last executing test programs: 6.992822907s ago: executing program 2 (id=4411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400e03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000500)=""/16, &(0x7f0000000240)=0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x22402, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r9 = fspick(r8, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r9, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000080)=0x14) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000000480)={{r3}, 0x1, &(0x7f0000000540)=[0x10], 0xfffffffffffffff6, 0xb}) ptrace$peekuser(0x3, r10, 0x8) getpgid(r10) syz_clone(0x2203080, 0x0, 0x0, 0x0, 0x0, 0x0) read(r5, &(0x7f00000000c0)=""/199, 0xc7) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000f1000040"]) 6.659238429s ago: executing program 3 (id=4414): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=r2, @ANYBLOB="000000000000000014004080"], 0x60}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004010) (fail_nth: 5) 6.564923573s ago: executing program 2 (id=4415): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40010) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085", @ANYBLOB="6197cf2d0ba620d3ee76f009341d3596ea82937abfe40bfedd13e8ff05787ca9ef15fae6ad8d44098c685cc5a1d1e3c93b125e869b3d14f1bec0be6edb7f7d4cfd9c7ffca5f1396a9eb58dfb669c2221698062bc4f3c679b652d1a70b1341583bc7fbb9051dd16929ff8f2fe2525a40f512850f440066876044dbed33645d5a78c2abc339c6323"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000300)=0x1) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000000)=0x5a0411) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 6.483291044s ago: executing program 1 (id=4416): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async, rerun: 32) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (rerun: 32) close_range(r2, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 6.23953963s ago: executing program 3 (id=4418): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a0001000000000002"], 0x2c}}, 0x0) listen(r0, 0x5) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18}, 0x25401}], 0x2, 0x844) 6.116173294s ago: executing program 3 (id=4420): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x141200, 0x0) sendfile(r1, r2, &(0x7f0000000000)=0x63a3, 0x200) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}], 0x1, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000008e00), 0x0, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000900)={0x0, 0xaee1, 0x10, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f00000000c0)={0x40, 0x19, 0x10, {0x10, 0x2, "afd1ed2f7fd825a59a47ff958e76"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f00000004c0)={0x0, 0x22, 0x6, {[@local, @local=@item_4={0x3, 0x2, 0x8, "f05539d6"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1a2b, 0xd1, 0x1, {0x22, 0x969}}}}, &(0x7f0000000800)={0x2c, &(0x7f00000005c0)={0x0, 0x15, 0xde, "cbf2d142fbd8269008e61db5c5b274b5484737dbd3f061913e98fe8cb5ba2fd7f0e2e965d41c49293e400ff967523125f7b923396f739b7b03d43fa436323654000e3aedeef16b4630390a6ec1aeb02acf150460d3e3628be14cb4a6047887f455be86ebbf1409f906dbade21b9c6161b2476b05cdb61bc553a99a2279bc151c634e50520cb3bf35996cfb71541554eaae40ac129eb977e25a051170ad77a571dda0c281342789fdac2c29c41465a2dba4b0d8c7e813288c6ab1fa5139683a276d950e54dc47a96b7fa87792409577c7d6e36df501856bcbf8eda65383af"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x1, 0x79, "f8d7aa7741e1f7619287099718c5a1c512be91fd8f767974e8da40132fc2908eef1792070cbfb6b5dd8ea0f74175302d738d769bfb5f9fe4c4dd335625633e4332681a3ef1bcd5732f755cdfa48eae0ee13e86d7310a02415f24ce3bc8d4f9174219917896e3484376fd9cfca5aa2993843ef7762ef64a4f24"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0xff}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x2007, @fd=r4, 0x6, &(0x7f0000000140)=[{&(0x7f0000000200)=""/131, 0x83}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f0000000040)=""/64, 0x40}, {&(0x7f00000003c0)=""/204, 0xcc}], 0x4, 0x9, 0x0, {0x0, r8}}) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000080)) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x0, 0x24, 0x5, {0x5, 0x8, "926bf9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x141200, 0x0) (async) sendfile(r1, r2, &(0x7f0000000000)=0x63a3, 0x200) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async) shutdown(r3, 0x0) (async) recvmmsg(r3, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}], 0x1, 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f0000008e00), 0x0, 0x2) (async) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) (async) syz_io_uring_setup(0x88f, &(0x7f0000000900)={0x0, 0xaee1, 0x10, 0xffffffff, 0xffdffffe}, &(0x7f0000000000), &(0x7f0000000540)) (async) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f00000000c0)={0x40, 0x19, 0x10, {0x10, 0x2, "afd1ed2f7fd825a59a47ff958e76"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f00000004c0)={0x0, 0x22, 0x6, {[@local, @local=@item_4={0x3, 0x2, 0x8, "f05539d6"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1a2b, 0xd1, 0x1, {0x22, 0x969}}}}, &(0x7f0000000800)={0x2c, &(0x7f00000005c0)={0x0, 0x15, 0xde, "cbf2d142fbd8269008e61db5c5b274b5484737dbd3f061913e98fe8cb5ba2fd7f0e2e965d41c49293e400ff967523125f7b923396f739b7b03d43fa436323654000e3aedeef16b4630390a6ec1aeb02acf150460d3e3628be14cb4a6047887f455be86ebbf1409f906dbade21b9c6161b2476b05cdb61bc553a99a2279bc151c634e50520cb3bf35996cfb71541554eaae40ac129eb977e25a051170ad77a571dda0c281342789fdac2c29c41465a2dba4b0d8c7e813288c6ab1fa5139683a276d950e54dc47a96b7fa87792409577c7d6e36df501856bcbf8eda65383af"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x1, 0x79, "f8d7aa7741e1f7619287099718c5a1c512be91fd8f767974e8da40132fc2908eef1792070cbfb6b5dd8ea0f74175302d738d769bfb5f9fe4c4dd335625633e4332681a3ef1bcd5732f755cdfa48eae0ee13e86d7310a02415f24ce3bc8d4f9174219917896e3484376fd9cfca5aa2993843ef7762ef64a4f24"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0xff}}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r5, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x2007, @fd=r4, 0x6, &(0x7f0000000140)=[{&(0x7f0000000200)=""/131, 0x83}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f0000000040)=""/64, 0x40}, {&(0x7f00000003c0)=""/204, 0xcc}], 0x4, 0x9, 0x0, {0x0, r8}}) (async) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000080)) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x0, 0x24, 0x5, {0x5, 0x8, "926bf9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 5.756754426s ago: executing program 1 (id=4421): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x8) splice(r2, 0x0, r1, 0x0, 0x33fe0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5.188920974s ago: executing program 1 (id=4423): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x10) 4.97680393s ago: executing program 0 (id=4426): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x470, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x440, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0x4, 0xfffff000, 0x2, 0x0, 0x7, 0x3fd5, 0x3, 0x7f, 0x3, 0x5, 0xfffff001, 0x96, 0x2, 0xffff7fff, 0x0, 0x3, 0xa, 0x0, 0x4, 0x120, 0x8001, 0x2, 0x0, 0x10, 0x74d, 0xa2, 0x3, 0xfffffffd, 0x3, 0x2, 0x5, 0xffffffc0, 0x400, 0x9, 0x1, 0x7b9a, 0x7, 0xbbf, 0x6, 0x446bc2d6, 0x1, 0xfffffff7, 0x10, 0x1400, 0x1, 0x402, 0x0, 0x7fffffff, 0x40, 0x101, 0x9, 0x9, 0x8, 0x28, 0x8, 0xc7, 0xf0, 0x9, 0x76, 0xabbe, 0x895, 0xfffffff9, 0x0, 0x4, 0x949c, 0x200, 0x0, 0x5047, 0x10, 0xa7, 0x7fffffff, 0xfffffffe, 0xd, 0x397ec6ab, 0x2, 0xed, 0x5, 0x6, 0xfffffff4, 0x7, 0x0, 0xe, 0xecd, 0xb7, 0x6, 0x5, 0xb20, 0x0, 0x5, 0xeb4c, 0x400, 0x2, 0x7fffffff, 0x8, 0x10001, 0x9, 0x9, 0x80, 0x1000, 0x9, 0x101, 0x40, 0x4, 0xce, 0xfffffffd, 0x4, 0x7f, 0x3, 0x2, 0x7fffffff, 0xbbc4, 0x4, 0xf79e, 0x2, 0x0, 0x1, 0x4, 0xaa, 0x3, 0x6, 0x5, 0x9, 0x5, 0x1, 0x6, 0x8001, 0x3, 0x4, 0x9, 0x0, 0x5, 0x10, 0x3396a53f, 0x101, 0xb4, 0xfffff41f, 0x80000000, 0x8d, 0xfffffff8, 0x80000000, 0x2, 0x3, 0x7, 0x0, 0x7, 0x7fff, 0xffffffff, 0x6, 0x7fffffff, 0x744c, 0x7, 0x8000, 0x1, 0x4, 0x7, 0xfffffffb, 0x7fff, 0x2, 0x2, 0x2, 0x0, 0x10000, 0x4, 0x400, 0x80, 0x1, 0x9, 0x81, 0x6, 0x3, 0x8001, 0x2, 0x0, 0x1ff, 0x100, 0x80000001, 0x80, 0x80, 0x0, 0x1, 0x8, 0x8, 0x7f, 0x0, 0x81a, 0x6, 0x0, 0x88b, 0x625f, 0x2, 0x3, 0x3, 0x6, 0x3ff, 0x8, 0xfffffff8, 0xff, 0x2000000, 0x4, 0x9, 0x0, 0xfffffff7, 0xb1b, 0x770, 0x1, 0x3, 0x3, 0x2, 0x4, 0x0, 0x0, 0x4, 0x3, 0x6, 0x2, 0xf52b, 0x4, 0x3, 0x80, 0x4, 0x5, 0x10001, 0x1ff, 0x10000, 0x0, 0x7, 0xfff, 0x6, 0x80000000, 0x3, 0x5, 0x9, 0x1, 0x6, 0x5a, 0x3, 0xeb7, 0x0, 0x8001, 0xdbe, 0x1, 0x4, 0x4, 0x7, 0x9, 0xffffc723, 0x1, 0x80df, 0x6, 0x7, 0x4, 0x9, 0x5, 0x86f]}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 4.839772565s ago: executing program 0 (id=4427): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000400000000000aaff02000000000000000000000000000121"], 0xffe) 4.798920568s ago: executing program 1 (id=4428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x1b) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getpeername(r4, 0x0, &(0x7f00000000c0)) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000080)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4c}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x0) ptrace$setsig(0x4203, r7, 0x10001, &(0x7f0000000180)={0x22, 0xd, 0x401}) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000300)={0x80000000, 0x140000, 0x1, {0x8, @pix_mp={0x8936, 0xf81, 0x50323234, 0x8, 0x1, [{0x5, 0x3}, {0x5, 0x6}, {0xffffffff, 0x8}, {0x0, 0x4b6}, {0x2, 0x5}, {0x2, 0x4}, {0x10, 0xe}, {0xffff, 0x9}], 0x6, 0x0, 0x1, 0x2, 0x3}}, 0x3439746b}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000000c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.496976251s ago: executing program 0 (id=4429): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=r2, @ANYBLOB="000000000000000014004080"], 0x60}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004010) (fail_nth: 6) 4.455264128s ago: executing program 2 (id=4430): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a0001000000000002"], 0x2c}}, 0x0) listen(r0, 0x5) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18}, 0x1020000}], 0x2, 0x844) 3.827113541s ago: executing program 2 (id=4431): io_uring_setup(0x7bb8, &(0x7f0000000000)={0x0, 0xbe75, 0x19080, 0x1, 0x2b8}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x64}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x50) 3.752810304s ago: executing program 3 (id=4432): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = userfaultfd(0x801) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="ac536a20e748", 0x0, 0xfffffffc, 0x10001, 0xffffffffffffffff, 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x14c, 0xb, 0xa, 0x900, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_USERDATA={0xfc, 0xd, 0x1, 0x0, "832efae81670fc3cc338136a27f2a94d8e87ff4e8878028b344bd2febd0a4244bfa67fdeeb281c414c7a3c41f48cfb70d6d1c9c5bd315dbbb839a7ba6b692aac9d6e7abb3a26695b68ba79066099a8881779c6a52243c82cc7dcf2a14cc691cdf725f6905bb975da61da64c83626dd14ca428ef893873c7dbe2b43191172a2fae2cfd6813806880e15b61249f599fccedfb18928ee54390df0f46d66dc9bef1c6b2a7cf97ea18a68c9f61e103d68d3b77bec1d9f078cc36da9a8135f67ae96e1e24bc840ef7b61bd84e433a2a2ae6f2dd6d568059d003f6a55c8e2166175d3d23e9214e8c64c3490bdee1defa9ec4e243e09646e9f681acb"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x100}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000001) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\f\r6', @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf2503000000050002000d000000040001800500030009000000"], 0x28}}, 0x4000080) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = eventfd2(0x94d, 0x801) ioctl$KVM_HYPERV_EVENTFD(r11, 0x4018aebd, &(0x7f0000000040)={0x3, r12}) ioctl$KVM_HYPERV_EVENTFD(r11, 0x4018aebd, &(0x7f0000000080)={0x4001, r12, 0x1}) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r7, 0x5, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_connect(0x0, 0x38, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) syz_usb_control_io$hid(r0, 0x0, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r13, 0x0, 0x484, &(0x7f0000001400)=""/95, &(0x7f0000001480)=0x5f) 3.694792611s ago: executing program 0 (id=4433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xc}, {0xfff1, 0xfff1}, {0x1b, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) (fail_nth: 9) 3.191400329s ago: executing program 2 (id=4434): r0 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x4be}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xa0, 0x4}}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x41e}}, {0xd1, &(0x7f0000000080)=@string={0xd1, 0x3, "25344f1dccf59fc7523eaae1fac0be1c06ee4c949fd8bff6a4b55c6e9199e5697920ab4bc88afb6ca76b97063ed4f74df722601b345beb1515e557c6a9e77ca3c5b748c8f5e5e2f7b5e88f695ad374c03c182b426ad91d9e94a132da27f37fa3d28482172c32864577c25988565c88c42ab8d1841b964e1c61896be80f9a8f8235c554774ca46cef842e3df23fcb197c5206a24c873a39e6befd7e72d3f09b9e6eaba1e538f5459fdff402a6db91d3271277db69c1f2f20746c0bc77eaa22d21931c8b5feb9407f4b8cd22965ae959"}}]}) gettid() (async) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) (async) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x4be}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xa0, 0x4}}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x41e}}, {0xd1, &(0x7f0000000080)=@string={0xd1, 0x3, "25344f1dccf59fc7523eaae1fac0be1c06ee4c949fd8bff6a4b55c6e9199e5697920ab4bc88afb6ca76b97063ed4f74df722601b345beb1515e557c6a9e77ca3c5b748c8f5e5e2f7b5e88f695ad374c03c182b426ad91d9e94a132da27f37fa3d28482172c32864577c25988565c88c42ab8d1841b964e1c61896be80f9a8f8235c554774ca46cef842e3df23fcb197c5206a24c873a39e6befd7e72d3f09b9e6eaba1e538f5459fdff402a6db91d3271277db69c1f2f20746c0bc77eaa22d21931c8b5feb9407f4b8cd22965ae959"}}]}) (async) 3.125031362s ago: executing program 4 (id=4435): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x33fe0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.124552759s ago: executing program 1 (id=4436): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x8040) socket(0x1e, 0x4, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x9) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, 0x0, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x1, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffefe) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000801) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) 3.026270574s ago: executing program 0 (id=4437): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x470, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x440, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0x4, 0xfffff000, 0x2, 0x0, 0x7, 0x3fd5, 0x3, 0x7f, 0x3, 0x5, 0xfffff001, 0x96, 0x2, 0xffff7fff, 0x0, 0x3, 0xa, 0x0, 0x4, 0x120, 0x8001, 0x2, 0x0, 0x10, 0x74d, 0xa2, 0x3, 0xfffffffd, 0x3, 0x2, 0x5, 0xffffffc0, 0x400, 0x9, 0x1, 0x7b9a, 0x7, 0xbbf, 0x6, 0x446bc2d6, 0x1, 0xfffffff7, 0x10, 0x1400, 0x1, 0x402, 0x0, 0x7fffffff, 0x40, 0x101, 0x9, 0x9, 0x8, 0x28, 0x8, 0xc7, 0xf0, 0x9, 0x76, 0xabbe, 0x895, 0xfffffff9, 0x0, 0x4, 0x949c, 0x200, 0x0, 0x5047, 0x10, 0xa7, 0x7fffffff, 0xfffffffe, 0xd, 0x397ec6ab, 0x2, 0xed, 0x5, 0x6, 0xfffffff4, 0x7, 0x0, 0xe, 0xecd, 0xb7, 0x6, 0x5, 0xb20, 0x0, 0x5, 0xeb4c, 0x400, 0x2, 0x7fffffff, 0x8, 0x10001, 0x9, 0x9, 0x80, 0x1000, 0x9, 0x101, 0x40, 0x4, 0xce, 0xfffffffd, 0x4, 0x7f, 0x3, 0x2, 0x7fffffff, 0xbbc4, 0x4, 0xf79e, 0x2, 0x0, 0x1, 0x4, 0xaa, 0x3, 0x6, 0x5, 0x9, 0x5, 0x1, 0x6, 0x8001, 0x3, 0x4, 0x9, 0x0, 0x5, 0x10, 0x3396a53f, 0x101, 0xb4, 0xfffff41f, 0x80000000, 0x8d, 0xfffffff8, 0x80000000, 0x2, 0x3, 0x7, 0x0, 0x7, 0x7fff, 0xffffffff, 0x6, 0x7fffffff, 0x744c, 0x7, 0x8000, 0x1, 0x4, 0x7, 0xfffffffb, 0x7fff, 0x2, 0x2, 0x2, 0x0, 0x10000, 0x4, 0x400, 0x80, 0x1, 0x9, 0x81, 0x6, 0x3, 0x8001, 0x2, 0x0, 0x1ff, 0x100, 0x80000001, 0x80, 0x80, 0x0, 0x1, 0x8, 0x8, 0x7f, 0x0, 0x81a, 0x6, 0x0, 0x88b, 0x625f, 0x2, 0x3, 0x3, 0x6, 0x3ff, 0x8, 0xfffffff8, 0xff, 0x2000000, 0x4, 0x9, 0x0, 0xfffffff7, 0xb1b, 0x770, 0x1, 0x3, 0x3, 0x2, 0x4, 0x0, 0x0, 0x4, 0x3, 0x6, 0x2, 0xf52b, 0x4, 0x3, 0x80, 0x4, 0x5, 0x10001, 0x1ff, 0x10000, 0x0, 0x7, 0xfff, 0x6, 0x80000000, 0x3, 0x5, 0x9, 0x1, 0x6, 0x5a, 0x3, 0xeb7, 0x0, 0x8001, 0xdbe, 0x1, 0x4, 0x4, 0x7, 0x9, 0xffffc723, 0x1, 0x80df, 0x6, 0x7, 0x4, 0x9, 0x5, 0x86f]}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 2.930601842s ago: executing program 0 (id=4438): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0x31, 0x80000, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfff, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffffe, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000000000, 0x0, 0xfffffffc, 0x7]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2.500744509s ago: executing program 3 (id=4439): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb4a3, 0x1000, 0x7, 0x240}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f00000001c0)={0x1d, r8}, 0x10) read(r7, &(0x7f0000000080)=""/44, 0x2c) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x4000094) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x0, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000280), 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.899237273s ago: executing program 4 (id=4440): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x20000000000001c4, &(0x7f0000000100)=[{0x4, 0x1, 0x7, 0x8}, {0xe, 0x61, 0x0, 0x401}, {0x401, 0x2, 0xa3, 0x8001}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/164, 0xa4}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r5, r6, 0x3, 0x1, 0x4, 0x2, {0x38, 0x5, 0x5, 0xe, 0xa, 0x9, 0x2, 0x5, 0xb, 0xd25, 0x7, 0x500, 0x4ae1b310, 0x10001, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 1.800625106s ago: executing program 2 (id=4441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x82, 0x0, &(0x7f0000000200)="b9ff0f316844268cb89e14f008004ce0050000000000000177fbac141416e000030afe079f03b180004404050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000001059b6d3296e8ca31bce1d8392078b72f24996", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0xffffff00, 0xff, 0xff, 0xffffffff], [0xffffff00, 0xff, 0xff, 0xffffffff], 'netdevsim0\x00', 'nicvf0\x00', {0xff}, {}, 0x2b, 0x6, 0x7}, 0x0, 0xa8, 0xc8, 0x0, {}, [@common=@ah={{}, {[0x4d6, 0x4d5], 0x7, 0x7, 0x2}}, @common=@ipv6header={{}, {0x6, 0x0, 0x1}}]}, @unspec=@CT1={0x0, 'CT\x00', 0x1, {0x8, 