last executing test programs: 7m32.134843788s ago: executing program 3 (id=144): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f00000001c0)={0x20, 0x0, 0x0, 0xdeadbeef, 0x8, 0x3e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) (async, rerun: 64) get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2) (async, rerun: 64) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='vxfs\x00', 0x200402, 0x0) 7m31.848000319s ago: executing program 3 (id=145): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc0383, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7m31.791857961s ago: executing program 3 (id=146): open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) (async) mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000480)='dax\x00', 0x2208440, &(0x7f0000000500)='trans=rdma,') r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x2}}) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x7d, &(0x7f0000000140)={r3, 0x2}, 0x8) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000280), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) (async) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x240448c1) (async) ioctl$FS_IOC_SETFLAGS(r7, 0xc0189436, &(0x7f0000000140)) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010080000000fedbdf250f002d000c0007800800020007", @ANYRES64=r7, @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0xa801}, 0x0) socket$netlink(0x10, 0x3, 0x0) 7m31.66811764s ago: executing program 3 (id=147): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r1], 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x15f) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000005980), 0x2, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)="a1", 0x1}], 0x1, 0x0, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='gfs2\x00', 0x10000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 7m30.406576943s ago: executing program 3 (id=154): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), 0x4) getsockopt$inet6_int(r2, 0x29, 0x10, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902240001060000000904020002ff"], 0x0) mount(&(0x7f0000001400)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 7m29.067429406s ago: executing program 3 (id=158): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000740)=ANY=[@ANYRES8=r0], 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100008ddfb240490b4f6a10ef1bf8fd34f3bbd3db93f1a3fa2406fdd4010203010902120001000000000904de0000e6f65200"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_ep_read(r2, 0x8, 0x0, &(0x7f00000006c0)) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48894}, 0x4000000) set_mempolicy(0x8000, &(0x7f00000006c0)=0x5, 0x4) getsockname(r3, &(0x7f0000000380)=@qipcrtr, &(0x7f00000004c0)=0x80) getsockopt$inet_tcp_int(r1, 0x6, 0x2c, 0x0, &(0x7f0000000140)) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5d, 0x0}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x100, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8004}, 0x404c090) r7 = open(&(0x7f0000000700)='./cgroup\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r7) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="c00000009ee9e2bafdbf9663821d48129848c74071a1214fd88de3b588d06828160178ecf97efcedb3e2e0630b005f7f32ca4071f218dde96c3172b7639d0fe6ec5ecee9e77f1f8eee139d4ff2363ec2713d43cef4f93996b92df3db6fb7645364ac9aee799dcea74ac70c21506f642582ae7b7ab0af57b0ab8e3f4ae28938cbe13c9f36f4d18d1e121ab343c795280e74b6c5908ea45a015a22210276bf66ac0087de18603219dfb468114e835e2e92dac83a696d747fd3ec62f50092375b61e64c1e756db37c5dcfdbb2d0c801c599", @ANYRES16=r8, @ANYBLOB="00042cbd7000fcdbdf2516000000900005800700010069620000070001006962000024000280080001000c000000080001000c0000000800040005000000080001000c00000008000100657468000c00028008000100080000004400028008000400ff000000080001000a00000008000400080000000800020007000000080002000500000008000400014100000800020002000000080001001700000004000480"], 0xa8}, 0x1, 0x0, 0x0, 0x48000}, 0x10) mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r7) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m13.266913158s ago: executing program 32 (id=158): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000740)=ANY=[@ANYRES8=r0], 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100008ddfb240490b4f6a10ef1bf8fd34f3bbd3db93f1a3fa2406fdd4010203010902120001000000000904de0000e6f65200"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_ep_read(r2, 0x8, 0x0, &(0x7f00000006c0)) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48894}, 0x4000000) set_mempolicy(0x8000, &(0x7f00000006c0)=0x5, 0x4) getsockname(r3, &(0x7f0000000380)=@qipcrtr, &(0x7f00000004c0)=0x80) getsockopt$inet_tcp_int(r1, 0x6, 0x2c, 0x0, &(0x7f0000000140)) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5d, 0x0}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x100, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8004}, 0x404c090) r7 = open(&(0x7f0000000700)='./cgroup\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r7) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="c00000009ee9e2bafdbf9663821d48129848c74071a1214fd88de3b588d06828160178ecf97efcedb3e2e0630b005f7f32ca4071f218dde96c3172b7639d0fe6ec5ecee9e77f1f8eee139d4ff2363ec2713d43cef4f93996b92df3db6fb7645364ac9aee799dcea74ac70c21506f642582ae7b7ab0af57b0ab8e3f4ae28938cbe13c9f36f4d18d1e121ab343c795280e74b6c5908ea45a015a22210276bf66ac0087de18603219dfb468114e835e2e92dac83a696d747fd3ec62f50092375b61e64c1e756db37c5dcfdbb2d0c801c599", @ANYRES16=r8, @ANYBLOB="00042cbd7000fcdbdf2516000000900005800700010069620000070001006962000024000280080001000c000000080001000c0000000800040005000000080001000c00000008000100657468000c00028008000100080000004400028008000400ff000000080001000a00000008000400080000000800020007000000080002000500000008000400014100000800020002000000080001001700000004000480"], 0xa8}, 0x1, 0x0, 0x0, 0x48000}, 0x10) mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r7) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.136210407s ago: executing program 1 (id=2952): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) r0 = gettid() fanotify_init(0x200, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$tipc(0x1e, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x10000006, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x80000001, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x20806, 0x5, 0x5, 0xffffffff, 0xe661, 0x100, 0x7, 0x0, 0x0, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x40, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x100, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8008, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x5, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x97b, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0x10000, 0xa0, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ee, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x0, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x10000004, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xab, 0x5, 0x9, 0xac8, 0xbd, 0x2, 0x3, 0x7ff, 0x129, 0x4, 0x1, 0xfffffffa, 0x0, 0x6, 0x1c, 0x120000, 0xb425, 0xa, 0x80a2ed, 0x2, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x2, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x2, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000823, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x6, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1a, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r1, 0x5412, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x6) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r4, 0x1, &(0x7f00000001c0)={{r2, r3+10000000}, {0x0, 0x989680}}, 0x0) r5 = open$dir(&(0x7f0000000000)='./cgroup\x00', 0x400180, 0x40) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000880), &(0x7f0000000200)=0x6e, 0x80000) recvfrom$unix(r6, &(0x7f0000000300)=""/114, 0x72, 0x20, &(0x7f0000000380)=@file={0x1, './cgroup\x00'}, 0x6e) unlinkat(r5, &(0x7f0000000080)='./cgroup\x00', 0x0) 11.205811066s ago: executing program 1 (id=2961): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x8ee4a000) r1 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000180081054e81f782db0cb904021d080406037c09e8fe55a10a0015400400142603600e122f00090006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5b277470703152b414f872766247a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x800) r5 = accept$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) mknodat$null(r7, &(0x7f0000000280)='./file0\x00', 0x2000, 0x103) r8 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r8, &(0x7f0000000180)=[{0x2, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0xb}, @note={0x3, 0x4, 0x6, 0x0, 0xba}}, {0x0, 0x0, 0x0, 0x20, @tick=0x86, {0x2}, {0x80, 0x3}, @result={0x4, 0x3}}], 0x38) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f00000034c0)=""/190, 0xbe}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f0000000500)=""/150, 0x96}, {&(0x7f0000003580)=""/4082, 0xff2}, {&(0x7f00000008c0)=""/239, 0xef}], 0xc}, 0x2}], 0x3, 0x2100, 0x0) bind$x25(r9, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) read$snapshot(r8, 0x0, 0xffffffbf) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0xd5d72370, 0x0, {}, {0xffffffffffffffff}, 0x40fe, 0x5}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) syz_clone3(&(0x7f0000000540)={0x8000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x31}, &(0x7f0000000440)=""/128, 0x80, &(0x7f00000004c0)=""/55, &(0x7f0000000500)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000005c0)={0x9, 0x8, {0xffffffffffffffff}, {0xee01}, 0x0, 0xfffffffffffffeff}) r14 = inotify_init() r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) sendmmsg$unix(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000b80)=[@rights={{0x34, 0x1, 0x1, [r0, r5, r8, r2, r1, r5, r0, r2, r1]}}, @rights={{0x2c, 0x1, 0x1, [r2, r0, r2, r5, r2, r5, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}, @rights={{0x0, 0x1, 0x1, [r1, r3, r15, r0, r8, r14]}}], 0xa8, 0x80}}, {{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000740)="ba4c3fa5e1f19669f878418910375b772c71e7c677528bddc3a0120a9dbf4fb708655bc159420dece83a44a856a0743a476cb0a57ff779d0643a7a900fa54d0c14fcb96f4892ae726f6d62ded90789bb3cca7c8751525ae44eee58731c84af2f63ee7e0255b1408cda0d8cab64fb5c446661d262432bfe535a2ed647d46f317d0e222df65e788e611418da2b2cc468df2375201ec28a2a7f3972a9cdc1", 0x9d}, {&(0x7f0000000800)="cf7dbd27a3f1d8ef01ce01b0211094a6a7919f2637ea9795cfa998782c08ca4657", 0xfffffd96}, {&(0x7f0000000840)="557a76526145546f5141e2eefc1c7e76adda9284a005f05bd9b1c03ddc6224ce497e32ec9fc929c546251ccdc1499e95723885be3a9040709a38d2c4ffd1761f9435057f49c98338f206f196955214d71cd23d1c9143af624c4f7ae7b49cdc9a0fd7acab3ff2cd17cfe643eca5b53ee1e87f1db3147671153380682555588c028ca05d1c5467b0d29438d98627c05f7b89dcc6f3370745faf8f237634b9d02432e32aaa64de8e5c6a49a35c908d89f7382deb8fec30dbbfbda9a060140e31deb19a9314f6c1131393b4379d0c0ca108c5951492028179da64c08430dd1a9667bdff0d0a7bb02a6c1b0206f5217351438a12c62c1426ca6", 0xf7}, {&(0x7f0000000940)="f487973ad9504ff1dc6ce19a81c923a607fbeac2083395e96af2398e3ea741db47f66ecc5374062f8233f73645cb4944976e306cd7a2ff86299a73a3c3734b9eabc83910d02d692c0926502eb23113c989a8ada1c2c57daadf793417c2eceed8a774ea4074ddc4d201218ab93f3eb0b96bcebc641b6346e63e8c0b7a21135ef06f7990c1e32f5fe8bf04fc51f7383ecbff97dcaf7bbf019a8ce4d477a8ead12cd694d36766406c1f46bf6b79905532536963d433647996ba106e465ff38385f3513e2f6499f8b58fcaa03808b6119b4ed54e6df1889de3927995", 0xda}], 0x4, &(0x7f0000000a80)=[@rights={{0x14, 0x1, 0x1, [r14]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r11}}}, @rights={{0x18, 0x1, 0x1, [r5, r5]}}], 0x50, 0x40008}}], 0x2, 0x854) 11.111717365s ago: executing program 1 (id=2962): delete_module(&(0x7f0000000000)='&),.#\x00', 0xa00) delete_module(&(0x7f0000000040)='&),.#\x00', 0x0) delete_module(&(0x7f0000000080)='&),.#\x00', 0x200) delete_module(&(0x7f00000000c0)='&),.#\x00', 0x0) delete_module(&(0x7f0000000100)='/[)\\\x00', 0xa00) delete_module(&(0x7f0000000140)='\\(-.\x00', 0xa00) delete_module(&(0x7f0000000180)='/[)\\\x00', 0x800) delete_module(&(0x7f00000001c0)='&),.#\x00', 0x200) delete_module(&(0x7f0000000200)=':\x00', 0x0) delete_module(&(0x7f0000000240)='%^$#:]/#\x00', 0x800) delete_module(&(0x7f0000000280)='&),.#\x00', 0x0) delete_module(&(0x7f00000002c0)='&#^\x00', 0x800) delete_module(&(0x7f0000000300)='\x1a..%U-#\x00', 0x800) delete_module(&(0x7f0000000340)='\x00', 0xa00) delete_module(&(0x7f0000000380)=',(\x00', 0x800) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/current\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000400)={0x4, 0xfffffffc, 0x0, 0x5, 0x9}, 0x14) delete_module(&(0x7f0000000440)='\x1a..%U-#\x00', 0x200) delete_module(&(0x7f0000000480)=')(\x00', 0x0) delete_module(&(0x7f00000004c0)='\x89}*\x00', 0x0) delete_module(&(0x7f0000000500)='&#^\x00', 0x0) delete_module(&(0x7f0000000540)='\\(-.\x00', 0x200) delete_module(&(0x7f0000000580)='%(:\x00', 0x800) delete_module(&(0x7f00000005c0)='\x1a..%U-#\x00', 0xa00) delete_module(&(0x7f0000000600)='\x89}*\x00', 0x200) delete_module(&(0x7f0000000640)='&#^\x00', 0x0) delete_module(&(0x7f0000000680)='/[)\\\x00', 0xa00) delete_module(&(0x7f00000006c0)='&),.#\x00', 0x200) delete_module(&(0x7f0000000700)='\\(-.\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000740)=[@in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e20, 0xffff0000, @loopback, 0x101}], 0x2c) 10.999895438s ago: executing program 1 (id=2963): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x5, 0x9, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000780)=ANY=[@ANYRES8=r3], 0x6) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x9, {0x2, 0x0, 0x0, 0xa6, 0x3fff, 0x0, {0x6, 0x100000000000, 0xffffffffffffffff, 0x400000000000000, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x4, 0x0, 0x0, 0x800, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x3}) write$FUSE_INIT(r2, &(0x7f0000001240)={0x50, 0x0, r4, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) utime(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)={0x800, 0xffffffffffffffff}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x800, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x472901, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) read$FUSE(r8, 0x0, 0x0) ioctl(r7, 0x2201, 0x0) 10.598621377s ago: executing program 1 (id=2965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x4800, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10.120122916s ago: executing program 1 (id=2966): creat(&(0x7f0000001380)='./file0\x00', 0x12c) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0xc0045520, &(0x7f0000001680)=""/20) syz_usb_control_io$printer(r0, 0x0, 0x0) unshare(0x64000600) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES64=r0]) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 9.625563385s ago: executing program 33 (id=2966): creat(&(0x7f0000001380)='./file0\x00', 0x12c) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0xc0045520, &(0x7f0000001680)=""/20) syz_usb_control_io$printer(r0, 0x0, 0x0) unshare(0x64000600) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES64=r0]) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 4.645585678s ago: executing program 2 (id=2988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0xbb000000) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0x1) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x448, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x434, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x2b}, {0x4}, {0x4}, {0xc}, {0x5, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "14ca97325fb7e94a6b114910feecc0d0aa880107b1fae20100d02367ae1046808242120e4815cfa9425fd95037c539bb7f6f546e8a2177da4dffcfd3ea538c99e4ebb217b68007ce9493880a4206b87771b357a76790df41b49ab04b53f5950f89dc4e9bb05cf4dc7b08e5a4d8b130a6aecdba4ad9e151a0e07e3924a2530ea882d5071014992a0649aa405b5048bc6065defd46809bcffc0b3eb7a8e7b973f7c7a24294fa2b177e4973bb9479f143dd8278a6a78552c942f4cc2e86ec4ad0925bfb499af4bd55d418caddd6787dd5537a7a3ea24b929cbf38c8cc2571613d9f56077f71aa3c598b34fa86a41b39265cb117be72a1c60f676c0d4f"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x80a}}, 0x14}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x149103, 0x0) setrlimit(0x6, &(0x7f0000000000)={0xfffffdfffffffff9, 0x1}) sendfile(r3, r3, 0x0, 0x7ffff000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0xbb000000) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0x1) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x448, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x434, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x2b}, {0x4}, {0x4}, {0xc}, {0x5, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "14ca97325fb7e94a6b114910feecc0d0aa880107b1fae20100d02367ae1046808242120e4815cfa9425fd95037c539bb7f6f546e8a2177da4dffcfd3ea538c99e4ebb217b68007ce9493880a4206b87771b357a76790df41b49ab04b53f5950f89dc4e9bb05cf4dc7b08e5a4d8b130a6aecdba4ad9e151a0e07e3924a2530ea882d5071014992a0649aa405b5048bc6065defd46809bcffc0b3eb7a8e7b973f7c7a24294fa2b177e4973bb9479f143dd8278a6a78552c942f4cc2e86ec4ad0925bfb499af4bd55d418caddd6787dd5537a7a3ea24b929cbf38c8cc2571613d9f56077f71aa3c598b34fa86a41b39265cb117be72a1c60f676c0d4f"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x80a}}, 0x14}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x149103, 0x0) (async) setrlimit(0x6, &(0x7f0000000000)={0xfffffdfffffffff9, 0x1}) (async) sendfile(r3, r3, 0x0, 0x7ffff000) (async) 4.423097104s ago: executing program 2 (id=2991): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="2a003300d00000000802110000010802110000001b5fc9a4467e0000040400"], 0x78}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000127bd7000fcdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x94) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000100)) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc0141) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x543504b4}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 3.942173503s ago: executing program 0 (id=2994): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/151, 0x97}, {&(0x7f0000000440)=""/82, 0x52}], 0x2, &(0x7f0000000300)=""/72, 0x48}, 0x10120) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce822"], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000006000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 3.660034995s ago: executing program 2 (id=2995): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac02d000200070002000600020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f6", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000004c0)={r0, 0x3d, {0x0, 0x0, 0x0, 0x10, 0x6, 0x0, 0x6, 0x8, 