last executing test programs: 3m17.745270496s ago: executing program 3 (id=462): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) 3m17.55858566s ago: executing program 3 (id=466): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m15.599115649s ago: executing program 3 (id=491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000008000080", @ANYRESDEC=r1]) 3m15.298959055s ago: executing program 3 (id=495): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m15.150606726s ago: executing program 3 (id=498): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x5, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_READ=@pass_buffer={0x16, 0xa, 0x2004, @fd_index=0x9, 0xc, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 3m14.815492046s ago: executing program 3 (id=504): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x141}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}]}, @NDA_LLADDR={0xa, 0x2, @random="000200"}]}, 0x3c}}, 0x0) 3m14.509744855s ago: executing program 32 (id=504): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x141}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}]}, @NDA_LLADDR={0xa, 0x2, @random="000200"}]}, 0x3c}}, 0x0) 42.177866174s ago: executing program 0 (id=2798): unshare(0x2a020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x18, &(0x7f0000000000), 0x4) 42.095617973s ago: executing program 0 (id=2800): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0xffffffffffffffe5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) 41.84560892s ago: executing program 0 (id=2803): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x200004cb, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7fffffff, 0x8}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) 41.676996899s ago: executing program 0 (id=2805): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 41.568857956s ago: executing program 0 (id=2808): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 41.323884739s ago: executing program 0 (id=2812): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x100, 0x1}]}}}}}}}, 0x0) 40.951150309s ago: executing program 33 (id=2812): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x100, 0x1}]}}}}}}}, 0x0) 3.925631107s ago: executing program 2 (id=3275): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}}, 0x20}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a000018"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 3.693587611s ago: executing program 2 (id=3277): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) shutdown(r0, 0x0) listen(r0, 0x1) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 3.549381304s ago: executing program 2 (id=3279): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5", 0x2d, 0x6000000000000000, 0x0, 0x0) 3.408014968s ago: executing program 2 (id=3281): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 3.28315256s ago: executing program 1 (id=3284): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000002380)=ANY=[@ANYRESHEX], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 3.057765128s ago: executing program 1 (id=3286): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d00000905b7e18cac000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xd, 0x10, 0x10, 0x18, 0x10, 0x12, 0x10, 0x6, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.02357274s ago: executing program 4 (id=3287): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/19, &(0x7f0000000240)=0x14) 2.646467533s ago: executing program 4 (id=3288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000004c0)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x57, {"dad8f0430fb3be0080000066b837000f00d8459626470f2192263e0f20d266bad104ed66bad004b807000000efb9fe000000b800400000ba000000000f30b8010000000f01d9"}}], 0x57}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.247399756s ago: executing program 4 (id=3290): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r2, r3, 0x1, 0x0, 0x4, 0x8, {0x6, 0xb, 0xe, 0x30b4, 0x8000, 0x2025, 0xfffe, 0xfffe, 0xfffe, 0x4, 0x0, 0x9, 0x2, 0xfffffffc, "12d56163d7287bd287881d942450c7153a3243937ca9a58f1c702a4ccc476b15"}}) 2.134087989s ago: executing program 4 (id=3292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 1.731694825s ago: executing program 4 (id=3295): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008880}, 0x10) 1.534944388s ago: executing program 4 (id=3298): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x9, "09a72734"}, @main, @local=@item_4={0x3, 0x2, 0x9, "dc370ea4"}]}}, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x57, 0x0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0}) 943.837056ms ago: executing program 6 (id=3303): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', r0, 0xee01) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0xee01, @ANYBLOB="100003000006000020"], 0x2c, 0x0) symlink(&(0x7f0000000340)='./file1\x00', &(0x7f0000000200)='./file0/file1\x00') 924.949832ms ago: executing program 6 (id=3304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) 763.575612ms ago: executing program 5 (id=3305): mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x200000, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x20000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003b00)={0x2020}, 0x2020) 699.783339ms ago: executing program 1 (id=3306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 686.592886ms ago: executing program 6 (id=3307): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 648.685661ms ago: executing program 5 (id=3308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7004fbdbdf252500000008000300", @ANYRES32=r3, @ANYBLOB="0a000600505050505050000004003400080035000500000018005080040005000500060002000000080007000200000008002600"], 0x54}}, 0x20000880) 593.608692ms ago: executing program 1 (id=3309): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26ff", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) 514.756968ms ago: executing program 6 (id=3310): sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x48, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x500, 0x0) read$msr(r0, &(0x7f0000000400)=""/60, 0x3c) 513.832387ms ago: executing program 1 (id=3311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12162, 0x0) 431.906079ms ago: executing program 5 (id=3312): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 417.576823ms ago: executing program 6 (id=3313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 HID v0.00 Device [syz1] on syz0 [ 244.903564][T10967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2274'. [ 245.150733][ T5891] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 245.312702][ T5891] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 245.330596][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.354590][ T5891] usb 1-1: config 0 descriptor?? [ 245.373718][ T5891] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 245.420518][ T5877] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 245.602863][ T5877] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.612969][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.641615][ T5877] usb 2-1: config 0 descriptor?? [ 245.653453][ T5877] cp210x 2-1:0.0: cp210x converter detected [ 245.746266][ T5837] Bluetooth: hci1: unexpected event for opcode 0x040d [ 245.792772][ T5891] gspca_cpia1: usb_control_msg 03, error -32 [ 245.809610][ T5891] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 245.983496][ T5837] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 245.992107][ T5837] Bluetooth: hci0: Injecting HCI hardware error event [ 246.000956][ T5826] Bluetooth: hci0: hardware error 0x00 [ 246.019930][ T5891] gspca_cpia1: usb_control_msg 01, error -32 [ 246.037727][ T5891] gspca_cpia1: usb_control_msg 01, error -71 [ 246.061044][ T5891] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 246.098574][ T5891] usb 1-1: USB disconnect, device number 15 [ 246.265286][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.276464][ T5877] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 246.284493][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.293113][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.304195][ T5877] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 246.310955][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.319968][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.359901][ T5877] usb 2-1: cp210x converter now attached to ttyUSB0 [ 246.369003][ T5877] usb 2-1: USB disconnect, device number 16 [ 246.378574][ T5877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.387557][ T5877] cp210x 2-1:0.0: device disconnected [ 246.755944][T11000] chnl_net:caif_netlink_parms(): no params data found [ 247.134195][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.150565][T11000] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.157865][T11000] bridge_slave_0: entered allmulticast mode [ 247.165638][T11000] bridge_slave_0: entered promiscuous mode [ 247.174741][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.182400][ T5888] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 247.191193][T11000] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.198465][T11000] bridge_slave_1: entered allmulticast mode [ 247.206617][T11000] bridge_slave_1: entered promiscuous mode [ 247.279396][T11000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.292569][T11000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.368398][ T5888] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 247.382847][ T5888] usb 2-1: config 7 has no interface number 0 [ 247.404897][ T5888] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 247.428201][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.440441][ T5888] usb 2-1: Product: syz [ 247.444644][ T5888] usb 2-1: Manufacturer: syz [ 247.466720][T11000] team0: Port device team_slave_0 added [ 247.480463][ T5888] usb 2-1: SerialNumber: syz [ 247.499206][T11000] team0: Port device team_slave_1 added [ 247.711353][T11000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.730768][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.790553][T11000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.816205][T11000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.836151][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.867683][T11000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.048669][T11000] hsr_slave_0: entered promiscuous mode [ 248.072627][T11000] hsr_slave_1: entered promiscuous mode [ 248.089360][T11000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.100606][T11000] Cannot create hsr debugfs directory [ 248.135845][ T5826] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 248.284161][ T5888] as10x_usb: device has been detected [ 248.315064][ T5888] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 248.370567][ T5826] Bluetooth: hci2: command tx timeout [ 248.392616][ T5888] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 248.489544][ T5888] as10x_usb: error during firmware upload part1 [ 248.515209][ T5888] Registered device Elgato EyeTV DTT Deluxe [ 248.517860][ T5888] usb 2-1: USB disconnect, device number 17 [ 248.613645][ T5888] Unregistered device Elgato EyeTV DTT Deluxe [ 248.620368][ T5888] as10x_usb: device has been disconnected [ 249.156639][T11000] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.180625][T11000] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.201585][T11000] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.213693][T11000] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.458033][T11000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.484165][T11000] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.531876][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.539131][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.605651][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.612868][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.174189][T11000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.309929][T11000] veth0_vlan: entered promiscuous mode [ 250.350501][ T5888] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 250.359382][T11000] veth1_vlan: entered promiscuous mode [ 250.388358][T11100] random: crng reseeded on system resumption [ 250.438202][T11000] veth0_macvtap: entered promiscuous mode [ 250.450764][ T5826] Bluetooth: hci2: command tx timeout [ 250.467657][T11000] veth1_macvtap: entered promiscuous mode [ 250.491339][T11000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.521035][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 250.526446][T11000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.530027][T11000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.558014][T11000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.571282][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.586754][T11000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.596880][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.611896][T11000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.621997][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.664609][ T5888] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 250.710832][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.729040][T11100] Restarting kernel threads ... done. [ 250.741464][ T5888] usb 5-1: config 0 descriptor?? [ 250.828613][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.849089][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.889647][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.898441][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.187996][ T5888] microsoft 0003:045E:07DA.0014: unknown main item tag 0x1 [ 251.222193][ T5888] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0014/input/input26 [ 251.331630][ T5888] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 251.418374][ T5888] usb 5-1: USB disconnect, device number 14 [ 251.860710][T11121] netlink: 264 bytes leftover after parsing attributes in process `syz.2.2332'. [ 251.898460][T11121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2332'. [ 252.531191][ T5826] Bluetooth: hci2: command tx timeout [ 253.270610][ T5877] kernel read not supported for file /adsp1 (pid: 5877 comm: kworker/1:4) [ 253.332038][T11191] team0 (unregistering): Port device team_slave_0 removed [ 253.348139][T11191] team0 (unregistering): Port device team_slave_1 removed [ 253.394899][T11193] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 253.401901][T11193] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 253.617690][T11202] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2368'. [ 253.981589][ T5888] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 254.162468][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.174121][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.192913][ T5888] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 254.212536][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 254.226493][ T5888] usb 5-1: SerialNumber: syz [ 254.282198][ T978] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 254.455906][ T5888] usb 5-1: 0:2 : does not exist [ 254.463081][ T978] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 254.475566][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.489548][ T5888] usb 5-1: USB disconnect, device number 15 [ 254.504516][ T978] usb 1-1: config 0 descriptor?? [ 254.519398][ T978] cp210x 1-1:0.0: cp210x converter detected [ 254.528932][ T5877] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 254.610845][ T5826] Bluetooth: hci2: command tx timeout [ 254.693659][ T5877] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.694415][ T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 254.712175][ T5877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 254.722180][ T5877] usb 2-1: config 1 has no interface number 0 [ 254.728573][ T5877] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.739809][ T5877] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 254.756136][ T5877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4c3, bcdDevice= 0.40 [ 254.765313][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.777788][ T5877] usb 2-1: Product: syz [ 254.782221][ T5877] usb 2-1: Manufacturer: syz [ 254.786882][ T5877] usb 2-1: SerialNumber: syz [ 254.874169][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 254.885275][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 254.896965][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 254.910225][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 254.919397][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.927603][ T10] usb 3-1: Product: syz [ 254.932385][ T10] usb 3-1: Manufacturer: syz [ 254.933056][ T978] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 254.937268][ T10] usb 3-1: SerialNumber: syz [ 254.955380][ T978] usb 1-1: cp210x converter now attached to ttyUSB0 [ 254.958238][ T10] usb 3-1: config 0 descriptor?? [ 254.968396][T11236] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 254.976109][T11236] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 254.987796][ T10] usb 3-1: ucan: probing device on interface #0 [ 255.171565][ T978] usb 1-1: USB disconnect, device number 16 [ 255.188833][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.242217][ T978] cp210x 1-1:0.0: device disconnected [ 255.554492][ T5826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 255.565127][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: kworker/u9:2 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 255.565157][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.565171][ T5826] Workqueue: hci1 hci_rx_work [ 255.565225][ T5826] Call Trace: [ 255.565233][ T5826] [ 255.565246][ T5826] dump_stack_lvl+0x189/0x250 [ 255.565282][ T5826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.565308][ T5826] ? __pfx__printk+0x10/0x10 [ 255.565340][ T5826] ? kernfs_path_from_node+0x2b/0x260 [ 255.565362][ T5826] ? kernfs_path_from_node+0x2b/0x260 [ 255.565381][ T5826] ? kernfs_path_from_node+0x2b/0x260 [ 255.565403][ T5826] ? kernfs_path_from_node+0x216/0x260 [ 255.565428][ T5826] sysfs_create_dir_ns+0x259/0x280 [ 255.565451][ T5826] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 255.565474][ T5826] ? do_raw_spin_unlock+0x122/0x240 [ 255.565503][ T5826] kobject_add_internal+0x59f/0xb40 [ 255.565542][ T5826] kobject_add+0x155/0x220 [ 255.565575][ T5826] ? __pfx_kobject_add+0x10/0x10 [ 255.565604][ T5826] ? _raw_spin_unlock+0x28/0x50 [ 255.565630][ T5826] ? get_device_parent+0x366/0x3a0 [ 255.565659][ T5826] device_add+0x408/0xb50 [ 255.565688][ T5826] hci_conn_add_sysfs+0xd5/0x1e0 [ 255.565717][ T5826] le_conn_complete_evt+0xc3a/0x1220 [ 255.565753][ T5826] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 255.565775][ T5826] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 255.565805][ T5826] ? __pfx___mutex_lock+0x10/0x10 [ 255.565830][ T5826] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 255.565854][ T5826] ? skb_pull_data+0xfb/0x200 [ 255.565879][ T5826] hci_le_enh_conn_complete_evt+0x189/0x470 [ 255.565901][ T5826] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 255.565939][ T5826] hci_event_packet+0x7a5/0x1270 [ 255.565982][ T5826] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 255.566016][ T5826] ? __pfx_hci_event_packet+0x10/0x10 [ 255.566045][ T5826] ? kcov_remote_start+0x4d3/0x7f0 [ 255.566068][ T5826] ? lockdep_hardirqs_on+0x20/0x150 [ 255.566096][ T5826] ? hci_send_to_monitor+0xd7/0x4f0 [ 255.566132][ T5826] hci_rx_work+0x46a/0xe80 [ 255.566167][ T5826] ? process_scheduled_works+0x9ec/0x17a0 [ 255.566198][ T5826] process_scheduled_works+0xade/0x17a0 [ 255.566258][ T5826] ? __pfx_process_scheduled_works+0x10/0x10 [ 255.566305][ T5826] worker_thread+0x8a0/0xda0 [ 255.566351][ T5826] kthread+0x711/0x8a0 [ 255.566377][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 255.566393][ T5826] ? __pfx_kthread+0x10/0x10 [ 255.566416][ T5826] ? __pfx_kthread+0x10/0x10 [ 255.566437][ T5826] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.566456][ T5826] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.566479][ T5826] ? __pfx_kthread+0x10/0x10 [ 255.566499][ T5826] ret_from_fork+0x4b/0x80 [ 255.566536][ T5826] ? __pfx_kthread+0x10/0x10 [ 255.566558][ T5826] ret_from_fork_asm+0x1a/0x30 [ 255.566607][ T5826] [ 255.566661][ T5826] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 255.619464][ T10] ucan 3-1:0.0 can0: registered device [ 255.624573][ T5826] Bluetooth: hci1: failed to register connection device [ 255.658791][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.668842][ T5877] cdc_ncm 2-1:1.1: bind() failure [ 255.839604][ T10] ucan 3-1:0.0 can0: firmware string: [ 255.924739][ T5877] usb 2-1: USB disconnect, device number 18 [ 256.078460][ T10] usb 3-1: USB disconnect, device number 17 [ 256.285569][T11268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2399'. [ 256.297648][T11268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2399'. [ 256.351932][T11270] netlink: 'syz.4.2400': attribute type 1 has an invalid length. [ 256.359813][T11270] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2400'. [ 256.421492][T11272] input: syz1 as /devices/virtual/input/input27 [ 256.790756][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 256.970538][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 256.988550][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 257.005461][ T10] usb 2-1: config 0 has no interface number 0 [ 257.024791][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.060228][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 257.087290][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 257.096671][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.114220][ T10] usb 2-1: Product: syz [ 257.128636][ T10] usb 2-1: Manufacturer: syz [ 257.140482][ T10] usb 2-1: SerialNumber: syz [ 257.153814][ T10] usb 2-1: config 0 descriptor?? [ 257.730539][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 257.816756][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 257.841429][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input28 [ 257.912186][T11335] batadv_slave_1: entered promiscuous mode [ 257.929758][T11333] batadv_slave_1: left promiscuous mode [ 258.070752][ T9] usb 2-1: USB disconnect, device number 19 [ 258.092803][T11340] loop8: detected capacity change from 0 to 8 [ 258.109156][T11340] Dev loop8: unable to read RDB block 8 [ 258.119331][T11340] loop8: unable to read partition table [ 258.128538][T11340] loop8: partition table beyond EOD, truncated [ 258.136154][T11340] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 258.148702][ T9] appletouch 2-1:0.85: input: appletouch disconnected [ 258.407534][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2438'. [ 258.429435][T11350] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.438401][T11350] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.447418][T11350] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.456274][T11350] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.469969][T11350] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.479042][T11350] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.488064][T11350] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.497032][T11350] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.011225][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 259.180489][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 259.204958][ T10] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 259.230533][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.238608][ T10] usb 5-1: Product: syz [ 259.254575][ T10] usb 5-1: Manufacturer: syz [ 259.270612][ T10] usb 5-1: SerialNumber: syz [ 259.280570][ T10] usb 5-1: config 0 descriptor?? [ 259.295347][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 259.860168][T11402] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 259.888497][T11402] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 259.897094][T11402] nullb0: p2 start 1840217545 is beyond EOD, truncated [ 259.908955][T11402] nullb0: p3 start 2781609279 is beyond EOD, truncated [ 259.916029][T11402] nullb0: p4 start 2763479866 is beyond EOD, truncated [ 259.923066][T11402] nullb0: p5 size 1576935424 extends beyond EOD, truncated [ 259.934193][T11402] nullb0: p6 start 4255409061 is beyond EOD, truncated [ 259.948182][T11402] nullb0: p7 start 1354594978 is beyond EOD, truncated [ 259.961855][T11402] nullb0: p8 start 2203294751 is beyond EOD, truncated [ 259.969359][T11402] nullb0: p9 size 3667873493 extends beyond EOD, truncated [ 259.980133][T11402] nullb0: p10 start 2534445966 is beyond EOD, truncated [ 259.987757][T11402] nullb0: p11 start 1318227915 is beyond EOD, truncated [ 259.995273][T11402] nullb0: p12 size 3013114410 extends beyond EOD, truncated [ 260.338215][ T10] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 260.346503][ T10] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 260.362008][ T10] usb 5-1: USB disconnect, device number 16 [ 260.770967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.390476][ T5877] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 261.460708][ T5888] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 261.552394][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.552426][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 261.552451][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 261.552475][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.552512][ T5877] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.552539][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.555484][ T5877] usb 5-1: config 0 descriptor?? [ 261.556061][T11435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.646098][ T5888] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 261.646126][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.646146][ T5888] usb 3-1: Product: syz [ 261.646160][ T5888] usb 3-1: Manufacturer: syz [ 261.646174][ T5888] usb 3-1: SerialNumber: syz [ 261.649804][ T5888] usb 3-1: config 0 descriptor?? [ 261.687418][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2485'. [ 261.976091][ T5877] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 261.999188][ T5877] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 262.025185][ T5877] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 262.276478][ T10] usb 5-1: USB disconnect, device number 17 [ 262.672752][ T5888] usb 3-1: f81604_read: reg: 100f failed: -EPROTO [ 262.685069][T11468] syz_tun: entered promiscuous mode [ 262.696800][T11468] syz_tun: left promiscuous mode [ 262.728491][ T5888] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 262.737934][ T5888] usb 3-1: USB disconnect, device number 18 [ 262.748083][ T5888] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 262.816740][ T5888] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 263.537624][T11502] program syz.5.2506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.122056][T11504] netlink: 264 bytes leftover after parsing attributes in process `syz.4.2507'. [ 264.164290][T11504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2507'. [ 264.359998][T11529] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 265.069884][T11564] input: syz0 as /devices/virtual/input/input30 [ 265.419770][T11578] Trying to write to read-only block-device nullb0 [ 265.616489][T11583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.890701][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.046349][T11607] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 266.776023][T11629] overlayfs: invalid origin (0000) [ 267.054688][ T30] audit: type=1326 audit(1748283592.005:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.4.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81afb8e969 code=0x7ffc0000 [ 267.123293][ T30] audit: type=1326 audit(1748283592.005:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.4.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81afb2ab39 code=0x7ffc0000 [ 267.189062][ T30] audit: type=1326 audit(1748283592.005:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.4.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81afb8e969 code=0x7ffc0000 [ 267.390654][ T30] audit: type=1326 audit(1748283592.005:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.4.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81afb2ab39 code=0x7ffc0000 [ 267.480495][ T30] audit: type=1326 audit(1748283592.005:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.4.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81afb2ab39 code=0x7ffc0000 [ 267.517769][ T30] audit: type=1326 audit(1748283592.005:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.4.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81afb8e969 code=0x7ffc0000 [ 267.633217][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 267.645463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 267.675742][ T30] audit: type=1326 audit(1748283592.035:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.4.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81afb2ab39 code=0x7ffc0000 [ 267.800461][ T30] audit: type=1326 audit(1748283592.035:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.4.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81afb8e969 code=0x7ffc0000 [ 267.910570][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 267.932382][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.963818][ T30] audit: type=1326 audit(1748283592.035:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.4.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81afb2ab39 code=0x7ffc0000 [ 267.990744][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.001633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.055209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 268.064456][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 268.071790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.091791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.107287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 268.133306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.152024][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 268.161884][ T30] audit: type=1326 audit(1748283592.035:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.4.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81afb8e969 code=0x7ffc0000 [ 268.190922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.199573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.243436][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.300896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.321423][ T10] usb 1-1: config 0 descriptor?? [ 268.765314][ T10] hid (null): unknown global tag 0xd [ 268.793898][ T10] hid (null): global environment stack underflow [ 268.815920][ T10] hid (null): unknown global tag 0xd [ 268.827803][ T10] hid (null): invalid report_size 20669 [ 268.968427][ T10] usb 1-1: USB disconnect, device number 17 [ 269.140777][T11659] netlink: 264 bytes leftover after parsing attributes in process `syz.1.2576'. [ 269.158194][T11659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2576'. [ 270.008948][T11717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2601'. [ 270.198475][T11724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.856606][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2616'. [ 270.868335][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2616'. [ 271.211490][ T5891] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 271.395252][ T5891] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 271.420592][ T5891] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 271.438614][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 271.467352][ T5891] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 271.488997][ T5891] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 271.519804][ T5891] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 271.535702][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 271.556529][ T5891] usb 1-1: Product: syz [ 271.563475][ T5891] usb 1-1: Manufacturer: syz [ 271.575837][ T5891] cdc_wdm 1-1:1.0: skipping garbage [ 271.581434][ T5891] cdc_wdm 1-1:1.0: skipping garbage [ 271.590605][ T5891] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 271.596808][ T5891] cdc_wdm 1-1:1.0: Unknown control protocol [ 271.780604][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 271.815604][ T5873] usb 1-1: USB disconnect, device number 18 [ 271.843369][T11783] sd 0:0:1:0: device reset [ 271.883306][T11785] netlink: 'syz.1.2632': attribute type 1 has an invalid length. [ 271.892965][T11785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.900285][T11785] IPv6: NLM_F_CREATE should be set when creating new route [ 271.910320][T11785] netlink: 'syz.1.2632': attribute type 1 has an invalid length. [ 271.918313][T11785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.940478][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 271.948402][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.971197][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.984485][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.994810][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.009361][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.044977][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.278498][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 272.284457][ T10] usbtmc 3-1:16.0: can't read capabilities [ 272.490262][ T10] usb 3-1: USB disconnect, device number 19 [ 273.371019][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 273.534314][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 273.542701][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 273.558443][ T10] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 273.568540][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.573221][ T5891] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 273.585606][ T10] usb 2-1: config 0 descriptor?? [ 273.751763][ T5891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 273.764352][ T5891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 273.784708][ T5891] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 273.794027][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.805270][ T5891] usb 3-1: Product: syz [ 273.809474][ T5891] usb 3-1: Manufacturer: syz [ 273.814345][ T5891] usb 3-1: SerialNumber: syz [ 273.824251][ T5891] usb 3-1: config 0 descriptor?? [ 273.830149][T11822] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 273.850641][T11822] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 274.009697][ T10] samsung 0003:0419:0600.0017: item fetching failed at offset 0/5 [ 274.020240][ T10] samsung 0003:0419:0600.0017: parse failed [ 274.032917][ T10] samsung 0003:0419:0600.0017: probe with driver samsung failed with error -22 [ 274.089064][T11822] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 274.104448][T11822] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 274.225302][ T5888] usb 2-1: USB disconnect, device number 20 [ 274.332809][T11837] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2656'. [ 274.342621][T11837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2656'. [ 274.718482][ T5891] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 274.754802][ T5891] usb 3-1: USB disconnect, device number 20 [ 274.874237][T11860] sctp: [Deprecated]: syz.0.2665 (pid 11860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.874237][T11860] Use struct sctp_sack_info instead [ 277.447802][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2696'. [ 278.040571][ T5874] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 278.214077][T11962] loop8: detected capacity change from 0 to 8 [ 278.226763][ T5874] usb 1-1: config 118 interface 0 has no altsetting 0 [ 278.236529][ T5874] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 278.247063][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.252938][T11962] Dev loop8: unable to read RDB block 8 [ 278.263781][ T5874] usb 1-1: Product: syz [ 278.271293][T11964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2707'. [ 