0x8f, 0x9af, 0x0, 'snmp\x00', 'syz0\x00', {0x400}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xffffffffffffffe0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 1.428587613s ago: executing program 4 (id=4442): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a0001000000000002"], 0x2c}}, 0x0) listen(r0, 0x5) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18}, 0x1540200}], 0x2, 0x844) 1.032963882s ago: executing program 4 (id=4443): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=r2, @ANYBLOB="000000000000000014004080"], 0x60}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004010) (fail_nth: 7) 910.203685ms ago: executing program 1 (id=4444): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x0, &(0x7f0000006680)=0xfc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigaction(0x39, 0x0, 0x0, 0x8, &(0x7f0000000200)) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000000540)=""/152, 0x98, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f00000004c0)=""/110, 0x6e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000b40)=""/263, 0x107, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/212, 0xd4, 0x0, 0x1, 0x2}}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x45ad8000) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000500000000feffffff617c18110000", @ANYRES32=r5, @ANYRES16=r3], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 597.568747ms ago: executing program 4 (id=4445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf2900000000000055090100000000009500000000000000bf91000000000000b70200000300000085000000b6000000b7000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) 288.788957ms ago: executing program 4 (id=4446): socket(0x11, 0x800000003, 0x0) (async) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100), 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) listen(r6, 0x8) (async) listen(r6, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8000091, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c9b4a04000bde79090003c458187eb46c2d996aff287154e786455261c425a7519cc253d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r12, 0x0) (async) listen(r12, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r13, 0x0) (async) listen(r13, 0x0) r14 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r14, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) writev(r14, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x401}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x4, 0x80000003, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x401}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x4, 0x80000003, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 3 (id=4447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x10001, @mcast2, 0x7f}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x3c, 0x0, 0x0, 0x0, 0x800000, 0x0, @in6=@remote, @in=@remote}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x401, @mcast1, 0x10000}}]}, 0xa0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xc, 0xb, 0x9, 0x21, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_sec_ctx={0x18, 0x18, 0x4a, 0x3, 0xb1, "eb1e793ed7c29cf38cf3d8266ea6bdbb1edb5319291c132be356a6d3800fc9af9e9d0045cd92a31d940fc0993600017b131c09aff3f50160d9d4420d5a8b98fb7d8ded8817f8a1edcb43ede6f85e62268274f87089ceffc2018e9a71108fba7896ee0136b99a562c845b420e9b65f007c563fd2b6e8c355f38870044e9df8ae36f06f5291dde3a61954167d12d248279443fb7ba6fc857cd220f509973b9cf60b77e21539e12afae8cdf930d848f65fdb6"}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010100, 0x1, 0x0, 0x4}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e23}]}, 0x108}}, 0x60000d1) kernel console output (not intermixed with test programs): bj=unconfined pid=21866 comm="syz.2.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffb4918e169 code=0x7ffc0000 [ 1265.788558][ T30] audit: type=1326 audit(1745160393.602:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21866 comm="syz.2.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffb4918e169 code=0x7ffc0000 [ 1265.920332][ T24] m920x_read = error: -19 [ 1265.934405][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1266.136430][ T30] audit: type=1326 audit(1745160393.622:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21866 comm="syz.2.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffb4918e169 code=0x7ffc0000 [ 1266.250223][ T24] m920x_read = error: -19 [ 1266.254887][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1266.369887][ T30] audit: type=1326 audit(1745160393.622:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21866 comm="syz.2.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffb4918e169 code=0x7ffc0000 [ 1266.420450][ T9] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1266.446066][ T30] audit: type=1326 audit(1745160393.622:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21866 comm="syz.2.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffb4918e169 code=0x7ffc0000 [ 1266.469712][ T24] m920x_read = error: -19 [ 1266.487335][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1266.628173][ T30] audit: type=1326 audit(1745160393.632:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21866 comm="syz.2.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffb4918e169 code=0x7ffc0000 [ 1266.670349][ T24] m920x_read = error: -19 [ 1266.677865][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1266.728196][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1266.747663][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1266.763785][ T9] usb 3-1: can't read configurations, error -71 [ 1266.840255][T11209] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1266.850241][ T24] m920x_read = error: -19 [ 1266.858994][ T30] audit: type=1326 audit(1745160393.632:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21866 comm="syz.2.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffb4918e169 code=0x7ffc0000 [ 1266.922463][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1267.000214][T11209] usb 5-1: Using ep0 maxpacket: 8 [ 1267.013627][T11209] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1267.042058][T11209] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1267.063364][T11209] usb 5-1: config 0 has no interface number 0 [ 1267.082627][T11209] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1267.120205][ T5956] m920x_read = error: -19 [ 1267.125419][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1267.150972][T11209] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1267.167288][T11209] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1267.178006][T11209] usb 5-1: language id specifier not provided by device, defaulting to English [ 1267.205378][T11209] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1267.225602][T11209] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1267.259568][T11209] usb 5-1: Product: syz [ 1267.266686][T11209] usb 5-1: SerialNumber: syz [ 1267.279279][T11209] usb 5-1: config 0 descriptor?? [ 1267.310835][ T5956] m920x_read = error: -19 [ 1267.318408][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1267.536900][ T5956] m920x_read = error: -19 [ 1267.552318][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1267.750183][ T5956] m920x_read = error: -19 [ 1267.760165][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1267.940169][ T5956] m920x_read = error: -19 [ 1267.945855][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1268.130288][ T5956] m920x_read = error: -19 [ 1268.134746][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1268.289782][ T9] usb 4-1: USB disconnect, device number 68 [ 1268.320293][ T5956] m920x_read = error: -19 [ 1268.324723][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1268.540222][ T5956] m920x_read = error: -19 [ 1268.544655][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1268.750320][ T5956] m920x_read = error: -19 [ 1268.754753][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1268.953408][ T5956] m920x_read = error: -19 [ 1268.968423][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1269.072466][T21881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.190985][ T5956] m920x_read = error: -19 [ 1269.195507][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1269.226982][T21881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.383890][ T5956] m920x_read = error: -19 [ 1269.388359][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1269.570327][ T5956] m920x_read = error: -19 [ 1269.574754][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1269.800149][ T5956] m920x_read = error: -19 [ 1269.833062][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1270.040177][ T5956] m920x_read = error: -19 [ 1270.044702][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1270.240201][ T24] m920x_read = error: -19 [ 1270.244713][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1270.397274][T11209] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input131 [ 1270.440314][ T24] m920x_read = error: -19 [ 1270.445616][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1270.468821][T11209] usb 5-1: USB disconnect, device number 11 [ 1270.500206][ T5956] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1270.653261][ T5956] usb 3-1: device descriptor read/64, error -71 [ 1270.663450][ T24] m920x_read = error: -19 [ 1270.667857][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1270.874007][ T24] m920x_read = error: -19 [ 1270.878440][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1270.890150][ T5956] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1270.961015][T21939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1271.051321][ T5956] usb 3-1: device descriptor read/64, error -71 [ 1271.090476][ T5833] m920x_read = error: -19 [ 1271.090510][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1271.161297][ T5956] usb usb3-port1: attempt power cycle [ 1271.233331][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1271.254088][ T5895] m920x_read = error: -19 [ 1271.259528][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1271.324948][T11214] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 1271.410333][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1271.420206][ T5833] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1271.435645][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.450771][ T5895] m920x_read = error: -19 [ 1271.455187][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1271.488858][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1271.505207][T11214] usb 4-1: config 7 has an invalid interface number: 252 but max is 0 [ 1271.519326][T11214] usb 4-1: config 7 has no interface number 0 [ 1271.525712][ T5956] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1271.630307][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 1271.652795][ T5833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1271.669450][T11214] usb 4-1: config 7 interface 252 has no altsetting 0 [ 1271.676599][ T5956] usb 3-1: device descriptor read/8, error -71 [ 1271.685129][ T5833] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1271.694616][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1271.706621][T11214] usb 4-1: string descriptor 0 read error: -22 [ 1271.717534][ T5895] m920x_read = error: -19 [ 1271.733003][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.741212][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1271.750363][T11214] usb 4-1: New USB device found, idVendor=0681, idProduct=ff05, bcdDevice=56.20 [ 1271.759501][ T24] usb 2-1: Product: syz [ 1271.763925][T11214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.772050][ T24] usb 2-1: Manufacturer: syz [ 1271.776717][ T24] usb 2-1: SerialNumber: syz [ 1271.806738][ T24] usb 2-1: config 0 descriptor?? [ 1271.818479][ T24] appledisplay 2-1:0.0: Could not find int-in endpoint [ 1271.827332][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1271.930987][ T24] m920x_read = error: -19 [ 1271.935471][ T5956] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1271.944611][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1271.971233][ T5956] usb 3-1: device descriptor read/8, error -71 [ 1271.996072][T11207] usb 4-1: USB disconnect, device number 69 [ 1272.012941][ T5833] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1272.060663][T11209] usb 2-1: USB disconnect, device number 65 [ 1272.101744][ T5956] usb usb3-port1: unable to enumerate USB device [ 1272.125488][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.157642][ T5956] m920x_read = error: -19 [ 1272.169547][ T5833] usb 5-1: Product: syz [ 1272.180592][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1272.188629][ T5833] usb 5-1: Manufacturer: syz [ 1272.199430][ T5833] usb 5-1: SerialNumber: syz [ 1272.340276][ T24] m920x_read = error: -19 [ 1272.344730][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1272.550459][ T24] m920x_read = error: -19 [ 1272.555734][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1272.800187][ T24] m920x_read = error: -19 [ 1272.805667][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1273.090263][ T24] m920x_read = error: -19 [ 1273.095104][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1273.260403][ T24] m920x_read = error: -19 [ 1273.313993][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1273.449784][T21964] fuse: Bad value for 'fd' [ 1273.529752][ T24] m920x_read = error: -19 [ 1273.535657][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1273.723697][ T24] m920x_read = error: -19 [ 1273.728158][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1273.920265][ T24] m920x_read = error: -19 [ 1273.925048][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1274.040162][T11207] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1274.100677][ T24] m920x_read = error: -19 [ 1274.106111][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1274.264085][T11207] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 1274.270222][ T24] m920x_read = error: -19 [ 1274.276626][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1274.300036][T11207] usb 1-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 1274.348157][ T5833] usbhid 5-1:1.0: can't add hid device: -71 [ 1274.366665][T11207] usb 1-1: config 0 has no interface number 0 [ 1274.382718][ T5833] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1274.409913][T11207] usb 1-1: config 0 interface 91 altsetting 3 has an invalid endpoint descriptor of length 5, skipping [ 1274.461296][ T5833] usb 5-1: USB disconnect, device number 12 [ 1274.487718][T11207] usb 1-1: config 0 interface 91 has no altsetting 0 [ 1274.510165][T11207] usb 1-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 1274.538541][T11207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.538916][T11214] m920x_read = error: -19 [ 1274.634183][T11214] dvb-usb: error -19 while querying for an remote control event. [ 1274.635270][T11207] usb 1-1: config 0 descriptor?? [ 1274.870963][T11214] m920x_read = error: -19 [ 1274.882153][T11214] dvb-usb: error -19 while querying for an remote control event. [ 1274.894958][T21971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.910212][ T24] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1274.916298][T21971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.964821][T11207] usb 1-1: string descriptor 0 read error: -71 [ 1274.996307][T11207] usb 1-1: USB disconnect, device number 30 [ 1275.166256][ T24] usb 3-1: config 0 has no interfaces? [ 1275.174587][T11214] m920x_read = error: -19 [ 1275.180129][T11214] dvb-usb: error -19 while querying for an remote control event. [ 1275.201001][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1275.215682][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.234218][ T24] usb 3-1: Product: syz [ 1275.238617][ T24] usb 3-1: Manufacturer: syz [ 1275.255885][ T24] usb 3-1: SerialNumber: syz [ 1275.273343][ T24] usb 3-1: config 0 descriptor?? [ 1275.390341][T11214] m920x_read = error: -19 [ 1275.394764][T11214] dvb-usb: error -19 while querying for an remote control event. [ 1275.524575][T21989] tipc: Started in network mode [ 1275.540494][T21989] tipc: Node identity ac14140f, cluster identity 4711 [ 1275.547679][T21989] tipc: New replicast peer: 255.255.255.255 [ 1275.561423][T21989] tipc: Enabled bearer , priority 10 [ 1275.573908][ T24] m920x_read = error: -19 [ 1275.578581][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1275.603103][T21991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4219'. [ 1275.695571][T21994] fuse: Bad value for 'fd' [ 1275.780453][ T24] m920x_read = error: -19 [ 1275.785093][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1275.811694][T11209] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1275.920102][T11214] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1275.950146][ T24] m920x_read = error: -19 [ 1275.954711][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1275.960189][T11209] usb 2-1: device descriptor read/64, error -71 [ 1276.014775][T21998] loop9: detected capacity change from 0 to 7 [ 1276.042573][T21998] Dev loop9: unable to read RDB block 7 [ 1276.048522][T21998] loop9: unable to read partition table [ 1276.055509][T21998] loop9: partition table beyond EOD, truncated [ 1276.064909][T21998] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1276.074507][T11214] usb 5-1: Using ep0 maxpacket: 8 [ 1276.082218][T11214] usb 5-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 1276.092176][T11214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.105056][T11214] usb 5-1: config 0 descriptor?? [ 1276.130204][T11214] m920x_read = error: -19 [ 1276.145329][T11214] dvb-usb: error -19 while querying for an remote control event. [ 1276.240222][T11209] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1276.251714][T21991] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4219'. [ 1276.316612][ T24] m920x_read = error: -19 [ 1276.332489][T11207] usb 5-1: USB disconnect, device number 13 [ 1276.348795][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1276.390448][T11209] usb 2-1: device descriptor read/64, error -71 [ 1276.520146][T11214] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1276.520606][T11209] usb usb2-port1: attempt power cycle [ 1276.532522][ T5833] m920x_read = error: -19 [ 