690] m920x_read = error: -19 [ 392.828450][ T5690] dvb-usb: error while querying for an remote control event. [ 392.933621][ T25] m920x_read = error: -19 [ 392.933663][ T25] dvb-usb: error while querying for an remote control event. [ 393.043569][ T25] m920x_read = error: -19 [ 393.043612][ T25] dvb-usb: error while querying for an remote control event. [ 393.153703][ T25] m920x_read = error: -19 [ 393.158728][ T25] dvb-usb: error while querying for an remote control event. [ 393.201243][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.203185][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.273490][ T25] m920x_read = error: -19 [ 393.273531][ T25] dvb-usb: error while querying for an remote control event. [ 393.330282][T10719] usb usb3: usbfs: interface 0 claimed by hub while 'syz.1.1486' sets config #0 [ 393.383469][ T25] m920x_read = error: -19 [ 393.388018][ T25] dvb-usb: error while querying for an remote control event. [ 393.442068][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 393.503438][ T25] m920x_read = error: -19 [ 393.503481][ T25] dvb-usb: error while querying for an remote control event. [ 393.613754][ T25] m920x_read = error: -19 [ 393.613800][ T25] dvb-usb: error while querying for an remote control event. [ 393.684362][ T9] usb-storage 6-1:10.177: USB Mass Storage device detected [ 393.724984][ T25] m920x_read = error: -19 [ 393.725433][ T25] dvb-usb: error while querying for an remote control event. [ 393.750404][ T9] usb 6-1: USB disconnect, device number 51 [ 393.776555][ T5615] udevd[5615]: setting mode of /dev/bus/usb/006/051 to 020664 failed: No such file or directory [ 393.776688][ T5615] udevd[5615]: setting owner of /dev/bus/usb/006/051 to uid=0, gid=0 failed: No such file or directory [ 393.803157][ T5697] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 393.834048][ T25] m920x_read = error: -19 [ 393.834096][ T25] dvb-usb: error while querying for an remote control event. [ 393.863946][ T31] audit: type=1800 audit(1787104181.191:58): pid=10730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1489" name="zoned" dev="configfs" ino=70880 res=0 errno=0 [ 393.871424][T10730] null_blk: nullb1: using native zone append [ 393.884665][ T31] audit: type=1800 audit(1787104181.201:59): pid=10730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1489" name="zone_nr_conv" dev="configfs" ino=70881 res=0 errno=0 [ 393.884711][ T31] audit: type=1800 audit(1787104181.201:60): pid=10730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1489" name="power" dev="configfs" ino=70884 res=0 errno=0 [ 393.943425][ T25] m920x_read = error: -19 [ 393.943476][ T25] dvb-usb: error while querying for an remote control event. [ 393.996381][T10730] null_blk: disk nullb1 created [ 394.005285][ T5697] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 394.015218][ T5697] usb 2-1: config 0 has no interfaces? [ 394.015277][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.036086][ T5697] usb 2-1: config 0 descriptor?? [ 394.053434][ T25] m920x_read = error: -19 [ 394.053480][ T25] dvb-usb: error while querying for an remote control event. [ 394.096088][T10687] imon:send_packet: task interrupted [ 394.096122][T10687] imon:send_packet: packet tx failed (-512) [ 394.096180][T10687] imon:vfd_write: send packet #1 failed [ 394.129521][T10736] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 394.159287][ T5690] usb 4-1: USB disconnect, device number 91 [ 394.163629][ T5622] m920x_read = error: -19 [ 394.163655][ T5622] dvb-usb: error while querying for an remote control event. [ 394.281263][ T25] m920x_read = error: -19 [ 394.281307][ T25] dvb-usb: error while querying for an remote control event. [ 394.383488][ T25] m920x_read = error: -19 [ 394.383531][ T25] dvb-usb: error while querying for an remote control event. [ 394.466409][ T5690] usb 2-1: USB disconnect, device number 70 [ 394.493468][ T25] m920x_read = error: -19 [ 394.493513][ T25] dvb-usb: error while querying for an remote control event. [ 394.605746][ T5622] m920x_read = error: -19 [ 394.605805][ T5622] dvb-usb: error while querying for an remote control event. [ 394.693574][ T5697] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 394.713478][ T5690] m920x_read = error: -19 [ 394.713532][ T5690] dvb-usb: error while querying for an remote control event. [ 394.743417][ T25] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 394.823419][ T5697] usb 6-1: device descriptor read/64, error -71 [ 394.835455][ T5690] m920x_read = error: -19 [ 394.835489][ T5690] dvb-usb: error while querying for an remote control event. [ 394.905356][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 394.907987][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.909002][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.909025][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.911448][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.911473][ T25] usb 4-1: Product: syz [ 394.911487][ T25] usb 4-1: Manufacturer: syz [ 394.911501][ T25] usb 4-1: SerialNumber: syz [ 394.928370][ T25] usb 4-1: 0:2 : does not exist [ 394.953497][ T5690] m920x_read = error: -19 [ 394.953524][ T5690] dvb-usb: error while querying for an remote control event. [ 395.063500][ T5690] m920x_read = error: -19 [ 395.063577][ T5690] dvb-usb: error while querying for an remote control event. [ 395.103432][ T5697] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 395.143333][ T25] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 395.181577][ T5690] m920x_read = error: -19 [ 395.181691][ T5690] dvb-usb: error while querying for an remote control event. [ 395.218627][ T25] usb 4-1: USB disconnect, device number 92 [ 395.233366][ T5697] usb 6-1: device descriptor read/64, error -71 [ 395.278020][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.303738][ T5690] m920x_read = error: -19 [ 395.304746][ T5690] dvb-usb: error while querying for an remote control event. [ 395.344271][ T5697] usb usb6-port1: attempt power cycle [ 395.413476][ T5690] m920x_read = error: -19 [ 395.413521][ T5690] dvb-usb: error while querying for an remote control event. [ 395.513605][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 395.523605][ T25] m920x_read = error: -19 [ 395.523657][ T25] dvb-usb: error while querying for an remote control event. [ 395.633744][ T5690] m920x_read = error: -19 [ 395.633794][ T5690] dvb-usb: error while querying for an remote control event. [ 395.664974][ T9] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 395.675220][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 395.675291][ T9] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 395.694782][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 395.694831][ T9] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 395.696896][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.696920][ T9] usb 2-1: Product: syz [ 395.696934][ T9] usb 2-1: Manufacturer: syz [ 395.696949][ T9] usb 2-1: SerialNumber: syz [ 395.706861][ T5697] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 395.717880][ T9] ti_usb_3410_5052 2-1:2.0: required endpoints missing [ 395.727293][ T5697] usb 6-1: device descriptor read/8, error -71 [ 395.747310][ T5690] m920x_read = error: -19 [ 395.747335][ T5690] dvb-usb: error while querying for an remote control event. [ 395.853589][ T25] m920x_read = error: -19 [ 395.858141][ T25] dvb-usb: error while querying for an remote control event. [ 395.906443][ T9] usb 2-1: USB disconnect, device number 71 [ 395.918631][T10765] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 395.932600][T10765] kvm: pic: non byte read [ 395.937494][T10765] kvm: pic: level sensitive irq not supported [ 395.937564][T10765] kvm: pic: non byte read [ 395.937807][T10765] kvm: pic: level sensitive irq not supported [ 395.937872][T10765] kvm: pic: non byte read [ 395.938083][T10765] kvm: pic: level sensitive irq not supported [ 395.938134][T10765] kvm: pic: non byte read [ 395.938333][T10765] kvm: pic: level sensitive irq not supported [ 395.938383][T10765] kvm: pic: non byte read [ 395.938571][T10765] kvm: pic: level sensitive irq not supported [ 395.938620][T10765] kvm: pic: non byte read [ 395.938910][T10765] kvm: pic: level sensitive irq not supported [ 395.939001][T10765] kvm: pic: non byte read [ 395.963772][ T5697] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 395.976376][ T25] m920x_read = error: -19 [ 395.976400][ T25] dvb-usb: error while querying for an remote control event. [ 395.984387][ T5697] usb 6-1: device descriptor read/8, error -71 [ 396.063430][ T5690] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 396.083523][ T25] m920x_read = error: -19 [ 396.083565][ T25] dvb-usb: error while querying for an remote control event. [ 396.096289][ T5697] usb usb6-port1: unable to enumerate USB device [ 396.194072][ T25] m920x_read = error: -19 [ 396.194108][ T25] dvb-usb: error while querying for an remote control event. [ 396.233368][ T5690] usb 4-1: Using ep0 maxpacket: 32 [ 396.234241][ T5690] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 396.235385][ T5690] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 396.235429][ T5690] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 396.235455][ T5690] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 396.235481][ T5690] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 396.238023][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.238048][ T5690] usb 4-1: Product: syz [ 396.238062][ T5690] usb 4-1: Manufacturer: syz [ 396.238077][ T5690] usb 4-1: SerialNumber: syz [ 396.259583][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 396.268052][ T5690] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input90 [ 396.314202][ T25] m920x_read = error: -19 [ 396.314249][ T25] dvb-usb: error while querying for an remote control event. [ 396.413649][ T25] m920x_read = error: -19 [ 396.413718][ T25] dvb-usb: error while querying for an remote control event. [ 396.474775][ T5690] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 396.476963][ T5690] (id 0x00) [ 396.494794][T10772] FAULT_INJECTION: forcing a failure. [ 396.494794][T10772] name fail_iommufd, interval 1, probability 0, space 0, times 0 [ 396.512728][T10772] CPU: 0 UID: 0 PID: 10772 Comm: syz.1.1502 Not tainted syzkaller #0 PREEMPT(full) [ 396.512759][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.512772][T10772] Call Trace: [ 396.512781][T10772] [ 