278.273976][T11962] loop8: unable to read partition table [ 278.287615][ T5874] usb 1-1: Manufacturer: syz [ 278.295423][ T5874] usb 1-1: SerialNumber: syz [ 278.319050][T11962] loop8: partition table beyond EOD, truncated [ 278.328968][T11962] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 278.525581][ T5874] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 278.546078][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.579373][ T5874] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 278.622013][ T5874] usb 1-1: media controller created [ 278.713105][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.961891][ T5874] DVB: Unable to find symbol mt352_attach() [ 278.981259][ T5874] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 279.012286][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 279.092455][ T5874] dvb-usb: schedule remote query interval to 100 msecs. [ 279.104138][ T5874] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 279.322710][ T5874] dvb_usb_m920x 1-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 279.336139][ T5873] m920x_read = error: -71 [ 279.341930][ T5873] dvb-usb: error while querying for an remote control event. [ 279.353720][ T5874] usb 1-1: USB disconnect, device number 19 [ 279.450704][ T5873] m920x_read = error: -19 [ 279.455309][ T5873] dvb-usb: error while querying for an remote control event. [ 279.570613][ T5874] m920x_read = error: -19 [ 279.575009][ T5874] dvb-usb: error while querying for an remote control event. [ 279.690574][ T5874] m920x_read = error: -19 [ 279.698602][ T5874] dvb-usb: error while querying for an remote control event. [ 279.820620][ T5874] m920x_read = error: -19 [ 279.835244][ T5874] dvb-usb: error while querying for an remote control event. [ 279.985895][ T5874] m920x_read = error: -19 [ 279.990341][ T5874] dvb-usb: error while querying for an remote control event. [ 280.110598][ T5874] m920x_read = error: -19 [ 280.127362][ T5874] dvb-usb: error while querying for an remote control event. [ 280.229721][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2732'. [ 280.267228][ T5874] m920x_read = error: -19 [ 280.279704][ T5874] dvb-usb: error while querying for an remote control event. [ 280.405026][T12025] bond0: (slave bond_slave_0): Releasing backup interface [ 280.420533][ T5874] m920x_read = error: -19 [ 280.428572][ T5874] dvb-usb: error while querying for an remote control event. [ 280.563719][ T5874] m920x_read = error: -19 [ 280.568231][ T5874] dvb-usb: error while querying for an remote control event. [ 280.651496][T12038] input: syz0 as /devices/virtual/input/input32 [ 280.700555][ T5874] m920x_read = error: -19 [ 280.704960][ T5874] dvb-usb: error while querying for an remote control event. [ 280.756259][T12042] pim6reg1: entered promiscuous mode [ 280.794238][T12042] pim6reg1: entered allmulticast mode [ 280.820821][ T5888] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 280.842004][ T5874] m920x_read = error: -19 [ 280.846408][ T5874] dvb-usb: error while querying for an remote control event. [ 280.864542][T12044] dlm: non-version read from control device 4 [ 280.982766][ T5873] m920x_read = error: -19 [ 280.987167][ T5873] dvb-usb: error while querying for an remote control event. [ 281.027398][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 281.038114][ T5888] usb 1-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 281.049232][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.076847][ T5888] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.091424][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.105560][ T5888] usb 1-1: Product: syz [ 281.110578][ T5873] m920x_read = error: -19 [ 281.115050][ T5888] usb 1-1: Manufacturer: syz [ 281.116811][ T5873] dvb-usb: error while querying for an remote control event. [ 281.123940][ T5888] usb 1-1: SerialNumber: syz [ 281.251979][ T5873] m920x_read = error: -19 [ 281.267433][ T5873] dvb-usb: error while querying for an remote control event. [ 281.391110][ T5873] m920x_read = error: -19 [ 281.401552][ T5873] dvb-usb: error while querying for an remote control event. [ 281.524953][ T10] m920x_read = error: -19 [ 281.533637][T12060] tracefs: Invalid uid '0x00000000ffffffff' [ 281.535119][ T10] dvb-usb: error while querying for an remote control event. [ 281.559433][ T5888] usb 1-1: 0:2 : does not exist [ 281.660514][ T10] m920x_read = error: -19 [ 281.664936][ T10] dvb-usb: error while querying for an remote control event. [ 281.780916][ T5873] m920x_read = error: -19 [ 281.785374][ T5873] dvb-usb: error while querying for an remote control event. [ 281.900593][ T5873] m920x_read = error: -19 [ 281.905395][ T5873] dvb-usb: error while querying for an remote control event. [ 281.969916][ T5888] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 281.990879][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 282.016821][ T5888] usb 1-1: USB disconnect, device number 20 [ 282.024569][ T5874] m920x_read = error: -19 [ 282.028950][ T5874] dvb-usb: error while querying for an remote control event. [ 282.051755][T12080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.150563][ T5873] m920x_read = error: -19 [ 282.154979][ T5873] dvb-usb: error while querying for an remote control event. [ 282.165665][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.177186][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.187666][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.214500][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.228941][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.253615][ T10] usb 2-1: config 0 descriptor?? [ 282.272871][ T5873] m920x_read = error: -19 [ 282.277297][ T5873] dvb-usb: error while querying for an remote control event. [ 282.380537][ T5874] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 282.394171][ T5873] m920x_read = error: -19 [ 282.399390][ T5873] dvb-usb: error while querying for an remote control event. [ 282.511880][ T5873] m920x_read = error: -19 [ 282.516339][ T5873] dvb-usb: error while querying for an remote control event. [ 282.543715][ T5874] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 282.560661][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.572592][ T5874] usb 3-1: config 0 descriptor?? [ 282.650886][ T5873] m920x_read = error: -19 [ 282.655447][ T5873] dvb-usb: error while querying for an remote control event. [ 282.675882][ T10] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 282.708425][ T10] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 282.740108][ T10] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 282.780591][ T10] m920x_read = error: -19 [ 282.785202][ T10] dvb-usb: error while querying for an remote control event. [ 282.900639][ T5888] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 282.910709][ T10] m920x_read = error: -19 [ 282.915253][ T10] dvb-usb: error while querying for an remote control event. [ 282.967133][ T10] usb 2-1: USB disconnect, device number 21 [ 283.040775][ T9] m920x_read = error: -19 [ 283.045306][ T9] dvb-usb: error while querying for an remote control event. [ 283.060667][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 283.080787][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 283.092491][ T5888] usb 1-1: config 64 has an invalid interface number: 1 but max is 0 [ 283.102401][ T5888] usb 1-1: config 64 has no interface number 0 [ 283.108662][ T5888] usb 1-1: config 64 interface 1 has no altsetting 0 [ 283.118213][ T5888] usb 1-1: New USB device found, idVendor=22b7, idProduct=150d, bcdDevice=c0.2d [ 283.131476][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.139773][ T5888] usb 1-1: Product: syz [ 283.147718][ T5888] usb 1-1: Manufacturer: syz [ 283.155179][ T5888] usb 1-1: SerialNumber: syz [ 283.163015][ T10] m920x_read = error: -19 [ 283.174960][ T10] dvb-usb: error while querying for an remote control event. [ 283.291562][ T10] m920x_read = error: -19 [ 283.295973][ T10] dvb-usb: error while querying for an remote control event. [ 283.348906][T12106] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2769'. [ 283.363055][T12106] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2769'. [ 283.384211][ T5888] ftdi_sio 1-1:64.1: FTDI USB Serial Device converter detected [ 283.394035][ T5888] ftdi_sio ttyUSB0: unknown device type: 0xc02d [ 283.407231][ T5888] usb 1-1: USB disconnect, device number 21 [ 283.411539][ T10] m920x_read = error: -19 [ 283.415027][ T5888] ftdi_sio 1-1:64.1: device disconnected [ 283.430807][ T10] dvb-usb: error while querying for an remote control event. [ 283.550626][ T10] m920x_read = error: -19 [ 283.555047][ T10] dvb-usb: error while querying for an remote control event. [ 283.618589][ T5874] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 283.647924][ T5874] usb 3-1: USB disconnect, device number 21 [ 283.700526][ T10] m920x_read = error: -19 [ 283.704947][ T10] dvb-usb: error while querying for an remote control event. [ 283.860750][ T5874] m920x_read = error: -19 [ 283.865239][ T5874] dvb-usb: error while querying for an remote control event. [ 283.951028][T12129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.012288][ T5874] m920x_read = error: -19 [ 284.016687][ T5874] dvb-usb: error while querying for an remote control event. [ 284.130773][ T5874] m920x_read = error: -19 [ 284.170547][ T5874] dvb-usb: error while querying for an remote control event. [ 284.280768][ T10] m920x_read = error: -19 [ 284.285296][ T10] dvb-usb: error while querying for an remote control event. [ 284.410729][ T10] m920x_read = error: -19 [ 284.416437][ T10] dvb-usb: error while querying for an remote control event. [ 284.430751][ T5874] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 284.551288][ T10] m920x_read = error: -19 [ 284.558204][ T10] dvb-usb: error while querying for an remote control event. [ 284.609876][ T5874] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 284.621306][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.629451][ T5874] usb 5-1: Product: syz [ 284.638413][ T5874] usb 5-1: Manufacturer: syz [ 284.649378][ T5874] usb 5-1: SerialNumber: syz [ 284.668383][ T5874] usb 5-1: config 0 descriptor?? [ 284.677098][T12156] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 284.685228][ T10] m920x_read = error: -19 [ 284.689746][ T10] dvb-usb: error while querying for an remote control event. [ 284.791899][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2794'. [ 284.801129][ T10] m920x_read = error: -19 [ 284.805532][ T10] dvb-usb: error while querying for an remote control event. [ 284.906221][ T5874] usb 5-1: ignoring: probably an ADSL modem [ 284.920719][ T10] m920x_read = error: -19 [ 284.925382][ T10] dvb-usb: error while querying for an remote control event. [ 285.002676][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 285.002693][ T30] audit: type=1800 audit(1748283610.952:233): pid=12164 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2796" name="bus" dev="tmpfs" ino=2066 res=0 errno=0 [ 285.050580][ T10] m920x_read = error: -19 [ 285.055523][ T10] dvb-usb: error while querying for an remote control event. [ 285.170806][ T9] m920x_read = error: -19 [ 285.175348][ T9] dvb-usb: error while querying for an remote control event. [ 285.301024][ T9] m920x_read = error: -19 [ 285.305472][ T9] dvb-usb: error while querying for an remote control event. [ 285.323841][ T5874] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 285.450580][ T9] m920x_read = error: -19 [ 285.454972][ T9] dvb-usb: error while querying for an remote control event. [ 285.579000][T12181] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2804'. [ 285.600573][ T9] m920x_read = error: -19 [ 285.605292][ T9] dvb-usb: error while querying for an remote control event. [ 285.646407][T12183] program syz.1.2806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.730582][ T9] m920x_read = error: -19 [ 285.734975][ T9] dvb-usb: error while querying for an remote control event. [ 285.861251][ T9] m920x_read = error: -19 [ 285.875835][ T9] dvb-usb: error while querying for an remote control event. [ 286.010537][ T9] m920x_read = error: -19 [ 286.014933][ T9] dvb-usb: error while querying for an remote control event. [ 286.161843][ T9] m920x_read = error: -19 [ 286.174255][ T9] dvb-usb: error while querying for an remote control event. [ 286.300999][ T5877] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 286.322781][ T9] m920x_read = error: -19 [ 286.327169][ T9] dvb-usb: error while querying for an remote control event. [ 286.450543][ T5874] m920x_read = error: -19 [ 286.454990][ T5874] dvb-usb: error while querying for an remote control event. [ 286.472634][ T5877] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 286.502709][ T5877] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 286.517955][ T143] bridge_slave_1: left allmulticast mode [ 286.520543][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.523869][ T143] bridge_slave_1: left promiscuous mode [ 286.548889][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.555058][ T5877] usb 2-1: Product: syz [ 286.569976][ T143] bridge_slave_0: left allmulticast mode [ 286.575566][ T5877] usb 2-1: Manufacturer: syz [ 286.580529][ T10] m920x_read = error: -19 [ 286.584907][ T10] dvb-usb: error while querying for an remote control event. [ 286.593086][ T143] bridge_slave_0: left promiscuous mode [ 286.595853][ T5877] usb 2-1: SerialNumber: syz [ 286.598927][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.632718][ T5877] usb 2-1: config 0 descriptor?? [ 286.720729][ T10] m920x_read = error: -19 [ 286.725161][ T10] dvb-usb: error while querying for an remote control event. [ 286.850638][ T10] m920x_read = error: -19 [ 286.855050][ T10] dvb-usb: error while querying for an remote control event. [ 286.911062][ T10] usb 2-1: USB disconnect, device number 22 [ 286.980534][ T5873] m920x_read = error: -19 [ 286.985122][ T5873] dvb-usb: error while querying for an remote control event. [ 287.024232][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.035018][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.043526][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.070621][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.104202][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.122978][ T10] m920x_read = error: -19 [ 287.127765][ T10] dvb-usb: error while querying for an remote control event. [ 287.256698][ T10] m920x_read = error: -19 [ 287.267553][ T10] dvb-usb: error while querying for an remote control event. [ 287.285094][ T9] usb 5-1: USB disconnect, device number 18 [ 287.399654][T12204] netlink: 'syz.2.2817': attribute type 3 has an invalid length. [ 287.410722][ T10] m920x_read = error: -19 [ 287.422074][ T10] dvb-usb: error while querying for an remote control event. [ 287.428449][T12204] netlink: 'syz.2.2817': attribute type 1 has an invalid length. [ 287.461459][T12204] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2817'. [ 287.530582][ T9] m920x_read = error: -19 [ 287.536262][ T9] dvb-usb: error while querying for an remote control event. [ 287.661028][ T9] m920x_read = error: -19 [ 287.665524][ T9] dvb-usb: error while querying for an remote control event. [ 287.745462][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.758529][T12215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2822'. [ 287.773810][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.793024][ T143] bond0 (unregistering): Released all slaves [ 287.800576][ T9] m920x_read = error: -19 [ 287.805028][ T9] dvb-usb: error while querying for an remote control event. [ 287.891967][T12216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2822'. [ 287.950647][ T5874] m920x_read = error: -19 [ 287.955040][ T5874] dvb-usb: error while querying for an remote control event. [ 288.111628][ T5874] m920x_read = error: -19 [ 288.116138][ T5874] dvb-usb: error while querying for an remote control event. [ 288.219365][T12224] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2826'. [ 288.251877][ T10] m920x_read = error: -19 [ 288.256278][ T10] dvb-usb: error while querying for an remote control event. [ 288.410771][ T10] m920x_read = error: -19 [ 288.421880][ T10] dvb-usb: error while querying for an remote control event. [ 288.531350][ T10] m920x_read = error: -19 [ 288.538662][ T10] dvb-usb: error while querying for an remote control event. [ 288.596836][ T143] hsr_slave_0: left promiscuous mode [ 288.605567][ T143] hsr_slave_1: left promiscuous mode [ 288.622119][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.636679][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.690667][ T10] m920x_read = error: -19 [ 288.700612][ T10] dvb-usb: error while querying for an remote control event. [ 288.830879][ T10] m920x_read = error: -19 [ 288.845267][ T10] dvb-usb: error while querying for an remote control event. [ 288.983112][ T10] m920x_read = error: -19 [ 289.006922][ T10] dvb-usb: error while querying for an remote control event. [ 289.140865][ T10] m920x_read = error: -19 [ 289.152266][ T10] dvb-usb: error while querying for an remote control event. [ 289.178209][ T5837] Bluetooth: hci0: command tx timeout [ 289.293541][ T10] m920x_read = error: -19 [ 289.300328][ T10] dvb-usb: error while querying for an remote control event. [ 289.316563][T12265] netlink: 'syz.4.2841': attribute type 1 has an invalid length. [ 289.334440][T12265] netlink: 'syz.4.2841': attribute type 2 has an invalid length. [ 289.393966][T12268] netlink: 'syz.4.2841': attribute type 1 has an invalid length. [ 289.441274][ T10] m920x_read = error: -19 [ 289.460541][T12268] netlink: 'syz.4.2841': attribute type 2 has an invalid length. [ 289.484121][ T10] dvb-usb: error while querying for an remote control event. [ 289.579989][ T143] team0 (unregistering): Port device virt_wifi0 removed [ 289.661550][ T10] m920x_read = error: -19 [ 289.714864][ T10] dvb-usb: error while querying for an remote control event. [ 289.831510][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2843'. [ 