last executing test programs: 4m5.340375429s ago: executing program 0 (id=291): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe803f0000000000a8aaaafffeaaaa3d01ac043f0bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 4m5.289246876s ago: executing program 0 (id=292): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x4, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) sendto$inet(r4, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000000d}, 0x10) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$PIO_SCRNMAP(r8, 0x4b41, &(0x7f00000000c0)="d41a99487c66ce07117ea91150bfa552cbdb080f40a0ba3d32946787e10f9ff654958785520b64a795f739a5795c82a0f6") ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000080)={0x8, r7}) 4m4.392677961s ago: executing program 0 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)=ANY=[@ANYBLOB="ac4700000d0a01020000000000000000010000080900010073797a300000000c84470380100000"], 0x47ac}}, 0x800) 4m4.283556522s ago: executing program 0 (id=296): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0be}}, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x3, 0xb1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000010c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYBLOB="8528c6"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fcf50018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 4m2.362450931s ago: executing program 0 (id=306): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003020000202505a1a44000010203010902450001010340000904000502020600010b2406000045a4350052af0524"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ecm(0x0, 0x57, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003020000202505a1a44000010203010902450001010340000904000502020600010b2406000045a4350052af0524"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/203, 0xcb}], 0x1, 0x0, 0x0, 0x2000000}, 0xffffffff}], 0x1, 0xcb, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000004}], 0x1, 0x40800) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000004}], 0x1, 0x40800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x800) (async) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x1, 0x40800) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f00000000c0)=0x8, 0x4) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xfffffffffffffe0c, &(0x7f00000001c0)}, 0x40000161) r6 = socket$inet6(0x10, 0xa, 0xff7ffffd) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}, {&(0x7f0000000000)="ec53e10e1896fd6f7202c9c0618fb5cb9ca172ba1fca11e0a243c1ea4b8b6cefea0fbb9196e56fb78ce03c09db3f2d114051f119f26a7f21736eb1a9eb7bc109a83e26cb221da25d02c8eaa235bb2177f6905dc239a3c274aae3870dc2d1480319165bddf7057617ed8105f274be885a103d6795", 0x74}, {&(0x7f00000001c0)="be564c45e42661a99cc5c4be23e2be5e6737ed6350aec42f5c3b0fbab2143b580970f2f9435c8092eafeb5d0ede975338d3f523734c7b98c15ec26b5372d107c274a400b0152e743f228d563f2c4f5830a61c51752983b539e3fdc9b269d4882efc5dcc0bdcd4be14ceaecdddf10d4e31c3de1ad54403e034a4ba89ebd9aba0bb9df66e8a6e692ed266272bbbd04cf2e2719603353788dc8e68dc1789c37db19bd08a1dce10cb4a55f9f20f83f8121bb43ad8b0bbca1ce839e3506a9a62c4da2955d352d863a528c05fa8eac64a66887", 0xd0}], 0x3}, 0x20048000) 4m2.110626857s ago: executing program 0 (id=309): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 3m46.615420992s ago: executing program 32 (id=309): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 8.1486774s ago: executing program 2 (id=2018): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) write$rfkill(r0, &(0x7f0000000080)={0x8001, 0x1, 0x3, 0x1, 0x1}, 0x8) r6 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYRES32], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) write(r0, &(0x7f0000000240)="c77755c4b73fc14c1ea5d4e87d308ec25bcae9844e56c898dcdb04c4f079274bd4526985f61a228572c41f465ac1b2cddda60a70d2f1a72e9f14f5dd49a84e87f5c4323356f30c4b05ddf9bba58b00747581177c3e37ec28c1f46614254a66ceebd5393ed877ff30882d859454d6c6af5c32cfefea4bad34393f45e2a365cd6e6abb94590d6fd3d6ff5ece03586de626e115f72e24a64fc38ec92a315a104934e5a1e2c05c81433dcca9ff02533cf9950427fa887a97d95d9bd1b600429ec5adce479a53d3d8d78c", 0xc8) syz_usb_disconnect(r6) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r4) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200c6f97b16d8e0dd000010160c00010105c0080904007f01030101ff092108000f0122c6040905810300000000000000000000000000000000e1fc8d6a8ee95c5d608336c5fed150e92c891c89e6"], &(0x7f0000000200)={0x0, 0x0, 0x5, 0x0}) 5.108210222s ago: executing program 2 (id=2038): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000002000040"]) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x218, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1e4, 0x8, 0x0, 0x1, [{0x4}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c4c87a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62f82c4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3523a9bc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c6abbc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30d9b09c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7171978}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ae04a0d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x640300a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1466acb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3353f635}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e128c4}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e06388f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bdaa97b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x661c848d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bbba6c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61cfd6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x618ee6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d90b684}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53085ead}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x140b7385}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x503af2fa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcb30ffc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ceaea93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70644ae8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ca1dce0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f594e68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35e28d3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9985f8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x218}, 0x1, 0x0, 0x0, 0x404c000}, 0x1) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25070000000a0005007770616e34e065579900010000000300"], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) 4.760765917s ago: executing program 2 (id=2042): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48100, 0x10c) chroot(&(0x7f0000000080)='./file0\x00') syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x5, 0xc9, 0xc9, 0x87}}}, 0x8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x624301, 0x0) r0 = getuid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) chown(&(0x7f0000000180)='./file0\x00', r0, r1) futex(0x0, 0x8, 0x0, 0x0, &(0x7f0000000300)=0x2, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000440)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) setfsgid(r1) close(r3) r4 = socket$rxrpc(0x21, 0x2, 0xa) setxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f00000005c0)={'U-', 0x1}, 0x16, 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r4, 0x3a1a5000) syz_open_dev$tty20(0xc, 0x4, 0x1) 3.596459654s ago: executing program 4 (id=2053): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfe80}, 0x1c) 3.445764424s ago: executing program 4 (id=2055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000e0000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)=ANY=[@ANYBLOB="ac4700000d0a01020000000000000000010000080900010073797a300000000084470380100000"], 0x47ac}}, 0x800) 3.253964707s ago: executing program 3 (id=2058): socket$tipc(0x1e, 0x2, 0x0) unlink(0x0) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080040000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 3.150897338s ago: executing program 4 (id=2059): r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a000000300001802c00018014000300fe800000000000aa45"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x3}) (async, rerun: 64) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'wlan1\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47, 0x5, 0x10, 0x2, 0x40, "56e065", 0x9}}) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) 3.084658754s ago: executing program 3 (id=2060): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = syz_usb_connect$cdc_ncm(0x3, 0x156, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x144, 0x2, 0x1, 0x3, 0xc0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "db5059"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xd5, 0xfff9, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0xe8, 0xa}, [@country_functional={0x8, 0x24, 0x7, 0x6, 0x5, [0xe]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x32}, @mdlm_detail={0xc2, 0x24, 0x13, 0xf9, "7f82aeabb5fb88be82543edb504ed87f9c212f10915faa7d28b8ad12043ab227a83a560110d99a8576be8347001e4855c75bdd29a8b8c971fc87463fe2a4158bb44967a2de2682384e56fdbe97c6397713a1298e78878b588c5b33cd129c7b710e64d466315da79bdcd8a0561933a48e4e7bd742057bfc9bc1e6278555f2a959d7e56356adaad2b27f239854f4c4a3b83df0116c02ce6f6a415443c3aa23f104106155e587c26140c3c1592d7aea010db757fd08b417ac47d704e6c30ec5"}, @dmm={0x7, 0x24, 0x14, 0x6, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x4b6a, 0xf9, 0x9}, @dmm={0x7, 0x24, 0x14, 0xa000, 0x7ff}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x7, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xf5, 0xb6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0xc, 0x2}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0xf, 0x12, 0x3, 0xff, 0x7f}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "736dbaae457850097ff2236f1187fbbf"}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc1a}}, {0x3d, &(0x7f00000002c0)=@string={0x3d, 0x3, "42b8b8e578f4c274408d816bb5b2cbd969ef42c872d7a9c852a9ab42391d0fc439affb790199f43f018fc74f957e08eda40243a5ec1166a4cb96b7"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x7c}}, {0xb1, &(0x7f0000000380)=@string={0xb1, 0x3, "8c228c37201c2f1d36d3da46746af82d2bd7294af7f73d4d9e24f527fb9416918edd143495156ecd36523b68d0d7f0c64f095cbaf293b9a2953097611f6140027a82a5a466d9b7d2ae7bcf95728964814ac592d620c9ac66bfe89712db9aea49706fdfc957ac57b71e78573f50670b68d0611d20c07b8129afced354168f596b52ae210db3cd39a7aded6ced55f08c6ca06302e3665b8598c18d099fa3a44f1f3f77d81cb7571183ff1a58c2a009b6"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f00000004c0)={0x60, 0x4, 0x13, {0x13, 0x7, "f2683df80bbb0e04ce7cbc3f4ba6782ce4"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f0000000580)={0x40, 0x8, 0xd9, "1a20dcf0b2d600417db4b350e6ccd5283e524374db349e7e65d72bbb180abb69d13194489f18df7fcbe50e058086cae0a58dc598034c22ef7be287e808aa506c93606850d8d93bb1cf1945f66a5355f9b47c2b92301d413a0b6a724a90c157adddde382448031040fb423d5efa95c5fce6715b047b500dcd1704345c49d3e1832b5e9517940e0c5c3bc84e1adef2f5433358fa33cdeb79b8f8b392e9a9143c359ddbd9b096c12d4df5c0dec1c1ac150a6b5e3aedc5f6ec84790299abc95058b7784228e6a68248129f46da72d7913b404bc7a44cc70bf30434"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xcf}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x11}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x7, 0xa33, 0x4, 0x7, 0x0, 0x200, 0x1c00, 0x8d3, 0x1, 0xb, 0x1, 0x3}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000780)={0x20, 0x83, 0x2}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000800)={0x20, 0x89, 0x2}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000018c0)=ANY=[@ANYBLOB="20000000010101010000000000000000020000080c0003"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002222000000960100060100025b002a281fb0a58c0e60be1803000000002a90a07538b3"], 0x0}, 0x0) 2.666432198s ago: executing program 1 (id=2064): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xff00}, 0x1c) 2.560599555s ago: executing program 2 (id=2065): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0), 0x95) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)={[&(0x7f00000000c0)='memory.events.local\x00']}, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000100)) 2.424671764s ago: executing program 1 (id=2066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000c00001c005a8018000180140002"], 0x4c}}, 0x0) 2.387892291s ago: executing program 2 (id=2067): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x22, 0x22, {0x22, 0x7, "0261222765e85c1ae340252f920d72bb4609e268d46ffe3c549d770ed81ba091"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x40, 0x18, 0x8e, "25089c48bae5c034323c6fd546017f10be6070f0f31a1c6e2b14487b3f8fbf8cf054a9947cebeb54358219d08daf0b7d947648cf77717842b69af27694313f9356226a637209da959a759e1140e5272aec29a916b5d40dd4f70d6738547e6b41bc0d51299e3d3cb88bd971d979bb0a906359bd7bc78d8b61d35805f42891a37202e5516ed3d81959e94974bf7408"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x33}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}}) 2.3300878s ago: executing program 1 (id=2068): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002040)=ANY=[@ANYBLOB="1400000010000100000000000028000000120a0102"], 0x50}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) (async) io_setup(0x3, &(0x7f0000000000)) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x2) (async, rerun: 32) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000140)) (async) recvmsg(r2, &(0x7f0000000080)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000001280)=""/165, 0xa5}, {&(0x7f0000001340)=""/120, 0x78}, {&(0x7f00000013c0)=""/174, 0xae}], 0x5, &(0x7f0000001500)=""/245, 0xf5}, 0x2020) (async) mount$cgroup(0x0, 0x0, 0x0, 0x10084, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1.344734879s ago: executing program 4 (id=2069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000f0000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)=ANY=[@ANYBLOB="ac4700000d0a01020000000000000000010000080900010073797a300000000084470380100000"], 0x47ac}}, 0x800) 1.306599411s ago: executing program 1 (id=2070): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) 1.030939791s ago: executing program 4 (id=2071): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d665a100", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) 972.794198ms ago: executing program 3 (id=2072): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101ffffc90000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 852.794162ms ago: executing program 3 (id=2073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c00028008000240000000fa080001400000000108000340000000000900010073797a30"], 0xc8}}, 0x0) 824.164476ms ago: executing program 4 (id=2074): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48100, 0x10c) chroot(&(0x7f0000000080)='./file0\x00') syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x8, 0xc9, 0x78}}}, 0x7) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x624301, 0x0) r0 = getuid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) chown(&(0x7f0000000180)='./file0\x00', r0, r1) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x5180}, {r3, 0x4204}, {r3, 0x8645}], 0x3, 0x0, 0x0, 0x0) futex(0x0, 0x8, 0x0, 0x0, &(0x7f0000000300)=0x2, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000440)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) close(r4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x1, 0x4e22, 0x1, 0x2, 0x20, 0x20, 0x87, r6, r8}, {0x200, 0xa8b, 0x10000, 0x5, 0x22, 0x1, 0x5, 0x5}, {0x4, 0x2, 0xfffffffffffffffa, 0x100000001}, 0x6, 0x6e6bba, 0x2, 0x0, 0x1, 0x2}, {{@in6=@local, 0x4d2, 0x2b}, 0xa, @in=@remote, 0x3507, 0x1, 0x0, 0x2, 0xb83, 0xffffffff, 0xa}}, 0xe8) r9 = socket$rxrpc(0x21, 0x2, 0xa) setxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f00000005c0)={'U-', 0x1}, 0x16, 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r9, 0x3a1a5000) syz_open_dev$tty20(0xc, 0x4, 0x1) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0xe4, 0x6}) 544.906477ms ago: executing program 3 (id=2075): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xffe0}, 0x1c) 440.148126ms ago: executing program 3 (id=2076): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="28795ed554e457ae6e929478000000", @ANYRES16=r2, @ANYBLOB="0b0600200000000000003000000005003300830000000a0001007770616e30000000"], 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r5, 0x0, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x14) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25070016000a0004007770616e340000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) 291.276363ms ago: executing program 2 (id=2077): r0 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="603b429ee6d5"}) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="402227000000c11b66e5fb91885376432b6fbd9e0a6327009bffcdf494077876a796d53476cb69d1019b4784c636553b3011b37520b8dbe2095cce528e"], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x20, 0xd, 0x17, "3a5f96f3d1bab4c7d8aac60e8c345b624c1fe9dcb261e2"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x4, 0x800, 0x8, 0x661, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0xfffe, 0x3}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) 210.20972ms ago: executing program 1 (id=2078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write(r1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000100000000000080010001000000"], 0x1c}}, 0x0) 0s ago: executing program 1 (id=2079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x148, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0xd69}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x269}, {0xc, 0x90, 0xa2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7f}, {0xc, 0x90, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xff}, {0xc, 0x90, 0xfffffffffffffff7}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14}}, 0x98}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(0xffffffffffffffff, 0x8, 0x7fffffff, &(0x7f0000000540)=""/228, &(0x7f0000000640)=0xe4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2500, 0x0) r7 = timerfd_create(0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f00000002c0)=0xc6c) socket$nl_crypto(0x10, 0x3, 0x15) r8 = dup(r6) ioctl$KVM_SET_CPUID2(r8, 0xc008ae09, &(0x7f0000000280)=ANY=[@ANYRES8=r6]) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0xfd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) kernel console output (not intermixed with test programs): ad = error: -19 [ 327.886024][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.888258][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 327.903047][ T5929] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.914628][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.922865][ T5929] usb 3-1: Product: syz [ 327.927658][ T5929] usb 3-1: Manufacturer: 勋ﴦ鲒嗇긿៾ᦏ訇ﭕݷ駱䰨槑ᵬꎯあኪ箖퐯줍㾷档撯䤎ᙃ௷ⵟ臠☼홵瓉箚ቀᖁ鰚ℷ솑᡽ࠃ龾秜돪단揰耬矀꾔΁툔勎࿫㛧ꗮ㴌ᰁ㾿癧Ǧ巙螪葼猹䗅භ⿱滤亐ྌ뾤탅ﲒ瀀俞셳퀐堿뾎욅⹐ン괩ꐹ㿇氾놩楄኱⮒ꝰ䝡ᤩ㞯邳⏣牏඄ᗛ [ 327.928752][T11903] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 327.928752][T11903] The task syz.3.1868 (11903) triggered the difference, watch for misbehavior. [ 327.964886][ T5929] usb 3-1: SerialNumber: syz [ 327.999750][ T5929] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 328.015841][ T5902] m920x_read = error: -19 [ 328.018108][ T5929] usb 3-1: no configuration chosen from 1 choice [ 328.020586][ T5902] dvb-usb: error while querying for an remote control event. [ 328.055832][ T5902] m920x_read = error: -19 [ 328.061311][ T7348] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 328.066322][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 328.111485][ T7348] videodev: could not get a free minor [ 328.126509][ T7348] gspca_main: video_register_device err -23 [ 328.132796][ T7348] tv8532 2-1:8.250: probe with driver tv8532 failed with error -23 [ 328.149273][ T7348] usb 2-1: USB disconnect, device number 50 [ 328.156284][ T5902] m920x_read = error: -19 [ 328.160990][ T5902] dvb-usb: error while querying for an remote control event. [ 328.255766][ T5902] m920x_read = error: -19 [ 328.260364][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 328.285785][ T5902] m920x_read = error: -19 [ 328.290313][ T5902] dvb-usb: error while querying for an remote control event. [ 328.405761][ T5902] m920x_read = error: -19 [ 328.410177][ T5902] dvb-usb: error while querying for an remote control event. [ 328.435975][ T5902] m920x_read = error: -19 [ 328.440672][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 328.535742][ T5902] m920x_read = error: -19 [ 328.540178][ T5902] dvb-usb: error while querying for an remote control event. [ 328.619353][ T5902] m920x_read = error: -19 [ 328.623773][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 328.659655][ T5902] m920x_read = error: -19 [ 328.664352][ T5902] dvb-usb: error while querying for an remote