396.512791][T10772] dump_stack_lvl+0xe8/0x150 [ 396.512825][T10772] should_fail_ex+0x410/0x560 [ 396.512860][T10772] pfn_reader_user_pin+0x6a2/0x1340 [ 396.512887][T10772] ? __lock_acquire+0x6df/0x2e50 [ 396.512920][T10772] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 396.512939][T10772] ? __kasan_kmalloc+0x93/0xb0 [ 396.512968][T10772] ? __kmalloc_cache_noprof+0x321/0x600 [ 396.512994][T10772] ? iopt_area_add_access+0x23d/0x520 [ 396.513013][T10772] ? interval_tree_span_iter_first+0xea/0xd70 [ 396.513216][T10772] iopt_pages_fill_xarray+0x4db/0x1180 [ 396.513262][T10772] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 396.513314][T10772] ? rcu_is_watching+0x16/0xb0 [ 396.513339][T10772] ? __kmalloc_cache_noprof+0x321/0x600 [ 396.513363][T10772] ? __kmalloc_cache_noprof+0x14d/0x600 [ 396.513387][T10772] ? iopt_area_add_access+0x23d/0x520 [ 396.513405][T10772] ? iopt_area_add_access+0x23d/0x520 [ 396.513431][T10772] iopt_area_add_access+0x25b/0x520 [ 396.513458][T10772] iommufd_access_pin_pages+0x71a/0xc50 [ 396.513542][T10772] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 396.513574][T10772] ? __kvmalloc_node_noprof+0x345/0x820 [ 396.513602][T10772] ? iommufd_test+0x4b5e/0x6360 [ 396.513631][T10772] ? iommufd_test+0x4b5e/0x6360 [ 396.513661][T10772] iommufd_test+0x4bad/0x6360 [ 396.513699][T10772] ? __lock_acquire+0x6df/0x2e50 [ 396.513727][T10772] ? __pfx_iommufd_test+0x10/0x10 [ 396.513764][T10772] ? tomoyo_path_number_perm+0x219/0x5f0 [ 396.513793][T10772] ? tomoyo_path_number_perm+0x219/0x5f0 [ 396.513826][T10772] ? lock_acquire+0x115/0x350 [ 396.513877][T10772] iommufd_fops_ioctl+0x465/0x600 [ 396.513912][T10772] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 396.513945][T10772] ? __fget_files+0x2a/0x420 [ 396.513975][T10772] ? __fget_files+0x2a/0x420 [ 396.514002][T10772] ? bpf_lsm_file_ioctl+0x9/0x20 [ 396.514027][T10772] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 396.514056][T10772] __se_sys_ioctl+0xfc/0x170 [ 396.514086][T10772] do_syscall_64+0x166/0x520 [ 396.514106][T10772] ? trace_irq_disable+0x3b/0x140 [ 396.514133][T10772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.514153][T10772] ? clear_bhb_loop+0x70/0xc0 [ 396.514179][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.514199][T10772] RIP: 0033:0x7f276eb9e0d9 [ 396.514219][T10772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.514238][T10772] RSP: 002b:00007f276fb32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.514260][T10772] RAX: ffffffffffffffda RBX: 00007f276ee25fa0 RCX: 00007f276eb9e0d9 [ 396.514276][T10772] RDX: 0000200000000a40 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 396.514289][T10772] RBP: 00007f276fb32090 R08: 0000000000000000 R09: 0000000000000000 [ 396.514302][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.514315][T10772] R13: 00007f276ee26038 R14: 00007f276ee25fa0 R15: 00007ffeea23f538 [ 396.514350][T10772] [ 396.523551][ T25] m920x_read = error: -19 [ 396.523577][ T25] dvb-usb: error while querying for an remote control event. [ 396.543389][ T5690] rc_core: IR keymap rc-imon-pad not found [ 396.543406][ T5690] Registered IR keymap rc-empty [ 396.543506][ T5690] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 396.543524][ T5690] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 396.634074][ T25] m920x_read = error: -19 [ 396.634123][ T25] dvb-usb: error while querying for an remote control event. [ 396.677573][ T5690] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 396.689902][ T5690] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input91 [ 396.695065][ T5690] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:93> initialized [ 396.745632][ T5690] m920x_read = error: -19 [ 396.745659][ T5690] dvb-usb: error while querying for an remote control event. [ 396.853738][ T5690] m920x_read = error: -19 [ 396.853764][ T5690] dvb-usb: error while querying for an remote control event. [ 396.903707][ T25] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 396.963728][ T5690] m920x_read = error: -19 [ 396.964911][ T5690] dvb-usb: error while querying for an remote control event. [ 397.054144][ T25] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 397.054714][ T25] usb 2-1: config 0 has no interfaces? [ 397.054745][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.059782][ T25] usb 2-1: config 0 descriptor?? [ 397.075378][ T25] m920x_read = error: -19 [ 397.075405][ T25] dvb-usb: error while querying for an remote control event. [ 397.184491][ T5690] m920x_read = error: -19 [ 397.184549][ T5690] dvb-usb: error while querying for an remote control event. [ 397.236431][ T5697] usb 4-1: USB disconnect, device number 93 [ 397.293816][ T5690] m920x_read = error: -19 [ 397.295202][ T5690] dvb-usb: error while querying for an remote control event. [ 397.404531][ T5690] m920x_read = error: -19 [ 397.404565][ T5690] dvb-usb: error while querying for an remote control event. [ 397.452470][ T5697] usb 2-1: USB disconnect, device number 72 [ 397.513718][ T5690] m920x_read = error: -19 [ 397.513774][ T5690] dvb-usb: error while querying for an remote control event. [ 397.623664][ T5690] m920x_read = error: -19 [ 397.623709][ T5690] dvb-usb: error while querying for an remote control event. [ 397.643568][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1508'. [ 397.654499][T10787] FAULT_INJECTION: forcing a failure. [ 397.654499][T10787] name failslab, interval 1, probability 0, space 0, times 0 [ 397.654547][T10787] CPU: 0 UID: 0 PID: 10787 Comm: syz.5.1508 Not tainted syzkaller #0 PREEMPT(full) [ 397.654570][T10787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.654582][T10787] Call Trace: [ 397.654590][T10787] [ 397.654599][T10787] dump_stack_lvl+0xe8/0x150 [ 397.654630][T10787] should_fail_ex+0x410/0x560 [ 397.654660][T10787] should_failslab+0xa8/0x100 [ 397.654677][T10787] ? skb_clone+0x212/0x3a0 [ 397.654702][T10787] kmem_cache_alloc_noprof+0xa1/0x600 [ 397.654726][T10787] ? skb_clone+0x212/0x3a0 [ 397.654757][T10787] skb_clone+0x212/0x3a0 [ 397.654785][T10787] __netlink_deliver_tap+0x413/0x860 [ 397.654822][T10787] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.654850][T10787] netlink_deliver_tap+0x19c/0x1b0 [ 397.654878][T10787] netlink_sendskb+0x68/0x140 [ 397.654904][T10787] netlink_rcv_skb+0x2a4/0x4a0 [ 397.654930][T10787] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 397.655064][T10787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.655101][T10787] ? bpf_lsm_capable+0x9/0x20 [ 397.655125][T10787] ? security_capable+0x7e/0x2c0 [ 397.655159][T10787] nfnetlink_rcv+0x2b9/0x28c0 [ 397.655187][T10787] ? __dev_queue_xmit+0x29b/0x3820 [ 397.655243][T10787] ? __local_bh_enable_ip+0xd6/0x140 [ 397.655262][T10787] ? lockdep_hardirqs_on+0x7b/0x110 [ 397.655288][T10787] ? __dev_queue_xmit+0x29b/0x3820 [ 397.655312][T10787] ? __local_bh_enable_ip+0xd6/0x140 [ 397.655333][T10787] ? __dev_queue_xmit+0x29b/0x3820 [ 397.655358][T10787] ? __dev_queue_xmit+0x1edc/0x3820 [ 397.655381][T10787] ? do_syscall_64+0x166/0x520 [ 397.655397][T10787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.655428][T10787] ? __dev_queue_xmit+0x29b/0x3820 [ 397.655454][T10787] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 397.655482][T10787] ? __pfx___dev_queue_xmit+0x10/0x10 [ 397.655515][T10787] ? ref_tracker_free+0x689/0x830 [ 397.655546][T10787] ? __pfx_ref_tracker_free+0x10/0x10 [ 397.655574][T10787] ? __asan_memcpy+0x40/0x70 [ 397.655597][T10787] ? __skb_clone+0x5c/0x6c0 [ 397.655625][T10787] ? __skb_clone+0x449/0x6c0 [ 397.655655][T10787] ? skb_clone+0x246/0x3a0 [ 397.655682][T10787] ? __netlink_deliver_tap+0x811/0x860 [ 397.655706][T10787] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.655737][T10787] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.655762][T10787] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.655792][T10787] netlink_unicast+0x7bd/0x940 [ 397.655825][T10787] netlink_sendmsg+0x813/0xb40 [ 397.655860][T10787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.655893][T10787] ? apparmor_socket_sendmsg+0x98/0x360 [ 397.655920][T10787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.655945][T10787] sock_sendmsg_nosec+0x13a/0x180 [ 397.655984][T10787] ____sys_sendmsg+0x54e/0x850 [ 397.656012][T10787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.656044][T10787] ? import_iovec+0x73/0xa0 [ 397.656067][T10787] ___sys_sendmsg+0x2a5/0x360 [ 397.656090][T10787] ? __lock_acquire+0x6df/0x2e50 [ 397.656120][T10787] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.656176][T10787] ? __fget_files+0x2a/0x420 [ 397.656197][T10787] ? __fget_files+0x3a2/0x420 [ 397.656228][T10787] __x64_sys_sendmsg+0x1b1/0x290 [ 397.656255][T10787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.656298][T10787] do_syscall_64+0x166/0x520 [ 397.656314][T10787] ? trace_irq_disable+0x3b/0x140 [ 397.656341][T10787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.656360][T10787] ? clear_bhb_loop+0x70/0xc0 [ 397.656384][T10787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.656403][T10787] RIP: 0033:0x7f9b8059e0d9 [ 397.656423][T10787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.656439][T10787] RSP: 002b:00007f9b8152d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.656461][T10787] RAX: ffffffffffffffda RBX: 00007f9b80825fa0 RCX: 00007f9b8059e0d9 [ 397.656476][T10787] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 397.656489][T10787] RBP: 00007f9b8152d090 R08: 0000000000000000 R09: 0000000000000000 [ 397.656501][T10787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.656513][T10787] R13: 00007f9b80826038 R14: 00007f9b80825fa0 R15: 00007fff087d9eb8 [ 397.656543][T10787] [ 398.091270][ T25] m920x_read = error: -19 [ 398.095746][ T25] dvb-usb: error while querying for an remote control event. [ 398.099594][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 398.099634][T10803] FAULT_INJECTION: forcing a failure. [ 398.099634][T10803] name failslab, interval 1, probability 0, space 0, times 0 [ 398.099659][T10803] CPU: 0 UID: 0 PID: 10803 Comm: syz.1.1513 Not tainted syzkaller #0 PREEMPT(full) [ 398.099682][T10803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.099694][T10803] Call Trace: [ 398.099702][T10803] [ 398.099710][T10803] dump_stack_lvl+0xe8/0x150 [ 398.099741][T10803] should_fail_ex+0x410/0x560 [ 398.099772][T10803] ? __alloc_skb+0x1db/0x7a0 [ 398.099794][T10803] should_failslab+0xa8/0x100 [ 