last executing test programs: 13.530599169s ago: executing program 1 (id=2806): r0 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffc, 0x6, 0x3, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="5d3b9dc8fc57", 0x0, 0x90f, 0x12, 0x2, 0x0}) recvmmsg(r0, &(0x7f0000002980), 0x0, 0x40002042, &(0x7f0000002a80)={0x0, 0x989680}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x40000000800801cf, 0xfffffe19) 9.610658539s ago: executing program 1 (id=2815): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x120) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f00002bf000/0x3000)=nil, 0x0}, 0x68) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000050030000100000005002e00000000000500300001000000050029000100000008000600", @ANYRES16, @ANYBLOB="080031000002000005002a0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4844}, 0x4040040) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.353875912s ago: executing program 0 (id=2817): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 8.32638483s ago: executing program 3 (id=2819): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x0, 0x0, 0x400c275, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x300, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) 8.32534885s ago: executing program 0 (id=2820): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xaf\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a@,\xb1#oCv\x1d@\xa1\x8e\xbcWJ\x0e\x15\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x15\x95\xf6F\x14\xc9F\xeeX\xf1ic\xba\x10E\x1e_\x01\x85\xd2\xe7\xa8{\xe4\x06]\xabF:\x01l\xd9bM5\x1fa\xb6K\xd8\xa8\x1e\xcb%\xb4R\xb6Rud\x839)\xd8\xccv8\x92\xc1/s7\xb9R\xa1\x02\xfa\x12\r\x93~\xce\xb6n\xf1\x18\xb1}K\xe9?HK\xcd\xcfT\xb1f\xbe\xce\xa1\xef\x1d\xdb\xab\xf2jt\xd0\x10\xacL)M\xc8\xf5\xa0;q\xe2\x8f\xbc\xc5\xd5a\xe29\x17af3C\xecp\xacq\x848\xd6\x9e\xfde\xf9\xd0\xb75\xf4\xb1\x9b\xf45\aU\x81\t#\xed\fp\xe7[,(\xd5\x9fwx]\xc8\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-\xd3\xfa\xff\xff\xff\xff\xff\xff\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000280)=0xffffffff, 0x21) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x31, 0xa7, "6fd0cc6ae91fbd1fe992da7f7634b46e59aaf4cea3e2473c326efe110efce12df6f46a1e28b572842856b021e10cbf82d3084ad652efa6420e3b6c85fcc1fb560c4b7ec1b2817e30002bf7cd2f437b8eb30486856039a2d528e0fed0f8cfd542a207278bccf17d818bb10f2929a9aedda2c404ca800a88481ac8c9089b695d03cf96d76de0e0582120c181279c8d2e94bb0f19391bb935847e9a84e75e90b1c9d751b2c77231ec"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "0aad"}, &(0x7f0000000300)={0x20, 0x82, 0x2, "a882"}, &(0x7f0000000340)={0x20, 0x83, 0x3, "d68f64"}, &(0x7f0000000380)={0x20, 0x84, 0x1, "9a"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "c923b0"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b40)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.240026938s ago: executing program 2 (id=2821): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x0, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r5, 0xe8a3e000) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000180)="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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) madvise(&(0x7f0000a36000/0x4000)=nil, 0x4000, 0x10) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r7, &(0x7f0000000100)=""/107, 0x6b) pwritev2(r7, &(0x7f0000001640)=[{&(0x7f0000000080)="46c7", 0x2}], 0x1, 0x6, 0xff, 0x0) r8 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12015001020000402505a1a440000102030109025c0002010070000904000001020d0000052406000105240000000d240f01fdfffffffdff08000006241a000010090581034000000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x9, 0x4, 0x7, 0x8, 0xf0, 0x6, 0x47, 0xf85, 0x4ca7, 0xc, 0x6de, 0xfffc}}, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000022ff6)='./control\x00', 0x25e041, 0x18c) 8.208273551s ago: executing program 3 (id=2822): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000500)={0x0, 0xd52b, 0x10100, 0x0, 0x93}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x1, 0x0, 0xce, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40010000, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0xfffffffffffffff5, 0x0, 0x0) 8.027912679s ago: executing program 3 (id=2824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003940)=@newtfilter={0x24, 0x24, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) 7.917848172s ago: executing program 3 (id=2825): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000090505022a89929c1009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394", 0xf}], 0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 7.548664174s ago: executing program 2 (id=2826): r0 = socket$kcm(0x2, 0x922000000001, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0x0, 0x4, @void, @value}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x43, &(0x7f0000000000), 0xff7b) (fail_nth: 1) 7.054513038s ago: executing program 2 (id=2827): r0 = socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) unshare(0x22020600) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0x0, 0x4, @void, @value}, 0x20) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x0) mmap(&(0x7f00005ad000/0x3000)=nil, 0x3000, 0x3000011, 0x4008032, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getresuid(0x0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123241, 0x0) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) tee(r4, r5, 0x3ff, 0xf) syz_clone(0x2004000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r8, 0x2007ffb) sendfile(r8, r8, 0x0, 0x1000000201005) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io(r2, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20250e0400000e32265764984540e6b6c2b1c0ec4a949b2659a6bddfb0a645a2ecb5f6da918c32a6bbc588194641fd952b81a4b4ae"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendfile(r10, r9, 0x0, 0x7ffff000) mkdir(&(0x7f0000000140)='./bus\x00', 0x10) 6.468139034s ago: executing program 4 (id=2831): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5.854245089s ago: executing program 3 (id=2832): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xe0ff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 5.759830553s ago: executing program 3 (id=2833): r0 = syz_open_dev$vim2m(&(0x7f0000001240), 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000008900000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') timer_create(0x0, &(0x7f0000001280)={0x0, 0x21, 0x1}, &(0x7f0000bbdffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000001180)={0x5, 0x6, 0x0, 'queue0\x00', 0x800}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x23, &(0x7f00000012c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @alu={0x7, 0x0, 0x2, 0x5, 0xa, 0xc, 0x8}, @alu={0x675964bf1b5db9d6, 0x0, 0x2, 0xa, 0x7, 0xffffffffffffffc0, 0x2}], &(0x7f0000001400)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x3, 0x10, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) syz_usb_connect(0x3, 0x3e, &(0x7f0000001240)=ANY=[@ANYBLOB="12015002a99723089904181013350100030109022c0002090330f809047907f99590130509050501000006dd03080b0e8b143ea55d09045d01000e0100"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) socket$rxrpc(0x21, 0x2, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x8) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000580)={0x1, r4}) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000300)={0x1}) r5 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x40000) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000000)={0x980000, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0}) 5.620268191s ago: executing program 0 (id=2834): set_mempolicy(0x1, &(0x7f0000000040)=0x2, 0x4) (async) syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c002000", @ANYRES16=r1, @ANYBLOB="df4800000000000000000c0000000400038004000180"], 0x1c}}, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) 5.503099388s ago: executing program 0 (id=2835): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) close(r1) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, "3283"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.432221372s ago: executing program 4 (id=2836): r0 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000affa40000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 5.415662025s ago: executing program 4 (id=2837): ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x890b, &(0x7f0000002480)={{0x0, 0x2, 0x9, 0x0, 0xfffffffffffffffe, 0x63d, 0x20000007f, 0x6, 0xfffffffc, 0x24da62c5, 0xb28, 0x9, 0x2}}) r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17, 0x6000000}, 0x80009}], 0x16c, 0x10002, 0x0) 5.275497987s ago: executing program 4 (id=2838): syz_open_dev$usbfs(&(0x7f0000000040), 0x800000000078, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x800000000078, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x60, 0x16, 0x9, 0x3d, 0x0, 0x6, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x60, 0x16, 0x9, 0x3d, 0x0, 0x6, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002580)='/sys/power/pm_trace', 0x8001, 0xd0) fremovexattr(r1, &(0x7f0000000040)=@known='user.incfs.metadata\x00') ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) syz_io_uring_setup(0x3dd7, &(0x7f0000000080)={0x0, 0xfde5, 0x2000, 0x3, 0x1cf, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) 5.231529611s ago: executing program 1 (id=2839): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xaf\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a@,\xb1#oCv\x1d@\xa1\x8e\xbcWJ\x0e\x15\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x02\x00\x15\x95\xf6F\x14\xc9F\xeeX\xf1ic\xba\x10E\x1e_\x01\x85\xd2\xe7\xa8{\xe4\x06]\xabF:\x01l\xd9bM5\x1fa\xb6K\xd8\xa8\x1e\xcb%\xb4R\xb6Rud\x839)\xd8\xccv8\x92\xc1/s7\xb9R\xa1\x02\xfa\x12\r\x93~\xce\xb6n\xf1\x18\xb1}K\xe9?HK\xcd\xcfT\xb1f\xbe\xce\xa1\xef\x1d\xdb\xab\xf2jt\xd0\x10\xacL)M\xc8\xf5\xa0;q\xe2\x8f\xbc\xc5\xd5a\xe29\x17af3C\xecp\xacq\x848\xd6\x9e\xfde\xf9\xd0\xb75\xf4\xb1\x9b\xf45\aU\x81\t#\xed\fp\xe7[,(\xd5\x9fwx]\xc8\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-\xd3\xfa\xff\xff\xff\xff\xff\xff\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) 5.066851351s ago: executing program 4 (id=2840): getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x8c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x0, 0x100, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x4}}, {{@in=@private=0xa010102, 0x4d6, 0x2b}, 0x0, @in=@multicast1}}, 0xe8) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) connect$tipc(r1, &(0x7f0000000400)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0xfffe}], 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES32=r6], 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000002c0)=@multiplanar_fd={0xfffffff9, 0x1, 0x4, 0x0, 0xfff, {0x0, 0x2710}, {0x4, 0x0, 0x9, 0x1, 0x9, 0x3, "f0cc4e57"}, 0xfcc3, 0x4, {&(0x7f0000000240)=[{0x7f, 0xa, {r5}, 0x8}, {0x2, 0x0, {}, 0x7fa7}]}, 0x6}) mq_timedsend(r3, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9554d74e1511c4c476c41aa7fa717259e5048d80f1f30f07dd5397c17d818dac1849b7ccf6425fa0265edfecb58a763615dedbe98e215ce63dd1688e191a191ccdb4e939bd370f68054440296cb511b5f070fb9479bdef321b7d124506f6345ac3c2ca0ef22292d3f83ec21908de3a3c7f98cc5e086034d0b08df704382a8ee9f6129542cac7dc5fd54e71270f5ea9739b625347f3200d6f74d41106aed8fa8af5a3a6cd58a44de62af681d449a44b5f86702e625a1658f2bb09e1c7a178ec27081bb8e0f3febf700a1663374325bbb17a17c6178fbc0424f83cfafdd8ed301450bc6822105e6033bc999c833ce3f60814f9db98c3880aae837027cc4fd82a1aa61d1c7fbacf0e5da0c820f97e35f52abb212dcfd77c7e159ef4f777a2cbf61508539660a577974291852a3dfdcb0706961faf65f62745240e281e9c1ea25a2bf29729008b59b5bac92c8ffc53b240761c0021edb53bad82a322510f480a53945c63803abb0b5947aa32a7ad5cf8059933ae4dc5d18a261b8d4a126dadd1d7f186cc0f3bc00c82c15516ea2a4b5a5517395d2a16a3beb920b16c706381bae273443ebfa3c37778596177de18a62cb96c08a35459a897ac87bcd87cdbcecae83c95cd4b5eb878a8d31e75955eb11e0cb58c6ad2b39f8f9350ff95778a961b07b4b0e4ff6b58caab6db44c6345c8ad9da0aef0c2b4a09e459a027d774da684ce2defd0b23b6e15ec573268050cba4cd1be4d899672ea3562f280df3b3ee878bd2e9989357829c363b4b47eacadeee76144957f4d76c3ea703aa5bf32f75a0370f49ae371f001eced8bbdaa781f66c83f959af0cb0ecbabeeeb0f91c26a22b430d5cae34e470f79f01446cdca5b70ba6448a8d9e4722dba03369b3204253eea942de2fb7b4408212a4c6a5d36c7e82417edd052a59d6d1ce2b0a2bd94f334647712cc2296e75db316be650195dd28a360e2e44fd32951b2b983d673bce51eea778d2ed2a2468c3b6b94b67ee175aa08f757d5522b43cefd5969511579cd79300802c811adad7b6bdf789f70bc76e94f8ea317043cf29b562a2041c553122ec338834455be1b68fe7470808451b0e1f1d444ae1e430c51c718a751142fa675a663e9d9f66a8a6199b56d18e4167e54942a37366fa0b5242de86bf1af6c758b2f0bb1f0fda16dc5241e3cc442326fdb501b95fe768c45781c8b60fbe576c7e790e2d5a2a76085cdca098fb3209b30a017eefbf6f8b315b38d8f8f194e456d1776cf6c9c4f4a99e9b50ca4bbc57ff1f035f13a3d8261617b5d55387488f9456a32400a84f95320e722c7abed22b9f8b574da8322fe104c12fb35c9d0c600dde78c47cd46647a8e24aafa53c68e2119ed1473bb3b7c9873d0a256e8eec8dc9f57820a7e23d49deb4041beae704b3fb527ce57316ff238515c248c80d51fd44e31dbb2d2e1d6b8007a03bf9b981fee094ee82f413698af66a3057621490d60207bca2e7a11e96cfb850a9a371ce672d0c4826be044acaa0a0a04fab4f2807eac896c48db2c35caf97fdf8bacb854f5351328cfbab2c3b251fc0abe20ba4b8fe8f4a98dfb76a0b1ea6b6463bdd900e23114c94f205f492a4acb30cc8a6efe6f73a96d3688853c60dce92732440db5ec245478bb64ebe9b60e7469ffb253febcda05613a8c1dbf72634e68d912e2fc98501d99c7dafb50081edcc60dc74daf9cecbcf65aa57661451fc6131f8c879b2181984bc4e0973ad6984837e19595caa35ff4713266b6a6c090a50afeb1461590c4c36f7fead0c9620af82302616c154e74199ee11353f6e9861472e2f1826afd0ce1a2ce9712b50019b32397960f54f4fce3c6655e13d8ef3ba20eaa3ca03a831a39732203dc3d2d3bf8de63fb4c96b3ec10cc852401f25a2575e98d9a25bf0767fc180f6fef5928565fa9ffdd620b6713f85bbc140060df1b50607b4eb51c0c71dac8ee2c19b9bd03b1840bb4d1f8a767d788a31926c9c39be4709dd57e856cb417d3947ce825f194fac18323f36a3b7743603abc628d477b3292a6b3f4965e882a110728f2a9f4fa8fd9d9d50859c48fe0f07f6a826bd5c5d8d645c0f7d8d03cf49be2419e2986f8ad55a228cacd0838f867a8612fd1c4b04d54dc9d5b05cc9395f5bb7fe918083bedfa33734a3f6afaf70379f4d423fa592dcfdeef84161df3f8f42204116442fc815a3cb3c79348d489296014fb8d4334c4ad776e14207ed2115781a0caac4cbfddf8f788f58cd9da9c33f145d87a187d7db78ce4368c5bdbba67fde5264a53a65a027a52aa09fd4943aeeae146a769a26a0f3597fd5004b60c179ce2bcafc78220d691c44c153c883bf942f01586b5321e4bbb28ab44d97bea3368f7c5d0c3dda0ef359065fd31f62060beb0b2a31f7164867e4b78f89f5ea0131aed7014ef3385f0b350ff847f4321b81c7dc9a484605ee397a2d5ea8ad9593020cea3acb6a106a560b4bf675c89aa3b14678dfef6602fdfa9afeeb6f16cb1b3cc944ad5d0492a3d07308c07dfc204c071d92f6b8b5694c70d166fe29f7894ceee7554dc32c71f3b971c8f20f2cafa4399a8755684090f90e6b45ee924d1205e0a075fd2259b6ca6430d28c780735353be38578b3cf1badcba4dae86419d4a0c1ec21f4a7510a08018e90974f0757aab8b51dc0fc068193d040cbd9706eeec02360da646b11cc5f1a544ecf24ce87c7165a0cb9bdb6990db03320ecf2f65fb6dfd1f3d32b2ae10723707cf5f30ea387f677aea100649c72e795b5f7d652e0e2fd0ae19eaf96f1b6453d056e01c97aa5c271b5e5f303fa4013f686cfbf64a1c1fe4263786b835e46a98699b8d5262520c4947987748ab21a48aef3", 0xfd1, 0x6, 0x0) 5.029005765s ago: executing program 1 (id=2841): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1210d400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "dd3dc8ee57d555952aabeffd65"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002040}, 0x8081) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000844}, 0x885) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000480)='memory.numa_stat\x00', 0x0, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffff) ioctl$KDGKBDIACR(r7, 0x4b4a, &(0x7f0000001500)=""/111) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001580), 0x1410c2, 0x0) sync_file_range(r8, 0x23e, 0x4, 0x4) syz_emit_ethernet(0x118, &(0x7f00000015c0)={@broadcast, @random="c2abfd383d86", @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0xffff9}], @llc={@snap={0x1, 0x155, "c14f", "c983bd", 0x888e, "c3977135555a4f0826e217a26c22aa90ed885735d9fe1dbc4e5312c5ac0707a8d4ea58823ff33709fc7b1712ad2ea96a438cda9c56556178b416294c700355bf78b833cd8420f639b56578157d33519056cb87d4ee678039013d43a0079e8b5a7e99384be96aae9c7a7967bd9cd9cc5211c7edf964c04137c2261054d21a4e182e1af36d880d786c60b8295d7f862edcd8d3580fb0878023e22d23a048614cca9de8fd4ecf8f0d1e4a80a56e37e7bcf0cf4fc4c987ca31d217d3eaac34a7c6fee57ebb95e3dc50dde3078cbf831a81586d94f07e4fe16e1e86cefb526aaaf04dbe7f0e553d22b27528f408f216918e188835b924484b66b123"}}}}}}, &(0x7f0000001700)={0x0, 0x2, [0x7b9, 0x8c5, 0x5fa, 0x287]}) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) modify_ldt$write2(0x11, &(0x7f0000001740)={0x5, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) sendto$inet6(r6, &(0x7f0000001780)="a45e9d2f3fbcda373c1abd1a75a021852f950399ef774e0411d8124b2125c12fd5d07db586ff70ad5cc90959519ad961792c7dcbeaa21299d11a5cd440dddc379d68bebda966a85490eda3a11b1e5d8a7af273b5f1f4a4503d1a87be6a6bae03fade3a301cd4d7dccf030c03e04f624dfbb79e21fa445f68d8a091611ab1767671d682a01363", 0x86, 0x8800, &(0x7f0000001840)={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r6, 0x80045113, &(0x7f0000001880)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r8, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r9, 0xc1205531, &(0x7f0000001900)={0x0, 0x9, 0x8, 0x0, '\x00', '\x00', '\x00', 0x8, 0x48, 0x0, 0x4, "61d3800dd35e14dc030a96943ae0ff05"}) r10 = syz_open_pts(r7, 0x212000) ioctl$TIOCGPTPEER(r10, 0x5441, 0x0) recvmsg(r6, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a40)=""/72, 0x48}, {&(0x7f0000001ac0)=""/10, 0xa}], 0x2, &(0x7f0000001b40)=""/247, 0xf7}, 0x2020) modify_ldt$write2(0x11, &(0x7f0000001c80)={0x8, 0x0, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x44, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40) 4.877717114s ago: executing program 1 (id=2842): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf2531000000080001002500000008000300", @ANYRES64=r0, @ANYBLOB="0c009900070000001900000008005200", @ANYRES32=0x0, @ANYBLOB="a649404d82d5b9b43bc8ef1ccf67f364cceba5d9581b1f06924c6b0adcbe377f6c1b0a23dcbbb596bb1d6a3b7e7d2eda82744e"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040000) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08060001080006040001e97f"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000002030300e950000000000000000000070800010001000026090002000000000002000000"], 0x28}, 0x1, 0x0, 0x0, 0x815}, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8000000000000001, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffff001, 0x40, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) userfaultfd(0x80801) unshare(0x68040200) socket$alg(0x26, 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r4, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x1, 0x6, @local}, 0x14) bind$packet(r4, &(0x7f0000000100)={0x11, 0xf7, r5, 0x1, 0x0, 0x6, @random="9ec6112b418a"}, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b"]) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x4000000000006, 0x82500) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000500)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948204a2d0000b420f511575940f45f819e01177d3d458dd4992861ac00", "90be8b0000000000000000000000000000000200000000af9300", [0x2]}}) socket$kcm(0x29, 0x7, 0x0) r10 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r10, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f0000000040)="1d3104", 0x3}], 0x2}, 0xb00) 3.892101567s ago: executing program 2 (id=2843): unshare(0x26020480) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x80000) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001200), 0x80000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x80000000) syz_emit_ethernet(0x95, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x1, 0x26, 0x87, 0x64, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, {[@timestamp={0x44, 0x4, 0x1d, 0x0, 0x3}, @end]}}, {0x4e23, 0x4e23, 0x6b, 0x0, @opaque="a77f4341c83b51b9f7d06554d216555798913f41dec56bac38b8d450767d431472cf99a1f2ca8185a077f9295354f66f65f3540cecaca047074cd43cddac0bbe26e14751c1d4584f2d7a1e9f47d361f577e86a2ad7a9feb77e60f47d82c8ce8eda616f"}}}}}, 0x0) syz_pidfd_open(0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000100)={0x20, 0x1, &(0x7f0000000280)="e3631761adec7665bd271e1cc6efbbb93dc2e205b1951460c786be0eac8670c86ce09577fc740b5cbd21858fc03b0290db96375f305bc094519f67b038f8d315b34ce4d0f444bca69ffce791778e73679b501ceb7838aa5fd0e86df04780284570f1b059a91424264f883e84e427a6b6f6feb62e62d71f6e71594dd04bc4a6a46de96de1329070120ebbb65fea509de3a1b5b97783350fc36e638812d0d53fde7c1c13da6d2af86b8a289594eb59dfa86342063152e261c3001fdd9f603b91cf3d1a4f457c34315428be98c56c413e6777e1b7ac797787edaa0da2", 0x4, 0x7}) socket$inet6_dccp(0xa, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7f, 0x2000) socket$inet6(0xa, 0x2, 0xa) fcntl$addseals(r5, 0x409, 0x5) 3.660543126s ago: executing program 0 (id=2845): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%:r\f\xb9\xfd\xffq\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xaa3\xfa\xd3\xcdEd\x7f\xd5\x14OD\\\xe8\xfc\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00E\xcd\x95\x90}\xc3\xf9&\x91\vZ\xc0\xbb\xcfWs\x8b\x13TUL\xd9\x15~\\\x8f\x9c\xd9\a\xd2\x9c\xb7*\xa6\xb7\xdf\x81y\xd4\x89\x9e\x88\xdcNB8\xc4\xdb\xd8U\xdb\x01l\xda\"\xd1\xb2\xece\xa1\rK&h\x15\xdbd_\x96\x14]\x90\xc9\xbc\x9a\xea\xfb\xc3\xc8\x0f\x9f\x13s\xe6L\x03\xb3I\x0e:\x7f\xf9#\x1f\xc6\xb8\x90\xdf7\xd2i\xf6T$-\x1c|\x8dlI\xac~e\x1e\x7f\xdcWD\x84\x98\\\xa4\xde,(\xff\xde\xff\x81&\xd9\xe2\xc6\xf2\xf6\xe5tP\x8f\xc6YF\xdd\x194\xa3.