289.904008][ T10] m920x_read = error: -19 [ 289.919060][ T10] dvb-usb: error while querying for an remote control event. [ 290.041998][ T10] m920x_read = error: -19 [ 290.047129][ T143] team0 (unregistering): Port device team_slave_1 removed [ 290.054764][ T10] dvb-usb: error while querying for an remote control event. [ 290.096240][ T143] team0 (unregistering): Port device team_slave_0 removed [ 290.171080][ T10] m920x_read = error: -19 [ 290.175799][ T10] dvb-usb: error while querying for an remote control event. [ 290.304113][ T10] m920x_read = error: -19 [ 290.308503][ T10] dvb-usb: error while querying for an remote control event. [ 290.444624][ T10] m920x_read = error: -19 [ 290.449022][ T10] dvb-usb: error while querying for an remote control event. [ 290.560732][ T9] m920x_read = error: -19 [ 290.565260][ T9] dvb-usb: error while querying for an remote control event. [ 290.693236][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2844'. [ 290.712502][ T9] m920x_read = error: -19 [ 290.713482][T12305] team0: Port device team_slave_1 removed [ 290.720632][ T9] dvb-usb: error while querying for an remote control event. [ 290.746587][T12199] chnl_net:caif_netlink_parms(): no params data found [ 290.831126][ T9] m920x_read = error: -19 [ 290.838671][ T9] dvb-usb: error while querying for an remote control event. [ 290.981044][ T9] m920x_read = error: -19 [ 290.990078][ T9] dvb-usb: error while querying for an remote control event. [ 291.012855][T12199] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.020908][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.028395][T12199] bridge_slave_0: entered allmulticast mode [ 291.036474][T12199] bridge_slave_0: entered promiscuous mode [ 291.050327][T12199] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.058093][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.065655][T12199] bridge_slave_1: entered allmulticast mode [ 291.074374][T12199] bridge_slave_1: entered promiscuous mode [ 291.110518][ T9] m920x_read = error: -19 [ 291.114928][ T9] dvb-usb: error while querying for an remote control event. [ 291.154228][T12199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.189468][T12199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.230554][ T9] m920x_read = error: -19 [ 291.236161][ T9] dvb-usb: error while querying for an remote control event. [ 291.260577][ T5837] Bluetooth: hci0: command tx timeout [ 291.301603][T12199] team0: Port device team_slave_0 added [ 291.324501][T12199] team0: Port device team_slave_1 added [ 291.362304][ T9] m920x_read = error: -19 [ 291.386154][ T9] dvb-usb: error while querying for an remote control event. [ 291.395993][T12199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.420455][T12199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.478551][T12199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.500800][ T9] m920x_read = error: -19 [ 291.510557][ T9] dvb-usb: error while querying for an remote control event. [ 291.587403][T12199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.614023][T12199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.641976][ T9] m920x_read = error: -19 [ 291.661693][ T9] dvb-usb: error while querying for an remote control event. [ 291.682095][T12199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.810781][ T9] m920x_read = error: -19 [ 291.824498][ T9] dvb-usb: error while querying for an remote control event. [ 291.856041][ T30] audit: type=1326 audit(1748283617.782:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e0372ab39 code=0x7ffc0000 [ 291.929850][ T30] audit: type=1326 audit(1748283617.782:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e0372ab39 code=0x7ffc0000 [ 291.962621][ T9] m920x_read = error: -19 [ 291.963570][ T30] audit: type=1326 audit(1748283617.782:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e0372ab39 code=0x7ffc0000 [ 291.966990][ T9] dvb-usb: error while querying for an remote control event. [ 291.978457][T12199] hsr_slave_0: entered promiscuous mode [ 292.054929][T12199] hsr_slave_1: entered promiscuous mode [ 292.070547][ T9] m920x_read = error: -19 [ 292.075058][ T9] dvb-usb: error while querying for an remote control event. [ 292.134782][ T30] audit: type=1326 audit(1748283617.782:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e0372ab39 code=0x7ffc0000 [ 292.137845][T12346] sctp: [Deprecated]: syz.1.2857 (pid 12346) Use of int in maxseg socket option. [ 292.137845][T12346] Use struct sctp_assoc_value instead [ 292.195052][ T9] m920x_read = error: -19 [ 292.202192][ T9] dvb-usb: error while querying for an remote control event. [ 292.281134][ T30] audit: type=1326 audit(1748283617.782:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e0372ab39 code=0x7ffc0000 [ 292.320545][ T9] m920x_read = error: -19 [ 292.325259][ T9] dvb-usb: error while querying for an remote control event. [ 292.367180][ T30] audit: type=1326 audit(1748283617.782:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0378e969 code=0x7ffc0000 [ 292.427438][ T30] audit: type=1326 audit(1748283617.782:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e0372ab39 code=0x7ffc0000 [ 292.452518][ T9] m920x_read = error: -19 [ 292.457142][ T9] dvb-usb: error while querying for an remote control event. [ 292.474874][ T30] audit: type=1326 audit(1748283617.782:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0378e969 code=0x7ffc0000 [ 292.496436][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.506699][ T30] audit: type=1326 audit(1748283617.792:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0378e969 code=0x7ffc0000 [ 292.528267][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.546419][ T30] audit: type=1326 audit(1748283617.792:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e0372ab39 code=0x7ffc0000 [ 292.582629][ T9] m920x_read = error: -19 [ 292.594352][ T9] dvb-usb: error while querying for an remote control event. [ 292.736155][ T9] m920x_read = error: -19 [ 292.744071][ T9] dvb-usb: error while querying for an remote control event. [ 292.890886][ T9] m920x_read = error: -19 [ 292.895305][ T9] dvb-usb: error while querying for an remote control event. [ 292.948144][T12199] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 292.995888][T12361] bond0: entered promiscuous mode [ 293.011108][T12361] bond_slave_0: entered promiscuous mode [ 293.017169][T12361] bond_slave_1: entered promiscuous mode [ 293.050509][ T10] m920x_read = error: -19 [ 293.054906][ T10] dvb-usb: error while querying for an remote control event. [ 293.070462][T12199] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 293.121334][T12199] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 293.153489][T12199] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 293.200720][ T9] m920x_read = error: -19 [ 293.205125][ T9] dvb-usb: error while querying for an remote control event. [ 293.336732][ T5877] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 293.340697][ T5874] m920x_read = error: -19 [ 293.344493][ T5837] Bluetooth: hci0: command tx timeout [ 293.349216][ T5874] dvb-usb: error while querying for an remote control event. [ 293.384576][T12199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.409632][T12199] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.434315][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.441501][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.478140][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.480933][T12382] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input34 [ 293.485332][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.525340][ T5901] m920x_read = error: -19 [ 293.530829][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 293.536085][ T5901] dvb-usb: error while querying for an remote control event. [ 293.538113][ T5877] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 293.564135][ T5877] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.616595][ T5877] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.679426][ T5877] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.682459][ T5901] m920x_read = error: -19 [ 293.700524][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.701005][ T5874] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 293.708530][ T5877] usb 5-1: Product: syz [ 293.708548][ T5877] usb 5-1: Manufacturer: syz [ 293.708563][ T5877] usb 5-1: SerialNumber: syz [ 293.741822][ T5901] dvb-usb: error while querying for an remote control event. [ 293.850561][ T5901] m920x_read = error: -19 [ 293.854966][ T5901] dvb-usb: error while querying for an remote control event. [ 293.902539][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.926618][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.958343][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.973400][ T5874] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.984413][ T5901] m920x_read = error: -19 [ 293.989179][ T5901] dvb-usb: error while querying for an remote control event. [ 294.006979][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.028997][ T5874] usb 3-1: config 0 descriptor?? [ 294.108497][T12199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.123238][ T5901] m920x_read = error: -19 [ 294.127747][ T5901] dvb-usb: error while querying for an remote control event. [ 294.156348][ T5877] usb 5-1: 0:2 : does not exist [ 294.252661][ T5901] m920x_read = error: -19 [ 294.257138][ T5901] dvb-usb: error while querying for an remote control event. [ 294.391213][ T9] m920x_read = error: -19 [ 294.401847][ T9] dvb-usb: error while querying for an remote control event. [ 294.418487][ C1] sd 0:0:1:0: [sda] tag#3833 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 294.429022][ C1] sd 0:0:1:0: [sda] tag#3833 CDB: Write(6) 0a 00 4e 23 00 00 00 00 00 00 00 00 [ 294.477257][ T5874] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 294.484196][T12414] Bluetooth: MGMT ver 1.23 [ 294.497328][ T5874] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 294.520515][ T5901] m920x_read = error: -19 [ 294.524906][ T5901] dvb-usb: error while querying for an remote control event. [ 294.551029][ T5874] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 294.670594][ T5874] m920x_read = error: -19 [ 294.704770][ T5874] dvb-usb: error while querying for an remote control event. [ 294.788963][ T5891] usb 3-1: USB disconnect, device number 22 [ 294.809077][T12199] veth0_vlan: entered promiscuous mode [ 294.814283][ T5877] usb 5-1: USB disconnect, device number 19 [ 294.831240][ T5874] m920x_read = error: -19 [ 294.835911][ T5874] dvb-usb: error while querying for an remote control event. [ 294.849969][T12199] veth1_vlan: entered promiscuous mode [ 294.919036][T12199] veth0_macvtap: entered promiscuous mode [ 294.942035][T12199] veth1_macvtap: entered promiscuous mode [ 294.960532][ T5874] m920x_read = error: -19 [ 294.965054][ T5874] dvb-usb: error while querying for an remote control event. [ 294.975831][T12199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.995588][T12199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.008971][T12199] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.020928][T12199] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.030123][T12199] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.039833][T12199] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.091959][ T5874] m920x_read = error: -19 [ 295.107388][ T5874] dvb-usb: error while querying for an remote control event. [ 295.136085][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.160653][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.203781][T12287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.219999][T12287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.230834][ T5874] m920x_read = error: -19 [ 295.235212][ T5874] dvb-usb: error while querying for an remote control event. [ 295.350638][ T5901] m920x_read = error: -19 [ 295.370308][ T5901] dvb-usb: error while querying for an remote control event. [ 295.410888][ T5837] Bluetooth: hci0: command tx timeout [ 295.434915][T12437] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 295.500785][ T5874] m920x_read = error: -19 [ 295.510729][ T5874] dvb-usb: error while querying for an remote control event. [ 295.633275][ T5874] m920x_read = error: -19 [ 295.637731][ T5874] dvb-usb: error while querying for an remote control event. [ 295.760635][ T5874] m920x_read = error: -19 [ 295.765217][ T5874] dvb-usb: error while querying for an remote control event. [ 295.882380][ T5874] m920x_read = error: -19 [ 295.888020][ T5874] dvb-usb: error while querying for an remote control event. [ 296.000717][ T5874] m920x_read = error: -19 [ 296.005287][ T5874] dvb-usb: error while querying for an remote control event. [ 296.120628][ T5874] m920x_read = error: -19 [ 296.125022][ T5874] dvb-usb: error while querying for an remote control event. [ 296.240590][ T5901] m920x_read = error: -19 [ 296.245022][ T5901] dvb-usb: error while querying for an remote control event. [ 296.360635][ T5901] m920x_read = error: -19 [ 296.365125][ T5901] dvb-usb: error while querying for an remote control event. [ 296.412434][ T5874] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 296.481352][ T5901] m920x_read = error: -19 [ 296.499570][ T5901] dvb-usb: error while querying for an remote control event. [ 296.570794][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 296.594513][ T5874] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.617862][ T5901] m920x_read = error: -19 [ 296.623399][ T2342] pvrusb2: request_firmware fatal error with code=-110 [ 296.635285][ T5901] dvb-usb: error while querying for an remote control event. [ 296.643808][ T5874] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.658554][ T2342] pvrusb2: Failure uploading firmware1 [ 296.664394][ T2342] pvrusb2: Device initialization was not successful. [ 296.677173][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 296.690762][ T5874] usb 5-1: New USB device found, idVendor=1d6b, idProduct=1301, bcdDevice= 1.40 [ 296.699998][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.718450][ T5874] usb 5-1: Product: syz [ 296.722809][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 296.741514][ T5874] usb 5-1: Manufacturer: syz [ 296.746151][ T5874] usb 5-1: SerialNumber: syz [ 296.756070][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2910'. [ 296.757925][ T1209] pvrusb2: Device being rendered inoperable [ 296.771684][ T10] m920x_read = error: -19 [ 296.776054][ T10] dvb-usb: error while querying for an remote control event. [ 296.901742][ T5901] m920x_read = error: -19 [ 296.906576][ T5901] dvb-usb: error while querying for an remote control event. [ 297.016653][ T5874] usb 5-1: 0:2 : does not exist [ 297.034991][ T5874] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 297.050511][ T1209] m920x_read = error: -19 [ 297.054888][ T1209] dvb-usb: error while querying for an remote control event. [ 297.089785][ T5874] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 297.114900][ T5874] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 297.147673][ T5874] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 297.172710][ T5874] usb 5-1: USB disconnect, device number 20 [ 297.200577][ T5901] m920x_read = error: -19 [ 297.205129][ T5901] dvb-usb: error while querying for an remote control event. [ 297.340641][ T5901] m920x_read = error: -19 [ 297.345444][ T5901] dvb-usb: error while querying for an remote control event. [ 297.460529][ T5874] m920x_read = error: -19 [ 297.464943][ T5874] dvb-usb: error while querying for an remote control event. [ 297.580612][ T5874] m920x_read = error: -19 [ 297.586278][ T5874] dvb-usb: error while querying for an remote control event. [ 297.600598][ T5888] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 297.692766][ T5877] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 297.702290][ T5874] m920x_read = error: -19 [ 297.706681][ T5874] dvb-usb: error while querying for an remote control event. [ 297.762766][ T5888] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.778908][ T5888] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 297.799012][ T5888] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 297.825861][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.834894][ T5874] m920x_read = error: -19 [ 297.844990][ T5874] dvb-usb: error while querying for an remote control event. [ 297.847335][ T5888] usb 7-1: config 0 descriptor?? [ 297.860837][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 297.874262][ T5888] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 297.881292][ T5888] dvb-usb: bulk message failed: -22 (3/0) [ 297.887559][ T5877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 297.897593][ T5888] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 297.907132][ T5888] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 297.915263][ T5888] usb 7-1: media controller created [ 297.923418][ T5877] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 297.932680][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.941545][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.950560][ T5877] usb 3-1: Product: syz [ 297.954793][ T5877] usb 3-1: Manufacturer: syz [ 297.959848][ T5877] usb 3-1: SerialNumber: syz [ 297.961017][ T5874] m920x_read = error: -19 [ 297.974496][ T5888] dvb-usb: bulk message failed: -22 (6/0) [ 297.981418][ T5877] usb 3-1: config 0 descriptor?? [ 297.982069][ T5874] dvb-usb: error while querying for an remote control event. [ 297.986941][ T5888] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 298.012992][ T5888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input36 [ 298.030654][ T5888] dvb-usb: schedule remote query interval to 150 msecs. [ 298.038970][ T5888] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 298.124880][ T5874] m920x_read = error: -19 [ 298.151166][ T5874] dvb-usb: error while querying for an remote control event. [ 298.190666][ T5888] dvb-usb: bulk message failed: -22 (1/0) [ 298.197349][ T5888] dvb-usb: error while