0x9, "fbabde040ff157d7532f0369626b498bd50dc633b92c15d1b80536cdc590e9fc3f8554c1a9d322040fda5d2cc08838980d4992b2ed80e4dd00", "fcb4611b7d9a4b002180e2c7616a827a00332b54c54f5572f20095bd1408ba6416b8214d45b669857cfc069ea487ef2d3d065c3813ca75822a0000000000005c", "5292ed98e6979ec7429f4759c3d4f98b000000ee00", [0xfffffffffffffd70, 0xa]}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x20, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) 1.192395483s ago: executing program 4 (id=2997): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000000)={'syz1\x00', {0x6, 0x9, 0x7, 0x8}, 0x26, [0x10000, 0x4, 0x9, 0x6, 0x2a, 0xfff, 0x2, 0x6, 0x40, 0x8, 0x4, 0xffffffff, 0x8, 0x1, 0x1, 0x57, 0xf, 0xfff, 0x80000000, 0x5, 0x1, 0x4, 0xfffffff8, 0xf, 0x3, 0x2, 0x0, 0x6, 0x7, 0xb, 0xf409, 0x0, 0x2, 0x3, 0x2, 0x1, 0xfff, 0x3, 0x1, 0x2, 0x9, 0x4, 0x2, 0x6, 0x90000, 0x6, 0x7, 0xe, 0x6, 0x6, 0x4, 0x4a, 0xb, 0x4, 0x10000, 0x4, 0x5, 0x6, 0x9, 0x4, 0xb448, 0x4, 0x9, 0xaa59], [0x0, 0x6, 0x5, 0x1, 0xf2, 0x4, 0x3, 0x100, 0x7, 0x3, 0x61f8b137, 0x3, 0x5, 0xa8, 0x8, 0x0, 0x3ff, 0xff, 0x3, 0xf15, 0x10, 0x84, 0x6, 0x5, 0xdb6, 0x0, 0x5, 0xe99, 0x10001, 0xfffffffc, 0xfff, 0x38baabd8, 0x7, 0x8, 0x1d3, 0x200, 0x97fe, 0x40, 0x2, 0x0, 0xa5a2, 0x5, 0xf, 0x3ff, 0x1, 0x8, 0x8, 0x5, 0x7, 0x2, 0x2, 0xfffffc01, 0x0, 0x6, 0x81, 0x1, 0x5, 0x1f, 0xd777, 0x3, 0x6, 0x3, 0x2, 0xbea], [0xffffff00, 0x5, 0x4, 0x5, 0x8, 0xf, 0xd, 0xfffffffa, 0x9, 0x7fffffff, 0x9, 0x3, 0x1000, 0x4, 0x2, 0x7b8, 0x2, 0x5, 0x5, 0x6, 0x5, 0x80000001, 0x1, 0x9, 0x2, 0x5, 0x0, 0xb, 0x2, 0xffff, 0xfff, 0x8001, 0x2, 0x8, 0xffff, 0x2, 0x2, 0x3, 0xf0, 0x7, 0x10000, 0x80000000, 0x5, 0x0, 0xa84e, 0xb81, 0xf8c, 0x8001, 0x9, 0x7, 0x612, 0x8, 0xfa50, 0x0, 0xffffffc0, 0x5, 0x1ff, 0x5, 0x8, 0x8000, 0x7, 0x9, 0x3, 0x3], [0x3, 0x80, 0x6, 0x2, 0x7, 0x1, 0xff, 0x8000, 0x7, 0x8, 0x0, 0x4, 0x3, 0x7fffffff, 0xc1, 0xa, 0x4, 0x2, 0x2, 0x1, 0x3ff, 0x1, 0x8000, 0x100, 0xfffffffe, 0x3, 0x1, 0x5, 0x8, 0xd, 0x1, 0x0, 0x7fffffff, 0x1, 0x61, 0x3, 0x80000001, 0x7fff, 0x0, 0x1, 0x9, 0x3, 0x9, 0x4d68, 0x7, 0x6, 0xf, 0x800, 0x100, 0x1, 0x3, 0x7, 0x380000, 0x1000, 0xc3, 0x10, 0x13, 0x0, 0xffff, 0x5, 0x8001, 0x80000001, 0x8, 0x9]}, 0x45c) (async) r1 = openat2(r0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x10b080, 0x1, 0x10}, 0x18) (async) r2 = getpid() r3 = syz_clone3(&(0x7f0000000780)={0x200a14200, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x3d}, &(0x7f00000005c0)=""/180, 0xb4, &(0x7f0000000680)=""/163, &(0x7f0000000740)=[r2], 0x1, {r1}}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000a40)={0x0, 0x0}) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000b40)={0x20200000, &(0x7f0000000800)=0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880), {0x41}, &(0x7f00000008c0)=""/70, 0x46, &(0x7f0000000940)=""/240, &(0x7f0000000ac0)=[r2, r4, r3], 0x3, {r5}}, 0x58) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000bc0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x1, 0x1, 0xa, 0x8, 0xc}, 0x20) (async) fcntl$getflags(r6, 0x401) (async) connect$unix(r0, &(0x7f0000000c00)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d80)={'gre0\x00', &(0x7f0000000c80)={'tunl0\x00', 0x0, 0x7, 0x700, 0x5, 0xfffffff2, {{0x34, 0x4, 0x0, 0x9, 0xd0, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@lsrr={0x83, 0x13, 0xfc, [@remote, @multicast2, @loopback, @local]}, @ra={0x94, 0x4}, @generic={0x44, 0x5, "c24e56"}, @lsrr={0x83, 0xb, 0x85, [@loopback, @remote]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xc1, 0x3, 0xf, [{@broadcast, 0xfffffffb}, {@empty, 0x4}, {@multicast2, 0x5}, {@local, 0x3}, {@multicast1, 0x5}]}, @ssrr={0x89, 0x2b, 0x33, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, @loopback, @multicast1, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010100, @empty]}, @lsrr={0x83, 0xb, 0x6a, [@local, @rand_addr=0x64010101]}, @cipso={0x86, 0x1b, 0x2, [{0x7, 0x11, "8f69cb5693a51f4d9def9203e370a0"}, {0x2, 0x4, 'UQ'}]}, @rr={0x7, 0x17, 0xc7, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x44}]}]}}}}}) (async) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) sendfile(r5, r7, 0x0, 0x9) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000e80)) (async) r8 = socket(0x11, 0x2, 0x0) waitid(0x2, r2, &(0x7f0000000ec0), 0x2000009, 0x0) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000fc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x34, r9, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4004004) (async) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000010c0)={0x10001, 0x80, 0xff7f}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000001100)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000001140)={0xc, r11}) (async) setsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000001180)={@private=0xa010100, @local, @remote}, 0xc) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000011c0)=0xbd, 0x8) syz_clone(0x10001000, &(0x7f0000001200)="36089a3546ca75ded4ad4d5818a4c8a9abbffd8567b5031b89145239dc0b1ed86dd55b9099822e9ea8e33d537f034cb9f72cf5bcd3e2122b8af23ed341415d2cb3f1fd7dd738833403ee03b128742a20da37dcb1f751dcbe3c2d5fb3eae657a875397614184f1ae77e", 0x69, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="470191b7cd81f1d4455a1228cbe0c509c3afb22d4c84775a0f2a63268f1856a3114cc7dc3ea2b582fbbe9411d7f35125925ef0584949a84c8c1d8c1b3c479840880bb2d0d0e15ac24028291101c51eaae0d7d9595f49581e6fed8aecff4f2725e9e7ca26e074ace834329340573aa0f70f49b35437c81524178da80652a84062b86e470efd248eb9d7a8004e2a6667276b5257aca42cf6c785da61bdc275d7603974fcfed1639c5f3d953deff925a2db880e70a5915a97c38712dbef05191df3ee981a33d029df85a5aa11") (async) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000001400)) (async) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r1, 0x8044610a, &(0x7f0000001440)) (async) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f00000014c0)={0x0, 0x0, "b7b30b72a961ca93520c09dad4ee688b"}) 1.115512838s ago: executing program 5 (id=2967): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000) (async) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 936.174057ms ago: executing program 4 (id=2998): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101482, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000f, 0x1010, r0, 0xa4711000) 876.322121ms ago: executing program 0 (id=2999): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) r3 = syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x33524742, 0x0, 0x0, [{0xb}, {}, {}, {0x400000}, {}, {}, {0x8}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{&(0x7f00000001c0)=@hci={0x1f, 0x3, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="7e174ed167b26a0a13be4496c19c548b928b21c1ebe1855e3c97f747e55f84df16c89b90", 0x24}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000280)="d07d40f3f188b2bb33297cdbf8ab6e132955edb781120ab35822445f4aae81495a0f2ad960238abce9e00cf215e7e4862cd18969b2b67db30215b04ca26895e7d8eeac1cfff35ea7024bb48fe1c81e7a5cd2063cef0c2ef3a1c54669ecba351ebf924661cf626de308eeb06a387f331b94446b44d0e6a7a6664dd95a3c3b4e25", 0x80}, {&(0x7f0000000300)="47c7d48a5bc69d30d893c37a3aa6dcf0791160d3ec2b7d2cb175ecdbda4dc0d14640bddf265a90ccd7228a39536f78daca6629abf4c3fc4bf59aa5048a9c05442696", 0x42}, {&(0x7f0000000380)="96ad83f4cc42ccc816ab2287bca8431278c6792a0f43b663c40e69ee9d60b34832751691dcdea5dc0659cd9d63db7833f306ec4948ab108985f691bf96c4f6d843ab8ca12ca43591e8dadd87638534a54aeb7362deed37361dbeacb3d3bcda1ae820cb7c8c364efb9bdfc3db597d27d05904bc8f7b7d675c5db9e8230cad89ff9d8a6df71faf768509648301172d123eea30c72df35420c6897fe55127d3cf0ccb644245da454b93f13a942d01d67f71b0894fd6eb", 0xb5}, {&(0x7f0000000440)="474d1f3fb72329ea328ff277b15dba2d4a176d00b301080e0824ff9d470e4601bb5423bb6ab2f6be54bc02ed108e5543e373aa0e9a17a11c9712856aafe6c1302fcfe2b003d04a215625caed27e7d6e6c2647b09904111ed37abdf3706d5b858740ece", 0x63}], 0x6, &(0x7f00000005c0)=[@timestamping={{0x14, 0x1, 0x25, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x48}}], 0x1, 0x8000080) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000040)={0x80, 0x3147504d, 0x2, @discrete={0x7, 0xb94}}) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000180)) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$SIOCNRDECOBS(r2, 0x89e2) (async) syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x33524742, 0x0, 0x0, [{0xb}, {}, {}, {0x400000}, {}, {}, {0x8}]}}) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async) mount$nfs(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) (async) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{&(0x7f00000001c0)=@hci={0x1f, 0x3, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="7e174ed167b26a0a13be4496c19c548b928b21c1ebe1855e3c97f747e55f84df16c89b90", 0x24}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000280)="d07d40f3f188b2bb33297cdbf8ab6e132955edb781120ab35822445f4aae81495a0f2ad960238abce9e00cf215e7e4862cd18969b2b67db30215b04ca26895e7d8eeac1cfff35ea7024bb48fe1c81e7a5cd2063cef0c2ef3a1c54669ecba351ebf924661cf626de308eeb06a387f331b94446b44d0e6a7a6664dd95a3c3b4e25", 0x80}, {&(0x7f0000000300)="47c7d48a5bc69d30d893c37a3aa6dcf0791160d3ec2b7d2cb175ecdbda4dc0d14640bddf265a90ccd7228a39536f78daca6629abf4c3fc4bf59aa5048a9c05442696", 0x42}, {&(0x7f0000000380)="96ad83f4cc42ccc816ab2287bca8431278c6792a0f43b663c40e69ee9d60b34832751691dcdea5dc0659cd9d63db7833f306ec4948ab108985f691bf96c4f6d843ab8ca12ca43591e8dadd87638534a54aeb7362deed37361dbeacb3d3bcda1ae820cb7c8c364efb9bdfc3db597d27d05904bc8f7b7d675c5db9e8230cad89ff9d8a6df71faf768509648301172d123eea30c72df35420c6897fe55127d3cf0ccb644245da454b93f13a942d01d67f71b0894fd6eb", 0xb5}, {&(0x7f0000000440)="474d1f3fb72329ea328ff277b15dba2d4a176d00b301080e0824ff9d470e4601bb5423bb6ab2f6be54bc02ed108e5543e373aa0e9a17a11c9712856aafe6c1302fcfe2b003d04a215625caed27e7d6e6c2647b09904111ed37abdf3706d5b858740ece", 0x63}], 0x6, &(0x7f00000005c0)=[@timestamping={{0x14, 0x1, 0x25, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x48}}], 0x1, 0x8000080) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000040)={0x80, 0x3147504d, 0x2, @discrete={0x7, 0xb94}}) (async) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000180)) (async) 725.282917ms ago: executing program 4 (id=3000): clock_adjtime(0x0, &(0x7f0000000200)={0x7f, 0x400, 0x5, 0x3, 0x7, 0x2, 0x3, 0x4, 0x800, 0xb6, 0x8e, 0x6a8, 0x7, 0x2, 0x6, 0x7, 0x787, 0x0, 0x8, 0xd39, 0x1, 0x0, 0x6c53, 0x0, 0xfffffffffffffff6, 0xcde}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000, 0x1) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 633.584584ms ago: executing program 0 (id=3001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd60", 0x13}, {&(0x7f0000000240)="37a6c400", 0x4}, {&(0x7f00000029c0)="11e496b26cb156fc17de651bb0059979555c10b710b18f6a6eb3e0edacecac6e537e", 0x22}, {&(0x7f0000000280)="400a81161db474fb", 0x8}], 0x4) 545.758718ms ago: executing program 5 (id=3002): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0xb, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="6228c58d47249f8f5e7360b0198921a98ab0de9992890df5983bbbccaace576e47a0fffb66ad42d57fb5d68d72467373395ca5e38ba301bada07e3237db80a8bbc507ad016e0bd2025470c4896779bc028b8852b8f2225059fe74a91f9675eb556bcfdc3eb00bb33fdf3dd5138f9b98be8737e1b4c41222626e0a5b8950fbe9ad85d559890b76145b8ef0b3ae3ce68270deaa87a1ab76f1b03d3f967b6a98cfa8f882d9673e2d48f1f8e80742cc03e1a75f33bf34a47d32996ca9fdb7b64a353d158937f1e06068d8786983d2541412537", 0xd1, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f000073c000/0x3000)=nil, 0x3000, 0xba20e7cf4b6950e0, 0x30, r0, 0x6c3ca000) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x50904, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000080)=0x10000, 0x4) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="010000edd9e9fe008f04", @ANYBLOB="ce40346db7871b01d1247bdd1b68a795a84cdb4178d1aca39aa74cd61528057460d07c6f9accaca0f5d77499022442893a4d63f0245c444943efd0c655e10e264e2c3c0407294a4fbaee7af4078d2c9a50d42e2409d5f54e47c05ceb04ad718b9d93511ab6aace9730e66dbc20aac9df74069393ed5ad80ca3"]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat2(0xffffffffffffffff, 0x0, 0x0, 0x1800) accept4(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000000)=0x80, 0x80000) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000280)=0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 464.478192ms ago: executing program 4 (id=3003): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000840), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x6ae7, 0x2, 0x0, 0x3fffffffff, 0x1ff, 0x9, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{0x4, 0x7fff}, {0x4, 0xffff}, 0x80000001}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x4}, 0x6) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x0, 0xc}) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x30, r0, 0x858fe000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) madvise(&(0x7f00004e4000/0x3000)=nil, 0x3000, 0x3) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000840), 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x6ae7, 0x2, 0x0, 0x3fffffffff, 0x1ff, 0x9, 0xfffffff7}) (async) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{0x4, 0x7fff}, {0x4, 0xffff}, 0x80000001}) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x4}, 0x6) (async) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x0, 0xc}) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) (async) fadvise64(r0, 0x92, 0x5, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x30, r0, 0x858fe000) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) madvise(&(0x7f00004e4000/0x3000)=nil, 0x3000, 0x3) (async) 390.154185ms ago: executing program 0 (id=3004): ioprio_set$pid(0x1, 0x0, 0x2007) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1891c2, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) ioprio_set$pid(0x1, 0x0, 0x2007) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1891c2, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 231.987842ms ago: executing program 4 (id=3005): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc1, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x47425247}}) signalfd4(r0, &(0x7f00000000c0)={[0x5]}, 0x8, 0x80c00) symlink(&(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='./cgroup\x00') r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000bb000000000000000000"], 0x18}], 0x1, 0x8000) bind$unix(r2, &(0x7f0000000100)=@file={0x1, './cgroup\x00'}, 0x6e) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) ptrace(0x4207, 0xffffffffffffffff) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 231.867894ms ago: executing program 0 (id=3006): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x4242, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000001c0)={0x0, 0x5, 0x2006}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fdfffe05e8fe50a10a000600014002020c600e41b0000900ac00bc0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000100)={0x1}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 105.820077ms ago: executing program 2 (id=3007): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r1, r2) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/156, 0x9c}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) (async) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800003fecf20000000086070000", 0x4000, r0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 65.410219ms ago: executing program 4 (id=3008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$BLKDISCARDZEROES(r3, 0x127c, &(0x7f0000000000)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x102010, r0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000300)={0x28, 0x0, r5, 0x1000, &(0x7f00000003c0)=""/4096}) sendfile(r0, r0, 0x0, 0x4) 0s ago: executing program 0 (id=3009): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a"], 0x7c}}, 0x4040) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) setsockopt$inet6_buf(r1, 0x29, 0xd4, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x28011, r0, 0xe3e1a000) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000002c0)) kernel console output (not intermixed with test programs): T8684] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 484.970675][T14667] syzkaller1: left promiscuous mode [ 484.983316][T14667] syzkaller1: left allmulticast mode [ 485.007770][ T8684] usb 5-1: device descriptor read/8, error -71 [ 485.087147][ T8893] usb 1-1: device descriptor read/64, error -110 [ 485.117727][ T8684] usb usb5-port1: unable to enumerate USB device [ 485.173829][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2609'. [ 485.184208][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2609'. [ 485.197321][T14672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.211126][T14672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.356900][ T8893] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 485.452736][T14680] netlink: 'syz.2.2611': attribute type 10 has an invalid length. [ 485.496857][ T8893] usb 1-1: device descriptor read/64, error -32 [ 485.519700][T14680] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 485.523240][T14681] /dev/rnullb0: Can't open blockdev [ 485.621633][ T8893] usb usb1-port1: attempt power cycle [ 485.976655][ T8893] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 486.082583][ T8893] usb 1-1: device descriptor read/8, error -32 [ 486.216815][ T8893] raw-gadget.1 gadget.0: failed to queue suspend event [ 486.224143][ T8893] raw-gadget.1 gadget.0: failed to queue reset event [ 486.306700][ T8893] raw-gadget.1 gadget.0: failed to queue resume event [ 486.386849][ T8893] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 486.426862][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 486.434047][ T8893] usb 1-1: device descriptor read/8, error -32 [ 486.547038][ T8893] raw-gadget.1 gadget.0: failed to queue suspend event [ 486.557969][ T8893] usb usb1-port1: unable to enumerate USB device [ 486.713729][ T8893] usb 2-1: USB disconnect, device number 65 [ 486.855354][T14694] /dev/rnullb0: Can't open blockdev [ 486.944814][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'. [ 486.953904][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'. [ 487.169996][T14706] syzkaller1: entered promiscuous mode [ 487.184782][T14706] syzkaller1: entered allmulticast mode [ 487.354773][T14713] /dev/rnullb0: Can't open blockdev [ 487.601457][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'. [ 487.623486][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'. [ 487.774856][T14731] GUP no longer grows the stack in syz.1.2630 (14731): 200000005000-200000008000 (200000004000) [ 487.796765][T14731] CPU: 0 UID: 0 PID: 14731 Comm: syz.1.2630 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 487.796796][T14731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 487.796814][T14731] Call Trace: [ 487.796823][T14731] [ 487.796832][T14731] dump_stack_lvl+0x189/0x250 [ 487.796870][T14731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.796899][T14731] ? __pfx__printk+0x10/0x10 [ 487.796925][T14731] ? find_vma+0xe7/0x160 [ 487.796958][T14731] fixup_user_fault+0x661/0x720 [ 487.796995][T14731] fault_in_user_writeable+0x72/0xe0 [ 487.797026][T14731] futex_lock_pi+0x773/0xa90 [ 487.797057][T14731] ? __pfx_futex_lock_pi+0x10/0x10 [ 487.797102][T14731] ? futex_private_hash_put+0x4b/0x280 [ 487.797134][T14731] ? __pfx_futex_wake_mark+0x10/0x10 [ 487.797162][T14731] ? __pfx_futex_wake+0x10/0x10 [ 487.797182][T14731] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 487.797214][T14731] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 487.797247][T14731] do_futex+0x292/0x420 [ 487.797272][T14731] ? __pfx_do_futex+0x10/0x10 [ 487.797291][T14731] ? __vm_munmap+0x301/0x3d0 [ 487.797326][T14731] __se_sys_futex+0x36f/0x400 [ 487.797349][T14731] ? __pfx___se_sys_futex+0x10/0x10 [ 487.797368][T14731] ? rcu_is_watching+0x15/0xb0 [ 487.797403][T14731] ? __x64_sys_futex+0x21/0xf0 [ 487.797426][T14731] do_syscall_64+0xfa/0x3b0 [ 487.797444][T14731] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.797472][T14731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.797492][T14731] ? clear_bhb_loop+0x60/0xb0 [ 487.797518][T14731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.797543][T14731] RIP: 0033:0x7f93e598ebe9 [ 487.797562][T14731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.797579][T14731] RSP: 002b:00007f93e6753038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 487.797598][T14731] RAX: ffffffffffffffda RBX: 00007f93e5bb5fa0 RCX: 00007f93e598ebe9 [ 487.797615][T14731] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 487.797629][T14731] RBP: 00007f93e5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 487.797641][T14731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.797654][T14731] R13: 00007f93e5bb6038 R14: 00007f93e5bb5fa0 R15: 00007ffc25605ea8 [ 487.797687][T14731] [ 488.647179][ T8893] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 488.725273][T14747] /dev/rnullb0: Can't open blockdev [ 488.820946][ T8893] usb 2-1: device descriptor read/64, error -71 [ 489.056949][ T8697] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 489.076702][ T8893] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 489.221492][ T8697] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 489.226807][ T8684] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 489.230775][ T8893] usb 2-1: device descriptor read/64, error -71 [ 489.243550][ T8697] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 489.254229][ T8697] usb 3-1: config 220 has no interface number 2 [ 489.261342][ T8697] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 489.274613][ T8697] usb 3-1: config 220 interface 0 has no altsetting 0 [ 489.281667][ T8697] usb 3-1: config 220 interface 76 has no altsetting 0 [ 489.288694][ T8697] usb 3-1: config 220 interface 1 has no altsetting 0 [ 489.300226][ T8697] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 489.309367][ T8697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.309394][ T8697] usb 3-1: Product: syz [ 489.309409][ T8697] usb 3-1: Manufacturer: syz [ 489.326316][ T8697] usb 3-1: SerialNumber: syz [ 489.357617][ T8893] usb usb2-port1: attempt power cycle [ 489.367760][ T8684] usb 5-1: device descriptor read/64, error -71 [ 489.545962][ T8697] usb 3-1: selecting invalid altsetting 0 [ 489.552154][ T8697] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 489.558878][ T8697] usb 3-1: No valid video chain found. [ 489.571640][ T8697] usb 3-1: selecting invalid altsetting 0 [ 489.577467][ T8697] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 489.593543][ T8697] usb 3-1: USB disconnect, device number 93 [ 489.607025][ T8684] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 489.706837][ T8893] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 489.728382][ T8893] usb 2-1: device descriptor read/8, error -71 [ 489.746719][ T8684] usb 5-1: device descriptor read/64, error -71 [ 489.857003][ T8684] usb usb5-port1: attempt power cycle [ 489.978613][ T8893] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 490.007214][ T8893] usb 2-1: device descriptor read/8, error -71 [ 490.118485][ T8893] usb usb2-port1: unable to enumerate USB device [ 490.120201][T14770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.133919][T14770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.196650][ T8684] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 490.217377][ T8684] usb 5-1: device descriptor read/8, error -71 [ 490.458683][ T8684] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 490.487380][ T8684] usb 5-1: device descriptor read/8, error -71 [ 490.586998][T14777] /dev/rnullb0: Can't open blockdev [ 490.597269][ T8684] usb usb5-port1: unable to enumerate USB device [ 490.780572][T14783] /dev/rnullb0: Can't open blockdev [ 491.424879][T14788] /dev/rnullb0: Can't open blockdev [ 491.468380][T14790] /dev/rnullb0: Can't open blockdev [ 491.482653][ T8697] Process accounting resumed [ 491.502583][T14792] Process accounting resumed [ 491.602129][T14797] syzkaller1: entered promiscuous mode [ 491.609094][T14797] syzkaller1: entered allmulticast mode [ 491.694080][T14799] syzkaller1: entered promiscuous mode [ 491.699751][T14799] syzkaller1: entered allmulticast mode [ 491.713041][T14799] FAULT_INJECTION: forcing a failure. [ 491.713041][T14799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.729149][T14799] CPU: 0 UID: 0 PID: 14799 Comm: syz.2.2655 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 491.729177][T14799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.729190][T14799] Call Trace: [ 491.729198][T14799] [ 491.729207][T14799] dump_stack_lvl+0x189/0x250 [ 491.729239][T14799] ? __pfx____ratelimit+0x10/0x10 [ 491.729268][T14799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.729295][T14799] ? __pfx__printk+0x10/0x10 [ 491.729322][T14799] ? __might_fault+0xb0/0x130 [ 491.729353][T14799] should_fail_ex+0x414/0x560 [ 491.729385][T14799] _copy_from_iter+0x1db/0x16f0 [ 491.729408][T14799] ? __lock_acquire+0xab9/0xd20 [ 491.729436][T14799] ? __pfx__copy_from_iter+0x10/0x10 [ 491.729471][T14799] tun_get_user+0x219/0x3e20 [ 491.729512][T14799] ? aa_file_perm+0x44d/0x1550 [ 491.729539][T14799] ? __pfx_tun_get_user+0x10/0x10 [ 491.729558][T14799] ? _parse_integer_limit+0x1ae/0x1f0 [ 491.729595][T14799] ? __lock_acquire+0xab9/0xd20 [ 491.729621][T14799] ? ref_tracker_alloc+0x318/0x460 [ 491.729646][T14799] ? __lock_acquire+0xab9/0xd20 [ 491.729668][T14799] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 491.729699][T14799] ? tun_get+0x1c/0x2f0 [ 491.729722][T14799] ? tun_get+0x1c/0x2f0 [ 491.729740][T14799] ? tun_get+0x1c/0x2f0 [ 491.729890][T14799] tun_chr_write_iter+0x113/0x200 [ 491.729924][T14799] vfs_write+0x5c6/0xb30 [ 491.729954][T14799] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 491.729985][T14799] ? __pfx_vfs_write+0x10/0x10 [ 491.730017][T14799] ? __fget_files+0x2a/0x420 [ 491.730057][T14799] ksys_write+0x145/0x250 [ 491.730082][T14799] ? __pfx_ksys_write+0x10/0x10 [ 491.730110][T14799] ? do_syscall_64+0xbe/0x3b0 [ 491.730132][T14799] do_syscall_64+0xfa/0x3b0 [ 491.730152][T14799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.730170][T14799] ? asm_common_interrupt+0x26/0x40 [ 491.730188][T14799] ? clear_bhb_loop+0x60/0xb0 [ 491.730212][T14799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.730231][T14799] RIP: 0033:0x7f338838ebe9 [ 491.730249][T14799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.730266][T14799] RSP: 002b:00007f3389201038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 491.730287][T14799] RAX: ffffffffffffffda RBX: 00007f33885b5fa0 RCX: 00007f338838ebe9 [ 491.730302][T14799] RDX: 0000000000000036 RSI: 0000200000000240 RDI: 0000000000000004 [ 491.730316][T14799] RBP: 00007f3389201090 R08: 0000000000000000 R09: 0000000000000000 [ 491.730329][T14799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.730342][T14799] R13: 00007f33885b6038 R14: 00007f33885b5fa0 R15: 00007ffc064b16c8 [ 491.730374][T14799] [ 492.525114][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'. [ 492.534690][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'. [ 492.854583][T14830] netlink: 'syz.1.2666': attribute type 29 has an invalid length. [ 492.864640][T14830] netlink: 'syz.1.2666': attribute type 29 has an invalid length. [ 492.875044][T14830] /dev/rnullb0: Can't open blockdev [ 492.941914][T14832] netlink: 'syz.1.2667': attribute type 10 has an invalid length. [ 492.952742][T14832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2667'. [ 492.964733][T14832] dummy0: entered promiscuous mode [ 492.974100][T14832] bridge0: port 3(dummy0) entered blocking state [ 492.983616][T14832] bridge0: port 3(dummy0) entered disabled state [ 492.991459][T14832] dummy0: entered allmulticast mode [ 493.004039][T14832] bridge0: port 3(dummy0) entered blocking state [ 493.010604][T14832] bridge0: port 3(dummy0) entered forwarding state [ 493.101652][T14832] /dev/rnullb0: Can't open blockdev [ 493.218701][T14838] syzkaller1: entered promiscuous mode [ 493.226216][T14838] syzkaller1: entered allmulticast mode [ 493.366939][T14841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2670'. [ 493.497434][T14845] tmpfs: Unknown parameter 'usrqbo' [ 493.550444][T14847] random: crng reseeded on system resumption [ 494.396090][T14857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.415339][T14857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.421609][T14861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.439501][T14861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.487414][ T8893] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 494.716688][ T8692] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 494.846857][ T8692] usb 5-1: device descriptor read/64, error -71 [ 495.109917][ T8692] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 495.263920][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2679'. [ 495.275766][ T8692] usb 5-1: device descriptor read/64, error -71 [ 495.288099][T14870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2679'. [ 495.397837][ T8692] usb usb5-port1: attempt power cycle [ 495.645665][T14877] CUSE: info not properly terminated [ 495.756801][ T8692] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 495.787359][ T8692] usb 5-1: device descriptor read/8, error -71 [ 495.909140][T14888] tipc: Enabled bearer , priority 0 [ 495.948823][T14888] syzkaller0: entered promiscuous mode [ 495.954331][T14888] syzkaller0: entered allmulticast mode [ 495.960877][T14888] tipc: Resetting bearer [ 495.981616][T14887] tipc: Resetting bearer [ 496.043891][ T8692] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 496.075151][ T8692] usb 5-1: device descriptor read/8, error -71 [ 496.187076][ T8692] usb usb5-port1: unable to enumerate USB device [ 496.441708][T14890] /dev/rnullb0: Can't open blockdev [ 497.475792][T14899] /dev/rnullb0: Can't open blockdev [ 497.494274][T14900] /dev/rnullb0: Can't open blockdev [ 497.586013][T14903] /dev/rnullb0: Can't open blockdev [ 497.595730][T14904] /dev/rnullb0: Can't open blockdev [ 498.443873][T14887] tipc: Disabling bearer [ 498.610491][T14925] /dev/rnullb0: Can't open blockdev [ 498.831996][T14934] fuse: Unknown parameter '@' [ 498.908199][ T8893] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 499.087095][ T8893] usb 3-1: Using ep0 maxpacket: 32 [ 499.104382][ T8893] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 499.135578][ T8893] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.160533][ T8893] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 499.178931][ T8893] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 499.197983][ T8893] usb 3-1: Product: syz [ 499.209171][ T8893] usb 3-1: Manufacturer: syz [ 499.234545][ T8893] hub 3-1:4.0: bad descriptor, ignoring hub [ 499.259846][ T8893] hub 3-1:4.0: probe with driver hub failed with error -5 [ 499.274354][ T8893] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 499.360669][T14954] syzkaller1: entered promiscuous mode [ 499.366391][T14954] syzkaller1: entered allmulticast mode [ 499.439783][T14956] syzkaller1: left promiscuous mode [ 499.445321][T14956] syzkaller1: left allmulticast mode [ 499.555141][T14958] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2707'. [ 499.585768][T14958] /dev/rnullb0: Can't open blockdev [ 499.683118][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 499.692257][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 499.715128][T14962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.725932][T14962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.991848][T14967] fuse: Unknown parameter 'user00000000000000000000' [ 500.447693][T14975] fuse: Unknown parameter 'user00000000000000000000' [ 500.503835][T14980] binder: 14978:14980 ioctl 40046205 0 returned -22 [ 500.567513][T14984] /dev/rnullb0: Can't open blockdev [ 500.734497][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.749741][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.780462][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'. [ 500.789694][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'. [ 500.963287][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.974533][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.076742][ T8684] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 501.246825][ T8696] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 501.256306][ T8684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.267407][ T8684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.277381][ T8684] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 501.287608][ T8684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.298360][ T8684] usb 5-1: config 0 descriptor?? [ 501.426644][ T8696] usb 2-1: Using ep0 maxpacket: 32 [ 501.433858][ T8696] usb 2-1: config 0 has an invalid interface number: 26 but max is 0 [ 501.444153][ T8696] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 501.453161][ T8696] usb 2-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 501.463690][ T8696] usb 2-1: config 0 has no interface number 0 [ 501.469931][ T8696] usb 2-1: config 0 interface 26 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 501.480810][ T8696] usb 2-1: config 0 interface 26 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 501.491638][ T8696] usb 2-1: config 0 interface 26 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 501.502527][ T8696] usb 2-1: config 0 interface 26 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 501.515409][ T8696] usb 2-1: config 0 interface 26 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 501.540490][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.547048][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.556937][ T8696] usb 2-1: config 0 interface 26 altsetting 1 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 501.568006][ T8696] usb 2-1: config 0 interface 26 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 501.578739][ T8696] usb 2-1: config 0 interface 26 altsetting 1 has an invalid endpoint descriptor of length 2, skipping [ 501.589909][ T8696] usb 2-1: config 0 interface 26 altsetting 1 has 12 endpoint descriptors, different from the interface descriptor's value: 13 [ 501.603423][ T8696] usb 2-1: config 0 interface 26 has no altsetting 0 [ 501.618587][ T8696] usb 2-1: New USB device found, idVendor=054c, idProduct=0010, bcdDevice= 2.55 [ 501.631060][ T8696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.646728][ T8696] usb 2-1: Product: syz [ 501.650951][ T8696] usb 2-1: Manufacturer: syz [ 501.663005][ T8696] usb 2-1: SerialNumber: syz [ 501.681922][ T8696] usb 2-1: config 0 descriptor?? [ 501.699141][T14998] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 501.704360][T15003] /dev/rnullb0: Can't open blockdev [ 501.756945][ T8893] usb 3-1: USB disconnect, device number 94 [ 501.762868][ T8684] pyra 0003:1E7D:2CF6.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 501.931260][ T8696] usb-storage 2-1:0.26: USB Mass Storage device detected [ 501.970441][ T8696] usb-storage 2-1:0.26: Quirks match for vid 054c pid 0010: 281 [ 502.196508][T12666] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 502.207978][T12666] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 502.220384][T12666] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 502.231789][T12666] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 502.242476][T12666] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 502.298295][T15014] vxcan1 speed is unknown, defaulting to 1000 [ 502.359170][ T8684] pyra 0003:1E7D:2CF6.001B: couldn't init struct pyra_device [ 502.380189][ T8684] pyra 0003:1E7D:2CF6.001B: couldn't install mouse [ 502.416383][ T8684] pyra 0003:1E7D:2CF6.001B: probe with driver pyra failed with error -71 [ 502.439688][ T8684] usb 5-1: USB disconnect, device number 60 [ 502.579150][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.681394][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.762705][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.841710][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.018181][T15025] /dev/rnullb0: Can't open blockdev [ 503.151333][T15014] chnl_net:caif_netlink_parms(): no params data found [ 503.170052][T15027] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 503.185560][T15027] /dev/rnullb0: Can't open blockdev [ 503.202250][ T36] bridge_slave_1: left allmulticast mode [ 503.209921][ T36] bridge_slave_1: left promiscuous mode [ 503.224508][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.246070][ T36] bridge_slave_0: left allmulticast mode [ 503.258553][ T36] bridge_slave_0: left promiscuous mode [ 503.273178][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.673423][ T36] dvmrp1 (unregistering): left allmulticast mode [ 503.742050][T15040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.751391][T15040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.884874][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.896209][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.915651][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 503.930291][ T36] bond0 (unregistering): Released all slaves [ 504.056060][ T36] tipc: Disabling bearer [ 504.077338][ T8684] usb 2-1: USB disconnect, device number 71 [ 504.090667][ T36] tipc: Left network mode [ 504.131823][ T36] IPVS: stopping master sync thread 6047 ... [ 504.244021][T15014] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.251641][T15014] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.259644][T15014] bridge_slave_0: entered allmulticast mode [ 504.267767][T15014] bridge_slave_0: entered promiscuous mode [ 