\x00_\xec/Z(\xe6Q\x9e\xe6\a\"p\x19\xa6l\xa0$\xdf\x9b\"\xca)\x9d%\xba[M6\x96\x9bt\f\xa9\xb6\x81\xcf\x19\xa9\x8d?\xde]X\xa6g\xcbG=\'\xed\x8cP\xb6\x944XB\xebNG9%\xc2\xb4\xe1\xdf\xdca\x851\xc7*\b\x93\x12[\xd3NYY\x15\xa3e\x1b^\xd1M\xe2\b\xb9\xf8\xd5\xe8onkj\xbc*\x99w\xd3\xd5\x1dK\x83i\x03\x99\x9agP\xfb\xb8\xc6)\xaa}\xe0\xcf\xc6\xee\\\xc324j\x90WJ7\xc9V\x8c\x87\xcdf1|\x85u\xc99\xd7\xb9\x95\x8e\x89)\xe2PA\x15\td\xfcZ\xd1\a\xf1@\xfc\x19\xd0\a\xc7\xf1\xf3\bN\xd5\x92\xc7I\xb3m2\a\x9c]\xa0\\\xe1\xb5\xf1k\x1dg\x8e\x00V\xfc\xa0\xf8\xff\x00\x040x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2, 0x25dfdbfb, {0x7, 0x0, 0x0, r12, 0x3, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40c0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) 1.931042082s ago: executing program 4 (id=2846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd29, 0x25dedbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}}, 0x40) close(r0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r6, 0xc0045405, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @empty, 0x4e23, 0x4, 'fo\x00', 0x1, 0x7, 0x4f}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'sh\x00', 0x19, 0x60000000, 0xc}, {@multicast1, 0x4e1e, 0x10000, 0x80000000, 0xe1b2, 0xfffffffd}}, 0xffffffffffffff19) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r7 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000040)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) 879.822945ms ago: executing program 1 (id=2847): syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00202b00fe8000000000000000000000000000bbfe80000000000000000000e33369e09fa328e001000000000000000018ff9078040000002d000000000000"], 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = epoll_create(0x10000e9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd74) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4000000}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) 808.664849ms ago: executing program 2 (id=2848): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getpid() sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x10000) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000002640)={0x1, 0x1, 0x9, 0x3b5b, @vifc_lcl_ifindex=r1, @empty}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x2000000, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 415.900076ms ago: executing program 0 (id=2849): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x120) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f00002bf000/0x3000)=nil, 0x0}, 0x68) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000050030000100000005002e00000000000500300001000000050029000100000008000600", @ANYRES16, @ANYBLOB="080031000002000005002a0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4844}, 0x4040040) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 2 (id=2850): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071106d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0xa080) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000006c0)={{0x1, 0x3, 0x201, 0x3}, 0x9, 0x100000200, 0x32}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x200067d) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3e, 0x0) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x9}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) inotify_add_watch(r1, &(0x7f0000000300)='./file0\x00', 0x2000810) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x10}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x4000) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020a0002070000000000ffffffff000005001a00ff10a88376efec29c632e9ccdd5510e94c3128aae88cea684fad1145f6addf8cf05638a4"], 0x38}}, 0x20008040) socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') gettid() lseek(r7, 0x4, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r8, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x40}, @loopback, 0x0, 0x100e}}) kernel console output (not intermixed with test programs): et_files+0x2a/0x420 [ 744.929949][T14474] __x64_sys_recvmmsg+0x1ab/0x260 [ 744.929978][T14474] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 744.930011][T14474] ? do_syscall_64+0xb6/0x230 [ 744.930042][T14474] do_syscall_64+0xf3/0x230 [ 744.930069][T14474] ? clear_bhb_loop+0x45/0xa0 [ 744.930095][T14474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.930116][T14474] RIP: 0033:0x7fa9cbf8e169 [ 744.930136][T14474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.930155][T14474] RSP: 002b:00007fa9ccdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 744.930179][T14474] RAX: ffffffffffffffda RBX: 00007fa9cc1b5fa0 RCX: 00007fa9cbf8e169 [ 744.930195][T14474] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000009 [ 744.930208][T14474] RBP: 00007fa9ccdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 744.930221][T14474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 744.930234][T14474] R13: 0000000000000000 R14: 00007fa9cc1b5fa0 R15: 00007fa9cc2dfa28 [ 744.930266][T14474] [ 744.999501][T14126] m920x_read = error: -19 [ 745.405249][T14126] dvb-usb: error -19 while querying for an remote control event. [ 745.458532][T14485] fuse: Bad value for 'rootmode' [ 745.598550][T14126] m920x_read = error: -19 [ 745.628845][T14126] dvb-usb: error -19 while querying for an remote control event. [ 745.752388][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 745.752409][ T30] audit: type=1326 audit(1744842120.582:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.2.2645" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9cbf8e169 code=0x0 [ 745.818934][ T5910] m920x_read = error: -19 [ 745.823394][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 746.008920][ T5910] m920x_read = error: -19 [ 746.013445][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 746.199476][T14126] m920x_read = error: -19 [ 746.203977][T14126] dvb-usb: error -19 while querying for an remote control event. [ 746.429625][T14126] m920x_read = error: -19 [ 746.434270][T14126] dvb-usb: error -19 while querying for an remote control event. [ 746.629092][T14126] m920x_read = error: -19 [ 746.633599][T14126] dvb-usb: error -19 while querying for an remote control event. [ 746.698319][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2651'. [ 746.829137][T14126] m920x_read = error: -19 [ 746.833567][T14126] dvb-usb: error -19 while querying for an remote control event. [ 746.848894][T11755] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 746.966009][T14514] fuse: Unknown parameter 'use00000000000000000000' [ 746.979065][T11755] usb 3-1: device descriptor read/64, error -71 [ 747.047549][ T5911] m920x_read = error: -19 [ 747.054493][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 747.209025][T14126] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 747.237407][ T5911] m920x_read = error: -19 [ 747.242403][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 747.306005][T11755] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 747.380985][T14126] usb 2-1: config 16 interface 0 has no altsetting 0 [ 747.393266][T14126] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 747.477716][T11755] usb 3-1: device descriptor read/64, error -71 [ 747.484530][T14126] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 747.500205][ T5911] m920x_read = error: -19 [ 747.589746][T11755] usb usb3-port1: attempt power cycle [ 747.606446][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 747.618415][T14126] usb 2-1: Manufacturer: syz [ 747.827067][ T5911] m920x_read = error: -19 [ 747.846555][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 747.959138][T11755] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 748.044235][T11755] usb 3-1: device descriptor read/8, error -71 [ 748.048992][ T5911] m920x_read = error: -19 [ 748.055235][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 748.064976][T14126] (null): keene_cmd_main failed (-71) [ 748.092504][T14126] video4linux radio48: keene_cmd_main failed (-71) [ 748.130472][T14126] radio-keene 2-1:16.0: V4L2 device registered as radio48 [ 748.185515][T14126] usb 2-1: USB disconnect, device number 25 [ 748.268988][ T5911] m920x_read = error: -19 [ 748.273538][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 748.322847][T14526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2657'. [ 748.358933][T11755] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 748.429662][T11755] usb 3-1: device descriptor read/8, error -71 [ 748.449709][ T5911] m920x_read = error: -19 [ 748.454127][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 748.559267][T11755] usb usb3-port1: unable to enumerate USB device [ 748.668930][ T5911] m920x_read = error: -19 [ 748.680387][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 748.840773][ T5911] m920x_read = error: -19 [ 748.872329][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 749.059007][ T5911] m920x_read = error: -19 [ 749.066083][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 749.208988][ T5890] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 749.242879][T14126] m920x_read = error: -19 [ 749.247514][T14126] dvb-usb: error -19 while querying for an remote control event. [ 749.399926][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 749.413456][T14549] ip6tnl1: entered promiscuous mode [ 749.419414][ T5890] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 749.428956][T14126] m920x_read = error: -19 [ 749.434208][T14126] dvb-usb: error -19 while querying for an remote control event. [ 749.437479][ T5890] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 749.485724][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.507416][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2664'. [ 749.529163][ T5911] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 749.539307][ T5890] usb 2-1: Product: syz [ 749.556421][ T5890] usb 2-1: Manufacturer: syz [ 749.571331][ T5890] usb 2-1: SerialNumber: syz [ 749.599426][T14126] m920x_read = error: -19 [ 749.604040][T14126] dvb-usb: error -19 while querying for an remote control event. [ 749.610837][ T5890] usb 2-1: config 0 descriptor?? [ 749.662947][T14553] fuse: Unknown parameter 'use00000000000000000000' [ 749.699471][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 749.709857][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 749.720738][ T5911] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 749.731224][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.742897][ T5911] usb 1-1: Product: syz [ 749.749992][ T5911] usb 1-1: Manufacturer: syz [ 749.765145][ T5911] usb 1-1: SerialNumber: syz [ 749.789357][T14126] m920x_read = error: -19 [ 749.793968][T14126] dvb-usb: error -19 while querying for an remote control event. [ 749.809640][ T5911] usb 1-1: config 0 descriptor?? [ 749.973922][T14126] m920x_read = error: -19 [ 749.978466][T14126] dvb-usb: error -19 while querying for an remote control event. [ 750.010680][ T5890] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 750.150975][T14126] m920x_read = error: -19 [ 750.155457][T14126] dvb-usb: error -19 while querying for an remote control event. [ 750.359205][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 750.388629][ T5890] usb 3-1: config 7 has an invalid interface number: 199 but max is 1 [ 750.405203][ T5890] usb 3-1: config 7 has an invalid interface number: 251 but max is 1 [ 750.414195][ T5890] usb 3-1: config 7 has no interface number 0 [ 750.414752][ T5911] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 750.438274][ T5890] usb 3-1: config 7 has no interface number 1 [ 750.475449][ T5890] usb 3-1: config 7 interface 199 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 750.528359][ T5890] usb 3-1: config 7 interface 199 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 750.528946][T14126] m920x_read = error: -19 [ 750.558193][T14126] dvb-usb: error -19 while querying for an remote control event. [ 750.567013][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 750.591065][ T5890] usb 3-1: config 7 interface 199 altsetting 0 endpoint 0xD has an invalid bInterval 38, changing to 9 [ 750.627360][ T5890] usb 3-1: config 7 interface 199 altsetting 0 endpoint 0xD has invalid maxpacket 25493, setting to 1024 [ 750.628306][ T5911] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 750.676984][ T5890] usb 3-1: config 7 interface 199 altsetting 0 endpoint 0xC has invalid maxpacket 1975, setting to 64 [ 750.686632][ T5911] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 750.688391][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 750.716772][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 750.718416][T14556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.739588][T14126] m920x_read = error: -19 [ 750.744185][T14126] dvb-usb: error -19 while querying for an remote control event. [ 750.805368][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 750.846323][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 750.866779][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 750.897427][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has a duplicate endpoint with address 0x86, skipping [ 750.918889][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 750.919022][ T5911] m920x_read = error: -19 [ 750.953343][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 750.969007][ T5890] usb 3-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 750.994812][ T5890] usb 3-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 751.022765][ T5890] usb 3-1: config 7 interface 251 altsetting 128 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 751.080504][ T5890] usb 3-1: config 7 interface 251 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 751.133132][ T5890] usb 3-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 751.146484][ T5890] usb 3-1: config 7 interface 251 altsetting 128 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 751.168981][ T5911] m920x_read = error: -19 [ 751.192297][ T5890] usb 3-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 751.197974][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 751.221678][ T5890] usb 3-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 751.272388][ T5890] usb 3-1: config 7 interface 251 altsetting 128 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 751.293525][ T5890] usb 3-1: config 7 interface 251 has no altsetting 0 [ 751.320488][ T5890] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=14.2b [ 751.330458][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.338906][ T5890] usb 3-1: Product: syz [ 751.343351][ T5890] usb 3-1: Manufacturer: syz [ 751.349634][ T5890] usb 3-1: SerialNumber: syz [ 751.363453][T14555] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 751.388942][ T5911] m920x_read = error: -19 [ 751.393369][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 751.569439][ T5911] m920x_read = error: -19 [ 751.573877][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 751.655826][ T5890] usb 3-1: USB disconnect, device number 124 [ 751.749076][ T5911] m920x_read = error: -19 [ 751.757975][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 751.905068][ T5911] usb 2-1: USB disconnect, device number 26 [ 751.939143][T14126] m920x_read = error: -19 [ 751.943619][T14126] dvb-usb: error -19 while querying for an remote control event. [ 752.177700][ T5911] m920x_read = error: -19 [ 752.188895][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 752.254504][ T5890] usb 1-1: USB disconnect, device number 7 [ 752.401023][ T5911] m920x_read = error: -19 [ 752.405951][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 752.557726][T14126] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 752.571184][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.571247][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.619772][ T5911] m920x_read = error: -19 [ 752.619817][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 752.788159][ T5911] m920x_read = error: -19 [ 752.788194][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 752.809231][T14126] usb 4-1: Using ep0 maxpacket: 8 [ 752.831921][T14126] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 