control event. [ 328.775889][ T5909] m920x_read = error: -19 [ 328.780349][ T5909] dvb-usb: error while querying for an remote control event. [ 328.787922][ T5967] m920x_read = error: -19 [ 328.792306][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 328.905914][ T5909] m920x_read = error: -19 [ 328.910380][ T5909] dvb-usb: error while querying for an remote control event. [ 328.918161][ T44] gspca_cpia1: usb_control_msg 01, error -110 [ 328.924250][ T44] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 328.945712][ T5902] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 328.955791][ T44] m920x_read = error: -19 [ 328.960148][ T44] dvb-usb: error -19 while querying for an remote control event. [ 329.035854][ T44] m920x_read = error: -19 [ 329.040379][ T44] dvb-usb: error while querying for an remote control event. [ 329.095739][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 329.102376][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.113408][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.123361][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 329.136355][ T44] m920x_read = error: -19 [ 329.141044][ T44] dvb-usb: error -19 while querying for an remote control event. [ 329.148852][ T5902] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 329.158093][ T5909] m920x_read = error: -19 [ 329.162456][ T5909] dvb-usb: error while querying for an remote control event. [ 329.169886][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.180302][ T5902] usb 2-1: config 0 descriptor?? [ 329.287814][ T5909] m920x_read = error: -19 [ 329.292295][ T5909] dvb-usb: error while querying for an remote control event. [ 329.335925][ T5909] m920x_read = error: -19 [ 329.340411][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 329.405945][ T5909] m920x_read = error: -19 [ 329.410480][ T5909] dvb-usb: error while querying for an remote control event. [ 329.506516][ T5909] m920x_read = error: -19 [ 329.510937][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 329.525774][ T5909] m920x_read = error: -19 [ 329.530639][ T5909] dvb-usb: error while querying for an remote control event. [ 329.606858][ T7348] usb 4-1: USB disconnect, device number 93 [ 329.646521][ T5909] m920x_read = error: -19 [ 329.658242][ T5909] dvb-usb: error while querying for an remote control event. [ 329.679819][ T5929] usb 5-1: USB disconnect, device number 69 [ 329.687456][ T5909] m920x_read = error: -19 [ 329.696167][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 329.776792][ T5909] m920x_read = error: -19 [ 329.781232][ T5909] dvb-usb: error while querying for an remote control event. [ 329.796704][T11910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.806261][T11910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.844486][ T5902] usbhid 2-1:0.0: can't add hid device: -71 [ 329.860602][ T5902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 329.873333][ T5909] m920x_read = error: -19 [ 329.881153][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 329.893724][ T5902] usb 2-1: USB disconnect, device number 51 [ 329.903625][ T44] m920x_read = error: -19 [ 329.908298][ T44] dvb-usb: error while querying for an remote control event. [ 329.995786][ T7348] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 330.025821][ T44] m920x_read = error: -19 [ 330.030234][ T44] dvb-usb: error while querying for an remote control event. [ 330.043670][T11921] loop6: detected capacity change from 0 to 63 [ 330.055799][ T44] m920x_read = error: -19 [ 330.065441][ T44] dvb-usb: error -19 while querying for an remote control event. [ 330.147449][ T44] m920x_read = error: -19 [ 330.151906][ T44] dvb-usb: error while querying for an remote control event. [ 330.155735][ T7348] usb 4-1: Using ep0 maxpacket: 32 [ 330.170116][ T7348] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 330.178813][ T7348] usb 4-1: config 0 has no interface number 0 [ 330.185296][ T7348] usb 4-1: config 0 interface 184 has no altsetting 0 [ 330.194977][ T7348] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 330.204614][ T7348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.215517][ T7348] usb 4-1: Product: syz [ 330.222305][ T7348] usb 4-1: Manufacturer: syz [ 330.227032][ T7348] usb 4-1: SerialNumber: syz [ 330.234467][ T7348] usb 4-1: config 0 descriptor?? [ 330.242737][ T7348] smsc75xx v1.0.0 [ 330.245767][ T5902] m920x_read = error: -19 [ 330.250774][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 330.265877][ T5902] m920x_read = error: -19 [ 330.270326][ T5902] dvb-usb: error while querying for an remote control event. [ 330.385851][ T5902] m920x_read = error: -19 [ 330.390247][ T5902] dvb-usb: error while querying for an remote control event. [ 330.424482][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1887'. [ 330.433665][ T5902] m920x_read = error: -19 [ 330.435160][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 330.438144][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 330.455695][ T44] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 330.490547][ T5902] usb 3-1: USB disconnect, device number 86 [ 330.506042][ T5909] m920x_read = error: -19 [ 330.512758][ T5909] dvb-usb: error while querying for an remote control event. [ 330.578093][T11934] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.598211][ T5909] m920x_read = error: -19 [ 330.606635][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 330.627675][ T44] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 330.638295][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.639195][T11934] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.655947][ T5909] m920x_read = error: -19 [ 330.661320][ T5909] dvb-usb: error while querying for an remote control event. [ 330.672181][ T44] usb 5-1: config 0 descriptor?? [ 330.749279][T11934] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.767556][ T5909] m920x_read = error: -19 [ 330.772358][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 330.796337][ T5909] m920x_read = error: -19 [ 330.800752][ T5909] dvb-usb: error while querying for an remote control event. [ 330.827586][T11934] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.861956][ T7348] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 330.882362][ T7348] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 330.892717][ T44] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 330.915926][ T5909] m920x_read = error: -19 [ 330.923671][ T5909] dvb-usb: error while querying for an remote control event. [ 330.935804][ T5909] m920x_read = error: -19 [ 330.940488][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.948948][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 330.961091][ T2957] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.978195][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.998128][ T2957] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.015869][ T5929] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 331.035935][ T5909] m920x_read = error: -19 [ 331.040502][ T5909] dvb-usb: error while querying for an remote control event. [ 331.093354][ T44] [drm:udl_init] *ERROR* Selecting channel failed [ 331.122282][ T44] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 331.129295][ T5902] m920x_read = error: -19 [ 331.133656][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 331.154701][ T44] [drm] Initialized udl on minor 2 [ 331.160423][ T5909] m920x_read = error: -19 [ 331.164797][ T5909] dvb-usb: error while querying for an remote control event. [ 331.180143][ T44] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 331.221528][ T44] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 331.233481][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short [ 331.258226][ T5929] usb 2-1: config 0 has no interfaces? [ 331.269340][ T5929] usb 2-1: language id specifier not provided by device, defaulting to English [ 331.287278][ T5909] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 331.303528][ T44] usb 5-1: USB disconnect, device number 70 [ 331.369643][ T5929] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40 [ 331.381279][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.401231][ T5929] usb 2-1: config 0 descriptor?? [ 331.423336][T11941] loop6: detected capacity change from 0 to 63 [ 331.455419][ T5909] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 331.458228][ T9457] buffer_io_error: 5 callbacks suppressed [ 331.458243][ T9457] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.475366][ T5967] m920x_read = error: -19 [ 331.477190][ T9457] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.480698][ T5967] dvb-usb: error while querying for an remote control event. [ 331.480795][ T5967] m920x_read = error: -19 [ 331.489305][ T9457] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.510330][ T9457] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.524964][ T9457] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.552976][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 331.586073][ T5967] m920x_read = error: -19 [ 331.590845][ T5967] dvb-usb: error while querying for an remote control event. [ 331.603498][T11943] loop6: detected capacity change from 0 to 524287999 [ 331.613740][ T9457] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.622540][ T9457] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.632549][ T9457] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.644288][ T9457] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.652593][ T9457] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.661443][ T9457] ldm_validate_partition_table(): Disk read failed. [ 331.711722][ T9457] Dev loop6: unable to read RDB block 0 [ 331.717916][ T5967] m920x_read = error: -19 [ 331.722278][ T5967] dvb-usb: error while querying for an remote control event. [ 331.730274][ T5909] m920x_read = error: -19 [ 331.734650][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 331.744561][ T9457] loop6: unable to read partition table [ 331.744850][ T5929] usb 2-1: USB disconnect, device number 52 [ 331.761490][T11943] ldm_validate_partition_table(): Disk read failed. [ 331.769060][T11943] Dev loop6: unable to read RDB block 0 [ 331.775214][T11943] loop6: unable to read partition table [ 331.777271][ T7348] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 331.786249][T11943] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 331.803363][ T7348] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 331.806406][T11944] ldm_validate_partition_table(): Disk read failed. [ 331.813266][ T7348] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 331.823940][T11944] Dev loop6: unable to read RDB block 0 [ 331.832562][ T7348] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 331.839967][T11944] loop6: unable to read partition table [ 331.852621][T11944] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 331.854337][ T7348] usb 4-1: USB disconnect, device number 94 [ 331.862236][ T5967] m920x_read = error: -19 [ 331.877018][ T5967] dvb-usb: error while querying for an remote control event. [ 331.906019][ T5967] m920x_read = error: -19 [ 331.910436][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 331.984625][T11949] syzkaller1: entered promiscuous mode [ 331.992300][T11949] syzkaller1: entered allmulticast mode [ 332.001449][ T5967] m920x_read = error: -19 [ 332.007222][ T5967] dvb-usb: error while querying for an remote control event. [ 332.055830][ T44] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 332.097862][ T5967] m920x_read = error: -19 [ 332.102228][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 332.116010][ T5909] m920x_read = error: -19 [ 332.120378][ T5909] dvb-usb: error while querying for an remote control event. [ 332.220770][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 332.229473][ T44] usb 5-1: config 2 has an invalid interface number: 254 but max is 0 [ 332.237932][ T44] usb 5-1: config 2 has no interface number 0 [ 332.244161][ T5909] m920x_read = error: -19 [ 332.248668][ T5909] dvb-usb: error while querying for an remote control event. [ 332.257836][ T44] usb 5-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=c1.88 [ 332.267009][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.275011][ T44] usb 5-1: Product: syz [ 332.279373][ T44] usb 5-1: Manufacturer: syz [ 332.283973][ T44] usb 5-1: SerialNumber: syz [ 332.288720][ T5909] m920x_read = error: -19 [ 332.293094][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 332.376007][ T5909] m920x_read = error: -19 [ 332.383482][ T5909] dvb-usb: error while querying for an remote control event. [ 332.422288][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1897'. [ 332.431556][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 332.455906][ T5909] m920x_read = error: -19 [ 332.460319][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 332.517647][ T5909] m920x_read = error: -19 [ 332.522044][ T5909] dvb-usb: error while querying for an remote control event. [ 332.610681][ T44] gspca_main: finepix-2.14.0 probing 04cb:0109 [ 332.634555][ T44] usb 5-1: USB disconnect, device number 71 [ 332.647315][ T5909] m920x_read = error: -19 [ 332.658049][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 332.672816][ T5967] m920x_read = error: -19 [ 332.678812][ T5967] dvb-usb: error while querying for an remote control event. [ 332.795872][ T5967] m920x_read = error: -19 [ 332.800393][ T5967] dvb-usb: error while querying for an remote control event. [ 332.845702][ T7348] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 332.845739][ T5967] m920x_read = error: -19 [ 332.858109][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 332.925862][ T5967] m920x_read = error: -19 [ 332.930578][ T5967] dvb-usb: error while querying for an remote control event. [ 332.999163][ T7348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 333.010204][ T7348] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 333.019349][ T7348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.025739][ T5967] m920x_read = error: -19 [ 333.030735][ T7348] usb 2-1: config 0 descriptor?? [ 333.032664][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 333.046548][T11962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 333.046946][ T44] m920x_read = error: -19 [ 333.059654][ T44] dvb-usb: error while querying for an remote control event. [ 333.175795][ T5967] m920x_read = error: -19 [ 333.180358][ T5967] dvb-usb: error while querying for an remote control event. [ 333.225772][ T5967] m920x_read = error: -19 [ 333.230176][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 333.296478][ T5967] m920x_read = error: -19 [ 333.300865][ T5967] dvb-usb: error while querying for an remote control event. [ 333.385751][ T44] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 333.396032][ T5967] m920x_read = error: -19 [ 333.400406][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 333.415870][ T5967] m920x_read = error: -19 [ 333.420250][ T5967] dvb-usb: error while querying for an remote control event. [ 333.468371][ T7348] elan 0003:04F3:0755.0014: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 333.535874][ T5967] m920x_read = error: -19 [ 333.540227][ T5967] dvb-usb: error while querying for an remote control event. [ 333.551334][ T44] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 333.560337][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.570531][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.579655][ T5967] m920x_read = error: -19 [ 333.584027][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 333.591916][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.603631][ T44] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 333.612917][ T44] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.620954][ T44] usb 5-1: Product: syz [ 333.625100][ T44] usb 5-1: Manufacturer: syz [ 333.636953][ T44] cdc_wdm 5-1:1.0: skipping garbage [ 333.642544][ T44] cdc_wdm 5-1:1.0: skipping garbage [ 333.648425][ T44] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 333.656794][ T5967] m920x_read = error: -19 [ 333.661165][ T5967] dvb-usb: error while querying for an remote control event. [ 333.755763][ T44] m920x_read = error: -19 [ 333.760232][ T44] dvb-usb: error -19 while querying for an remote control event. [ 333.776416][ T44] m920x_read = error: -19 [ 333.780783][ T44] dvb-usb: error while querying for an remote control event. [ 333.840627][T11970] netlink: 'syz.4.1903': attribute type 10 has an invalid length. [ 333.850631][ T5929] usb 5-1: USB disconnect, device number 72 [ 333.897630][ T5967] m920x_read = error: -19 [ 333.902042][ T5967] dvb-usb: error while querying for an remote control event. [ 333.926881][ T5967] m920x_read = error: -19 [ 333.931257][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 334.015762][ T5967] m920x_read = error: -19 [ 334.020224][ T5967] dvb-usb: error while querying for an remote control event. [ 334.030658][T11974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.043969][T11974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.058617][T11974] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 334.069339][T11974] EXT4-fs (loop1): unable to read superblock [ 334.096290][ T44] m920x_read = error: -19 [ 334.100758][ T44] dvb-usb: error -19 while querying for an remote control event. [ 334.136028][ T44] m920x_read = error: -19 [ 334.140426][ T44] dvb-usb: error while querying for an remote control event. [ 334.255828][ T44] m920x_read = error: -19 [ 334.260576][ T44] dvb-usb: error while querying for an remote control event. [ 334.268242][ T5909] m920x_read = error: -19 [ 334.272605][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 334.335732][ T5967] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 334.385798][ T5909] m920x_read = error: -19 [ 334.390217][ T5909] dvb-usb: error while querying for an remote control event. [ 334.404803][T11978] netlink: 'syz.4.1906': attribute type 2 has an invalid length. [ 334.414435][T11978] netlink: 'syz.4.1906': attribute type 1 has an invalid length. [ 334.441786][ T5909] m920x_read = error: -19 [ 334.446284][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 334.490233][ T5967] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 334.499408][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.508863][ T5909] m920x_read = error: -19 [ 334.513234][ T5909] dvb-usb: error while querying for an remote control event. [ 334.520717][ T5967] usb 4-1: Product: syz [ 334.524882][ T5967] usb 4-1: Manufacturer: syz [ 334.529624][ T5967] usb 4-1: SerialNumber: syz [ 334.607721][ T44] m920x_read = error: -19 [ 334.612130][ T44] dvb-usb: error -19 while querying for an remote control event. [ 334.635757][ T44] m920x_read = error: -19 [ 334.645713][ T44] dvb-usb: error while querying for an remote control event. [ 334.697000][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 334.707207][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 334.755833][ T44] m920x_read = error: -19 [ 334.760291][ T44] dvb-usb: error while querying for an remote control event. [ 334.778882][ T5902] m920x_read = error: -19 [ 334.783292][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 334.895906][ T5902] m920x_read = error: -19 [ 334.901293][ T5902] dvb-usb: error while querying for an remote control event. [ 334.945824][ T5902] m920x_read = error: -19 [ 334.950491][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 335.015891][ T5902] m920x_read = error: -19 [ 335.021930][ T5902] dvb-usb: error while querying for an remote control event. [ 335.125086][T11991] binder: 11990:11991 ioctl c0306201 200000000080 returned -14 [ 335.125853][ T5902] m920x_read = error: -19 [ 335.137384][ T44] m920x_read = error: -19 [ 335.141766][ T44] dvb-usb: error while querying for an remote control event. [ 335.166900][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 335.276191][ T44] m920x_read = error: -19 [ 335.280599][ T44] dvb-usb: error while querying for an remote control event. [ 335.326831][ T5952] m920x_read = error: -19 [ 335.331239][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 335.354212][ T5909] usb 2-1: USB disconnect, device number 53 [ 335.407944][ T5952] m920x_read = error: -19 [ 335.412457][ T5952] dvb-usb: error while querying for an remote control event. [ 335.465800][ T5902] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 335.495897][ T5952] m920x_read = error: -19 [ 335.500271][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 335.525883][ T5952] m920x_read = error: -19 [ 335.530327][ T5952] dvb-usb: error while querying for an remote control event. [ 335.637568][ T5902] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.647025][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.657477][ T5952] m920x_read = error: -19 [ 335.661879][ T5952] dvb-usb: error while querying for an remote control event. [ 