398.099815][T10803] ? __alloc_skb+0x1db/0x7a0 [ 398.099834][T10803] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 398.099860][T10803] ? __alloc_skb+0x18d/0x7a0 [ 398.099881][T10803] ? __alloc_skb+0x1db/0x7a0 [ 398.099907][T10803] __alloc_skb+0x1db/0x7a0 [ 398.099932][T10803] netlink_ack+0x136/0xb30 [ 398.099957][T10803] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.099977][T10803] ? __pfx_nl802154_post_doit+0x10/0x10 [ 398.100136][T10803] netlink_rcv_skb+0x2a4/0x4a0 [ 398.100163][T10803] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.100184][T10803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.100225][T10803] ? down_read+0x2be/0x330 [ 398.100250][T10803] genl_rcv+0x28/0x40 [ 398.100268][T10803] netlink_unicast+0x7bd/0x940 [ 398.100303][T10803] netlink_sendmsg+0x813/0xb40 [ 398.100338][T10803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.100372][T10803] ? apparmor_socket_sendmsg+0x18b/0x360 [ 398.100399][T10803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.100425][T10803] sock_sendmsg_nosec+0x13a/0x180 [ 398.100456][T10803] ____sys_sendmsg+0x54e/0x850 [ 398.100486][T10803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.100518][T10803] ? import_iovec+0x73/0xa0 [ 398.100541][T10803] ___sys_sendmsg+0x2a5/0x360 [ 398.100564][T10803] ? __lock_acquire+0x6df/0x2e50 [ 398.100595][T10803] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.100652][T10803] ? __fget_files+0x2a/0x420 [ 398.100673][T10803] ? __fget_files+0x3a2/0x420 [ 398.100703][T10803] __x64_sys_sendmsg+0x1b1/0x290 [ 398.100730][T10803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.100774][T10803] do_syscall_64+0x166/0x520 [ 398.100792][T10803] ? trace_irq_disable+0x3b/0x140 [ 398.100818][T10803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.100838][T10803] ? clear_bhb_loop+0x70/0xc0 [ 398.100862][T10803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.100881][T10803] RIP: 0033:0x7f276eb9e0d9 [ 398.100900][T10803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.100916][T10803] RSP: 002b:00007f276fb32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.100939][T10803] RAX: ffffffffffffffda RBX: 00007f276ee25fa0 RCX: 00007f276eb9e0d9 [ 398.100953][T10803] RDX: 0000000020004010 RSI: 00002000000003c0 RDI: 0000000000000004 [ 398.100967][T10803] RBP: 00007f276fb32090 R08: 0000000000000000 R09: 0000000000000000 [ 398.100980][T10803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.100991][T10803] R13: 00007f276ee26038 R14: 00007f276ee25fa0 R15: 00007ffeea23f538 [ 398.101028][T10803] [ 398.131404][T10800] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 398.207719][ T5690] m920x_read = error: -19 [ 398.207745][ T5690] dvb-usb: error while querying for an remote control event. [ 398.223486][ T5697] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 398.300838][T10808] FAULT_INJECTION: forcing a failure. [ 398.300838][T10808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.300881][T10808] CPU: 0 UID: 0 PID: 10808 Comm: syz.3.1515 Not tainted syzkaller #0 PREEMPT(full) [ 398.300903][T10808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.300914][T10808] Call Trace: [ 398.300923][T10808] [ 398.300931][T10808] dump_stack_lvl+0xe8/0x150 [ 398.300962][T10808] should_fail_ex+0x410/0x560 [ 398.300993][T10808] _copy_from_user+0x2d/0xb0 [ 398.301014][T10808] ___sys_sendmsg+0x1c6/0x360 [ 398.301039][T10808] ? __lock_acquire+0x6df/0x2e50 [ 398.301071][T10808] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.301093][T10808] ? __lock_acquire+0x6df/0x2e50 [ 398.301123][T10808] ? kstrtouint+0x6e/0xe0 [ 398.301263][T10808] __sys_sendmmsg+0x273/0x4d0 [ 398.301293][T10808] ? __pfx___sys_sendmmsg+0x10/0x10 [ 398.301325][T10808] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 398.301357][T10808] ? ksys_write+0x242/0x270 [ 398.301384][T10808] ? __pfx_ksys_write+0x10/0x10 [ 398.301417][T10808] __x64_sys_sendmmsg+0xa0/0xc0 [ 398.301443][T10808] do_syscall_64+0x166/0x520 [ 398.301461][T10808] ? trace_irq_disable+0x3b/0x140 [ 398.301488][T10808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.301507][T10808] ? clear_bhb_loop+0x70/0xc0 [ 398.301530][T10808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.301550][T10808] RIP: 0033:0x7f007b39e0d9 [ 398.301569][T10808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.301586][T10808] RSP: 002b:00007f007c2cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 398.301608][T10808] RAX: ffffffffffffffda RBX: 00007f007b625fa0 RCX: 00007f007b39e0d9 [ 398.301622][T10808] RDX: fffffffffffffd9e RSI: 000020000000a540 RDI: 0000000000000003 [ 398.301636][T10808] RBP: 00007f007c2cc090 R08: 0000000000000000 R09: 0000000000000000 [ 398.301649][T10808] R10: 0000000004000041 R11: 0000000000000246 R12: 0000000000000001 [ 398.301662][T10808] R13: 00007f007b626038 R14: 00007f007b625fa0 R15: 00007ffc1c710c68 [ 398.301691][T10808] [ 398.318557][ T5690] m920x_read = error: -19 [ 398.318582][ T5690] dvb-usb: error while querying for an remote control event. [ 398.337610][T10809] fuse: Unknown parameter 'fd?0x0000000000000007' [ 398.339902][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 398.374326][ T5697] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 398.375276][ T5697] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 398.375320][ T5697] usb 6-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 398.376217][ T5697] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 398.376259][ T5697] usb 6-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 398.378347][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.378370][ T5697] usb 6-1: Product: syz [ 398.378385][ T5697] usb 6-1: Manufacturer: syz [ 398.378406][ T5697] usb 6-1: SerialNumber: syz [ 398.394177][ T5697] ti_usb_3410_5052 6-1:2.0: required endpoints missing [ 398.436310][ T5690] m920x_read = error: -19 [ 398.436333][ T5690] dvb-usb: error while querying for an remote control event. [ 398.545258][ T25] m920x_read = error: -19 [ 398.545282][ T25] dvb-usb: error while querying for an remote control event. [ 398.554899][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dabe800: rx timeout, send abort [ 398.576565][ T6075] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 398.595451][ T5690] usb 6-1: USB disconnect, device number 56 [ 398.664225][ T25] m920x_read = error: -19 [ 398.664253][ T25] dvb-usb: error while querying for an remote control event. [ 398.727071][ T6075] usb 2-1: device descriptor read/64, error -71 [ 398.784547][ T5690] m920x_read = error: -19 [ 398.784574][ T5690] dvb-usb: error while querying for an remote control event. [ 398.884635][ T5690] m920x_read = error: -19 [ 398.884670][ T5690] dvb-usb: error while querying for an remote control event. [ 398.973452][ T6075] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 398.993648][ T5690] m920x_read = error: -19 [ 398.994219][ T5690] dvb-usb: error while querying for an remote control event. [ 399.050798][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dabec00: rx timeout, send abort [ 399.054953][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dabe800: abort rx timeout. Force session deactivation [ 399.103441][ T6075] usb 2-1: device descriptor read/64, error -71 [ 399.110129][ T5690] m920x_read = error: -19 [ 399.110168][ T5690] dvb-usb: error while querying for an remote control event. [ 399.214136][ T5622] m920x_read = error: -19 [ 399.215201][ T6075] usb usb2-port1: attempt power cycle [ 399.215565][ T5622] dvb-usb: error while querying for an remote control event. [ 399.323523][ T5622] m920x_read = error: -19 [ 399.323563][ T5622] dvb-usb: error while querying for an remote control event. [ 399.403413][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 399.433546][ T5622] m920x_read = error: -19 [ 399.433581][ T5622] dvb-usb: error while querying for an remote control event. [ 399.443410][ T5690] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 399.543602][ T5622] m920x_read = error: -19 [ 399.543644][ T5622] dvb-usb: error while querying for an remote control event. [ 399.555457][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dabec00: abort rx timeout. Force session deactivation [ 399.555595][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 399.555693][ T6075] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 399.579472][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 399.589390][ T6075] usb 2-1: device descriptor read/8, error -71 [ 399.589890][ T9] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 399.589933][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 399.589958][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 399.589984][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 399.591893][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.591916][ T9] usb 6-1: Product: syz [ 399.591931][ T9] usb 6-1: Manufacturer: syz [ 399.591945][ T9] usb 6-1: SerialNumber: syz [ 399.597453][ T9] usb 6-1: config 0 descriptor?? [ 399.606155][ T5690] usb 4-1: Using ep0 maxpacket: 32 [ 399.641893][ T5690] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 399.654732][ T5622] m920x_read = error: -19 [ 399.654759][ T5622] dvb-usb: error while querying for an remote control event. [ 399.656617][ T5690] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 399.656664][ T5690] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 399.656690][ T5690] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 399.656715][ T5690] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 399.658588][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.658611][ T5690] usb 4-1: Product: syz [ 399.658625][ T5690] usb 4-1: Manufacturer: syz [ 399.658641][ T5690] usb 4-1: SerialNumber: syz [ 399.665011][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 399.680006][ T5690] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input92 [ 399.763551][ T5622] m920x_read = error: -19 [ 399.763575][ T5622] dvb-usb: error while querying for an remote control event. [ 399.817851][ T9] appledisplay: Apple Cinema Display connected [ 399.843487][ T6075] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 399.864011][ T6075] usb 2-1: device descriptor read/8, error -71 [ 399.874308][ T5622] m920x_read = error: -19 [ 399.874349][ T5622] dvb-usb: error while querying for an remote control event. [ 399.886217][ T5690] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 399.886237][ T5690] (id 0x00) [ 399.943409][ T5690] rc_core: IR keymap