752.831951][T14126] usb 4-1: config 0 has no interface number 0 [ 752.831998][T14126] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 752.832023][T14126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.839558][T14126] usb 4-1: config 0 descriptor?? [ 752.941697][ T5911] m920x_read = error: -19 [ 752.941722][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 752.993032][T14126] viperboard 4-1:0.143: version 0.00 found at bus 004 address 124 [ 753.031732][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'. [ 753.100940][ T5911] m920x_read = error: -19 [ 753.100970][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 753.127878][T14126] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 753.127912][T14126] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 753.275279][ T5911] m920x_read = error: -19 [ 753.275313][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 753.429195][ T5911] m920x_read = error: -19 [ 753.429221][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 753.554812][T14572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.555045][T14572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.608388][ T5911] m920x_read = error: -19 [ 753.608413][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 753.690935][T14601] fuse: Unknown parameter 'use00000000000000000000' [ 753.735511][ T5890] usb 4-1: USB disconnect, device number 124 [ 753.759221][ T5911] m920x_read = error: -19 [ 753.759254][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 753.889059][T14605] vlan0: entered allmulticast mode [ 753.889088][T14605] bond0: entered allmulticast mode [ 753.927900][ T5911] m920x_read = error: -19 [ 753.927924][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 754.155405][ T5911] m920x_read = error: -19 [ 754.155430][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 754.300951][T14608] FAULT_INJECTION: forcing a failure. [ 754.300951][T14608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.300982][T14608] CPU: 0 UID: 0 PID: 14608 Comm: syz.1.2679 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 754.301001][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 754.301011][T14608] Call Trace: [ 754.301017][T14608] [ 754.301024][T14608] dump_stack_lvl+0x241/0x360 [ 754.301052][T14608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.301075][T14608] ? __pfx__printk+0x10/0x10 [ 754.301105][T14608] should_fail_ex+0x424/0x570 [ 754.301126][T14608] _copy_from_user+0x2d/0xb0 [ 754.301149][T14608] do_ipt_set_ctl+0x736/0x1260 [ 754.301174][T14608] ? __pfx___mutex_trylock_common+0x10/0x10 [ 754.301196][T14608] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 754.301227][T14608] ? __mutex_unlock_slowpath+0x229/0x800 [ 754.301254][T14608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 754.301272][T14608] ? aa_sk_perm+0x96f/0xac0 [ 754.301296][T14608] ? ksys_write+0x24e/0x2d0 [ 754.301314][T14608] ? __pfx_aa_sk_perm+0x10/0x10 [ 754.301336][T14608] nf_setsockopt+0x295/0x2c0 [ 754.301366][T14608] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 754.301389][T14608] do_sock_setsockopt+0x3b1/0x710 [ 754.301409][T14608] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 754.301423][T14608] ? __fget_files+0x2a/0x420 [ 754.301440][T14608] ? __fget_files+0x39d/0x420 [ 754.301452][T14608] ? __fget_files+0x2a/0x420 [ 754.301471][T14608] __x64_sys_setsockopt+0x1ee/0x280 [ 754.301492][T14608] do_syscall_64+0xf3/0x230 [ 754.301517][T14608] ? clear_bhb_loop+0x45/0xa0 [ 754.301535][T14608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.301550][T14608] RIP: 0033:0x7f0f8e18e169 [ 754.301563][T14608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.301576][T14608] RSP: 002b:00007f0f8f0ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 754.301593][T14608] RAX: ffffffffffffffda RBX: 00007f0f8e3b5fa0 RCX: 00007f0f8e18e169 [ 754.301611][T14608] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 754.301620][T14608] RBP: 00007f0f8f0ad090 R08: 00000000000012f0 R09: 0000000000000000 [ 754.301630][T14608] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.301640][T14608] R13: 0000000000000000 R14: 00007f0f8e3b5fa0 R15: 00007f0f8e4dfa28 [ 754.301662][T14608] [ 754.319304][T14126] m920x_read = error: -19 [ 754.319336][T14126] dvb-usb: error -19 while querying for an remote control event. [ 754.479298][T14126] m920x_read = error: -19 [ 754.479334][T14126] dvb-usb: error -19 while querying for an remote control event. [ 754.639149][ T5911] m920x_read = error: -19 [ 754.639184][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 754.748851][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2682'. [ 754.813400][T14126] m920x_read = error: -19 [ 754.813430][T14126] dvb-usb: error -19 while querying for an remote control event. [ 754.978945][T14126] m920x_read = error: -19 [ 756.016897][T14126] dvb-usb: error -19 while querying for an remote control event. [ 756.179149][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2686'. [ 756.189969][T14126] m920x_read = error: -19 [ 756.194548][T14126] dvb-usb: error -19 while querying for an remote control event. [ 756.239644][ T5911] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 756.379806][ T5911] usb 3-1: device descriptor read/64, error -71 [ 756.388552][ T1207] m920x_read = error: -19 [ 756.405181][ T1207] dvb-usb: error -19 while querying for an remote control event. [ 756.450339][T14632] fuse: Unknown parameter 'user_i00000000000000000000' [ 756.648197][T14126] m920x_read = error: -19 [ 756.654665][T14126] dvb-usb: error -19 while querying for an remote control event. [ 756.708973][ T5911] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 756.798924][ T1207] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 756.818934][T14126] m920x_read = error: -19 [ 756.823360][T14126] dvb-usb: error -19 while querying for an remote control event. [ 756.838939][ T5911] usb 3-1: device descriptor read/64, error -71 [ 756.960598][ T5911] usb usb3-port1: attempt power cycle [ 756.966506][ T1207] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 756.981018][ T1207] usb 2-1: config 0 has no interface number 0 [ 757.011650][ T1207] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 757.021942][T14126] m920x_read = error: -19 [ 757.026349][T14126] dvb-usb: error -19 while querying for an remote control event. [ 757.051773][ T1207] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 757.061563][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.078919][ T1207] usb 2-1: Product: syz [ 757.084883][ T1207] usb 2-1: Manufacturer: syz [ 757.095957][ T1207] usb 2-1: SerialNumber: syz [ 757.119649][ T1207] usb 2-1: config 0 descriptor?? [ 757.130577][T14636] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 757.189389][T14126] m920x_read = error: -19 [ 757.194113][T14126] dvb-usb: error -19 while querying for an remote control event. [ 757.368932][ T5911] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 757.391103][ T10] m920x_read = error: -19 [ 757.395736][ T10] dvb-usb: error -19 while querying for an remote control event. [ 757.405264][ T5911] usb 3-1: device descriptor read/8, error -71 [ 757.559125][ T10] m920x_read = error: -19 [ 757.566660][ T10] dvb-usb: error -19 while querying for an remote control event. [ 757.659863][ T5911] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 757.680636][ T5911] usb 3-1: device descriptor read/8, error -71 [ 757.739203][ T10] m920x_read = error: -19 [ 757.743634][ T10] dvb-usb: error -19 while querying for an remote control event. [ 757.839608][ T5911] usb usb3-port1: unable to enumerate USB device [ 757.909010][ T5911] m920x_read = error: -19 [ 757.919065][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 758.089038][ T5911] m920x_read = error: -19 [ 758.093772][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 758.278971][ T5911] m920x_read = error: -19 [ 758.283722][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 758.460776][ T10] m920x_read = error: -19 [ 758.465432][ T10] dvb-usb: error -19 while querying for an remote control event. [ 758.671230][ T10] m920x_read = error: -19 [ 758.686269][ T10] dvb-usb: error -19 while querying for an remote control event. [ 758.820065][T11755] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 758.944994][ T10] m920x_read = error: -19 [ 758.949496][ T10] dvb-usb: error -19 while querying for an remote control event. [ 759.037138][T11755] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.069723][T11755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 759.109441][ T10] m920x_read = error: -19 [ 759.116140][T11755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 759.118519][ T10] dvb-usb: error -19 while querying for an remote control event. [ 759.168869][T11755] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 759.192769][T11755] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 759.228906][T11755] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 759.262132][T11755] usb 1-1: Manufacturer: syz [ 759.293620][T11755] usb 1-1: config 0 descriptor?? [ 759.309258][ T10] m920x_read = error: -19 [ 759.349213][ T10] dvb-usb: error -19 while querying for an remote control event. [ 759.549031][ T10] m920x_read = error: -19 [ 759.553641][ T10] dvb-usb: error -19 while querying for an remote control event. [ 759.663344][ T1207] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 759.706022][ T1207] usb 2-1: MIDIStreaming interface descriptor not found [ 759.789056][T11755] rc_core: IR keymap rc-hauppauge not found [ 759.795269][T11755] Registered IR keymap rc-empty [ 759.799153][ T10] m920x_read = error: -19 [ 759.804609][ T10] dvb-usb: error -19 while querying for an remote control event. [ 759.844142][T11755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 759.868482][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2697'. [ 759.912467][ T1207] usb 2-1: USB disconnect, device number 27 [ 759.914042][T11755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 760.042659][T11755] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 760.069367][T14126] m920x_read = error: -19 [ 760.078107][T14126] dvb-usb: error -19 while querying for an remote control event. [ 760.127559][T11755] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input55 [ 760.201049][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.246127][T11755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 760.321329][ T1207] m920x_read = error: -19 [ 760.325773][ T1207] dvb-usb: error -19 while querying for an remote control event. [ 760.339039][T11755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 760.387168][T11755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 760.439836][T14656] fuse: Unknown parameter '[d' [ 760.472458][T14656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.537810][T11755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 760.538952][ T10] m920x_read = error: -19 [ 760.569014][ T10] dvb-usb: error -19 while querying for an remote control event. [ 760.599074][T14656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.684908][T11755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 760.719679][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2698'. [ 760.803019][T11755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 760.838951][T11755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 760.859092][ T10] m920x_read = error: -19 [ 760.863534][ T10] dvb-usb: error -19 while querying for an remote control event. [ 760.888940][T11755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 760.935239][T11755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 761.044429][ T10] m920x_read = error: -19 [ 761.059333][ T10] dvb-usb: error -19 while querying for an remote control event. [ 761.115279][T11755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 761.147773][T14682] fuse: Unknown parameter 'user_i00000000000000000000' [ 761.218523][T11755] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 761.229639][T11755] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 761.235740][ T10] m920x_read = error: -19 [ 761.243233][T11755] usb 1-1: USB disconnect, device number 8 [ 761.243560][ T10] dvb-usb: error -19 while querying for an remote control event. [ 761.569181][ T10] m920x_read = error: -19 [ 761.573614][ T10] dvb-usb: error -19 while querying for an remote control event. [ 761.769201][ T10] m920x_read = error: -19 [ 761.773627][ T10] dvb-usb: error -19 while querying for an remote control event. [ 761.818294][T14691] netlink: 'syz.0.2703': attribute type 7 has an invalid length. [ 761.884403][T14691] : entered promiscuous mode [ 761.998981][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2704'. [ 762.019091][ T10] m920x_read = error: -19 [ 762.024061][ T10] dvb-usb: error -19 while querying for an remote control event. [ 762.190037][ T10] m920x_read = error: -19 [ 762.207604][ T10] dvb-usb: error -19 while querying for an remote control event. [ 762.461084][ T10] m920x_read = error: -19 [ 762.465501][ T10] dvb-usb: error -19 while querying for an remote control event. [ 762.588937][T11755] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 762.669126][ T10] m920x_read = error: -19 [ 762.673584][ T10] dvb-usb: error -19 while querying for an remote control event. [ 762.739115][T14126] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 762.783516][T11755] usb 1-1: Using ep0 maxpacket: 32 [ 762.851803][ T10] m920x_read = error: -19 [ 762.856204][ T10] dvb-usb: error -19 while querying for an remote control event. [ 762.939086][T11755] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.990944][T11755] usb 1-1: config 0 has no interfaces? [ 763.002423][T14126] usb 3-1: config 0 has no interfaces? [ 763.002960][T11755] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 763.028059][T14126] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 763.076780][T14126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.077997][T11755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.096047][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 763.132915][T14126] usb 3-1: Product: syz [ 763.137151][T14126] usb 3-1: Manufacturer: syz [ 763.142270][ T10] m920x_read = error: -19 [ 763.142502][T11755] usb 1-1: config 0 descriptor?? [ 763.159057][ T10] dvb-usb: error -19 while querying for an remote control event. [ 763.187647][T14126] usb 3-1: SerialNumber: syz [ 763.249886][T14126] usb 3-1: config 0 descriptor?? [ 763.379014][T14126] m920x_read = error: -19 [ 763.436520][T14126] dvb-usb: error -19 while querying for an remote control event. [ 763.714355][ T10] m920x_read = error: -19 [ 763.723989][ T10] dvb-usb: error -19 while querying for an remote control event. [ 763.805689][T14716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2706'. [ 763.946422][T14716] dummy0: entered promiscuous mode [ 763.951974][T14716] macvtap2: entered promiscuous mode [ 763.957802][T14126] m920x_read = error: -19 [ 763.965693][T14716] macvtap2: entered allmulticast mode [ 763.971272][T14126] dvb-usb: error -19 while querying for an remote control event. [ 764.003177][T14716] dummy0: entered allmulticast mode [ 764.243156][ T10] m920x_read = error: -19 [ 764.248146][ T10] dvb-usb: error -19 while querying for an remote control event. [ 764.589947][ T10] m920x_read = error: -19 [ 764.596094][T14727] fuse: Unknown parameter 'user_i00000000000000000000' [ 764.634522][ T10] dvb-usb: error -19 while querying for an remote control event. [ 765.009021][T14126] m920x_read = error: -19 [ 765.026579][T14126] dvb-usb: error -19 while querying for an remote control event. [ 765.209058][T14126] m920x_read = error: -19 [ 765.213655][T14126] dvb-usb: error -19 while querying for an remote control event. [ 765.365645][T14731] FAULT_INJECTION: forcing a failure. [ 765.365645][T14731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.367534][ T47] usb 1-1: USB disconnect, device number 9 [ 765.379227][T14126] m920x_read = error: -19 [ 765.404595][T14126] dvb-usb: error -19 while querying for an remote control event. [ 765.466233][T14731] CPU: 0 UID: 0 PID: 14731 Comm: syz.4.2714 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 765.466265][T14731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 765.466278][T14731] Call Trace: [ 765.466287][T14731] [ 765.466296][T14731] dump_stack_lvl+0x241/0x360 [ 765.466342][T14731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.466373][T14731] ? __pfx__printk+0x10/0x10 [ 765.466415][T14731] should_fail_ex+0x424/0x570 [ 765.466444][T14731] _copy_from_user+0x2d/0xb0 [ 765.466482][T14731] move_addr_to_kernel+0x7f/0x170 [ 765.466512][T14731] __sys_sendto+0x26a/0x4c0 [ 765.466538][T14731] ? __pfx___sys_sendto+0x10/0x10 [ 765.466571][T14731] ? __fget_files+0x2a/0x420 [ 765.466600][T14731] ? ksys_write+0x275/0x2d0 [ 765.466637][T14731] __x64_sys_sendto+0xde/0x100 [ 765.466661][T14731] do_syscall_64+0xf3/0x230 [ 765.466688][T14731] ? clear_bhb_loop+0x45/0xa0 [ 765.466713][T14731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.466734][T14731] RIP: 0033:0x7f710a98e169 [ 765.466753][T14731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.466769][T14731] RSP: 002b:00007f710b7d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 765.466792][T14731] RAX: ffffffffffffffda RBX: 00007f710abb5fa0 RCX: 00007f710a98e169 [ 765.466808][T14731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 765.466821][T14731] RBP: 00007f710b7d1090 R08: 0000200000001280 R09: 000000000000001c [ 765.466836][T14731] R10: 0000000000000810 R11: 0000000000000246 R12: 0000000000000001 [ 765.466849][T14731] R13: 0000000000000000 R14: 00007f710abb5fa0 R15: 00007f710acdfa28 [ 765.466881][T14731] [ 765.789175][T14126] m920x_read = error: -19 [ 765.789207][T14126] dvb-usb: error -19 while querying for an remote control event. [ 765.949176][ T10] m920x_read = error: -19 [ 765.949202][ T10] dvb-usb: error -19 while querying for an remote control event. [ 766.041283][ T5890] usb 3-1: USB disconnect, device number 3 [ 766.116618][ T10] m920x_read = error: -19 [ 766.116649][ T10] dvb-usb: error -19 while querying for an remote control event. [ 766.271611][ T10] m920x_read = error: -19 [ 766.278888][ T10] dvb-usb: error -19 while querying for an remote control event. [ 766.460967][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'. [ 766.489480][ T10] m920x_read = error: -19 [ 766.489784][ T5890] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 766.494092][ T10] dvb-usb: error -19 while querying for an remote control event. [ 766.658919][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 766.688961][ T5890] usb 3-1: config 7 has an invalid interface number: 199 but max is 1 [ 766.689085][ T10] m920x_read = error: -19 [ 766.704410][ T5890] usb 3-1: config 7 has an invalid interface number: 