335.669393][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.678505][ T5946] m920x_read = error: -19 [ 335.682883][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 335.690815][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.705924][ T5909] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 335.725138][ T5902] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.736628][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.744712][ T5902] usb 5-1: Product: syz [ 335.749336][ T5902] usb 5-1: Manufacturer: syz [ 335.766900][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 335.772181][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 335.778406][ T5902] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 335.801253][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1917'. [ 335.810527][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'. [ 335.825853][ T5902] m920x_read = error: -19 [ 335.830300][ T5902] dvb-usb: error while querying for an remote control event. [ 335.855934][ T5909] usb 2-1: device descriptor read/64, error -71 [ 335.875744][ T5902] m920x_read = error: -19 [ 335.880226][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 335.955983][ T5902] m920x_read = error: -19 [ 335.960441][ T5902] dvb-usb: error while querying for an remote control event. [ 335.990121][T11995] netlink: 'syz.4.1914': attribute type 10 has an invalid length. [ 336.002426][ T5902] usb 5-1: USB disconnect, device number 73 [ 336.035904][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 336.056066][ T5946] m920x_read = error: -19 [ 336.061963][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 336.105923][ T5946] m920x_read = error: -19 [ 336.110364][ T5946] dvb-usb: error while querying for an remote control event. [ 336.125694][ T5909] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 336.225837][ T5902] m920x_read = error: -19 [ 336.230256][ T5902] dvb-usb: error while querying for an remote control event. [ 336.238077][ T5946] m920x_read = error: -19 [ 336.244567][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 336.255787][ T5909] usb 2-1: device descriptor read/64, error -71 [ 336.345817][ T5946] m920x_read = error: -19 [ 336.350241][ T5946] dvb-usb: error while querying for an remote control event. [ 336.367651][ T5909] usb usb2-port1: attempt power cycle [ 336.415889][ T5946] m920x_read = error: -19 [ 336.420321][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 336.485859][ T5902] m920x_read = error: -19 [ 336.490231][ T5902] dvb-usb: error while querying for an remote control event. [ 336.585918][ T5946] m920x_read = error: -19 [ 336.590364][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 336.616487][ T5946] m920x_read = error: -19 [ 336.622925][ T5946] dvb-usb: error while querying for an remote control event. [ 336.728112][ T5909] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 336.741077][ T5946] m920x_read = error: -19 [ 336.745551][ T5946] dvb-usb: error while querying for an remote control event. [ 336.766143][ T5946] m920x_read = error: -19 [ 336.770697][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 336.783055][ T5909] usb 2-1: device descriptor read/8, error -71 [ 336.857920][ T5946] m920x_read = error: -19 [ 336.862475][ T5946] dvb-usb: error while querying for an remote control event. [ 336.955845][ T5946] m920x_read = error: -19 [ 336.960433][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 336.985787][ T5946] m920x_read = error: -19 [ 336.990222][ T5946] dvb-usb: error while querying for an remote control event. [ 337.035764][ T5909] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 337.066516][ T5909] usb 2-1: device descriptor read/8, error -71 [ 337.105902][ T5946] m920x_read = error: -19 [ 337.110342][ T5946] dvb-usb: error while querying for an remote control event. [ 337.135820][ T5946] m920x_read = error: -19 [ 337.140243][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 337.178861][ T5909] usb usb2-port1: unable to enumerate USB device [ 337.225773][ T5909] m920x_read = error: -19 [ 337.230684][ T5909] dvb-usb: error while querying for an remote control event. [ 337.245788][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 337.306706][ T5909] m920x_read = error: -19 [ 337.311102][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 337.346326][ T5909] m920x_read = error: -19 [ 337.350717][ T5909] dvb-usb: error while querying for an remote control event. [ 337.417368][ T5967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -EPROTO [ 337.429400][ T5967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 337.440395][ T5967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 337.450834][ T5967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 337.464266][ T5967] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 337.472611][ T5909] m920x_read = error: -19 [ 337.485365][ T5909] dvb-usb: error while querying for an remote control event. [ 337.493032][ T5946] m920x_read = error: -19 [ 337.504808][ T5967] usb 4-1: USB disconnect, device number 95 [ 337.513716][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 337.548675][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1926'. [ 337.559153][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 337.599536][T12033] loop6: detected capacity change from 0 to 63 [ 337.619520][ T8906] buffer_io_error: 45 callbacks suppressed [ 337.619536][ T8906] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.634303][ T8906] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.647299][ T5946] m920x_read = error: -19 [ 337.651773][ T5946] dvb-usb: error while querying for an remote control event. [ 337.660730][ T8906] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.670056][ T8906] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.679187][ T8906] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.696602][ T5967] m920x_read = error: -19 [ 337.703196][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 337.776930][ T5967] m920x_read = error: -19 [ 337.781323][ T5967] dvb-usb: error while querying for an remote control event. [ 337.828011][T12035] syzkaller1: entered promiscuous mode [ 337.839443][T12039] support for cryptoloop has been removed. Use dm-crypt instead. [ 337.843732][T12035] syzkaller1: entered allmulticast mode [ 337.850633][T12039] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1929'. [ 337.865766][ T5967] m920x_read = error: -19 [ 337.870146][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 337.905737][ T5967] m920x_read = error: -19 [ 337.910196][ T5967] dvb-usb: error while querying for an remote control event. [ 338.038008][ T5967] m920x_read = error: -19 [ 338.044712][ T5967] dvb-usb: error while querying for an remote control event. [ 338.052706][ T5946] m920x_read = error: -19 [ 338.057208][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 338.133946][T12047] netlink: 'syz.2.1933': attribute type 2 has an invalid length. [ 338.146880][T12047] netlink: 'syz.2.1933': attribute type 1 has an invalid length. [ 338.165947][ T5946] m920x_read = error: -19 [ 338.170334][ T5946] dvb-usb: error while querying for an remote control event. [ 338.215914][ T5946] m920x_read = error: -19 [ 338.220383][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 338.250693][ T983] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 338.290596][ T5967] m920x_read = error: -19 [ 338.295009][ T5967] dvb-usb: error while querying for an remote control event. [ 338.386331][ T5946] m920x_read = error: -19 [ 338.390768][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 338.406638][ T5946] m920x_read = error: -19 [ 338.411013][ T5946] dvb-usb: error while querying for an remote control event. [ 338.414018][T12052] FAULT_INJECTION: forcing a failure. [ 338.414018][T12052] name failslab, interval 1, probability 0, space 0, times 0 [ 338.434765][T12052] CPU: 0 UID: 0 PID: 12052 Comm: syz.4.1935 Not tainted syzkaller #0 PREEMPT(full) [ 338.434793][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.434805][T12052] Call Trace: [ 338.434813][T12052] [ 338.434822][T12052] dump_stack_lvl+0x189/0x250 [ 338.434851][T12052] ? __pfx____ratelimit+0x10/0x10 [ 338.434877][T12052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.434902][T12052] ? __pfx__printk+0x10/0x10 [ 338.434932][T12052] ? __pfx___might_resched+0x10/0x10 [ 338.434952][T12052] ? fs_reclaim_acquire+0x7d/0x100 [ 338.434978][T12052] should_fail_ex+0x414/0x560 [ 338.435003][T12052] should_failslab+0xa8/0x100 [ 338.435027][T12052] kmem_cache_alloc_node_noprof+0x77/0x710 [ 338.435046][T12052] ? __alloc_skb+0x112/0x2d0 [ 338.435076][T12052] __alloc_skb+0x112/0x2d0 [ 338.435104][T12052] netlink_sendmsg+0x5c6/0xb30 [ 338.435138][T12052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.435166][T12052] ? aa_sock_msg_perm+0xf1/0x1d0 [ 338.435187][T12052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.435209][T12052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.435234][T12052] __sock_sendmsg+0x219/0x270 [ 338.435259][T12052] ____sys_sendmsg+0x505/0x830 [ 338.435284][T12052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.435311][T12052] ? import_iovec+0x74/0xa0 [ 338.435339][T12052] ___sys_sendmsg+0x21f/0x2a0 [ 338.435360][T12052] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.435410][T12052] ? __fget_files+0x2a/0x420 [ 338.435433][T12052] ? __fget_files+0x3a0/0x420 [ 338.435466][T12052] __x64_sys_sendmsg+0x19b/0x260 [ 338.435493][T12052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.435521][T12052] ? __pfx_ksys_write+0x10/0x10 [ 338.435546][T12052] ? do_syscall_64+0xbe/0xfa0 [ 338.435568][T12052] do_syscall_64+0xfa/0xfa0 [ 338.435582][T12052] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.435596][T12052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.435612][T12052] ? clear_bhb_loop+0x60/0xb0 [ 338.435638][T12052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.435654][T12052] RIP: 0033:0x7f6c5298ebe9 [ 338.435670][T12052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.435684][T12052] RSP: 002b:00007f6c538ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.435701][T12052] RAX: ffffffffffffffda RBX: 00007f6c52bc5fa0 RCX: 00007f6c5298ebe9 [ 338.435714][T12052] RDX: 00000000300048c0 RSI: 0000200000000700 RDI: 0000000000000004 [ 338.435725][T12052] RBP: 00007f6c538ef090 R08: 0000000000000000 R09: 0000000000000000 [ 338.435737][T12052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.435746][T12052] R13: 00007f6c52bc6038 R14: 00007f6c52bc5fa0 R15: 00007ffd77f6e178 [ 338.435777][T12052] [ 338.703187][ T5967] m920x_read = error: -19 [ 338.710374][ T5967] dvb-usb: error while querying for an remote control event. [ 338.717956][ T5967] m920x_read = error: -19 [ 338.722329][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 338.757071][ T983] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 338.766931][ T983] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.777560][ T983] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 338.786664][ T983] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.798035][ T983] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 338.807147][ T983] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 338.815260][ T983] usb 4-1: Product: syz [ 338.819791][ T983] usb 4-1: Manufacturer: syz [ 338.825773][ T5967] m920x_read = error: -19 [ 338.831107][ T5967] dvb-usb: error while querying for an remote control event. [ 338.832015][ T983] cdc_wdm 4-1:1.0: skipping garbage [ 338.848027][ T983] cdc_wdm 4-1:1.0: skipping garbage [ 338.853313][ T983] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 338.887901][ T5967] m920x_read = error: -19 [ 338.893523][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1937'. [ 338.903518][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'. [ 338.912465][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 338.967928][ T5967] m920x_read = error: -19 [ 338.972720][ T5967] dvb-usb: error while querying for an remote control event. [ 338.991022][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 339.066359][T12043] netlink: 'syz.3.1931': attribute type 10 has an invalid length. [ 339.082097][ T5967] m920x_read = error: -19 [ 339.086868][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 339.123215][ T5946] m920x_read = error: -19 [ 339.127708][ T5946] dvb-usb: error while querying for an remote control event. [ 339.135507][ T5967] usb 4-1: USB disconnect, device number 96 [ 339.237345][ T5946] m920x_read = error: -19 [ 339.241731][ T5946] dvb-usb: error while querying for an remote control event. [ 339.250878][ T5909] m920x_read = error: -19 [ 339.255251][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 339.375729][ T5967] m920x_read = error: -19 [ 339.381063][ T5967] dvb-usb: error while querying for an remote control event. [ 339.418851][ T983] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 339.425774][ T5909] m920x_read = error: -19 [ 339.430809][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 339.500443][ T5909] m920x_read = error: -19 [ 339.504833][ T5909] dvb-usb: error while querying for an remote control event. [ 339.586117][ T983] usb 5-1: Using ep0 maxpacket: 32 [ 339.593512][ T983] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 339.595764][ T5909] m920x_read = error: -19 [ 339.608144][ T983] usb 5-1: config 0 has no interface number 0 [ 339.619100][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 339.627018][ T5946] m920x_read = error: -19 [ 339.627866][ T983] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 339.631376][ T5946] dvb-usb: error while querying for an remote control event. [ 339.651425][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.669389][ T983] usb 5-1: Product: syz [ 339.674824][ T983] usb 5-1: Manufacturer: syz [ 339.682401][ T983] usb 5-1: SerialNumber: syz [ 339.703422][ T983] usb 5-1: config 0 descriptor?? [ 339.717296][ T983] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 339.765873][ T5967] m920x_read = error: -19 [ 339.767229][ T7348] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 339.770286][ T5967] dvb-usb: error while querying for an remote control event. [ 339.817587][ T5967] m920x_read = error: -19 [ 339.821973][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 339.865278][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1949'. [ 339.874421][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 339.876354][ T5967] m920x_read = error: -19 [ 339.891303][ T5967] dvb-usb: error while querying for an remote control event. [ 339.915916][ T5929] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 339.939946][ T983] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 339.949616][ T7348] usb 3-1: Using ep0 maxpacket: 8 [ 339.960835][ T7348] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 339.975422][ T7348] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 339.984328][ T983] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 339.986117][ T5946] m920x_read = error: -19 [ 339.994286][ T7348] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 340.001734][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 340.014964][ T5909] m920x_read = error: -19 [ 340.021760][ T5909] dvb-usb: error while querying for an remote control event. [ 340.030094][ T7348] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 340.055648][ T7348] usb 3-1: config 0 has no interface number 0 [ 340.061818][ T7348] usb 3-1: config 0 has no interface number 1 [ 340.069802][ T7348] usb 3-1: config 0 has no interface number 2 [ 340.076604][ T7348] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.089636][ T7348] usb 3-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 340.101128][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 340.106243][ T7348] usb 3-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 340.119742][ T7348] usb 3-1: config 0 interface 150 has no altsetting 0 [ 340.126652][ T7348] usb 3-1: config 0 interface 112 has no altsetting 0 [ 340.133777][ T7348] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 340.135875][ T5946] m920x_read = error: -19 [ 340.143157][ T7348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.152518][ T5946] dvb-usb: error while querying for an remote control event. [ 340.156587][ T5929] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 340.176588][ T5929] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 340.185756][ T5946] m920x_read = error: -19 [ 340.191301][ T7348] usb 3-1: config 0 descriptor?? [ 340.199854][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 340.203401][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.210845][ T5967] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 340.214419][ T5929] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 340.236468][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.247050][ T5929] usb 4-1: config 0 descriptor?? [ 340.276591][ T5946] m920x_read = error: -19 [ 340.280990][ T5946] dvb-usb: error while querying for an remote control event. [ 340.377848][ T5967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.388448][ T5967] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 340.397739][ T5946] m920x_read = error: -19 [ 340.402507][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 340.410505][ T5909] m920x_read = error: -19 [ 340.414849][ T5909] dvb-usb: error while querying for an remote control event. [ 340.422325][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.433035][ T5967] usb 2-1: config 0 descriptor?? [ 340.440109][T12083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.451219][T12083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.458087][ T5967] pwc: Askey VC010 type 2 USB webcam detected. [ 340.470462][ T30] audit: type=1326 audit(1756909427.877:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.4.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5298ebe9 code=0x7fc00000 [ 340.481069][T12086] binder: 12085:12086 ioctl c0306201 200000000480 returned -14 [ 340.492862][ T30] audit: type=1326 audit(1756909427.877:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.4.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c5298ebe9 code=0x7fc00000 [ 340.492927][ T30] audit: type=1326 audit(1756909427.877:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.4.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5298ebe9 code=0x7fc00000 [ 340.501163][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 340.539062][ T5909] m920x_read = error: -19 [ 340.546846][ T983] usb 5-1: USB disconnect, device number 74 [ 340.562703][ T5909] dvb-usb: error while querying for an remote control event. [ 340.576700][ T983] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 340.585785][ T5946] m920x_read = error: -19 [ 340.595353][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 340.610765][ T30] audit: type=1326 audit(1756909427.877:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.4.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5298ebe9 code=0x7fc00000 [ 340.634370][ T983] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 340.647549][ T983] quatech2 5-1:0.51: device disconnected [ 340.658808][ T30] audit: type=1326 audit(1756909427.877:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.4.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5298ebe9 code=0x7fc00000 [ 340.683409][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1944'. [ 340.698559][ T30] audit: type=1326 audit(1756909427.877:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.4.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5298ebe9 code=0x7fc00000 [ 340.724469][ T30] audit: type=1326 audit(1756909427.877:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.4.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5298ebe9 code=0x7fc00000 [ 340.747406][ T5946] m920x_read = error: -19 [ 340.750142][ T30] audit: type=1326 audit(1756909427.877:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.4.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5298ebe9 code=0x7fc00000 [ 340.751799][ T5946] dvb-usb: error while querying for an remote control event. [ 340.775375][ T30] audit: type=1326 audit(1756909427.877:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.4.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5298ebe9 code=0x7fc00000 [ 340.789969][ T5909] m920x_read = error: -19 [ 340.808644][ T7348] usb 3-1: string descriptor 0 read error: -71 [ 340.817944][ T7348] usb 3-1: USB disconnect, device number 87 [ 340.824780][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 340.831509][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 340.860981][ T30] audit: type=1326 audit(1756909427.877:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.4.