504.281262][T15014] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.289703][T15014] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.296997][T15014] bridge_slave_1: entered allmulticast mode [ 504.314169][T15014] bridge_slave_1: entered promiscuous mode [ 504.317458][ T5867] Bluetooth: hci4: command tx timeout [ 504.506496][T15014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.527078][ T8692] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 504.540600][T15014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.678549][T15014] team0: Port device team_slave_0 added [ 504.696696][ T8692] usb 5-1: Using ep0 maxpacket: 32 [ 504.703077][T15014] team0: Port device team_slave_1 added [ 504.734170][ T8692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.752827][ T8692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.777558][ T8692] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 504.790424][ T8692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.832138][ T8692] usb 5-1: config 0 descriptor?? [ 504.845911][ T8692] hub 5-1:0.0: USB hub found [ 504.890262][T15014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.897532][T15014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.925083][T15014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.975729][ T36] hsr_slave_0: left promiscuous mode [ 504.992440][ T36] hsr_slave_1: left promiscuous mode [ 505.009958][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.024721][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.041054][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.050066][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.065714][ T8692] hub 5-1:0.0: 1 port detected [ 505.096372][ T36] veth1_macvtap: left promiscuous mode [ 505.102548][ T36] veth0_macvtap: left promiscuous mode [ 505.108790][ T36] veth1_vlan: left promiscuous mode [ 505.114278][ T36] veth0_vlan: left promiscuous mode [ 505.322021][ T8696] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 505.488538][ T8696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.499567][ T8696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.509433][ T8696] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 505.519196][ T8696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.540852][ T8696] usb 2-1: config 0 descriptor?? [ 505.754935][ T36] team0 (unregistering): Port device team_slave_1 removed [ 505.817956][ T36] team0 (unregistering): Port device team_slave_0 removed [ 505.989890][ T8696] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 506.235356][ T60] smc: removing ib device syz2 [ 506.397377][ T5867] Bluetooth: hci4: command tx timeout [ 506.642858][ T8692] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 506.737110][T15014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.745053][T15014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.772163][T15014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.818256][T15071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.871436][T15071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.928865][ T8684] vxcan1 speed is unknown, defaulting to 1000 [ 506.935230][ T8684] syz2: Port: 1 Link DOWN [ 506.945480][ T8696] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device [ 506.948291][T15072] /dev/rnullb0: Can't open blockdev [ 506.981789][ T8696] pyra 0003:1E7D:2CF6.001C: couldn't install mouse [ 507.024168][ T8696] pyra 0003:1E7D:2CF6.001C: probe with driver pyra failed with error -71 [ 507.053813][ T8696] usb 2-1: USB disconnect, device number 72 [ 507.254029][T15014] hsr_slave_0: entered promiscuous mode [ 507.264307][T15014] hsr_slave_1: entered promiscuous mode [ 507.284413][T15014] debugfs: 'hsr0' already exists in 'hsr' [ 507.291560][T15014] Cannot create hsr debugfs directory [ 507.651462][T15081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.693809][T15081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.857287][T15087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.893085][T15087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.901215][ T8684] usb 5-1: USB disconnect, device number 61 [ 507.947024][T15087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.007737][T15087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.477156][ T5867] Bluetooth: hci4: command tx timeout [ 509.107576][T15109] tipc: Started in network mode [ 509.112578][T15109] tipc: Node identity 080211000001, cluster identity 4711 [ 509.124536][T15109] tipc: Enabled bearer , priority 0 [ 509.144677][T15111] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 509.162796][T15111] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 509.167646][T15113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.188422][T15014] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 509.202562][T15113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.220507][T15014] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 509.258229][T15014] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 509.291405][T15014] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.454663][T15124] /dev/rnullb0: Can't open blockdev [ 509.473280][T15124] /dev/rnullb0: Can't open blockdev [ 509.542597][T15014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.601939][T15014] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.641183][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.648402][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.708059][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.715307][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.755997][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 509.797360][T15136] /dev/rnullb0: Can't open blockdev [ 510.262217][ T8692] tipc: Node number set to 134418688 [ 510.384845][T15155] /dev/rnullb0: Can't open blockdev [ 510.435794][T15014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.557483][ T5867] Bluetooth: hci4: command tx timeout [ 510.593450][T15014] veth0_vlan: entered promiscuous mode [ 510.613273][T15014] veth1_vlan: entered promiscuous mode [ 510.682644][T15014] veth0_macvtap: entered promiscuous mode [ 510.718858][T15014] veth1_macvtap: entered promiscuous mode [ 510.788770][T15014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.838037][T15014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.875785][ T2936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.900574][ T2936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.924859][ T2936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.943058][ T2936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.122115][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.149964][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.240078][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.266707][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.395235][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 511.936792][ T8696] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 512.084235][T15200] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2759'. [ 512.100095][T15203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.116826][ T8696] usb 2-1: Using ep0 maxpacket: 32 [ 512.128414][ T8696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.131657][T15203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.156907][ T8696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.196740][ T8696] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 512.217223][ T8696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.257252][ T8696] usb 2-1: config 0 descriptor?? [ 512.278743][T15205] batadv_slave_1: entered promiscuous mode [ 512.304921][ T8696] hub 2-1:0.0: USB hub found [ 512.318141][T15200] batadv_slave_1: left promiscuous mode [ 512.470869][ T8696] hub 2-1:0.0: 1 port detected [ 512.711790][T15214] Bluetooth: MGMT ver 1.23 [ 512.755652][T15214] /dev/rnullb0: Can't open blockdev [ 513.046771][T14579] raw-gadget.1 gadget.0: failed to queue disconnect event [ 513.106982][ T8685] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 513.246743][ T8682] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 513.256687][ T8685] usb 3-1: device descriptor read/64, error -71 [ 513.323962][T15221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 513.334073][T15221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 513.343564][T15221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 513.357671][T15221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 513.366496][T15221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 513.396777][ T8696] hub 2-1:0.0: activate --> -90 [ 513.402435][ T8682] usb 5-1: Using ep0 maxpacket: 8 [ 513.414866][ T8682] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.438149][ T8682] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 513.456960][ T8682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 513.467190][ T8682] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 513.477567][ T8682] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.494014][ T8682] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 513.503316][ T8685] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 513.516761][ T8682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 513.535719][ T8682] usb 5-1: SerialNumber: syz [ 513.576754][ T8682] usb 5-1: config 0 descriptor?? [ 513.584453][ T8682] hso 5-1:0.0: Can't find BULK OUT endpoint [ 513.607807][ T8696] usb 2-1: USB disconnect, device number 74 [ 513.666708][ T8685] usb 3-1: device descriptor read/64, error -71 [ 513.763016][T15220] chnl_net:caif_netlink_parms(): no params data found [ 513.777385][ T8685] usb usb3-port1: attempt power cycle [ 514.018911][ T8682] usb 5-1: USB disconnect, device number 62 [ 514.086276][T15220] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.093906][T15220] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.101258][T15220] bridge_slave_0: entered allmulticast mode [ 514.109430][T15220] bridge_slave_0: entered promiscuous mode [ 514.123515][T15220] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.130787][T15220] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.142065][T15220] bridge_slave_1: entered allmulticast mode [ 514.146623][ T8685] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 514.151597][T15220] bridge_slave_1: entered promiscuous mode [ 514.178187][ T8685] usb 3-1: device descriptor read/8, error -71 [ 514.253952][T15220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.267194][T15220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.403534][T15220] team0: Port device team_slave_0 added [ 514.420644][T15220] team0: Port device team_slave_1 added [ 514.429927][ T8685] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 514.457810][ T8685] usb 3-1: device descriptor read/8, error -71 [ 514.503061][T15220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.510832][T15220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.539593][T15220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.553977][T15220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.562348][T15220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.588752][T15220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.609887][ T2936] bridge_slave_1: left allmulticast mode [ 514.610251][ T8685] usb usb3-port1: unable to enumerate USB device [ 514.615728][ T2936] bridge_slave_1: left promiscuous mode [ 514.629203][ T2936] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.644180][ T2936] bridge_slave_0: left allmulticast mode [ 514.649935][ T2936] bridge_slave_0: left promiscuous mode [ 514.660759][ T2936] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.802563][ T5867] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 514.803408][T15221] Bluetooth: hci0: command 0x0c1a tx timeout [ 515.209320][ T2936] tipc: Left network mode [ 515.232411][T15220] hsr_slave_0: entered promiscuous mode [ 515.245226][T15220] hsr_slave_1: entered promiscuous mode [ 515.260819][T15220] debugfs: 'hsr0' already exists in 'hsr' [ 515.282285][T15220] Cannot create hsr debugfs directory [ 515.437358][T15221] Bluetooth: hci1: command tx timeout [ 515.617185][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 515.643938][ T2936] hsr_slave_0: left promiscuous mode [ 515.660598][ T2936] hsr_slave_1: left promiscuous mode [ 515.674936][ T2936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.685963][ T2936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.786807][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 515.799888][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.834054][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.876932][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 515.911928][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.967833][ T9] usb 2-1: config 0 descriptor?? [ 515.992639][ T9] hub 2-1:0.0: USB hub found [ 516.194159][ T9] hub 2-1:0.0: 1 port detected [ 516.795896][ T2936] team0 (unregistering): Port device team_slave_1 removed [ 516.891574][ T2936] team0 (unregistering): Port device team_slave_0 removed [ 517.139922][ T9] hub 2-1:0.0: activate --> -90 [ 517.347079][ T8685] usb 2-1: USB disconnect, device number 75 [ 517.517279][T15221] Bluetooth: hci1: command tx timeout [ 517.826674][ T30] audit: type=1326 audit(1754601863.450:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15289 comm="syz.1.2778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93e598ebe9 code=0x0 [ 518.144873][ T2936] IPVS: stop unused estimator thread 0... [ 518.313902][T15302] /dev/rnullb0: Can't open blockdev [ 518.655581][T15220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 518.693631][T15220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 518.794678][T15220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 518.836055][T15220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 519.122390][T15326] erofs (device rnullb0): cannot find valid erofs superblock [ 519.138212][T15220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.190793][T15220] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.218703][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.225865][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.274624][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.281825][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.485149][T15338] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 519.495114][T15338] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 519.546907][ T8696] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 519.597304][T15221] Bluetooth: hci1: command tx timeout [ 519.718980][ T8696] usb 3-1: Using ep0 maxpacket: 32 [ 519.742585][ T8696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.763533][ T8696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.774338][ T8696] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 519.786313][ T8696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.822342][ T8696] usb 3-1: config 0 descriptor?? [ 519.839627][ T8696] hub 3-1:0.0: USB hub found [ 519.894308][T15220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.010962][T15220] veth0_vlan: entered promiscuous mode [ 520.031726][ T8696] hub 3-1:0.0: 1 port detected [ 520.035151][T15220] veth1_vlan: entered promiscuous mode [ 520.110353][T15220] veth0_macvtap: entered promiscuous mode [ 520.138964][T15220] veth1_macvtap: entered promiscuous mode [ 520.188866][T15220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.205243][T15220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.240096][ T2936] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.259906][ T2936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.301265][ T2936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.333937][ T2936] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.455383][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.478866][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.542513][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.572218][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.947102][ T8696] hub 3-1:0.0: activate --> -90 [ 521.127205][T15391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'. [ 521.158036][ T8696] usb 3-1: USB disconnect, device number 99 [ 521.296697][ T8893] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 521.469819][ T8893] usb 1-1: config 118 interface 0 has no altsetting 0 [ 521.489405][ T8893] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 521.511954][ T8893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.546665][ T8893] usb 1-1: Product: syz [ 521.550874][ T8893] usb 1-1: Manufacturer: syz [ 521.586245][ T8893] usb 1-1: SerialNumber: syz [ 521.676738][T15221] Bluetooth: hci1: command tx timeout [ 521.693040][T15407] fuse: Unknown parameter 'user00000000000000000000' [ 521.862626][ T8893] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 521.870454][T15412] 9pnet_fd: Insufficient options for proto=fd [ 521.928240][ T8893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 521.959021][ T8893] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 521.966433][ T8893] usb 1-1: media controller created [ 522.065298][ T8893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.356823][ T8893] DVB: Unable to find symbol mt352_attach() [ 522.362851][ T8893] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 522.394927][ T8893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 522.445247][ T8893] dvb-usb: schedule remote query interval to 100 msecs. [ 522.471021][ T8893] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 522.532072][ T8893] dvb_usb_m920x 1-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 522.562649][ T8893] usb 1-1: USB disconnect, device number 123 [ 522.618841][ T9] m920x_read = error: -19 [ 522.623510][ T9] dvb-usb: error while querying for an remote control event. [ 522.749376][ T8692] m920x_read = error: -19 [ 522.753760][ T8692] dvb-usb: error while querying for an remote control event. [ 522.877166][ T8893] m920x_read = error: -19 [ 522.881587][ T8893] dvb-usb: error while querying for an remote control event. [ 522.970215][T15439] tmpfs: Unknown parameter '͍zeD7BbG%' [ 522.990137][T15439] /dev/rnullb0: Can't open blockdev [ 523.006715][ T8893] m920x_read = error: -19 [ 523.011113][ T8893] dvb-usb: error while querying for an remote control event. [ 523.148214][ T8893] m920x_read = error: -19 [ 523.152609][ T8893] dvb-usb: error while querying for an remote control event. [ 523.276972][ T8893] m920x_read = error: -19 [ 523.281364][ T8893] dvb-usb: error while querying for an remote control event. [ 523.306714][ T8682] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 523.336856][ T8696] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 523.407540][ T8893] m920x_read = error: -19 [ 523.424791][ T8893] dvb-usb: error