251 but max is 1 [ 766.709673][ T10] dvb-usb: error -19 while querying for an remote control event. [ 766.719238][ T5890] usb 3-1: config 7 has no interface number 0 [ 766.740939][ T5890] usb 3-1: config 7 has no interface number 1 [ 766.752046][ T5890] usb 3-1: config 7 interface 199 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 766.777649][ T5890] usb 3-1: config 7 interface 199 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 766.802041][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 766.831881][ T5890] usb 3-1: config 7 interface 199 altsetting 0 endpoint 0xD has an invalid bInterval 38, changing to 9 [ 766.867716][ T5890] usb 3-1: config 7 interface 199 altsetting 0 endpoint 0xD has invalid maxpacket 25493, setting to 1024 [ 766.879168][ T10] m920x_read = error: -19 [ 766.898310][ T10] dvb-usb: error -19 while querying for an remote control event. [ 766.917215][ T5890] usb 3-1: config 7 interface 199 altsetting 0 endpoint 0xC has invalid maxpacket 1975, setting to 64 [ 766.954404][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 766.987874][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 767.047283][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 767.069049][ T10] m920x_read = error: -19 [ 767.073816][ T10] dvb-usb: error -19 while querying for an remote control event. [ 767.077487][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 767.105993][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 767.165957][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has a duplicate endpoint with address 0x86, skipping [ 767.197678][ T5890] usb 3-1: config 7 interface 199 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 767.220627][ T5890] usb 3-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 767.236397][ T5890] usb 3-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 767.270311][ T10] m920x_read = error: -19 [ 767.274820][ T10] dvb-usb: error -19 while querying for an remote control event. [ 767.289070][ T5890] usb 3-1: config 7 interface 251 altsetting 128 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 767.323825][ T5890] usb 3-1: config 7 interface 251 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 767.349005][ T5890] usb 3-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 767.426125][ T5890] usb 3-1: config 7 interface 251 altsetting 128 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 767.455150][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 767.459103][ T10] m920x_read = error: -19 [ 767.467721][T14757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2723'. [ 767.488180][ T10] dvb-usb: error -19 while querying for an remote control event. [ 767.488199][ T5890] usb 3-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 767.516218][ T5890] usb 3-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 767.539981][ T5890] usb 3-1: config 7 interface 251 altsetting 128 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 767.555555][ T5890] usb 3-1: config 7 interface 251 has no altsetting 0 [ 767.574115][ T5890] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=14.2b [ 767.589008][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.597222][ T5890] usb 3-1: Product: syz [ 767.603590][ T5890] usb 3-1: Manufacturer: syz [ 767.612769][ T5890] usb 3-1: SerialNumber: syz [ 767.630344][T14739] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 767.669103][ T10] m920x_read = error: -19 [ 767.676982][ T10] dvb-usb: error -19 while querying for an remote control event. [ 767.699474][T14760] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2723'. [ 767.742153][T14760] netlink: 'syz.1.2723': attribute type 3 has an invalid length. [ 767.779114][ T47] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 767.858958][ T10] m920x_read = error: -19 [ 767.863581][ T10] dvb-usb: error -19 while querying for an remote control event. [ 767.942484][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 767.974623][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.986206][ T5890] usb 3-1: USB disconnect, device number 4 [ 768.003864][ T47] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 768.046572][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 768.055536][ T47] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 768.059118][ T10] m920x_read = error: -19 [ 768.095943][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.115106][ T10] dvb-usb: error -19 while querying for an remote control event. [ 768.125707][ T47] usb 1-1: config 0 descriptor?? [ 768.299213][ T5911] m920x_read = error: -19 [ 768.303693][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 768.387269][T14759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.407079][T14759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.461490][ T47] usbhid 1-1:0.0: can't add hid device: -71 [ 768.479751][ T5911] m920x_read = error: -19 [ 768.484263][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 768.489320][ T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 768.497595][ T10] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 768.504857][ T47] usb 1-1: USB disconnect, device number 10 [ 768.699159][ T5911] m920x_read = error: -19 [ 768.703678][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 768.708988][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 768.735227][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.752750][ T10] usb 4-1: config 0 has no interfaces? [ 768.754893][T14767] FAULT_INJECTION: forcing a failure. [ 768.754893][T14767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.758352][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 768.792538][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.804426][T14767] CPU: 0 UID: 0 PID: 14767 Comm: syz.1.2727 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 768.804458][T14767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 768.804472][T14767] Call Trace: [ 768.804482][T14767] [ 768.804491][T14767] dump_stack_lvl+0x241/0x360 [ 768.804532][T14767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 768.804563][T14767] ? __pfx__printk+0x10/0x10 [ 768.804606][T14767] should_fail_ex+0x424/0x570 [ 768.804636][T14767] _copy_to_user+0x31/0xb0 [ 768.804669][T14767] simple_read_from_buffer+0xc4/0x170 [ 768.804707][T14767] proc_fail_nth_read+0x1ef/0x260 [ 768.804733][T14767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 768.804759][T14767] ? rw_verify_area+0x246/0x630 [ 768.804782][T14767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 768.804805][T14767] vfs_read+0x21f/0xb90 [ 768.804835][T14767] ? __pfx___mutex_lock+0x10/0x10 [ 768.804865][T14767] ? __pfx_vfs_read+0x10/0x10 [ 768.804893][T14767] ? __fget_files+0x2a/0x420 [ 768.804914][T14767] ? __fget_files+0x39d/0x420 [ 768.804932][T14767] ? __fget_files+0x2a/0x420 [ 768.804963][T14767] ksys_read+0x19d/0x2d0 [ 768.804990][T14767] ? __pfx_ksys_read+0x10/0x10 [ 768.805021][T14767] ? do_syscall_64+0xb6/0x230 [ 768.805052][T14767] do_syscall_64+0xf3/0x230 [ 768.805079][T14767] ? clear_bhb_loop+0x45/0xa0 [ 768.805117][T14767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.805138][T14767] RIP: 0033:0x7f0f8e18cb7c [ 768.805158][T14767] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 768.805176][T14767] RSP: 002b:00007f0f8f0ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 768.805199][T14767] RAX: ffffffffffffffda RBX: 00007f0f8e3b5fa0 RCX: 00007f0f8e18cb7c [ 768.805216][T14767] RDX: 000000000000000f RSI: 00007f0f8f0ad0a0 RDI: 0000000000000004 [ 768.805230][T14767] RBP: 00007f0f8f0ad090 R08: 0000000000000000 R09: 0000000000000000 [ 768.805243][T14767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.805257][T14767] R13: 0000000000000000 R14: 00007f0f8e3b5fa0 R15: 00007f0f8e4dfa28 [ 768.805290][T14767] [ 769.020759][ C0] vkms_vblank_simulate: vblank timer overrun [ 769.028684][ T10] usb 4-1: config 0 descriptor?? [ 769.034207][ T5911] m920x_read = error: -19 [ 769.038815][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 769.199521][ T10] m920x_read = error: -19 [ 769.203910][ T10] dvb-usb: error -19 while querying for an remote control event. [ 769.370046][ T10] m920x_read = error: -19 [ 769.377774][ T10] dvb-usb: error -19 while querying for an remote control event. [ 769.549934][ T10] m920x_read = error: -19 [ 769.559040][ T10] dvb-usb: error -19 while querying for an remote control event. [ 769.634446][ T5890] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 769.647062][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 769.673282][T14787] dummy0: entered promiscuous mode [ 769.685988][T14787] macvtap4: entered promiscuous mode [ 769.703169][T14787] macvtap4: entered allmulticast mode [ 769.711591][T14787] dummy0: entered allmulticast mode [ 769.719116][ T10] m920x_read = error: -19 [ 769.723872][ T10] dvb-usb: error -19 while querying for an remote control event. [ 769.818944][ T47] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 769.887527][ T5890] usb 3-1: config 0 has no interfaces? [ 769.893379][ T10] m920x_read = error: -19 [ 769.897351][ T5890] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 769.898113][ T10] dvb-usb: error -19 while querying for an remote control event. [ 769.907413][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.985427][ T47] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 770.011030][ T47] usb 1-1: config 0 has no interface number 0 [ 770.021802][ T5890] usb 3-1: Product: syz [ 770.038606][ T47] usb 1-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 770.099043][ T5911] m920x_read = error: -19 [ 770.103834][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 770.148892][ T5890] usb 3-1: Manufacturer: syz [ 770.157972][ T5890] usb 3-1: SerialNumber: syz [ 770.175981][ T47] usb 1-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 770.205126][ T5890] usb 3-1: config 0 descriptor?? [ 770.274529][ T5911] m920x_read = error: -19 [ 770.293157][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 770.381282][ T47] usb 1-1: config 0 interface 153 has no altsetting 0 [ 770.441846][ T47] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 770.456528][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.469058][ T5911] m920x_read = error: -19 [ 770.473490][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 770.508447][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2729'. [ 770.524585][ T47] usb 1-1: Product: syz [ 770.534612][ T47] usb 1-1: Manufacturer: syz [ 770.560760][ T47] usb 1-1: SerialNumber: syz [ 770.639945][ T47] usb 1-1: config 0 descriptor?? [ 770.649117][ T5911] m920x_read = error: -19 [ 770.653782][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 770.834930][ T5911] m920x_read = error: -19 [ 770.842433][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 770.857497][ T47] hub 1-1:0.153: bad descriptor, ignoring hub [ 770.864789][ T47] hub 1-1:0.153: probe with driver hub failed with error -5 [ 770.873805][ T47] sierra 1-1:0.153: Sierra USB modem converter detected [ 770.923837][ T47] usb 1-1: USB disconnect, device number 11 [ 770.950001][ T47] sierra 1-1:0.153: device disconnected [ 771.019080][ T5911] m920x_read = error: -19 [ 771.023782][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 771.047567][T14793] FAULT_INJECTION: forcing a failure. [ 771.047567][T14793] name failslab, interval 1, probability 0, space 0, times 0 [ 771.067793][T14793] CPU: 1 UID: 0 PID: 14793 Comm: syz.4.2734 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 771.067827][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 771.067842][T14793] Call Trace: [ 771.067851][T14793] [ 771.067861][T14793] dump_stack_lvl+0x241/0x360 [ 771.067900][T14793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.067931][T14793] ? __pfx__printk+0x10/0x10 [ 771.067966][T14793] ? __pfx___might_resched+0x10/0x10 [ 771.068000][T14793] should_fail_ex+0x424/0x570 [ 771.068028][T14793] should_failslab+0xac/0x100 [ 771.068061][T14793] __kmalloc_noprof+0xdf/0x4d0 [ 771.068092][T14793] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 771.068118][T14793] ? apparmor_capable+0x13b/0x1b0 [ 771.068145][T14793] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 771.068179][T14793] genl_rcv_msg+0x819/0xf00 [ 771.068212][T14793] ? __pfx_genl_rcv_msg+0x10/0x10 [ 771.068233][T14793] ? __dev_queue_xmit+0x1780/0x3f60 [ 771.068256][T14793] ? kasan_save_track+0x3f/0x80 [ 771.068277][T14793] ? __kasan_slab_alloc+0x66/0x80 [ 771.068309][T14793] ? do_syscall_64+0xf3/0x230 [ 771.068358][T14793] ? __lock_acquire+0xad5/0xd80 [ 771.068382][T14793] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 771.068401][T14793] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 771.068423][T14793] ? __pfx_nl80211_post_doit+0x10/0x10 [ 771.068459][T14793] netlink_rcv_skb+0x208/0x480 [ 771.068490][T14793] ? __pfx_genl_rcv_msg+0x10/0x10 [ 771.068516][T14793] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 771.068570][T14793] ? netlink_deliver_tap+0x2e/0x1b0 [ 771.068608][T14793] genl_rcv+0x28/0x40 [ 771.068628][T14793] netlink_unicast+0x7f8/0x9a0 [ 771.068672][T14793] ? __pfx_netlink_unicast+0x10/0x10 [ 771.068702][T14793] ? skb_put+0x114/0x1f0 [ 771.068728][T14793] netlink_sendmsg+0x8c3/0xcd0 [ 771.068770][T14793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.068805][T14793] ? aa_sock_msg_perm+0x91/0x160 [ 771.068841][T14793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.068869][T14793] __sock_sendmsg+0x221/0x270 [ 771.068901][T14793] ____sys_sendmsg+0x523/0x860 [ 771.068934][T14793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.068955][T14793] ? __fget_files+0x2a/0x420 [ 771.068979][T14793] ? __fget_files+0x2a/0x420 [ 771.069009][T14793] __sys_sendmsg+0x271/0x360 [ 771.069038][T14793] ? __pfx___sys_sendmsg+0x10/0x10 [ 771.069121][T14793] ? do_syscall_64+0xb6/0x230 [ 771.069151][T14793] do_syscall_64+0xf3/0x230 [ 771.069179][T14793] ? clear_bhb_loop+0x45/0xa0 [ 771.069205][T14793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.069226][T14793] RIP: 0033:0x7f710a98e169 [ 771.069245][T14793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.069264][T14793] RSP: 002b:00007f710b7d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.069287][T14793] RAX: ffffffffffffffda RBX: 00007f710abb5fa0 RCX: 00007f710a98e169 [ 771.069303][T14793] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 771.069316][T14793] RBP: 00007f710b7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 771.069330][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.069343][T14793] R13: 0000000000000000 R14: 00007f710abb5fa0 R15: 00007f710acdfa28 [ 771.069375][T14793] [ 771.388475][ T5911] m920x_read = error: -19 [ 771.393030][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 771.464590][T11755] usb 4-1: USB disconnect, device number 125 [ 771.559589][ T10] m920x_read = error: -19 [ 771.564080][ T10] dvb-usb: error -19 while querying for an remote control event. [ 771.607485][T14797] netlink: 'syz.1.2736': attribute type 2 has an invalid length. [ 771.853109][ T5911] m920x_read = error: -19 [ 771.862146][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 772.021893][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2740'. [ 772.059152][ T10] m920x_read = error: -19 [ 772.063710][ T10] dvb-usb: error -19 while querying for an remote control event. [ 772.145137][ T47] usb 3-1: USB disconnect, device number 5 [ 772.178246][T14812] netlink: 'syz.1.2741': attribute type 4 has an invalid length. [ 772.241358][T14126] m920x_read = error: -19 [ 772.245860][T14126] dvb-usb: error -19 while querying for an remote control event. [ 772.254276][ T5911] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 772.388909][ T5911] usb 1-1: device descriptor read/64, error -71 [ 772.418972][ T10] m920x_read = error: -19 [ 772.423413][ T10] dvb-usb: error -19 while querying for an remote control event. [ 772.598932][ T10] m920x_read = error: -19 [ 772.603363][ T10] dvb-usb: error -19 while querying for an remote control event. [ 772.628888][ T5911] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 772.759119][ T5911] usb 1-1: device descriptor read/64, error -71 [ 772.790223][ T10] m920x_read = error: -19 [ 772.795039][ T10] dvb-usb: error -19 while querying for an remote control event. [ 772.889223][ T5911] usb usb1-port1: attempt power cycle [ 773.037969][ T10] m920x_read = error: -19 [ 773.043663][ T10] dvb-usb: error -19 while querying for an remote control event. [ 773.229140][ T10] m920x_read = error: -19 [ 773.233620][ T10] dvb-usb: error -19 while querying for an remote control event. [ 773.318940][ T5911] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 773.339995][ T5911] usb 1-1: device descriptor read/8, error -71 [ 773.409006][ T10] m920x_read = error: -19 [ 773.413615][ T10] dvb-usb: error -19 while querying for an remote control event. [ 773.598900][ T5911] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 773.609657][ T10] m920x_read = error: -19 [ 773.614226][ T10] dvb-usb: error -19 while querying for an remote control event. [ 773.783184][ T10] m920x_read = error: -19 [ 773.787674][ T10] dvb-usb: error -19 while querying for an remote control event. [ 773.796822][ T5911] usb 1-1: device descriptor read/8, error -71 [ 773.919439][ T5911] usb usb1-port1: unable to enumerate USB device [ 773.969029][ T5911] m920x_read = error: -19 [ 773.973599][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 774.148902][ T5911] m920x_read = error: -19 [ 774.153456][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 774.159004][ T47] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 774.328956][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 774.349274][ T5911] m920x_read = error: -19 [ 774.353818][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 774.368479][ T47] usb 2-1: config index 0 descriptor too short (expected 46935, got 18) [ 774.388386][ T30] audit: type=1326 audit(1744842149.202:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14833 comm="syz.2.2747" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9cbf8e169 code=0x0 [ 774.411304][ T47] usb 2-1: config 184 has too many interfaces: 116, using maximum allowed: 32 [ 774.427970][ T47] usb 2-1: config 184 has an invalid interface descriptor of length 5, skipping [ 774.447805][ T47] usb 2-1: config 184 has an invalid descriptor of length 0, skipping remainder of the config [ 774.475818][ T47] usb 2-1: config 184 has 0 interfaces, different from the descriptor's value: 116 [ 774.524303][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 774.539632][ T5911] m920x_read = error: -19 [ 774.546573][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 774.565153][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.598738][ T47] usb 2-1: Product: syz [ 774.604117][ T47] usb 2-1: Manufacturer: syz [ 774.646984][ T47] usb 2-1: SerialNumber: syz [ 774.749072][ T5911] m920x_read = error: -19 [ 774.753627][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 774.851762][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'. [ 774.951402][T14126] m920x_read = error: -19 [ 774.955866][T14126] dvb-usb: error -19 while querying for an remote control event. [ 775.058935][ T10] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 775.073637][T14847] FAULT_INJECTION: forcing a failure. [ 775.073637][T14847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.092396][T14847] CPU: 0 UID: 0 PID: 14847 Comm: syz.4.2752 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 775.092428][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 775.092441][T14847] Call Trace: [ 775.092448][T14847] [ 775.092455][T14847] dump_stack_lvl+0x241/0x360 [ 775.092484][T14847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.092514][T14847] ? __pfx__printk+0x10/0x10 [ 775.092559][T14847] should_fail_ex+0x424/0x570 [ 775.092588][T14847] _copy_from_user+0x2d/0xb0 [ 775.092620][T14847] copy_msghdr_from_user+0xb3/0x580 [ 775.092654][T14847] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 775.092677][T14847] ? __fget_files+0x2a/0x420 [ 775.092702][T14847] ? __fget_files+0x2a/0x420 [ 775.092730][T14847] __sys_sendmsg+0x20a/0x360 [ 775.092759][T14847] ? __pfx___sys_sendmsg+0x10/0x10 [ 775.092814][T14847] ? do_syscall_64+0xb6/0x230 [ 775.092845][T14847] do_syscall_64+0xf3/0x230 [ 775.092875][T14847] ? clear_bhb_loop+0x45/0xa0 [ 775.092901][T14847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.092923][T14847] RIP: 0033:0x7f710a98e169 [ 775.092942][T14847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.092960][T14847] RSP: 002b:00007f710b7d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.092981][T14847] RAX: ffffffffffffffda RBX: 00007f710abb5fa0 RCX: 00007f710a98e169 [ 775.092998][T14847] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 775.093012][T14847] RBP: 00007f710b7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 775.093027][T14847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.093039][T14847] R13: 0000000000000000 R14: 00007f710abb5fa0 R15: 00007f710acdfa28 [ 775.093070][T14847] [ 775.279468][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.289526][ T5911] m920x_read = error: -19 [ 775.293954][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 775.489009][T14126] m920x_read = error: -19 [ 775.497887][T14126] dvb-usb: error -19 while querying for an remote control event. [ 775.509175][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 775.536371][ T10] usb 4-1: config 7 has an invalid interface number: 199 but max is 1 [ 775.555235][ T10] usb 4-1: config 7 has an invalid interface number: 251 but max is 1 [ 775.582969][ T10] usb 4-1: config 7 has no interface number 0 [ 775.595841][ T10] usb 4-1: config 7 has no interface number 1 [ 775.617115][ T10] usb 4-1: config 7 interface 199 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 775.708988][T14126] m920x_read = error: -19 [ 775.717815][T14126] dvb-usb: error -19 while querying for an remote control event. [ 775.740666][ T10] usb 4-1: config 7 interface 199 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 775.766289][T14857] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2755'. [ 775.775473][ T10] usb 4-1: config 7 interface 199 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 775.793027][ T10] usb 4-1: config 7 interface 199 altsetting 0 endpoint 0xD has an invalid bInterval 38, changing to 9 [ 775.804750][T14857] FAULT_INJECTION: forcing a failure. [ 775.804750][T14857] name failslab, interval 1, probability 0, space 0, times 0 [ 775.852918][T14857] CPU: 0 UID: 0 PID: 14857 Comm: syz.2.2755 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 775.852950][T14857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 775.852964][T14857] Call Trace: [ 775.852973][T14857] [ 775.852983][T14857] dump_stack_lvl+0x241/0x360 [ 775.853023][T14857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.853056][T14857] ? __pfx__printk+0x10/0x10 [ 775.853092][T14857] ? ref_tracker_alloc+0x316/0x4c0 [ 775.853121][T14857] should_fail_ex+0x424/0x570 [ 775.853149][T14857] should_failslab+0xac/0x100 [ 775.853177][T14857] kmem_cache_alloc_noprof+0x78/0x390 [ 775.853205][T14857] ? skb_clone+0x20c/0x390 [ 775.853235][T14857] skb_clone+0x20c/0x390 [ 775.853265][T14857] __netlink_deliver_tap+0x3c4/0x7f0 [ 775.853309][T14857] ? netlink_deliver_tap+0x2e/0x1b0 [ 775.853337][T14857] netlink_deliver_tap+0x19d/0x1b0 [ 775.853375][T14857] netlink_sendskb+0x68/0x140 [ 775.853430][T14857] netlink_unicast+0x39f/0x9a0 [ 775.853456][T14857] ? __asan_memcpy+0x40/0x70 [ 775.853488][T14857] ? __pfx_netlink_unicast+0x10/0x10 [ 775.853529][T14857] nfnetlink_rcv+0x2366/0x28f0 [ 775.853592][T14857] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 775.853673][T14857] ? skb_clone+0x240/0x390 [ 775.853711][T14857] ? netlink_deliver_tap+0x2e/0x1b0 [ 775.853746][T14857] ? netlink_deliver_tap+0x2e/0x1b0 [ 775.853780][T14857] netlink_unicast+0x7f8/0x9a0 [ 775.853818][T14857] ? __pfx_netlink_unicast+0x10/0x10 [ 775.853850][T14857] ? skb_put+0x114/0x1f0 [ 775.853877][T14857] netlink_sendmsg+0x8c3/0xcd0 [ 775.853922][T14857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.853959][T14857] ? aa_sock_msg_perm+0x91/0x160 [ 775.853995][T14857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.854024][T14857] __sock_sendmsg+0x221/0x270 [ 775.854057][T14857] ____sys_sendmsg+0x523/0x860 [ 775.854091][T14857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.854113][T14857] ? __fget_files+0x2a/0x420 [ 775.854138][T14857] ? __fget_files+0x2a/0x420 [ 775.854165][T14857] __sys_sendmsg+0x271/0x360 [ 775.854195][T14857] ? __pfx___sys_sendmsg+0x10/0x10 [ 775.854277][T14857] ? do_syscall_64+0xb6/0x230 [ 775.854310][T14857] do_syscall_64+0xf3/0x230 [ 775.854337][T14857] ? clear_bhb_loop+0x45/0xa0 [ 775.854363][T14857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.854386][T14857] RIP: 0033:0x7fa9cbf8e169 [ 775.854419][T14857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.854438][T14857] RSP: 002b:00007fa9ccdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.854461][T14857] RAX: ffffffffffffffda RBX: 00007fa9cc1b5fa0 RCX: 00007fa9cbf8e169 [ 775.854478][T14857] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 775.854498][T14857] RBP: 00007fa9ccdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 775.854512][T14857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 775.854526][T14857] R13: 0000000000000000 R14: 00007fa9cc1b5fa0 R15: 00007fa9cc2dfa28 [ 775.854560][T14857] [ 776.155995][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.162799][ T10] usb 4-1: config 7 interface 199 altsetting 0 endpoint 0xD has invalid maxpacket 25493, setting to 1024 [ 776.174152][ T10] usb 4-1: config 7 interface 199 altsetting 0 endpoint 0xC has invalid maxpacket 1975, setting to 64 [ 776.185333][ T10] usb 4-1: config 7 interface 199 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 776.191517][ T47] usb 2-1: USB disconnect, device number 28 [ 776.196212][ T10] usb 4-1: config 7 interface 199 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 776.213231][ T10] usb 4-1: config 7 interface 199 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 776.224047][ T10] usb 4-1: config 7 interface 199 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 776.238841][ T10] usb 4-1: config 7 interface 199 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 776.250818][ T10] usb 4-1: config 7 interface 199 altsetting 0 has a duplicate endpoint with address 0x86, skipping [ 776.261848][ T10] usb 4-1: config 7 interface 199 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 776.275614][ T10] usb 4-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 776.287158][ T10] usb 4-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 776.302562][ T10] usb 4-1: config 7 interface 251 altsetting 128 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 776.314190][ T10] usb 4-1: config 7 interface 251 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 776.325445][ T10] usb 4-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 776.336544][ T10] usb 4-1: config 7 interface 251 altsetting 128 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 776.347886][ T10] usb 4-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 776.359630][ T10] usb 4-1: config 7 interface 251 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 776.370860][ T10] usb 4-1: config 7 interface 251 altsetting 128 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 776.382312][ T10] usb 4-1: config 7 interface 251 has no altsetting 0 [ 776.389973][T14126] m920x_read = error: -19 [ 776.398937][T14126] dvb-usb: error -19 while querying for an remote control event. [ 776.408223][ T10] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=14.2b [ 776.417409][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.425650][ T10] usb 4-1: Product: syz [ 776.429897][ T10] usb 4-1: Manufacturer: syz [ 776.434593][ T10] usb 4-1: SerialNumber: syz [ 776.442811][T14841] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 776.558985][T14126] m920x_read = error: -19 [ 776.563540][T14126] dvb-usb: error -19 while querying for an remote control event. [ 776.730071][ T10] usb 4-1: USB disconnect, device number 126 [ 776.738988][ T5911] m920x_read = error: -19 [ 776.743495][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 776.949230][T14126] m920x_read = error: -19 [ 776.953921][T14126] dvb-usb: error -19 while querying for an remote control event. [ 777.129455][T14126] m920x_read = error: -19 [ 777.133876][T14126] dvb-usb: error -19 while querying for an remote control event. [ 777.319140][T14126] m920x_read = error: -19 [ 777.334804][T14126] dvb-usb: error -19 while querying for an remote control event. [ 777.509258][ T10] m920x_read = error: -19 [ 777.513679][ T10] dvb-usb: error -19 while querying for an remote control event. [ 777.619105][T14126] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 777.638941][ T47] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 777.698975][ T10] m920x_read = error: -19 [ 777.704064][ T10] dvb-usb: error -19 while querying for an remote control event. [ 777.789134][ T47] usb 4-1: device descriptor read/64, error -71 [ 777.789940][T14126] usb 1-1: Using ep0 maxpacket: 8 [ 777.840654][T14126] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 777.853731][T14126] usb 1-1: config 179 has no interface number 0 [ 777.863561][T14126] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 777.881337][T14126] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 777.894320][ T10] m920x_read = error: -19 [ 777.903539][ T10] dvb-usb: error -19 while querying for an remote control event. [ 777.933258][T14126] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 20, changing to 8 [ 777.950430][T14126] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57696, setting to 1024 [ 777.972682][T14126] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 777.987618][T14126] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 778.010201][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'. [ 778.034949][T14126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.095960][ T10] m920x_read = error: -19 [ 778.101812][ T10] dvb-usb: error -19 while querying for an remote control event. [ 778.112875][T14867] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 778.114196][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 778.217161][T14886] FAULT_INJECTION: forcing a failure. [ 778.217161][T14886] name failslab, interval 1, probability 0, space 0, times 0 [ 778.233706][T14882] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2761'. [ 778.267386][T14886] CPU: 1 UID: 0 PID: 14886 Comm: syz.2.2764 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 778.267422][T14886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 778.267437][T14886] Call Trace: [ 778.267447][T14886] [ 778.267456][T14886] dump_stack_lvl+0x241/0x360 [ 778.267496][T14886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.267528][T14886] ? __pfx__printk+0x10/0x10 [ 778.267560][T14886] ? __pfx_idr_alloc_u32+0x10/0x10 [ 778.267585][T14886] ? __pfx___might_resched+0x10/0x10 [ 778.267618][T14886] should_fail_ex+0x424/0x570 [ 778.267648][T14886] should_failslab+0xac/0x100 [ 778.267681][T14886] __kmalloc_node_track_caller_noprof+0xe2/0x4d0 [ 778.267715][T14886] ? __kernfs_new_node+0xa2/0x890 [ 778.267744][T14886] kstrdup+0x42/0x100 [ 778.267773][T14886] __kernfs_new_node+0xa2/0x890 [ 778.267798][T14886] ? __lock_acquire+0xad5/0xd80 [ 778.267827][T14886] ? __pfx___kernfs_new_node+0x10/0x10 [ 778.267958][T14886] ? kernfs_root+0x1c/0x230 [ 778.267995][T14886] ? kernfs_root+0x1c/0x230 [ 778.268021][T14886] kernfs_new_node+0x114/0x220 [ 778.268051][T14886] kernfs_create_link+0xa5/0x1f0 [ 778.268085][T14886] sysfs_do_create_link_sd+0x85/0x110 [ 778.268111][T14886] device_add_class_symlinks+0x1c5/0x250 [ 778.268142][T14886] device_add+0x553/0xbf0 [ 778.268169][T14886] ? device_initialize+0x266/0x460 [ 778.268197][T14886] netdev_register_kobject+0x157/0x2f0 [ 778.268231][T14886] register_netdevice+0x12b0/0x1b80 [ 778.268276][T14886] ? __pfx_register_netdevice+0x10/0x10 [ 778.268300][T14886] ? sized_strscpy+0x9a/0x2b0 [ 778.268336][T14886] ? alloc_netdev_mqs+0xe8e/0x1210 [ 778.268361][T14886] ? ip6gre_tunnel_locate+0x279/0x3e0 [ 778.268399][T14886] ip6gre_tunnel_locate+0x31b/0x3e0 [ 778.268436][T14886] ? __pfx_ip6gre_tunnel_locate+0x10/0x10 [ 778.268468][T14886] ? ip6gre_tnl_parm_from_user+0x41/0x3e0 [ 778.268504][T14886] ? ip6gre_tunnel_siocdevprivate+0x5cc/0x810 [ 778.268543][T14886] ip6gre_tunnel_siocdevprivate+0x5f4/0x810 [ 778.268577][T14886] ? __pfx___mutex_trylock_common+0x10/0x10 [ 778.268613][T14886] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 778.268647][T14886] ? rcu_is_watching+0x15/0xb0 [ 778.268700][T14886] ? full_name_hash+0x93/0xe0 [ 778.268729][T14886] dev_ifsioc+0xc04/0x1010 [ 778.268761][T14886] ? dev_load+0x21/0x1f0 [ 778.268791][T14886] dev_ioctl+0x8c3/0x1380 [ 778.268826][T14886] sock_ioctl+0x819/0x900 [ 778.268946][T14886] ? __pfx_sock_ioctl+0x10/0x10 [ 778.268973][T14886] ? __fget_files+0x2a/0x420 [ 778.269009][T14886] ? __pfx_sock_ioctl+0x10/0x10 [ 778.269038][T14886] __se_sys_ioctl+0xf1/0x160 [ 778.269067][T14886] do_syscall_64+0xf3/0x230 [ 778.269093][T14886] ? clear_bhb_loop+0x45/0xa0 [ 778.269118][T14886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.269139][T14886] RIP: 0033:0x7fa9cbf8e169 [ 778.269159][T14886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.269179][T14886] RSP: 002b:00007fa9ccdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.269204][T14886] RAX: ffffffffffffffda RBX: 00007fa9cc1b5fa0 RCX: 00007fa9cbf8e169 [ 778.269220][T14886] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 778.269234][T14886] RBP: 00007fa9ccdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 778.269248][T14886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 778.269261][T14886] R13: 0000000000000000 R14: 00007fa9cc1b5fa0 R15: 00007fa9cc2dfa28 [ 778.269294][T14886] [ 778.617898][T14126] m920x_read = error: -19 [ 778.626967][T14126] dvb-usb: error -19 while querying for an remote control event. [ 778.650170][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input56 [ 778.661274][ T47] usb 4-1: device descriptor read/64, error -71 [ 778.777024][ T47] usb usb4-port1: attempt power cycle [ 778.869124][T14126] m920x_read = error: -19 [ 778.881958][T14126] dvb-usb: error -19 while querying for an remote control event. [ 779.053467][T14867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.065442][T14867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.107205][ T10] usb 1-1: USB disconnect, device number 16 [ 779.113339][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 779.113384][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 779.119029][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 779.238956][T14126] m920x_read = error: -19 [ 779.243546][T14126] dvb-usb: error -19 while querying for an remote control event. [ 779.281440][ T47] usb 4-1: device descriptor read/8, error -71 [ 779.479153][T14126] m920x_read = error: -19 [ 779.483705][T14126] dvb-usb: error -19 while querying for an remote control event. [ 779.725646][ T10] m920x_read = error: -19 [ 779.729808][T11755] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 779.737948][ T47] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 779.755674][ T10] dvb-usb: error -19 while querying for an remote control event. [ 779.774094][ T47] usb 4-1: device descriptor read/8, error -71 [ 779.900595][ T47] usb usb4-port1: unable to enumerate USB device [ 780.062557][ T10] m920x_read = error: -19 [ 780.103560][ T10] dvb-usb: error -19 while querying for an remote control event. [ 780.124847][T11755] usb 2-1: config 0 has no interfaces? [ 780.292049][T11755] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 780.312912][ T10] m920x_read = error: -19 [ 780.320241][T11755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.332924][ T10] dvb-usb: error -19 while querying for an remote control event. [ 780.355525][T11755] usb 2-1: Product: syz [ 780.370597][T11755] usb 2-1: Manufacturer: syz [ 780.379364][T11755] usb 2-1: SerialNumber: syz [ 780.398236][T11755] usb 2-1: config 0 descriptor?? [ 780.499207][ T10] m920x_read = error: -19 [ 780.504439][ T10] dvb-usb: error -19 while querying for an remote control event. [ 780.708996][ T10] m920x_read = error: -19 [ 780.713518][ T10] dvb-usb: error -19 while querying for an remote control event. [ 780.767234][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'. [ 780.878941][ T10] m920x_read = error: -19 [ 780.883362][ T10] dvb-usb: error -19 while querying for an remote control event. [ 781.059128][ T10] m920x_read = error: -19 [ 781.063650][ T10] dvb-usb: error -19 while querying for an remote control event. [ 781.239367][ T10] m920x_read = error: -19 [ 781.244127][ T10] dvb-usb: error -19 while querying for an remote control event. [ 781.410023][ T10] m920x_read = error: -19 [ 781.415623][ T10] dvb-usb: error -19 while querying for an remote control event. [ 781.516469][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2774'. [ 781.609154][ T10] m920x_read = error: -19 [ 781.618202][ T10] dvb-usb: error -19 while querying for an remote control event. [ 781.779646][ T10] m920x_read = error: -19 [ 781.784462][ T10] dvb-usb: error -19 while querying for an remote control event. [ 781.949038][ T10] m920x_read = error: -19 [ 781.954896][ T10] dvb-usb: error -19 while querying for an remote control event. [ 782.125852][ T5911] m920x_read = error: -19 [ 782.146541][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 782.276761][ T5911] usb 2-1: USB disconnect, device number 29 [ 782.349215][ T10] m920x_read = error: -19 [ 782.353804][ T10] dvb-usb: error -19 while querying for an remote control event. [ 782.516986][ T47] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 782.518996][ T5911] m920x_read = error: -19 [ 782.537439][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 782.549559][ T975] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 782.623999][ T30] audit: type=1326 audit(1744842157.452:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.2.