1276.538421][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1276.670214][T11214] usb 1-1: device descriptor read/64, error -71 [ 1276.670310][T11206] tipc: Node number set to 2886997007 [ 1276.690283][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1276.701233][ T24] m920x_read = error: -19 [ 1276.705800][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1276.821667][ T9] usb 4-1: device descriptor read/64, error -71 [ 1276.872717][ T24] m920x_read = error: -19 [ 1276.882691][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1276.902594][T11209] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1276.910408][T11214] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1276.944399][T11209] usb 2-1: device descriptor read/8, error -71 [ 1277.050126][T11214] usb 1-1: device descriptor read/64, error -71 [ 1277.070216][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1277.080215][ T24] m920x_read = error: -19 [ 1277.084608][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1277.171084][T11214] usb usb1-port1: attempt power cycle [ 1277.190201][T11209] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1277.230205][ T9] usb 4-1: device descriptor read/64, error -71 [ 1277.240533][T11209] usb 2-1: device descriptor read/8, error -71 [ 1277.260311][ T24] m920x_read = error: -19 [ 1277.265896][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1277.356186][ T9] usb usb4-port1: attempt power cycle [ 1277.367140][T11209] usb usb2-port1: unable to enumerate USB device [ 1277.440159][ T24] m920x_read = error: -19 [ 1277.444620][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1277.519604][T11206] usb 3-1: USB disconnect, device number 77 [ 1277.520160][T11214] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1277.560797][T11214] usb 1-1: device descriptor read/8, error -71 [ 1277.613595][ T24] m920x_read = error: -19 [ 1278.149861][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1278.168782][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1278.180830][ T9] usb 4-1: device descriptor read/8, error -71 [ 1278.200136][T11214] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1278.221023][T11214] usb 1-1: device descriptor read/8, error -71 [ 1278.367194][ T5956] m920x_read = error: -19 [ 1278.376685][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1278.401160][T11214] usb usb1-port1: unable to enumerate USB device [ 1278.430200][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1278.506673][ T9] usb 4-1: device descriptor read/8, error -71 [ 1278.570390][ T5956] m920x_read = error: -19 [ 1278.591449][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1278.632698][ T9] usb usb4-port1: unable to enumerate USB device [ 1278.780165][ T5833] m920x_read = error: -19 [ 1278.784595][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1278.970599][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1279.006867][ T5833] m920x_read = error: -19 [ 1279.041039][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1279.152853][ T9] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 1279.173191][ T9] usb 2-1: config 0 has no interface number 0 [ 1279.194983][ T9] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1279.204353][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.221884][ T9] usb 2-1: Product: syz [ 1279.224009][ T5833] m920x_read = error: -19 [ 1279.226420][ T9] usb 2-1: Manufacturer: syz [ 1279.235511][ T9] usb 2-1: SerialNumber: syz [ 1279.240100][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1279.269215][ T9] usb 2-1: config 0 descriptor?? [ 1279.334288][ T9] hub 2-1:0.217: bad descriptor, ignoring hub [ 1279.365935][ T9] hub 2-1:0.217: probe with driver hub failed with error -5 [ 1279.398298][ T5833] m920x_read = error: -19 [ 1279.411162][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1279.571592][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1279.582324][T22039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.602129][T22039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.611629][ T5833] m920x_read = error: -19 [ 1279.614804][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1279.635941][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1279.669707][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1279.684525][ T9] usb 2-1: media controller created [ 1279.780224][T11206] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1279.940348][T11209] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1279.961412][T22039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.980536][ T5833] m920x_read = error: -19 [ 1279.981928][T11206] usb 3-1: config 0 has no interfaces? [ 1279.994063][T22039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.017623][T11206] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1280.038956][T22039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4232'. [ 1280.048235][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1280.049082][T11206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.082046][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1280.101372][T11206] usb 3-1: Product: syz [ 1280.108072][T11206] usb 3-1: Manufacturer: syz [ 1280.126577][T11209] usb 4-1: device descriptor read/all, error -61 [ 1280.142212][T11206] usb 3-1: SerialNumber: syz [ 1280.170775][T11206] usb 3-1: config 0 descriptor?? [ 1280.210944][ T5833] m920x_read = error: -19 [ 1280.217241][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1280.240340][T20845] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1280.381468][T11209] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1280.581761][T11209] usb 4-1: device descriptor read/64, error -71 [ 1280.592982][ T9] DVB: Unable to find symbol dib7000p_attach() [ 1280.616874][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1280.670112][T20845] usb 1-1: device descriptor read/64, error -71 [ 1280.700945][T11209] usb usb4-port1: attempt power cycle [ 1280.774582][ T5833] m920x_read = error: -19 [ 1280.788624][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1280.797614][ T24] usb 3-1: USB disconnect, device number 78 [ 1280.910140][T20845] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1281.042407][ T5833] m920x_read = error: -19 [ 1281.050805][T11209] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1281.057789][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1281.117637][T11209] usb 4-1: device descriptor read/8, error -71 [ 1281.125633][T20845] usb 1-1: device descriptor read/64, error -71 [ 1281.175572][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 1281.192261][ T9] Registered IR keymap rc-empty [ 1281.199068][ T9] dvb-usb: could not initialize remote control. [ 1281.206598][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1281.243275][T20845] usb usb1-port1: attempt power cycle [ 1281.254123][ T9] usb 2-1: USB disconnect, device number 70 [ 1281.260115][ T24] m920x_read = error: -19 [ 1281.260147][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1281.464253][T11209] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1281.495030][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1281.495196][ T30] audit: type=1326 audit(1745160409.742:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22053 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146b8e169 code=0x7ffc0000 [ 1281.531325][ T24] m920x_read = error: -19 [ 1281.537906][T11209] usb 4-1: device descriptor read/8, error -71 [ 1281.544792][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1281.617405][ T30] audit: type=1326 audit(1745160409.742:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22053 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146b8e169 code=0x7ffc0000 [ 1281.640299][T20845] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1281.650557][T11209] usb usb4-port1: unable to enumerate USB device [ 1281.710322][ T24] m920x_read = error: -19 [ 1281.716106][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1281.740298][ T30] audit: type=1326 audit(1745160409.742:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22053 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f3146b8e169 code=0x7ffc0000 [ 1281.760316][T20845] usb 1-1: device descriptor read/8, error -71 [ 1281.805406][ T30] audit: type=1326 audit(1745160409.742:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22053 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146b8e169 code=0x7ffc0000 [ 1281.833530][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1281.910254][ T24] m920x_read = error: -19 [ 1282.027056][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1282.051928][ T30] audit: type=1326 audit(1745160409.742:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22053 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f3146b8e169 code=0x7ffc0000 [ 1282.086333][T20845] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1282.137498][T20845] usb 1-1: device descriptor read/8, error -71 [ 1282.190204][ T5956] m920x_read = error: -19 [ 1282.194658][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1282.233889][ T30] audit: type=1326 audit(1745160409.742:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22053 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146b8e169 code=0x7ffc0000 [ 1282.258345][T20845] usb usb1-port1: unable to enumerate USB device [ 1282.358925][ T30] audit: type=1326 audit(1745160409.742:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22053 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3146b8e169 code=0x7ffc0000 [ 1282.386004][ T5956] m920x_read = error: -19 [ 1282.410113][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1282.537184][T22071] netlink: 'syz.1.4237': attribute type 29 has an invalid length. [ 1282.570271][ T5833] m920x_read = error: -19 [ 1282.574702][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1282.720308][ T30] audit: type=1326 audit(1745160409.742:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22053 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146b8e169 code=0x7ffc0000 [ 1282.783432][T22073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4238'. [ 1282.855154][ T30] audit: type=1326 audit(1745160409.742:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22053 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3146b8e169 code=0x7ffc0000 [ 1282.885667][ T5833] m920x_read = error: -19 [ 1282.917372][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1283.016401][ T30] audit: type=1326 audit(1745160409.742:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22053 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146b8e169 code=0x7ffc0000 [ 1283.130174][ T5833] m920x_read = error: -19 [ 1283.134650][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1283.330172][ T5833] m920x_read = error: -19 [ 1283.342339][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1283.390116][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1283.550132][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1283.560699][ T5833] m920x_read = error: -19 [ 1283.565120][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1283.590542][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.636709][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.660379][T11206] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1283.668677][T22094] rdma_op ffff88807918d1f0 conn xmit_rdma 0000000000000000 [ 1283.690706][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1283.790759][ T5833] m920x_read = error: -19 [ 1283.798358][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1283.806544][ T9] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1283.817914][ T9] usb 1-1: Product: syz [ 1283.900532][T11206] usb 2-1: Using ep0 maxpacket: 8 [ 1283.913879][ T9] usb 1-1: Manufacturer: syz [ 1283.923645][T11206] usb 2-1: New USB device found, idVendor=0460, idProduct=0896, bcdDevice=3a.11 [ 1283.947399][T11206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.955799][T11206] usb 2-1: Product: syz [ 1283.960377][ T5833] m920x_read = error: -19 [ 1283.965013][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1283.973847][T11206] usb 2-1: Manufacturer: syz [ 1284.013320][ T9] hub 1-1:4.0: USB hub found [ 1284.487956][T22080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.496612][ T5833] m920x_read = error: -19 [ 1284.501330][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1284.517323][T22080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.563604][T11206] usb 2-1: SerialNumber: syz [ 1284.660252][ T24] m920x_read = error: -19 [ 1284.666963][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1284.679708][T11206] usb 2-1: config 0 descriptor?? [ 1284.741552][ T9] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 1284.862453][ T9] usb 1-1: USB disconnect, device number 39 [ 1284.900882][ T24] m920x_read = error: -19 [ 1284.906454][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1284.934054][T22087] x_tables: duplicate underflow at hook 1 [ 1285.080754][ T5833] m920x_read = error: -19 [ 1285.085208][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1285.270226][ T5833] m920x_read = error: -19 [ 1285.280284][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1285.330177][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1285.403171][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1285.460175][ T5833] m920x_read = error: -19 [ 1285.464606][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1285.494183][ T24] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1285.514744][ T24] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1285.550323][ T24] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 128, setting to 64 [ 1285.566422][T22115] bond0: (slave bond_slave_0): Releasing backup interface [ 1285.572574][ T24] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1285.593764][ T24] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1285.610469][ T9] usb 1-1: device descriptor read/64, error -71 [ 1285.612479][ T24] usb 5-1: Manufacturer: syz [ 1285.620766][T22115] bond0: (slave bond_slave_1): Releasing backup interface [ 1285.639174][ T24] usb 5-1: SerialNumber: syz [ 1285.644648][ T5833] m920x_read = error: -19 [ 1285.649481][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1285.682030][T22106] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1285.852459][ T5956] m920x_read = error: -19 [ 1285.856867][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1285.910821][ T24] yealink 5-1:36.0: invalid payload size 64, expected 16 [ 1285.920654][T22115] team0: Port device team_slave_0 removed [ 1285.935681][T22115] team0: Port device team_slave_1 removed [ 1285.944835][T22115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.953418][T22115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.961071][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1285.975253][T22115] bond4: (slave gretap1): Releasing active interface [ 1285.989375][ T24] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input133 [ 1286.009386][T22120] loop8: detected capacity change from 0 to 8 [ 1286.019378][T22120] Dev loop8: unable to read RDB block 8 [ 1286.028022][T22120] loop8: unable to read partition table [ 1286.030195][ T5833] m920x_read = error: -19 [ 1286.041182][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1286.042742][T22120] loop8: partition table beyond EOD, truncated [ 1286.058590][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.065890][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.073579][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.079298][T22120] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1286.081146][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.097609][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.104633][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.111631][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.118570][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.120145][ T9] usb 1-1: device descriptor read/64, error -71 [ 1286.125638][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.138375][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.145626][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.152776][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.159554][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.165510][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.172879][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.179659][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.185896][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.192992][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.199815][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.205970][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.213047][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.219953][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.226051][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.233119][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.239987][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.246005][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.253046][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.259883][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.265971][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.274011][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.280839][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.286776][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.295396][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.302220][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.308271][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.315267][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.322060][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.327995][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.330647][ T9] usb usb1-port1: attempt power cycle [ 