while querying for an remote control event. [ 523.468687][ T8682] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 523.480643][ T8682] usb 3-1: config 0 has no interface number 0 [ 523.489805][ T8696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 523.502564][ T8696] usb 2-1: config 2 has an invalid interface number: 254 but max is 0 [ 523.514982][ T8696] usb 2-1: config 2 has no interface number 0 [ 523.534294][ T8682] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 523.553923][ T8696] usb 2-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=c1.88 [ 523.570465][ T8682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.583393][ T8696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.606454][ T8696] usb 2-1: Product: syz [ 523.619439][ T8696] usb 2-1: Manufacturer: syz [ 523.624084][ T8696] usb 2-1: SerialNumber: syz [ 523.634886][ T8682] usb 3-1: config 0 descriptor?? [ 523.663475][ T8682] lan78xx 3-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported [ 523.725537][ T8682] lan78xx 3-1:0.168: probe with driver lan78xx failed with error -5 [ 523.776667][ T8893] m920x_read = error: -19 [ 523.786937][ T8893] dvb-usb: error while querying for an remote control event. [ 523.865306][ T8682] usb 3-1: USB disconnect, device number 100 [ 523.907033][ T8893] m920x_read = error: -19 [ 523.911467][ T8893] dvb-usb: error while querying for an remote control event. [ 524.165627][ T8696] gspca_main: finepix-2.14.0 probing 04cb:0109 [ 524.210120][ T8696] usb 2-1: USB disconnect, device number 76 [ 524.326829][ T8682] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 524.499979][ T8682] usb 1-1: Using ep0 maxpacket: 32 [ 524.531075][ T8682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.581863][ T8682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.632353][T15466] /dev/rnullb0: Can't open blockdev [ 524.656883][ T8682] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 524.702988][ T8682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.769282][ T8682] usb 1-1: config 0 descriptor?? [ 524.826056][ T8682] hub 1-1:0.0: USB hub found [ 524.933210][ T8893] m920x_read = error: -19 [ 524.937705][ T8893] dvb-usb: error while querying for an remote control event. [ 525.013132][T15474] qnx4: no qnx4 filesystem (no root dir). [ 525.025565][ T8682] hub 1-1:0.0: 1 port detected [ 525.060540][ T8692] m920x_read = error: -19 [ 525.064927][ T8692] dvb-usb: error while querying for an remote control event. [ 525.215632][ T8692] m920x_read = error: -19 [ 525.225167][ T8692] dvb-usb: error while querying for an remote control event. [ 525.269220][T15483] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 525.357811][ T8692] m920x_read = error: -19 [ 525.364139][ T8692] dvb-usb: error while querying for an remote control event. [ 525.497036][ T8692] m920x_read = error: -19 [ 525.501431][ T8692] dvb-usb: error while querying for an remote control event. [ 525.629804][ T8692] m920x_read = error: -19 [ 525.634197][ T8692] dvb-usb: error while querying for an remote control event. [ 525.737323][ T8696] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 525.746715][ T8692] m920x_read = error: -19 [ 525.752309][ T8692] dvb-usb: error while querying for an remote control event. [ 525.815402][T15502] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 525.823914][T15502] VFS: Can't find a romfs filesystem on dev rnullb0. [ 525.823914][T15502] [ 525.838542][ T8685] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 525.878276][ T8692] m920x_read = error: -19 [ 525.882681][ T8692] dvb-usb: error while querying for an remote control event. [ 525.896642][ T8696] usb 2-1: Using ep0 maxpacket: 16 [ 525.912569][ T8696] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 525.919762][T15504] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2828'. [ 525.931980][ T8696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.939010][T15504] syz.4.2828: attempt to access beyond end of device [ 525.939010][T15504] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 525.940554][ T8696] usb 2-1: Product: syz [ 525.957082][T15504] gfs2: error -5 reading superblock [ 525.959188][ T8696] usb 2-1: Manufacturer: syz [ 525.968518][ T8696] usb 2-1: SerialNumber: syz [ 525.989338][ T8696] r8152-cfgselector 2-1: Unknown version 0x0000 [ 525.997587][ T8697] m920x_read = error: -19 [ 526.001984][ T8697] dvb-usb: error while querying for an remote control event. [ 526.016106][ T8696] r8152-cfgselector 2-1: config 0 descriptor?? [ 526.027056][ T8685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.030751][T15507] hfs: can't find a HFS filesystem on dev rnullb0 [ 526.058648][ T8685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.070127][ T8685] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 526.080036][T15507] hfs: can't find a HFS filesystem on dev rnullb0 [ 526.083031][ T8685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.114794][ T8685] usb 3-1: config 0 descriptor?? [ 526.127659][ T8697] m920x_read = error: -19 [ 526.134229][ T8697] dvb-usb: error while querying for an remote control event. [ 526.240041][ T8682] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 526.250847][ T8682] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 526.256752][ T8697] m920x_read = error: -19 [ 526.262798][ T8697] dvb-usb: error while querying for an remote control event. [ 526.280503][ T8682] usbhid 1-1:0.0: can't add hid device: -32 [ 526.295953][ T8682] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 526.377966][ T8697] m920x_read = error: -19 [ 526.382535][ T8697] dvb-usb: error while querying for an remote control event. [ 526.460314][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'. [ 526.476110][T15517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.489991][T15517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.506764][ T8697] m920x_read = error: -19 [ 526.511160][ T8697] dvb-usb: error while querying for an remote control event. [ 526.539651][ T8696] r8152-cfgselector 2-1: USB disconnect, device number 77 [ 526.558012][ T8685] pyra 0003:1E7D:2CF6.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 526.651411][ T8697] m920x_read = error: -19 [ 526.655803][ T8697] dvb-usb: error while querying for an remote control event. [ 526.817427][ T8692] m920x_read = error: -19 [ 526.822004][ T8692] dvb-usb: error while querying for an remote control event. [ 526.937452][ T8692] m920x_read = error: -19 [ 526.941954][ T8692] dvb-usb: error while querying for an remote control event. [ 527.141664][ T8685] pyra 0003:1E7D:2CF6.001D: couldn't init struct pyra_device [ 527.160015][ T8685] pyra 0003:1E7D:2CF6.001D: couldn't install mouse [ 527.182335][ T8685] pyra 0003:1E7D:2CF6.001D: probe with driver pyra failed with error -71 [ 527.203473][ T5867] Bluetooth: hci1: command 0x0405 tx timeout [ 527.211773][ T8697] m920x_read = error: -19 [ 527.223130][ T8697] dvb-usb: error while querying for an remote control event. [ 527.228334][ T8685] usb 3-1: USB disconnect, device number 101 [ 527.336961][ T8697] m920x_read = error: -19 [ 527.341905][ T8697] dvb-usb: error while querying for an remote control event. [ 527.477275][ T8692] m920x_read = error: -19 [ 527.481679][ T8692] dvb-usb: error while querying for an remote control event. [ 527.596753][ T8692] m920x_read = error: -19 [ 527.605233][ T8692] dvb-usb: error while querying for an remote control event. [ 527.656776][ T8697] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 527.726931][ T8692] m920x_read = error: -19 [ 527.739639][ T8692] dvb-usb: error while querying for an remote control event. [ 527.780000][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 527.796874][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 527.850029][ T8685] usb 1-1: USB disconnect, device number 124 [ 527.858694][ T8697] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.869598][ T8692] m920x_read = error: -19 [ 527.873969][ T8692] dvb-usb: error while querying for an remote control event. [ 527.893579][ T8697] usb 5-1: config 0 has no interfaces? [ 527.913380][ T8697] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 527.940614][ T8697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.959546][T15538] IPVS: set_ctl: invalid protocol: 136 172.30.0.3:20000 [ 527.971763][ T8697] usb 5-1: config 0 descriptor?? [ 528.022063][ T8697] m920x_read = error: -19 [ 528.037561][ T8697] dvb-usb: error while querying for an remote control event. [ 528.158225][ T8697] m920x_read = error: -19 [ 528.163995][ T8697] dvb-usb: error while querying for an remote control event. [ 528.166650][ T8685] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 528.277637][ T8697] m920x_read = error: -19 [ 528.285221][ T8697] dvb-usb: error while querying for an remote control event. [ 528.296689][ T8696] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 528.337381][ T8685] usb 1-1: Using ep0 maxpacket: 16 [ 528.344389][ T8685] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 528.362032][ T8685] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 528.372258][ T8685] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 528.394170][ T8685] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 57608, setting to 1024 [ 528.396947][ T8697] m920x_read = error: -19 [ 528.410717][ T8685] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 528.424144][ T8685] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 528.426870][ T8697] dvb-usb: error while querying for an remote control event. [ 528.438969][ T8685] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.459216][ T8685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 528.467452][ T8696] usb 3-1: Using ep0 maxpacket: 16 [ 528.481858][ T8685] usb 1-1: SerialNumber: syz [ 528.487301][ T8696] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 528.496379][ T8696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.514681][T15536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 528.533659][ T8685] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 528.547685][ T8696] usb 3-1: config 0 descriptor?? [ 528.551846][T15541] /dev/rnullb0: Can't open blockdev [ 528.558262][ T8697] m920x_read = error: -19 [ 528.571880][ T8697] dvb-usb: error while querying for an remote control event. [ 528.572619][ T8696] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 528.588122][ T8685] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 528.696715][ T8697] m920x_read = error: -19 [ 528.701100][ T8697] dvb-usb: error while querying for an remote control event. [ 528.754918][T15536] /dev/rnullb0: Can't open blockdev [ 528.772190][ T8697] usb 1-1: USB disconnect, device number 125 [ 528.816667][ T8893] m920x_read = error: -19 [ 528.821095][ T8893] dvb-usb: error while querying for an remote control event. [ 528.937171][ T8893] m920x_read = error: -19 [ 528.945765][ T8893] dvb-usb: error while querying for an remote control event. [ 529.056681][ T8893] m920x_read = error: -19 [ 529.061077][ T8893] dvb-usb: error while querying for an remote control event. [ 529.197584][ T8893] m920x_read = error: -19 [ 529.201982][ T8893] dvb-usb: error while querying for an remote control event. [ 529.317214][ T8893] m920x_read = error: -19 [ 529.321606][ T8893] dvb-usb: error while querying for an remote control event. [ 529.378715][T15540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.403708][T15540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.448200][ T8893] m920x_read = error: -19 [ 529.452867][ T8893] dvb-usb: error while querying for an remote control event. [ 529.577797][ T8893] m920x_read = error: -19 [ 529.583468][ T8893] dvb-usb: error while querying for an remote control event. [ 529.687138][ T8696] gspca_sonixj: reg_r err -110 [ 529.700687][ T8696] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 530.336921][ T8893] m920x_read = error: -19 [ 530.341318][ T8893] dvb-usb: error while querying for an remote control event. [ 530.436597][ T8893] usb 5-1: USB disconnect, device number 63 [ 530.466699][ T8697] m920x_read = error: -19 [ 530.471096][ T8697] dvb-usb: error while querying for an remote control event. [ 530.519762][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2846'. [ 530.530149][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2846'. [ 530.586757][ T8697] m920x_read = error: -19 [ 530.596906][ T8697] dvb-usb: error while querying for an remote control event. [ 530.626612][ T8696] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 530.716819][ T8697] m920x_read = error: -19 [ 530.722293][ T8697] dvb-usb: error while querying for an remote control event. [ 530.848190][ T8697] m920x_read = error: -19 [ 530.852592][ T8697] dvb-usb: error while querying for an remote control event. [ 530.907059][ T8696] usb 2-1: Using ep0 maxpacket: 32 [ 530.934237][ T8696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.953155][T15571] comedi comedi0: dt2801: I/O port conflict (0x3,2) [ 530.957129][ T8696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.972499][ T8696] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 530.981907][ T8696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.002337][ T8696] usb 2-1: config 0 descriptor?? [ 531.011013][ T8696] hub 2-1:0.0: USB hub found [ 531.016758][ T8697] m920x_read = error: -19 [ 531.021136][ T8697] dvb-usb: error while querying for an remote control event. [ 531.122857][ T8682] usb 3-1: USB disconnect, device number 102 [ 531.161222][ T8697] m920x_read = error: -19 [ 531.165602][ T8697] dvb-usb: error while querying for an remote control event. [ 531.211136][ T8696] hub 2-1:0.0: 1 port detected [ 531.287283][ T8893] m920x_read = error: -19 [ 531.291672][ T8893] dvb-usb: error while querying for an remote control event. [ 531.418716][ T8893] m920x_read = error: -19 [ 531.423119][ T8893] dvb-usb: error while querying for an remote control event. [ 531.566941][ T8893] m920x_read = error: -19 [ 531.571477][ T8893] dvb-usb: error while querying for an remote control event. [ 531.716725][ T8893] m920x_read = error: -19 [ 531.727146][ T8893] dvb-usb: error while querying for an remote control event. [ 531.848840][ T8893] m920x_read = error: -19 [ 531.853239][ T8893] dvb-usb: error while querying for an remote control event. [ 531.988333][ T8893] m920x_read = error: -19 [ 531.992815][ T8893] dvb-usb: error while querying for an remote control event. [ 532.066644][ T8682] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 532.127186][ T8893] m920x_read = error: -19 [ 532.131847][ T8893] dvb-usb: error while querying for an remote control event. [ 532.162645][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 532.193226][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 532.230057][ T8682] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.246941][ T8682] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.248120][ T8893] m920x_read = error: -19 [ 532.269107][ T8682] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 532.278083][ T8893] dvb-usb: error while querying for an remote control event. [ 532.278585][ T8682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 532.314081][ T8682] usb 3-1: SerialNumber: syz [ 532.407250][ T8893] m920x_read = error: -19 [ 532.415209][ T8893] dvb-usb: error while querying for an remote control event. [ 532.479104][ T8696] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 532.487867][ T8696] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 532.507686][ T8696] usbhid 2-1:0.0: can't add hid device: -32 [ 532.533204][ T8696] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 532.537650][ T8893] m920x_read = error: -19 [ 532.545521][ T8682] usb 3-1: 0:2 : does not exist [ 532.552633][ T8893] dvb-usb: error while querying for an remote control event. [ 532.558611][ T8682] usb 3-1: unit 5: unexpected type 0x0b [ 532.596404][ T8682] usb 3-1: USB disconnect, device number 103 [ 532.653963][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.687770][ T8893] m920x_read = error: -19 [ 532.698785][ T8893] dvb-usb: error while querying for an remote control event. [ 532.806775][ T8893] m920x_read = error: -19 [ 532.811250][ T8893] dvb-usb: error while querying for an remote control event. [ 532.926749][ T8893] m920x_read = error: -19 [ 532.931229][ T8893] dvb-usb: error while querying for an remote control event. [ 533.056711][ T8893] m920x_read = error: -19 [ 533.061802][ T8893] dvb-usb: error while querying for an remote control event. [ 533.191844][ T8893] m920x_read = error: -19 [ 533.203950][T15609] /dev/rnullb0: Can't open blockdev [ 533.204213][ T8893] dvb-usb: error while querying for an remote control event. [ 533.337602][ T8893] m920x_read = error: -19 [ 533.342014][ T8893] dvb-usb: error while querying for an remote control event. [ 533.371511][T15612] /dev/rnullb0: Can't open blockdev [ 533.469345][ T8893] m920x_read = error: -19 [ 533.475791][ T8893] dvb-usb: error while querying for an remote control event. [ 533.587592][ T8893] m920x_read = error: -19 [ 533.593406][ T8893] dvb-usb: error while querying for an remote control event. [ 533.652806][T15618] /dev/rnullb0: Can't open blockdev [ 533.716825][ T8893] m920x_read = error: -19 [ 533.726606][ T8893] dvb-usb: error while querying for an remote control event. [ 533.738995][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'. [ 533.748540][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'. [ 533.790205][T15623] tmpfs: Bad value for 'mpol' [ 533.838755][ T8893] m920x_read = error: -19 [ 533.843157][ T8893] dvb-usb: error while querying for an remote control event. [ 533.986971][ T8893] m920x_read = error: -19 [ 533.991433][ T8893] dvb-usb: error while querying for an remote control event. [ 534.003983][ T8682] Process accounting resumed [ 534.027555][ T8696] usb 2-1: USB disconnect, device number 78 [ 534.098299][T15643] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 534.105598][T15643] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 534.127823][ T8893] m920x_read = error: -19 [ 534.134694][ T8893] dvb-usb: error while querying for an remote control event. [ 534.183452][T15634] 9pnet: Could not find request transport: fe [ 534.286695][ T8697] m920x_read = error: -19 [ 534.291215][ T8697] dvb-usb: error while querying for an remote control event. [ 534.386260][T15657] hpfs: Bad magic ... probably not HPFS [ 534.416711][ T8697] m920x_read = error: -19 [ 534.430480][ T8697] dvb-usb: error while querying for an remote control event. [ 534.566827][ T8893] m920x_read = error: -19 [ 534.571216][ T8893] dvb-usb: error while querying for an remote control event. [ 534.677600][ T8682] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 534.686816][ T8893] m920x_read = error: -19 [ 534.691341][ T8893] dvb-usb: error while querying for