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cbf8e169 code=0x7ffc0000 [ 782.631456][T14936] xt_connbytes: Forcing CT accounting to be enabled [ 782.647011][ T30] audit: type=1326 audit(1744842157.452:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.2.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cbf8e169 code=0x7ffc0000 [ 782.665285][T14936] set match dimension is over the limit! [ 782.676592][ T30] audit: type=1326 audit(1744842157.452:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.2.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9cbf8cad0 code=0x7ffc0000 [ 782.682445][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 782.705033][ T30] audit: type=1326 audit(1744842157.452:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.2.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cbf8e169 code=0x7ffc0000 [ 782.733019][ T5911] m920x_read = error: -19 [ 782.737420][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 782.747871][ T30] audit: type=1326 audit(1744842157.452:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.2.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cbf8e169 code=0x7ffc0000 [ 782.748877][ T47] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 782.770921][ T30] audit: type=1326 audit(1744842157.452:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.2.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cbf8e169 code=0x7ffc0000 [ 782.779088][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 782.802542][ T30] audit: type=1326 audit(1744842157.452:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.2.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cbf8e169 code=0x7ffc0000 [ 782.822395][ T47] usb 1-1: config 179 has no interface number 0 [ 782.831285][ T30] audit: type=1326 audit(1744842157.452:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.2.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa9cbf8e169 code=0x7ffc0000 [ 782.843573][ T975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.861068][ T30] audit: type=1326 audit(1744842157.452:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.2.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cbf8e169 code=0x7ffc0000 [ 782.892918][ T30] audit: type=1326 audit(1744842157.452:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.2.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9cbf8e169 code=0x7ffc0000 [ 782.896994][ T47] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 782.915762][ T5911] m920x_read = error: -19 [ 782.915794][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 782.942522][ T975] usb 4-1: config 0 has no interfaces? [ 782.948286][ T47] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 782.961504][ T47] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 20, changing to 8 [ 782.963142][ T975] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 782.984763][ T47] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57696, setting to 1024 [ 782.997397][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.005606][ T975] usb 4-1: Product: syz [ 783.009911][ T47] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 783.023651][ T975] usb 4-1: Manufacturer: syz [ 783.028293][ T975] usb 4-1: SerialNumber: syz [ 783.034556][ T47] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 783.044865][ T975] usb 4-1: config 0 descriptor?? [ 783.062657][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.079691][ T10] m920x_read = error: -19 [ 783.084186][ T10] dvb-usb: error -19 while querying for an remote control event. [ 783.091352][T14927] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 783.248895][ T10] m920x_read = error: -19 [ 783.253418][ T10] dvb-usb: error -19 while querying for an remote control event. [ 783.348680][ T47] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input57 [ 783.419396][ T10] m920x_read = error: -19 [ 783.427601][ T10] dvb-usb: error -19 while querying for an remote control event. [ 783.640799][ T10] m920x_read = error: -19 [ 783.667395][ T10] dvb-usb: error -19 while querying for an remote control event. [ 783.772909][T14927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.782131][T14927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.828918][ T10] usb 1-1: USB disconnect, device number 17 [ 783.829106][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 783.843958][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 783.870876][ T5911] m920x_read = error: -19 [ 783.875305][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 783.963584][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 784.049003][ T10] m920x_read = error: -19 [ 784.053708][ T10] dvb-usb: error -19 while querying for an remote control event. [ 784.235518][ T10] m920x_read = error: -19 [ 784.250923][ T10] dvb-usb: error -19 while querying for an remote control event. [ 784.419073][ T10] m920x_read = error: -19 [ 784.423632][ T10] dvb-usb: error -19 while querying for an remote control event. [ 784.588916][ T10] m920x_read = error: -19 [ 784.593530][ T10] dvb-usb: error -19 while querying for an remote control event. [ 784.768938][ T10] m920x_read = error: -19 [ 784.777032][ T10] dvb-usb: error -19 while querying for an remote control event. [ 784.958981][ T5911] m920x_read = error: -19 [ 784.963690][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 785.403167][ T5911] m920x_read = error: -19 [ 785.417871][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 785.484937][ T5911] usb 4-1: USB disconnect, device number 5 [ 785.605057][T14126] m920x_read = error: -19 [ 785.614426][T14126] dvb-usb: error -19 while querying for an remote control event. [ 785.798987][ T5911] m920x_read = error: -19 [ 785.803737][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 785.969605][T14126] m920x_read = error: -19 [ 785.974450][T14126] dvb-usb: error -19 while querying for an remote control event. [ 786.241092][ T47] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 786.248936][T14126] m920x_read = error: -19 [ 786.253508][T14126] dvb-usb: error -19 while querying for an remote control event. [ 786.419071][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 786.429409][T14126] m920x_read = error: -19 [ 786.434140][T14126] dvb-usb: error -19 while querying for an remote control event. [ 786.454482][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 786.485845][ T47] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 786.505734][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.559492][ T47] usb 4-1: Product: syz [ 786.582816][ T47] usb 4-1: Manufacturer: syz [ 786.631354][ T47] usb 4-1: SerialNumber: syz [ 786.672646][T14126] m920x_read = error: -19 [ 786.680457][T14126] dvb-usb: error -19 while querying for an remote control event. [ 786.708390][ T47] usb 4-1: config 0 descriptor?? [ 786.996707][T14126] m920x_read = error: -19 [ 787.019559][T14126] dvb-usb: error -19 while querying for an remote control event. [ 787.179682][T14126] m920x_read = error: -19 [ 787.184171][T14126] dvb-usb: error -19 while querying for an remote control event. [ 787.241112][ T47] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 787.338912][ T975] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 787.359076][T14126] m920x_read = error: -19 [ 787.386598][T14126] dvb-usb: error -19 while querying for an remote control event. [ 787.654746][T14126] m920x_read = error: -19 [ 787.681500][T14126] dvb-usb: error -19 while querying for an remote control event. [ 787.689849][ T30] kauditd_printk_skb: 1145 callbacks suppressed [ 787.689864][ T30] audit: type=1326 audit(1744842162.342:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f8e12a359 code=0x7ffc0000 [ 787.808496][ T47] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 787.814805][ T30] audit: type=1326 audit(1744842162.432:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f8e12a359 code=0x7ffc0000 [ 787.838908][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 787.874100][ T975] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 787.906235][ T975] usb 3-1: config 0 has no interface number 0 [ 787.909010][ T5911] m920x_read = error: -19 [ 787.912535][ T975] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 787.926281][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.927295][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 787.937763][ T975] usb 3-1: config 0 descriptor?? [ 787.969018][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 788.059893][ T975] viperboard 3-1:0.143: version 0.00 found at bus 003 address 006 [ 788.077426][ T47] usb 4-1: USB disconnect, device number 6 [ 788.084692][ T30] audit: type=1326 audit(1744842162.432:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f8e12a359 code=0x7ffc0000 [ 788.178385][T14992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.197755][T14992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.291856][ T5911] m920x_read = error: -19 [ 788.296297][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 788.300384][ T975] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 788.312972][ T30] audit: type=1326 audit(1744842162.432:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f8e12a359 code=0x7ffc0000 [ 788.354665][ T975] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 788.445702][ T10] usb 1-1: config 162 has an invalid interface number: 251 but max is 1 [ 788.457099][ T30] audit: type=1326 audit(1744842162.432:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f8e12a359 code=0x7ffc0000 [ 788.480985][ T10] usb 1-1: config 162 has an invalid interface number: 209 but max is 1 [ 788.526327][ T10] usb 1-1: config 162 has no interface number 0 [ 788.615435][ T5911] m920x_read = error: -19 [ 788.628902][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 788.681568][ T10] usb 1-1: config 162 has no interface number 1 [ 788.728898][ T30] audit: type=1326 audit(1744842162.432:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f8e12a359 code=0x7ffc0000 [ 788.820668][ T10] usb 1-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 788.888337][ T10] usb 1-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 788.929062][ T5911] m920x_read = error: -19 [ 788.933441][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 788.951801][ T10] usb 1-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 788.993769][ T30] audit: type=1326 audit(1744842162.432:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f8e12a359 code=0x7ffc0000 [ 789.014510][ T10] usb 1-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 789.089318][ T47] usb 3-1: USB disconnect, device number 6 [ 789.101302][ T10] usb 1-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 789.111882][ T30] audit: type=1326 audit(1744842162.432:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f8e12a359 code=0x7ffc0000 [ 789.154386][T14126] m920x_read = error: -19 [ 789.164527][T14126] dvb-usb: error -19 while querying for an remote control event. [ 789.183612][ T10] usb 1-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 789.215728][ T30] audit: type=1326 audit(1744842162.432:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f8e12a359 code=0x7ffc0000 [ 789.235993][ T10] usb 1-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 789.269107][ T5911] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 789.319030][ T10] usb 1-1: config 162 interface 251 has no altsetting 0 [ 789.341097][ T30] audit: type=1326 audit(1744842162.592:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f8e12a359 code=0x7ffc0000 [ 789.371595][ T5910] m920x_read = error: -19 [ 789.376004][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 789.386134][ T10] usb 1-1: config 162 interface 209 has no altsetting 0 [ 789.405077][ T10] usb 1-1: string descriptor 0 read error: -71 [ 789.458438][ T10] usb 1-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 789.489411][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 789.505619][ T5911] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 789.514305][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.528862][ T5911] usb 4-1: config 179 has no interface number 0 [ 789.539972][ T5911] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 789.559348][ T5910] m920x_read = error: -19 [ 789.565699][ T10] usb 1-1: can't set config #162, error -71 [ 789.578824][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 789.596593][ T5911] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 789.609171][ T10] usb 1-1: USB disconnect, device number 18 [ 789.644386][ T5911] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 20, changing to 8 [ 789.700091][ T5911] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57696, setting to 1024 [ 789.770407][ T5911] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 789.783924][ T5910] m920x_read = error: -19 [ 789.788309][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 789.807241][ T5911] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 789.820413][ T47] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 789.828078][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.844176][T15003] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 789.959289][ T5911] m920x_read = error: -19 [ 789.963991][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 790.029386][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 790.092992][ T5911] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input58 [ 790.096886][ T47] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 790.139114][ T10] m920x_read = error: -19 [ 790.149897][ T10] dvb-usb: error -19 while querying for an remote control event. [ 790.159996][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.188409][ T47] usb 2-1: Product: syz [ 790.259172][ T47] usb 2-1: Manufacturer: syz [ 790.282788][ T47] usb 2-1: SerialNumber: syz [ 790.355857][ T47] r8152-cfgselector 2-1: Unknown version 0x0000 [ 790.369091][ T10] m920x_read = error: -19 [ 790.373504][ T10] dvb-usb: error -19 while querying for an remote control event. [ 790.377157][ T47] r8152-cfgselector 2-1: config 0 descriptor?? [ 790.482136][T15003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.491191][T15003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.614817][ T5911] m920x_read = error: -19 [ 790.624970][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 790.698535][ T975] usb 4-1: USB disconnect, device number 7 [ 790.698661][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 790.713255][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 790.832211][ T10] m920x_read = error: -19 [ 790.838840][ T10] dvb-usb: error -19 while querying for an remote control event. [ 791.001137][T15010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.026917][ T10] m920x_read = error: -19 [ 791.039585][ T10] dvb-usb: error -19 while querying for an remote control event. [ 791.085840][T15010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.131045][ T975] r8152-cfgselector 2-1: USB disconnect, device number 30 [ 791.209202][ T5911] m920x_read = error: -19 [ 791.223887][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 791.402186][ T5911] m920x_read = error: -19 [ 791.406698][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 791.416976][ T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 791.589355][ T5911] m920x_read = error: -19 [ 791.594064][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 791.604424][ T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 791.616030][ T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.626144][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 791.633131][ T10] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 791.643285][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.660777][ T10] usb 1-1: config 0 descriptor?? [ 791.759170][ T5911] m920x_read = error: -19 [ 791.763644][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 791.941723][ T5911] m920x_read = error: -19 [ 791.999240][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 792.069645][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'. [ 792.122321][ T10] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 792.134587][ T10] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 792.148577][ T10] hid-steam 0003:28DE:1102.0012: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 792.168964][ T5911] m920x_read = error: -19 [ 792.173531][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 792.308837][ T10] hid-steam 0003:28DE:1102.0012: Steam Controller 'XXXXXXXXXX' connected [ 792.323680][T15032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.343546][ T10] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0012/input/input59 [ 792.389078][ T5911] m920x_read = error: -19 [ 792.393576][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 792.401922][T15032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.589887][ T5911] m920x_read = error: -19 [ 792.595621][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 792.663507][ T10] hid-steam 0003:28DE:1102.0013: unknown main item tag 0x0 [ 792.685821][ T10] hid-steam 0003:28DE:1102.0013: unknown main item tag 0x0 [ 792.738466][ T10] hid-steam 0003:28DE:1102.0013: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 792.779150][ T5911] m920x_read = error: -19 [ 792.783944][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 792.805849][ T10] usb 1-1: USB disconnect, device number 19 [ 792.854729][T14126] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 793.000819][ T5911] m920x_read = error: -19 [ 793.010364][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 793.034521][ T10] hid-steam 0003:28DE:1102.0012: Steam Controller 'XXXXXXXXXX' disconnected [ 793.054408][T14126] usb 4-1: Using ep0 maxpacket: 8 [ 793.105799][T14126] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 793.135072][T14126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.146938][T14126] usb 4-1: Product: syz [ 793.153553][T14126] usb 4-1: Manufacturer: syz [ 793.158311][T14126] usb 4-1: SerialNumber: syz [ 793.181047][ T5911] m920x_read = error: -19 [ 793.185429][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 793.217286][T14126] usb 4-1: config 0 descriptor?? [ 