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5298ebe9 code=0x7fc00000 [ 340.863203][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 340.903924][ T5967] pwc: recv_control_msg error -32 req 02 val 2b00 [ 340.912838][ T5967] pwc: recv_control_msg error -32 req 02 val 2700 [ 340.922188][ T5967] pwc: recv_control_msg error -32 req 02 val 2c00 [ 340.935894][ T5909] m920x_read = error: -19 [ 340.940467][ T5909] dvb-usb: error while querying for an remote control event. [ 340.953810][ T5929] usb 4-1: USB disconnect, device number 97 [ 340.958531][ T5967] pwc: recv_control_msg error -32 req 04 val 1000 [ 340.967651][ T5967] pwc: recv_control_msg error -32 req 04 val 1300 [ 340.975149][ T5967] pwc: recv_control_msg error -32 req 04 val 1400 [ 341.065813][ T5909] m920x_read = error: -19 [ 341.070224][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 341.078295][ T5946] m920x_read = error: -19 [ 341.082693][ T5946] dvb-usb: error while querying for an remote control event. [ 341.195922][ T5946] m920x_read = error: -19 [ 341.200354][ T5946] dvb-usb: error while querying for an remote control event. [ 341.222572][T12090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.239355][T12090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.248448][ T5946] m920x_read = error: -19 [ 341.255123][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 341.265938][ T5967] pwc: recv_control_msg error -71 req 02 val 2100 [ 341.273601][ T5967] pwc: recv_control_msg error -71 req 04 val 1500 [ 341.284279][ T5967] pwc: recv_control_msg error -71 req 02 val 2500 [ 341.292811][ T5967] pwc: recv_control_msg error -71 req 02 val 2400 [ 341.301403][ T5967] pwc: recv_control_msg error -71 req 02 val 2600 [ 341.309609][ T5967] pwc: recv_control_msg error -71 req 02 val 2900 [ 341.316700][ T5946] m920x_read = error: -19 [ 341.327336][ T5946] dvb-usb: error while querying for an remote control event. [ 341.346460][ T5967] pwc: recv_control_msg error -71 req 02 val 2800 [ 341.359873][ T5967] pwc: recv_control_msg error -71 req 04 val 1100 [ 341.376085][ T5967] pwc: recv_control_msg error -71 req 04 val 1200 [ 341.392800][ T5967] pwc: Registered as video103. [ 341.404803][ T5967] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41 [ 341.429772][ T5946] m920x_read = error: -19 [ 341.434170][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 341.456017][ T5909] m920x_read = error: -19 [ 341.461164][ T5909] dvb-usb: error while querying for an remote control event. [ 341.489803][ T5967] usb 2-1: USB disconnect, device number 58 [ 341.606907][ T5946] m920x_read = error: -19 [ 341.611766][ T5946] dvb-usb: error while querying for an remote control event. [ 341.655832][ T5946] m920x_read = error: -19 [ 341.660268][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 341.673611][T12103] FAULT_INJECTION: forcing a failure. [ 341.673611][T12103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.687379][T12103] CPU: 0 UID: 0 PID: 12103 Comm: syz.4.1955 Not tainted syzkaller #0 PREEMPT(full) [ 341.687404][T12103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.687415][T12103] Call Trace: [ 341.687423][T12103] [ 341.687431][T12103] dump_stack_lvl+0x189/0x250 [ 341.687461][T12103] ? __pfx____ratelimit+0x10/0x10 [ 341.687485][T12103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.687509][T12103] ? __pfx__printk+0x10/0x10 [ 341.687533][T12103] ? __might_fault+0xb0/0x130 [ 341.687562][T12103] should_fail_ex+0x414/0x560 [ 341.687587][T12103] _copy_from_iter+0x1de/0x1790 [ 341.687616][T12103] ? rcu_is_watching+0x15/0xb0 [ 341.687651][T12103] ? kmalloc_reserve+0xbd/0x290 [ 341.687677][T12103] ? __pfx__copy_from_iter+0x10/0x10 [ 341.687701][T12103] ? __build_skb_around+0x262/0x3f0 [ 341.687728][T12103] ? netlink_sendmsg+0x642/0xb30 [ 341.687750][T12103] ? skb_put+0x11b/0x210 [ 341.687770][T12103] netlink_sendmsg+0x6b2/0xb30 [ 341.687803][T12103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.687830][T12103] ? aa_sock_msg_perm+0xf1/0x1d0 [ 341.687849][T12103] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 341.687871][T12103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.687896][T12103] __sock_sendmsg+0x219/0x270 [ 341.687921][T12103] ____sys_sendmsg+0x505/0x830 [ 341.687945][T12103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.687972][T12103] ? import_iovec+0x74/0xa0 [ 341.687999][T12103] ___sys_sendmsg+0x21f/0x2a0 [ 341.688020][T12103] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.688081][T12103] ? __fget_files+0x2a/0x420 [ 341.688105][T12103] ? __fget_files+0x3a0/0x420 [ 341.688136][T12103] __x64_sys_sendmsg+0x19b/0x260 [ 341.688156][T12103] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.688182][T12103] ? __pfx_ksys_write+0x10/0x10 [ 341.688205][T12103] ? do_syscall_64+0xbe/0xfa0 [ 341.688219][T12103] do_syscall_64+0xfa/0xfa0 [ 341.688228][T12103] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.688237][T12103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.688247][T12103] ? clear_bhb_loop+0x60/0xb0 [ 341.688259][T12103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.688268][T12103] RIP: 0033:0x7f6c5298ebe9 [ 341.688279][T12103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.688287][T12103] RSP: 002b:00007f6c538ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.688299][T12103] RAX: ffffffffffffffda RBX: 00007f6c52bc5fa0 RCX: 00007f6c5298ebe9 [ 341.688306][T12103] RDX: 00000000300048c0 RSI: 0000200000000700 RDI: 0000000000000004 [ 341.688313][T12103] RBP: 00007f6c538ef090 R08: 0000000000000000 R09: 0000000000000000 [ 341.688319][T12103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.688325][T12103] R13: 00007f6c52bc6038 R14: 00007f6c52bc5fa0 R15: 00007ffd77f6e178 [ 341.688342][T12103] [ 341.725764][ T5946] m920x_read = error: -19 [ 341.725934][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.730969][ T5946] dvb-usb: error while querying for an remote control event. [ 341.737027][ T5929] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 341.829818][ T5967] m920x_read = error: -19 [ 341.973466][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1958'. [ 341.980471][ T5946] m920x_read = error: -19 [ 342.034133][ T5946] dvb-usb: error while querying for an remote control event. [ 342.042475][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 342.060561][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.091359][ T5929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 342.103859][ T5929] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 342.114910][T12110] : (slave bond_slave_0): Releasing backup interface [ 342.120904][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.140347][ T5929] usb 4-1: config 0 descriptor?? [ 342.146271][ T5946] m920x_read = error: -19 [ 342.150649][ T5946] dvb-usb: error while querying for an remote control event. [ 342.206278][ T5946] m920x_read = error: -19 [ 342.210784][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 342.223696][T12117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.265933][ T5946] m920x_read = error: -19 [ 342.270441][ T5946] dvb-usb: error while querying for an remote control event. [ 342.335776][ T5967] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 342.345682][ T7348] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 342.355167][ T5929] Bluetooth: Can't get state to change to load ram patch err [ 342.365038][ T5929] Bluetooth: Loading patch file failed [ 342.370649][ T5929] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 342.384049][ T5929] usb 4-1: USB disconnect, device number 98 [ 342.387656][ T5946] m920x_read = error: -19 [ 342.394914][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 342.403273][ T5909] m920x_read = error: -19 [ 342.408293][ T5909] dvb-usb: error while querying for an remote control event. [ 342.495772][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 342.501617][ T7348] usb 3-1: not running at top speed; connect to a high speed hub [ 342.502713][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.511485][ T7348] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 342.526298][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.533706][ T7348] usb 3-1: config 1 has no interface number 1 [ 342.540643][ T5946] m920x_read = error: -19 [ 342.548185][ T7348] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 342.550707][ T5946] dvb-usb: error while querying for an remote control event. [ 342.571038][ T5967] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 342.580459][ T5909] m920x_read = error: -19 [ 342.585216][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 342.587288][ T7348] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.593498][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.604873][ T7348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.615140][ T5967] usb 5-1: config 0 descriptor?? [ 342.626701][ T7348] usb 3-1: Product: syz [ 342.630231][ T5967] hub 5-1:0.0: USB hub found [ 342.636745][ T7348] usb 3-1: Manufacturer: syz [ 342.641528][ T7348] usb 3-1: SerialNumber: syz [ 342.715812][ T5946] m920x_read = error: -19 [ 342.720279][ T5946] dvb-usb: error while querying for an remote control event. [ 342.769025][ T5946] m920x_read = error: -19 [ 342.773593][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 342.828951][ T5967] hub 5-1:0.0: 1 port detected [ 342.835984][ T5946] m920x_read = error: -19 [ 342.840358][ T5946] dvb-usb: error while querying for an remote control event. [ 342.935772][ T5946] m920x_read = error: -19 [ 342.940181][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 342.958182][ T5946] m920x_read = error: -19 [ 342.963255][ T5946] dvb-usb: error while querying for an remote control event. [ 343.035785][ T886] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 343.037724][ T5967] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 343.062609][ T5967] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 343.079073][ T5946] m920x_read = error: -19 [ 343.083449][ T5946] dvb-usb: error while querying for an remote control event. [ 343.092408][ T5967] usbhid 5-1:0.0: can't add hid device: -71 [ 343.098635][ T5967] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 343.107273][ T5946] m920x_read = error: -19 [ 343.111634][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 343.146233][ T5967] usb 5-1: USB disconnect, device number 75 [ 343.199471][ T5946] m920x_read = error: -19 [ 343.203871][ T5946] dvb-usb: error while querying for an remote control event. [ 343.220616][ T886] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 343.229057][ T886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 343.244743][ T886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 343.255850][ T886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 343.271668][ T886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 343.285164][ T886] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 343.286369][ T5946] m920x_read = error: -19 [ 343.294224][ T886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 343.312840][ T886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 343.314252][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 343.324993][ T886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 343.332509][ T5909] m920x_read = error: -19 [ 343.332533][ T5909] dvb-usb: error while querying for an remote control event. [ 343.355734][ T886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 343.367501][ T886] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 343.376287][ T886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 343.392133][ T886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 343.402234][ T886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 343.416282][ T886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 343.432917][ T886] usb 2-1: string descriptor 0 read error: -22 [ 343.435778][ T5909] m920x_read = error: -19 [ 343.439909][ T886] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 343.445098][ T5909] dvb-usb: error while querying for an remote control event. [ 343.452883][ T886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.485259][ T886] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 343.496737][ T5909] m920x_read = error: -19 [ 343.501648][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 343.551186][T12138] FAULT_INJECTION: forcing a failure. [ 343.551186][T12138] name failslab, interval 1, probability 0, space 0, times 0 [ 343.564731][T12138] CPU: 1 UID: 0 PID: 12138 Comm: syz.3.1965 Not tainted syzkaller #0 PREEMPT(full) [ 343.564757][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.564768][T12138] Call Trace: [ 343.564776][T12138] [ 343.564785][T12138] dump_stack_lvl+0x189/0x250 [ 343.564814][T12138] ? __pfx____ratelimit+0x10/0x10 [ 343.564840][T12138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.564864][T12138] ? __pfx__printk+0x10/0x10 [ 343.564892][T12138] ? __pfx___might_resched+0x10/0x10 [ 343.564911][T12138] ? fs_reclaim_acquire+0x7d/0x100 [ 343.564937][T12138] should_fail_ex+0x414/0x560 [ 343.564961][T12138] should_failslab+0xa8/0x100 [ 343.564985][T12138] __kmalloc_noprof+0xcb/0x7f0 [ 343.565002][T12138] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 343.565030][T12138] ? rcu_is_watching+0x15/0xb0 [ 343.565056][T12138] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 343.565085][T12138] genl_family_rcv_msg_doit+0xb8/0x300 [ 343.565112][T12138] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 343.565142][T12138] ? apparmor_capable+0x137/0x1b0 [ 343.565165][T12138] ? bpf_lsm_capable+0x9/0x20 [ 343.565182][T12138] ? security_capable+0x7e/0x2e0 [ 343.565213][T12138] genl_rcv_msg+0x60e/0x790 [ 343.565239][T12138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.565257][T12138] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 343.565280][T12138] ? __pfx_nl802154_new_interface+0x10/0x10 [ 343.565299][T12138] ? __pfx_nl802154_post_doit+0x10/0x10 [ 343.565336][T12138] netlink_rcv_skb+0x208/0x470 [ 343.565358][T12138] ? __lock_acquire+0xab9/0xd20 [ 343.565378][T12138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.565399][T12138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.565442][T12138] ? down_read+0x1ad/0x2e0 [ 343.565464][T12138] genl_rcv+0x28/0x40 [ 343.565482][T12138] netlink_unicast+0x82f/0x9e0 [ 343.565514][T12138] ? __pfx_netlink_unicast+0x10/0x10 [ 343.565538][T12138] ? netlink_sendmsg+0x642/0xb30 [ 343.565560][T12138] ? skb_put+0x11b/0x210 [ 343.565583][T12138] netlink_sendmsg+0x805/0xb30 [ 343.565617][T12138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.565643][T12138] ? aa_sock_msg_perm+0xf1/0x1d0 [ 343.565662][T12138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.565683][T12138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.565708][T12138] __sock_sendmsg+0x219/0x270 [ 343.565735][T12138] ____sys_sendmsg+0x505/0x830 [ 343.565760][T12138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.565785][T12138] ? import_iovec+0x74/0xa0 [ 343.565811][T12138] ___sys_sendmsg+0x21f/0x2a0 [ 343.565831][T12138] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.565884][T12138] ? __fget_files+0x2a/0x420 [ 343.565907][T12138] ? __fget_files+0x3a0/0x420 [ 343.565941][T12138] __x64_sys_sendmsg+0x19b/0x260 [ 343.565956][T12138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.565972][T12138] ? __pfx_ksys_write+0x10/0x10 [ 343.565993][T12138] ? do_syscall_64+0xbe/0xfa0 [ 343.566023][T12138] do_syscall_64+0xfa/0xfa0 [ 343.566039][T12138] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.566055][T12138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.566073][T12138] ? clear_bhb_loop+0x60/0xb0 [ 343.566087][T12138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.566097][T12138] RIP: 0033:0x7f706498ebe9 [ 343.566109][T12138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.566117][T12138] RSP: 002b:00007f7065811038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.566129][T12138] RAX: ffffffffffffffda RBX: 00007f7064bc5fa0 RCX: 00007f706498ebe9 [ 343.566139][T12138] RDX: 00000000300048c0 RSI: 0000200000000700 RDI: 0000000000000004 [ 343.566150][T12138] RBP: 00007f7065811090 R08: 0000000000000000 R09: 0000000000000000 [ 343.566162][T12138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.566173][T12138] R13: 00007f7064bc6038 R14: 00007f7064bc5fa0 R15: 00007ffeffe76998 [ 343.566206][T12138] [ 343.689593][ T5868] Bluetooth: hci0: ACL packet too small [ 343.697257][ T5909] m920x_read = error: -19 [ 343.950632][ T5946] m920x_read = error: -19 [ 343.950658][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 343.961646][ T5909] dvb-usb: error while querying for an remote control event. [ 344.044248][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'. [ 344.086016][ T5946] m920x_read = error: -19 [ 344.090793][ T5946] dvb-usb: error while querying for an remote control event. [ 344.108237][ T5946] m920x_read = error: -19 [ 344.112713][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 344.155677][ T5929] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 344.179136][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1969'. [ 344.192009][ T7348] usb 3-1: failed to enable PITCH for EP 0x82 [ 344.194964][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 344.208515][ T5946] m920x_read = error: -19 [ 344.212957][ T5946] dvb-usb: error while querying for an remote control event. [ 344.259201][ T7348] usb 3-1: USB disconnect, device number 88 [ 344.275889][ T5946] m920x_read = error: -19 [ 344.280370][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 344.310053][ T5946] usb 2-1: USB disconnect, device number 59 [ 344.328708][ T5909] m920x_read = error: -19 [ 344.333869][ T5909] dvb-usb: error while querying for an remote control event. [ 344.347698][ T5929] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 344.360236][ T5929] usb 5-1: config 0 has no interface number 0 [ 344.374035][ T5929] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 344.381907][T10702] udevd[10702]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.385334][ T5929] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 344.424727][ T5929] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 344.442260][ T5929] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 344.453925][ T5929] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 344.460880][ T5909] m920x_read = error: -19 [ 344.469378][ T5929] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.475235][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 344.490628][ T44] m920x_read = error: -19 [ 344.495276][ T5929] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 344.495303][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.500895][ T5929] usb 5-1: config 0 descriptor?? [ 344.521381][T12145] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 344.521570][ T44] dvb-usb: error while querying for an remote control event. [ 344.531501][T12145] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 344.550623][ T5929] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 344.648031][ T44] m920x_read = error: -19 [ 344.652449][ T44] dvb-usb: error while querying for an remote control event. [ 344.696247][ T44] m920x_read = error: -19 [ 344.700602][ T44] dvb-usb: error -19 while querying for an remote control event. [ 344.751972][T12145] batadv_slave_0: entered promiscuous mode [ 344.765904][ T44] m920x_read = error: -19 [ 344.772301][ T44] dvb-usb: error while querying for an remote control event. [ 344.782460][T12145] random: crng reseeded on system resumption [ 344.811574][T12145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.832471][T12145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.860389][T12143] batadv_slave_0: left promiscuous mode [ 344.865890][ T44] m920x_read = error: -19 [ 344.873775][ T44] dvb-usb: error -19 while querying for an remote control event. [ 344.874779][ T5929] usb 5-1: USB disconnect, device number 76 [ 344.885807][ T5946] m920x_read = error: -19 [ 344.893391][ T5946] dvb-usb: error while querying for an remote control event. [ 344.919637][ T5929] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 344.922571][T12172] binder: 12171:12172 ioctl c0306201 200000000080 returned -14 [ 344.953568][T12170] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=327681 (655362 ns) > initial count (184 ns). Using initial count to start timer. [ 345.006360][ T44] m920x_read = error: -19 [ 345.011158][ T44] dvb-usb: error while querying for an remote control event. [ 345.045776][ T44] m920x_read = error: -19 [ 345.050191][ T44] dvb-usb: error -19 while querying for an remote control event. [ 345.120493][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1976'. [ 345.129915][ T44] m920x_read = error: -19 [ 345.131943][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 345.134278][ T44] dvb-usb: error while querying for an remote control event. [ 345.231693][ T44] m920x_read = error: -19 [ 345.241820][ T44] dvb-usb: error -19 while querying for an remote control event. [ 345.250236][ T5946] m920x_read = error: -19 [ 345.254590][ T5946] dvb-usb: error while querying for an remote control event. [ 345.264310][T12185] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.320810][T12185] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.366013][ T44] m920x_read = error: -19 [ 345.370371][ T44] dvb-usb: error while querying for an remote control event. [ 345.385053][T12185] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.415848][ T44] m920x_read = error: -19 [ 345.423337][ T44] dvb-usb: error -19 while querying for an remote control event. [ 345.441866][T12185] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.487966][ T44] m920x_read = error: -19 [ 345.494327][ T44] dvb-usb: error while querying for an remote control event. [ 345.524589][ T43] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.551503][ T43] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.570923][ T43] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.591746][ T43] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.600271][ T5946] m920x_read = error: -19 [ 345.604767][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 345.612681][ T5909] m920x_read = error: -19 [ 345.617912][ T5909] dvb-usb: error while querying for an remote control event. [ 345.696580][ T5929] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 345.735824][ T5909] m920x_read = error: -19 [ 345.740400][ T5909] dvb-usb: error while querying for an remote control event. [ 345.785730][ T5909] m920x_read = error: -19 [ 345.790086][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 345.815764][ T44] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 345.849558][ T5929] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 345.860924][ T5929] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.866969][ T5909] m920x_read = error: -19 [ 345.875212][ T5929] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 345.885975][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.904646][ T5909] dvb-usb: error while querying for an remote control event. [ 345.908116][ T5929] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.937256][ T5929] usb 5-1: invalid MIDI out EP 0 [ 345.951880][T12195] binder: 12194:12195 ioctl c0306201 200000000080 returned -14 [ 345.963233][ T5909] m920x_read = error: -19 [ 345.975759][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 345.981936][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 345.992062][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.003693][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.014345][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 346.025322][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.035540][ T5909] m920x_read = error: -19 [ 346.044611][ T5909] dvb-usb: error while querying for an remote control event. [ 346.054405][ T44] usb 4-1: config 0 descriptor?? [ 346.082946][ T44] hub 4-1:0.0: USB hub found [ 346.101224][ T5929] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 346.156135][ T5946] m920x_read = error: -19 [ 346.162250][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 346.185800][ T5909] m920x_read = error: -19 [ 346.190214][ T5909] dvb-usb: error while querying for an remote control event. [ 346.232793][T12202] FAULT_INJECTION: forcing a failure. [ 346.232793][T12202] name failslab, interval 1, probability 0, space 0, times 0 [ 346.249243][T12202] CPU: 0 UID: 0 PID: 12202 Comm: syz.1.1984 Not tainted syzkaller #0 PREEMPT(full) [ 346.249269][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.249281][T12202] Call Trace: [ 346.249289][T12202] [ 346.249298][T12202] dump_stack_lvl+0x189/0x250 [ 346.249328][T12202] ? __pfx____ratelimit+0x10/0x10 [ 346.249353][T12202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.249379][T12202] ? __pfx__printk+0x10/0x10 [ 346.249410][T12202] ? __pfx___might_resched+0x10/0x10 [ 346.249437][T12202] should_fail_ex+0x414/0x560 [ 346.249463][T12202] should_failslab+0xa8/0x100 [ 346.249486][T12202] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 346.249506][T12202] ? __d_alloc+0x36/0x7a0 [ 346.249531][T12202] __d_alloc+0x36/0x7a0 [ 346.249556][T12202] d_alloc_parallel+0xe5/0x15e0 [ 346.249577][T12202] ? __lock_acquire+0xab9/0xd20 [ 346.249606][T12202] ? __lock_acquire+0xab9/0xd20 [ 346.249629][T12202] ? __pfx_d_alloc_parallel+0x10/0x10 [ 346.249654][T12202] ? __raw_spin_lock_init+0x45/0x100 [ 346.249678][T12202] ? __init_waitqueue_head+0xa9/0x150 [ 346.249707][T12202] __lookup_slow+0x116/0x3d0 [ 346.249729][T12202] ? __pfx___lookup_slow+0x10/0x10 [ 346.249759][T12202] ? d_lookup+0x8a/0xa0 [ 346.249777][T12202] ? lookup_noperm+0x112/0x220 [ 346.249807][T12202] simple_start_creating+0xfd/0x1e0 [ 346.249832][T12202] ? __pfx_simple_start_creating+0x10/0x10 [ 346.249871][T12202] start_creating+0x10f/0x180 [ 346.249897][T12202] __debugfs_create_file+0x79/0x4f0 [ 346.249927][T12202] debugfs_create_file_full+0x3f/0x60 [ 346.249956][T12202] ref_tracker_dir_debugfs+0x14e/0x270 [ 346.249978][T12202] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 346.250030][T12202] ? trace_kmalloc+0x1f/0xd0 [ 346.250044][T12202] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 346.250069][T12202] ? __raw_spin_lock_init+0x45/0x100 [ 346.250096][T12202] alloc_netdev_mqs+0x272/0x11b0 [ 346.250116][T12202] ? __pfx_ieee802154_if_setup+0x10/0x10 [ 346.250142][T12202] ieee802154_if_add+0xe4/0xfd0 [ 346.250168][T12202] ? __pfx_ieee802154_if_add+0x10/0x10 [ 346.250193][T12202] ? mutex_is_locked+0x17/0x50 [ 346.250214][T12202] ? rtnl_is_locked+0x15/0x20 [ 346.250231][T12202] ? cfg802154_rdev_by_wpan_phy_idx+0xb9/0x100 [ 346.250256][T12202] ? nl802154_pre_doit+0x733/0xa00 [ 346.250288][T12202] ieee802154_add_iface+0x44/0x70 [ 346.250313][T12202] nl802154_new_interface+0x2f2/0x4c0 [ 346.250342][T12202] genl_family_rcv_msg_doit+0x215/0x300 [ 346.250372][T12202] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 346.250407][T12202] ? bpf_lsm_capable+0x9/0x20 [ 346.250425][T12202] ? security_capable+0x7e/0x2e0 [ 346.250457][T12202] genl_rcv_msg+0x60e/0x790 [ 346.250484][T12202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.250502][T12202] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 346.250523][T12202] ? __pfx_nl802154_new_interface+0x10/0x10 [ 346.250545][T12202] ? __pfx_nl802154_post_doit+0x10/0x10 [ 346.250584][T12202] netlink_rcv_skb+0x208/0x470 [ 346.250606][T12202] ? __lock_acquire+0xab9/0xd20 [ 346.250625][T12202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.250647][T12202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.250694][T12202] ? down_read+0x1ad/0x2e0 [ 346.250715][T12202] genl_rcv+0x28/0x40 [ 346.250732][T12202] netlink_unicast+0x82f/0x9e0 [ 346.250763][T12202] ? __pfx_netlink_unicast+0x10/0x10 [ 346.250795][T12202] ? netlink_sendmsg+0x642/0xb30 [ 346.250816][T12202] ? skb_put+0x11b/0x210 [ 346.250837][T12202] netlink_sendmsg+0x805/0xb30 [ 346.250873][T12202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.250900][T12202] ? aa_sock_msg_perm+0xf1/0x1d0 [ 346.250921][T12202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.250943][T12202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.250969][T12202] __sock_sendmsg+0x219/0x270 [ 346.250995][T12202] ____sys_sendmsg+0x505/0x830 [ 346.251020][T12202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.251050][T12202] ? import_iovec+0x74/0xa0 [ 346.251079][T12202] ___sys_sendmsg+0x21f/0x2a0 [ 346.251099][T12202] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.251160][T12202] ? __fget_files+0x2a/0x420 [ 346.251183][T12202] ? __fget_files+0x3a0/0x420 [ 346.251219][T12202] __x64_sys_sendmsg+0x19b/0x260 [ 346.251241][T12202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.251271][T12202] ? __pfx_ksys_write+0x10/0x10 [ 346.251299][T12202] ? do_syscall_64+0xbe/0xfa0 [ 346.251321][T12202] do_syscall_64+0xfa/0xfa0 [ 346.251336][T12202] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.251353][T12202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.251372][T12202] ? clear_bhb_loop+0x60/0xb0 [ 346.251394][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.251411][T12202] RIP: 0033:0x7fb99f58ebe9 [ 346.251428][T12202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.251443][T12202] RSP: 002b:00007fb9a034f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.251463][T12202] RAX: ffffffffffffffda RBX: 00007fb99f7c5fa0 RCX: 00007fb99f58ebe9 [ 346.251477][T12202] RDX: 00000000300048c0 RSI: 0000200000000700 RDI: 0000000000000004 [ 346.251489][T12202] RBP: 00007fb9a034f090 R08: 0000000000000000 R09: 0000000000000000 [ 346.251501][T12202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.251512][T12202] R13: 00007fb99f7c6038 R14: 00007fb99f7c5fa0 R15: 00007ffc699c58d8 [ 346.251555][T12202] [ 346.762816][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.770250][ T5909] m920x_read = error: -19 [ 346.774654][ T5909] dvb-usb: error while querying for an remote control event. [ 346.782296][ T5909] m920x_read = error: -19 [ 346.786695][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 346.873947][ T5929] usb 5-1: USB disconnect, device number 77 [ 346.885980][ T5946] m920x_read = error: -19 [ 346.890419][ T5946] dvb-usb: error while querying for an remote control event. [ 346.956668][ T5946] m920x_read = error: -19 [ 346.961241][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 347.016199][ T5946] m920x_read = error: -19 [ 347.020697][ T5946] dvb-usb: error while querying for an remote control event. [ 347.072270][T12216] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.136589][ T5946] m920x_read = error: -19 [ 347.141016][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 347.149065][ T5902] m920x_read = error: -19 [ 347.153445][ T5902] dvb-usb: error while querying for an remote control event. [ 347.172020][T12216] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.230858][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1990'. [ 347.274966][T12216] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.285901][ T5946] m920x_read = error: -19 [ 347.293710][ T5946] dvb-usb: error while querying for an remote control event. [ 347.338446][ T5946] m920x_read = error: -19 [ 347.342864][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 347.357370][T12216] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.363001][T12222] binder: 12221:12222 ioctl c0306201 200000000080 returned -14 [ 347.408508][ T5946] m920x_read = error: -19 [ 347.412917][ T5946] dvb-usb: error while querying for an remote control event. [ 347.480088][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1993'. [ 347.498721][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.504128][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'. [ 347.507562][ T5946] m920x_read = error: -19 [ 347.523789][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 347.531724][ T5902] m920x_read = error: -19 [ 347.537022][ T5902] dvb-usb: error while querying for an remote control event. [ 347.552510][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.575764][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.584725][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.610455][T12226] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.655940][ T5946] m920x_read = error: -19 [ 347.660550][ T5946] dvb-usb: error while querying for an remote control event. [ 347.662367][T12226] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.705734][ T5946] m920x_read = error: -19 [ 347.710336][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 347.728410][T12226] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.747335][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1995'. [ 347.757392][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 347.786197][ T5946] m920x_read = error: -19 [ 347.796983][ T5946] dvb-usb: error while querying for an remote control event. [ 347.813010][T12226] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.888013][ T5909] m920x_read = error: -19 [ 347.892473][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 347.917001][ T5909] m920x_read = error: -19 [ 347.921509][ T5909] dvb-usb: error while querying for an remote control event. [ 347.953043][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.971919][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.988528][ T2957] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.004973][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.035768][ T5902] m920x_read = error: -19 [ 348.040304][ T5902] dvb-usb: error while querying for an remote control event. [ 348.060700][T12235] netlink: 'syz.4.1998': attribute type 2 has an invalid length. [ 348.070397][ T5902] m920x_read = error: -19 [ 348.074798][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 348.074896][T12235] netlink: 'syz.4.1998': attribute type 1 has an invalid length. [ 348.105799][ T5946] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 348.122186][ T7348] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 348.167096][ T5902] m920x_read = error: -19 [ 348.171497][ T5902] dvb-usb: error while querying for an remote control event. [ 348.246112][ T5902] m920x_read = error: -19 [ 348.250701][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 348.278821][ T5946] usb 3-1: unable to get BOS descriptor or descriptor too short [ 348.279113][ T7348] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 348.288172][ T5946] usb 3-1: not running at top speed; connect to a high speed hub [ 348.296119][ T7348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.303817][ T5902] m920x_read = error: -19 [ 348.318550][ T7348] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 348.319905][ T5902] dvb-usb: error while querying for an remote control event. [ 348.327773][ T7348] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.337542][ T5946] usb 3-1: config 9 has an invalid interface number: 98 but max is 0 [ 348.346456][ T7348] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.357351][ T5946] usb 3-1: config 9 has no interface number 0 [ 348.366912][ T7348] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 348.371112][ T5946] usb 3-1: config 9 interface 98 has no altsetting 0 [ 348.381947][ T7348] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 348.391232][ T5946] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=72.b1 [ 348.394918][ T7348] usb 2-1: Product: syz [ 348.406568][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.407718][ T7348] usb 2-1: Manufacturer: syz [ 348.415530][ T5946] usb 3-1: Product: syz [ 348.424392][ T5967] m920x_read = error: -19 [ 348.429558][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 348.437592][ T5902] m920x_read = error: -19 [ 348.438037][ T7348] cdc_wdm 2-1:1.0: skipping garbage [ 348.442549][ T5902] dvb-usb: error while querying for an remote control event. [ 348.448191][ T7348] cdc_wdm 2-1:1.0: skipping garbage [ 348.454901][ T5946] usb 3-1: Manufacturer: syz [ 348.464404][ T7348] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 348.465238][ T5946] usb 3-1: SerialNumber: syz [ 348.471166][ T7348] cdc_wdm 2-1:1.0: Unknown control protocol [ 348.575773][ T5902] m920x_read = error: -19 [ 348.580564][ T5902] dvb-usb: error while querying for an remote control event. [ 348.591172][ T44] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 348.604556][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 348.614007][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 348.622117][ T5902] m920x_read = error: -19 [ 348.630824][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 348.656343][T12233] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 348.666501][ T7348] usb 2-1: USB disconnect, device number 60 [ 348.686996][ T44] usb 4-1: USB disconnect, device number 99 [ 348.706198][ T5902] m920x_read = error: -19 [ 348.711381][ T5902] dvb-usb: error while querying for an remote control event. [ 348.817661][ T5902] m920x_read = error: -19 [ 348.823177][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 348.846243][ T5902] m920x_read = error: -19 [ 348.850642][ T5902] dvb-usb: error while querying for an remote control event. [ 348.967885][ T5902] m920x_read = error: -19 [ 348.973730][ T5946] cypress_cy7c63 3-1:9.98: Cypress CY7C63xxx device now attached [ 348.983183][ T5902] dvb-usb: error while querying for an remote control event. [ 348.991487][ T44] m920x_read = error: -19 [ 348.999045][ T44] dvb-usb: error -19 while querying for an remote control event. [ 349.008012][ T5946] usb 3-1: USB disconnect, device number 89 [ 349.015219][ T5946] cypress_cy7c63 3-1:9.98: Cypress CY7C63xxx device now disconnected [ 349.116045][ T44] m920x_read = error: -19 [ 349.120443][ T44] dvb-usb: error while querying for an remote control event. [ 349.166834][ T5902] m920x_read = error: -19 [ 349.171473][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 349.209484][T12250] binder: 12249:12250 ioctl c0306201 200000000080 returned -14 [ 349.236697][ T5946] m920x_read = error: -19 [ 349.241086][ T5946] dvb-usb: error while querying for an remote control event. [ 349.274533][T12252] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.283516][T12255] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.336036][ T5946] m920x_read = error: -19 [ 349.340578][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 349.367047][ T5946] m920x_read = error: -19 [ 349.371575][ T5946] dvb-usb: error while querying for an remote control event. [ 349.400561][T12257] __nla_validate_parse: 1 callbacks suppressed [ 349.400573][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2003'. [ 349.417227][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'. [ 349.495856][ T5946] m920x_read = error: -19 [ 349.506116][ T5946] dvb-usb: error while querying for an remote control event. [ 349.519383][ T5946] m920x_read = error: -19 [ 349.531259][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 349.627848][ T5946] m920x_read = error: -19 [ 349.634652][ T5946] dvb-usb: error while querying for an remote control event. [ 349.698051][ T5946] m920x_read = error: -19 [ 349.703761][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 349.775852][ T5946] m920x_read = error: -19 [ 349.780405][ T5946] dvb-usb: error while querying for an remote control event. [ 349.783189][ T30] kauditd_printk_skb: 2145 callbacks suppressed [ 349.783205][ T30] audit: type=1800 audit(1756909437.187:2164): pid=12271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2009" name="bus" dev="overlay" ino=2498 res=0 errno=0 [ 349.827042][ T5872] Bluetooth: hci1: sending frame failed (-49) [ 349.834143][ T5868] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 349.876648][ T886] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 349.886001][ T5946] m920x_read = error: -19 [ 349.890423][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 349.915785][ T5946] m920x_read = error: -19 [ 349.925863][ T5946] dvb-usb: error while querying for an remote control event. [ 349.947361][ T7348] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 349.963651][T12273] binder: 12272:12273 ioctl c0306201 200000000080 returned -14 [ 349.974540][T12273] binder_alloc: 12272: binder_alloc_buf, no vma [ 350.018073][T12275] netlink: 'syz.2.2011': attribute type 6 has an invalid length. [ 350.036262][ T886] usb 4-1: Using ep0 maxpacket: 32 [ 350.036351][ T44] m920x_read = error: -19 [ 350.044046][ T886] usb 4-1: unable to get BOS descriptor or descriptor too short [ 350.047064][ T44] dvb-usb: error while querying for an remote control event. [ 350.068125][ T886] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 350.068985][ T5902] m920x_read = error: -19 [ 350.088167][ T7348] usb 2-1: device descriptor read/64, error -71 [ 350.091572][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 350.094470][ T886] usb 4-1: config 7 has no interface number 0 [ 350.112823][ T886] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 350.123697][ T886] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 350.134966][ T886] usb 4-1: config 7 interface 187 has no altsetting 0 [ 350.144869][ T886] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 350.154209][ T886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.162411][ T886] usb 4-1: Product: syz [ 350.166779][ T886] usb 4-1: Manufacturer: syz [ 350.171393][ T886] usb 4-1: SerialNumber: syz [ 350.196006][ T5946] m920x_read = error: -19 [ 350.200493][ T5946] dvb-usb: error while querying for an remote control event. [ 350.265841][ T5946] m920x_read = error: -19 [ 350.270227][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 350.317600][ T5946] m920x_read = error: -19 [ 350.322061][ T5946] dvb-usb: error while querying for an remote control event. [ 350.337148][ T7348] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 350.365717][ T5902] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 350.383874][ T886] usb 4-1: Limiting number of CPorts to U8_MAX [ 350.390932][ T886] usb 4-1: Unknown endpoint type