an remote control event. [ 534.714410][T15670] /dev/rnullb0: Can't open blockdev [ 534.725481][ T8697] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 534.778924][T15672] /dev/rnullb0: Can't open blockdev [ 534.806862][ T8893] m920x_read = error: -19 [ 534.817053][ T8893] dvb-usb: error while querying for an remote control event. [ 534.833289][T15674] ntfs3(nullb0): Primary boot signature is not NTFS. [ 534.842366][T15674] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 534.849777][ T8682] usb 3-1: unable to get BOS descriptor or descriptor too short [ 534.855474][T15674] 9pnet_fd: Insufficient options for proto=fd [ 534.869471][T15674] /dev/sg0: Can't lookup blockdev [ 534.875786][ T8682] usb 3-1: config 7 has an invalid interface number: 3 but max is 1 [ 534.890845][ T8682] usb 3-1: config 7 has an invalid interface number: 232 but max is 1 [ 534.896607][ T8697] usb 5-1: Using ep0 maxpacket: 32 [ 534.902094][ T8682] usb 3-1: config 7 has no interface number 0 [ 534.914147][ T8682] usb 3-1: config 7 has no interface number 1 [ 534.918438][ T8697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.932780][ T8682] usb 3-1: config 7 interface 3 has no altsetting 0 [ 534.938977][ T8893] m920x_read = error: -19 [ 534.943976][ T8697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.943997][ T8682] usb 3-1: config 7 interface 232 has no altsetting 0 [ 534.954819][T15677] /dev/rnullb0: Can't open blockdev [ 534.966763][ T8893] dvb-usb: error while querying for an remote control event. [ 534.976027][ T8697] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 534.985827][ T8697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.985855][ T8682] usb 3-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=6f.b0 [ 535.011360][ T8682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.012222][ T8697] usb 5-1: config 0 descriptor?? [ 535.028087][ T8682] usb 3-1: Product: syz [ 535.029386][ T8697] hub 5-1:0.0: USB hub found [ 535.043593][ T8682] usb 3-1: Manufacturer: syz [ 535.051210][ T8682] usb 3-1: SerialNumber: syz [ 535.077045][ T9] m920x_read = error: -19 [ 535.083871][ T9] dvb-usb: error while querying for an remote control event. [ 535.196692][ T9] m920x_read = error: -19 [ 535.201126][ T9] dvb-usb: error while querying for an remote control event. [ 535.228948][ T8697] hub 5-1:0.0: 1 port detected [ 535.281273][ T8682] usb 3-1: unknown number of interfaces: 2 [ 535.292772][ T8682] usb 3-1: USB disconnect, device number 104 [ 535.317309][ T9] m920x_read = error: -19 [ 535.321750][ T9] dvb-usb: error while querying for an remote control event. [ 535.338291][ T8696] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 535.437764][ T8893] m920x_read = error: -19 [ 535.442591][ T8893] dvb-usb: error while querying for an remote control event. [ 535.498932][ T8696] usb 1-1: config 0 has no interfaces? [ 535.506814][ T8696] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 535.516387][ T8696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 535.525863][ T8696] usb 1-1: SerialNumber: syz [ 535.533205][ T8696] usb 1-1: config 0 descriptor?? [ 535.570359][ T8893] m920x_read = error: -19 [ 535.574815][ T8893] dvb-usb: error while querying for an remote control event. [ 535.687635][ T8893] m920x_read = error: -19 [ 535.692148][ T8893] dvb-usb: error while querying for an remote control event. [ 535.806919][ T8893] m920x_read = error: -19 [ 535.823610][ T8893] dvb-usb: error while querying for an remote control event. [ 535.946797][ T9] m920x_read = error: -19 [ 535.951333][ T9] dvb-usb: error while querying for an remote control event. [ 536.066743][ T9] m920x_read = error: -19 [ 536.071266][ T9] dvb-usb: error while querying for an remote control event. [ 536.116712][ T8893] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 536.189040][ T9] m920x_read = error: -19 [ 536.193465][ T9] dvb-usb: error while querying for an remote control event. [ 536.270919][ T8893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.282298][ T8893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.292772][ T8893] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 536.301949][ T8893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.310258][ T9] m920x_read = error: -19 [ 536.314658][ T9] dvb-usb: error while querying for an remote control event. [ 536.325570][ T8893] usb 3-1: config 0 descriptor?? [ 536.446834][ T9] m920x_read = error: -19 [ 536.451287][ T9] dvb-usb: error while querying for an remote control event. [ 536.484648][ T8697] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 536.499483][ T8697] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 536.514208][ T8697] usbhid 5-1:0.0: can't add hid device: -32 [ 536.526799][ T8697] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 536.577292][ T8697] m920x_read = error: -19 [ 536.582913][ T8697] dvb-usb: error while querying for an remote control event. [ 536.696816][ T8697] m920x_read = error: -19 [ 536.701486][ T8697] dvb-usb: error while querying for an remote control event. [ 536.770700][ T8893] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 536.820590][ T8697] m920x_read = error: -19 [ 536.825271][ T8697] dvb-usb: error while querying for an remote control event. [ 536.956862][ T9] m920x_read = error: -19 [ 536.961424][ T9] dvb-usb: error while querying for an remote control event. [ 537.079574][ T9] m920x_read = error: -19 [ 537.084487][ T9] dvb-usb: error while querying for an remote control event. [ 537.152758][ T8893] pyra 0003:1E7D:2CF6.001E: couldn't init struct pyra_device [ 537.160465][ T8893] pyra 0003:1E7D:2CF6.001E: couldn't install mouse [ 537.167196][ T8697] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 537.176336][ T8893] pyra 0003:1E7D:2CF6.001E: probe with driver pyra failed with error -71 [ 537.191030][ T8893] usb 3-1: USB disconnect, device number 105 [ 537.197835][ T9] m920x_read = error: -19 [ 537.202181][ T9] dvb-usb: error while querying for an remote control event. [ 537.306636][ T8697] usb 2-1: device descriptor read/64, error -71 [ 537.316757][ T9] m920x_read = error: -19 [ 537.321138][ T9] dvb-usb: error while querying for an remote control event. [ 537.437411][ T8893] m920x_read = error: -19 [ 537.441804][ T8893] dvb-usb: error while querying for an remote control event. [ 537.546645][ T8697] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 537.557074][ T8893] m920x_read = error: -19 [ 537.561457][ T8893] dvb-usb: error while querying for an remote control event. [ 537.677166][ T8697] usb 2-1: device descriptor read/64, error -71 [ 537.684527][ T8893] m920x_read = error: -19 [ 537.689744][ T8893] dvb-usb: error while querying for an remote control event. [ 537.798295][ T8697] usb usb2-port1: attempt power cycle [ 537.816922][ T8893] m920x_read = error: -19 [ 537.821310][ T8893] dvb-usb: error while querying for an remote control event. [ 537.936885][ T9] m920x_read = error: -19 [ 537.941280][ T9] dvb-usb: error while querying for an remote control event. [ 537.956689][ T8696] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 538.056961][ T9] m920x_read = error: -19 [ 538.061349][ T9] dvb-usb: error while querying for an remote control event. [ 538.072856][ T8685] usb 1-1: USB disconnect, device number 126 [ 538.136958][ T8697] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 538.146661][ T8696] usb 3-1: Invalid ep0 maxpacket: 64 [ 538.152285][ T8893] usb 5-1: reset high-speed USB device number 64 using dummy_hcd [ 538.171119][ T8697] usb 2-1: device descriptor read/8, error -71 [ 538.181888][ T8893] usb 5-1: device reset changed ep0 maxpacket size! [ 538.189197][ T9] m920x_read = error: -19 [ 538.193577][ T9] dvb-usb: error while querying for an remote control event. [ 538.209461][ T8893] usb 5-1: USB disconnect, device number 64 [ 538.286725][ T8696] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 538.326682][ T8701] m920x_read = error: -19 [ 538.331149][ T8701] dvb-usb: error while querying for an remote control event. [ 538.416625][ T8697] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 538.437425][ T8697] usb 2-1: device descriptor read/8, error -71 [ 538.446804][ T8701] m920x_read = error: -19 [ 538.451205][ T8701] dvb-usb: error while querying for an remote control event. [ 538.457030][ T8696] usb 3-1: Invalid ep0 maxpacket: 64 [ 538.465405][ T8696] usb usb3-port1: attempt power cycle [ 538.516707][ T8893] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 538.549993][ T8697] usb usb2-port1: unable to enumerate USB device [ 538.567910][ T8697] m920x_read = error: -19 [ 538.567939][ T8697] dvb-usb: error while querying for an remote control event. [ 538.631150][T15723] /dev/rnullb0: Can't open blockdev [ 538.669664][ T8893] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 48, changing to 9 [ 538.682663][ T8697] m920x_read = error: -19 [ 538.687989][ T8697] dvb-usb: error while querying for an remote control event. [ 538.695526][ T8893] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 8240, setting to 1024 [ 538.707050][ T8893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 538.715652][ T8893] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 538.725476][ T8893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.733559][ T8893] usb 5-1: Product: syz [ 538.737774][ T8893] usb 5-1: Manufacturer: syz [ 538.742373][ T8893] usb 5-1: SerialNumber: syz [ 538.749384][ T8893] usb 5-1: config 0 descriptor?? [ 538.756405][ T8893] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 538.767548][ T8893] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 538.776421][ T8893] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 538.784318][ T8893] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 538.792008][ T8893] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 538.799747][ T8697] m920x_read = error: -19 [ 538.804140][ T8697] dvb-usb: error while querying for an remote control event. [ 538.811869][ T8893] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 538.819722][ T8893] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 538.830113][ T8893] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 538.836684][ T8696] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 538.840334][ T8893] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 538.853609][ T8893] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 538.861305][ T8893] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 538.869128][ T8893] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 538.877236][ T8893] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 538.880537][ T8696] usb 3-1: Invalid ep0 maxpacket: 64 [ 538.887679][ T8893] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 538.916735][ T8893] m920x_read = error: -19 [ 538.921148][ T8893] dvb-usb: error while querying for an remote control event. [ 538.983013][ T8893] usb 5-1: USB disconnect, device number 65 [ 538.995892][ T8893] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 539.014995][ T8893] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 539.027939][ T8696] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 539.034328][ T8893] keyspan 5-1:0.0: device disconnected [ 539.057094][ T8697] m920x_read = error: -19 [ 539.057398][ T8696] usb 3-1: Invalid ep0 maxpacket: 64 [ 539.061532][ T8697] dvb-usb: error while querying for an remote control event. [ 539.075792][ T8696] usb usb3-port1: unable to enumerate USB device [ 539.167348][ T8697] m920x_read = error: -19 [ 539.171726][ T8697] dvb-usb: error while querying for an remote control event. [ 539.286760][ T8893] m920x_read = error: -19 [ 539.291155][ T8893] dvb-usb: error while querying for an remote control event. [ 539.407334][ T8893] m920x_read = error: -19 [ 539.411886][ T8893] dvb-usb: error while querying for an remote control event. [ 539.526979][ T8893] m920x_read = error: -19 [ 539.532728][ T8893] dvb-usb: error while querying for an remote control event. [ 539.546685][ T8696] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 539.656950][ T8893] m920x_read = error: -19 [ 539.661433][ T8893] dvb-usb: error while querying for an remote control event. [ 539.706680][ T8696] usb 1-1: Using ep0 maxpacket: 8 [ 539.714725][ T8696] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 539.723879][ T8696] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 539.732046][ T8696] usb 1-1: config 0 has no interface number 0 [ 539.738218][ T8696] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 539.751349][ T8696] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 539.762743][ T8696] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 539.775092][ T8696] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 539.776702][ T8893] m920x_read = error: -19 [ 539.784214][ T8696] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 539.791994][ T8893] dvb-usb: error while querying for an remote control event. [ 539.796649][ T8696] usb 1-1: Product: syz [ 539.814296][ T8696] usb 1-1: config 0 descriptor?? [ 539.820488][T15727] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 539.906790][ T8893] m920x_read = error: -19 [ 539.911219][ T8893] dvb-usb: error while querying for an remote control event. [ 540.026707][ T8893] m920x_read = error: -19 [ 540.031096][ T8893] dvb-usb: error while querying for an remote control event. [ 540.146926][ T8893] m920x_read = error: -19 [ 540.151343][ T8893] dvb-usb: error while querying for an remote control event. [ 540.251049][ T8696] usb 1-1: USB disconnect, device number 127 [ 540.291457][ T8697] m920x_read = error: -19 [ 540.295958][ T8697] dvb-usb: error while querying for an remote control event. [ 540.406714][ T8697] m920x_read = error: -19 [ 540.411195][ T8697] dvb-usb: error while querying for an remote control event. [ 540.436638][ T8893] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 540.526732][ T8697] m920x_read = error: -19 [ 540.531211][ T8697] dvb-usb: error while querying for an remote control event. [ 540.568253][ T8893] usb 5-1: device descriptor read/64, error -71 [ 540.647475][ T8697] m920x_read = error: -19 [ 540.651902][ T8697] dvb-usb: error while querying for an remote control event. [ 540.768221][ T8701] m920x_read = error: -19 [ 540.774897][ T8701] dvb-usb: error while querying for an remote control event. [ 540.806711][ T8893] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 540.886834][ T8697] m920x_read = error: -19 [ 540.895628][ T8697] dvb-usb: error while querying for an remote control event. [ 540.946891][ T8893] usb 5-1: device descriptor read/64, error -71 [ 541.022500][T15752] NILFS (rnullb0): couldn't find nilfs on the device [ 541.029469][ T8697] m920x_read = error: -19 [ 541.033838][ T8697] dvb-usb: error while querying for an remote control event. [ 541.057228][ T8893] usb usb5-port1: attempt power cycle [ 541.146693][ T8697] m920x_read = error: -19 [ 541.151222][ T8697] dvb-usb: error while querying for an remote control event. [ 541.235502][T15760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.266701][ T8697] m920x_read = error: -19 [ 541.271158][ T8697] dvb-usb: error while querying for an remote control event. [ 541.386804][ T8697] m920x_read = error: -19 [ 541.391221][ T8697] dvb-usb: error while querying for an remote control event. [ 541.398914][ T8893] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 541.427430][ T8893] usb 5-1: device descriptor read/8, error -71 [ 541.519768][ T8697] m920x_read = error: -19 [ 541.525364][ T8697] dvb-usb: error while querying for an remote control event. [ 541.546621][ T8696] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 541.639173][ T8697] m920x_read = error: -19 [ 541.646606][ T8697] dvb-usb: error while querying for an remote control event. [ 541.669070][ T8893] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 541.697376][ T8893] usb 5-1: device descriptor read/8, error -71 [ 541.713812][ T8696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.731489][ T8696] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.740349][T15767] /dev/rnullb0: Can't open blockdev [ 541.754493][ T8696] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 541.764714][ T8696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 541.778298][ T8696] usb 1-1: SerialNumber: syz [ 541.787205][ T8697] m920x_read = error: -19 [ 541.794446][ T8697] dvb-usb: error while querying for an remote control event. [ 541.812112][ T8893] usb usb5-port1: unable to enumerate USB device [ 541.937137][ T8697] m920x_read = error: -19 [ 541.941913][ T8697] dvb-usb: error while querying for an remote control event. [ 541.986307][T15772] /dev/rnullb0: Can't open blockdev [ 541.997722][T15762] /dev/rnullb0: Can't open blockdev [ 542.010451][ T8696] usb 1-1: 0:2 : does not exist [ 542.066743][ T8697] m920x_read = error: -19 [ 542.071164][ T8697] dvb-usb: error while querying for an remote control event. [ 542.092567][T15774] /dev/rnullb0: Can't open blockdev [ 542.145671][ T8696] usb 1-1: USB disconnect, device number 2 [ 542.207085][ T8697] m920x_read = error: -19 [ 542.211469][ T8697] dvb-usb: error while querying for an remote control event. [ 542.223501][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.352664][T15777] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 542.357303][ T8697] m920x_read = error: -19 [ 542.364452][ T8697] dvb-usb: error while querying for an remote control event. [ 542.490212][ T8697] m920x_read = error: -19 [ 542.494727][ T8697] dvb-usb: error while querying for an remote control event. [ 542.602969][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'. [ 542.614369][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'. [ 542.627621][ T8697] m920x_read = error: -19 [ 542.632012][ T8697] dvb-usb: error while querying for an remote control event. [ 542.747316][ T8893] m920x_read = error: -19 [ 542.758624][ T8893] dvb-usb: error while querying for an remote control event. [ 542.866802][ T8893] m920x_read = error: -19 [ 542.871225][ T8893] dvb-usb: error while querying for an remote control event. [ 542.936763][ T8697] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 542.986707][ T8685] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 542.990535][ T8893] m920x_read = error: -19 [ 542.998743][ T8893] dvb-usb: error while querying for an remote control event. [ 543.086704][ T8697] usb 3-1: Using ep0 maxpacket: 8 [ 543.094845][ T8697] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 543.102137][T15800] fuse: Unknown parameter 'user00000000000000000000' [ 543.107876][ T8697] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 543.123478][ T8893] m920x_read = error: -19 [ 543.127976][ T8893] dvb-usb: error while querying for an remote control event. [ 543.135578][ T8697] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 