793.238639][T14126] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 793.378948][ T5911] m920x_read = error: -19 [ 793.383477][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 793.436126][T14126] gspca_vc032x: reg_r err -71 [ 793.445357][T14126] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 793.454285][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 793.486299][T14126] usb 4-1: USB disconnect, device number 8 [ 793.567155][ T5911] m920x_read = error: -19 [ 793.579372][ T5911] dvb-usb: error -19 while querying for an remote control event. [ 793.638946][ T10] usb 1-1: device descriptor read/64, error -71 [ 793.750284][T14126] m920x_read = error: -19 [ 793.757121][T14126] dvb-usb: error -19 while querying for an remote control event. [ 793.924265][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 793.987035][T14126] m920x_read = error: -19 [ 793.997975][T14126] dvb-usb: error -19 while querying for an remote control event. [ 794.149044][ T10] usb 1-1: device descriptor read/64, error -71 [ 794.178887][T14126] m920x_read = error: -19 [ 794.214212][T14126] dvb-usb: error -19 while querying for an remote control event. [ 794.339577][ T10] usb usb1-port1: attempt power cycle [ 794.368870][ T975] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 794.389061][T14126] m920x_read = error: -19 [ 794.395505][T14126] dvb-usb: error -19 while querying for an remote control event. [ 794.551407][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 794.558416][ T975] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 794.567686][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.579201][ T975] usb 4-1: config 0 descriptor?? [ 794.585998][T14126] m920x_read = error: -19 [ 794.591249][T14126] dvb-usb: error -19 while querying for an remote control event. [ 794.679054][ T47] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 794.709313][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 794.729491][ T10] usb 1-1: device descriptor read/8, error -71 [ 794.758981][T14126] m920x_read = error: -19 [ 794.763418][T14126] dvb-usb: error -19 while querying for an remote control event. [ 794.838967][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 794.846531][ T47] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 794.857594][ T47] usb 3-1: config 0 has no interface number 0 [ 794.864596][ T47] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 794.874854][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.897821][ T47] usb 3-1: config 0 descriptor?? [ 794.914313][ T975] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 794.929428][T14126] m920x_read = error: -19 [ 794.934031][T14126] dvb-usb: error -19 while querying for an remote control event. [ 794.946834][ T975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 794.960191][ T975] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 794.967830][ T975] usb 4-1: media controller created [ 794.968989][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 795.009790][ T10] usb 1-1: device descriptor read/8, error -71 [ 795.019822][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 795.029926][ T47] viperboard 3-1:0.143: version 0.00 found at bus 003 address 007 [ 795.064988][ T47] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 795.076105][ T47] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 795.109259][T14126] m920x_read = error: -19 [ 795.113785][T14126] dvb-usb: error -19 while querying for an remote control event. [ 795.122343][ T10] usb usb1-port1: unable to enumerate USB device [ 795.187014][T15079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.206576][T15079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.292797][T14126] usb 3-1: USB disconnect, device number 7 [ 795.308948][ T10] m920x_read = error: -19 [ 795.316335][ T10] dvb-usb: error -19 while querying for an remote control event. [ 795.488954][ T10] m920x_read = error: -19 [ 795.493593][ T10] dvb-usb: error -19 while querying for an remote control event. [ 795.664276][ T10] m920x_read = error: -19 [ 795.672642][ T10] dvb-usb: error -19 while querying for an remote control event. [ 795.849374][ T5910] m920x_read = error: -19 [ 795.853805][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 795.969320][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 795.984447][ T975] stb0899_attach: Driver disabled by Kconfig [ 796.009366][ T975] az6027: no front-end attached [ 796.009366][ T975] [ 796.038957][ T5910] m920x_read = error: -19 [ 796.043563][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 796.182965][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.215398][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 796.248935][T14126] m920x_read = error: -19 [ 796.255544][T14126] dvb-usb: error -19 while querying for an remote control event. [ 796.276417][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 796.358452][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 796.393069][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.393316][ T975] az6027: usb out operation failed. (-71) [ 796.428342][ T10] usb 2-1: Product: syz [ 796.438069][ T10] usb 2-1: Manufacturer: syz [ 796.449795][ T975] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 796.459746][T14126] m920x_read = error: -19 [ 796.467414][ T975] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input60 [ 796.480428][T14126] dvb-usb: error -19 while querying for an remote control event. [ 796.483658][ T975] dvb-usb: schedule remote query interval to 400 msecs. [ 796.502020][ T10] usb 2-1: SerialNumber: syz [ 796.502254][ T975] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 796.544921][ T975] usb 4-1: USB disconnect, device number 9 [ 796.593684][ T10] cdc_mbim 2-1:1.0: skipping garbage [ 796.624850][ T10] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 796.624864][ T975] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 796.648262][ T10] cdc_mbim 2-1:1.0: bind() failure [ 796.690231][ T10] m920x_read = error: -19 [ 796.705709][ T10] dvb-usb: error -19 while querying for an remote control event. [ 796.869788][ T10] m920x_read = error: -19 [ 796.874388][ T10] dvb-usb: error -19 while querying for an remote control event. [ 797.038957][ T10] m920x_read = error: -19 [ 797.043453][ T10] dvb-usb: error -19 while querying for an remote control event. [ 797.161425][T15107] ptrace attach of ""[15110] was attempted by "./syz-executor exec"[15107] [ 797.219064][ T5910] m920x_read = error: -19 [ 797.228439][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 797.339194][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 797.409482][ T5910] m920x_read = error: -19 [ 797.419080][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 797.498837][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 797.520348][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 797.530241][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.560400][ T10] usb 1-1: config 0 descriptor?? [ 797.588955][T14126] m920x_read = error: -19 [ 797.593534][T14126] dvb-usb: error -19 while querying for an remote control event. [ 797.698959][ T5910] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 797.769076][T14126] m920x_read = error: -19 [ 797.773730][T14126] dvb-usb: error -19 while querying for an remote control event. [ 797.782363][T15105] libceph: resolve '. [ 797.782363][T15105] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 797.782363][T15105] ' (ret=-3): failed [ 797.822866][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 797.850376][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 797.859887][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 797.868378][ T5910] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 35114, setting to 1024 [ 797.888960][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 797.899868][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 797.907077][ T10] usb 1-1: media controller created [ 797.922643][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 797.943835][T15125] FAULT_INJECTION: forcing a failure. [ 797.943835][T15125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.949137][T14126] m920x_read = error: -19 [ 797.961893][T15125] CPU: 1 UID: 0 PID: 15125 Comm: syz.2.2826 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 797.961923][T15125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 797.961934][T15125] Call Trace: [ 797.961942][T15125] [ 797.961951][T15125] dump_stack_lvl+0x241/0x360 [ 797.961981][T15125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 797.962003][T15125] ? __pfx__printk+0x10/0x10 [ 797.962034][T15125] should_fail_ex+0x424/0x570 [ 797.962055][T15125] _copy_from_user+0x2d/0xb0 [ 797.962078][T15125] sk_setsockopt+0x2af/0x3340 [ 797.962096][T15125] ? aa_label_sk_perm+0x4f4/0x6d0 [ 797.962119][T15125] ? __pfx_sk_setsockopt+0x10/0x10 [ 797.962135][T15125] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 797.962169][T15125] ? __pfx___might_resched+0x10/0x10 [ 797.962200][T15125] mptcp_setsockopt+0x1943/0x39a0 [ 797.962228][T15125] ? aa_sk_perm+0x96f/0xac0 [ 797.962252][T15125] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 797.962276][T15125] ? ksys_write+0x24e/0x2d0 [ 797.962294][T15125] ? __pfx_aa_sk_perm+0x10/0x10 [ 797.962317][T15125] ? aa_sock_opt_perm+0x79/0x120 [ 797.962337][T15125] ? sock_common_setsockopt+0x37/0xc0 [ 797.962361][T15125] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 797.962382][T15125] do_sock_setsockopt+0x3b1/0x710 [ 797.962403][T15125] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 797.962417][T15125] ? __fget_files+0x2a/0x420 [ 797.962434][T15125] ? __fget_files+0x39d/0x420 [ 797.962446][T15125] ? __fget_files+0x2a/0x420 [ 797.962466][T15125] __x64_sys_setsockopt+0x1ee/0x280 [ 797.962487][T15125] do_syscall_64+0xf3/0x230 [ 797.962506][T15125] ? clear_bhb_loop+0x45/0xa0 [ 797.962524][T15125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.962540][T15125] RIP: 0033:0x7fa9cbf8e169 [ 797.962554][T15125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.962567][T15125] RSP: 002b:00007fa9ccdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 797.962583][T15125] RAX: ffffffffffffffda RBX: 00007fa9cc1b5fa0 RCX: 00007fa9cbf8e169 [ 797.962594][T15125] RDX: 0000000000000043 RSI: 0000000000000001 RDI: 0000000000000003 [ 797.962604][T15125] RBP: 00007fa9ccdd5090 R08: 000000000000ff7b R09: 0000000000000000 [ 797.962614][T15125] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.962624][T15125] R13: 0000000000000000 R14: 00007fa9cc1b5fa0 R15: 00007fa9cc2dfa28 [ 797.962646][T15125] [ 797.978915][ T5910] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.228896][T14126] dvb-usb: error -19 while querying for an remote control event. [ 798.244122][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 798.276710][ T5910] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 798.287354][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.388984][T14126] m920x_read = error: -19 [ 798.393742][T14126] dvb-usb: error -19 while querying for an remote control event. [ 798.504168][T15134] futex_wake_op: syz.4.2829 tries to shift op by -1; fix this program [ 798.542523][ T5910] usb 4-1: GET_CAPABILITIES returned 0 [ 798.554902][ T5910] usbtmc 4-1:16.0: can't read capabilities [ 798.561866][T14126] m920x_read = error: -19 [ 798.566283][T14126] dvb-usb: error -19 while querying for an remote control event. [ 798.679241][ T975] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 798.729213][T14126] m920x_read = error: -19 [ 798.733739][T14126] dvb-usb: error -19 while querying for an remote control event. [ 798.752259][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.762598][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.766173][T15139] gtp0: entered promiscuous mode [ 798.771898][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.771951][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.771995][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.777371][T15139] gtp0: entered allmulticast mode [ 798.788427][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.819380][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.828544][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.837679][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.851667][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.860855][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.864176][ T975] usb 3-1: device descriptor read/64, error -71 [ 798.869971][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.870611][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.895479][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.904642][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.916540][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 798.935481][ T5870] usb 4-1: USB disconnect, device number 10 [ 799.008921][T14126] m920x_read = error: -19 [ 799.013390][T14126] dvb-usb: error -19 while querying for an remote control event. [ 799.119021][ T975] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 799.129037][ T10] stb0899_attach: Driver disabled by Kconfig [ 799.135903][ T10] az6027: no front-end attached [ 799.135903][ T10] [ 799.149268][ T10] az6027: usb out operation failed. (-71) [ 799.158674][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 799.172564][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input61 [ 799.186561][T14126] m920x_read = error: -19 [ 799.191439][T14126] dvb-usb: error -19 while querying for an remote control event. [ 799.205855][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 799.214847][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 799.232798][ T10] usb 1-1: USB disconnect, device number 24 [ 799.269188][ T975] usb 3-1: device descriptor read/64, error -71 [ 799.350579][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 799.360060][T14126] m920x_read = error: -19 [ 799.364606][T14126] dvb-usb: error -19 while querying for an remote control event. [ 799.379315][ T975] usb usb3-port1: attempt power cycle [ 799.534101][ T10] m920x_read = error: -19 [ 799.538532][ T10] dvb-usb: error -19 while querying for an remote control event. [ 799.719235][ T10] m920x_read = error: -19 [ 799.729627][ T10] dvb-usb: error -19 while querying for an remote control event. [ 799.737556][ T975] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 799.751388][ T975] usb 3-1: device descriptor read/8, error -71 [ 799.779079][ T5870] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 799.909112][ T10] m920x_read = error: -19 [ 799.913765][ T10] dvb-usb: error -19 while querying for an remote control event. [ 799.939048][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 799.947973][ T5870] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 799.957968][ T5870] usb 4-1: config 179 has no interface number 0 [ 799.964990][ T5870] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 799.977567][ T5870] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 799.991113][ T975] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 799.999890][ T5870] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 20, changing to 8 [ 800.040393][ T975] usb 3-1: device descriptor read/8, error -71 [ 800.058881][ T5870] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57696, setting to 1024 [ 800.074338][ T47] usb 2-1: USB disconnect, device number 31 [ 800.089046][ T10] m920x_read = error: -19 [ 800.097406][ T10] dvb-usb: error -19 while querying for an remote control event. [ 800.100654][ T5890] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 800.118638][ T5870] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 800.136052][ T5870] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 800.150668][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.159285][ T975] usb usb3-port1: unable to enumerate USB device [ 800.193371][T15148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 800.223523][T15163] libceph: resolve '. [ 800.223523][T15163] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 800.223523][T15163] ' (ret=-3): failed [ 800.297989][ T5890] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 800.307980][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.308966][ T10] m920x_read = error: -19 [ 800.316277][ T5890] usb 1-1: Product: syz [ 800.326668][ T10] dvb-usb: error -19 while querying for an remote control event. [ 800.339035][ T5890] usb 1-1: Manufacturer: syz [ 800.343824][ T5890] usb 1-1: SerialNumber: syz [ 800.382039][ T5890] usb 1-1: config 0 descriptor?? [ 800.406264][ T5890] ch341 1-1:0.0: ch341-uart converter detected [ 800.449092][ T47] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input62 [ 800.519141][ T5910] m920x_read = error: -19 [ 800.523843][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 800.710158][ T5910] m920x_read = error: -19 [ 800.714592][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 800.789323][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 800.829302][T15148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.838110][T15148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.854352][ T5910] usb 4-1: USB disconnect, device number 11 [ 800.854473][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 800.869606][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 800.886385][T14126] m920x_read = error: -19 [ 800.890869][T14126] dvb-usb: error -19 while querying for an remote control event. [ 800.961295][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.972401][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.982814][ T10] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 800.992053][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.003647][ T10] usb 2-1: config 0 descriptor?? [ 801.059132][ T5910] m920x_read = error: -19 [ 801.063649][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 801.073011][ T5890] usb 1-1: failed to send control message: -71 [ 801.082229][ T5890] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 801.100488][ T5890] usb 1-1: USB disconnect, device number 25 [ 801.108682][ T5890] ch341 1-1:0.0: device disconnected [ 801.229040][ T5910] m920x_read = error: -19 [ 801.233968][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 801.398959][ T5910] m920x_read = error: -19 [ 801.403608][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 801.599371][ T5910] m920x_read = error: -19 [ 801.608798][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 801.809183][T14126] m920x_read = error: -19 [ 801.813731][T14126] dvb-usb: error -19 while querying for an remote control event. [ 801.979015][T14126] m920x_read = error: -19 [ 801.983560][T14126] dvb-usb: error -19 while querying for an remote control event. [ 802.034251][ T5890] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 802.065291][T12893] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 