found, address 0x07 [ 350.398041][ T886] usb 4-1: Not enough endpoints found in device, aborting! [ 350.436192][ T5946] m920x_read = error: -19 [ 350.441025][ T5946] dvb-usb: error while querying for an remote control event. [ 350.448836][ T44] m920x_read = error: -19 [ 350.453260][ T44] dvb-usb: error -19 while querying for an remote control event. [ 350.485733][ T7348] usb 2-1: device descriptor read/64, error -71 [ 350.535667][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 350.542486][ T5902] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 350.550927][ T5902] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.560845][ T5902] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.570698][ T44] m920x_read = error: -19 [ 350.575065][ T44] dvb-usb: error while querying for an remote control event. [ 350.582496][ T5902] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.592583][ T5902] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.605978][ T5902] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 350.611526][ T7348] usb usb2-port1: attempt power cycle [ 350.615020][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.615748][ T44] m920x_read = error: -19 [ 350.634552][ T44] dvb-usb: error -19 while querying for an remote control event. [ 350.654582][T12266] netlink: 'syz.3.2007': attribute type 39 has an invalid length. [ 350.696787][ T5946] m920x_read = error: -19 [ 350.701186][ T5946] dvb-usb: error while querying for an remote control event. [ 350.795750][ T5946] m920x_read = error: -19 [ 350.800215][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 350.815763][ T5946] m920x_read = error: -19 [ 350.820149][ T5946] dvb-usb: error while querying for an remote control event. [ 350.859059][ T5902] usb 3-1: usb_control_msg returned -32 [ 350.864687][ T5902] usbtmc 3-1:16.0: can't read capabilities [ 350.864789][ T983] usb 4-1: USB disconnect, device number 100 [ 350.937147][ T5902] m920x_read = error: -19 [ 350.941518][ T5902] dvb-usb: error while querying for an remote control event. [ 350.965868][ T5902] m920x_read = error: -19 [ 350.970257][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 350.985913][ T7348] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 351.006385][ T7348] usb 2-1: device descriptor read/8, error -71 [ 351.055856][ T5946] m920x_read = error: -19 [ 351.060386][ T5946] dvb-usb: error while querying for an remote control event. [ 351.135755][ T5946] m920x_read = error: -19 [ 351.140180][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 351.175783][ T5946] m920x_read = error: -19 [ 351.180322][ T5946] dvb-usb: error while querying for an remote control event. [ 351.214933][T12280] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 351.255846][ T7348] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 351.278715][ T7348] usb 2-1: device descriptor read/8, error -71 [ 351.296018][ T5946] m920x_read = error: -19 [ 351.300388][ T5946] dvb-usb: error while querying for an remote control event. [ 351.308074][ T5902] m920x_read = error: -19 [ 351.312427][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 351.386260][ T7348] usb usb2-port1: unable to enumerate USB device [ 351.417278][ T7348] usb 3-1: USB disconnect, device number 90 [ 351.425879][ T5902] m920x_read = error: -19 [ 351.434249][ T5902] dvb-usb: error while querying for an remote control event. [ 351.476489][ T5902] m920x_read = error: -19 [ 351.480882][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 351.493898][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2013'. [ 351.503400][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 351.556190][ T5902] m920x_read = error: -19 [ 351.560577][ T5902] dvb-usb: error while querying for an remote control event. [ 351.645740][ T5902] m920x_read = error: -19 [ 351.650110][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 351.676155][ T5902] m920x_read = error: -19 [ 351.680558][ T5902] dvb-usb: error while querying for an remote control event. [ 351.795772][ T5909] m920x_read = error: -19 [ 351.800234][ T5909] dvb-usb: error while querying for an remote control event. [ 351.815731][ T5909] m920x_read = error: -19 [ 351.820121][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 351.915780][ T5909] m920x_read = error: -19 [ 351.920252][ T5909] dvb-usb: error while querying for an remote control event. [ 351.985795][ T5909] m920x_read = error: -19 [ 351.990286][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 352.036037][ T5909] m920x_read = error: -19 [ 352.048694][ T5909] dvb-usb: error while querying for an remote control event. [ 352.156028][ T5902] m920x_read = error: -19 [ 352.165885][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 352.183905][ T5902] m920x_read = error: -19 [ 352.189547][ T5902] dvb-usb: error while querying for an remote control event. [ 352.306199][ T5946] m920x_read = error: -19 [ 352.310661][ T5946] dvb-usb: error while querying for an remote control event. [ 352.315977][ T983] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 352.339210][ T5946] m920x_read = error: -19 [ 352.356254][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 352.376072][ T5909] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 352.435935][ T5946] m920x_read = error: -19 [ 352.440323][ T5946] dvb-usb: error while querying for an remote control event. [ 352.498335][ T983] usb 5-1: Using ep0 maxpacket: 16 [ 352.505389][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.516592][ T5902] m920x_read = error: -19 [ 352.520949][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 352.529199][ T5909] usb 3-1: device descriptor read/64, error -71 [ 352.533980][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.545414][ T983] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 352.554775][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.565801][ T5902] m920x_read = error: -19 [ 352.565845][ T983] usb 5-1: config 0 descriptor?? [ 352.575749][ T5902] dvb-usb: error while querying for an remote control event. [ 352.695818][ T5946] m920x_read = error: -19 [ 352.702296][ T5946] dvb-usb: error while querying for an remote control event. [ 352.710021][ T44] m920x_read = error: -19 [ 352.714687][ T44] dvb-usb: error -19 while querying for an remote control event. [ 352.725091][ T5902] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 352.775681][ T5909] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 352.835847][ T44] m920x_read = error: -19 [ 352.842211][ T44] dvb-usb: error while querying for an remote control event. [ 352.886198][ T44] m920x_read = error: -19 [ 352.890587][ T44] dvb-usb: error -19 while querying for an remote control event. [ 352.898593][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 352.915945][ T5909] usb 3-1: device descriptor read/64, error -71 [ 352.925525][ T5902] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 352.938323][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.946644][ T5902] usb 4-1: Product: syz [ 352.950842][ T5902] usb 4-1: Manufacturer: syz [ 352.955443][ T5902] usb 4-1: SerialNumber: syz [ 352.965805][ T44] m920x_read = error: -19 [ 352.970167][ T44] dvb-usb: error while querying for an remote control event. [ 352.985156][ T5902] usb 4-1: config 0 descriptor?? [ 352.993517][ T5902] gspca_main: se401-2.14.0 probing 047d:5003 [ 353.034907][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2022'. [ 353.046217][ T5909] usb usb3-port1: attempt power cycle [ 353.046982][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'. [ 353.076053][ T5946] m920x_read = error: -19 [ 353.080458][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 353.088661][ T44] m920x_read = error: -19 [ 353.093035][ T44] dvb-usb: error while querying for an remote control event. [ 353.191202][ T983] usb 5-1: language id specifier not provided by device, defaulting to English [ 353.216206][ T5946] m920x_read = error: -19 [ 353.220608][ T5946] dvb-usb: error while querying for an remote control event. [ 353.266603][ T5946] m920x_read = error: -19 [ 353.273182][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 353.335814][ T5946] m920x_read = error: -19 [ 353.340238][ T5946] dvb-usb: error while querying for an remote control event. [ 353.385724][ T5909] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 353.393954][ T5902] gspca_se401: ExtraFeatures: 79 [ 353.400431][ T5902] gspca_se401: Frame size: 0x0 1/16th janggu [ 353.429244][ T5909] usb 3-1: device descriptor read/8, error -71 [ 353.445968][ T5946] m920x_read = error: -19 [ 353.453059][ T5946] dvb-usb: error -19 while querying for an remote control event. [ 353.465897][ T44] m920x_read = error: -19 [ 353.470318][ T44] dvb-usb: error while querying for an remote control event. [ 353.595064][ T983] letsketch 0003:6161:4D15.0015: Device info: ఁ [ 353.602190][ T44] m920x_read = error: -19 [ 353.618906][ T5902] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 353.627625][ T44] dvb-usb: error while querying for an remote control event. [ 353.656870][ T44] m920x_read = error: -19 [ 353.662493][ T44] dvb-usb: error -19 while querying for an remote control event. [ 353.677446][ T5909] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 353.710387][ T5909] usb 3-1: device descriptor read/8, error -71 [ 353.766502][ T44] m920x_read = error: -19 [ 353.770902][ T44] dvb-usb: error while querying for an remote control event. [ 353.814080][ T44] usb 4-1: USB disconnect, device number 101 [ 353.840759][ T5909] usb usb3-port1: unable to enumerate USB device [ 353.849572][ T983] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 353.857743][ T5902] m920x_read = error: -19 [ 353.857770][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 353.871492][ T983] letsketch 0003:6161:4D15.0015: probe with driver letsketch failed with error -71 [ 353.907157][ T5909] m920x_read = error: -19 [ 353.917046][ T983] usb 5-1: USB disconnect, device number 78 [ 353.921758][ T5909] dvb-usb: error while querying for an remote control event. [ 354.015816][ T5909] m920x_read = error: -19 [ 354.021589][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 354.055822][ T5909] m920x_read = error: -19 [ 354.062115][ T5909] dvb-usb: error while querying for an remote control event. [ 354.179237][ T5909] m920x_read = error: -19 [ 354.183642][ T5909] dvb-usb: error while querying for an remote control event. [ 354.196724][ T44] m920x_read = error: -19 [ 354.201108][ T44] dvb-usb: error -19 while querying for an remote control event. [ 354.325759][ T5902] m920x_read = error: -19 [ 354.330147][ T5902] dvb-usb: error while querying for an remote control event. [ 354.375763][ T44] m920x_read = error: -19 [ 354.380150][ T44] dvb-usb: error -19 while querying for an remote control event. [ 354.414876][ T30] audit: type=1326 audit(1756909441.817:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.3.2029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f706498ebe9 code=0x0 [ 354.481081][ T44] m920x_read = error: -19 [ 354.485504][ T44] dvb-usb: error while querying for an remote control event. [ 354.558363][ T44] m920x_read = error: -19 [ 354.562749][ T44] dvb-usb: error -19 while querying for an remote control event. [ 354.592803][T12385] loop6: detected capacity change from 0 to 63 [ 354.603478][T12381] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=327681 (655362 ns) > initial count (184 ns). Using initial count to start timer. [ 354.605794][ T44] m920x_read = error: -19 [ 354.629183][ T8906] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.640891][ T44] dvb-usb: error while querying for an remote control event. [ 354.658451][ T8906] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.677658][ T8906] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.696673][ T8906] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.716606][ T8906] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.745897][ T44] m920x_read = error: -19 [ 354.760525][ T44] dvb-usb: error -19 while querying for an remote control event. [ 354.768782][ T5902] m920x_read = error: -19 [ 354.773285][ T5902] dvb-usb: error while querying for an remote control event. [ 354.804823][T12393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2032'. [ 354.830577][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'. [ 354.905805][ T5902] m920x_read = error: -19 [ 354.910352][ T5902] dvb-usb: error while querying for an remote control event. [ 354.965772][ T5902] m920x_read = error: -19 [ 354.971350][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 355.027078][ T5902] m920x_read = error: -19 [ 355.041565][ T5902] dvb-usb: error while querying for an remote control event. [ 355.148384][ T44] m920x_read = error: -19 [ 355.164720][ T44] dvb-usb: error -19 while querying for an remote control event. [ 355.176220][ T5909] m920x_read = error: -19 [ 355.185783][ T5909] dvb-usb: error while querying for an remote control event. [ 355.211675][T12414] netlink: 'syz.2.2038': attribute type 5 has an invalid length. [ 355.219970][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 355.295950][ T5929] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 355.306867][ T5909] m920x_read = error: -19 [ 355.315162][ T5909] dvb-usb: error while querying for an remote control event. [ 355.359333][ T5909] m920x_read = error: -19 [ 355.374214][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 355.455785][ T5909] m920x_read = error: -19 [ 355.460219][ T5909] dvb-usb: error while querying for an remote control event. [ 355.480788][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 355.481331][T12426] loop6: detected capacity change from 0 to 63 [ 355.502236][ T5929] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 355.527117][ T5929] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 355.535189][ T5929] usb 2-1: config 0 has no interface number 0 [ 355.564765][ T5929] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 355.575838][ T44] m920x_read = error: -19 [ 355.582407][ T44] dvb-usb: error while querying for an remote control event. [ 355.583092][ T5929] usb 2-1: config 0 has no interface number 0 [ 355.590323][ T5909] m920x_read = error: -19 [ 355.598440][ T5929] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 355.616305][ T5929] usb 2-1: config 0 has no interface number 0 [ 355.626328][ T5929] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 355.634625][ T5929] usb 2-1: config 0 has no interface number 0 [ 355.650526][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 355.656744][ T5929] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 355.681116][ T5929] usb 2-1: config 0 has no interface number 0 [ 355.689853][T12435] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 355.704257][ T5929] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 355.750911][ T5929] usb 2-1: config 0 has no interface number 0 [ 355.755755][ T5909] m920x_read = error: -19 [ 355.759846][ T5929] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 355.771763][ T5909] dvb-usb: error while querying for an remote control event. [ 355.780681][ T5929] usb 2-1: config 0 has no interface number 0 [ 355.782009][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'. [ 355.796365][ T44] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 355.809234][ T5929] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 355.817489][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 355.834872][ T5929] usb 2-1: config 0 has no interface number 0 [ 355.835735][ T5909] m920x_read = error: -19 [ 355.845844][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 355.865539][ T5929] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 355.884545][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.900429][ T5929] usb 2-1: Product: syz [ 355.904742][ T5929] usb 2-1: Manufacturer: syz [ 355.910260][ T5929] usb 2-1: SerialNumber: syz [ 355.919288][ T5929] usb 2-1: config 0 descriptor?? [ 355.928365][ T5909] m920x_read = error: -19 [ 355.933426][ T5909] dvb-usb: error while querying for an remote control event. [ 355.952839][ T5929] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 355.965708][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 355.972727][ T44] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 355.998203][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.015886][ T5909] m920x_read = error: -19 [ 356.020634][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 356.031453][ T44] usb 3-1: config 0 descriptor?? [ 356.057643][ T44] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 356.063954][ T5909] m920x_read = error: -19 [ 356.072699][ T5909] dvb-usb: error while querying for an remote control event. [ 356.140928][ T5929] etas_es58x 2-1:0.2: could not parse product info: '' [ 356.216772][ T5909] m920x_read = error: -19 [ 356.221205][ T5909] dvb-usb: error while querying for an remote control event. [ 356.228815][ T5902] m920x_read = error: -19 [ 356.233192][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 356.345764][ T5902] m920x_read = error: -19 [ 356.350201][ T5902] dvb-usb: error while querying for an remote control event. [ 356.405822][ T5902] m920x_read = error: -19 [ 356.410337][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 356.433972][T12405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.470792][T12405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.471235][ T5902] m920x_read = error: -19 [ 356.510887][ T5902] dvb-usb: error while querying for an remote control event. [ 356.561206][T12405] syzkaller1: entered promiscuous mode [ 356.575833][ T5967] m920x_read = error: -19 [ 356.580299][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 356.595940][T12405] syzkaller1: entered allmulticast mode [ 356.659836][ T5967] m920x_read = error: -19 [ 356.664364][ T5967] dvb-usb: error while querying for an remote control event. [ 356.755049][ T5967] usb 2-1: USB disconnect, device number 65 [ 356.788473][ T5967] etas_es58x 2-1:0.2: Disconnecting syz syz [ 356.812605][ T5909] m920x_read = error: -19 [ 356.819815][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 356.828131][ T5902] m920x_read = error: -19 [ 356.842754][ T5902] dvb-usb: error while querying for an remote control event. [ 356.906034][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2055'. [ 356.965752][ T5902] m920x_read = error: -19 [ 356.975682][ T5902] dvb-usb: error while querying for an remote control event. [ 356.983206][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 357.005850][ T5902] m920x_read = error: -19 [ 357.011496][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 357.099752][ T44] gspca_nw80x: reg_w err -71 [ 357.104490][ T44] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 357.118286][ T5902] m920x_read = error: -19 [ 357.123816][T12490] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2059'. [ 357.132962][ T5902] dvb-usb: error while querying for an remote control event. [ 357.152027][ T44] usb 3-1: USB disconnect, device number 95 [ 357.186302][ T5909] m920x_read = error: -19 [ 357.197929][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 357.275817][ T5902] m920x_read = error: -19 [ 357.280209][ T5902] dvb-usb: error while querying for an remote control event. [ 357.367246][ T44] m920x_read = error: -19 [ 357.369234][T12501] loop6: detected capacity change from 0 to 63 [ 357.371636][ T44] dvb-usb: error -19 while querying for an remote control event. [ 357.405706][ T886] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 357.406956][ T44] m920x_read = error: -19 [ 357.439767][ T44] dvb-usb: error while querying for an remote control event. [ 357.455685][ T5909] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 357.501993][T12504] ntfs3(nullb0): Primary boot signature is not NTFS. [ 357.512002][T12504] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 357.555988][ T5902] m920x_read = error: -19 [ 357.560386][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 357.576290][ T886] usb 4-1: Using ep0 maxpacket: 16 [ 357.577312][ T44] m920x_read = error: -19 [ 357.593569][ T44] dvb-usb: error while querying for an remote control event. [ 357.598885][ T886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.628604][ T886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.654023][ T5909] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 357.660515][ T886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 357.695723][ T5909] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 357.716688][ T44] m920x_read = error: -19 [ 357.720011][ T886] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 357.721071][ T44] dvb-usb: error while querying for an remote control event. [ 357.747792][ T5909] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 357.756815][ T886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.767131][ T5902] m920x_read = error: -19 [ 357.771502][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 