543.146990][ T8697] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 543.148827][ T8685] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 543.156220][ T8697] usb 3-1: config 0 has no interface number 0 [ 543.167462][T15801] fuseblk: Unknown parameter 'context' [ 543.175182][ T8697] usb 3-1: config 0 has no interface number 1 [ 543.183137][ T8697] usb 3-1: config 0 has no interface number 2 [ 543.188458][ T8685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.197591][ T8685] usb 1-1: Product: syz [ 543.202497][ T8685] usb 1-1: Manufacturer: syz [ 543.209850][ T8697] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.241174][ T8697] usb 3-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 543.255235][ T8697] usb 3-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 543.255682][ T8685] usb 1-1: SerialNumber: syz [ 543.269242][ T9] m920x_read = error: -19 [ 543.278386][ T9] dvb-usb: error while querying for an remote control event. [ 543.286057][ T8697] usb 3-1: too many endpoints for config 0 interface 3 altsetting 8: 32, using maximum allowed: 30 [ 543.298760][ T8697] usb 3-1: config 0 interface 3 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 543.304807][ T8685] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 543.315146][ T8697] usb 3-1: config 0 interface 150 has no altsetting 0 [ 543.331258][ T8697] usb 3-1: config 0 interface 112 has no altsetting 0 [ 543.347773][ T8682] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 543.350846][ T8697] usb 3-1: config 0 interface 3 has no altsetting 0 [ 543.366429][ T8697] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 543.376344][ T8697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.389058][ T8697] usb 3-1: config 0 descriptor?? [ 543.406707][ T8893] m920x_read = error: -19 [ 543.411310][ T8893] dvb-usb: error while querying for an remote control event. [ 543.472132][ T8697] usb 3-1: selecting invalid altsetting 0 [ 543.493673][T15804] /dev/rnullb0: Can't open blockdev [ 543.631953][ T8701] m920x_read = error: -19 [ 543.651487][ T8701] dvb-usb: error while querying for an remote control event. [ 543.662200][T15793] netlink: 'syz.2.2926': attribute type 5 has an invalid length. [ 543.671042][T15793] netlink: 'syz.2.2926': attribute type 9 has an invalid length. [ 543.796737][ T8701] m920x_read = error: -19 [ 543.801151][ T8701] dvb-usb: error while querying for an remote control event. [ 543.824544][ T5973] usb 1-1: USB disconnect, device number 3 [ 543.867706][ T8696] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 543.916892][ T8701] m920x_read = error: -19 [ 543.926207][ T8701] dvb-usb: error while querying for an remote control event. [ 544.046911][ T8701] m920x_read = error: -19 [ 544.049929][ T8696] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 544.051378][ T8701] dvb-usb: error while querying for an remote control event. [ 544.072277][ T8696] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 544.084255][T15815] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 544.101758][T15815] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 544.108443][ T8697] usb 3-1: USB disconnect, device number 110 [ 544.113449][ T8696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.167745][ T8696] usb 5-1: config 0 descriptor?? [ 544.200119][ T8696] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 544.222773][ T8893] m920x_read = error: -19 [ 544.235467][ T8893] dvb-usb: error while querying for an remote control event. [ 544.367186][ T8697] m920x_read = error: -19 [ 544.371643][ T8697] dvb-usb: error while querying for an remote control event. [ 544.383149][T15823] /dev/rnullb0: Can't open blockdev [ 544.397153][ T8682] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 544.414663][ T8682] ath9k_htc: Failed to initialize the device [ 544.427119][ T5973] usb 1-1: ath9k_htc: USB layer deinitialized [ 544.497599][ T8893] m920x_read = error: -19 [ 544.501990][ T8893] dvb-usb: error while querying for an remote control event. [ 544.626734][ T8893] m920x_read = error: -19 [ 544.631150][ T8893] dvb-usb: error while querying for an remote control event. [ 544.746722][ T8697] m920x_read = error: -19 [ 544.751115][ T8697] dvb-usb: error while querying for an remote control event. [ 544.779130][ T8685] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 544.866721][ T8697] m920x_read = error: -19 [ 544.871138][ T8697] dvb-usb: error while querying for an remote control event. [ 544.896721][ T8893] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 544.916670][ T8682] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 544.924429][ T8685] usb 2-1: device descriptor read/64, error -71 [ 544.986657][ T8697] m920x_read = error: -19 [ 544.991014][ T8697] dvb-usb: error while querying for an remote control event. [ 545.046734][ T8893] usb 1-1: Using ep0 maxpacket: 8 [ 545.053808][ T8893] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 545.065019][ T8893] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 545.078745][ T8893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 545.085472][ T8893] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 545.094633][ T8893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.104731][ T8893] usb 1-1: config 0 descriptor?? [ 545.110101][ T8697] m920x_read = error: -19 [ 545.111223][ T8682] usb 3-1: config 0 has an invalid interface number: 139 but max is 0 [ 545.114461][ T8697] dvb-usb: error while querying for an remote control event. [ 545.135797][ T8682] usb 3-1: config 0 has no interface number 0 [ 545.155021][ T8682] usb 3-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 545.178143][ T8682] usb 3-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 545.190620][ T8685] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 545.198638][ T8682] usb 3-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 545.210673][ T8682] usb 3-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 545.225895][ T8682] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 545.236375][ T8682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.245027][ T8682] usb 3-1: Product: syz [ 545.250239][ T8682] usb 3-1: Manufacturer: syz [ 545.254860][ T8682] usb 3-1: SerialNumber: syz [ 545.268781][ T8682] usb 3-1: config 0 descriptor?? [ 545.275817][T15833] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 545.283371][ T8697] m920x_read = error: -19 [ 545.287717][T15833] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 545.295112][ T8697] dvb-usb: error while querying for an remote control event. [ 545.336720][ T8685] usb 2-1: device descriptor read/64, error -71 [ 545.407372][ T8697] m920x_read = error: -19 [ 545.411793][ T8697] dvb-usb: error while querying for an remote control event. [ 545.447095][ T8685] usb usb2-port1: attempt power cycle [ 545.490781][T15833] Malformed UNC in devname [ 545.490781][T15833] [ 545.497864][T15833] CIFS: VFS: Malformed UNC in devname [ 545.509575][ T8682] mct_u232 3-1:0.139: MCT U232 converter detected [ 545.520720][ T8682] usb 3-1: MCT U232 converter now attached to ttyUSB0 [ 545.526701][ T8697] m920x_read = error: -19 [ 545.533283][ T8682] usb 3-1: USB disconnect, device number 111 [ 545.537131][ T8697] dvb-usb: error while querying for an remote control event. [ 545.551287][ T8682] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 545.556320][ T8893] mcp2200 0003:04D8:00DF.001F: unknown main item tag 0x0 [ 545.564375][ T8682] mct_u232 3-1:0.139: device disconnected [ 545.586931][ T8893] mcp2200 0003:04D8:00DF.001F: unknown main item tag 0x0 [ 545.594119][ T8893] mcp2200 0003:04D8:00DF.001F: unknown main item tag 0x0 [ 545.602449][ T8893] mcp2200 0003:04D8:00DF.001F: unknown main item tag 0x0 [ 545.613645][ T8893] mcp2200 0003:04D8:00DF.001F: unknown main item tag 0x0 [ 545.623089][ T8893] mcp2200 0003:04D8:00DF.001F: USB HID vff.ff Device [HID 04d8:00df] on usb-dummy_hcd.0-1/input0 [ 545.656816][ T8697] m920x_read = error: -19 [ 545.661284][ T8697] dvb-usb: error while querying for an remote control event. [ 545.776851][ T8893] m920x_read = error: -19 [ 545.785927][ T8893] dvb-usb: error while querying for an remote control event. [ 545.796867][ T8685] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 545.817983][ T8685] usb 2-1: device descriptor read/8, error -71 [ 545.898939][ T8697] m920x_read = error: -19 [ 545.903790][ T8697] dvb-usb: error while querying for an remote control event. [ 546.016933][ T8697] m920x_read = error: -19 [ 546.021386][ T8697] dvb-usb: error while querying for an remote control event. [ 546.069459][ T8685] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 546.097282][ T8685] usb 2-1: device descriptor read/8, error -71 [ 546.146868][ T8697] m920x_read = error: -19 [ 546.151460][ T8697] dvb-usb: error while querying for an remote control event. [ 546.208691][ T8685] usb usb2-port1: unable to enumerate USB device [ 546.271200][ T8697] m920x_read = error: -19 [ 546.275611][ T8697] dvb-usb: error while querying for an remote control event. [ 546.386809][ T8697] m920x_read = error: -19 [ 546.391350][ T8697] dvb-usb: error while querying for an remote control event. [ 546.506808][ T8697] m920x_read = error: -19 [ 546.511273][ T8697] dvb-usb: error while querying for an remote control event. [ 546.532419][ T8685] usb 5-1: USB disconnect, device number 70 [ 546.626915][ T8697] m920x_read = error: -19 [ 546.631429][ T8697] dvb-usb: error while querying for an remote control event. [ 546.747420][ T8697] m920x_read = error: -19 [ 546.756435][ T8697] dvb-usb: error while querying for an remote control event. [ 546.866916][ T8697] m920x_read = error: -19 [ 546.875156][ T8697] dvb-usb: error while querying for an remote control event. [ 546.926646][ T8685] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 546.932821][T15842] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 546.942404][T15842] UDF-fs: Scanning with blocksize 4096 failed [ 546.997486][ T8893] m920x_read = error: -19 [ 547.003365][ T8893] dvb-usb: error while querying for an remote control event. [ 547.093511][ T8685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.104719][ T8685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.114856][ T8685] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 547.121167][ T8893] m920x_read = error: -19 [ 547.126100][ T8685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.134766][ T8893] dvb-usb: error while querying for an remote control event. [ 547.141941][ T8685] usb 5-1: config 0 descriptor?? [ 547.258001][ T8893] m920x_read = error: -19 [ 547.262457][ T8893] dvb-usb: error while querying for an remote control event. [ 547.376943][ T8893] m920x_read = error: -19 [ 547.381460][ T8893] dvb-usb: error while querying for an remote control event. [ 547.496699][ T8697] m920x_read = error: -19 [ 547.501150][ T8697] dvb-usb: error while querying for an remote control event. [ 547.591211][ T8685] pyra 0003:1E7D:2CF6.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 547.616792][ T8697] m920x_read = error: -19 [ 547.621247][ T8697] dvb-usb: error while querying for an remote control event. [ 547.719604][ T8682] usb 1-1: USB disconnect, device number 4 [ 547.829987][ T8697] m920x_read = error: -19 [ 547.852696][ T8697] dvb-usb: error while querying for an remote control event. [ 547.977716][ T8685] pyra 0003:1E7D:2CF6.0020: couldn't init struct pyra_device [ 547.981158][ T8697] m920x_read = error: -19 [ 547.996582][ T8697] dvb-usb: error while querying for an remote control event. [ 548.001039][ T8685] pyra 0003:1E7D:2CF6.0020: couldn't install mouse [ 548.023103][ T8685] pyra 0003:1E7D:2CF6.0020: probe with driver pyra failed with error -71 [ 548.071523][ T8685] usb 5-1: USB disconnect, device number 71 [ 548.116915][ T8697] m920x_read = error: -19 [ 548.129001][ T8697] dvb-usb: error while querying for an remote control event. [ 548.247844][ T8697] m920x_read = error: -19 [ 548.252375][ T8697] dvb-usb: error while querying for an remote control event. [ 548.376902][ T8697] m920x_read = error: -19 [ 548.386171][ T8697] dvb-usb: error while querying for an remote control event. [ 548.497462][ T8697] m920x_read = error: -19 [ 548.501905][ T8697] dvb-usb: error while querying for an remote control event. [ 548.619625][ T8697] m920x_read = error: -19 [ 548.624023][ T8697] dvb-usb: error while querying for an remote control event. [ 548.709039][T15875] syz.4.2951 (15875): /proc/15874/oom_adj is deprecated, please use /proc/15874/oom_score_adj instead. [ 548.756792][ T8697] m920x_read = error: -19 [ 548.766428][ T8697] dvb-usb: error while querying for an remote control event. [ 548.887253][ T8893] m920x_read = error: -19 [ 548.891688][ T8893] dvb-usb: error while querying for an remote control event. [ 548.929364][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2954'. [ 548.970320][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2954'. [ 549.017719][ T8697] m920x_read = error: -19 [ 549.026632][ T8697] dvb-usb: error while querying for an remote control event. [ 549.086776][ T5973] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 549.121789][T15891] affs: No valid root block on device rnullb0 [ 549.168935][ T8697] m920x_read = error: -19 [ 549.176642][ T8697] dvb-usb: error while querying for an remote control event. [ 549.226828][ T5973] usb 1-1: device descriptor read/64, error -71 [ 549.307126][ T8697] m920x_read = error: -19 [ 549.311679][ T8697] dvb-usb: error while querying for an remote control event. [ 549.427544][ T8697] m920x_read = error: -19 [ 549.437841][ T8697] dvb-usb: error while querying for an remote control event. [ 549.443984][T15899] hpfs: Bad magic ... probably not HPFS [ 549.486612][ T5973] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 549.546912][ T8697] m920x_read = error: -19 [ 549.551307][ T8697] dvb-usb: error while querying for an remote control event. [ 549.612650][T15903] netlink: 'syz.1.2961': attribute type 21 has an invalid length. [ 549.620701][ T5973] usb 1-1: device descriptor read/64, error -71 [ 549.628001][T15903] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2961'. [ 549.677013][ T8697] m920x_read = error: -19 [ 549.681516][ T8697] dvb-usb: error while querying for an remote control event. [ 549.752953][ T5973] usb usb1-port1: attempt power cycle [ 549.758914][ T8682] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 549.806832][ T8697] m920x_read = error: -19 [ 549.811224][ T8697] dvb-usb: error while querying for an remote control event. [ 549.836201][T15909] fuse: Unknown parameter 'user00000000000000000000' [ 549.919224][ T8682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.941675][ T8682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.949080][ T8697] m920x_read = error: -19 [ 549.956073][ T8697] dvb-usb: error while querying for an remote control event. [ 550.089043][ T8697] m920x_read = error: -19 [ 550.098825][ T8697] dvb-usb: error while querying for an remote control event. [ 550.237188][ T8697] m920x_read = error: -19 [ 550.251907][ T8682] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 550.254039][ T8697] dvb-usb: error while querying for an remote control event. [ 550.266728][ T8682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.289377][ T8682] usb 5-1: config 0 descriptor?? [ 550.306686][ T5973] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 550.339720][ T5973] usb 1-1: device descriptor read/8, error -71 [ 550.487332][ T8701] m920x_read = error: -19 [ 550.491726][ T8701] dvb-usb: error while querying for an remote control event. [ 550.586807][ T5973] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 550.617292][ T5973] usb 1-1: device descriptor read/8, error -71 [ 550.626868][ T8697] m920x_read = error: -19 [ 550.631267][ T8697] dvb-usb: error while querying for an remote control event. [ 550.729435][ T5973] usb usb1-port1: unable to enumerate USB device [ 550.765759][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.778950][ T9] m920x_read = error: -19 [ 550.783334][ T9] dvb-usb: error while querying for an remote control event. [ 550.787764][ T8682] pyra 0003:1E7D:2CF6.