rc-imon-pad not found [ 399.943442][ T5690] Registered IR keymap rc-empty [ 399.943540][ T5690] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 399.943559][ T5690] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 399.983551][ T5622] m920x_read = error: -19 [ 399.985946][ T6075] usb usb2-port1: unable to enumerate USB device [ 399.995091][ T5622] dvb-usb: error while querying for an remote control event. [ 400.086084][ T5690] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 400.101178][ T5690] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input93 [ 400.115421][ T5690] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:94> initialized [ 400.122510][ T5622] m920x_read = error: -19 [ 400.122536][ T5622] dvb-usb: error while querying for an remote control event. [ 400.149617][ T5623] Bluetooth: Wrong link type (-57) [ 400.171053][ T6075] usb 6-1: USB disconnect, device number 57 [ 400.171157][ C0] usb 6-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 400.211534][ T6075] appledisplay: Apple Cinema Display disconnected [ 400.225221][ T5622] m920x_read = error: -19 [ 400.225251][ T5622] dvb-usb: error while querying for an remote control event. [ 400.333566][ T5622] m920x_read = error: -19 [ 400.333597][ T5622] dvb-usb: error while querying for an remote control event. [ 400.443660][ T5622] m920x_read = error: -19 [ 400.448129][ T5622] dvb-usb: error while querying for an remote control event. [ 400.554157][ T5622] m920x_read = error: -19 [ 400.554209][ T5622] dvb-usb: error while querying for an remote control event. [ 400.646586][ T5622] usb 4-1: USB disconnect, device number 94 [ 400.664541][ T5690] m920x_read = error: -19 [ 400.664588][ T5690] dvb-usb: error while querying for an remote control event. [ 400.775346][ T5690] m920x_read = error: -19 [ 400.775396][ T5690] dvb-usb: error while querying for an remote control event. [ 400.883628][ T5622] m920x_read = error: -19 [ 400.883680][ T5622] dvb-usb: error while querying for an remote control event. [ 401.003752][ T5622] m920x_read = error: -19 [ 401.008224][ T5622] dvb-usb: error while querying for an remote control event. [ 401.023472][ T6075] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 401.113646][ T5622] m920x_read = error: -19 [ 401.113701][ T5622] dvb-usb: error while querying for an remote control event. [ 401.189160][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1524'. [ 401.199031][ T6075] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 401.212295][ T6075] usb 6-1: config 1 has an invalid descriptor of length 89, skipping remainder of the config [ 401.212341][ T6075] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 401.226132][ T5622] m920x_read = error: -19 [ 401.226164][ T5622] dvb-usb: error while querying for an remote control event. [ 401.248577][ T6075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.248620][ T6075] usb 6-1: Product: syz [ 401.248659][ T6075] usb 6-1: Manufacturer: syz [ 401.248678][ T6075] usb 6-1: SerialNumber: syz [ 401.276509][T10832] FAULT_INJECTION: forcing a failure. [ 401.276509][T10832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.276557][T10832] CPU: 1 UID: 0 PID: 10832 Comm: syz.3.1525 Not tainted syzkaller #0 PREEMPT(full) [ 401.276579][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.276591][T10832] Call Trace: [ 401.276598][T10832] [ 401.276605][T10832] dump_stack_lvl+0xe8/0x150 [ 401.276634][T10832] should_fail_ex+0x410/0x560 [ 401.276665][T10832] strncpy_from_user+0x36/0x2c0 [ 401.276697][T10832] do_getname+0x77/0x250 [ 401.276720][T10832] user_path_at+0x2a/0x160 [ 401.276746][T10832] __se_sys_mount+0x2dc/0x420 [ 401.276773][T10832] ? __pfx___se_sys_mount+0x10/0x10 [ 401.276805][T10832] ? __x64_sys_mount+0x20/0xc0 [ 401.276830][T10832] do_syscall_64+0x166/0x520 [ 401.276849][T10832] ? trace_irq_disable+0x3b/0x140 [ 401.276875][T10832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.276895][T10832] ? clear_bhb_loop+0x70/0xc0 [ 401.276919][T10832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.276939][T10832] RIP: 0033:0x7f007b39e0d9 [ 401.276957][T10832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.276974][T10832] RSP: 002b:00007f007c2cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 401.276995][T10832] RAX: ffffffffffffffda RBX: 00007f007b625fa0 RCX: 00007f007b39e0d9 [ 401.277010][T10832] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000 [ 401.277023][T10832] RBP: 00007f007c2cc090 R08: 0000200000000000 R09: 0000000000000000 [ 401.277037][T10832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.277050][T10832] R13: 00007f007b626038 R14: 00007f007b625fa0 R15: 00007ffc1c710c68 [ 401.277079][T10832] [ 401.333823][ T5622] m920x_read = error: -19 [ 401.333847][ T5622] dvb-usb: error while querying for an remote control event. [ 401.446137][ T5690] m920x_read = error: -19 [ 401.446165][ T5690] dvb-usb: error while querying for an remote control event. [ 401.532335][T10839] FAULT_INJECTION: forcing a failure. [ 401.532335][T10839] name failslab, interval 1, probability 0, space 0, times 0 [ 401.532395][T10839] CPU: 1 UID: 0 PID: 10839 Comm: syz.1.1527 Not tainted syzkaller #0 PREEMPT(full) [ 401.532417][T10839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.532428][T10839] Call Trace: [ 401.532434][T10839] [ 401.532442][T10839] dump_stack_lvl+0xe8/0x150 [ 401.532468][T10839] should_fail_ex+0x410/0x560 [ 401.532500][T10839] ? alloc_slab_obj_exts+0x5c/0x180 [ 401.532524][T10839] should_failslab+0xa8/0x100 [ 401.532545][T10839] ? alloc_slab_obj_exts+0x5c/0x180 [ 401.532566][T10839] __kmalloc_flags_noprof+0x128/0x7a0 [ 401.532596][T10839] ? alloc_slab_obj_exts+0x5c/0x180 [ 401.532625][T10839] alloc_slab_obj_exts+0x5c/0x180 [ 401.532652][T10839] __memcg_slab_post_alloc_hook+0x64e/0xf80 [ 401.532700][T10839] ? dst_alloc+0x105/0x170 [ 401.532809][T10839] kmem_cache_alloc_noprof+0x367/0x600 [ 401.532834][T10839] ? dst_alloc+0x105/0x170 [ 401.532858][T10839] ? kmem_cache_alloc_noprof+0x156/0x600 [ 401.532882][T10839] ? dst_alloc+0x105/0x170 [ 401.532912][T10839] ? __pfx_ip6_dst_gc+0x10/0x10 [ 401.533009][T10839] dst_alloc+0x105/0x170 [ 401.533040][T10839] ip6_pol_route+0xba1/0x14d0 [ 401.533074][T10839] ? ip6_pol_route+0x163/0x14d0 [ 401.533106][T10839] ? __pfx_ip6_pol_route+0x10/0x10 [ 401.533140][T10839] ? ip6t_do_table+0x1d1/0x15b0 [ 401.533230][T10839] fib6_rule_lookup+0x556/0x730 [ 401.533287][T10839] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 401.533315][T10839] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 401.533339][T10839] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 401.533427][T10839] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 401.533454][T10839] ? ip6table_mangle_hook+0x2b8/0x730 [ 401.533473][T10839] ? nf_nat_ipv6_in+0xe1/0x2c0 [ 401.533511][T10839] ip6_route_input+0x78d/0xb20 [ 401.533544][T10839] ? __pfx_ip6_route_input+0x10/0x10 [ 401.533569][T10839] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 401.533606][T10839] ? nf_hook_slow_list+0x2b8/0x3a0 [ 401.533649][T10839] ? ip6_rcv_finish_core+0x222/0x420 [ 401.533702][T10839] ip6_sublist_rcv+0x6ab/0xd70 [ 401.533738][T10839] ? __pfx_ip6_sublist_rcv+0x10/0x10 [ 401.533766][T10839] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 401.533800][T10839] ipv6_list_rcv+0x3ef/0x440 [ 401.533832][T10839] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 401.533860][T10839] ? udp_gro_receive+0x9d/0x25f0 [ 401.533919][T10839] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 401.533943][T10839] __netif_receive_skb_list_core+0x5ff/0x830 [ 401.534013][T10839] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 401.534061][T10839] netif_receive_skb_list_internal+0x995/0xcf0 [ 401.534097][T10839] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 401.534128][T10839] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 401.534161][T10839] ? dev_gro_receive+0x1734/0x2380 [ 401.534211][T10839] ? dev_gro_receive+0x1097/0x2380 [ 401.534240][T10839] napi_complete_done+0x299/0x730 [ 401.534276][T10839] ? __pfx_napi_complete_done+0x10/0x10 [ 401.534304][T10839] ? napi_gro_frags+0x981/0x1060 [ 401.534351][T10839] ? tun_get_user+0x27b0/0x44d0 [ 401.534375][T10839] tun_get_user+0x2a11/0x44d0 [ 401.534410][T10839] ? tun_get_user+0x27b0/0x44d0 [ 401.534436][T10839] ? aa_file_perm+0x4ed/0x15f0 [ 401.534456][T10839] ? __pfx_tun_get_user+0x10/0x10 [ 401.534479][T10839] ? __lock_acquire+0x6df/0x2e50 [ 401.534509][T10839] ? kstrtoull+0x137/0x1d0 [ 401.534543][T10839] ? ref_tracker_alloc+0x341/0x4b0 [ 401.534571][T10839] ? lock_acquire+0x115/0x350 [ 401.534598][T10839] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 401.534630][T10839] ? lock_acquire+0x115/0x350 [ 401.534656][T10839] ? tun_get+0x1c/0x2f0 [ 401.534683][T10839] ? tun_get+0x1c/0x2f0 [ 401.534702][T10839] ? tun_get+0x1c/0x2f0 [ 401.534726][T10839] tun_chr_write_iter+0x113/0x200 [ 401.534750][T10839] vfs_write+0x612/0xba0 [ 401.534784][T10839] ? __pfx_vfs_write+0x10/0x10 [ 401.534819][T10839] ? __fget_files+0x2a/0x420 [ 401.534851][T10839] ksys_write+0x150/0x270 [ 401.534879][T10839] ? __pfx_ksys_write+0x10/0x10 [ 401.534914][T10839] do_syscall_64+0x166/0x520 [ 401.534933][T10839] ? trace_irq_disable+0x3b/0x140 [ 401.534960][T10839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.534982][T10839] ? clear_bhb_loop+0x70/0xc0 [ 401.535006][T10839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.535025][T10839] RIP: 0033:0x7f276eb9e0d9 [ 401.535044][T10839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.535066][T10839] RSP: 002b:00007f276fb32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.535089][T10839] RAX: ffffffffffffffda RBX: 00007f276ee25fa0 RCX: 00007f276eb9e0d9 [ 401.535104][T10839] RDX: 000000000000009e RSI: 0000200000000280 RDI: 0000000000000003 [ 401.535117][T10839] RBP: 00007f276fb32090 R08: 0000000000000000 R09: 0000000000000000 [ 401.535130][T10839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.535143][T10839] R13: 00007f276ee26038 R14: 00007f276ee25fa0 R15: 00007ffeea23f538 [ 401.535177][T10839] [ 401.558130][ T25] m920x_read = error: -19 [ 401.558155][ T25] dvb-usb: error while querying for an remote control event. [ 401.579092][T10841] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 401.579192][T10841] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 401.663723][ T25] m920x_read = error: -19 [ 401.663749][ T25] dvb-usb: error while querying for an remote control