querying for an remote control event. [ 298.260538][ T5901] m920x_read = error: -19 [ 298.270480][ T5901] dvb-usb: error while querying for an remote control event. [ 298.375715][ T5901] usb 7-1: USB disconnect, device number 2 [ 298.400695][ T5874] m920x_read = error: -19 [ 298.405182][ T5874] dvb-usb: error while querying for an remote control event. [ 298.413634][ T5877] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 298.430821][ T5877] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 298.461784][ T5901] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 298.520725][ T5874] m920x_read = error: -19 [ 298.525222][ T5874] dvb-usb: error while querying for an remote control event. [ 298.650804][ T5874] m920x_read = error: -19 [ 298.657544][ T5874] dvb-usb: error while querying for an remote control event. [ 298.782171][ T5874] m920x_read = error: -19 [ 298.786800][ T5874] dvb-usb: error while querying for an remote control event. [ 298.900731][ T5874] m920x_read = error: -19 [ 298.939693][ T5874] dvb-usb: error while querying for an remote control event. [ 299.081198][ T5874] m920x_read = error: -19 [ 299.097872][ T5874] dvb-usb: error while querying for an remote control event. [ 299.244664][ T5874] m920x_read = error: -19 [ 299.259802][ T5874] dvb-usb: error while querying for an remote control event. [ 299.400883][ T5874] m920x_read = error: -19 [ 299.405300][ T5874] dvb-usb: error while querying for an remote control event. [ 299.560860][ T5874] m920x_read = error: -19 [ 299.571216][ T5874] dvb-usb: error while querying for an remote control event. [ 299.637387][T12552] pim6reg1: entered promiscuous mode [ 299.644669][T12552] pim6reg1: entered allmulticast mode [ 299.689183][T12558] tipc: Started in network mode [ 299.695471][T12558] tipc: Node identity 6, cluster identity 4711 [ 299.700550][ T5874] m920x_read = error: -19 [ 299.706140][T12558] tipc: Node number set to 6 [ 299.709609][ T5874] dvb-usb: error while querying for an remote control event. [ 299.830716][ T5874] m920x_read = error: -19 [ 299.836247][ T5874] dvb-usb: error while querying for an remote control event. [ 299.970962][ T5874] m920x_read = error: -19 [ 299.975384][ T5874] dvb-usb: error while querying for an remote control event. [ 299.994766][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2949'. [ 300.101351][ T5874] m920x_read = error: -19 [ 300.112340][ T5874] dvb-usb: error while querying for an remote control event. [ 300.230737][ T5901] m920x_read = error: -19 [ 300.236233][ T5901] dvb-usb: error while querying for an remote control event. [ 300.289000][T12581] usb 3-1: USB disconnect, device number 23 [ 300.360785][ T1209] m920x_read = error: -19 [ 300.365186][ T1209] dvb-usb: error while querying for an remote control event. [ 300.373028][ T5874] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 300.421743][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2956'. [ 300.490650][ T1209] m920x_read = error: -19 [ 300.495077][ T1209] dvb-usb: error while querying for an remote control event. [ 300.550608][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 300.565317][ T5874] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 300.588653][ T5874] usb 5-1: config 0 has no interface number 0 [ 300.599404][ T5874] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 300.631499][ T5901] m920x_read = error: -19 [ 300.635924][ T5901] dvb-usb: error while querying for an remote control event. [ 300.650586][ T5874] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 300.680078][ T5874] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 300.706046][ T5874] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 300.736316][ T5874] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 300.758178][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.780736][ T5901] m920x_read = error: -19 [ 300.785139][ T5901] dvb-usb: error while querying for an remote control event. [ 300.809250][ T5874] usb 5-1: config 0 descriptor?? [ 300.841349][ T5874] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 300.923098][ T5874] m920x_read = error: -19 [ 300.928120][ T5874] dvb-usb: error while querying for an remote control event. [ 301.013777][T12597] input: syz1 as /devices/virtual/input/input37 [ 301.038748][ T5874] usb 5-1: USB disconnect, device number 21 [ 301.049242][ T5874] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 301.069176][ T5901] m920x_read = error: -19 [ 301.073925][ T5901] dvb-usb: error while querying for an remote control event. [ 301.102799][ T5891] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 301.200555][ T5901] m920x_read = error: -19 [ 301.262864][T12606] loop6: detected capacity change from 0 to 524287999 [ 301.276992][ T5891] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 301.310971][ T5891] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 301.320514][ T5901] dvb-usb: error while querying for an remote control event. [ 301.335225][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.358614][ T5891] usb 6-1: Product: syz [ 301.368490][ T5891] usb 6-1: Manufacturer: syz [ 301.377920][ T5891] usb 6-1: SerialNumber: syz [ 301.387050][ T5891] usb 6-1: config 0 descriptor?? [ 301.431115][ T5874] m920x_read = error: -19 [ 301.435516][ T5874] dvb-usb: error while querying for an remote control event. [ 301.567610][ T5874] m920x_read = error: -19 [ 301.572161][ T5874] dvb-usb: error while querying for an remote control event. [ 301.680551][ T5874] m920x_read = error: -19 [ 301.684956][ T5874] dvb-usb: error while querying for an remote control event. [ 301.712413][ T5891] usb 6-1: USB disconnect, device number 7 [ 301.807629][T12625] loop6: detected capacity change from 0 to 524287999 [ 301.830716][ T5901] m920x_read = error: -19 [ 301.835196][ T5901] dvb-usb: error while querying for an remote control event. [ 301.951212][ T5901] m920x_read = error: -19 [ 301.955750][ T5901] dvb-usb: error while querying for an remote control event. [ 301.989815][T12631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2976'. [ 302.090708][ T5901] m920x_read = error: -19 [ 302.096076][ T5901] dvb-usb: error while querying for an remote control event. [ 302.221727][ T5901] m920x_read = error: -19 [ 302.237469][ T5901] dvb-usb: error while querying for an remote control event. [ 302.391559][ T10] m920x_read = error: -19 [ 302.399321][ T10] dvb-usb: error while querying for an remote control event. [ 302.540670][ T10] m920x_read = error: -19 [ 302.545074][ T10] dvb-usb: error while querying for an remote control event. [ 302.650770][ T30] kauditd_printk_skb: 226 callbacks suppressed [ 302.650786][ T30] audit: type=1326 audit(1748283628.602:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12654 comm="syz.4.2989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81afb8e969 code=0x0 [ 302.694622][ T10] m920x_read = error: -19 [ 302.702807][ T10] dvb-usb: error while querying for an remote control event. [ 302.736015][T12658] block nbd0: Dead connection, failed to find a fallback [ 302.768491][T12658] block nbd0: shutting down sockets [ 302.810846][ T5901] m920x_read = error: -19 [ 302.813700][T12658] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 302.817534][ T5901] dvb-usb: error while querying for an remote control event. [ 302.849374][T12658] Buffer I/O error on dev nbd0, logical block 0, async page read [ 302.888623][T12658] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 302.935282][T12658] Buffer I/O error on dev nbd0, logical block 0, async page read [ 302.950095][T12658] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 302.980511][ T5901] m920x_read = error: -19 [ 302.993643][ T5901] dvb-usb: error while querying for an remote control event. [ 303.009908][T12658] Buffer I/O error on dev nbd0, logical block 0, async page read [ 303.019446][T12658] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.050608][T12658] Buffer I/O error on dev nbd0, logical block 0, async page read [ 303.069036][T12658] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.099659][T12658] Buffer I/O error on dev nbd0, logical block 0, async page read [ 303.112685][T12658] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.131066][ T5901] m920x_read = error: -19 [ 303.138542][ T5901] dvb-usb: error while querying for an remote control event. [ 303.222254][T12658] Buffer I/O error on dev nbd0, logical block 0, async page read [ 303.245304][T12658] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.260516][ T5901] m920x_read = error: -19 [ 303.265035][ T5901] dvb-usb: error while querying for an remote control event. [ 303.278911][T12658] Buffer I/O error on dev nbd0, logical block 0, async page read [ 303.312834][T12658] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.350151][T12658] Buffer I/O error on dev nbd0, logical block 0, async page read [ 303.378346][T12658] ldm_validate_partition_table(): Disk read failed. [ 303.401540][ T5901] m920x_read = error: -19 [ 303.401548][T12658] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.424296][ T5901] dvb-usb: error while querying for an remote control event. [ 303.432350][T12658] Buffer I/O error on dev nbd0, logical block 0, async page read [ 303.451031][T12658] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.484474][T12658] Buffer I/O error on dev nbd0, logical block 0, async page read [ 303.516889][T12658] Dev nbd0: unable to read RDB block 0 [ 303.555292][T12658] nbd0: unable to read partition table [ 303.560536][ T5901] m920x_read = error: -19 [ 303.565315][ T5901] dvb-usb: error while querying for an remote control event. [ 303.680670][ T5901] m920x_read = error: -19 [ 303.685077][ T5901] dvb-usb: error while querying for an remote control event. [ 303.812485][ T5901] m920x_read = error: -19 [ 303.817712][ T5901] dvb-usb: error while querying for an remote control event. [ 303.960967][ T5901] m920x_read = error: -19 [ 303.994724][ T5901] dvb-usb: error while querying for an remote control event. [ 304.121806][ T5901] m920x_read = error: -19 [ 304.127080][ T5901] dvb-usb: error while querying for an remote control event. [ 304.270532][ T5901] m920x_read = error: -19 [ 304.274938][ T5901] dvb-usb: error while querying for an remote control event. [ 304.365498][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3015'. [ 304.400527][ T5901] m920x_read = error: -19 [ 304.404930][ T5901] dvb-usb: error while querying for an remote control event. [ 304.544056][ T10] m920x_read = error: -19 [ 304.551933][ T10] dvb-usb: error while querying for an remote control event. [ 304.568874][T12714] team0: Port device team_slave_1 removed [ 304.573569][T12727] input: syz0 as /devices/virtual/input/input38 [ 304.680877][ T10] m920x_read = error: -19 [ 304.687595][ T10] dvb-usb: error while querying for an remote control event. [ 304.820651][ T10] m920x_read = error: -19 [ 304.832802][ T10] dvb-usb: error while querying for an remote control event. [ 304.837289][T12736] input: syz0 as /devices/virtual/input/input39 [ 304.970613][ T10] m920x_read = error: -19 [ 304.978573][ T10] dvb-usb: error while querying for an remote control event. [ 305.090618][ T10] m920x_read = error: -19 [ 305.095008][ T10] dvb-usb: error while querying for an remote control event. [ 305.119114][T12750] loop6: detected capacity change from 0 to 524287999 [ 305.210464][ T30] audit: type=1326 audit(1748283631.142:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12716 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0378e969 code=0x7fc00000 [ 305.210572][ T10] m920x_read = error: -19 [ 305.290038][ T10] dvb-usb: error while querying for an remote control event. [ 305.430553][ T10] m920x_read = error: -19 [ 305.435625][ T10] dvb-usb: error while querying for an remote control event. [ 305.504470][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3035'. [ 305.572561][ T10] m920x_read = error: -19 [ 305.576965][ T10] dvb-usb: error while querying for an remote control event. [ 305.706639][T12763] team0: Port device team_slave_1 removed [ 305.724713][ T10] m920x_read = error: -19 [ 305.742818][ T10] dvb-usb: error while querying for an remote control event. [ 305.860643][ T10] m920x_read = error: -19 [ 305.875461][ T10] dvb-usb: error while querying for an remote control event. [ 306.011057][ T10] m920x_read = error: -19 [ 306.020831][ T10] dvb-usb: error while querying for an remote control event. [ 306.035046][T12781] loop6: detected capacity change from 0 to 524287999 [ 306.140657][ T10] m920x_read = error: -19 [ 306.148885][ T10] dvb-usb: error while querying for an remote control event. [ 306.270586][ T10] m920x_read = error: -19 [ 306.276029][ T10] dvb-usb: error while querying for an remote control event. [ 306.369726][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.380804][ T5888] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 306.398461][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.400883][ T10] m920x_read = error: -19 [ 306.412085][ T10] dvb-usb: error while querying for an remote control event. [ 306.464838][T12804] binder: 12803:12804 ioctl c0306201 2000000003c0 returned -14 [ 306.496635][T12806] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 306.508353][T12806] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 306.524875][ T10] m920x_read = error: -19 [ 306.529364][ T10] dvb-usb: error while querying for an remote control event. [ 306.560538][ T5888] usb 7-1: Using ep0 maxpacket: 8 [ 306.568470][ T5888] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 306.587058][ T5888] usb 7-1: config 0 has no interface number 0 [ 306.597165][ T5888] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 306.620075][ T5888] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 306.645498][ T5888] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.660620][ T10] m920x_read = error: -19 [ 306.667107][ T10] dvb-usb: error while querying for an remote control event. [ 306.670998][ T5888] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 306.705855][ T5888] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 306.716207][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.732728][ T5888] usb 7-1: config 0 descriptor?? [ 306.743876][ T5888] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 306.803848][ T10] m920x_read = error: -19 [ 306.820211][ T10] dvb-usb: error while querying for an remote control event. [ 306.952532][ T10] m920x_read = error: -19 [ 306.956929][ T10] dvb-usb: error while querying for an remote control event. [ 306.963031][ T5888] usb 7-1: USB disconnect, device number 3 [ 306.994304][ T5888] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 307.072274][ T10] m920x_read = error: -19 [ 307.094176][ T10] dvb-usb: error while querying for an remote control event. [ 307.231137][ T10] m920x_read = error: -19 [ 307.235546][ T10] dvb-usb: error while querying for an remote control event. [ 307.360747][ T5901] m920x_read = error: -19 [ 307.368862][ T5901] dvb-usb: error while querying for an remote control event. [ 307.480735][ T5901] m920x_read = error: -19 [ 307.495121][ T5901] dvb-usb: error while querying for an remote control event. [ 307.540650][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 307.620622][ T5874] m920x_read = error: -19 [ 307.625046][ T5874] dvb-usb: error while querying for an remote control event. [ 307.740606][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 307.790526][ T5874] m920x_read = error: -19 [ 307.794956][ T5874] dvb-usb: error while querying for an remote control event. [ 307.813409][ T10] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 307.833550][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.850497][ T10] usb 6-1: Product: syz [ 307.860795][ T10] usb 6-1: Manufacturer: syz [ 307.866597][ T10] usb 6-1: SerialNumber: syz [ 307.887161][ T10] usb 6-1: config 0 descriptor?? [ 307.946699][ T5874] m920x_read = error: -19 [ 307.951979][ T5874] dvb-usb: error while querying for an remote control event. [ 308.060654][ T5901] m920x_read = error: -19 [ 308.065066][ T5901] dvb-usb: error while querying for an remote control event. [ 308.190639][ T5901] m920x_read = error: -19 [ 308.208909][ T5901] dvb-usb: error while querying for an remote control event. [ 308.233605][T12879] loop6: detected capacity change from 0 to 524287999 [ 308.313181][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 308.339156][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.350566][ T5901] m920x_read = error: -19 [ 308.359143][ T5901] dvb-usb: error while querying for an remote control event. [ 308.399094][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 308.422923][ T10] usb 6-1: media controller created [ 308.496462][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.505786][ T5901] m920x_read = error: -19 [ 308.510438][ T5901] dvb-usb: error while querying for an remote control event. [ 308.562047][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 308.569373][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 308.577474][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 308.588641][ T10] usb 6-1: USB disconnect, device number 8 [ 308.626279][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 308.640314][ T5901] m920x_read = error: -19 [ 308.645200][ T5901] dvb-usb: error while querying for an remote control event. [ 308.754954][T12886] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3076'. [ 308.764482][ T5901] m920x_read = error: -19 [ 308.780482][ T5901] dvb-usb: error while querying for an remote control event. [ 308.850661][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 308.856821][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 308.908028][ T10] m920x_read = error: -19 [ 308.917789][ T10] dvb-usb: error while querying for an remote control event. [ 309.030597][ T5901] m920x_read = error: -19 [ 309.039558][ T5901] dvb-usb: error while querying for an remote control event. [ 309.189273][ T5901] m920x_read = error: -19 [ 309.209356][T12891] syzkaller1: entered promiscuous mode [ 309.215051][ T5901] dvb-usb: error while querying for an remote control event. [ 