1286.334961][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.346975][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.353056][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.360092][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.366930][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.372882][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.381737][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.388545][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.394539][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.401889][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.408804][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.414853][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.421863][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.428845][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.434803][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.441830][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.448633][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.454615][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.461871][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.468639][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.474599][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.484326][ T5956] m920x_read = error: -19 [ 1286.488800][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1286.497269][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.497299][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.504830][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.510776][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.517672][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.524641][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.531579][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.531609][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.538492][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.545809][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.545832][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.552197][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.559123][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.559140][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.566108][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.571975][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.571992][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.578800][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.585659][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.585678][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.592377][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.599230][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.599247][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.606134][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.612105][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.612135][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.619016][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.626013][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.626043][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.631952][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.639108][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.639138][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.646055][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.651987][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.652015][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.659727][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.666672][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.666699][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.672585][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.679484][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.679517][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.686484][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.693673][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.693705][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.700716][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.707650][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.707681][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.713627][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.720549][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.720581][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.727458][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.733352][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.733395][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.740426][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.747314][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.747344][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.753259][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.760209][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.760238][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.767114][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.773128][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.773154][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.780146][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.787019][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.787042][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.793713][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.800610][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.800629][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.807456][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.810271][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1286.813308][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.968976][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.977403][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1286.985067][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1286.991900][ C1] yealink 5-1:36.0: unexpected response 0 [ 1286.999536][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.007122][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.013945][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.019901][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.027101][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.033918][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.039862][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.046878][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.051167][ T9] usb 1-1: device descriptor read/8, error -71 [ 1287.053670][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.066143][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.073112][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.079883][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.085814][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.097053][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.103858][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.110643][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.117638][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.124452][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.130454][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.137458][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.144242][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.150210][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.157235][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.164023][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.169936][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.176911][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.183689][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.190495][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.198133][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.204918][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.211011][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.218111][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.225189][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.231284][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.238279][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.245149][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.251371][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.259606][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.266409][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.272413][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.279466][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.286296][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.292317][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.299943][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.306837][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.312806][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.319927][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.326715][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.332661][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.339707][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.346500][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.352513][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1287.359724][ T24] usb 5-1: USB disconnect, device number 14 [ 1287.366006][ C1] yealink 5-1:36.0: urb_irq_callback - urb status -71 [ 1287.366040][ C1] yealink 5-1:36.0: unexpected response 0 [ 1287.366061][ C1] yealink 5-1:36.0: urb_irq_callback - usb_submit_urb failed -19 [ 1287.540224][ T5895] m920x_read = error: -19 [ 1287.544656][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1287.681537][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1287.721373][ T9] usb 1-1: device descriptor read/8, error -71 [ 1287.727876][ T5956] m920x_read = error: -19 [ 1287.740126][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1287.802234][ T5956] usb 2-1: USB disconnect, device number 71 [ 1287.834213][ T9] usb usb1-port1: unable to enumerate USB device [ 1287.930188][ T5833] m920x_read = error: -19 [ 1287.934602][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1287.960464][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1288.100214][T18040] m920x_read = error: -19 [ 1288.104693][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1288.121211][T22136] loop4: detected capacity change from 0 to 7 [ 1288.144170][ T5895] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1288.167333][ T6931] Dev loop4: unable to read RDB block 7 [ 1288.173127][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1288.188655][ T6931] loop4: unable to read partition table [ 1288.195928][ T24] usb 5-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1288.205304][ T6931] loop4: partition table beyond EOD, truncated [ 1288.215369][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.242321][T22136] Dev loop4: unable to read RDB block 7 [ 1288.254749][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1288.277869][T22136] loop4: unable to read partition table [ 1288.278915][ T24] usb 5-1: New USB device found, idVendor=fac4, idProduct=8189, bcdDevice=7d.8f [ 1288.295440][T22136] loop4: partition table beyond EOD, truncated [ 1288.330137][ T5956] m920x_read = error: -19 [ 1288.335249][ T5895] usb 4-1: device descriptor read/64, error -71 [ 1288.347749][T22136] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1288.353342][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1288.374375][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.394409][ T24] usb 5-1: Product: syz [ 1288.400289][ T24] usb 5-1: Manufacturer: syz [ 1288.404938][ T24] usb 5-1: SerialNumber: syz [ 1288.413419][ T24] usb 5-1: config 0 descriptor?? [ 1288.550137][ T24] m920x_read = error: -19 [ 1288.554618][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1288.620566][T22129] netlink: 211456 bytes leftover after parsing attributes in process `syz.4.4251'. [ 1288.631555][ T5895] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1288.661326][T22129] netlink: zone id is out of range [ 1288.666822][T22129] netlink: get zone limit has 8 unknown bytes [ 1288.726168][ T24] usb 5-1: USB disconnect, device number 15 [ 1288.767805][T18040] m920x_read = error: -19 [ 1288.773261][ T5895] usb 4-1: device descriptor read/64, error -71 [ 1288.779891][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1288.900836][ T5895] usb usb4-port1: attempt power cycle [ 1288.973120][T18040] m920x_read = error: -19 [ 1288.983551][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1289.171026][T18040] m920x_read = error: -19 [ 1289.177870][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1289.350366][ T5895] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1289.448924][ T5895] usb 4-1: device descriptor read/8, error -71 [ 1289.463012][T18040] m920x_read = error: -19 [ 1289.467682][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1289.670738][T18040] m920x_read = error: -19 [ 1289.724448][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1289.732467][ T5895] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1289.771066][ T5895] usb 4-1: device descriptor read/8, error -71 [ 1289.957584][ T5895] usb usb4-port1: unable to enumerate USB device [ 1289.977032][ T5895] m920x_read = error: -19 [ 1289.986609][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1290.077315][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1290.160561][T18040] m920x_read = error: -19 [ 1290.166787][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1290.367760][ T9] usb 5-1: config 0 has no interfaces? [ 1290.381019][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1290.393518][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.410594][T18040] m920x_read = error: -19 [ 1290.420049][ T9] usb 5-1: Product: syz [ 1290.420075][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1290.477335][ T9] usb 5-1: Manufacturer: syz [ 1290.500248][ T9] usb 5-1: SerialNumber: syz [ 1290.547229][ T9] usb 5-1: config 0 descriptor?? [ 1290.582650][T18040] m920x_read = error: -19 [ 1290.598071][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1290.790208][ T24] m920x_read = error: -19 [ 1290.795224][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1291.027771][T18040] m920x_read = error: -19 [ 1291.090038][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1291.328114][T18040] m920x_read = error: -19 [ 1291.460154][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1291.543133][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1291.614288][ T9] usb 4-1: config 1 has an invalid interface number: 10 but max is 1 [ 1291.622913][ T9] usb 4-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 1291.647978][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1291.713406][ T9] usb 4-1: config 1 has no interface number 0 [ 1291.732047][ T9] usb 4-1: config 1 interface 10 has no altsetting 0 [ 1291.746105][ T9] usb 4-1: New USB device found, idVendor=1199, idProduct=9041, bcdDevice=fb.54 [ 1291.757806][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.779694][ T9] usb 4-1: Product: syz [ 1291.789888][ T9] usb 4-1: Manufacturer: syz [ 1291.800129][ T5895] m920x_read = error: -19 [ 1291.804844][ T9] usb 4-1: SerialNumber: syz [ 1291.917172][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1292.170137][ T5895] m920x_read = error: -19 [ 1292.175949][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1292.244144][ T9] usb 4-1: USB disconnect, device number 82 [ 1292.490111][ T5895] m920x_read = error: -19 [ 1292.505262][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1292.511161][T20845] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1292.650439][T20845] usb 1-1: device descriptor read/64, error -71 [ 1292.700203][ T5895] m920x_read = error: -19 [ 1292.704625][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1292.892027][T20845] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1292.920176][ T5895] m920x_read = error: -19 [ 1292.924579][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1292.934957][T22184] netlink: 'syz.3.4265': attribute type 5 has an invalid length. [ 1292.994317][ T5895] usb 5-1: USB disconnect, device number 16 [ 1293.061227][T20845] usb 1-1: device descriptor read/64, error -71 [ 1293.110217][T18040] m920x_read = error: -19 [ 1293.114716][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1293.194769][T20845] usb usb1-port1: attempt power cycle [ 1293.321857][T18040] m920x_read = error: -19 [ 1293.326268][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1293.520132][T18040] m920x_read = error: -19 [ 1293.536456][ T5895] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1293.545462][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1293.553903][T20845] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1293.596748][T20845] usb 1-1: device descriptor read/8, error -71 [ 1293.711820][T18040] m920x_read = error: -19 [ 1293.716254][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1293.725796][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 1293.738629][ T5895] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1293.747328][ T5895] usb 5-1: config 0 has no interface number 0 [ 1293.768493][ T5895] usb 5-1: New USB device found, idVendor=12d1, idProduct=d589, bcdDevice=b1.70 [ 1293.785056][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.814432][ T5895] usb 5-1: Product: syz [ 1293.818677][ T5895] usb 5-1: Manufacturer: syz [ 1293.826592][ T5895] usb 5-1: SerialNumber: syz [ 1293.860782][ T5895] usb 5-1: config 0 descriptor?? [ 1293.887433][ T5895] option 5-1:0.88: GSM modem (1-port) converter detected [ 1293.895097][ T5956] m920x_read = error: -19 [ 1293.899522][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1293.900365][T20845] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1293.957761][T20845] usb 1-1: device descriptor read/8, error -71 [ 1294.068088][ T9] usb 5-1: USB disconnect, device number 17 [ 1294.080563][ T5895] m920x_read = error: -19 [ 1294.081062][ T9] option 5-1:0.88: device disconnected [ 1294.084973][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1294.099123][T20845] usb usb1-port1: unable to enumerate USB device [ 1294.240345][ T5895] m920x_read = error: -19 [ 1294.244778][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1294.460239][ T5895] m920x_read = error: -19 [ 1294.465834][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1294.632853][ T5895] m920x_read = error: -19 [ 1294.638054][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1294.846429][ T5895] m920x_read = error: -19 [ 1294.913696][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1294.952148][T22218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1295.167124][ T5956] m920x_read = error: -19 [ 1295.355361][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1295.624228][T22222] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1295.630824][T22222] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1295.643921][T22222] vhci_hcd vhci_hcd.0: Device attached [ 1295.680147][T18040] m920x_read = error: -19 [ 1295.684594][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1295.701717][T22226] syzkaller1: entered promiscuous mode [ 1295.707530][T22226] syzkaller1: entered allmulticast mode [ 1295.753349][T22226] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 1295.757091][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1295.757114][ T30] audit: type=1326 audit(1745160424.092:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22221 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808238e169 code=0x7ffc0000 [ 1295.896071][ T30] audit: type=1326 audit(1745160424.132:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22221 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f808238e169 code=0x7ffc0000 [ 1295.900065][ T5956] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1295.931928][ T30] audit: type=1326 audit(1745160424.132:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22221 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808238e169 code=0x7ffc0000 [ 1295.961709][ T30] audit: type=1326 audit(1745160424.132:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22221 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f808238e169 code=0x7ffc0000 [ 1295.988765][ T30] audit: type=1326 audit(1745160424.132:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22221 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808238e169 code=0x7ffc0000 [ 1296.017613][ T30] audit: type=1326 audit(1745160424.132:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22221 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f808238e169 code=0x7ffc0000 [ 1296.030654][T18040] m920x_read = error: -19 [ 1296.045581][ T30] audit: type=1326 audit(1745160424.132:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22221 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808238e169 code=0x7ffc0000 [ 1296.111866][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1296.167545][ T30] audit: type=1326 audit(1745160424.132:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22221 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f808238e169 code=0x7ffc0000 [ 1296.269109][ T30] audit: type=1326 audit(1745160424.132:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22221 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808238e169 code=0x7ffc0000 [ 1296.300593][T18040] m920x_read = error: -19 [ 1296.314103][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1296.408531][ T30] audit: type=1326 audit(1745160424.132:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22221 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f808238cad0 code=0x7ffc0000 [ 1296.454440][T22223] vhci_hcd: connection reset by peer [ 1296.482212][T20865] vhci_hcd: stop threads [ 1296.486603][T20865] vhci_hcd: release socket [ 1296.494351][T20865] vhci_hcd: disconnect device [ 1296.510828][T18040] m920x_read = error: -19 [ 1296.516230][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1296.580332][ T5895] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1296.720293][ T5833] m920x_read = error: -19 [ 1296.724855][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1296.790381][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 1296.808004][ T5895] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1296.943060][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.951542][T18040] m920x_read = error: -19 [ 1296.955929][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1297.049264][ T5895] usb 4-1: config 0 descriptor?? [ 1297.107361][ T5895] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1297.129506][ T5895] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1297.256070][ T5833] m920x_read = error: -19 [ 1297.284044][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1297.460684][ T5833] m920x_read = error: -19 [ 1297.465143][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1297.640433][ T5833] m920x_read = error: -19 [ 1297.644902][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1297.810349][ T5833] m920x_read = error: -19 [ 1297.814788][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1298.000940][ T5833] m920x_read = error: -19 [ 1298.007561][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1298.190142][T18040] m920x_read = error: -19 [ 1298.194603][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1298.390254][T18040] m920x_read = error: -19 [ 1298.394933][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1298.420184][ T5833] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1298.563656][ T5833] usb 3-1: device descriptor read/64, error -71 [ 1298.590771][T18040] m920x_read = error: -19 [ 1298.600174][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1298.671292][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1298.770144][T18040] m920x_read = error: -19 [ 1298.774681][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1298.809364][T22261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.810425][ T5833] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1298.821800][T22261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.833745][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1298.855879][ T9] usb 2-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1298.890229][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.950130][T18040] m920x_read = error: -19 [ 1298.980106][ T5833] usb 3-1: device descriptor read/64, error -71 [ 1299.344168][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1299.372865][ T9] usb 2-1: config 0 descriptor?? [ 1299.396987][ T9] go7007 2-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1299.450828][ T5833] usb usb3-port1: attempt power cycle [ 1299.455307][ T9] usb 4-1: USB disconnect, device number 83 [ 1299.516354][T11206] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1299.530306][T18040] m920x_read = error: -19 [ 1299.548116][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1299.587255][T18040] usb 2-1: USB disconnect, device number 72 [ 1299.690522][T11206] usb 5-1: Using ep0 maxpacket: 32 [ 1299.701860][T11206] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1299.714988][T11206] usb 5-1: config 0 has no interface number 0 [ 1299.720155][ T24] m920x_read = error: -19 [ 1299.726025][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1299.733885][T11206] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1299.736929][T11206] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1299.759738][T11206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.783984][T11206] usb 5-1: Product: syz [ 1299.788206][T11206] usb 5-1: Manufacturer: syz [ 1299.800297][T11206] usb 5-1: SerialNumber: syz [ 1299.810145][ T5833] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1299.811129][T11206] usb 5-1: config 0 descriptor?? [ 1299.843471][ T5833] usb 3-1: device descriptor read/8, error -71 [ 1299.862814][T11206] smsc75xx v1.0.0 [ 1299.911636][ T24] m920x_read = error: -19 [ 1299.916815][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1300.072168][T11206] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1300.093738][ T5833] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1300.094702][T11206] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1300.102639][ T24] m920x_read = error: -19 [ 1300.115164][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1300.145529][T11206] usb 5-1: USB disconnect, device number 18 [ 1300.166823][ T5833] usb 3-1: device descriptor read/8, error -71 [ 1300.257733][T22288] netlink: 'syz.1.4296': attribute type 1 has an invalid length. [ 1300.300462][ T24] m920x_read = error: -19 [ 1300.306096][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1300.319297][ T5833] usb usb3-port1: unable to enumerate USB device [ 1300.338389][T22288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1300.419545][T22293] bond2: (slave gretap1): making interface the new active one [ 1300.449402][T22293] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1300.481267][T22294] bond2: (slave bridge0): Enslaving as an active interface with a down link [ 1300.522329][ T24] m920x_read = error: -19 [ 1300.526808][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1300.590068][ T5833] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1300.701128][T18040] m920x_read = error: -19 [ 1300.705662][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1300.776226][ T5833] usb 4-1: config 10 has an invalid interface number: 234 but max is 0 [ 1300.831099][ T5833] usb 4-1: config 10 has no interface number 0 [ 1300.841013][ T5833] usb 4-1: config 10 interface 234 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1300.880690][ T5895] m920x_read = error: -19 [ 1300.885089][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1301.040084][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1301.479026][ T5895] m920x_read = error: -19 [ 1301.489786][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1301.584597][ T5956] vhci_hcd: vhci_device speed not set [ 1301.663970][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1301.890383][ T5833] usb 4-1: config 10 interface 234 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1301.902019][ T5895] m920x_read = error: -19 [ 1301.906530][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1301.920388][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.997992][ T5833] usb 4-1: config 10 interface 234 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1302.011215][ T24] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1302.038419][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.048378][ T5833] usb 4-1: config 10 interface 234 altsetting 0 endpoint 0x3 has an invalid bInterval 106, changing to 4 [ 1302.069818][ T24] usb 5-1: config 0 descriptor?? [ 1302.076847][ T5833] usb 4-1: config 10 interface 234 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1302.102323][ T24] usb 5-1: bad CDC descriptors [ 1302.108687][ T24] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 1302.124212][ T5833] usb 4-1: config 10 interface 234 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1302.140420][ T24] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 1302.148527][ T24] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 1302.160639][ T5833] usb 4-1: config 10 interface 234 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1302.190356][ T5895] m920x_read = error: -19 [ 1302.194779][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1302.262075][ T5833] usb 4-1: New USB device found, idVendor=046d, idProduct=9682, bcdDevice=2f.75 [ 1302.298283][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.313799][T22301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.329704][T22301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.341945][ T5833] usb 4-1: Product: syz [ 1302.346196][ T5833] usb 4-1: Manufacturer: syz [ 1302.358720][ T24] usb 5-1: USB disconnect, device number 19 [ 1302.380720][ T5833] usb 4-1: SerialNumber: syz [ 1302.381306][T22320] loop2: detected capacity change from 0 to 7 [ 1302.400867][ T5895] m920x_read = error: -19 [ 1302.406078][T22292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1302.416996][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1302.439940][ C0] blk_print_req_error: 10 callbacks suppressed [ 1302.446294][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1302.455489][ C0] buffer_io_error: 10 callbacks suppressed [ 1302.455501][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1302.475122][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1302.484397][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1302.496660][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1302.505937][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1302.514297][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1302.523591][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1302.532619][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1302.541875][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1302.571638][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1302.580920][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1302.590320][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1302.599501][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1302.608587][T22320] ldm_validate_partition_table(): Disk read failed. [ 1302.616085][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1302.617175][ T5895] m920x_read = error: -19 [ 1302.625320][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1302.640155][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1302.649416][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1302.658406][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1302.667680][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1302.676380][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1302.680325][T22320] Dev loop2: unable to read RDB block 0 [ 1302.684608][ T5833] usb 4-1: USB disconnect, device number 84 [ 1302.751453][T22320] loop2: unable to read partition table [ 1302.757491][T22320] loop2: partition table beyond EOD, truncated [ 1302.869069][T22320] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1302.884557][ T5833] m920x_read = error: -19 [ 1302.889171][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1303.071070][ T5833] m920x_read = error: -19 [ 1303.075514][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1303.330360][ T5833] m920x_read = error: -19 [ 1303.354438][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1303.532895][ T5833] m920x_read = error: -19 [ 1303.537494][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1303.870432][ T5895] m920x_read = error: -19 [ 1303.877319][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1304.100185][ T5895] m920x_read = error: -19 [ 1304.108353][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1304.122785][T22338] vivid-007: ================= START STATUS ================= [ 1304.138361][T22338] vivid-007: Enable Output Cropping: true [ 1304.148501][T22338] vivid-007: Enable Output Composing: true [ 1304.154604][T22338] vivid-007: Enable Output Scaler: true [ 1304.165843][T22338] vivid-007: Tx RGB Quantization Range: Automatic [ 1304.175990][T22338] vivid-007: Transmit Mode: HDMI [ 1304.183438][T22338] vivid-007: Hotplug Present: 0x00000000 [ 1304.190724][T22338] vivid-007: RxSense Present: 0x00000000 [ 1304.197817][T22338] vivid-007: EDID Present: 0x00000000 [ 1304.213691][T22338] vivid-007: ================== END STATUS ================== [ 1304.342336][ T5895] m920x_read = error: -19 [ 1304.361637][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1304.370145][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1304.546293][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1304.562181][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.614938][ T9] usb 3-1: Product: syz [ 1304.634777][ T9] usb 3-1: Manufacturer: syz [ 1304.649300][ T9] usb 3-1: SerialNumber: syz [ 1304.674557][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1304.690149][ T5895] m920x_read = error: -19 [ 1304.694587][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1304.720636][T11209] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1304.940369][ T5833] m920x_read = error: -19 [ 1304.956176][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1305.160534][ T5833] m920x_read = error: -19 [ 1305.164961][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1305.337867][T11206] usb 3-1: USB disconnect, device number 83 [ 1305.360740][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1305.368946][ T5833] m920x_read = error: -19 [ 1305.400471][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1305.502402][T22371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1305.504990][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.516164][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.544263][ T9] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 1305.552555][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.563313][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1305.572665][ T9] usb 5-1: config 1 has no interface number 1 [ 1305.580222][ T5833] m920x_read = error: -19 [ 1305.580896][ T9] usb 5-1: too many endpoints for config 1 interface 4 altsetting 1: 131, using maximum allowed: 30 [ 1305.598839][ T9] usb 5-1: config 1 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 131 [ 1305.625409][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1305.652350][ T9] usb 5-1: config 1 interface 4 has no altsetting 0 [ 1305.679292][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1305.690105][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.698238][ T9] usb 5-1: Product: 꽌̣砧姭밌鏖腿씔陻넴ꆙᘕ⮔ꈡផ掎ế᤭吥㝒⦑闻 [ 1305.710359][ T9] usb 5-1: Manufacturer: 鮃福䮗ᱰ糤뎗ﵕ뾖ꚮퟓ陴譽魨確㢶ዧ邺絅岬♏ூꦌ먖ꀖ档뽓穲˟ྼ햔ꬣ䲞଑@₦᳄鲜㊭䭷댴걁 [ 1305.736087][ T9] usb 5-1: SerialNumber: syz [ 1305.741943][T22373] vivid-003: disconnect [ 1305.764962][T22372] vivid-003: reconnect [ 1305.804253][ T5833] m920x_read = error: -19 [ 1305.808933][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1305.901719][T11209] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1305.932376][T11209] ath9k_htc: Failed to initialize the device [ 1305.956491][T22369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.980378][T22369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.990619][ T5895] m920x_read = error: -19 [ 1305.996006][T11206] usb 3-1: ath9k_htc: USB layer deinitialized [ 1306.017621][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1306.097262][ T9] usb 5-1: 0:2 : does not exist [ 1306.100782][T22387] fuse: Unknown parameter '0x0000000000000004' [ 1306.182951][ T9] usb 5-1: USB disconnect, device number 20 [ 1306.240402][ T5956] m920x_read = error: -19 [ 1306.246459][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1306.392184][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1306.393676][ T5895] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1306.416393][ T5956] m920x_read = error: -19 [ 1306.430126][ T5833] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1306.440723][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1306.632586][ T5956] m920x_read = error: -19 [ 1306.640062][ T5833] usb 2-1: Using ep0 maxpacket: 16 [ 1306.649423][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1306.663213][ T5895] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 1306.672213][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.682592][ T5833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.706005][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1306.717607][ T5895] usb 1-1: config 0 has no interface number 0 [ 1306.731230][ T5895] usb 1-1: config 0 interface 253 has no altsetting 0 [ 1306.735802][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1306.735838][ T5833] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1306.735865][ T5833] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1306.737918][ T5833] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1306.737975][ T5833] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1306.737999][ T5833] usb 2-1: Manufacturer: syz [ 1306.742136][ T5833] usb 2-1: config 0 descriptor?? [ 1306.747167][ T5895] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1306.747225][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.747249][ T5895] usb 1-1: Product: syz [ 1306.842260][ T5895] usb 1-1: Manufacturer: syz [ 1306.847067][ T5895] usb 1-1: SerialNumber: syz [ 1306.851971][ T24] m920x_read = error: -19 [ 1306.857670][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1306.883683][ T5895] usb 1-1: config 0 descriptor?? [ 1306.929164][T22413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4332'. [ 1307.056612][ T24] m920x_read = error: -19 [ 1307.111932][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1307.208225][T22393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.241280][ T5833] rc_core: IR keymap rc-hauppauge not found [ 1307.243750][T22393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.253786][ T5833] Registered IR keymap rc-empty [ 1307.293246][ T24] m920x_read = error: -19 [ 1307.301064][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1307.309215][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.334157][ T5895] usbhid 1-1:0.253: couldn't find an input interrupt endpoint [ 1307.361903][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.371977][ T5895] usb 1-1: USB disconnect, device number 49 [ 1307.401758][ T5833] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1307.502134][ T24] m920x_read = error: -19 [ 1307.513336][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1307.526184][ T5833] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input134 [ 1307.558809][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.636062][T22422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.641046][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.652418][T22422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.701342][ T5895] m920x_read = error: -19 [ 1307.705786][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1307.713942][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.740378][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.770213][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.790164][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.810193][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.820587][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1307.844010][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.872430][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.881620][ T5895] m920x_read = error: -19 [ 1307.886036][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1307.910180][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1307.922930][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.961088][ T9] usb 3-1: device descriptor read/64, error -71 [ 1307.961166][ T5833] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1308.003359][ T5833] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1308.053880][ T5833] usb 2-1: USB disconnect, device number 73 [ 1308.077962][ T5895] m920x_read = error: -19 [ 1308.082481][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1308.092538][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1308.104335][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1308.113468][ T24] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1308.126196][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.155808][ T24] usb 5-1: config 0 descriptor?? [ 1308.200112][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1308.290379][ T24] m920x_read = error: -19 [ 1308.295399][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1308.353407][ T9] usb 3-1: device descriptor read/64, error -71 [ 1308.460785][ T9] usb usb3-port1: attempt power cycle [ 1308.470454][ T24] m920x_read = error: -19 [ 1308.474883][ T24] dvb-usb: error -19 while querying for an remote control event. [ 1308.488541][T18040] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1308.540080][ T5833] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1308.661050][T18040] usb 1-1: too many configurations: 133, using maximum allowed: 8 [ 1308.673189][ T5895] m920x_read = error: -19 [ 1308.678100][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1308.686906][ T5833] usb 2-1: device descriptor read/64, error -71 [ 1308.701355][T18040] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1308.746010][T18040] usb 1-1: can't read configurations, error -61 [ 1308.822879][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1308.850826][ T9] usb 3-1: device descriptor read/8, error -71 [ 1308.890471][T18040] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1308.900283][ T5895] m920x_read = error: -19 [ 1308.910045][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1308.940326][ T5833] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1309.073146][T18040] usb 1-1: too many configurations: 133, using maximum allowed: 8 [ 1309.081168][ T5895] m920x_read = error: -19 [ 1309.085565][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1309.093759][ T5833] usb 2-1: device descriptor read/64, error -71 [ 1309.100060][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1309.114875][T18040] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1309.128586][T18040] usb 1-1: can't read configurations, error -61 [ 1309.131107][ T9] usb 3-1: device descriptor read/8, error -71 [ 1309.151594][T18040] usb usb1-port1: attempt power cycle [ 1309.230312][ T5833] usb usb2-port1: attempt power cycle [ 1309.250701][ T9] usb usb3-port1: unable to enumerate USB device [ 1309.270110][ T5895] m920x_read = error: -19 [ 1309.274582][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1309.440140][ T5895] m920x_read = error: -19 [ 1309.444765][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1309.510546][T18040] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1309.542247][T18040] usb 1-1: too many configurations: 133, using maximum allowed: 8 [ 1309.552593][T18040] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1309.561108][T18040] usb 1-1: can't read configurations, error -61 [ 1309.590064][ T5833] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1309.612694][ T5833] usb 2-1: device descriptor read/8, error -71 [ 1309.630342][ T5895] m920x_read = error: -19 [ 1309.634810][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1309.700123][T18040] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1309.744396][T18040] usb 1-1: too many configurations: 133, using maximum allowed: 8 [ 1309.762545][T18040] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1309.780125][T18040] usb 1-1: can't read configurations, error -61 [ 1309.788280][T18040] usb usb1-port1: unable to enumerate USB device [ 1309.800966][T18040] m920x_read = error: -19 [ 1309.805682][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1309.860375][ T5833] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1309.890758][ T5833] usb 2-1: device descriptor read/8, error -71 [ 1309.970177][T18040] m920x_read = error: -19 [ 1309.974684][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1310.001264][ T5833] usb usb2-port1: unable to enumerate USB device [ 1310.140361][ T5833] m920x_read = error: -19 [ 1310.148863][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1310.168803][T22450] fuse: Unknown parameter '0x0000000000000004' [ 1310.320476][ T5833] m920x_read = error: -19 [ 1310.330595][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1310.500406][ T5833] m920x_read = error: -19 [ 1310.504995][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1310.670169][ T5833] m920x_read = error: -19 [ 1310.671392][ T9] usb 5-1: USB disconnect, device number 21 [ 1310.674864][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1310.866126][T22463] vlan2: entered allmulticast mode [ 1310.880157][T18040] m920x_read = error: -19 [ 1310.884606][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1310.900355][T22463] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 1311.108767][T18040] m920x_read = error: -19 [ 1311.152209][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1311.245377][T22467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4347'. [ 1311.310481][T22467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4347'. [ 1311.330878][T18040] m920x_read = error: -19 [ 1311.335297][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1311.550480][T18040] m920x_read = error: -19 [ 1311.555357][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1311.771344][ T5895] m920x_read = error: -19 [ 1311.777530][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1311.870247][T18040] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1311.976143][ T5833] m920x_read = error: -19 [ 1311.981069][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1311.990043][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1312.090093][T18040] usb 3-1: Using ep0 maxpacket: 32 [ 1312.122079][T18040] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1312.156232][T18040] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1312.160198][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1312.180897][ T5833] m920x_read = error: -19 [ 1312.185328][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1312.204337][T18040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1312.224191][T18040] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1312.250196][T18040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1312.257744][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1312.279755][T18040] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1312.293690][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.300312][T18040] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1312.324169][ T9] usb 5-1: Product: syz [ 1312.328405][ T9] usb 5-1: Manufacturer: syz [ 1312.339730][T18040] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 1312.349507][T18040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.362872][T18040] usb 3-1: Product: syz [ 1312.384926][ T9] usb 5-1: SerialNumber: syz [ 1312.389736][T18040] usb 3-1: Manufacturer: syz [ 1312.394576][ T5833] m920x_read = error: -19 [ 1312.398947][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1312.424750][T18040] usb 3-1: SerialNumber: syz [ 1312.430827][ T9] usb 5-1: config 0 descriptor?? [ 1312.464804][T18040] usb 3-1: config 0 descriptor?? [ 1312.514500][T22478] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1312.580154][ T5833] m920x_read = error: -19 [ 1312.584791][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1312.642180][ T9] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 1312.659344][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1312.703373][ T9] usb 5-1: USB disconnect, device number 22 [ 1312.733747][T18040] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 1312.762824][T18040] hdpvr 3-1:0.0: device init failed [ 1312.768298][T18040] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1312.786515][ T5833] m920x_read = error: -19 [ 1312.829182][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1312.867926][T18040] usb 3-1: USB disconnect, device number 88 [ 1312.955613][T22515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4361'. [ 1312.966496][T22515] macsec0: left allmulticast mode [ 1312.979447][T22515] veth1_macvtap: left allmulticast mode [ 1312.996163][T22515] macsec0: left promiscuous mode [ 1313.014125][T22515] bridge0: port 3(macsec0) entered disabled state [ 1313.030582][ T5956] m920x_read = error: -19 [ 1313.035251][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1313.097286][T22515] bridge_slave_1: left allmulticast mode [ 1313.121104][T22515] bridge_slave_1: left promiscuous mode [ 1313.170131][T11209] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1313.180414][T22515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.206669][T22515] bridge_slave_0: left allmulticast mode [ 1313.212459][T18040] m920x_read = error: -19 [ 1313.212488][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1313.240202][T22515] bridge_slave_0: left promiscuous mode [ 1313.247526][T22515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.350355][T20845] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1313.355472][T22524] netlink: 'syz.4.4365': attribute type 2 has an invalid length. [ 1313.370987][T18040] m920x_read = error: -19 [ 1313.375403][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1313.383276][T11209] usb 2-1: device descriptor read/64, error -71 [ 1313.530371][T22527] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1313.576015][T20845] usb 1-1: config 0 has no interfaces? [ 1313.585486][T20845] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1313.595266][T20845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.600636][T18040] m920x_read = error: -19 [ 1313.603986][T20845] usb 1-1: Product: syz [ 1313.607670][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1313.612775][T20845] usb 1-1: Manufacturer: syz [ 1313.678759][T20845] usb 1-1: SerialNumber: syz [ 1313.711121][T11209] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1313.729197][T22524] : entered promiscuous mode [ 1313.766679][T20845] usb 1-1: config 0 descriptor?? [ 1313.876690][T18040] m920x_read = error: -19 [ 1314.006714][T11209] usb 2-1: device descriptor read/64, error -71 [ 1314.013296][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1314.170367][T11209] usb usb2-port1: attempt power cycle [ 1314.200735][T20845] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1314.259461][T18040] m920x_read = error: -19 [ 1314.298286][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1314.370135][T20845] usb 5-1: Using ep0 maxpacket: 32 [ 1314.388360][T20845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1314.450364][T20845] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1314.486517][T20845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.498242][T20845] usb 5-1: Product: syz [ 1314.500227][T18040] m920x_read = error: -19 [ 1314.507015][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1314.520340][T11209] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1314.560359][T20845] usb 5-1: Manufacturer: syz [ 1314.589900][T20845] usb 5-1: SerialNumber: syz [ 1314.591034][T11209] usb 2-1: device descriptor read/8, error -71 [ 1314.708474][T20845] usb 5-1: config 0 descriptor?? [ 1314.713859][T18040] m920x_read = error: -19 [ 1314.718732][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1314.904807][T18040] m920x_read = error: -19 [ 1314.909478][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1314.942829][T11209] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1314.971001][T11209] usb 2-1: device descriptor read/8, error -71 [ 1315.090210][T18040] m920x_read = error: -19 [ 1315.094763][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1315.107451][T11209] usb usb2-port1: unable to enumerate USB device [ 1315.270893][T18040] m920x_read = error: -19 [ 1315.316623][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1315.620197][ T5956] m920x_read = error: -19 [ 1315.624865][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1315.926862][T22546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.009920][ T9] usb 1-1: USB disconnect, device number 54 [ 1316.028538][T18040] m920x_read = error: -19 [ 1316.037196][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1316.071715][T20845] gs_usb 5-1:0.0: Couldn't get device config: (err=-110) [ 1316.082535][T20845] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 1316.209784][T22546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.240667][T18040] m920x_read = error: -19 [ 1316.245095][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1316.300121][ T5956] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1316.352531][T22546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.364464][T22546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.377114][T22546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.432094][ T5833] m920x_read = error: -19 [ 1316.444710][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1316.612704][T22546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.642353][ T5833] m920x_read = error: -19 [ 1316.693969][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1317.110193][ T5895] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1317.131221][T22546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.140439][T22546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.149253][T22546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.168248][T22546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.198508][ T5833] m920x_read = error: -19 [ 1317.252925][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1317.370149][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 1317.411202][ T5895] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1317.428101][ T5895] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.465967][T18040] m920x_read = error: -19 [ 1317.489489][ T5895] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1317.507398][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1317.555183][ T5895] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1317.600094][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.609374][ T5895] usb 1-1: Product: syz [ 1317.638614][ T5895] usb 1-1: Manufacturer: syz [ 1317.683963][ T5895] usb 1-1: SerialNumber: syz [ 1317.700512][T18040] m920x_read = error: -19 [ 1317.704935][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1317.783253][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4376'. [ 1317.812832][T22566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4377'. [ 1317.842847][T22568] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1317.852052][T22566] netlink: 'syz.1.4377': attribute type 2 has an invalid length. [ 1317.913047][T22566] : entered promiscuous mode [ 1317.913665][T22570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4377'. [ 1317.932447][ T5833] m920x_read = error: -19 [ 1317.936878][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1317.955886][T18040] usb 5-1: USB disconnect, device number 23 [ 1318.140906][ T5833] m920x_read = error: -19 [ 1318.145364][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 1318.270909][T22581] netlink: 'syz.2.4380': attribute type 64 has an invalid length. [ 1318.278915][T22581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4380'. [ 1318.320561][ T5956] m920x_read = error: -19 [ 1318.326242][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1318.382381][T22581] netlink: 'syz.2.4380': attribute type 64 has an invalid length. [ 1318.400385][T22581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4380'. [ 1318.500253][ T5956] m920x_read = error: -19 [ 1318.504779][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1318.510095][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1318.534344][ T5895] usb 1-1: 0:2 : does not exist [ 1318.593354][ T5895] usb 1-1: USB disconnect, device number 55 [ 1318.672153][ T5956] m920x_read = error: -19 [ 1318.678503][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1318.720109][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1318.727458][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 1318.750036][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1318.763306][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 1318.801571][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1318.842519][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.860367][ T5895] m920x_read = error: -19 [ 1318.867692][ T9] usb 5-1: config 0 descriptor?? [ 1318.869812][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1319.110140][ T5895] m920x_read = error: -19 [ 1319.116116][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1319.168821][T22597] syzkaller1: entered promiscuous mode [ 1319.186810][T22597] syzkaller1: entered allmulticast mode [ 1319.224945][T22600] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 1319.300882][ T5895] m920x_read = error: -19 [ 1319.328504][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1319.492675][ T5895] m920x_read = error: -19 [ 1319.497189][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1319.790136][ T5956] m920x_read = error: -19 [ 1319.825909][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1319.923216][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4389'. [ 1320.029824][T22608] fuse: Unknown parameter '0x0000000000000003' [ 1320.050111][ T5956] m920x_read = error: -19 [ 1320.054528][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1320.213642][ T9] usb 5-1: string descriptor 0 read error: -71 [ 1320.240208][ T5956] m920x_read = error: -19 [ 1320.244704][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1320.262682][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1320.278617][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1320.347931][ T9] usb 5-1: USB disconnect, device number 24 [ 1320.440360][ T5956] m920x_read = error: -19 [ 1320.445545][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1320.640261][ T5956] m920x_read = error: -19 [ 1320.644665][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1320.830309][ T5956] m920x_read = error: -19 [ 1320.834719][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1321.000750][T22630] syzkaller1: entered promiscuous mode [ 1321.016507][T22630] syzkaller1: entered allmulticast mode [ 1321.022514][ T5956] m920x_read = error: -19 [ 1321.049163][T22631] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 1321.058664][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1321.250197][T18040] m920x_read = error: -19 [ 1321.270050][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1321.301324][T22640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4401'. [ 1321.440129][T18040] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1321.450528][ T5895] m920x_read = error: -19 [ 1321.457250][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1321.601368][T18040] usb 3-1: Using ep0 maxpacket: 16 [ 1321.621009][ T5895] m920x_read = error: -19 [ 1321.650146][ T5956] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1321.661544][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1321.673561][T18040] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1321.686458][T18040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.696522][T18040] usb 3-1: Product: syz [ 1321.704899][T18040] usb 3-1: Manufacturer: syz [ 1321.709638][T18040] usb 3-1: SerialNumber: syz [ 1321.721393][T18040] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1321.727712][T18040] r8152-cfgselector 3-1: config 0 descriptor?? [ 1321.840360][ T5895] m920x_read = error: -19 [ 1321.846871][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1321.855063][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.873846][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.896043][ T5956] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1321.912958][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.926582][ T5956] usb 4-1: config 0 descriptor?? [ 1321.961431][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4406'. [ 1322.040426][T18040] m920x_read = error: -19 [ 1322.044887][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1322.159165][T18040] r8152-cfgselector 3-1: USB disconnect, device number 89 [ 1322.220277][ T5895] m920x_read = error: -19 [ 1322.229324][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1322.381862][T22645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.391215][T22645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.400456][T18040] m920x_read = error: -19 [ 1322.409392][ T5956] arvo 0003:1E7D:30D4.0048: item fetching failed at offset 5/7 [ 1322.435366][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1322.457898][ T5956] arvo 0003:1E7D:30D4.0048: parse failed [ 1322.469597][ T5956] arvo 0003:1E7D:30D4.0048: probe with driver arvo failed with error -22 [ 1322.610479][T11209] usb 4-1: USB disconnect, device number 86 [ 1322.610485][ T5956] m920x_read = error: -19 [ 1322.658313][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1322.840473][ T5956] m920x_read = error: -19 [ 1322.844943][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1322.999803][T22667] syzkaller1: entered promiscuous mode [ 1323.013621][T22667] syzkaller1: entered allmulticast mode [ 1323.031989][T22667] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 1323.050275][T18040] m920x_read = error: -19 [ 1323.054701][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1323.240520][T18040] m920x_read = error: -19 [ 1323.244945][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1323.305604][T22676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4413'. [ 1323.321004][T22677] netlink: 'syz.3.4414': attribute type 64 has an invalid length. [ 1323.328926][T22677] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4414'. [ 1323.368847][T22677] FAULT_INJECTION: forcing a failure. [ 1323.368847][T22677] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.440254][T22677] CPU: 0 UID: 0 PID: 22677 Comm: syz.3.4414 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 1323.440288][T22677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1323.440302][T22677] Call Trace: [ 1323.440310][T22677] [ 1323.440319][T22677] dump_stack_lvl+0x241/0x360 [ 1323.440358][T22677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1323.440388][T22677] ? __pfx__printk+0x10/0x10 [ 1323.440421][T22677] ? __pfx___might_resched+0x10/0x10 [ 1323.440448][T22677] should_fail_ex+0x424/0x570 [ 1323.440485][T22677] should_failslab+0xac/0x100 [ 1323.440509][T22677] __kmalloc_cache_noprof+0x73/0x370 [ 1323.440531][T22677] ? rtnl_newlink+0x144/0x1fe0 [ 1323.440562][T22677] rtnl_newlink+0x144/0x1fe0 [ 1323.440595][T22677] ? is_bpf_text_address+0x288/0x2a0 [ 1323.440624][T22677] ? is_bpf_text_address+0x26/0x2a0 [ 1323.440655][T22677] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1323.440682][T22677] ? kernel_text_address+0xa7/0xe0 [ 1323.440711][T22677] ? __pfx_rtnl_newlink+0x10/0x10 [ 1323.440736][T22677] ? unwind_get_return_address+0x4d/0x90 [ 1323.440763][T22677] ? arch_stack_walk+0xff/0x150 [ 1323.440793][T22677] ? __lock_acquire+0xad5/0xd80 [ 1323.440830][T22677] ? __lock_acquire+0xad5/0xd80 [ 1323.440862][T22677] ? __lock_acquire+0xad5/0xd80 [ 1323.440909][T22677] ? is_bpf_text_address+0x26/0x2a0 [ 1323.440944][T22677] ? is_bpf_text_address+0x288/0x2a0 [ 1323.440972][T22677] ? is_bpf_text_address+0x26/0x2a0 [ 1323.441002][T22677] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1323.441041][T22677] ? kernel_text_address+0xa7/0xe0 [ 1323.441069][T22677] ? __kernel_text_address+0xd/0x40 [ 1323.441103][T22677] ? aa_get_newest_label+0x101/0x6f0 [ 1323.441138][T22677] ? __lock_acquire+0xad5/0xd80 [ 1323.441186][T22677] ? __pfx_rtnl_newlink+0x10/0x10 [ 1323.441216][T22677] rtnetlink_rcv_msg+0x80f/0xd70 [ 1323.441242][T22677] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 1323.441277][T22677] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1323.441302][T22677] ? __lock_acquire+0xad5/0xd80 [ 1323.441347][T22677] netlink_rcv_skb+0x208/0x480 [ 1323.441375][T22677] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1323.441404][T22677] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1323.441448][T22677] ? netlink_deliver_tap+0x2e/0x1b0 [ 1323.441478][T22677] ? netlink_deliver_tap+0x2e/0x1b0 [ 1323.441507][T22677] netlink_unicast+0x7f8/0x9a0 [ 1323.441539][T22677] ? __pfx_netlink_unicast+0x10/0x10 [ 1323.441565][T22677] ? skb_put+0x114/0x1f0 [ 1323.441599][T22677] netlink_sendmsg+0x8c3/0xcd0 [ 1323.441640][T22677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1323.441671][T22677] ? aa_sock_msg_perm+0x91/0x160 [ 1323.441704][T22677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1323.441728][T22677] __sock_sendmsg+0x221/0x270 [ 1323.441757][T22677] ____sys_sendmsg+0x523/0x860 [ 1323.441798][T22677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1323.441827][T22677] ? __fget_files+0x2a/0x420 [ 1323.441851][T22677] ? __fget_files+0x2a/0x420 [ 1323.441882][T22677] __sys_sendmsg+0x271/0x360 [ 1323.441920][T22677] ? __pfx___sys_sendmsg+0x10/0x10 [ 1323.442009][T22677] ? do_syscall_64+0xb6/0x210 [ 1323.442072][T22677] do_syscall_64+0xf3/0x210 [ 1323.442095][T22677] ? clear_bhb_loop+0x45/0xa0 [ 1323.442121][T22677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.442143][T22677] RIP: 0033:0x7f6f0bd8e169 [ 1323.442162][T22677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1323.442181][T22677] RSP: 002b:00007f6f0cb30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1323.442204][T22677] RAX: ffffffffffffffda RBX: 00007f6f0bfb5fa0 RCX: 00007f6f0bd8e169 [ 1323.442220][T22677] RDX: 0000000004004010 RSI: 0000200000000040 RDI: 0000000000000004 [ 1323.442235][T22677] RBP: 00007f6f0cb30090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.442248][T22677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.442262][T22677] R13: 0000000000000000 R14: 00007f6f0bfb5fa0 R15: 00007f6f0c0dfa28 [ 1323.442295][T22677] [ 1323.470166][T18040] m920x_read = error: -19 [ 1323.750516][T22688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.993006][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1324.172212][T18040] m920x_read = error: -19 [ 1324.176639][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1324.190581][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1324.350181][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1324.368885][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.404142][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1324.446276][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.480293][T18040] m920x_read = error: -19 [ 1324.484802][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1324.509407][ T9] usb 4-1: config 0 descriptor?? [ 1324.521303][T22704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4422'. [ 1324.660093][T18040] m920x_read = error: -19 [ 1324.664647][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1324.850602][T18040] m920x_read = error: -19 [ 1324.855029][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1324.856348][T22714] Cannot find add_set index 0 as target [ 1324.920173][T22718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4426'. [ 1324.961421][ T9] lenovo 0003:17EF:6062.0049: item fetching failed at offset 1/5 [ 1324.986082][ T9] lenovo 0003:17EF:6062.0049: hid_parse failed [ 1325.006081][ T9] lenovo 0003:17EF:6062.0049: probe with driver lenovo failed with error -22 [ 1325.040328][T18040] m920x_read = error: -19 [ 1325.044743][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1325.150375][T22723] syzkaller1: entered promiscuous mode [ 1325.173908][T22723] syzkaller1: entered allmulticast mode [ 1325.194398][T22723] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 1325.250478][T18040] m920x_read = error: -19 [ 1325.255037][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1325.443954][T22729] netlink: 'syz.0.4429': attribute type 64 has an invalid length. [ 1325.457076][T18040] m920x_read = error: -19 [ 1325.463322][T22729] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4429'. [ 1325.476344][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1325.515377][T22729] FAULT_INJECTION: forcing a failure. [ 1325.515377][T22729] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.534325][T22732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.564653][T22732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.581031][T22729] CPU: 0 UID: 0 PID: 22729 Comm: syz.0.4429 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 1325.581064][T22729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1325.581079][T22729] Call Trace: [ 1325.581087][T22729] [ 1325.581097][T22729] dump_stack_lvl+0x241/0x360 [ 1325.581143][T22729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1325.581175][T22729] ? __pfx__printk+0x10/0x10 [ 1325.581210][T22729] ? __pfx___might_resched+0x10/0x10 [ 1325.581238][T22729] should_fail_ex+0x424/0x570 [ 1325.581275][T22729] should_failslab+0xac/0x100 [ 1325.581301][T22729] __kmalloc_cache_noprof+0x73/0x370 [ 1325.581323][T22729] ? rtnl_newlink+0x144/0x1fe0 [ 1325.581355][T22729] rtnl_newlink+0x144/0x1fe0 [ 1325.581381][T22729] ? stack_depot_save_flags+0x44/0x940 [ 1325.581423][T22729] ? kasan_save_track+0x51/0x80 [ 1325.581451][T22729] ? kasan_save_track+0x3f/0x80 [ 1325.581479][T22729] ? kasan_save_free_info+0x40/0x50 [ 1325.581503][T22729] ? __kasan_slab_free+0x59/0x70 [ 1325.581535][T22729] ? __pfx_rtnl_newlink+0x10/0x10 [ 1325.581560][T22729] ? __netlink_deliver_tap+0x561/0x7f0 [ 1325.581586][T22729] ? netlink_deliver_tap+0x19d/0x1b0 [ 1325.581610][T22729] ? netlink_unicast+0x7c6/0x9a0 [ 1325.581631][T22729] ? netlink_sendmsg+0x8c3/0xcd0 [ 1325.581656][T22729] ? __sock_sendmsg+0x221/0x270 [ 1325.581678][T22729] ? ____sys_sendmsg+0x523/0x860 [ 1325.581707][T22729] ? __sys_sendmsg+0x271/0x360 [ 1325.581737][T22729] ? do_syscall_64+0xf3/0x210 [ 1325.581759][T22729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.581821][T22729] ? kasan_quarantine_put+0xdc/0x230 [ 1325.581848][T22729] ? lockdep_hardirqs_on+0x9d/0x150 [ 1325.581874][T22729] ? nlmon_xmit+0xaf/0x100 [ 1325.581913][T22729] ? __local_bh_enable_ip+0x168/0x200 [ 1325.581944][T22729] ? lockdep_hardirqs_on+0x9d/0x150 [ 1325.581974][T22729] ? aa_get_newest_label+0x101/0x6f0 [ 1325.582009][T22729] ? __lock_acquire+0xad5/0xd80 [ 1325.582059][T22729] ? __pfx_rtnl_newlink+0x10/0x10 [ 1325.582089][T22729] rtnetlink_rcv_msg+0x80f/0xd70 [ 1325.582115][T22729] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 1325.582153][T22729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1325.582188][T22729] ? ref_tracker_free+0x63e/0x7e0 [ 1325.582217][T22729] netlink_rcv_skb+0x208/0x480 [ 1325.582244][T22729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1325.582273][T22729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1325.582318][T22729] ? netlink_deliver_tap+0x2e/0x1b0 [ 1325.582348][T22729] ? netlink_deliver_tap+0x2e/0x1b0 [ 1325.582377][T22729] netlink_unicast+0x7f8/0x9a0 [ 1325.582411][T22729] ? __pfx_netlink_unicast+0x10/0x10 [ 1325.582437][T22729] ? skb_put+0x114/0x1f0 [ 1325.582471][T22729] netlink_sendmsg+0x8c3/0xcd0 [ 1325.582512][T22729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.582544][T22729] ? aa_sock_msg_perm+0x91/0x160 [ 1325.582577][T22729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.582603][T22729] __sock_sendmsg+0x221/0x270 [ 1325.582632][T22729] ____sys_sendmsg+0x523/0x860 [ 1325.582674][T22729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1325.582705][T22729] ? __fget_files+0x2a/0x420 [ 1325.582729][T22729] ? __fget_files+0x2a/0x420 [ 1325.582759][T22729] __sys_sendmsg+0x271/0x360 [ 1325.582798][T22729] ? __pfx___sys_sendmsg+0x10/0x10 [ 1325.582885][T22729] ? do_syscall_64+0xb6/0x210 [ 1325.582911][T22729] do_syscall_64+0xf3/0x210 [ 1325.582933][T22729] ? clear_bhb_loop+0x45/0xa0 [ 1325.582958][T22729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.582979][T22729] RIP: 0033:0x7f808238e169 [ 1325.582997][T22729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1325.583016][T22729] RSP: 002b:00007f80801f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1325.583040][T22729] RAX: ffffffffffffffda RBX: 00007f80825b5fa0 RCX: 00007f808238e169 [ 1325.583057][T22729] RDX: 0000000004004010 RSI: 0000200000000040 RDI: 0000000000000004 [ 1325.583071][T22729] RBP: 00007f80801f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.583084][T22729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.583096][T22729] R13: 0000000000000000 