event. [ 401.775438][ T25] m920x_read = error: -19 [ 401.775465][ T25] dvb-usb: error while querying for an remote control event. [ 401.883716][ T25] m920x_read = error: -19 [ 401.883742][ T25] dvb-usb: error while querying for an remote control event. [ 401.996747][ T5690] m920x_read = error: -19 [ 401.996771][ T5690] dvb-usb: error while querying for an remote control event. [ 402.103934][ T5622] m920x_read = error: -19 [ 402.103961][ T5622] dvb-usb: error while querying for an remote control event. [ 402.187188][ T25] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 402.213634][ T5622] m920x_read = error: -19 [ 402.218213][ T5622] dvb-usb: error while querying for an remote control event. [ 402.323781][ T30] m920x_read = error: -19 [ 402.328266][ T30] dvb-usb: error while querying for an remote control event. [ 402.343441][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 402.349142][ T25] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 402.359406][ T25] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 402.359484][ T25] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 402.359516][ T25] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.359545][ T25] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 402.365010][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.365035][ T25] usb 2-1: Product: syz [ 402.365049][ T25] usb 2-1: Manufacturer: syz [ 402.365064][ T25] usb 2-1: SerialNumber: syz [ 402.375675][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 402.379504][ T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input94 [ 402.425094][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021f6a400: rx timeout, send abort [ 402.433585][ T30] m920x_read = error: -19 [ 402.433612][ T30] dvb-usb: error while querying for an remote control event. [ 402.543862][ T30] m920x_read = error: -19 [ 402.543917][ T30] dvb-usb: error while querying for an remote control event. [ 402.583442][ T25] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 402.583490][ T25] (id 0x00) [ 402.633543][ T25] rc_core: IR keymap rc-imon-pad not found [ 402.633587][ T25] Registered IR keymap rc-empty [ 402.633886][ T25] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 402.633906][ T25] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 402.667120][ T30] m920x_read = error: -19 [ 402.671591][ T30] dvb-usb: error while querying for an remote control event. [ 402.773531][ T30] m920x_read = error: -19 [ 402.773564][ T30] dvb-usb: error while querying for an remote control event. [ 402.784534][ T25] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 402.788666][ T25] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input95 [ 402.794504][ T25] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:77> initialized [ 402.883565][ T25] m920x_read = error: -19 [ 402.883611][ T25] dvb-usb: error while querying for an remote control event. [ 402.923070][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021f69400: rx timeout, send abort [ 402.931371][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021f6a400: abort rx timeout. Force session deactivation [ 402.995176][ T25] m920x_read = error: -19 [ 402.995219][ T25] dvb-usb: error while querying for an remote control event. [ 403.052577][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.052984][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.103829][ T30] m920x_read = error: -19 [ 403.103880][ T30] dvb-usb: error while querying for an remote control event. [ 403.215014][ T30] m920x_read = error: -19 [ 403.215145][ T30] dvb-usb: error while querying for an remote control event. [ 403.273441][ T25] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 403.328307][ T30] m920x_read = error: -19 [ 403.334114][ T30] dvb-usb: error while querying for an remote control event. [ 403.336857][ T30] usb 2-1: USB disconnect, device number 77 [ 403.403783][ T25] usb 4-1: device descriptor read/64, error -71 [ 403.423149][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021f69400: abort rx timeout. Force session deactivation [ 403.444740][ T5622] m920x_read = error: -19 [ 403.444796][ T5622] dvb-usb: error while querying for an remote control event. [ 403.554264][ T30] m920x_read = error: -19 [ 403.554307][ T30] dvb-usb: error while querying for an remote control event. [ 403.643473][ T25] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 403.663546][ T30] m920x_read = error: -19 [ 403.663630][ T30] dvb-usb: error while querying for an remote control event. [ 403.773532][ T5622] m920x_read = error: -19 [ 403.773586][ T5622] dvb-usb: error while querying for an remote control event. [ 403.774003][ T25] usb 4-1: device descriptor read/64, error -71 [ 403.800851][ T5622] usb 6-1: USB disconnect, device number 58 [ 403.884437][ T30] m920x_read = error: -19 [ 403.884489][ T30] dvb-usb: error while querying for an remote control event. [ 403.886148][ T25] usb usb4-port1: attempt power cycle [ 403.993857][ T30] m920x_read = error: -19 [ 403.993904][ T30] dvb-usb: error while querying for an remote control event. [ 404.003613][T10877] FAULT_INJECTION: forcing a failure. [ 404.003613][T10877] name failslab, interval 1, probability 0, space 0, times 0 [ 404.003646][T10877] CPU: 1 UID: 0 PID: 10877 Comm: syz.1.1541 Not tainted syzkaller #0 PREEMPT(full) [ 404.003670][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.003682][T10877] Call Trace: [ 404.003691][T10877] [ 404.003699][T10877] dump_stack_lvl+0xe8/0x150 [ 404.003730][T10877] should_fail_ex+0x410/0x560 [ 404.003763][T10877] should_failslab+0xa8/0x100 [ 404.003786][T10877] __kmalloc_noprof+0xfe/0x720 [ 404.003822][T10877] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 404.003844][T10877] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 404.003872][T10877] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 404.003902][T10877] genl_family_rcv_msg_doit+0xda/0x340 [ 404.003930][T10877] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 404.003958][T10877] ? apparmor_capable+0x126/0x170 [ 404.003983][T10877] ? bpf_lsm_capable+0x9/0x20 [ 404.004008][T10877] ? security_capable+0x7e/0x2c0 [ 404.004040][T10877] genl_rcv_msg+0x614/0x7a0 [ 404.004066][T10877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.004086][T10877] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 404.004109][T10877] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 404.004127][T10877] ? __pfx_nl80211_post_doit+0x10/0x10 [ 404.004151][T10877] ? __pfx_ref_tracker_free+0x10/0x10 [ 404.004190][T10877] netlink_rcv_skb+0x226/0x4a0 [ 404.004217][T10877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.004238][T10877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.004278][T10877] ? down_read+0x2be/0x330 [ 404.004302][T10877] genl_rcv+0x28/0x40 [ 404.004320][T10877] netlink_unicast+0x7bd/0x940 [ 404.004353][T10877] netlink_sendmsg+0x813/0xb40 [ 404.004388][T10877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.004425][T10877] ? apparmor_socket_sendmsg+0x98/0x360 [ 404.004452][T10877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.004477][T10877] sock_sendmsg_nosec+0x13a/0x180 [ 404.004510][T10877] ____sys_sendmsg+0x54e/0x850 [ 404.004539][T10877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.004571][T10877] ? import_iovec+0x73/0xa0 [ 404.004594][T10877] ___sys_sendmsg+0x2a5/0x360 [ 404.004617][T10877] ? __lock_acquire+0x6df/0x2e50 [ 404.004648][T10877] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.004703][T10877] ? __fget_files+0x2a/0x420 [ 404.004725][T10877] ? __fget_files+0x3a2/0x420 [ 404.004756][T10877] __x64_sys_sendmsg+0x1b1/0x290 [ 404.004782][T10877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.004833][T10877] do_syscall_64+0x166/0x520 [ 404.004851][T10877] ? trace_irq_disable+0x3b/0x140 [ 404.004876][T10877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.004896][T10877] ? clear_bhb_loop+0x70/0xc0 [ 404.004920][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.004940][T10877] RIP: 0033:0x7f276eb9e0d9 [ 404.004958][T10877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.004975][T10877] RSP: 002b:00007f276fb32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.004997][T10877] RAX: ffffffffffffffda RBX: 00007f276ee25fa0 RCX: 00007f276eb9e0d9 [ 404.005013][T10877] RDX: 000000000004c040 RSI: 0000200000000040 RDI: 0000000000000003 [ 404.005026][T10877] RBP: 00007f276fb32090 R08: 0000000000000000 R09: 0000000000000000 [ 404.005038][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.005051][T10877] R13: 00007f276ee26038 R14: 00007f276ee25fa0 R15: 00007ffeea23f538 [ 404.005081][T10877] [ 404.105845][ T30] m920x_read = error: -19 [ 404.105873][ T30] dvb-usb: error while querying for an remote control event. [ 404.206518][T10879] fuse: Bad value for 'group_id' [ 404.206539][T10879] fuse: Bad value for 'group_id' [ 404.213889][ T5622] m920x_read = error: -19 [ 404.213914][ T5622] dvb-usb: error while querying for an remote control event. [ 404.225820][ T25] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 404.247464][ T25] usb 4-1: device descriptor read/8, error -71 [ 404.324300][ T5690] m920x_read = error: -19 [ 404.324327][ T5690] dvb-usb: error while querying for an remote control event. [ 404.433615][ T5690] m920x_read = error: -19 [ 404.433658][ T5690] dvb-usb: error while querying for an remote control event. [ 404.433753][ T30] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 404.484199][ T25] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 404.504180][ T25] usb 4-1: device descriptor read/8, error -71 [ 404.543565][ T5690] m920x_read = error: -19 [ 404.543607][ T5690] dvb-usb: error while querying for an remote control event. [ 404.544085][ T5622] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 404.584842][ T30] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 404.585443][ T30] usb 6-1: config 0 has no interfaces? [ 404.585475][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.591991][ T30] usb 6-1: config 0 descriptor?? [ 404.613912][ T25] usb usb4-port1: unable to enumerate USB device [ 404.653528][ T25] m920x_read = error: -19 [ 404.653585][ T25] dvb-usb: error while querying for an remote control event. [ 404.694032][ T5622] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 404.695161][ T5622] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 404.695209][ T5622] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 404.696311][ T5622] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 404.696355][ T5622] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 404.698753][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.698776][ T5622] usb 2-1: Product: syz [ 404.698790][ T5622] usb 2-1: Manufacturer: syz [ 404.698812][ T5622] usb 2-1: SerialNumber: syz [ 404.708482][ T5622] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 404.709001][ T5622] ti_usb_3410_5052 2-1:2.0: missing endpoints [ 404.763671][ T5622] m920x_read = error: -19 [ 404.763696][ T5622] dvb-usb: error while querying for an remote control event. [ 404.873547][ T5622] m920x_read = error: -19 [ 404.873611][ T5622] dvb-usb: error while querying for an remote control event. [ 404.906717][ T6077] usb 2-1: USB disconnect, device number 78 [ 404.970679][ T5622] usb 6-1: USB disconnect, device number 59 [ 404.983549][ T25] m920x_read = error: -19 [ 404.983584][ T25] dvb-usb: error while querying for an remote control event. [ 405.093558][ T25] m920x_read = error: -19 [ 405.093608][ T25] dvb-usb: error while querying for an remote control event. [ 405.214707][ T5622] m920x_read = error: -19 [ 405.214742][ T5622] dvb-usb: error while querying for an remote control event. [ 405.333598][ T5622] m920x_read = error: -19 [ 405.333644][ T5622] dvb-usb: error while querying for an remote control event. [ 405.447568][ T25] m920x_read = error: -19 [ 405.447614][ T25] dvb-usb: error while querying for an remote control event. [ 405.556525][ T25] m920x_read = error: -19 [ 405.556566][ T25] dvb-usb: error while querying for an remote control event. [ 405.672564][ T25] m920x_read = error: -19 [ 405.672615][ T25] dvb-usb: error while querying for an remote control event. [ 405.783574][ T25] m920x_read = error: -19 [ 405.783615][ T25] dvb-usb: error while querying for an remote control event. [ 405.873405][ T6077] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 405.893564][ T5622] m920x_read = error: -19 [ 405.893602][ T5622] dvb-usb: error while querying for an remote control event. [ 406.003572][ T5622] m920x_read = error: -19 [ 406.003615][ T5622] dvb-usb: error while querying for an remote control event. [ 406.033503][ T6077] usb 6-1: Using ep0 maxpacket: 32 [ 406.040790][ T6077] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 406.041989][ T6077] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 406.042033][ T6077] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 406.042059][ T6077] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.042084][ T6077] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 406.050440][ T6077] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.050465][ T6077] usb 6-1: Product: syz [ 406.050480][ T6077] usb 6-1: Manufacturer: syz [ 406.050495][ T6077] usb 6-1: SerialNumber: syz [ 406.061882][ T25] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 406.063200][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 406.069391][ T6077] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input96 [ 406.150693][ T5622] m920x_read = error: -19 [ 406.150733][ T5622] dvb-usb: error while querying for an remote control event. [ 406.253642][ T5622] m920x_read = error: -19 [ 406.258110][ T5622] dvb-usb: error while querying for an remote control event. [ 406.275996][ T6077] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 406.276036][ T6077] (id 0x00) [ 406.295052][ T25] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 406.307614][ T25] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 406.315957][ T25] usb 2-1: config 0 has no interface number 0 [ 406.316009][ T25] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 406.316256][T10902] kvm [10901]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 406.316413][T10902] kvm [10901]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 406.353667][ T25] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 406.353710][ T25] usb 2-1: Manufacturer: syz [ 406.353741][ T25] usb 2-1: SerialNumber: syz [ 406.374000][ T5622] m920x_read = error: -19 [ 406.378474][ T5622] dvb-usb: error while querying for an remote control event. [ 406.389478][ T25] usb 2-1: config 0 descriptor?? [ 406.435298][ T6077] rc_core: IR keymap rc-imon-pad not found [ 406.435334][ T6077] Registered IR keymap rc-empty [ 406.435421][ T6077] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 406.435443][ T6077] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 406.476245][ T6077] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 406.478833][ T6077] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input97 [ 406.483086][ T6077] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:60> initialized [ 406.486840][ T5622] m920x_read = error: -19 [ 406.486890][ T5622] dvb-usb: error while querying for an remote control event. [ 406.593502][ T5622] m920x_read = error: -19 [ 406.593537][ T5622] dvb-usb: error while querying for an remote control event. [ 406.599303][ T25] usbtouchscreen 2-1:0.214: Failed to read FW rev: 0 [ 406.599567][ T25] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 406.664936][ T6077] usb 6-1: USB disconnect, device number 60 [ 406.683376][ T9] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 406.705430][ T25] m920x_read = error: -19 [ 406.705470][ T25] dvb-usb: error while querying for an remote control event. [ 406.815459][ T25] m920x_read = error: -19 [ 406.815493][ T25] dvb-usb: error while querying for an remote control event. [ 406.848432][ T9] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 406.848995][ T9] usb 4-1: config 0 has no interfaces? [ 406.849027][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.852436][ T9] usb 4-1: config 0 descriptor?? [ 406.923944][ T25] m920x_read = error: -19 [ 406.923988][ T25] dvb-usb: error while querying for an remote control event. [ 407.033696][ T25] m920x_read = error: -19 [ 407.033736][ T25] dvb-usb: error while querying for an remote control event. [ 407.059519][ T25] usb 4-1: USB disconnect, device number 99 [ 407.143839][ T5622] m920x_read = error: -19 [ 407.143908][ T5622] dvb-usb: error while querying for an remote control event. [ 407.253602][ T25] m920x_read = error: -19 [ 407.253658][ T25] dvb-usb: error while querying for an remote control event. [ 407.364663][ T25] m920x_read = error: -19 [ 407.364709][ T25] dvb-usb: error while querying for an remote control event. [ 407.473812][ T25] m920x_read = error: -19 [ 407.473867][ T25] dvb-usb: error while querying for an remote control event. [ 407.569150][T10927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1550'. [ 407.584559][ T25] m920x_read = error: -19 [ 407.584592][ T25] dvb-usb: error while querying for an remote control event. [ 407.693648][ T25] m920x_read = error: -19 [ 407.693691][ T25] dvb-usb: error while querying for an remote control event. [ 407.804816][ T25] m920x_read = error: -19 [ 407.804858][ T25] dvb-usb: error while querying for an remote control event. [ 407.828399][T10939] FAULT_INJECTION: forcing a failure. [ 407.828399][T10939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.828458][T10939] CPU: 0 UID: 0 PID: 10939 Comm: syz.3.1561 Not tainted syzkaller #0 PREEMPT(full) [ 407.828482][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.828494][T10939] Call Trace: [ 407.828502][T10939] [ 407.828511][T10939] dump_stack_lvl+0xe8/0x150 [ 407.828541][T10939] should_fail_ex+0x410/0x560 [ 407.828575][T10939] _copy_from_user+0x2d/0xb0 [ 407.828595][T10939] vcc_setsockopt+0x23a/0x850 [ 407.828723][T10939] ? __pfx_vcc_setsockopt+0x10/0x10 [ 407.828750][T10939] ? do_raw_spin_lock+0x12b/0x2f0 [ 407.828781][T10939] ? pvc_setsockopt+0x55/0x90 [ 407.828808][T10939] ? __local_bh_enable_ip+0xd6/0x140 [ 407.828834][T10939] pvc_setsockopt+0x6e/0x90 [ 407.828858][T10939] ? __pfx_pvc_setsockopt+0x10/0x10 [ 407.828886][T10939] do_sock_setsockopt+0x17c/0x1b0 [ 407.828915][T10939] __x64_sys_setsockopt+0x13d/0x1b0 [ 407.828942][T10939] do_syscall_64+0x166/0x520 [ 407.828960][T10939] ? trace_irq_disable+0x3b/0x140 [ 407.828986][T10939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.829007][T10939] ? clear_bhb_loop+0x70/0xc0 [ 407.829035][T10939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.829055][T10939] RIP: 0033:0x7f007b39e0d9 [ 407.829074][T10939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.829091][T10939] RSP: 002b:00007f007c2cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 407.829114][T10939] RAX: ffffffffffffffda RBX: 00007f007b625fa0 RCX: 00007f007b39e0d9 [ 407.829128][T10939] RDX: 0000000042020054 RSI: 0000000000000108 RDI: 0000000000000004 [ 407.829140][T10939] RBP: 00007f007c2cc090 R08: 0000000000000054 R09: 0000000000000000 [ 407.829154][T10939] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.829167][T10939] R13: 00007f007b626038 R14: 00007f007b625fa0 R15: 00007ffc1c710c68 [ 407.829197][T10939] [ 407.913989][ T25] m920x_read = error: -19 [ 407.914061][ T25] dvb-usb: error while querying for an remote control event. [ 408.024060][ T25] m920x_read = error: -19 [ 408.024087][ T25] dvb-usb: error while querying for an remote control event. [ 408.133627][ T25] m920x_read = error: -19 [ 408.133692][ T25] dvb-usb: error while querying for an remote control event. [ 408.243582][ T5622] m920x_read = error: -19 [ 408.243640][ T5622] dvb-usb: error while querying for an remote control event. [ 408.353628][ T5622] m920x_read = error: -19 [ 408.353677][ T5622] dvb-usb: error while querying for an remote control event. [ 408.433429][ T6077] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 408.433455][ T25] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 408.463518][ T5622] m920x_read = error: -19 [ 408.463554][ T5622] dvb-usb: error while querying for an remote control event. [ 408.573643][ T5622] m920x_read = error: -19 [ 408.573734][ T5622] dvb-usb: error while querying for an remote control event. [ 408.593550][ T6077] usb 4-1: Using ep0 maxpacket: 32 [ 408.594358][ T25] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 408.598355][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 408.598386][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 408.598424][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 408.599337][ T6077] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 408.601845][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.601870][ T25] usb 6-1: Product: syz [ 408.601884][ T25] usb 6-1: Manufacturer: syz [ 408.601898][ T25] usb 6-1: SerialNumber: syz [ 408.609790][T10947] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 408.610001][T10947] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 408.610117][T10947] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 408.618062][ T25] mdc800 6-1:1.0: Found Mustek MDC800 on USB. [ 408.630561][ T6077] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 408.630614][ T6077] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 408.630641][ T6077] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.630668][ T6077] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 408.693738][ T25] m920x_read = error: -19 [ 408.693765][ T25] dvb-usb: error while querying for an remote control event. [ 408.701090][ T6077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.701109][ T6077] usb 4-1: Product: syz [ 408.701117][ T6077] usb 4-1: Manufacturer: syz [ 408.701126][ T6077] usb 4-1: SerialNumber: syz [ 408.782388][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 408.786181][ T6077] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input99 [ 408.802594][ T25] m920x_read = error: -19 [ 408.802617][ T25] dvb-usb: error while querying for an remote control event. [ 408.840219][ T25] usb 2-1: USB disconnect, device number 79 [ 408.891674][T10949] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1566'. [ 408.903610][ T5622] m920x_read = error: -19 [ 408.903639][ T5622] dvb-usb: error while querying for an remote control event. [ 408.994426][ T6077] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 409.002831][ T6077] (id 0x00) [ 409.014984][ T30] m920x_read = error: -19 [ 409.015041][ T30] dvb-usb: error while querying for an remote control event. [ 409.083376][ T6077] rc_core: IR keymap rc-imon-pad not found [ 409.089363][ T6077] Registered IR keymap rc-empty [ 409.089457][ T6077] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 409.089479][ T6077] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 409.123550][ T25] m920x_read = error: -19 [ 409.123600][ T25] dvb-usb: error while querying for an remote control event. [ 409.188165][T10946] [ 409.190563][T10946] ====================================================== [ 409.197599][T10946] WARNING: possible circular locking dependency detected [ 409.204649][T10946] syzkaller #0 Not tainted [ 409.209072][T10946] ------------------------------------------------------ [ 409.216100][T10946] syz.3.1564/10946 is trying to acquire lock: [ 409.222177][T10946] ffff888029919a18 (&mdc800->io_lock){+.+.}-{4:4}, at: mdc800_device_open+0x2e/0x470 [ 409.231784][T10946] [ 409.231784][T10946] but task is already holding lock: [ 409.233590][ T25] m920x_read = error: -19 [ 409.233624][ T25] dvb-usb: error while querying for an remote control event. [ 409.250819][T10946] ffffffff8fd1a628 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x30/0x1e0 [ 409.259275][T10946] [ 409.259275][T10946] which lock already depends on the new lock. [ 409.259275][T10946] [ 409.269669][T10946] [ 409.269669][T10946] the existing dependency chain (in reverse order) is: [ 409.278674][T10946] [ 409.278674][T10946] -> #1 (minor_rwsem#2){++++}-{4:4}: [ 409.286157][T10946] down_write+0x96/0x200 [ 409.290924][T10946] usb_register_dev+0x142/0x5e0 [ 409.296304][T10946] mdc800_usb_probe+0xf96/0x18c0 [ 409.301772][T10946] usb_probe_interface+0x788/0xe50 [ 409.307405][T10946] really_probe+0x254/0xae0 [ 409.312501][T10946] __driver_probe_device+0x1e8/0x360 [ 409.318342][T10946] driver_probe_device+0x4f/0x240 [ 409.323893][T10946] __device_attach_driver+0x270/0x410 [ 409.329804][T10946] bus_for_each_drv+0x258/0x2f0 [ 409.335183][T10946] __device_attach+0x2c4/0x450 [ 409.340484][T10946] device_initial_probe+0xa1/0xd0 [ 409.346042][T10946] bus_probe_device+0x12a/0x220 [ 409.351413][T10946] device_add+0x7d7/0xb80 [ 409.356331][T10946] usb_set_configuration+0x1ad8/0x2180 [ 409.362311][T10946] usb_generic_driver_probe+0x8d/0x150 [ 409.368403][T10946] usb_probe_device+0x1c3/0x3b0 [ 409.373772][T10946] really_probe+0x254/0xae0 [ 409.378791][T10946] __driver_probe_device+0x1e8/0x360 [ 409.383486][ T25] m920x_read = error: -19 [ 409.383516][ T25] dvb-usb: error while querying for an remote control event. [ 409.396262][T10946] driver_probe_device+0x4f/0x240 [ 409.401822][T10946] __device_attach_driver+0x270/0x410 [ 409.407721][T10946] bus_for_each_drv+0x258/0x2f0 [ 409.413087][T10946] __device_attach+0x2c4/0x450 [ 409.418368][T10946] device_initial_probe+0xa1/0xd0 [ 409.423911][T10946] bus_probe_device+0x12a/0x220 [ 409.429308][T10946] device_add+0x7d7/0xb80 [ 409.434162][T10946] usb_new_device+0x9aa/0x1690 [ 409.439538][T10946] hub_event+0x28e8/0x4d30 [ 409.444481][T10946] process_scheduled_works+0xc3d/0x1630 [ 409.450573][T10946] worker_thread+0xa47/0xfb0 [ 409.455696][T10946] kthread+0x38b/0x480 [ 409.460296][T10946] ret_from_fork+0x514/0xb70 [ 409.465440][T10946] ret_from_fork_asm+0x1a/0x30 [ 409.470727][T10946] [ 409.470727][T10946] -> #0 (&mdc800->io_lock){+.+.}-{4:4}: [ 409.478457][T10946] __lock_acquire+0x15ff/0x2e50 [ 409.483836][T10946] lock_acquire+0x115/0x350 [ 409.488864][T10946] __mutex_lock+0x19d/0x1550 [ 409.493996][T10946] mdc800_device_open+0x2e/0x470 [ 409.499455][T10946] usb_open+0x156/0x1e0 [ 409.504131][T10946] chrdev_open+0x4d9/0x600 [ 409.509068][T10946] do_dentry_open+0x816/0x1380 [ 409.514346][T10946] vfs_open+0x3b/0x340 [ 409.518928][T10946] path_openat+0x1443/0x1d60 [ 409.524034][T10946] do_file_open+0x23e/0x4a0 [ 409.529053][T10946] do_sys_openat2+0x115/0x200 [ 409.533547][ T25] m920x_read = error: -19 [ 409.533575][ T25] dvb-usb: error while querying for an remote control event. [ 409.545938][T10946] __x64_sys_openat+0x138/0x170 [ 409.551413][T10946] do_syscall_64+0x166/0x520 [ 409.556514][T10946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.562920][T10946] [ 409.562920][T10946] other info that might help us debug this: [ 409.562920][T10946] [ 409.573136][T10946] Possible unsafe locking scenario: [ 409.573136][T10946] [ 409.580570][T10946] CPU0 CPU1 [ 409.585926][T10946] ---- ---- [ 409.591284][T10946] rlock(minor_rwsem#2); [ 409.595617][T10946] lock(&mdc800->io_lock); [ 409.602652][T10946] lock(minor_rwsem#2); [ 409.609415][T10946] lock(&mdc800->io_lock); [ 409.613906][T10946] [ 409.613906][T10946] *** DEADLOCK *** [ 409.613906][T10946] [ 409.622044][T10946] locks held by syz.3.1564/10946: 1, last CPU#0: [ 409.628372][T10946] #0: ffffffff8fd1a628 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x30/0x1e0 [ 409.637196][T10946] [ 409.637196][T10946] stack backtrace: [ 409.643083][T10946] CPU: 0 UID: 0 PID: 10946 Comm: syz.3.1564 Not tainted syzkaller #0 PREEMPT(full) [ 409.652448][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.662494][T10946] Call Trace: [ 409.665764][T10946] [ 409.668694][T10946] dump_stack_lvl+0xe8/0x150 [ 409.673280][T10946] print_circular_bug+0x2e2/0x300 [ 409.678301][T10946] check_noncircular+0x12f/0x150 [ 409.683233][T10946] __lock_acquire+0x15ff/0x2e50 [ 409.688087][T10946] ? lockdep_hardirqs_on+0x7b/0x110 [ 409.693285][T10946] ? irqentry_exit+0x218/0x910 [ 409.698046][T10946] ? trace_irq_disable+0x3b/0x140 [ 409.703069][T10946] lock_acquire+0x115/0x350 [ 409.707567][T10946] ? mdc800_device_open+0x2e/0x470 [ 409.712674][T10946] __mutex_lock+0x19d/0x1550 [ 409.717252][T10946] ? mdc800_device_open+0x2e/0x470 [ 409.722354][T10946] ? __lock_acquire+0x6df/0x2e50 [ 409.727298][T10946] ? __mutex_unlock_slowpath+0x731/0x900 [ 409.732916][T10946] ? mdc800_device_open+0x2e/0x470 [ 409.738017][T10946] ? __pfx___mutex_lock+0x10/0x10 [ 409.743036][T10946] mdc800_device_open+0x2e/0x470 [ 409.747964][T10946] ? __pfx_mdc800_device_open+0x10/0x10 [ 409.753502][T10946] usb_open+0x156/0x1e0 [ 409.757659][T10946] chrdev_open+0x4d9/0x600 [ 409.762078][T10946] ? __pfx_chrdev_open+0x10/0x10 [ 409.767029][T10946] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 409.773433][T10946] ? __pfx_chrdev_open+0x10/0x10 [ 409.778389][T10946] do_dentry_open+0x816/0x1380 [ 409.783146][T10946] vfs_open+0x3b/0x340 [ 409.787203][T10946] ? path_openat+0x1428/0x1d60 [ 409.792312][T10946] path_openat+0x1443/0x1d60 [ 409.796903][T10946] do_file_open+0x23e/0x4a0 [ 409.801412][T10946] ? __pfx_do_file_open+0x10/0x10 [ 409.806439][T10946] ? _raw_spin_unlock+0x28/0x50 [ 409.811283][T10946] ? alloc_fd+0x651/0x6c0 [ 409.815611][T10946] do_sys_openat2+0x115/0x200 [ 409.820280][T10946] ? __se_sys_futex+0x3a8/0x450 [ 409.825653][T10946] ? __pfx_do_sys_openat2+0x10/0x10 [ 409.830862][T10946] ? rcu_is_watching+0x16/0xb0 [ 409.835628][T10946] __x64_sys_openat+0x138/0x170 [ 409.840484][T10946] do_syscall_64+0x166/0x520 [ 409.845075][T10946] ? trace_irq_disable+0x3b/0x140 [ 409.850098][T10946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.856164][T10946] ? clear_bhb_loop+0x70/0xc0 [ 409.860843][T10946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.866730][T10946] RIP: 0033:0x7f007b35e90e [ 409.871144][T10946] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 409.890743][T10946] RSP: 002b:00007f007c2cbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 409.899167][T10946] RAX: ffffffffffffffda RBX: 00007f007c2cc6c0 RCX: 00007f007b35e90e [ 409.907136][T10946] RDX: 0000000000000002 RSI: 00007f007c2cbc00 RDI: ffffffffffffff9c [ 409.915125][T10946] RBP: 00007f007b435024 R08: 0000000000000000 R09: 0000000000000000 [ 409.923189][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.931169][T10946] R13: 00007f007b626038 R14: 00007f007b625fa0 R15: 00007ffc1c710c68 [ 409.939548][T10946] [ 409.942785][ T25] m920x_read = error: -19 [ 409.942807][ T25] dvb-usb: error while querying for an remote control event. [ 409.974096][ T6077] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 409.985596][ T6077] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input100 [ 409.998839][ T6077] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:100> initialized [ 410.043672][ T25] m920x_read = error: -19 [ 410.044442][ T25] dvb-usb: error while querying for an remote control event. [ 410.153456][ T25] m920x_read = error: -19 [ 410.153488][ T25] dvb-usb: error while querying for an remote control event. [ 410.166924][ T6077] usb 4-1: USB disconnect, device number 100 [ 410.203377][ T30] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 410.263478][ T25] m920x_read = error: -19 [ 410.263515][ T25] dvb-usb: error while querying for an remote control event. [ 410.353759][ T30] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 