357.791843][ T5909] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 357.815960][ T886] usb 4-1: config 0 descriptor?? [ 357.820413][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.853339][T12493] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 357.915765][ T5902] m920x_read = error: -19 [ 357.928509][ T5902] dvb-usb: error while querying for an remote control event. [ 357.965763][ T5902] m920x_read = error: -19 [ 357.976257][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 358.045811][ T5902] m920x_read = error: -19 [ 358.050227][ T5902] dvb-usb: error while querying for an remote control event. [ 358.070910][T12492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.093190][T12492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.111660][T12492] netlink: 'syz.3.2060': attribute type 3 has an invalid length. [ 358.146014][ T5902] m920x_read = error: -19 [ 358.150405][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 358.165690][ T983] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 358.195732][ T5902] m920x_read = error: -19 [ 358.200156][ T5902] dvb-usb: error while querying for an remote control event. [ 358.326229][ T5902] m920x_read = error: -19 [ 358.327665][ T983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.330640][ T5902] dvb-usb: error while querying for an remote control event. [ 358.330715][ T5902] m920x_read = error: -19 [ 358.348178][ T983] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 358.348213][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.357260][ T983] usb 3-1: config 0 descriptor?? [ 358.387331][ T886] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 358.396250][ T886] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 358.403526][ T886] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 358.411401][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 358.428278][ T983] pwc: Askey VC010 type 2 USB webcam detected. [ 358.438043][ T5902] m920x_read = error: -19 [ 358.442793][ T5902] dvb-usb: error while querying for an remote control event. [ 358.467244][ T886] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 358.489490][ T886] microsoft 0003:045E:07DA.0016: no inputs found [ 358.496767][ T886] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 358.511359][ T5909] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 358.545247][ T5909] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input43 [ 358.566024][ T44] m920x_read = error: -19 [ 358.570422][ T44] dvb-usb: error while querying for an remote control event. [ 358.590483][ T5902] m920x_read = error: -19 [ 358.594874][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 358.603722][ T5967] usb 4-1: USB disconnect, device number 102 [ 358.739328][T12533] fido_id[12533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 358.745841][ T5909] m920x_read = error: -19 [ 358.785070][ T5902] usb 5-1: USB disconnect, device number 79 [ 358.791140][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 358.799782][ T44] m920x_read = error: -19 [ 358.823933][ T5909] dvb-usb: error while querying for an remote control event. [ 358.831787][ T44] dvb-usb: error -19 while querying for an remote control event. [ 358.840844][ T983] pwc: recv_control_msg error -32 req 02 val 2b00 [ 358.869527][ T983] pwc: recv_control_msg error -32 req 02 val 2700 [ 358.892346][ T983] pwc: recv_control_msg error -32 req 02 val 2c00 [ 358.936993][ T983] pwc: recv_control_msg error -32 req 04 val 1000 [ 358.946390][T12544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2069'. [ 358.954506][ T983] pwc: recv_control_msg error -32 req 04 val 1300 [ 358.955355][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2069'. [ 358.971694][ T44] m920x_read = error: -19 [ 358.986611][ T44] dvb-usb: error while querying for an remote control event. [ 359.043010][ T44] m920x_read = error: -19 [ 359.054047][ T44] dvb-usb: error -19 while querying for an remote control event. [ 359.108973][ T44] m920x_read = error: -19 [ 359.119473][ T44] dvb-usb: error while querying for an remote control event. [ 359.226238][ T5902] m920x_read = error: -19 [ 359.230626][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 359.248071][ T44] m920x_read = error: -19 [ 359.252447][ T44] dvb-usb: error while querying for an remote control event. [ 359.291169][T12552] loop6: detected capacity change from 0 to 63 [ 359.374425][ T983] pwc: recv_control_msg error -71 req 02 val 2100 [ 359.385819][ T44] m920x_read = error: -19 [ 359.391105][ T44] dvb-usb: error while querying for an remote control event. [ 359.408698][ T983] pwc: recv_control_msg error -71 req 04 val 1500 [ 359.428946][ T5909] m920x_read = error: -19 [ 359.433333][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 359.435996][ T983] pwc: recv_control_msg error -71 req 02 val 2500 [ 359.488084][ T983] pwc: recv_control_msg error -71 req 02 val 2400 [ 359.504343][ T983] pwc: recv_control_msg error -71 req 02 val 2600 [ 359.520862][ T983] pwc: recv_control_msg error -71 req 02 val 2900 [ 359.548177][ T983] pwc: recv_control_msg error -71 req 02 val 2800 [ 359.555939][ T5909] m920x_read = error: -19 [ 359.562316][ T5909] dvb-usb: error while querying for an remote control event. [ 359.566623][ T983] pwc: recv_control_msg error -71 req 04 val 1100 [ 359.611569][ T983] pwc: recv_control_msg error -71 req 04 val 1200 [ 359.625848][ T983] pwc: Registered as video103. [ 359.639695][ T983] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input44 [ 359.649259][ T5909] m920x_read = error: -19 [ 359.649287][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 359.675819][ T5909] m920x_read = error: -19 [ 359.680205][ T5909] dvb-usb: error while querying for an remote control event. [ 359.741991][ T983] usb 3-1: USB disconnect, device number 96 [ 359.796607][ T7348] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 359.805832][ T5909] m920x_read = error: -19 [ 359.810209][ T5909] dvb-usb: error while querying for an remote control event. [ 359.818079][ T44] m920x_read = error: -19 [ 359.822433][ T44] dvb-usb: error -19 while querying for an remote control event. [ 359.945942][ T44] m920x_read = error: -19 [ 359.960516][ T44] dvb-usb: error while querying for an remote control event. [ 359.960598][ T7348] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 359.996998][ T44] m920x_read = error: -19 [ 359.998157][ T7348] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 360.011584][ T44] dvb-usb: error -19 while querying for an remote control event. [ 360.016515][ T7348] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.058629][ T7348] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 360.070446][ T7348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.081874][ T7348] usb 5-1: Product: syz [ 360.087583][ T44] m920x_read = error: -19 [ 360.092772][ T7348] usb 5-1: Manufacturer: syz [ 360.094296][ T44] dvb-usb: error while querying for an remote control event. [ 360.101779][ T7348] usb 5-1: SerialNumber: syz [ 360.138816][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'. [ 360.153674][ T7348] hub 5-1:1.0: bad descriptor, ignoring hub [ 360.166146][ T7348] hub 5-1:1.0: probe with driver hub failed with error -5 [ 360.206303][ T44] m920x_read = error: -19 [ 360.210691][ T44] dvb-usb: error -19 while querying for an remote control event. [ 360.234018][ T5909] m920x_read = error: -19 [ 360.238841][ T5909] dvb-usb: error while querying for an remote control event. [ 360.250078][T12570] [ 360.252421][T12570] ====================================================== [ 360.259438][T12570] WARNING: possible circular locking dependency detected [ 360.266467][T12570] syzkaller #0 Not tainted [ 360.270881][T12570] ------------------------------------------------------ [ 360.277879][T12570] syz.3.2076/12570 is trying to acquire lock: [ 360.283921][T12570] ffffffff8e642880 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x48/0x710 [ 360.293743][T12570] [ 360.293743][T12570] but task is already holding lock: [ 360.301089][T12570] ffffffff8fcbd3c8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 360.311609][T12570] [ 360.311609][T12570] which lock already depends on the new lock. [ 360.311609][T12570] [ 360.322004][T12570] [ 360.322004][T12570] the existing dependency chain (in reverse order) is: [ 360.330999][T12570] [ 360.330999][T12570] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 360.338815][T12570] lock_acquire+0x120/0x360 [ 360.343830][T12570] __mutex_lock+0x187/0x1350 [ 360.348928][T12570] kobject_uevent_net_broadcast+0x27e/0x560 [ 360.355329][T12570] kobject_uevent_env+0x55b/0x8c0 [ 360.360858][T12570] device_add+0x557/0xb50 [ 360.365698][T12570] device_create+0x25b/0x2f0 [ 360.370793][T12570] msr_device_create+0x33/0x50 [ 360.376068][T12570] cpuhp_invoke_callback+0x445/0x860 [ 360.381857][T12570] cpuhp_thread_fun+0x3f4/0x850 [ 360.387236][T12570] smpboot_thread_fn+0x542/0xa60 [ 360.392681][T12570] kthread+0x70e/0x8a0 [ 360.397258][T12570] ret_from_fork+0x47c/0x820 [ 360.402354][T12570] ret_from_fork_asm+0x1a/0x30 [ 360.407619][T12570] [ 360.407619][T12570] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 360.415163][T12570] lock_acquire+0x120/0x360 [ 360.420172][T12570] cpuhp_thread_fun+0x182/0x850 [ 360.425533][T12570] smpboot_thread_fn+0x542/0xa60 [ 360.430977][T12570] kthread+0x70e/0x8a0 [ 360.435605][T12570] ret_from_fork+0x47c/0x820 [ 360.440706][T12570] ret_from_fork_asm+0x1a/0x30 [ 360.446002][T12570] [ 360.446002][T12570] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 360.453729][T12570] lock_acquire+0x120/0x360 [ 360.458742][T12570] cpus_read_lock+0x42/0x160 [ 360.463840][T12570] static_key_slow_inc+0x12/0x30 [ 360.469279][T12570] setup_udp_tunnel_sock+0x34f/0x550 [ 360.475080][T12570] l2tp_tunnel_register+0xcb6/0x1320 [ 360.480885][T12570] pppol2tp_connect+0x87c/0x1750 [ 360.486338][T12570] __sys_connect+0x313/0x440 [ 360.491448][T12570] __x64_sys_connect+0x7a/0x90 [ 360.496721][T12570] do_syscall_64+0xfa/0xfa0 [ 360.501727][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.508124][T12570] [ 360.508124][T12570] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 360.515762][T12570] lock_acquire+0x120/0x360 [ 360.520789][T12570] lock_sock_nested+0x48/0x100 [ 360.526067][T12570] tcp_sendmsg+0x21/0x50 [ 360.530866][T12570] __sock_sendmsg+0x19c/0x270 [ 360.536058][T12570] sock_sendmsg+0x158/0x230 [ 360.541075][T12570] __sock_xmit+0x1c1/0x470 [ 360.546001][T12570] nbd_send_cmd+0x863/0x1ba0 [ 360.551101][T12570] nbd_queue_rq+0xcdb/0xf10 [ 360.556119][T12570] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 360.562181][T12570] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 360.569020][T12570] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 360.575511][T12570] blk_mq_run_hw_queue+0x348/0x4f0 [ 360.581132][T12570] blk_mq_dispatch_list+0xd0c/0xe00 [ 360.586858][T12570] blk_mq_flush_plug_list+0x469/0x550 [ 360.592777][T12570] __blk_flush_plug+0x3d3/0x4b0 [ 360.598157][T12570] __submit_bio+0x2d3/0x5a0 [ 360.603167][T12570] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 360.609320][T12570] __bread_gfp+0x216/0x3c0 [ 360.614249][T12570] udf_read_tagged+0xad/0xe00 [ 360.619440][T12570] udf_check_anchor_block+0x99/0x550 [ 360.625263][T12570] udf_load_vrs+0xa83/0xf20 [ 360.630360][T12570] udf_fill_super+0x5ad/0x17a0 [ 360.635631][T12570] get_tree_bdev_flags+0x40e/0x4d0 [ 360.641256][T12570] vfs_get_tree+0x92/0x2b0 [ 360.646285][T12570] do_new_mount+0x2a2/0xa30 [ 360.651313][T12570] __se_sys_mount+0x317/0x410 [ 360.656505][T12570] do_syscall_64+0xfa/0xfa0 [ 360.661526][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.667951][T12570] [ 360.667951][T12570] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 360.675599][T12570] lock_acquire+0x120/0x360 [ 360.680621][T12570] __mutex_lock+0x187/0x1350 [ 360.685716][T12570] nbd_queue_rq+0x257/0xf10 [ 360.690727][T12570] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 360.696785][T12570] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 360.703628][T12570] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 360.710123][T12570] blk_mq_run_hw_queue+0x348/0x4f0 [ 360.715746][T12570] blk_mq_dispatch_list+0xd0c/0xe00 [ 360.721454][T12570] blk_mq_flush_plug_list+0x469/0x550 [ 360.727332][T12570] __blk_flush_plug+0x3d3/0x4b0 [ 360.732694][T12570] __submit_bio+0x2d3/0x5a0 [ 360.737710][T12570] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 360.743869][T12570] __bread_gfp+0x216/0x3c0 [ 360.748823][T12570] udf_read_tagged+0xad/0xe00 [ 360.754020][T12570] udf_check_anchor_block+0x99/0x550 [ 360.759815][T12570] udf_load_vrs+0xa83/0xf20 [ 360.764827][T12570] udf_fill_super+0x5ad/0x17a0 [ 360.770099][T12570] get_tree_bdev_flags+0x40e/0x4d0 [ 360.775715][T12570] vfs_get_tree+0x92/0x2b0 [ 360.780640][T12570] do_new_mount+0x2a2/0xa30 [ 360.785650][T12570] __se_sys_mount+0x317/0x410 [ 360.790876][T12570] do_syscall_64+0xfa/0xfa0 [ 360.795929][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.802361][T12570] [ 360.802361][T12570] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 360.809558][T12570] lock_acquire+0x120/0x360 [ 360.814564][T12570] __mutex_lock+0x187/0x1350 [ 360.819659][T12570] nbd_queue_rq+0xc8/0xf10 [ 360.824584][T12570] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 360.830634][T12570] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 360.837472][T12570] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 360.843971][T12570] blk_mq_run_hw_queue+0x348/0x4f0 [ 360.849594][T12570] blk_mq_dispatch_list+0xd0c/0xe00 [ 360.855304][T12570] blk_mq_flush_plug_list+0x469/0x550 [ 360.861186][T12570] __blk_flush_plug+0x3d3/0x4b0 [ 360.866558][T12570] __submit_bio+0x2d3/0x5a0 [ 360.871579][T12570] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 360.877734][T12570] __bread_gfp+0x216/0x3c0 [ 360.882668][T12570] udf_load_vrs+0x365/0xf20 [ 360.887776][T12570] udf_fill_super+0x5ad/0x17a0 [ 360.893056][T12570] get_tree_bdev_flags+0x40e/0x4d0 [ 360.898682][T12570] vfs_get_tree+0x92/0x2b0 [ 360.903603][T12570] do_new_mount+0x2a2/0xa30 [ 360.908615][T12570] __se_sys_mount+0x317/0x410 [ 360.913800][T12570] do_syscall_64+0xfa/0xfa0 [ 360.918817][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.925218][T12570] [ 360.925218][T12570] -> #3 (set->srcu){.+.+}-{0:0}: [ 360.932327][T12570] lock_sync+0xba/0x160 [ 360.936989][T12570] __synchronize_srcu+0x96/0x3a0 [ 360.942429][T12570] elevator_switch+0x12b/0x640 [ 360.947704][T12570] elevator_change+0x2d4/0x450 [ 360.952974][T12570] elevator_set_default+0x186/0x260 [ 360.958683][T12570] blk_register_queue+0x34e/0x3f0 [ 360.964222][T12570] __add_disk+0x677/0xd50 [ 360.969070][T12570] add_disk_fwnode+0xfc/0x480 [ 360.974256][T12570] nbd_dev_add+0x717/0xae0 [ 360.979188][T12570] nbd_init+0x168/0x1f0 [ 360.983853][T12570] do_one_initcall+0x233/0x820 [ 360.989124][T12570] do_initcall_level+0x104/0x190 [ 360.994566][T12570] do_initcalls+0x59/0xa0 [ 360.999398][T12570] kernel_init_freeable+0x334/0x4b0 [ 361.005098][T12570] kernel_init+0x1d/0x1d0 [ 361.009933][T12570] ret_from_fork+0x47c/0x820 [ 361.015026][T12570] ret_from_fork_asm+0x1a/0x30 [ 361.020314][T12570] [ 361.020314][T12570] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 361.028117][T12570] lock_acquire+0x120/0x360 [ 361.033125][T12570] __mutex_lock+0x187/0x1350 [ 361.038221][T12570] elevator_change+0x19b/0x450 [ 361.043500][T12570] elevator_set_none+0x42/0xb0 [ 361.048776][T12570] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 361.055275][T12570] nbd_start_device+0x17f/0xb10 [ 361.060631][T12570] nbd_genl_connect+0x135b/0x18f0 [ 361.066168][T12570] genl_family_rcv_msg_doit+0x215/0x300 [ 361.072216][T12570] genl_rcv_msg+0x60e/0x790 [ 361.077221][T12570] netlink_rcv_skb+0x208/0x470 [ 361.082494][T12570] genl_rcv+0x28/0x40 [ 361.086976][T12570] netlink_unicast+0x82f/0x9e0 [ 361.092245][T12570] netlink_sendmsg+0x805/0xb30 [ 361.097512][T12570] __sock_sendmsg+0x219/0x270 [ 361.102694][T12570] ____sys_sendmsg+0x505/0x830 [ 361.107957][T12570] ___sys_sendmsg+0x21f/0x2a0 [ 361.113135][T12570] __x64_sys_sendmsg+0x19b/0x260 [ 361.118573][T12570] do_syscall_64+0xfa/0xfa0 [ 361.123580][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.129972][T12570] [ 361.129972][T12570] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 361.138563][T12570] lock_acquire+0x120/0x360 [ 361.143567][T12570] blk_alloc_queue+0x538/0x620 [ 361.148835][T12570] __blk_mq_alloc_disk+0x15c/0x340 [ 361.154452][T12570] nbd_dev_add+0x46c/0xae0 [ 361.159373][T12570] nbd_init+0x168/0x1f0 [ 361.164045][T12570] do_one_initcall+0x233/0x820 [ 361.169317][T12570] do_initcall_level+0x104/0x190 [ 361.174763][T12570] do_initcalls+0x59/0xa0 [ 361.179598][T12570] kernel_init_freeable+0x334/0x4b0 [ 361.185305][T12570] kernel_init+0x1d/0x1d0 [ 361.190136][T12570] ret_from_fork+0x47c/0x820 [ 361.195229][T12570] ret_from_fork_asm+0x1a/0x30 [ 361.200494][T12570] [ 361.200494][T12570] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 361.207685][T12570] validate_chain+0xb9b/0x2140 [ 361.213048][T12570] __lock_acquire+0xab9/0xd20 [ 361.218227][T12570] lock_acquire+0x120/0x360 [ 361.223228][T12570] fs_reclaim_acquire+0x72/0x100 [ 361.228665][T12570] kmem_cache_alloc_node_noprof+0x48/0x710 [ 361.234976][T12570] __alloc_skb+0x112/0x2d0 [ 361.239901][T12570] alloc_uevent_skb+0x7d/0x230 [ 361.245168][T12570] kobject_uevent_net_broadcast+0x2fa/0x560 [ 361.251562][T12570] kobject_uevent_env+0x55b/0x8c0 [ 361.257088][T12570] set_disk_ro+0x19e/0x1f0 [ 361.262012][T12570] nbd_start_device+0x272/0xb10 [ 361.267379][T12570] nbd_genl_connect+0x135b/0x18f0 [ 361.272912][T12570] genl_family_rcv_msg_doit+0x215/0x300 [ 361.278963][T12570] genl_rcv_msg+0x60e/0x790 [ 361.283967][T12570] netlink_rcv_skb+0x208/0x470 [ 361.289250][T12570] genl_rcv+0x28/0x40 [ 361.293737][T12570] netlink_unicast+0x82f/0x9e0 [ 361.299003][T12570] netlink_sendmsg+0x805/0xb30 [ 361.304277][T12570] __sock_sendmsg+0x219/0x270 [ 361.309458][T12570] ____sys_sendmsg+0x505/0x830 [ 361.314723][T12570] ___sys_sendmsg+0x21f/0x2a0 [ 361.319914][T12570] __x64_sys_sendmsg+0x19b/0x260 [ 361.325388][T12570] do_syscall_64+0xfa/0xfa0 [ 361.330394][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.336801][T12570] [ 361.336801][T12570] other info that might help us debug this: [ 361.336801][T12570] [ 361.347011][T12570] Chain exists of: [ 361.347011][T12570] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 361.347011][T12570] [ 361.359692][T12570] Possible unsafe locking scenario: [ 361.359692][T12570] [ 361.367144][T12570] CPU0 CPU1 [ 361.372491][T12570] ---- ---- [ 361.377835][T12570] lock(uevent_sock_mutex); [ 361.382413][T12570] lock(cpuhp_state-up); [ 361.389260][T12570] lock(uevent_sock_mutex); [ 361.396360][T12570] lock(fs_reclaim); [ 361.400354][T12570] [ 361.400354][T12570] *** DEADLOCK *** [ 361.400354][T12570] [ 361.408484][T12570] 4 locks held by syz.3.2076/12570: [ 361.413664][T12570] #0: ffffffff8f9b9c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 361.421832][T12570] #1: ffffffff8f9b9a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 361.430826][T12570] #2: ffff8880255a0a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_start_device+0x189/0xb10 [ 361.440778][T12570] #3: ffffffff8fcbd3c8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 361.451755][T12570] [ 361.451755][T12570] stack backtrace: [ 361.457727][T12570] CPU: 1 UID: 0 PID: 12570 Comm: syz.3.2076 Not tainted syzkaller #0 PREEMPT(full) [ 361.457759][T12570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.457768][T12570] Call Trace: [ 361.457777][T12570] [ 361.457784][T12570] dump_stack_lvl+0x189/0x250 [ 361.457811][T12570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.457831][T12570] ? __pfx__printk+0x10/0x10 [ 361.457850][T12570] ? print_lock_name+0xde/0x100 [ 361.457869][T12570] print_circular_bug+0x2ee/0x310 [ 361.457888][T12570] check_noncircular+0x134/0x160 [ 361.457907][T12570] validate_chain+0xb9b/0x2140 [ 361.457929][T12570] ? __lock_acquire+0xab9/0xd20 [ 361.457946][T12570] ? __mutex_trylock_common+0x153/0x260 [ 361.457966][T12570] __lock_acquire+0xab9/0xd20 [ 361.457982][T12570] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 361.457996][T12570] lock_acquire+0x120/0x360 [ 361.458010][T12570] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 361.458025][T12570] ? __lock_acquire+0xab9/0xd20 [ 361.458040][T12570] fs_reclaim_acquire+0x72/0x100 [ 361.458058][T12570] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 361.458074][T12570] kmem_cache_alloc_node_noprof+0x48/0x710 [ 361.458087][T12570] ? __alloc_skb+0x112/0x2d0 [ 361.458107][T12570] __alloc_skb+0x112/0x2d0 [ 361.458127][T12570] alloc_uevent_skb+0x7d/0x230 [ 361.458144][T12570] kobject_uevent_net_broadcast+0x2fa/0x560 [ 361.458162][T12570] kobject_uevent_env+0x55b/0x8c0 [ 361.458179][T12570] set_disk_ro+0x19e/0x1f0 [ 361.458198][T12570] ? __pfx_set_disk_ro+0x10/0x10 [ 361.458218][T12570] nbd_start_device+0x272/0xb10 [ 361.458239][T12570] ? device_create_file+0xf4/0x1c0 [ 361.458253][T12570] nbd_genl_connect+0x135b/0x18f0 [ 361.458274][T12570] ? __pfx_nbd_genl_connect+0x10/0x10 [ 361.458292][T12570] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 361.458310][T12570] ? rcu_is_watching+0x15/0xb0 [ 361.458330][T12570] ? __nla_parse+0x40/0x60 [ 361.458349][T12570] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 361.458367][T12570] genl_family_rcv_msg_doit+0x215/0x300 [ 361.458385][T12570] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 361.458405][T12570] ? stack_trace_save+0x9c/0xe0 [ 361.458425][T12570] genl_rcv_msg+0x60e/0x790 [ 361.458442][T12570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.458456][T12570] ? __pfx_nbd_genl_connect+0x10/0x10 [ 361.458482][T12570] netlink_rcv_skb+0x208/0x470 [ 361.458499][T12570] ? __lock_acquire+0xab9/0xd20 [ 361.458513][T12570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.458529][T12570] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.458552][T12570] ? down_read+0x1ad/0x2e0 [ 361.458568][T12570] genl_rcv+0x28/0x40 [ 361.458582][T12570] netlink_unicast+0x82f/0x9e0 [ 361.458605][T12570] ? __pfx_netlink_unicast+0x10/0x10 [ 361.458621][T12570] ? netlink_sendmsg+0x642/0xb30 [ 361.458639][T12570] ? skb_put+0x11b/0x210 [ 361.458652][T12570] netlink_sendmsg+0x805/0xb30 [ 361.458673][T12570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.458693][T12570] ? aa_sock_msg_perm+0xf1/0x1d0 [ 361.458706][T12570] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.458732][T12570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.458753][T12570] __sock_sendmsg+0x219/0x270 [ 361.458770][T12570] ____sys_sendmsg+0x505/0x830 [ 361.458785][T12570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.458801][T12570] ? import_iovec+0x74/0xa0 [ 361.458821][T12570] ___sys_sendmsg+0x21f/0x2a0 [ 361.458835][T12570] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.458859][T12570] ? __fget_files+0x2a/0x420 [ 361.458881][T12570] ? __fget_files+0x3a0/0x420 [ 361.458903][T12570] __x64_sys_sendmsg+0x19b/0x260 [ 361.458917][T12570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.458936][T12570] ? do_syscall_64+0xbe/0xfa0 [ 361.458950][T12570] do_syscall_64+0xfa/0xfa0 [ 361.458963][T12570] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.458976][T12570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.458990][T12570] ? clear_bhb_loop+0x60/0xb0 [ 361.459015][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.459028][T12570] RIP: 0033:0x7f706498ebe9 [ 361.459042][T12570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.459054][T12570] RSP: 002b:00007f7065811038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.459070][T12570] RAX: ffffffffffffffda RBX: 00007f7064bc5fa0 RCX: 00007f706498ebe9 [ 361.459081][T12570] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 361.459091][T12570] RBP: 00007f7064a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 361.459100][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.459109][T12570] R13: 00007f7064bc6038 R14: 00007f7064bc5fa0 R15: 00007ffeffe76998 [ 361.459125][T12570] [ 361.930177][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 361.937074][ T5872] block nbd0: Receive control failed (result -32) [ 361.940834][ T5862] block nbd0: Receive control failed (result -32) [ 361.957615][ T7348] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 361.985730][T12570] nbd0: detected capacity change from 0 to 127 [ 361.992808][ T9457] block nbd0: Dead connection, failed to find a fallback [ 362.004447][ T5902] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 362.015699][ T44] m920x_read = error: -19 [ 362.020061][ T44] dvb-usb: error while querying for an remote control event. [ 362.036490][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 362.037270][ T9457] block nbd0: shutting down sockets [ 362.065694][ T44] m920x_read = error: -19 [ 362.070071][ T44] dvb-usb: error -19 while querying for an remote control event. [ 362.073054][ T9457] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.119767][ T9457] Buffer I/O error on dev nbd0, logical block 0, async page read [ 362.135774][ T44] m920x_read = error: -19 [ 362.140274][ T44] dvb-usb: error while querying for an remote control event. [ 362.164593][ T9457] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.166980][ T5902] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 362.182746][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.192067][ T9457] Buffer I/O error on dev nbd0, logical block 1, async page read [ 362.202864][ T5902] usb 3-1: config 0 descriptor?? [ 362.212254][T12590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.228340][T12590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.235708][ T44] m920x_read = error: -19 [ 362.240455][ T44] dvb-usb: error -19 while querying for an remote control event. [ 362.251295][ T9457] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.268634][ T9457] Buffer I/O error on dev nbd0, logical block 2, async page read [ 362.270994][ T44] m920x_read = error: -19 [ 362.280829][ T44] dvb-usb: error while querying for an remote control event. [ 362.285887][ T9457] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.300979][ T9457] Buffer I/O error on dev nbd0, logical block 3, async page read [ 362.309327][ T9457] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.328127][ T9457] Buffer I/O error on dev nbd0, logical block 0, async page read [ 362.346623][ T9457] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.365815][ T9457] Buffer I/O error on dev nbd0, logical block 1, async page read [ 362.382398][ T9457] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.394512][ T9457] Buffer I/O error on dev nbd0, logical block 2, async page read [ 362.395714][ T44] m920x_read = error: -19 [ 362.403685][ T9457] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.406695][ T5967] m920x_read = error: -19 [ 362.406711][ T5967] dvb-usb: error -19 while querying for an remote control event. [ 362.406740][ T44] dvb-usb: error while querying for an remote control event. [ 362.435180][ T5902] kaweth 3-1:0.0: Firmware present in device. [ 362.442641][ T9457] Buffer I/O error on dev nbd0, logical block 3, async page read [ 362.452927][ T9457] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.462351][ T9457] Buffer I/O error on dev nbd0, logical block 0, async page read [ 362.470697][ T9457] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.480148][ T9457] Buffer I/O error on dev nbd0, logical block 1, async page read [ 362.490357][ T9457] ldm_validate_partition_table(): Disk read failed. [ 362.498950][ T9457] Dev nbd0: unable to read RDB block 0 [ 362.506367][ T9457] nbd0: unable to read partition table [ 362.516221][ T44] m920x_read = error: -19 [ 362.521001][ T44] dvb-usb: error while querying for an remote control event. [ 362.538191][ T9457] ldm_validate_partition_table(): Disk read failed. [ 362.552445][ T9457] Dev nbd0: unable to read RDB block 0 [ 362.566325][ T44] m920x_read = error: -19 [ 362.570712][ T44] dvb-usb: error -19 while querying for an remote control event. [ 362.586669][ T9457] nbd0: unable to read partition table [ 362.647900][ T5902] kaweth 3-1:0.0: Statistics collection: 0 [ 362.653757][ T5902] kaweth 3-1:0.0: Multicast filter limit: 0 [ 362.665680][ T44] m920x_read = error: -19 [ 362.670046][ T44] dvb-usb: error while querying for an remote control event. [ 362.685685][ T5902] kaweth 3-1:0.0: MTU: 0 [ 362.689966][ T5902] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 362.755767][ T44] m920x_read = error: -19 [ 362.760178][ T44] dvb-usb: error -19 while querying for an remote control event. [ 362.815739][ T44] m920x_read = error: -19 [ 362.820138][ T44] dvb-usb: error while querying for an remote control event. [ 362.936303][ T44] m920x_read = error: -19 [ 362.940710][ T44] dvb-usb: error -19 while querying for an remote control event. [ 362.955809][ T5909] m920x_read = error: -19 [ 362.960215][ T5909] dvb-usb: error while querying for an remote control event. [ 363.085916][ T5909] m920x_read = error: -19 [ 363.090329][ T5909] dvb-usb: error while querying for an remote control event. [ 363.138782][ T5909] m920x_read = error: -19 [ 363.143186][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 363.209469][ T5909] m920x_read = error: -19 [ 363.218520][ T5909] dvb-usb: error while querying for an remote control event. [ 363.253982][ T5902] kaweth 3-1:0.0: kaweth interface created at eth5 [ 363.315953][ T5902] m920x_read = error: -19 [ 363.320435][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 363.345742][ T5902] m920x_read = error: -19 [ 363.350144][ T5902] dvb-usb: error while querying for an remote control event. [ 363.366036][ T7348] usb 5-1: USB disconnect, device number 80 [ 363.373304][ T7348] usblp0: removed [ 363.467059][ T5902] m920x_read = error: -19 [ 363.475903][ T5902] dvb-usb: error while querying for an remote control event. [ 363.482099][ T886] usb 3-1: USB disconnect, device number 97 [ 363.495903][ T5902] m920x_read = error: -19 [ 363.505227][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 363.605730][ T5902] m920x_read = error: -19 [ 363.610094][ T5902] dvb-usb: error while querying for an remote control event. [ 363.675762][ T5902] m920x_read = error: -19 [ 363.680236][ T5902] dvb-usb: error -19 while querying for an remote control event. [ 363.725702][ T5902] m920x_read = error: -19 [ 363.730066][ T5902] dvb-usb: error while querying for an remote control event. [ 363.845700][ T5902] m920x_read = error: -19 [ 363.850160][ T5902] dvb-usb: error while querying for an remote control event. [ 363.857616][ T5909] m920x_read = error: -19 [ 363.861973][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 363.975689][ T5909] m920x_read = error: -19 [ 363.980040][ T5909] dvb-usb: error while querying for an remote control event. [ 364.025725][ T5909] m920x_read = error: -19 [ 364.030074][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 364.096179][ T5909] m920x_read = error: -19 [ 364.100555][ T5909] dvb-usb: error while querying for an remote control event. [ 364.196151][ T5909] m920x_read = error: -19 [ 364.200534][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 364.215709][ T5909] m920x_read = error: -19 [ 364.220056][ T5909] dvb-usb: error while querying for an remote control event. [ 364.345729][ T5909] m920x_read = error: -19 [ 364.350197][ T5909] dvb-usb: error while querying for an remote control event. [ 364.375682][ T5909] m920x_read = error: -19 [ 364.380058][ T5909] dvb-usb: error -19 while querying for an remote control event. [ 364.466333][ T5909] m920x_read = error: -19 [ 364.470703][ T5909] dvb-usb: error while querying for an remote control event. [ 364.545752][ T886] m920x_read = error: -19 [ 364.550133][ T886] dvb-usb: error -19 while querying for an remote control event. [ 364.595711][ T5909] m920x_read = error: -19 [ 364.600162][ T5909] dvb-usb: error while querying for an remote control event. [ 364.715774][ T886] m920x_read = error: -19 [ 364.715783][ T5909] m920x_read = error: -19 [ 364.715799][ T5909] dvb-usb: error while querying for an remote control event. [ 364.731872][ T886] dvb-usb: error -19 while querying for an remote control event. [ 364.845733][ T5909] m920x_read = error: -19 [ 364.850103][ T5909] dvb-usb: error while querying for an remote control event. [ 364.885742][ T886] m920x_read = error: -19 [ 364.890218][ T886] dvb-usb: error -19 while querying for an remote control event. [ 364.975908][ T5909] m920x_read = error: -19 [ 364.980352][ T5909] dvb-usb: error while querying for an remote control event. [ 365.066017][ T983] m920x_read = error: -19 [ 365.070396][ T983] dvb-usb: error -19 while querying for an remote control event. [ 365.095726][ T5909] m920x_read = error: -19 [ 365.100150][ T5909] dvb-usb: error while querying for an remote control event. [ 365.215688][ T5909] m920x_read = error: -19 [ 365.220032][ T5909] dvb-usb: error while querying for an remote control event. [ 365.235828][ T983] m920x_read = error: -19 [ 365.240197][ T983] dvb-usb: error -19 while querying for an remote control event. [ 365.335735][ T5909] m920x_read = error: -19 [ 365.340096][ T5909] dvb-usb: error while querying for an remote control event. [ 365.415668][ T983] m920x_read = error: -19 [ 365.420031][ T983] dvb-usb: error -19 while querying for an remote control event. [ 365.455760][ T5909] m920x_read = error: -19 [ 365.460130][ T5909] dvb-usb: error while querying for an remote control event. [ 365.585785][ T5909] m920x_read = error: -19 [ 365.590242][ T5909] dvb-usb: error while querying for an remote control event. [ 365.590258][ T886] m920x_read = error: -19 [ 365.602056][ T886] dvb-usb: error -19 while querying for an remote control event. [ 365.715734][ T5909] m920x_read = error: -19 [ 365.720171][ T5909] dvb-usb: error while querying for an remote control event. [ 365.765756][ T886] m920x_read = error: -19 [ 365.770108][ T886] dvb-usb: error -19 while querying for an remote control event. [ 365.835982][ T5909] m920x_read = error: -19 [ 365.840361][ T5909] dvb-usb: error while querying for an remote control event. [ 365.945690][ T886] m920x_read = error: -19 [ 365.950083][ T886] dvb-usb: error -19 while querying for an remote control event. [ 365.955742][ T5909] m920x_read = error: -19 [ 365.962238][ T5909] dvb-usb: error while querying for an remote control event. [ 366.075964][ T5909] m920x_read = error: -19 [ 366.080310][ T5909] dvb-usb: error while querying for an remote control event. [ 366.125785][ T886] m920x_read = error: -19 [ 366.130147][ T886] dvb-usb: error -19 while querying for an remote control event. [ 366.195757][ T5909] m920x_read = error: -19 [ 366.200122][ T5909] dvb-usb: error while querying for an remote control event. [ 366.306262][ T886] m920x_read = error: -19 [ 366.310652][ T886] dvb-usb: error -19 while querying for an remote control event. [ 366.315721][ T5909] m920x_read = error: -19 [ 366.322797][ T5909] dvb-usb: error while querying for an remote control event. [ 366.435946][ T5909] m920x_read = error: -19 [ 366.440545][ T5909] dvb-usb: error while querying for an remote control event. [ 366.475784][ T886] m920x_read = error: -19 [ 366.480135][ T886] dvb-usb: error -19 while querying for an remote control event. [ 366.555813][ T5909] m920x_read = error: -19 [ 366.560204][ T5909] dvb-usb: error while querying for an remote control event. [ 366.645700][ T886] m920x_read = error: -19 [ 366.650054][ T886] dvb-usb: error -19 while querying for an remote control event. [ 366.675840][ T5909] m920x_read = error: -19 [ 366.680227][ T5909] dvb-usb: error while querying for an remote control event. [ 366.795823][ T5909] m920x_read = error: -19 [ 366.800191][ T5909] dvb-usb: error while querying for an remote control event. [ 366.815727][ T886] m920x_read = error: -19 [ 366.820094][ T886] dvb-usb: error -19 while querying for an remote control event. [ 366.925766][ T5909] m920x_read = error: -19 [ 366.930220][ T5909] dvb-usb: error while querying for an remote control event. [ 366.985762][ T886] m920x_read = error: -19 [ 366.990111][ T886] dvb-usb: error -19 while querying for an remote control event. [ 367.046204][ T5909] m920x_read = error: -19 [ 367.050553][ T5909] dvb-usb: error while querying for an remote control event. [ 367.156175][ T886] m920x_read = error: -19 [ 367.160551][ T886] dvb-usb: error -19 while querying for an remote control event. [ 367.175694][ T5909] m920x_read = error: -19 [ 367.180034][ T5909] dvb-usb: error while querying for an remote control event. [ 367.295817][ T5909] m920x_read = error: -19 [ 367.300204][ T5909] dvb-usb: error while querying for an remote control event. [ 367.325688][ T886] m920x_read = error: -19 [ 367.330055][ T886] dvb-usb: error -19 while querying for an remote control event. [ 367.416282][ T5909] m920x_read = error: -19 [ 367.420667][ T5909] dvb-usb: error while querying for an remote control event. [ 367.496149][ T886] m920x_read = error: -19 [ 367.500500][ T886] dvb-usb: error -19 while querying for an remote control event. [ 367.535782][ T5909] m920x_read = error: -19 [ 367.540497][ T5909] dvb-usb: error while querying for an remote control event. [ 367.655759][ T5909] m920x_read = error: -19 [ 367.660134][ T5909] dvb-usb: error while querying for an remote control event. [ 367.675728][ T886] m920x_read = error: -19 [ 367.680104][ T886] dvb-usb: error -19 while querying for an remote control event. [ 367.775731][ T5909] m920x_read = error: -19 [ 367.780168][ T5909] dvb-usb: error while querying for an remote control event. [ 367.846311][ T886] m920x_read = error: -19 [ 367.850669][ T886] dvb-usb: error -19 while querying for an remote control event. [ 367.895741][ T5909] m920x_read = error: -19 [ 367.900114][ T5909] dvb-usb: error while querying for an remote control event. [ 368.015740][ T886] m920x_read = error: -19 [ 368.020183][ T886] dvb-usb: error -19 while querying for an remote control event. [ 368.020226][ T5909] m920x_read = error: -19 [ 368.032410][ T5909] dvb-usb: error while querying for an remote control event. [ 368.145769][ T5909] m920x_read = error: -19 [ 368.150459][ T5909] dvb-usb: error while querying for an remote control event. [ 368.185822][ T886] m920x_read = error: -19 [ 368.190168][ T886] dvb-usb: error -19 while querying for an remote control event. [ 368.275770][ T5909] m920x_read = error: -19 [ 368.280251][ T5909] dvb-usb: error while querying for an remote control event. [ 368.356350][ T886] m920x_read = error: -19 [ 368.360705][ T886] dvb-usb: error -19 while querying for an remote control event. [ 368.395749][ T5909] m920x_read = error: -19 [ 368.400121][ T5909] dvb-usb: error while querying for an remote control event. [ 368.515733][ T5909] m920x_read = error: -19 [ 368.520100][ T5909] dvb-usb: error while querying for an remote control event. [ 368.527581][ T886] m920x_read = error: -19 [ 368.532156][ T886] dvb-usb: error -19 while querying for an remote control event. [ 368.635785][ T5909] m920x_read = error: -19 [ 368.640503][ T5909] dvb-usb: error while querying for an remote control event. [ 368.705796][ T886] m920x_read = error: -19 [ 368.710251][ T886] dvb-usb: error -19 while querying for an remote control event. [ 368.755781][ T5909] m920x_read = error: -19 [ 368.760148][ T5909] dvb-usb: error while querying for an remote control event. [ 368.875703][ T886] m920x_read = error: -19 [ 368.880068][ T886] dvb-usb: error -19 while querying for an remote control event. [ 368.885777][ T5909] m920x_read = error: -19 [ 368.892375][ T5909] dvb-usb: error while querying for an remote control event. [ 369.005713][ T5909] m920x_read = error: -19 [ 369.010429][ T5909] dvb-usb: error while querying for an remote control event. [ 369.045799][ T886] m920x_read = error: -19 [ 369.050184][ T886] dvb-usb: error -19 while querying for an remote control event. [ 369.125790][ T5909] m920x_read = error: -19 [ 369.130152][ T5909] dvb-usb: error while querying for an remote control event. [ 369.215675][ T886] m920x_read = error: -19 [ 369.220089][ T886] dvb-usb: error -19 while querying for an remote control event. [ 369.256520][ T5909] m920x_read = error: -19 [ 369.260911][ T5909] dvb-usb: error while querying for an remote control event. [ 369.375769][ T5909] m920x_read = error: -19 [ 369.380151][ T5909] dvb-usb: error while querying for an remote control event. [ 369.395812][ T886] m920x_read = error: -19 [ 369.400182][ T886] dvb-usb: error -19 while querying for an remote control event. [ 369.496174][ T5909] m920x_read = error: -19 [ 369.500546][ T5909] dvb-usb: error while querying for an remote control event. [ 369.565788][ T886] m920x_read = error: -19 [ 369.570155][ T886] dvb-usb: error -19 while querying for an remote control event. [ 369.616268][ T5909] m920x_read = error: -19 [ 369.620644][ T5909] dvb-usb: error while querying for an remote control event. [ 369.735754][ T5909] m920x_read = error: -19 [ 369.740141][ T5909] dvb-usb: error while querying for an remote control event. [ 369.747589][ T886] m920x_read = error: -19 [ 369.751943][ T886] dvb-usb: error -19 while querying for an remote control event. [ 369.855724][ T5909] m920x_read = error: -19 [ 369.860558][ T5909] dvb-usb: error while querying for an remote control event. [ 369.915732][ T886] m920x_read = error: -19 [ 369.920100][ T886] dvb-usb: error -19 while querying for an remote control event. [ 369.985732][ T5909] m920x_read = error: -19 [ 369.990109][ T5909] dvb-usb: error while querying for an remote control event. [ 370.085756][ T886] m920x_read = error: -19 [ 370.090149][ T886] dvb-usb: error -19 while querying for an remote control event. [ 370.115723][ T5909] m920x_read = error: -19 [ 370.120590][ T5909] dvb-usb: error while querying for an remote control event.