R14: 00007f80825b5fa0 R15: 00007f80826dfa28 [ 1325.583133][T22729] [ 1325.997741][T18040] m920x_read = error: -19 [ 1326.003102][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1326.185836][T18040] m920x_read = error: -19 [ 1326.190676][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1326.339631][T22738] IPVS: length: 95 != 24 [ 1326.360364][ T5956] m920x_read = error: -19 [ 1326.364863][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1326.394896][T22741] FAULT_INJECTION: forcing a failure. [ 1326.394896][T22741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.420385][T11207] usb 4-1: USB disconnect, device number 87 [ 1326.434502][T22741] CPU: 0 UID: 0 PID: 22741 Comm: syz.0.4433 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 1326.434533][T22741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1326.434546][T22741] Call Trace: [ 1326.434555][T22741] [ 1326.434564][T22741] dump_stack_lvl+0x241/0x360 [ 1326.434604][T22741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1326.434635][T22741] ? __pfx__printk+0x10/0x10 [ 1326.434677][T22741] should_fail_ex+0x424/0x570 [ 1326.434714][T22741] _copy_to_user+0x31/0xb0 [ 1326.434755][T22741] simple_read_from_buffer+0xc4/0x170 [ 1326.434791][T22741] proc_fail_nth_read+0x1ef/0x260 [ 1326.434816][T22741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1326.434841][T22741] ? rw_verify_area+0x246/0x630 [ 1326.434870][T22741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1326.434893][T22741] vfs_read+0x21f/0xb90 [ 1326.434927][T22741] ? __pfx___mutex_lock+0x10/0x10 [ 1326.434951][T22741] ? __pfx_vfs_read+0x10/0x10 [ 1326.434984][T22741] ? __fget_files+0x2a/0x420 [ 1326.435007][T22741] ? __fget_files+0x39d/0x420 [ 1326.435026][T22741] ? __fget_files+0x2a/0x420 [ 1326.435057][T22741] ksys_read+0x19d/0x2d0 [ 1326.435088][T22741] ? __pfx_ksys_read+0x10/0x10 [ 1326.435124][T22741] ? do_syscall_64+0xb6/0x210 [ 1326.435151][T22741] do_syscall_64+0xf3/0x210 [ 1326.435173][T22741] ? clear_bhb_loop+0x45/0xa0 [ 1326.435199][T22741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.435220][T22741] RIP: 0033:0x7f808238cb7c [ 1326.435239][T22741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1326.435258][T22741] RSP: 002b:00007f80801f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1326.435282][T22741] RAX: ffffffffffffffda RBX: 00007f80825b5fa0 RCX: 00007f808238cb7c [ 1326.435298][T22741] RDX: 000000000000000f RSI: 00007f80801f60a0 RDI: 0000000000000008 [ 1326.435311][T22741] RBP: 00007f80801f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.435325][T22741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.435337][T22741] R13: 0000000000000000 R14: 00007f80825b5fa0 R15: 00007f80826dfa28 [ 1326.435369][T22741] [ 1326.655134][T18040] m920x_read = error: -19 [ 1326.659554][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1326.820416][ T5895] m920x_read = error: -19 [ 1326.825837][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1326.890740][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4437'. [ 1326.990181][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1327.000151][ T5895] m920x_read = error: -19 [ 1327.004876][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1327.140155][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1327.148387][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1327.162909][ T9] usb 3-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1327.180218][T18040] m920x_read = error: -19 [ 1327.182454][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1327.184733][T18040] dvb-usb: error -19 while querying for an remote control event. [ 1327.196733][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1327.230329][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.319703][ T9] usb 3-1: Product: syz [ 1327.329322][ T9] usb 3-1: Manufacturer: 㐥ᵏ잟㹒샺Ჾ鑌떤湜馑槥⁹䮫諈泻殧ڗ퐾䷷⋷᭠嬴ᗫ왗ꍼ럅졈榏퍚쁴ᠼ䈫鸝ꆔꍿ蓒គ㈬䖆쉷衙屖쒈렪蓑阛ᱎ襡騏芏씵睔ꑌ⺄쬿簙ْ䲢㪇ﶾ牾麛꭮齅ꘂ釛⟓眒槛߲쁆瞼ꋪℭᲓ律铫춸阢 [ 1327.332719][ T5895] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1327.380091][ T5956] m920x_read = error: -19 [ 1327.407671][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1327.454921][ T9] usb 3-1: SerialNumber: syz [ 1327.854695][ T5956] m920x_read = error: -19 [ 1327.862177][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1327.919418][ T5895] usb 1-1: config 0 has no interfaces? [ 1327.986690][ T5895] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1327.997398][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.009039][ T5895] usb 1-1: Product: syz [ 1328.015321][ T5895] usb 1-1: Manufacturer: syz [ 1328.027936][ T5895] usb 1-1: SerialNumber: syz [ 1328.071698][ T5956] m920x_read = error: -19 [ 1328.084773][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1328.114669][ T5895] usb 1-1: config 0 descriptor?? [ 1328.135833][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input137 [ 1328.203286][ T5197] bcm5974 3-1:1.0: could not read from device [ 1328.289887][ T5895] m920x_read = error: -19 [ 1328.341840][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 1328.369094][ T9] usb 3-1: USB disconnect, device number 90 [ 1328.495735][T22772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.600157][ T5956] m920x_read = error: -19 [ 1328.615030][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1328.820144][ T5956] m920x_read = error: -19 [ 1328.824578][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1328.992942][ T5956] m920x_read = error: -19 [ 1329.005817][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1329.017553][T22776] netlink: 'syz.4.4443': attribute type 64 has an invalid length. [ 1329.066182][T22776] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4443'. [ 1329.240795][ T5956] m920x_read = error: -19 [ 1329.250164][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1329.410697][ T5956] m920x_read = error: -19 [ 1329.417155][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1329.630473][ T5956] m920x_read = error: -19 [ 1329.657970][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1329.881540][ T5956] m920x_read = error: -19 [ 1329.888147][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1335.725698][ T5956] m920x_read = error: -19 [ 1335.730140][ T5956] dvb-usb: error -19 while querying for an remote control event. [ 1344.649986][ C0] sched: DL replenish lagged too much [ 1440.829939][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1440.836957][ C0] rcu: 1-...!: (1 GPs behind) idle=cabc/1/0x4000000000000000 softirq=152725/152725 fqs=0 [ 1440.848847][ C0] rcu: (detected by 0, t=10505 jiffies, g=169761, q=699 ncpus=2) [ 1440.856709][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1440.856753][ C1] NMI backtrace for cpu 1 [ 1440.856771][ C1] CPU: 1 UID: 0 PID: 22788 Comm: syz.3.4447 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 1440.856794][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1440.856805][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x20/0x70 [ 1440.856834][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 60 68 93 65 8b 15 f8 a2 a5 11 81 e2 00 01 ff 00 74 11 <81> fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c 8b 91 18 16 00 [ 1440.856850][ C1] RSP: 0018:ffffc90000a08d38 EFLAGS: 00000006 [ 1440.856866][ C1] RAX: ffffffff81b00e4c RBX: ffff888027161368 RCX: ffff888032c70000 [ 1440.856880][ C1] RDX: 0000000000010000 RSI: 0000000000000004 RDI: 0000000000000001 [ 1440.856891][ C1] RBP: ffffc90000a08ea0 R08: ffff8880b87276c3 R09: 1ffff110170e4ed8 [ 1440.856905][ C1] R10: dffffc0000000000 R11: ffffed10170e4ed9 R12: 1ffff110170e4ef3 [ 1440.856919][ C1] R13: ffffffff8a25e0d0 R14: ffff888027161340 R15: ffff8880b87276c0 [ 1440.856932][ C1] FS: 0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000 [ 1440.856947][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1440.856959][ C1] CR2: 00007f08d734bf98 CR3: 0000000012bc6000 CR4: 00000000003526f0 [ 1440.856975][ C1] DR0: 0000000000000000 DR1: 00000000ffff000b DR2: 0000000000000000 [ 1440.856986][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1440.856997][ C1] Call Trace: [ 1440.857006][ C1] [ 1440.857013][ C1] __hrtimer_run_queues+0x48c/0xd40 [ 1440.857034][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 1440.857066][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1440.857084][ C1] ? read_tsc+0x9/0x20 [ 1440.857109][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1440.857136][ C1] hrtimer_interrupt+0x403/0xa40 [ 1440.857165][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1440.857189][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1440.857218][ C1] [ 1440.857225][ C1] [ 1440.857232][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1440.857251][ C1] RIP: 0010:lock_acquire+0x167/0x2f0 [ 1440.857275][ C1] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 1440.857290][ C1] RSP: 0018:ffffc9000d08f110 EFLAGS: 00000206 [ 1440.857305][ C1] RAX: df0b4331700db100 RBX: ffffffff8ed3dea0 RCX: df0b4331700db100 [ 1440.857319][ C1] RDX: 0000000000000000 RSI: ffffffff8e4db41e RDI: ffffffff8ca1b5c0 [ 1440.857331][ C1] RBP: ffffffff93686020 R08: 0000000000000000 R09: 0000000000000000 [ 1440.857343][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1440.857353][ C1] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 1440.857384][ C1] ? pfn_valid+0xf6/0x450 [ 1440.857400][ C1] pfn_valid+0x113/0x450 [ 1440.857414][ C1] ? pfn_valid+0xf6/0x450 [ 1440.857430][ C1] page_table_check_clear+0x21/0x6f0 [ 1440.857457][ C1] ? vm_normal_page+0xb2/0x200 [ 1440.857482][ C1] unmap_page_range+0x33cf/0x44d0 [ 1440.857526][ C1] ? __lock_acquire+0xad5/0xd80 [ 1440.857552][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1440.857585][ C1] ? __lock_acquire+0xad5/0xd80 [ 1440.857611][ C1] ? uprobe_munmap+0x180/0x460 [ 1440.857632][ C1] ? unmap_single_vma+0x1ba/0x2a0 [ 1440.857660][ C1] unmap_vmas+0x3ce/0x5f0 [ 1440.857687][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1440.857721][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 1440.857746][ C1] exit_mmap+0x2bc/0xde0 [ 1440.857770][ C1] ? uprobe_clear_state+0x20e/0x290 [ 1440.857790][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1440.857816][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1440.857845][ C1] ? uprobe_clear_state+0x271/0x290 [ 1440.857862][ C1] ? mm_update_next_owner+0xa4/0x810 [ 1440.857885][ C1] __mmput+0x115/0x420 [ 1440.857912][ C1] exit_mm+0x221/0x310 [ 1440.857933][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1440.857952][ C1] ? taskstats_exit+0x326/0xa60 [ 1440.857977][ C1] do_exit+0x994/0x27f0 [ 1440.858004][ C1] ? __pfx_do_exit+0x10/0x10 [ 1440.858027][ C1] ? cgroup_freezing+0x20/0x350 [ 1440.858053][ C1] do_group_exit+0x207/0x2c0 [ 1440.858073][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1440.858099][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 1440.858118][ C1] get_signal+0x1696/0x1730 [ 1440.858152][ C1] ? __pfx_get_signal+0x10/0x10 [ 1440.858182][ C1] arch_do_signal_or_restart+0x98/0x810 [ 1440.858212][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1440.858246][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1440.858265][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 1440.858285][ C1] do_syscall_64+0x100/0x210 [ 1440.858303][ C1] ? clear_bhb_loop+0x45/0xa0 [ 1440.858323][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.858340][ C1] RIP: 0033:0x7f6f0bd8e169 [ 1440.858355][ C1] Code: Unable to access opcode bytes at 0x7f6f0bd8e13f. [ 1440.858372][ C1] RSP: 002b:00007f6f0cb300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1440.858389][ C1] RAX: fffffffffffffe00 RBX: 00007f6f0bfb5fa8 RCX: 00007f6f0bd8e169 [ 1440.858402][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6f0bfb5fa8 [ 1440.858414][ C1] RBP: 00007f6f0bfb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1440.858425][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6f0bfb5fac [ 1440.858436][ C1] R13: 0000000000000000 R14: 00007f6f0c0df940 R15: 00007f6f0c0dfa28 [ 1440.858457][ C1] [ 1440.858743][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g169761 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1441.399071][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1441.409061][ C0] rcu: RCU grace-period kthread stack dump: [ 1441.414958][ C0] task:rcu_preempt state:R running task stack:26976 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1441.428484][ C0] Call Trace: [ 1441.431782][ C0] [ 1441.434734][ C0] __schedule+0x1b88/0x5240 [ 1441.439296][ C0] ? schedule+0x163/0x360 [ 1441.443675][ C0] ? __pfx___schedule+0x10/0x10 [ 1441.448577][ C0] ? schedule+0x90/0x360 [ 1441.452850][ C0] ? schedule+0x90/0x360 [ 1441.457123][ C0] schedule+0x163/0x360 [ 1441.461315][ C0] schedule_timeout+0x15b/0x2b0 [ 1441.466201][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1441.471602][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1441.476919][ C0] ? prepare_to_swait_event+0x1e5/0x340 [ 1441.482494][ C0] ? prepare_to_swait_event+0x308/0x340 [ 1441.488068][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1441.493309][ C0] rcu_gp_fqs_loop+0x2e1/0x1340 [ 1441.498199][ C0] ? rcu_gp_init+0x1279/0x1690 [ 1441.503085][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1441.508055][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1441.514335][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1441.519653][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1441.524889][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1441.530113][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1441.534735][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1441.539966][ C0] ? __kthread_parkme+0x1a8/0x200 [ 1441.545012][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1441.550242][ C0] kthread+0x7b7/0x940 [ 1441.554338][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1441.559571][ C0] ? __pfx_kthread+0x10/0x10 [ 1441.564189][ C0] ? __pfx_kthread+0x10/0x10 [ 1441.568814][ C0] ? __pfx_kthread+0x10/0x10 [ 1441.573426][ C0] ? __pfx_kthread+0x10/0x10 [ 1441.578038][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1441.583266][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 1441.588482][ C0] ? __pfx_kthread+0x10/0x10 [ 1441.593094][ C0] ret_from_fork+0x4b/0x80 [ 1441.597532][ C0] ? __pfx_kthread+0x10/0x10 [ 1441.602146][ C0] ret_from_fork_asm+0x1a/0x30 [ 1441.606944][ C0] [ 1441.609975][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1441.616311][ C0] CPU: 0 UID: 0 PID: 22770 Comm: syz.2.4441 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 1441.628395][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1441.638463][ C0] RIP: 0010:smp_call_function_many_cond+0x1bac/0x2d40 [ 1441.645268][ C0] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 88 dd 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 38 d9 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 1441.664893][ C0] RSP: 0018:ffffc9000ce2f380 EFLAGS: 00000293 [ 1441.670983][ C0] RAX: ffffffff81b6e40d RBX: 1ffff110170e7e91 RCX: ffff888054888000 [ 1441.678972][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1441.687000][ C0] RBP: ffffc9000ce2f580 R08: ffffffff81b6e3d8 R09: 1ffffffff20bfc8e [ 1441.695042][ C0] R10: dffffc0000000000 R11: fffffbfff20bfc8f R12: ffff8880b863ad08 [ 1441.703063][ C0] R13: ffff8880b873f488 R14: ffff8880b863ad00 R15: 0000000000000001 [ 1441.711068][ C0] FS: 0000000000000000(0000) GS:ffff888124f9a000(0000) knlGS:0000000000000000 [ 1441.720014][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1441.726619][ C0] CR2: 0000200000404030 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 1441.734613][ C0] DR0: 000000000000000e DR1: 000000000000000c DR2: 000000000000000e [ 1441.742603][ C0] DR3: 00000000000000b4 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1441.750593][ C0] Call Trace: [ 1441.753891][ C0] [ 1441.756875][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1441.763254][ C0] ? rcu_is_watching+0x15/0xb0 [ 1441.768045][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1441.773295][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1441.778443][ C0] flush_tlb_mm_range+0xb8d/0x13f0 [ 1441.783593][ C0] ? unlink_file_vma_batch_add+0xdb/0x1e0 [ 1441.789349][ C0] ? free_pgtables+0x687/0x6f0 [ 1441.794141][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1441.799719][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 1441.804889][ C0] tlb_flush_mmu+0x1aa/0x690 [ 1441.809517][ C0] tlb_finish_mmu+0xd4/0x200 [ 1441.814142][ C0] exit_mmap+0x5b1/0xde0 [ 1441.818437][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1441.823239][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1441.827956][ C0] ? uprobe_clear_state+0x271/0x290 [ 1441.833209][ C0] ? mm_update_next_owner+0xa4/0x810 [ 1441.838524][ C0] __mmput+0x115/0x420 [ 1441.842634][ C0] exit_mm+0x221/0x310 [ 1441.846821][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1441.851438][ C0] ? taskstats_exit+0x326/0xa60 [ 1441.856330][ C0] do_exit+0x994/0x27f0 [ 1441.860524][ C0] ? __pfx_do_exit+0x10/0x10 [ 1441.865145][ C0] ? cgroup_freezing+0x20/0x350 [ 1441.870036][ C0] do_group_exit+0x207/0x2c0 [ 1441.874650][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1441.879879][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 1441.885101][ C0] get_signal+0x1696/0x1730 [ 1441.889651][ C0] ? __pfx_get_signal+0x10/0x10 [ 1441.894545][ C0] arch_do_signal_or_restart+0x98/0x810 [ 1441.900138][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1441.906342][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1441.912105][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 1441.917693][ C0] do_syscall_64+0x100/0x210 [ 1441.922308][ C0] ? clear_bhb_loop+0x45/0xa0 [ 1441.927011][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.932931][ C0] RIP: 0033:0x7ffb4918e169 [ 1441.937557][ C0] Code: Unable to access opcode bytes at 0x7ffb4918e13f. [ 1441.944619][ C0] RSP: 002b:00007ffb46ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1441.953075][ C0] RAX: 0000000000010106 RBX: 00007ffb493b6080 RCX: 00007ffb4918e169 [ 1441.961217][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1441.969233][ C0] RBP: 00007ffb49210a68 R08: 0000000000000000 R09: 0000000000000000 [ 1441.977233][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1441.985263][ C0] R13: 0000000000000001 R14: 00007ffb493b6080 R15: 00007ffb494dfa28 [ 1441.993321][ C0]