410.354200][ T30] usb 2-1: config 0 has no interfaces? [ 410.354235][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.355718][ T30] usb 2-1: config 0 descriptor?? [ 410.373517][ T30] m920x_read = error: -19 [ 410.373539][ T30] dvb-usb: error while querying for an remote control event. [ 410.483463][ T30] m920x_read = error: -19 [ 410.483492][ T30] dvb-usb: error while querying for an remote control event. [ 410.559988][ T30] usb 2-1: USB disconnect, device number 80 [ 410.594551][ T25] m920x_read = error: -19 [ 410.594580][ T25] dvb-usb: error while querying for an remote control event. [ 410.703494][ T25] m920x_read = error: -19 [ 410.703543][ T25] dvb-usb: error while querying for an remote control event. [ 410.813425][ T30] m920x_read = error: -19 [ 410.813464][ T30] dvb-usb: error while querying for an remote control event. [ 410.923761][ T30] m920x_read = error: -19 [ 410.923794][ T30] dvb-usb: error while querying for an remote control event. [ 411.033449][ T25] m920x_read = error: -19 [ 411.033479][ T25] dvb-usb: error while querying for an remote control event. [ 411.143484][ T25] m920x_read = error: -19 [ 411.143530][ T25] dvb-usb: error while querying for an remote control event. [ 411.180946][ T6077] usb 6-1: USB disconnect, device number 61 [ 411.188377][ T6077] mdc800 6-1:1.0: Mustek MDC800 disconnected from USB. [ 411.253476][ T25] m920x_read = error: -19 [ 411.253505][ T25] dvb-usb: error while querying for an remote control event. [ 411.363487][ T25] m920x_read = error: -19 [ 411.363520][ T25] dvb-usb: error while querying for an remote control event. [ 411.473676][ T25] m920x_read = error: -19 [ 411.473720][ T25] dvb-usb: error while querying for an remote control event. [ 411.583472][ T6077] m920x_read = error: -19 [ 411.583510][ T6077] dvb-usb: error while querying for an remote control event. [ 411.693629][ T6075] m920x_read = error: -19 [ 411.693659][ T6075] dvb-usb: error while querying for an remote control event. [ 411.803674][ T6075] m920x_read = error: -19 [ 411.803702][ T6075] dvb-usb: error while querying for an remote control event. [ 411.913642][ T6075] m920x_read = error: -19 [ 411.913674][ T6075] dvb-usb: error while querying for an remote control event. [ 412.023632][ T6075] m920x_read = error: -19 [ 412.023663][ T6075] dvb-usb: error while querying for an remote control event. [ 412.133445][ T6077] m920x_read = error: -19 [ 412.133485][ T6077] dvb-usb: error while querying for an remote control event. [ 412.243623][ T6077] m920x_read = error: -19 [ 412.243662][ T6077] dvb-usb: error while querying for an remote control event. [ 412.353680][ T6077] m920x_read = error: -19 [ 412.353711][ T6077] dvb-usb: error while querying for an remote control event. [ 412.463472][ T30] m920x_read = error: -19 [ 412.463569][ T30] dvb-usb: error while querying for an remote control event. [ 412.574093][ T6077] m920x_read = error: -19 [ 412.574158][ T6077] dvb-usb: error while querying for an remote control event. [ 412.683534][ T6077] m920x_read = error: -19 [ 412.683575][ T6077] dvb-usb: error while querying for an remote control event. [ 412.793599][ T6077] m920x_read = error: -19 [ 412.793636][ T6077] dvb-usb: error while querying for an remote control event. [ 412.903627][ T6077] m920x_read = error: -19 [ 412.903660][ T6077] dvb-usb: error while querying for an remote control event. [ 413.013679][ T6077] m920x_read = error: -19 [ 413.013709][ T6077] dvb-usb: error while querying for an remote control event. [ 413.123639][ T25] m920x_read = error: -19 [ 413.123673][ T25] dvb-usb: error while querying for an remote control event. [ 413.233887][ T25] m920x_read = error: -19 [ 413.233980][ T25] dvb-usb: error while querying for an remote control event. [ 413.343491][ T25] m920x_read = error: -19 [ 413.343528][ T25] dvb-usb: error while querying for an remote control event. [ 413.453664][ T25] m920x_read = error: -19 [ 413.453705][ T25] dvb-usb: error while querying for an remote control event. [ 413.573656][ T25] m920x_read = error: -19 [ 413.573686][ T25] dvb-usb: error while querying for an remote control event. [ 413.683613][ T25] m920x_read = error: -19 [ 413.683646][ T25] dvb-usb: error while querying for an remote control event. [ 413.793889][ T25] m920x_read = error: -19 [ 413.793930][ T25] dvb-usb: error while querying for an remote control event. [ 413.903415][ T25] m920x_read = error: -19 [ 413.903451][ T25] dvb-usb: error while querying for an remote control event. [ 414.013524][ T6075] m920x_read = error: -19 [ 414.013555][ T6075] dvb-usb: error while querying for an remote control event. [ 414.123592][ T6077] m920x_read = error: -19 [ 414.123627][ T6077] dvb-usb: error while querying for an remote control event. [ 414.236459][ T6077] m920x_read = error: -19 [ 414.236500][ T6077] dvb-usb: error while querying for an remote control event. [ 414.343635][ T6075] m920x_read = error: -19 [ 414.343666][ T6075] dvb-usb: error while querying for an remote control event. [ 414.453659][ T6075] m920x_read = error: -19 [ 414.453693][ T6075] dvb-usb: error while querying for an remote control event. [ 414.563656][ T6075] m920x_read = error: -19 [ 414.563704][ T6075] dvb-usb: error while querying for an remote control event. [ 414.673684][ T6077] m920x_read = error: -19 [ 414.673716][ T6077] dvb-usb: error while querying for an remote control event. [ 414.783438][ T6075] m920x_read = error: -19 [ 414.783472][ T6075] dvb-usb: error while querying for an remote control event. [ 414.893816][ T6075] m920x_read = error: -19 [ 414.893850][ T6075] dvb-usb: error while querying for an remote control event. [ 415.003470][ T6075] m920x_read = error: -19 [ 415.003525][ T6075] dvb-usb: error while querying for an remote control event. [ 415.113730][ T25] m920x_read = error: -19 [ 415.118198][ T25] dvb-usb: error while querying for an remote control event. [ 415.223765][ T6075] m920x_read = error: -19 [ 415.223824][ T6075] dvb-usb: error while querying for an remote control event. [ 415.333478][ T6075] m920x_read = error: -19 [ 415.333511][ T6075] dvb-usb: error while querying for an remote control event. [ 415.443907][ T6075] m920x_read = error: -19 [ 415.443945][ T6075] dvb-usb: error while querying for an remote control event. [ 415.553492][ T6075] m920x_read = error: -19 [ 415.553524][ T6075] dvb-usb: error while querying for an remote control event. [ 415.663473][ T6075] m920x_read = error: -19 [ 415.663506][ T6075] dvb-usb: error while querying for an remote control event. [ 415.773825][ T6075] m920x_read = error: -19 [ 415.773863][ T6075] dvb-usb: error while querying for an remote control event. [ 415.883777][ T6075] m920x_read = error: -19 [ 415.883816][ T6075] dvb-usb: error while querying for an remote control event. [ 415.993474][ T6075] m920x_read = error: -19 [ 415.993511][ T6075] dvb-usb: error while querying for an remote control event. [ 416.103644][ T6075] m920x_read = error: -19 [ 416.103692][ T6075] dvb-usb: error while querying for an remote control event. [ 416.213615][ T6075] m920x_read = error: -19 [ 416.213645][ T6075] dvb-usb: error while querying for an remote control event. [ 416.323600][ T5622] m920x_read = error: -19 [ 416.323635][ T5622] dvb-usb: error while querying for an remote control event. [ 416.433880][ T6075] m920x_read = error: -19 [ 416.438358][ T6075] dvb-usb: error while querying for an remote control event. [ 416.543460][ T6075] m920x_read = error: -19 [ 416.543494][ T6075] dvb-usb: error while querying for an remote control event. [ 416.653643][ T5622] m920x_read = error: -19 [ 416.653682][ T5622] dvb-usb: error while querying for an remote control event. [ 416.763639][ T5622] m920x_read = error: -19 [ 416.763670][ T5622] dvb-usb: error while querying for an remote control event. [ 416.873754][ T5622] m920x_read = error: -19 [ 416.873783][ T5622] dvb-usb: error while querying for an remote control event. [ 416.983419][ T5622] m920x_read = error: -19 [ 416.983452][ T5622] dvb-usb: error while querying for an remote control event. [ 417.093734][ T5622] m920x_read = error: -19 [ 417.093768][ T5622] dvb-usb: error while querying for an remote control event. [ 417.203434][ T5622] m920x_read = error: -19 [ 417.203471][ T5622] dvb-usb: error while querying for an remote control event. [ 417.313909][ T30] m920x_read = error: -19 [ 417.313938][ T30] dvb-usb: error while querying for an remote control event. [ 417.423611][ T30] m920x_read = error: -19 [ 417.423643][ T30] dvb-usb: error while querying for an remote control event. [ 417.533637][ T30] m920x_read = error: -19 [ 417.533669][ T30] dvb-usb: error while querying for an remote control event. [ 417.643462][ T30] m920x_read = error: -19 [ 417.643492][ T30] dvb-usb: error while querying for an remote control event. [ 417.753644][ T30] m920x_read = error: -19 [ 417.753673][ T30] dvb-usb: error while querying for an remote control event. [ 417.863686][ T6077] m920x_read = error: -19 [ 417.863720][ T6077] dvb-usb: error while querying for an remote control event. [ 417.973701][ T6077] m920x_read = error: -19 [ 417.973733][ T6077] dvb-usb: error while querying for an remote control event. [ 418.083609][ T6077] m920x_read = error: -19 [ 418.083641][ T6077] dvb-usb: error while querying for an remote control event. [ 418.193700][ T6075] m920x_read = error: -19 [ 418.193776][ T6075] dvb-usb: error while querying for an remote control event. [ 418.303463][ T6075] m920x_read = error: -19 [ 418.303495][ T6075] dvb-usb: error while querying for an remote control event. [ 418.413658][ T6077] m920x_read = error: -19 [ 418.413688][ T6077] dvb-usb: error while querying for an remote control event. [ 418.523671][ T6077] m920x_read = error: -19 [ 418.523700][ T6077] dvb-usb: error while querying for an remote control event. [ 418.633776][ T6077] m920x_read = error: -19 [ 418.633806][ T6077] dvb-usb: error while querying for an remote control event. [ 418.743462][ T6077] m920x_read = error: -19 [ 418.743492][ T6077] dvb-usb: error while querying for an remote control event. [ 418.853772][ T6077] m920x_read = error: -19 [ 418.853803][ T6077] dvb-usb: error while querying for an remote control event. [ 418.963927][ T6077] m920x_read = error: -19 [ 418.964012][ T6077] dvb-usb: error while querying for an remote control event. [ 419.073506][ T6077] m920x_read = error: -19 [ 419.073537][ T6077] dvb-usb: error while querying for an remote control event.