309.226232][T12891] syzkaller1: entered allmulticast mode [ 309.347327][ T5901] m920x_read = error: -19 [ 309.370582][ T5901] dvb-usb: error while querying for an remote control event. [ 309.501971][ T10] m920x_read = error: -19 [ 309.506464][ T10] dvb-usb: error while querying for an remote control event. [ 309.670528][ T5901] m920x_read = error: -19 [ 309.675051][ T5901] dvb-usb: error while querying for an remote control event. [ 309.804623][ T5901] m920x_read = error: -19 [ 309.809061][ T5901] dvb-usb: error while querying for an remote control event. [ 309.956348][ T5901] m920x_read = error: -19 [ 309.966402][ T5901] dvb-usb: error while querying for an remote control event. [ 310.111410][ T10] m920x_read = error: -19 [ 310.115899][ T10] dvb-usb: error while querying for an remote control event. [ 310.290624][ T10] m920x_read = error: -19 [ 310.295069][ T10] dvb-usb: error while querying for an remote control event. [ 310.311020][ T5888] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 310.410578][ T10] m920x_read = error: -19 [ 310.415130][ T10] dvb-usb: error while querying for an remote control event. [ 310.486869][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 310.504050][ T5888] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 310.524151][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.530819][ T10] m920x_read = error: -19 [ 310.536921][ T10] dvb-usb: error while querying for an remote control event. [ 310.547896][ T5888] pvrusb2: Hardware description: Terratec Grabster AV400 [ 310.562073][ T5888] pvrusb2: ********** [ 310.568455][ T5888] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 310.589352][ T5888] pvrusb2: Important functionality might not be entirely working. [ 310.608594][ T5888] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 310.640626][ T5888] pvrusb2: ********** [ 310.670975][ T10] m920x_read = error: -19 [ 310.675620][ T10] dvb-usb: error while querying for an remote control event. [ 310.754155][ T2342] pvrusb2: Invalid write control endpoint [ 310.791326][ T5901] m920x_read = error: -19 [ 310.796267][ T5901] dvb-usb: error while querying for an remote control event. [ 310.921563][ T5901] m920x_read = error: -19 [ 310.925962][ T5901] dvb-usb: error while querying for an remote control event. [ 310.970922][ T5888] usb 6-1: USB disconnect, device number 9 [ 310.986888][ T2342] pvrusb2: Invalid write control endpoint [ 311.001749][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 311.035436][ T5877] kernel read not supported for file /video37 (pid: 5877 comm: kworker/1:4) [ 311.040116][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 311.065344][ T5901] m920x_read = error: -19 [ 311.069817][ T5901] dvb-usb: error while querying for an remote control event. [ 311.099026][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 311.248326][ T5901] m920x_read = error: -19 [ 311.268660][ T5901] dvb-usb: error while querying for an remote control event. [ 311.280453][ T2342] pvrusb2: Device being rendered inoperable [ 311.298242][ T2342] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 311.328016][ T2342] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 311.365469][ T2342] pvrusb2: Attached sub-driver cx25840 [ 311.376553][T12955] syzkaller1: entered promiscuous mode [ 311.384165][T12955] syzkaller1: entered allmulticast mode [ 311.392905][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 311.405500][ T5874] m920x_read = error: -19 [ 311.409935][ T5874] dvb-usb: error while querying for an remote control event. [ 311.434945][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 311.570109][ T5901] m920x_read = error: -19 [ 311.580170][ T5901] dvb-usb: error while querying for an remote control event. [ 311.710664][ T5901] m920x_read = error: -19 [ 311.715875][ T5901] dvb-usb: error while querying for an remote control event. [ 311.853694][ T5901] m920x_read = error: -19 [ 311.865054][ T5901] dvb-usb: error while querying for an remote control event. [ 311.912578][ T30] audit: type=1326 audit(1748283637.862:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12968 comm="syz.2.3112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e6c98e969 code=0x0 [ 311.963898][ T30] audit: type=1326 audit(1748283637.912:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12968 comm="syz.2.3112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f1e6c98e969 code=0x0 [ 311.986911][ T5833] Bluetooth: hci5: command 0x1003 tx timeout [ 311.993564][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 312.003300][ T5901] m920x_read = error: -19 [ 312.017990][ T5901] dvb-usb: error while querying for an remote control event. [ 312.140524][ T5901] m920x_read = error: -19 [ 312.145162][ T5901] dvb-usb: error while querying for an remote control event. [ 312.270671][ T5901] m920x_read = error: -19 [ 312.279793][ T5901] dvb-usb: error while querying for an remote control event. [ 312.401342][ T5901] m920x_read = error: -19 [ 312.405737][ T5901] dvb-usb: error while querying for an remote control event. [ 312.530705][ T5901] m920x_read = error: -19 [ 312.544180][T12984] input: syz0 as /devices/virtual/input/input40 [ 312.570734][ T5901] dvb-usb: error while querying for an remote control event. [ 312.691099][ T5901] m920x_read = error: -19 [ 312.705776][ T5901] dvb-usb: error while querying for an remote control event. [ 312.844614][ T5874] m920x_read = error: -19 [ 312.860518][ T5874] dvb-usb: error while querying for an remote control event. [ 312.970582][ T5874] m920x_read = error: -19 [ 312.974997][ T5874] dvb-usb: error while querying for an remote control event. [ 313.111508][T13007] loop8: detected capacity change from 0 to 8 [ 313.120545][ T5874] m920x_read = error: -19 [ 313.130758][T13007] Dev loop8: unable to read RDB block 8 [ 313.136360][ T5874] dvb-usb: error while querying for an remote control event. [ 313.173342][T13007] loop8: unable to read partition table [ 313.198856][T13007] loop8: partition table beyond EOD, truncated [ 313.212300][T13007] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 313.240869][ T5874] m920x_read = error: -19 [ 313.247856][ T5874] dvb-usb: error while querying for an remote control event. [ 313.390592][ T5874] m920x_read = error: -19 [ 313.395025][ T5874] dvb-usb: error while querying for an remote control event. [ 313.540881][ T5874] m920x_read = error: -19 [ 313.551306][ T5874] dvb-usb: error while querying for an remote control event. [ 313.702327][ T5874] m920x_read = error: -19 [ 313.712193][ T5874] dvb-usb: error while querying for an remote control event. [ 313.840501][ T5901] m920x_read = error: -19 [ 313.850436][ T5901] dvb-usb: error while querying for an remote control event. [ 313.990545][ T5901] m920x_read = error: -19 [ 313.997775][ T5901] dvb-usb: error while querying for an remote control event. [ 314.142189][ T5901] m920x_read = error: -19 [ 314.171358][ T5901] dvb-usb: error while querying for an remote control event. [ 314.280864][ T5874] m920x_read = error: -19 [ 314.285294][ T5874] dvb-usb: error while querying for an remote control event. [ 314.461506][ T5874] m920x_read = error: -19 [ 314.494964][ T5874] dvb-usb: error while querying for an remote control event. [ 314.630674][ T5901] m920x_read = error: -19 [ 314.635083][ T5901] dvb-usb: error while querying for an remote control event. [ 314.780665][ T5901] m920x_read = error: -19 [ 314.785072][ T5901] dvb-usb: error while querying for an remote control event. [ 314.923923][ T5874] m920x_read = error: -19 [ 314.928361][ T5874] dvb-usb: error while querying for an remote control event. [ 315.070513][ T5874] m920x_read = error: -19 [ 315.075012][ T5874] dvb-usb: error while querying for an remote control event. [ 315.170569][ T5901] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 315.190642][ T10] m920x_read = error: -19 [ 315.195041][ T10] dvb-usb: error while querying for an remote control event. [ 315.310903][ T5874] m920x_read = error: -19 [ 315.315329][ T5874] dvb-usb: error while querying for an remote control event. [ 315.350648][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 315.380869][ T5901] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 315.411002][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.419106][ T5901] usb 6-1: Product: syz [ 315.447355][ T5901] usb 6-1: Manufacturer: syz [ 315.460596][ T5874] m920x_read = error: -19 [ 315.464985][ T5874] dvb-usb: error while querying for an remote control event. [ 315.478078][ T5901] usb 6-1: SerialNumber: syz [ 315.493930][ T5901] usb 6-1: config 0 descriptor?? [ 315.506987][ T5901] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 315.602878][ T5874] m920x_read = error: -19 [ 315.607334][ T5874] dvb-usb: error while querying for an remote control event. [ 315.750865][ T5874] m920x_read = error: -19 [ 315.755402][ T5874] dvb-usb: error while querying for an remote control event. [ 315.880608][ T5874] m920x_read = error: -19 [ 315.885066][ T5874] dvb-usb: error while querying for an remote control event. [ 316.001087][ T5874] m920x_read = error: -19 [ 316.007525][ T5874] dvb-usb: error while querying for an remote control event. [ 316.130716][ T5874] m920x_read = error: -19 [ 316.135182][ T5874] dvb-usb: error while querying for an remote control event. [ 316.271945][ T5874] m920x_read = error: -19 [ 316.280500][ T5874] dvb-usb: error while querying for an remote control event. [ 316.400662][ T5874] m920x_read = error: -19 [ 316.405098][ T5874] dvb-usb: error while querying for an remote control event. [ 316.513516][ T5901] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 316.543114][ T5901] usb 6-1: USB disconnect, device number 10 [ 316.550645][ T5874] m920x_read = error: -19 [ 316.565288][ T5874] dvb-usb: error while querying for an remote control event. [ 316.640279][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3163'. [ 316.690935][ T5874] m920x_read = error: -19 [ 316.695765][ T5874] dvb-usb: error while querying for an remote control event. [ 316.787608][T13100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.832936][ T5901] m920x_read = error: -19 [ 316.837338][ T5901] dvb-usb: error while querying for an remote control event. [ 316.962096][ T5901] m920x_read = error: -19 [ 316.966511][ T5901] dvb-usb: error while querying for an remote control event. [ 317.101802][ T5901] m920x_read = error: -19 [ 317.111309][ T5901] dvb-usb: error while querying for an remote control event. [ 317.251081][ T5901] m920x_read = error: -19 [ 317.255502][ T5901] dvb-usb: error while querying for an remote control event. [ 317.335750][ T5888] IPVS: starting estimator thread 0... [ 317.386228][T13130] tipc: Started in network mode [ 317.390797][ T5874] m920x_read = error: -19 [ 317.395766][ T5874] dvb-usb: error while querying for an remote control event. [ 317.395818][T13130] tipc: Node identity ac1414aa, cluster identity 4711 [ 317.440722][T13131] IPVS: using max 26 ests per chain, 62400 per kthread [ 317.441981][T13130] tipc: Enabled bearer , priority 10 [ 317.520986][ T5874] m920x_read = error: -19 [ 317.525403][ T5874] dvb-usb: error while querying for an remote control event. [ 317.628827][ T5837] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 317.651877][ T5874] m920x_read = error: -19 [ 317.660520][ T5874] dvb-usb: error while querying for an remote control event. [ 317.780586][ T5874] m920x_read = error: -19 [ 317.784990][ T5874] dvb-usb: error while querying for an remote control event. [ 317.928474][ T5874] m920x_read = error: -19 [ 317.933009][ T5874] dvb-usb: error while querying for an remote control event. [ 317.956491][T13157] ALSA: mixer_oss: invalid OSS volume '' [ 318.061297][ T5901] m920x_read = error: -19 [ 318.065715][ T5901] dvb-usb: error while querying for an remote control event. [ 318.140604][ T5891] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 318.147420][T13166] vlan2: entered promiscuous mode [ 318.190584][ T5901] m920x_read = error: -19 [ 318.195260][ T5901] dvb-usb: error while querying for an remote control event. [ 318.300636][ T5888] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 318.313658][ T5901] m920x_read = error: -19 [ 318.318255][ T5901] dvb-usb: error while querying for an remote control event. [ 318.329537][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 318.331537][ T5891] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 318.385538][ T5891] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 318.420727][ T5891] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 318.429825][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.446905][T13154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 318.470573][ T5874] m920x_read = error: -19 [ 318.471581][ T5891] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 318.495921][ T5874] dvb-usb: error while querying for an remote control event. [ 318.521161][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.562845][ T978] tipc: Node number set to 2886997162 [ 318.575479][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.597614][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.620552][ T5874] m920x_read = error: -19 [ 318.624950][ T5874] dvb-usb: error while querying for an remote control event. [ 318.635956][ T5888] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.666725][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.706184][ T30] audit: type=1400 audit(1748283644.642:474): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=13176 comm="syz.2.3198" path="/proc/400/task/401/net/ptype" dev="proc" ino=4026532897 [ 318.738983][ T5888] usb 7-1: config 0 descriptor?? [ 318.760825][ T5874] m920x_read = error: -19 [ 318.769479][ T5874] dvb-usb: error while querying for an remote control event. [ 318.807686][ T5891] usb 2-1: USB disconnect, device number 23 [ 318.891023][ T5874] m920x_read = error: -19 [ 318.902921][ T5874] dvb-usb: error while querying for an remote control event. [ 318.923713][T13185] xt_hashlimit: size too large, truncated to 1048576 [ 318.934348][T13185] xt_hashlimit: max too large, truncated to 1048576 [ 319.021628][ T1209] m920x_read = error: -19 [ 319.028984][ T1209] dvb-usb: error while querying for an remote control event. [ 319.083970][T13189] block nbd5: NBD_DISCONNECT [ 319.090625][T13189] block nbd5: Send disconnect failed -22 [ 319.108269][T13188] block nbd5: Disconnected due to user request. [ 319.117974][T13188] block nbd5: shutting down sockets [ 319.150593][ T1209] m920x_read = error: -19 [ 319.155534][ T1209] dvb-usb: error while querying for an remote control event. [ 319.179735][ T5888] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 319.216276][ T5888] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 319.271744][ T1209] m920x_read = error: -19 [ 319.276152][ T1209] dvb-usb: error while querying for an remote control event. [ 319.411458][ T1209] m920x_read = error: -19 [ 319.415878][ T1209] dvb-usb: error while querying for an remote control event. [ 319.478152][ T5888] usb 7-1: USB disconnect, device number 4 [ 319.541104][ T1209] m920x_read = error: -19 [ 319.552621][ T1209] dvb-usb: error while querying for an remote control event. [ 319.577451][T13211] input: syz0 as /devices/virtual/input/input42 [ 319.691074][ T1209] m920x_read = error: -19 [ 319.697849][ T1209] dvb-usb: error while querying for an remote control event. [ 319.836659][ T1209] m920x_read = error: -19 [ 319.846598][ T1209] dvb-usb: error while querying for an remote control event. [ 319.970614][ T1209] m920x_read = error: -19 [ 319.975416][ T1209] dvb-usb: error while querying for an remote control event. [ 320.136644][ T1209] m920x_read = error: -19 [ 320.156598][ T1209] dvb-usb: error while querying for an remote control event. [ 320.320625][ T1209] m920x_read = error: -19 [ 320.325030][ T1209] dvb-usb: error while querying for an remote control event. [ 320.450628][ T5874] m920x_read = error: -19 [ 320.455131][ T5874] dvb-usb: error while querying for an remote control event. [ 320.481130][ T5888] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 320.520209][T13261] sctp: [Deprecated]: syz.2.3238 (pid 13261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.520209][T13261] Use struct sctp_sack_info instead [ 320.580561][ T5874] m920x_read = error: -19 [ 320.584970][ T5874] dvb-usb: error while querying for an remote control event. [ 320.672103][ T5888] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 320.692855][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.708531][ T5888] usb 6-1: Product: syz [ 320.713287][ T5888] usb 6-1: Manufacturer: syz [ 320.717983][ T5888] usb 6-1: SerialNumber: syz [ 320.720751][ T5901] m920x_read = error: -19 [ 320.731400][ T5901] dvb-usb: error while querying for an remote control event. [ 320.733278][ T5888] usb 6-1: config 0 descriptor?? [ 320.770285][T13271] syzkaller1: entered promiscuous mode [ 320.776510][T13271] syzkaller1: entered allmulticast mode [ 320.800634][ T978] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 320.843677][ T5901] m920x_read = error: -19 [ 320.848128][ T5901] dvb-usb: error while querying for an remote control event. [ 320.920553][ T5874] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 320.970888][ T1209] m920x_read = error: -19 [ 320.975347][ T978] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 320.975446][ T1209] dvb-usb: error while querying for an remote control event. [ 320.993245][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.013586][ T5888] usb 6-1: USB disconnect, device number 11 [ 321.038027][ T978] usb 5-1: config 0 descriptor?? [ 321.080702][ T5874] usb 7-1: Using ep0 maxpacket: 8 [ 321.113135][ T5874] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 321.132865][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.142176][ T5901] m920x_read = error: -19 [ 321.146553][ T5901] dvb-usb: error while querying for an remote control event. [ 321.154209][ T5874] usb 7-1: Product: syz [ 321.158399][ T5874] usb 7-1: Manufacturer: syz [ 321.167109][ T5874] usb 7-1: SerialNumber: syz [ 321.177956][ T5874] usb 