802.081270][T12893] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 802.091943][T12893] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 802.102377][T12893] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 802.115658][T12893] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 802.131748][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 802.141253][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 802.153335][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 802.167719][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 802.175913][ T5910] m920x_read = error: -19 [ 802.182941][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 802.185717][ T5890] usb 1-1: device descriptor read/64, error -71 [ 802.202796][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 802.364612][ T5910] m920x_read = error: -19 [ 802.370236][T13778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.388714][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 802.448944][ T5890] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 802.518190][T13778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.559801][ T5910] m920x_read = error: -19 [ 802.564586][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 802.599086][ T5890] usb 1-1: device descriptor read/64, error -71 [ 802.613020][T13778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.707172][T13778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.710227][ T5890] usb usb1-port1: attempt power cycle [ 802.732269][ T5910] m920x_read = error: -19 [ 802.736825][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 802.901302][T14126] m920x_read = error: -19 [ 802.905830][T14126] dvb-usb: error -19 while querying for an remote control event. [ 803.061215][T15184] chnl_net:caif_netlink_parms(): no params data found [ 803.079048][ T5890] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 803.109117][T14126] m920x_read = error: -19 [ 803.111900][ T5890] usb 1-1: device descriptor read/8, error -71 [ 803.113630][T14126] dvb-usb: error -19 while querying for an remote control event. [ 803.285509][T13778] macsec0: left allmulticast mode [ 803.296130][T13778] macsec0: left promiscuous mode [ 803.308163][T13778] bridge0: port 3(macsec0) entered disabled state [ 803.308943][T14126] m920x_read = error: -19 [ 803.328860][T14126] dvb-usb: error -19 while querying for an remote control event. [ 803.338441][T13778] bridge_slave_1: left allmulticast mode [ 803.352264][T13778] bridge_slave_1: left promiscuous mode [ 803.359262][ T5890] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 803.360662][T13778] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.400171][T13778] bridge_slave_0: left allmulticast mode [ 803.405997][T13778] bridge_slave_0: left promiscuous mode [ 803.412903][T13778] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.418155][ T5890] usb 1-1: device descriptor read/8, error -71 [ 803.499228][ T5910] m920x_read = error: -19 [ 803.503712][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 803.535815][ T5890] usb usb1-port1: unable to enumerate USB device [ 803.693475][ T5910] m920x_read = error: -19 [ 803.698699][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 803.883975][ T5910] m920x_read = error: -19 [ 803.888438][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 803.897450][T13778] bridge1 (unregistering): left allmulticast mode [ 803.911369][T13778] team0: Port device bridge1 removed [ 803.981127][T13778] bridge2 (unregistering): left allmulticast mode [ 803.992772][T13778] team0: Port device bridge2 removed [ 804.049310][ T5910] m920x_read = error: -19 [ 804.053815][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 804.205309][T13778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.218150][T13778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.227001][ T5910] m920x_read = error: -19 [ 804.232344][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 804.240822][T12893] Bluetooth: hci2: command tx timeout [ 804.251058][T13778] bond0 (unregistering): Released all slaves [ 804.392484][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 804.399079][ T5910] m920x_read = error: -19 [ 804.408843][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 804.417118][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 804.461773][ T10] usb 2-1: USB disconnect, device number 32 [ 804.466178][T15184] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.487306][T15184] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.514658][T15184] bridge_slave_0: entered allmulticast mode [ 804.568935][ T5910] m920x_read = error: -19 [ 804.578383][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 804.579094][T15184] bridge_slave_0: entered promiscuous mode [ 804.621989][T15184] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.644574][T15184] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.661814][T15184] bridge_slave_1: entered allmulticast mode [ 804.678919][T15184] bridge_slave_1: entered promiscuous mode [ 804.799959][T14126] m920x_read = error: -19 [ 804.804552][T14126] dvb-usb: error -19 while querying for an remote control event. [ 804.969215][T14126] m920x_read = error: -19 [ 804.986140][T14126] dvb-usb: error -19 while querying for an remote control event. [ 805.025073][T15203] syz_tun: entered allmulticast mode [ 805.055993][T15199] dvmrp1: entered allmulticast mode [ 805.086066][T15184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.144617][T15198] syz_tun: left allmulticast mode [ 805.194969][T13778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.203853][ T10] m920x_read = error: -19 [ 805.208243][ T10] dvb-usb: error -19 while querying for an remote control event. [ 805.227091][T13778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.254997][T13778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.279655][T13778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.299227][T14126] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 805.389290][ T10] m920x_read = error: -19 [ 805.397900][ T10] dvb-usb: error -19 while querying for an remote control event. [ 805.439956][T13778] [ 805.442350][T13778] ============================================ [ 805.448609][T13778] WARNING: possible recursive locking detected [ 805.454821][T13778] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted [ 805.462033][T13778] -------------------------------------------- [ 805.468335][T13778] kworker/u8:0/13778 is trying to acquire lock: [ 805.474614][T13778] ffff888061fc8d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 805.484849][T13778] [ 805.484849][T13778] but task is already holding lock: [ 805.492333][T13778] ffff888061fc8d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 805.503993][T13778] and the lock comparison function returns 0: [ 805.510243][T13778] [ 805.510243][T13778] other info that might help us debug this: [ 805.518481][T13778] Possible unsafe locking scenario: [ 805.518481][T13778] [ 805.526076][T13778] CPU0 [ 805.529372][T13778] ---- [ 805.532659][T13778] lock(&dev_instance_lock_key#3); [ 805.538139][T13778] lock(&dev_instance_lock_key#3); [ 805.543359][T13778] [ 805.543359][T13778] *** DEADLOCK *** [ 805.543359][T13778] [ 805.551945][T13778] May be due to missing lock nesting notation [ 805.551945][T13778] [ 805.560289][T13778] 5 locks held by kworker/u8:0/13778: [ 805.565785][T13778] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 805.576697][T13778] #1: ffffc9000f3bfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 805.587517][T13778] #2: ffffffff900f0a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 805.597094][T13778] #3: ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 805.607311][T13778] #4: ffff888061fc8d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 805.619374][T13778] [ 805.619374][T13778] stack backtrace: [ 805.625268][T13778] CPU: 0 UID: 0 PID: 13778 Comm: kworker/u8:0 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 805.625290][T13778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 805.625304][T13778] Workqueue: netns cleanup_net [ 805.625331][T13778] Call Trace: [ 805.625341][T13778] [ 805.625377][T13778] dump_stack_lvl+0x241/0x360 [ 805.625405][T13778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.625429][T13778] ? __pfx__printk+0x10/0x10 [ 805.625452][T13778] ? print_lock+0x171/0x1a0 [ 805.625473][T13778] print_deadlock_bug+0x2be/0x2d0 [ 805.625496][T13778] validate_chain+0x928/0x24e0 [ 805.625517][T13778] ? check_noncircular+0xee/0x160 [ 805.625541][T13778] ? lockdep_unlock+0x8d/0x120 [ 805.625556][T13778] ? validate_chain+0x8a7/0x24e0 [ 805.625580][T13778] __lock_acquire+0xad5/0xd80 [ 805.625601][T13778] lock_acquire+0x116/0x2f0 [ 805.625617][T13778] ? dev_set_allmulti+0x11c/0x270 [ 805.625637][T13778] __mutex_lock+0x1a5/0x10c0 [ 805.625659][T13778] ? dev_set_allmulti+0x11c/0x270 [ 805.625679][T13778] ? dev_set_allmulti+0x11c/0x270 [ 805.625694][T13778] ? __pfx___mutex_lock+0x10/0x10 [ 805.625718][T13778] ? lockdep_hardirqs_on+0x9d/0x150 [ 805.625739][T13778] ? __local_bh_enable_ip+0x168/0x200 [ 805.625756][T13778] ? macvlan_stop+0x129/0x420 [ 805.625776][T13778] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 805.625795][T13778] dev_set_allmulti+0x11c/0x270 [ 805.625812][T13778] macvlan_stop+0x20f/0x420 [ 805.625832][T13778] ? __pfx_macvlan_stop+0x10/0x10 [ 805.625852][T13778] __dev_close_many+0x3d7/0x760 [ 805.625878][T13778] ? __pfx___dev_close_many+0x10/0x10 [ 805.625905][T13778] dev_close_many+0x250/0x4c0 [ 805.625931][T13778] ? __pfx_dev_close_many+0x10/0x10 [ 805.625953][T13778] ? __lock_acquire+0xad5/0xd80 [ 805.625973][T13778] unregister_netdevice_many_notify+0x628/0x2510 [ 805.625998][T13778] ? lockdep_hardirqs_on+0x9d/0x150 [ 805.626019][T13778] ? __local_bh_enable_ip+0x168/0x200 [ 805.626035][T13778] ? batadv_tt_local_remove+0x119/0x230 [ 805.626053][T13778] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 805.626070][T13778] ? batadv_tt_local_remove+0x119/0x230 [ 805.626087][T13778] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 805.626115][T13778] ? unregister_netdevice_queue+0x2c4/0x400 [ 805.626139][T13778] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 805.626166][T13778] default_device_exit_batch+0x7ff/0x880 [ 805.626196][T13778] ? __pfx_default_device_exit_batch+0x10/0x10 [ 805.626222][T13778] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 805.626247][T13778] ? cfg802154_pernet_exit+0xc3/0xe0 [ 805.626263][T13778] ? __pfx_default_device_exit_batch+0x10/0x10 [ 805.626289][T13778] cleanup_net+0x8af/0xd60 [ 805.626317][T13778] ? __pfx_cleanup_net+0x10/0x10 [ 805.626353][T13778] ? process_scheduled_works+0x9cb/0x18e0 [ 805.626373][T13778] process_scheduled_works+0xac3/0x18e0 [ 805.626403][T13778] ? __pfx_process_scheduled_works+0x10/0x10 [ 805.626426][T13778] ? assign_work+0x367/0x3d0 [ 805.626446][T13778] worker_thread+0x870/0xd50 [ 805.626472][T13778] ? __kthread_parkme+0x1a8/0x200 [ 805.626494][T13778] ? __pfx_worker_thread+0x10/0x10 [ 805.626514][T13778] kthread+0x7b7/0x940 [ 805.626537][T13778] ? __pfx_worker_thread+0x10/0x10 [ 805.626558][T13778] ? __pfx_kthread+0x10/0x10 [ 805.626580][T13778] ? __pfx_kthread+0x10/0x10 [ 805.626603][T13778] ? __pfx_kthread+0x10/0x10 [ 805.626625][T13778] ? __pfx_kthread+0x10/0x10 [ 805.626648][T13778] ? _raw_spin_unlock_irq+0x23/0x50 [ 805.626665][T13778] ? lockdep_hardirqs_on+0x9d/0x150 [ 805.626684][T13778] ? __pfx_kthread+0x10/0x10 [ 805.626707][T13778] ret_from_fork+0x4b/0x80 [ 805.626725][T13778] ? __pfx_kthread+0x10/0x10 [ 805.626748][T13778] ret_from_fork_asm+0x1a/0x30 [ 805.626770][T13778] [ 806.068672][ T10] m920x_read = error: -19 [ 806.073304][ T10] dvb-usb: error -19 while querying for an remote control event. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 806.248891][ T5910] m920x_read = error: -19 [ 806.253338][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 806.369230][T12893] Bluetooth: hci2: command tx timeout [ 806.428875][ T5910] m920x_read = error: -19 [ 806.433322][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 806.536488][T14126] usb 1-1: device descriptor read/all, error -71 [ 806.649169][ T5910] m920x_read = error: -19 [ 806.653764][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 806.839133][ T5910] m920x_read = error: -19 [ 806.843559][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 807.079138][ T5910] m920x_read = error: -19 [ 807.083813][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 807.268985][ T5910] m920x_read = error: -19 [ 807.273382][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 807.421317][T15200] syz.1.2847 (15200): drop_caches: 3 [ 807.448990][ T5910] m920x_read = error: -19 [ 807.453650][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 807.639026][T14126] m920x_read = error: -19 [ 807.643527][T14126] dvb-usb: error -19 while querying for an remote control event. [ 807.810750][T14126] m920x_read = error: -19 [ 807.815526][T14126] dvb-usb: error -19 while querying for an remote control event. [ 807.978983][T14126] m920x_read = error: -19 [ 807.983781][T14126] dvb-usb: error -19 while querying for an remote control event. [ 808.151036][ T5870] m920x_read = error: -19 [ 808.155571][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 808.318986][ T5870] m920x_read = error: -19 [ 808.323486][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 808.399123][T12893] Bluetooth: hci2: command tx timeout [ 808.488940][ T5870] m920x_read = error: -19 [ 808.493325][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 808.660912][ T5870] m920x_read = error: -19 [ 808.665320][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 808.829071][ T5870] m920x_read = error: -19 [ 808.833458][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 808.999062][ T5870] m920x_read = error: -19 [ 809.003466][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 809.171005][ T5870] m920x_read = error: -19 [ 809.175657][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 809.338983][T14126] m920x_read = error: -19 [ 809.343401][T14126] dvb-usb: error -19 while querying for an remote control event. [ 809.509015][T14126] m920x_read = error: -19 [ 809.513430][T14126] dvb-usb: error -19 while querying for an remote control event. [ 809.679560][T14126] m920x_read = error: -19 [ 809.684036][T14126] dvb-usb: error -19 while querying for an remote control event. [ 809.849821][T14126] m920x_read = error: -19 [ 809.854239][T14126] dvb-usb: error -19 while querying for an remote control event. [ 810.018968][T14126] m920x_read = error: -19 [ 810.023724][T14126] dvb-usb: error -19 while querying for an remote control event. [ 810.189090][T14126] m920x_read = error: -19 [ 810.193494][T14126] dvb-usb: error -19 while querying for an remote control event. [ 810.358991][T14126] m920x_read = error: -19 [ 810.363413][T14126] dvb-usb: error -19 while querying for an remote control event. [ 810.479135][T12893] Bluetooth: hci2: command tx timeout [ 810.530181][T14126] m920x_read = error: -19 [ 810.534773][T14126] dvb-usb: error -19 while querying for an remote control event. [ 810.698940][T14126] m920x_read = error: -19 [ 810.703430][T14126] dvb-usb: error -19 while querying for an remote control event. [ 810.869627][T14126] m920x_read = error: -19 [ 810.874197][T14126] dvb-usb: error -19 while querying for an remote control event. [ 811.039577][T14126] m920x_read = error: -19 [ 811.043984][T14126] dvb-usb: error -19 while querying for an remote control event. [ 811.208993][T14126] m920x_read = error: -19 [ 811.213415][T14126] dvb-usb: error -19 while querying for an remote control event. [ 811.378962][T14126] m920x_read = error: -19 [ 811.383573][T14126] dvb-usb: error -19 while querying for an remote control event. [ 811.551370][T14126] m920x_read = error: -19 [ 811.555925][T14126] dvb-usb: error -19 while querying for an remote control event. [ 811.721484][T14126] m920x_read = error: -19 [ 811.725983][T14126] dvb-usb: error -19 while querying for an remote control event. [ 811.888948][T14126] m920x_read = error: -19 [ 811.893340][T14126] dvb-usb: error -19 while querying for an remote control event. [ 812.058970][T14126] m920x_read = error: -19 [ 812.063756][T14126] dvb-usb: error -19 while querying for an remote control event. [ 812.229922][ T5870] m920x_read = error: -19 [ 812.234525][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 812.399638][ T5870] m920x_read = error: -19 [ 812.404091][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 812.568939][ T5870] m920x_read = error: -19 [ 812.573340][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 812.739070][ T5870] m920x_read = error: -19 [ 812.743463][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 812.911144][T14126] m920x_read = error: -19 [ 812.915732][T14126] dvb-usb: error -19 while querying for an remote control event. [ 813.079618][T14126] m920x_read = error: -19 [ 813.084162][T14126] dvb-usb: error -19 while querying for an remote control event. [ 813.250561][T14126] m920x_read = error: -19 [ 813.255196][T14126] dvb-usb: error -19 while querying for an remote control event. [ 813.419018][T14126] m920x_read = error: -19 [ 813.423415][T14126] dvb-usb: error -19 while querying for an remote control event. [ 813.589206][T14126] m920x_read = error: -19 [ 813.593994][T14126] dvb-usb: error -19 while querying for an remote control event. [ 813.759694][T14126] m920x_read = error: -19 [ 813.764118][T14126] dvb-usb: error -19 while querying for an remote control event. [ 813.929094][T14126] m920x_read = error: -19 [ 813.933547][T14126] dvb-usb: error -19 while querying for an remote control event. [ 814.000946][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.007301][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.099298][ T5870] m920x_read = error: -19 [ 814.103731][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 814.269080][ T5870] m920x_read = error: -19 [ 814.273583][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 814.439522][ T5870] m920x_read = error: -19 [ 814.443914][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 814.609528][ T5870] m920x_read = error: -19 [ 814.613935][ T5870] dvb-usb: error -19 while querying for an remote control event. [ 814.778934][T14126] m920x_read = error: -19 [ 814.783321][T14126] dvb-usb: error -19 while querying for an remote control event. [ 814.949253][T14126] m920x_read = error: -19 [ 814.953661][T14126] dvb-usb: error -19 while querying for an remote control event. [ 815.119557][T14126] m920x_read = error: -19 [ 815.123933][T14126] dvb-usb: error -19 while querying for an remote control event. [ 815.289671][T14126] m920x_read = error: -19 [ 815.294155][T14126] dvb-usb: error -19 while querying for an remote control event.