7-1: config 0 descriptor?? [ 321.188674][ T5874] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 321.264607][T13286] netlink: 'syz.2.3250': attribute type 24 has an invalid length. [ 321.270755][ T5901] m920x_read = error: -19 [ 321.280664][ T5901] dvb-usb: error while querying for an remote control event. [ 321.401328][ T5901] m920x_read = error: -19 [ 321.409816][ T5901] dvb-usb: error while querying for an remote control event. [ 321.540587][ T5901] m920x_read = error: -19 [ 321.545168][ T5901] dvb-usb: error while querying for an remote control event. [ 321.656758][ T5888] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 321.660617][ T5901] m920x_read = error: -19 [ 321.678996][ T5901] dvb-usb: error while querying for an remote control event. [ 321.803329][ T5901] m920x_read = error: -19 [ 321.807817][ T5901] dvb-usb: error while querying for an remote control event. [ 321.815769][T13300] input: syz0 as /devices/virtual/input/input43 [ 321.840587][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 321.849169][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.860956][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.871348][T13302] syzkaller1: entered promiscuous mode [ 321.876880][T13302] syzkaller1: entered allmulticast mode [ 321.899141][ T5888] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 321.923100][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.931030][ T5901] m920x_read = error: -19 [ 321.936992][ T5888] usb 2-1: config 0 descriptor?? [ 321.940741][ T5901] dvb-usb: error while querying for an remote control event. [ 322.060735][ T5901] m920x_read = error: -19 [ 322.073360][ T5901] dvb-usb: error while querying for an remote control event. [ 322.098660][ T978] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 322.120209][ T978] asix 5-1:0.0: probe with driver asix failed with error -71 [ 322.139613][ T978] usb 5-1: USB disconnect, device number 22 [ 322.196967][ T5874] gspca_sonixj: reg_w1 err -71 [ 322.203212][ T5901] m920x_read = error: -19 [ 322.218538][ T5901] dvb-usb: error while querying for an remote control event. [ 322.330648][ T5874] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 322.351681][ T5874] usb 7-1: USB disconnect, device number 5 [ 322.378290][ T5888] playstation 0003:054C:05C4.001B: unknown main item tag 0x0 [ 322.402586][ T5888] playstation 0003:054C:05C4.001B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 322.460493][ T5901] m920x_read = error: -19 [ 322.464894][ T5901] dvb-usb: error while querying for an remote control event. [ 322.574834][ T5888] playstation 0003:054C:05C4.001B: Failed to retrieve feature with reportID 18: -71 [ 322.582071][ T5874] m920x_read = error: -19 [ 322.585490][ T5888] playstation 0003:054C:05C4.001B: Failed to retrieve DualShock4 pairing info: -71 [ 322.588675][ T5874] dvb-usb: error while querying for an remote control event. [ 322.598252][ T5888] playstation 0003:054C:05C4.001B: Failed to get MAC address from DualShock4 [ 322.635358][ T5888] playstation 0003:054C:05C4.001B: Failed to create dualshock4. [ 322.657203][ T5888] playstation 0003:054C:05C4.001B: probe with driver playstation failed with error -71 [ 322.690175][ T5888] usb 2-1: USB disconnect, device number 24 [ 322.730666][ T5901] m920x_read = error: -19 [ 322.736682][ T5901] dvb-usb: error while querying for an remote control event. [ 322.860650][ T5901] m920x_read = error: -19 [ 322.874522][ T5901] dvb-usb: error while querying for an remote control event. [ 323.013420][ T5901] m920x_read = error: -19 [ 323.017913][ T5901] dvb-usb: error while querying for an remote control event. [ 323.130604][ T5901] m920x_read = error: -19 [ 323.138370][ T5901] dvb-usb: error while querying for an remote control event. [ 323.260575][ T5874] m920x_read = error: -19 [ 323.265320][ T5874] dvb-usb: error while querying for an remote control event. [ 323.382646][ T5874] m920x_read = error: -19 [ 323.407451][ T5874] dvb-usb: error while querying for an remote control event. [ 323.448499][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'. [ 323.469976][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3275'. [ 323.540647][ T5874] m920x_read = error: -19 [ 323.545260][ T5874] dvb-usb: error while querying for an remote control event. [ 323.680715][ T5874] m920x_read = error: -19 [ 323.691167][ T5874] dvb-usb: error while querying for an remote control event. [ 323.820832][ T5874] m920x_read = error: -19 [ 323.830660][ T5874] dvb-usb: error while querying for an remote control event. [ 323.960650][ T5874] m920x_read = error: -19 [ 323.965594][ T5874] dvb-usb: error while querying for an remote control event. [ 324.110508][ T5874] m920x_read = error: -19 [ 324.115005][ T5874] dvb-usb: error while querying for an remote control event. [ 324.252125][ T5874] m920x_read = error: -19 [ 324.256553][ T5874] dvb-usb: error while querying for an remote control event. [ 324.380602][ T5874] m920x_read = error: -19 [ 324.385008][ T5874] dvb-usb: error while querying for an remote control event. [ 324.500501][ T5874] m920x_read = error: -19 [ 324.505825][ T5874] dvb-usb: error while querying for an remote control event. [ 324.520810][ T52] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 324.630580][ T1209] m920x_read = error: -19 [ 324.635013][ T1209] dvb-usb: error while querying for an remote control event. [ 324.711862][ T52] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.733268][ T52] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 324.750627][ T1209] m920x_read = error: -19 [ 324.755008][ T1209] dvb-usb: error while querying for an remote control event. [ 324.771094][ T52] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 324.809481][ T52] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x87 has invalid maxpacket 42124, setting to 1024 [ 324.845255][ T52] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 324.866023][ T52] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.887902][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.908108][ T1209] m920x_read = error: -19 [ 324.916736][ T52] usb 2-1: Product: syz [ 324.917116][ T1209] dvb-usb: error while querying for an remote control event. [ 324.931101][ T52] usb 2-1: Manufacturer: syz [ 324.940808][ T52] usb 2-1: SerialNumber: syz [ 325.091022][ T1209] m920x_read = error: -19 [ 325.095808][ T1209] dvb-usb: error while querying for an remote control event. [ 325.220546][ T1209] m920x_read = error: -19 [ 325.221050][T13374] sctp: [Deprecated]: syz.6.3291 (pid 13374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.221050][T13374] Use struct sctp_sack_info instead [ 325.224934][ T1209] dvb-usb: error while querying for an remote control event. [ 325.330689][ T1209] m920x_read = error: -19 [ 325.337710][ T1209] dvb-usb: error while querying for an remote control event. [ 325.477477][ T5874] m920x_read = error: -19 [ 325.482118][ T5874] dvb-usb: error while querying for an remote control event. [ 325.489838][T13381] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3294'. [ 325.590646][ T5874] m920x_read = error: -19 [ 325.595052][ T5874] dvb-usb: error while querying for an remote control event. [ 325.715111][ T5874] m920x_read = error: -19 [ 325.719546][ T5874] dvb-usb: error while querying for an remote control event. [ 325.850698][ T5901] m920x_read = error: -19 [ 325.855207][ T5901] dvb-usb: error while querying for an remote control event. [ 325.917190][T13391] ALSA: seq fatal error: cannot create timer (-19) [ 325.970787][ T5901] m920x_read = error: -19 [ 325.975219][ T5901] dvb-usb: error while querying for an remote control event. [ 325.982767][ T52] cdc_ncm 2-1:1.0: bind() failure [ 325.987893][ T52] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 326.008508][ T52] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 326.034393][ T52] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 326.060598][ T5874] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 326.061051][ T52] usb 2-1: USB disconnect, device number 25 [ 326.110688][ T5901] m920x_read = error: -19 [ 326.115088][ T5901] dvb-usb: error while querying for an remote control event. [ 326.225153][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 326.240815][ T5901] m920x_read = error: -19 [ 326.246240][ T5901] dvb-usb: error while querying for an remote control event. [ 326.270850][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.290859][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.320653][ T5874] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 326.329762][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.346886][ T5874] usb 5-1: config 0 descriptor?? [ 326.390690][ T1209] m920x_read = error: -19 [ 326.395095][ T1209] dvb-usb: error while querying for an remote control event. [ 326.541037][ T1209] m920x_read = error: -19 [ 326.545535][ T1209] dvb-usb: error while querying for an remote control event. [ 326.680658][ T1209] m920x_read = error: -19 [ 326.685196][ T1209] dvb-usb: error while querying for an remote control event. [ 326.768825][ T5874] hid-picolcd 0003:04D8:F002.001C: unknown main item tag 0x0 [ 326.821997][ T1209] m920x_read = error: -19 [ 326.826497][ T1209] dvb-usb: error while querying for an remote control event. [ 326.840565][ T5874] hid-picolcd 0003:04D8:F002.001C: No report with id 0xf3 found [ 326.858591][ T5874] hid-picolcd 0003:04D8:F002.001C: No report with id 0xf4 found [ 326.940624][ T5874] m920x_read = error: -19 [ 326.949073][ T5874] dvb-usb: error while querying for an remote control event. [ 326.969777][ T5874] usb 5-1: USB disconnect, device number 23 [ 327.009412][T13425] loop6: detected capacity change from 0 to 63 [ 327.019837][T13425] buffer_io_error: 6 callbacks suppressed [ 327.019856][T13425] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 327.028842][T12199] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 327.063664][T13425] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 327.072284][ T1209] m920x_read = error: -19 [ 327.076799][ T1209] dvb-usb: error while querying for an remote control event. [ 327.076811][T12199] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 327.096838][T13425] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 327.120843][T13425] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 327.122443][T12199] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 327.139834][T13428] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 327.190749][ T5874] m920x_read = error: -19 [ 327.195156][ T5874] dvb-usb: error while querying for an remote control event. [ 327.271095][T13437] [ 327.273477][T13437] ===================================================== [ 327.280430][T13437] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 327.287894][T13437] 6.15.0-syzkaller #0 Not tainted [ 327.292921][T13437] ----------------------------------------------------- [ 327.299849][T13437] syz.2.3320/13437 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 327.307582][T13437] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 327.316304][T13437] [ 327.316304][T13437] and this task is already holding: [ 327.323674][T13437] ffff88802809fca0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 327.332394][T13437] which would create a new lock dependency: [ 327.338284][T13437] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 327.345876][T13437] [ 327.345876][T13437] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 327.355328][T13437] (&dev->event_lock#2){..-.}-{3:3} [ 327.355359][T13437] [ 327.355359][T13437] ... which became SOFTIRQ-irq-safe at: [ 327.368246][T13437] lock_acquire+0x120/0x360 [ 327.372855][T13437] _raw_spin_lock_irqsave+0xa7/0xf0 [ 327.378141][T13437] input_event+0x7a/0xc0 [ 327.382472][T13437] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 327.388188][T13437] __usb_hcd_giveback_urb+0x417/0x690 [ 327.393648][T13437] dummy_timer+0x862/0x4550 [ 327.398251][T13437] __hrtimer_run_queues+0x52c/0xc60 [ 327.403565][T13437] hrtimer_run_softirq+0x187/0x2b0 [ 327.408773][T13437] handle_softirqs+0x283/0x870 [ 327.413640][T13437] __irq_exit_rcu+0xca/0x1f0 [ 327.418330][T13437] irq_exit_rcu+0x9/0x30 [ 327.422669][T13437] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 327.428388][T13437] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 327.434450][T13437] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 327.440257][T13437] prepare_to_wait_event+0x437/0x480 [ 327.445632][T13437] synchronize_rcu_expedited+0x56c/0x730 [ 327.451390][T13437] synchronize_rcu+0x11a/0x310 [ 327.456245][T13437] mousedev_release+0x140/0x190 [ 327.461186][T13437] __fput+0x44c/0xa70 [ 327.465253][T13437] fput_close_sync+0x119/0x200 [ 327.470099][T13437] __x64_sys_close+0x7f/0x110 [ 327.474866][T13437] do_syscall_64+0xf6/0x210 [ 327.479457][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.485434][T13437] [ 327.485434][T13437] to a SOFTIRQ-irq-unsafe lock: [ 327.492453][T13437] (tasklist_lock){.+.+}-{3:3} [ 327.492482][T13437] [ 327.492482][T13437] ... which became SOFTIRQ-irq-unsafe at: [ 327.505109][T13437] ... [ 327.505117][T13437] lock_acquire+0x120/0x360 [ 327.512283][T13437] _raw_read_lock+0x36/0x50 [ 327.516870][T13437] __do_wait+0xde/0x740 [ 327.521116][T13437] do_wait+0x1f8/0x520 [ 327.525273][T13437] kernel_wait+0xab/0x170 [ 327.529696][T13437] call_usermodehelper_exec_work+0xbe/0x230 [ 327.535703][T13437] process_scheduled_works+0xade/0x17a0 [ 327.541338][T13437] worker_thread+0x8a0/0xda0 [ 327.546029][T13437] kthread+0x711/0x8a0 [ 327.550212][T13437] ret_from_fork+0x4b/0x80 [ 327.554722][T13437] ret_from_fork_asm+0x1a/0x30 [ 327.559600][T13437] [ 327.559600][T13437] other info that might help us debug this: [ 327.559600][T13437] [ 327.569836][T13437] Chain exists of: [ 327.569836][T13437] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 327.569836][T13437] [ 327.582919][T13437] Possible interrupt unsafe locking scenario: [ 327.582919][T13437] [ 327.591242][T13437] CPU0 CPU1 [ 327.596624][T13437] ---- ---- [ 327.601995][T13437] lock(tasklist_lock); [ 327.606249][T13437] local_irq_disable(); [ 327.613009][T13437] lock(&dev->event_lock#2); [ 327.620314][T13437] lock(&f_owner->lock); [ 327.627172][T13437] [ 327.630624][T13437] lock(&dev->event_lock#2); [ 327.635490][T13437] [ 327.635490][T13437] *** DEADLOCK *** [ 327.635490][T13437] [ 327.643634][T13437] 2 locks held by syz.2.3320/13437: [ 327.648832][T13437] #0: ffff88806414ced8 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 327.657999][T13437] #1: ffff88802809fca0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 327.667156][T13437] [ 327.667156][T13437] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 327.677574][T13437] -> (&dev->event_lock#2){..-.}-{3:3} { [ 327.683331][T13437] IN-SOFTIRQ-W at: [ 327.687507][T13437] lock_acquire+0x120/0x360 [ 327.694069][T13437] _raw_spin_lock_irqsave+0xa7/0xf0 [ 327.701271][T13437] input_event+0x7a/0xc0 [ 327.707514][T13437] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 327.715161][T13437] __usb_hcd_giveback_urb+0x417/0x690 [ 327.722555][T13437] dummy_timer+0x862/0x4550 [ 327.729073][T13437] __hrtimer_run_queues+0x52c/0xc60 [ 327.736281][T13437] hrtimer_run_softirq+0x187/0x2b0 [ 327.743407][T13437] handle_softirqs+0x283/0x870 [ 327.750186][T13437] __irq_exit_rcu+0xca/0x1f0 [ 327.756791][T13437] irq_exit_rcu+0x9/0x30 [ 327.763052][T13437] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 327.770696][T13437] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 327.778679][T13437] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 327.786407][T13437] prepare_to_wait_event+0x437/0x480 [ 327.793734][T13437] synchronize_rcu_expedited+0x56c/0x730 [ 327.801376][T13437] synchronize_rcu+0x11a/0x310 [ 327.808145][T13437] mousedev_release+0x140/0x190 [ 327.815000][T13437] __fput+0x44c/0xa70 [ 327.820988][T13437] fput_close_sync+0x119/0x200 [ 327.827754][T13437] __x64_sys_close+0x7f/0x110 [ 327.834438][T13437] do_syscall_64+0xf6/0x210 [ 327.840945][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.848858][T13437] INITIAL USE at: [ 327.852937][T13437] lock_acquire+0x120/0x360 [ 327.859361][T13437] _raw_spin_lock_irqsave+0xa7/0xf0 [ 327.866473][T13437] input_inject_event+0xab/0x320 [ 327.873331][T13437] kbd_led_trigger_activate+0xbc/0x100 [ 327.880763][T13437] led_trigger_set+0x52d/0x950 [ 327.887458][T13437] led_trigger_set_default+0x215/0x250 [ 327.894839][T13437] led_classdev_register_ext+0x73d/0x930 [ 327.902391][T13437] input_leds_connect+0x517/0x790 [ 327.909331][T13437] input_register_device+0xceb/0x10b0 [ 327.916630][T13437] atkbd_connect+0x70e/0x9c0 [ 327.923147][T13437] serio_driver_probe+0x7f/0xa0 [ 327.929913][T13437] really_probe+0x26d/0x9a0 [ 327.936364][T13437] __driver_probe_device+0x18c/0x2f0 [ 327.943573][T13437] driver_probe_device+0x4f/0x430 [ 327.950620][T13437] __driver_attach+0x452/0x700 [ 327.957311][T13437] bus_for_each_dev+0x233/0x2b0 [ 327.964093][T13437] serio_handle_event+0x1a2/0x860 [ 327.971046][T13437] process_scheduled_works+0xade/0x17a0 [ 327.978521][T13437] worker_thread+0x8a0/0xda0 [ 327.985024][T13437] kthread+0x711/0x8a0 [ 327.991017][T13437] ret_from_fork+0x4b/0x80 [ 327.997348][T13437] ret_from_fork_asm+0x1a/0x30 [ 328.004043][T13437] } [ 328.006717][T13437] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 328.015921][T13437] -> (&new->fa_lock){....}-{3:3} { [ 328.021161][T13437] INITIAL USE at: [ 328.025142][T13437] lock_acquire+0x120/0x360 [ 328.031399][T13437] _raw_write_lock_irq+0xa2/0xf0 [ 328.038080][T13437] fasync_remove_entry+0xf1/0x1c0 [ 328.044849][T13437] sock_fasync+0x85/0xf0 [ 328.050833][T13437] __fput+0x89f/0xa70 [ 328.056553][T13437] fput_close_sync+0x119/0x200 [ 328.063060][T13437] __x64_sys_close+0x7f/0x110 [ 328.069496][T13437] do_syscall_64+0xf6/0x210 [ 328.075743][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.083374][T13437] INITIAL READ USE at: [ 328.087791][T13437] lock_acquire+0x120/0x360 [ 328.094507][T13437] _raw_read_lock_irqsave+0xaf/0x100 [ 328.101970][T13437] kill_fasync+0x199/0x4d0 [ 328.108561][T13437] lease_break_callback+0x26/0x30 [ 328.115757][T13437] __break_lease+0x6a2/0x1620 [ 328.122604][T13437] do_dentry_open+0xd62/0x1970 [ 328.129538][T13437] vfs_open+0x3b/0x340 [ 328.135779][T13437] path_openat+0x2ee5/0x3830 [ 328.142548][T13437] do_filp_open+0x1fa/0x410 [ 328.149222][T13437] do_sys_openat2+0x121/0x1c0 [ 328.156070][T13437] __x64_sys_creat+0x8f/0xc0 [ 328.162843][T13437] do_syscall_64+0xf6/0x210 [ 328.169527][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.177645][T13437] } [ 328.180229][T13437] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 328.188997][T13437] ... acquired at: [ 328.192919][T13437] lock_acquire+0x120/0x360 [ 328.197603][T13437] _raw_read_lock_irqsave+0xaf/0x100 [ 328.203067][T13437] kill_fasync+0x199/0x4d0 [ 328.207660][T13437] mousedev_notify_readers+0x6f1/0xc00 [ 328.213300][T13437] mousedev_event+0x602/0x1320 [ 328.218244][T13437] input_handle_events_default+0xd4/0x1a0 [ 328.224139][T13437] input_pass_values+0x285/0x890 [ 328.229260][T13437] input_event_dispose+0x330/0x6b0 [ 328.234550][T13437] input_inject_event+0x1fe/0x320 [ 328.239759][T13437] evdev_write+0x2fc/0x480 [ 328.244350][T13437] vfs_write+0x27e/0xa90 [ 328.248808][T13437] ksys_write+0x145/0x250 [ 328.253318][T13437] do_syscall_64+0xf6/0x210 [ 328.258003][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.264073][T13437] [ 328.266398][T13437] -> (&f_owner->lock){....}-{3:3} { [ 328.271618][T13437] INITIAL USE at: [ 328.275514][T13437] lock_acquire+0x120/0x360 [ 328.281587][T13437] _raw_write_lock_irq+0xa2/0xf0 [ 328.288098][T13437] __f_setown+0x67/0x370 [ 328.293909][T13437] fcntl_dirnotify+0x3d6/0x690 [ 328.300245][T13437] do_fcntl+0x6c7/0x1910 [ 328.306057][T13437] __se_sys_fcntl+0xc8/0x150 [ 328.312212][T13437] do_syscall_64+0xf6/0x210 [ 328.318279][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.325735][T13437] INITIAL READ USE at: [ 328.330063][T13437] lock_acquire+0x120/0x360 [ 328.336580][T13437] _raw_read_lock_irqsave+0xaf/0x100 [ 328.343862][T13437] send_sigio+0x38/0x370 [ 328.350103][T13437] kill_fasync+0x24d/0x4d0 [ 328.356517][T13437] lease_break_callback+0x26/0x30 [ 328.363540][T13437] __break_lease+0x6a2/0x1620 [ 328.370216][T13437] do_dentry_open+0xd62/0x1970 [ 328.376977][T13437] vfs_open+0x3b/0x340 [ 328.383082][T13437] path_openat+0x2ee5/0x3830 [ 328.389675][T13437] do_filp_open+0x1fa/0x410 [ 328.396183][T13437] do_sys_openat2+0x121/0x1c0 [ 328.402860][T13437] __x64_sys_creat+0x8f/0xc0 [ 328.409546][T13437] do_syscall_64+0xf6/0x210 [ 328.416053][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.423951][T13437] } [ 328.426447][T13437] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 328.435300][T13437] ... acquired at: [ 328.439097][T13437] lock_acquire+0x120/0x360 [ 328.443781][T13437] _raw_read_lock_irqsave+0xaf/0x100 [ 328.449244][T13437] send_sigio+0x38/0x370 [ 328.453665][T13437] kill_fasync+0x24d/0x4d0 [ 328.458258][T13437] lease_break_callback+0x26/0x30 [ 328.463463][T13437] __break_lease+0x6a2/0x1620 [ 328.468315][T13437] do_dentry_open+0xd62/0x1970 [ 328.473255][T13437] vfs_open+0x3b/0x340 [ 328.477502][T13437] path_openat+0x2ee5/0x3830 [ 328.482272][T13437] do_filp_open+0x1fa/0x410 [ 328.486954][T13437] do_sys_openat2+0x121/0x1c0 [ 328.491819][T13437] __x64_sys_creat+0x8f/0xc0 [ 328.496604][T13437] do_syscall_64+0xf6/0x210 [ 328.501288][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.507353][T13437] [ 328.509672][T13437] [ 328.509672][T13437] the dependencies between the lock to be acquired [ 328.509681][T13437] and SOFTIRQ-irq-unsafe lock: [ 328.523187][T13437] -> (tasklist_lock){.+.+}-{3:3} { [ 328.528315][T13437] HARDIRQ-ON-R at: [ 328.532296][T13437] lock_acquire+0x120/0x360 [ 328.538455][T13437] _raw_read_lock+0x36/0x50 [ 328.544613][T13437] __do_wait+0xde/0x740 [ 328.550423][T13437] do_wait+0x1f8/0x520 [ 328.556141][T13437] kernel_wait+0xab/0x170 [ 328.562123][T13437] call_usermodehelper_exec_work+0xbe/0x230 [ 328.569678][T13437] process_scheduled_works+0xade/0x17a0 [ 328.576886][T13437] worker_thread+0x8a0/0xda0 [ 328.583124][T13437] kthread+0x711/0x8a0 [ 328.588846][T13437] ret_from_fork+0x4b/0x80 [ 328.595003][T13437] ret_from_fork_asm+0x1a/0x30 [ 328.601429][T13437] SOFTIRQ-ON-R at: [ 328.605415][T13437] lock_acquire+0x120/0x360 [ 328.611578][T13437] _raw_read_lock+0x36/0x50 [ 328.617736][T13437] __do_wait+0xde/0x740 [ 328.623556][T13437] do_wait+0x1f8/0x520 [ 328.629299][T13437] kernel_wait+0xab/0x170 [ 328.635292][T13437] call_usermodehelper_exec_work+0xbe/0x230 [ 328.642842][T13437] process_scheduled_works+0xade/0x17a0 [ 328.650049][T13437] worker_thread+0x8a0/0xda0 [ 328.656287][T13437] kthread+0x711/0x8a0 [ 328.662006][T13437] ret_from_fork+0x4b/0x80 [ 328.668073][T13437] ret_from_fork_asm+0x1a/0x30 [ 328.674493][T13437] INITIAL USE at: [ 328.678414][T13437] lock_acquire+0x120/0x360 [ 328.684489][T13437] _raw_write_lock_irq+0xa2/0xf0 [ 328.691013][T13437] copy_process+0x21d5/0x3b80 [ 328.697249][T13437] kernel_clone+0x224/0x7f0 [ 328.703315][T13437] user_mode_thread+0xdd/0x140 [ 328.709658][T13437] rest_init+0x23/0x300 [ 328.715381][T13437] start_kernel+0x470/0x4f0 [ 328.721449][T13437] x86_64_start_reservations+0x2a/0x30 [ 328.728476][T13437] x86_64_start_kernel+0x66/0x70 [ 328.734980][T13437] common_startup_64+0x13e/0x147 [ 328.741491][T13437] INITIAL READ USE at: [ 328.745828][T13437] lock_acquire+0x120/0x360 [ 328.752338][T13437] _raw_read_lock+0x36/0x50 [ 328.758855][T13437] __do_wait+0xde/0x740 [ 328.765013][T13437] do_wait+0x1f8/0x520 [ 328.771083][T13437] kernel_wait+0xab/0x170 [ 328.777407][T13437] call_usermodehelper_exec_work+0xbe/0x230 [ 328.785303][T13437] process_scheduled_works+0xade/0x17a0 [ 328.792856][T13437] worker_thread+0x8a0/0xda0 [ 328.799436][T13437] kthread+0x711/0x8a0 [ 328.805499][T13437] ret_from_fork+0x4b/0x80 [ 328.811923][T13437] ret_from_fork_asm+0x1a/0x30 [ 328.818687][T13437] } [ 328.821183][T13437] ... key at: [] tasklist_lock+0x18/0x40 [ 328.828907][T13437] ... acquired at: [ 328.832700][T13437] lock_acquire+0x120/0x360 [ 328.837381][T13437] _raw_read_lock+0x36/0x50 [ 328.842060][T13437] send_sigurg+0x12b/0x420 [ 328.846655][T13437] sk_send_sigurg+0x6c/0x2e0 [ 328.851417][T13437] tcp_check_urg+0x200/0x760 [ 328.856180][T13437] tcp_urg+0x164/0x3f0 [ 328.860435][T13437] tcp_rcv_established+0xdfd/0x1d10 [ 328.865817][T13437] tcp_v4_do_rcv+0xa23/0xce0 [ 328.870592][T13437] __release_sock+0x21c/0x350 [ 328.875446][T13437] release_sock+0x5f/0x1f0 [ 328.880039][T13437] tcp_sendmsg+0x39/0x50 [ 328.884491][T13437] __sock_sendmsg+0x19c/0x270 [ 328.889342][T13437] __sys_sendto+0x3bd/0x520 [ 328.894040][T13437] __x64_sys_sendto+0xde/0x100 [ 328.898976][T13437] do_syscall_64+0xf6/0x210 [ 328.903653][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.909719][T13437] [ 328.912043][T13437] [ 328.912043][T13437] stack backtrace: [ 328.917927][T13437] CPU: 1 UID: 0 PID: 13437 Comm: syz.2.3320 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 328.917948][T13437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.917959][T13437] Call Trace: [ 328.917965][T13437] [ 328.917972][T13437] dump_stack_lvl+0x189/0x250 [ 328.917997][T13437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.918018][T13437] ? __pfx__printk+0x10/0x10 [ 328.918048][T13437] validate_chain+0x1f05/0x2140 [ 328.918083][T13437] __lock_acquire+0xaac/0xd20 [ 328.918106][T13437] ? send_sigurg+0x12b/0x420 [ 328.918124][T13437] lock_acquire+0x120/0x360 [ 328.918143][T13437] ? send_sigurg+0x12b/0x420 [ 328.918161][T13437] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 328.918183][T13437] _raw_read_lock+0x36/0x50 [ 328.918198][T13437] ? send_sigurg+0x12b/0x420 [ 328.918215][T13437] send_sigurg+0x12b/0x420 [ 328.918234][T13437] sk_send_sigurg+0x6c/0x2e0 [ 328.918251][T13437] tcp_check_urg+0x200/0x760 [ 328.918270][T13437] tcp_urg+0x164/0x3f0 [ 328.918296][T13437] ? __pfx_tcp_urg+0x10/0x10 [ 328.918319][T13437] ? read_tsc+0x9/0x20 [ 328.918355][T13437] tcp_rcv_established+0xdfd/0x1d10 [ 328.918379][T13437] ? rt_is_expired+0x1c/0x2d0 [ 328.918401][T13437] ? __pfx_tcp_rcv_established+0x10/0x10 [ 328.918422][T13437] ? rt_is_expired+0x1c/0x2d0 [ 328.918438][T13437] ? rt_is_expired+0x1c/0x2d0 [ 328.918456][T13437] ? rt_is_expired+0x250/0x2d0 [ 328.918472][T13437] ? __pfx_ipv4_dst_check+0x10/0x10 [ 328.918490][T13437] ? __pfx_ipv4_dst_check+0x10/0x10 [ 328.918508][T13437] tcp_v4_do_rcv+0xa23/0xce0 [ 328.918527][T13437] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 328.918541][T13437] __release_sock+0x21c/0x350 [ 328.918567][T13437] release_sock+0x5f/0x1f0 [ 328.918585][T13437] tcp_sendmsg+0x39/0x50 [ 328.918608][T13437] __sock_sendmsg+0x19c/0x270 [ 328.918624][T13437] __sys_sendto+0x3bd/0x520 [ 328.918643][T13437] ? __pfx___sys_sendto+0x10/0x10 [ 328.918659][T13437] ? do_futex+0x333/0x420 [ 328.918683][T13437] ? rcu_is_watching+0x15/0xb0 [ 328.918708][T13437] __x64_sys_sendto+0xde/0x100 [ 328.918727][T13437] do_syscall_64+0xf6/0x210 [ 328.918746][T13437] ? clear_bhb_loop+0x60/0xb0 [ 328.918763][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.918776][T13437] RIP: 0033:0x7f1e6c98e969 [ 328.918803][T13437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.918816][T13437] RSP: 002b:00007f1e6d8d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 328.918837][T13437] RAX: ffffffffffffffda RBX: 00007f1e6cbb5fa0 RCX: 00007f1e6c98e969 [ 328.918848][T13437] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 328.918857][T13437] RBP: 00007f1e6ca10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 328.918867][T13437] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000000 [ 328.918876][T13437] R13: 0000000000000000 R14: 00007f1e6cbb5fa0 R15: 00007ffd40a1ed18 [ 328.918892][T13437] [ 328.920931][ T5874] m920x_read = error: -19 [ 328.928973][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.215335][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.238290][ T5874] dvb-usb: error while querying for an remote control event. [ 329.350639][ T1209] m920x_read = error: -19 [ 329.355003][ T1209] dvb-usb: error while querying for an remote control event. [ 329.471118][ T1209] m920x_read = error: -19 [ 329.475469][ T1209] dvb-usb: error while querying for an remote control event. [ 329.590480][ T1209] m920x_read = error: -19 [ 329.594855][ T1209] dvb-usb: error while querying for an remote control event. [ 329.711223][ T1209] m920x_read = error: -19 [ 329.715588][ T1209] dvb-usb: error while querying for an remote control event. [ 329.830494][ T1209] m920x_read = error: -19 [ 329.834875][ T1209] dvb-usb: error while querying for an remote control event. [ 329.951373][ T52] m920x_read = error: -19 [ 329.955763][ T52] dvb-usb: error while querying for an remote control event. [ 330.070939][ T52] m920x_read = error: -19 [ 330.075346][ T52] dvb-usb: error while querying for an remote control event. [ 330.190493][ T52] m920x_read = error: -19 [ 330.194892][ T52] dvb-usb: error while querying for an remote control event. [ 330.320895][ T52] m920x_read = error: -19 [ 330.325296][ T52] dvb-usb: error while querying for an remote control event. [ 330.442313][ T52] m920x_read = error: -19 [ 330.446671][ T52] dvb-usb: error while querying for an remote control event. [ 330.561762][ T52] m920x_read = error: -19 [ 330.566120][ T52] dvb-usb: error while querying for an remote control event. [ 330.681100][ T52] m920x_read = error: -19 [ 330.685504][ T52] dvb-usb: error while querying for an remote control event. [ 330.810496][ T52] m920x_read = error: -19 [ 330.814869][ T52] dvb-usb: error while querying for an remote control event. [ 330.930819][ T52] m920x_read = error: -19 [ 330.935230][ T52] dvb-usb: error while querying for an remote control event. [ 331.061198][ T52] m920x_read = error: -19 [ 331.065636][ T52] dvb-usb: error while querying for an remote control event. [ 331.180523][ T52] m920x_read = error: -19 [ 331.184932][ T52] dvb-usb: error while querying for an remote control event. [ 331.301080][ T52] m920x_read = error: -19 [ 331.305461][ T52] dvb-usb: error while querying for an remote control event. [ 331.430876][ T52] m920x_read = error: -19 [ 331.435377][ T52] dvb-usb: error while querying for an remote control event. [ 331.560664][ T52] m920x_read = error: -19 [ 331.565045][ T52] dvb-usb: error while querying for an remote control event. [ 331.691180][ T52] m920x_read = error: -19 [ 331.695598][ T52] dvb-usb: error while querying for an remote control event. [ 331.812864][ T52] m920x_read = error: -19 [ 331.817229][ T52] dvb-usb: error while querying for an remote control event. [ 331.931376][ T52] m920x_read = error: -19 [ 331.935756][ T52] dvb-usb: error while querying for an remote control event. [ 332.050574][ T52] m920x_read = error: -19 [ 332.054986][ T52] dvb-usb: error while querying for an remote control event. [ 332.170499][ T52] m920x_read = error: -19 [ 332.174882][ T52] dvb-usb: error while querying for an remote control event. [ 332.291221][ T5888] m920x_read = error: -19 [ 332.295621][ T5888] dvb-usb: error while querying for an remote control event. [ 332.420471][ T52] m920x_read = error: -19 [ 332.424899][ T52] dvb-usb: error while querying for an remote control event. [ 332.540495][ T52] m920x_read = error: -19 [ 332.545300][ T52] dvb-usb: error while querying for an remote control event. [ 332.661113][ T52] m920x_read = error: -19 [ 332.665476][ T52] dvb-usb: error while querying for an remote control event. [ 332.791220][ T52] m920x_read = error: -19 [ 332.797238][ T52] dvb-usb: error while querying for an remote control event. [ 332.912793][ T52] m920x_read = error: -19 [ 332.917158][ T52] dvb-usb: error while querying for an remote control event. [ 333.031242][ T52] m920x_read = error: -19 [ 333.035644][ T52] dvb-usb: error while querying for an remote control event. [ 333.150559][ T52] m920x_read = error: -19 [ 333.154935][ T52] dvb-usb: error while querying for an remote control event. [ 333.270499][ T52] m920x_read = error: -19 [ 333.274909][ T52] dvb-usb: error while querying for an remote control event. [ 333.391141][ T52] m920x_read = error: -19 [ 333.395536][ T52] dvb-usb: error while querying for an remote control event. [ 333.521159][ T52] m920x_read = error: -19 [ 333.525524][ T52] dvb-usb: error while querying for an remote control event. [ 333.640551][ T52] m920x_read = error: -19 [ 333.644921][ T52] dvb-usb: error while querying for an remote control event. [ 333.761286][ T1209] m920x_read = error: -19 [ 333.765686][ T1209] dvb-usb: error while querying for an remote control event. [ 333.881012][ T1209] m920x_read = error: -19 [ 333.885393][ T1209] dvb-usb: error while querying for an remote control event. [ 334.002111][ T1209] m920x_read = error: -19 [ 334.006496][ T1209] dvb-usb: error while querying for an remote control event. [ 334.130646][ T1209] m920x_read = error: -19 [ 334.135050][ T1209] dvb-usb: error while querying for an remote control event. [ 334.252960][ T1209] m920x_read = error: -19 [ 334.257319][ T1209] dvb-usb: error while querying for an remote control event. [ 334.380967][ T1209] m920x_read = error: -19 [ 334.385343][ T1209] dvb-usb: error while querying for an remote control event. [ 334.501311][ T1209] m920x_read = error: -19 [ 334.505719][ T1209] dvb-usb: error while querying for an remote control event. [ 334.620586][ T1209] m920x_read = error: -19 [ 334.625017][ T1209] dvb-usb: error while querying for an remote control event. [ 334.742952][ T1209] m920x_read = error: -19 [ 334.747332][ T1209] dvb-usb: error while querying for an remote control event. [ 334.862237][ T1209] m920x_read = error: -19 [ 334.866617][ T1209] dvb-usb: error while querying for an remote control event. [ 334.981971][ T1209] m920x_read = error: -19 [ 334.986331][ T1209] dvb-usb: error while querying for an remote control event. [ 335.101201][ T1209] m920x_read = error: -19 [ 335.105589][ T1209] dvb-usb: error while querying for an remote control event. [ 335.221662][ T1209] m920x_read = error: -19 [ 335.226041][ T1209] dvb-usb: error while querying for an remote control event. [ 335.341003][ T1209] m920x_read = error: -19 [ 335.345442][ T1209] dvb-usb: error while querying for an remote control event. [ 335.461944][ T1209] m920x_read = error: -19 [ 335.466303][ T1209] dvb-usb: error while querying for an remote control event. [ 335.580621][ T1209] m920x_read = error: -19 [ 335.585037][ T1209] dvb-usb: error while querying for an remote control event. [ 335.701175][ T1209] m920x_read = error: -19 [ 335.705629][ T1209] dvb-usb: error while querying for an remote control event. [ 335.820807][ T1209] m920x_read = error: -19 [ 335.825186][ T1209] dvb-usb: error while querying for an remote control event. [ 335.941959][ T1209] m920x_read = error: -19 [ 335.946576][ T1209] dvb-usb: error while querying for an remote control event. [ 336.061272][ T1209] m920x_read = error: -19 [ 336.065653][ T1209] dvb-usb: error while querying for an remote control event. [ 336.181583][ T1209] m920x_read = error: -19 [ 336.185960][ T1209] dvb-usb: error while querying for an remote control event. [ 336.300653][ T52] m920x_read = error: -19 [ 336.305058][ T52] dvb-usb: error while querying for an remote control event. [ 336.421801][ T52] m920x_read = error: -19 [ 336.426169][ T52] dvb-usb: error while querying for an remote control event. [ 336.542353][ T52] m920x_read = error: -19 [ 336.546735][ T52] dvb-usb: error while querying for an remote control event. [ 336.661885][ T52] m920x_read = error: -19 [ 336.666254][ T52] dvb-usb: error while querying for an remote control event. [ 336.781476][ T52] m920x_read = error: -19 [ 336.785861][ T52] dvb-usb: error while querying for an remote control event. [ 336.900590][ T52] m920x_read = error: -19 [ 336.904956][ T52] dvb-usb: error while querying for an remote control event. [ 337.020595][ T52] m920x_read = error: -19 [ 337.024984][ T52] dvb-usb: error while querying for an remote control event. [ 337.151895][ T52] m920x_read = error: -19 [ 337.156275][ T52] dvb-usb: error while querying for an remote control event.