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 550.947002][ T8697] m920x_read = error: -19 [ 550.951395][ T8697] dvb-usb: error while querying for an remote control event. [ 550.990357][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.098675][ T8697] m920x_read = error: -19 [ 551.103102][ T8697] dvb-usb: error while querying for an remote control event. [ 551.171147][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.196931][ T8682] pyra 0003:1E7D:2CF6.0021: couldn't init struct pyra_device [ 551.204414][ T8682] pyra 0003:1E7D:2CF6.0021: couldn't install mouse [ 551.228633][ T8682] pyra 0003:1E7D:2CF6.0021: probe with driver pyra failed with error -71 [ 551.246976][ T8697] m920x_read = error: -19 [ 551.254123][ T8697] dvb-usb: error while querying for an remote control event. [ 551.262809][ T8682] usb 5-1: USB disconnect, device number 72 [ 551.369388][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.386984][ T8697] m920x_read = error: -19 [ 551.391371][ T8697] dvb-usb: error while querying for an remote control event. [ 551.516732][ T9] m920x_read = error: -19 [ 551.521682][ T9] dvb-usb: error while querying for an remote control event. [ 551.658059][ T9] m920x_read = error: -19 [ 551.662558][ T9] dvb-usb: error while querying for an remote control event. [ 551.691784][ T36] dummy0: left allmulticast mode [ 551.701783][ T36] bridge0: port 3(dummy0) entered disabled state [ 551.712356][ T36] bridge_slave_1: left allmulticast mode [ 551.738882][ T36] bridge_slave_1: left promiscuous mode [ 551.753226][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.773765][ T36] bridge_slave_0: left allmulticast mode [ 551.790625][ T36] bridge_slave_0: left promiscuous mode [ 551.797568][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 551.807161][ T9] m920x_read = error: -19 [ 551.811528][ T9] dvb-usb: error while querying for an remote control event. [ 551.833532][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 551.843361][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 551.869368][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 551.876040][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.889435][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 551.967517][ T9] m920x_read = error: -19 [ 551.980441][ T9] dvb-usb: error while querying for an remote control event. [ 552.025246][T15932] hfs: can't find a HFS filesystem on dev rnullb0 [ 552.072922][T15933] MINIX-fs: blocksize too small for device [ 552.137651][ T9] m920x_read = error: -19 [ 552.144465][ T9] dvb-usb: error while querying for an remote control event. [ 552.259151][ T9] m920x_read = error: -19 [ 552.263615][ T9] dvb-usb: error while querying for an remote control event. [ 552.396791][ T9] m920x_read = error: -19 [ 552.401295][ T9] dvb-usb: error while querying for an remote control event. [ 552.469026][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.480181][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.491051][ T36] bond0 (unregistering): Released all slaves [ 552.516836][ T9] m920x_read = error: -19 [ 552.521226][ T9] dvb-usb: error while querying for an remote control event. [ 552.598752][ T36] tipc: Disabling bearer [ 552.629485][ T36] tipc: Left network mode [ 552.656766][ T9] m920x_read = error: -19 [ 552.676589][ T9] dvb-usb: error while querying for an remote control event. [ 552.800097][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2974'. [ 552.817126][ T8701] m920x_read = error: -19 [ 552.821504][ T8701] dvb-usb: error while querying for an remote control event. [ 552.866710][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2974'. [ 552.956851][ T9] m920x_read = error: -19 [ 552.964424][ T9] dvb-usb: error while querying for an remote control event. [ 553.097384][ T8697] m920x_read = error: -19 [ 553.124564][ T8697] dvb-usb: error while querying for an remote control event. [ 553.196920][ T8701] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 553.256805][ T8697] m920x_read = error: -19 [ 553.265326][ T8697] dvb-usb: error while querying for an remote control event. [ 553.274652][ T36] hsr_slave_0: left promiscuous mode [ 553.286881][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 553.304331][ T36] hsr_slave_1: left promiscuous mode [ 553.312602][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.321970][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.332270][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.342053][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.377262][ T8697] m920x_read = error: -19 [ 553.381759][ T8701] usb 3-1: Using ep0 maxpacket: 32 [ 553.388920][ T8697] dvb-usb: error while querying for an remote control event. [ 553.400948][ T36] veth1_macvtap: left promiscuous mode [ 553.409547][ T8701] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 553.423095][ T36] veth0_macvtap: left promiscuous mode [ 553.431025][ T8701] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.446437][ T36] veth1_vlan: left promiscuous mode [ 553.455125][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.467477][ T36] veth0_vlan: left promiscuous mode [ 553.473714][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.486558][ T8701] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 553.496025][ T8701] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 553.504586][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 553.514530][ T8701] usb 3-1: Product: syz [ 553.519498][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.527999][ T8893] m920x_read = error: -19 [ 553.547466][ T8893] dvb-usb: error while querying for an remote control event. [ 553.555067][ T8701] usb 3-1: Manufacturer: syz [ 553.569625][ T8701] hub 3-1:4.0: bad descriptor, ignoring hub [ 553.577180][ T9] usb 1-1: config 0 descriptor?? [ 553.584472][ T8701] hub 3-1:4.0: probe with driver hub failed with error -5 [ 553.611863][ T8701] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 553.667774][ T8701] m920x_read = error: -19 [ 553.672837][ T8701] dvb-usb: error while querying for an remote control event. [ 553.787324][ T8701] m920x_read = error: -19 [ 553.795335][ T8701] dvb-usb: error while querying for an remote control event. [ 553.924508][T15221] Bluetooth: hci2: command tx timeout [ 553.940111][ T8701] m920x_read = error: -19 [ 553.944473][ T8701] dvb-usb: error while querying for an remote control event. [ 554.025384][ T9] pyra 0003:1E7D:2CF6.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 554.028001][T15974] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 554.051573][T15974] Error validating options; rc = [-22] [ 554.067378][ T8701] m920x_read = error: -19 [ 554.072789][ T8701] dvb-usb: error while querying for an remote control event. [ 554.197025][ T8701] m920x_read = error: -19 [ 554.204289][ T8701] dvb-usb: error while querying for an remote control event. [ 554.327549][ T8701] m920x_read = error: -19 [ 554.331991][ T8701] dvb-usb: error while querying for an remote control event. [ 554.412375][ T36] team0 (unregistering): Port device team_slave_1 removed [ 554.416393][ T9] pyra 0003:1E7D:2CF6.0022: couldn't init struct pyra_device [ 554.436279][ T9] pyra 0003:1E7D:2CF6.0022: couldn't install mouse [ 554.460068][ T8701] m920x_read = error: -19 [ 554.464430][ T8701] dvb-usb: error while querying for an remote control event. [ 554.472701][ T9] pyra 0003:1E7D:2CF6.0022: probe with driver pyra failed with error -71 [ 554.493874][ T9] usb 1-1: USB disconnect, device number 9 [ 554.538756][ T36] team0 (unregistering): Port device team_slave_0 removed [ 554.596706][ T8701] m920x_read = error: -19 [ 554.601166][ T8701] dvb-usb: error while querying for an remote control event. [ 554.716975][ T8701] m920x_read = error: -19 [ 554.721365][ T8701] dvb-usb: error while querying for an remote control event. [ 554.854467][ T8701] m920x_read = error: -19 [ 554.858902][ T8701] dvb-usb: error while querying for an remote control event. [ 554.978502][ T8701] m920x_read = error: -19 [ 554.990938][ T8701] dvb-usb: error while querying for an remote control event. [ 555.116632][ T8701] m920x_read = error: -19 [ 555.123851][ T8701] dvb-usb: error while querying for an remote control event. [ 555.250187][ T8701] m920x_read = error: -19 [ 555.254584][ T8701] dvb-usb: error while querying for an remote control event. [ 555.373882][ T8701] m920x_read = error: -19 [ 555.379850][ T8701] dvb-usb: error while querying for an remote control event. [ 555.390860][T15921] chnl_net:caif_netlink_parms(): no params data found [ 555.496757][ T8701] m920x_read = error: -19 [ 555.504490][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 555.516678][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 555.525609][ T8701] dvb-usb: error while querying for an remote control event. [ 555.674670][ T8701] m920x_read = error: -19 [ 555.683880][ T8701] dvb-usb: error while querying for an remote control event. [ 555.693744][T15921] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.712752][T15921] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.733310][T16012] /dev/rnullb0: Can't open blockdev [ 555.763611][T15921] bridge_slave_0: entered allmulticast mode [ 555.780074][T15921] bridge_slave_0: entered promiscuous mode [ 555.825599][ T8893] m920x_read = error: -19 [ 555.841575][ T8893] dvb-usb: error while querying for an remote control event. [ 555.857113][T15921] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.881038][T15921] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.903652][T15921] bridge_slave_1: entered allmulticast mode [ 555.930380][T15921] bridge_slave_1: entered promiscuous mode [ 555.976714][ T8697] m920x_read = error: -19 [ 555.981100][ T8697] dvb-usb: error while querying for an remote control event. [ 556.001233][T15221] Bluetooth: hci2: command tx timeout [ 556.007187][ T8893] usb 3-1: USB disconnect, device number 112 [ 556.090433][T16028] overlay: ./file0 is not a directory [ 556.139472][ T8893] m920x_read = error: -19 [ 556.143866][ T8893] dvb-usb: error while querying for an remote control event. [ 556.179023][T15921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.261650][T15921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.281962][T16031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2988'. [ 556.299304][ T8893] m920x_read = error: -19 [ 556.301882][T16031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2988'. [ 556.317532][ T8893] dvb-usb: error while querying for an remote control event. [ 556.467290][ T8893] m920x_read = error: -19 [ 556.470088][T15921] team0: Port device team_slave_0 added [ 556.471666][ T8893] dvb-usb: error while querying for an remote control event. [ 556.485224][T15921] team0: Port device team_slave_1 added [ 556.506615][ T5973] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 556.626719][ T8697] m920x_read = error: -19 [ 556.631124][ T8697] dvb-usb: error while querying for an remote control event. [ 556.664307][T15921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.676930][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.709226][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.720520][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.731399][T15921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.743915][ T5973] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 556.756785][ T8893] m920x_read = error: -19 [ 556.757613][T15921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.761163][ T8893] dvb-usb: error while querying for an remote control event. [ 556.768321][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.790107][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.823228][T16054] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2993'. [ 556.830061][ T5973] usb 5-1: config 0 descriptor?? [ 556.876168][T16057] ALSA: seq fatal error: cannot create timer (-22) [ 556.889612][T15921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.917188][ T8893] m920x_read = error: -19 [ 556.925721][ T8893] dvb-usb: error while querying for an remote control event. [ 556.991739][T16054] Can't find a SQUASHFS superblock on rnullb0 [ 557.032582][T15921] hsr_slave_0: entered promiscuous mode [ 557.044222][T15921] hsr_slave_1: entered promiscuous mode [ 557.053558][T15921] debugfs: 'hsr0' already exists in 'hsr' [ 557.059950][ T8697] m920x_read = error: -19 [ 557.065150][ T8697] dvb-usb: error while querying for an remote control event. [ 557.076994][T15921] Cannot create hsr debugfs directory [ 557.197484][ T8697] m920x_read = error: -19 [ 557.201878][ T8697] dvb-usb: error while querying for an remote control event. [ 557.224175][ T8893] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 557.283952][ T5973] pyra 0003:1E7D:2CF6.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 557.351259][ T8697] m920x_read = error: -19 [ 557.357897][ T8687] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 557.379504][ T8697] dvb-usb: error while querying for an remote control event. [ 557.406626][ T8893] usb 1-1: Using ep0 maxpacket: 32 [ 557.421573][ T8893] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 557.452248][ T8893] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 557.481045][ T5973] pyra 0003:1E7D:2CF6.0023: couldn't init struct pyra_device [ 557.488984][ T8893] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 557.489017][ T8893] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 557.489039][ T8893] usb 1-1: Product: syz [ 557.489055][ T8893] usb 1-1: Manufacturer: syz [ 557.516690][ T8697] m920x_read = error: -19 [ 557.529318][ T5973] pyra 0003:1E7D:2CF6.0023: couldn't install mouse [ 557.539638][ T8687] usb 3-1: Using ep0 maxpacket: 32 [ 557.547688][ T8697] dvb-usb: error while querying for an remote control event. [ 557.550550][ T8687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.565028][T15921] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 557.574069][ T8893] hub 1-1:4.0: bad descriptor, ignoring hub [ 557.575502][ T5973] pyra 0003:1E7D:2CF6.0023: probe with driver pyra failed with error -71 [ 557.592054][ T8893] hub 1-1:4.0: probe with driver hub failed with error -5 [ 557.600335][ T8687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.610954][ T5973] usb 5-1: USB disconnect, device number 73 [ 557.611937][ T8893] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 557.630124][T15921] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 557.631615][ T8687] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 557.661977][ T8687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.666691][ T9] m920x_read = error: -19 [ 557.675944][ T9] dvb-usb: error while querying for an remote control event. [ 557.681180][ T8687] usb 3-1: config 0 descriptor?? [ 557.693631][T15921] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 557.698430][ T8687] hub 3-1:0.0: USB hub found [ 557.730072][T15921] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 557.807027][ T8893] m920x_read = error: -19 [ 557.811679][ T8893] dvb-usb: error while querying for an remote control event. [ 557.889995][T15921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.899059][ T8687] hub 3-1:0.0: 1 port detected [ 557.920147][T15921] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.936675][ T8893] m920x_read = error: -19 [ 557.937077][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.941244][ T8893] dvb-usb: error while querying for an remote control event. [ 557.948186][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.973058][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.980286][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.079770][T15221] Bluetooth: hci2: command tx timeout [ 558.090019][ T8893] m920x_read = error: -19 [ 558.100058][ T8893] dvb-usb: error while querying for an remote control event. [ 558.226776][ T8893] m920x_read = error: -19 [ 558.234459][ T8893] dvb-usb: error while querying for an remote control event. [ 558.369498][ T8893] m920x_read = error: -19 [ 558.382889][ T8893] dvb-usb: error while querying for an remote control event. [ 558.397599][ T8682] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 558.450103][T15921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.500439][ T8893] m920x_read = error: -19 [ 558.506092][ T8893] dvb-usb: error while querying for an remote control event. [ 558.557887][ T8682] usb 5-1: Using ep0 maxpacket: 16 [ 558.576369][ T8682] usb 5-1: unable to get BOS descriptor or descriptor too short [ 558.595189][ T8682] usb 5-1: config 7 has an invalid interface number: 195 but max is 0 [ 558.613732][ T8682] usb 5-1: config 7 has no interface number 0 [ 558.626922][ T8682] usb 5-1: config 7 interface 195 altsetting 99 endpoint 0x2 has an invalid bInterval 144, changing to 11 [ 558.645539][ T8682] usb 5-1: config 7 interface 195 altsetting 99 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 558.647069][ T8893] m920x_read = error: -19 [ 558.675086][ T8893] dvb-usb: error while querying for an remote control event. [ 558.677890][ T8682] usb 5-1: config 7 interface 195 has no altsetting 0 [ 558.729955][ T8682] usb 5-1: New USB device found, idVendor=0846, idProduct=6d41, bcdDevice=1d.1a [ 558.741549][ T8682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.766766][ T8682] usb 5-1: Product: 覽챉鬘䀛ᚰЯ沀ᘮ祗꺻ﱰቲ䭉చ蟦釉멁掬ꎩ㔧ྗ䴚㖹ᙹ↛쬑 [ 558.786559][ T8682] usb 5-1: Manufacturer: 磹⪇ᇬ캨訆炃ẩ㩘 [ 558.807810][ T8893] m920x_read = error: -19 [ 558.808076][ T8682] usb 5-1: SerialNumber: syz [ 558.817665][ T8893] dvb-usb: error while querying for an remote control event. [ 558.948100][ T8893] m920x_read = error: -19 [ 558.952802][ T8893] dvb-usb: error while querying for an remote control event. [ 559.025057][T15921] veth0_vlan: entered promiscuous mode [ 559.046336][T15921] veth1_vlan: entered promiscuous mode [ 559.066492][ T8682] usb 5-1: USB disconnect, device number 74 [ 559.077616][ T8893] m920x_read = error: -19 [ 559.087184][ T8893] dvb-usb: error while querying for an remote control event. [ 559.121179][ T8687] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 559.124212][T15921] veth0_macvtap: entered promiscuous mode [ 559.135310][ T8687] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 559.157989][T15921] veth1_macvtap: entered promiscuous mode [ 559.192851][T15921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.198228][ T8687] usbhid 3-1:0.0: can't add hid device: -32 [ 559.217348][ T8701] m920x_read = error: -19 [ 559.221794][ T8687] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 559.224075][ T8701] dvb-usb: error while querying for an remote control event. [ 559.243891][T15921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.290772][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.303755][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.318598][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.328796][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.357997][ T8701] m920x_read = error: -19 [ 559.373701][ T8701] dvb-usb: error while querying for an remote control event. [ 559.445477][T15067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.466937][T15067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.511886][T15067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.517062][ T8893] m920x_read = error: -19 [ 559.524244][ T8893] dvb-usb: error while querying for an remote control event. [ 559.527034][T15067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.647736][ T8697] m920x_read = error: -19 [ 559.668658][ T8697] dvb-usb: error while querying for an remote control event. [ 559.807018][ T8893] m920x_read = error: -19 [ 559.821811][ T8893] dvb-usb: error while querying for an remote control event. [ 559.956002][T16132] /dev/rnullb0: Can't open blockdev [ 559.986935][ T8893] m920x_read = error: -19 [ 559.999075][ T8893] dvb-usb: error while querying for an remote control event. [ 560.028099][ T8682] usb 1-1: USB disconnect, device number 10 [ 560.137222][ T8893] m920x_read = error: -19 [ 560.146571][ T8893] dvb-usb: error while querying for an remote control event. [ 560.157261][T15221] Bluetooth: hci2: command tx timeout [ 560.287033][ T8893] m920x_read = error: -19 [ 560.291430][ T8893] dvb-usb: error while querying for an remote control event. [ 560.434553][ T8893] m920x_read = error: -19 [ 560.441471][ T8893] dvb-usb: error while querying for an remote control event. [ 560.576642][ T8697] m920x_read = error: -19 [ 560.582562][ T8697] dvb-usb: error while querying for an remote control event. [ 560.600313][T16160] netlink: 'syz.0.3006': attribute type 6 has an invalid length. [ 560.736780][ T8697] m920x_read = error: -19 [ 560.741174][ T8697] dvb-usb: error while querying for an remote control event. [ 560.775174][ T8687] usb 3-1: USB disconnect, device number 113 [ 560.878426][T16173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.887611][ T8697] m920x_read = error: -19 [ 560.896614][ T8697] dvb-usb: error while querying for an remote control event. [ 560.993142][ C1] [ 560.995511][ C1] ============================= [ 561.000368][ C1] [ BUG: Invalid wait context ] [ 561.005242][ C1] 6.16.0-next-20250807-syzkaller #0 Not tainted [ 561.011490][ C1] ----------------------------- [ 561.016343][ C1] syz.0.3009/16171 is trying to lock: [ 561.021718][ C1] ffff8880333cd410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 561.031242][ C1] other info that might help us debug this: [ 561.037142][ C1] context-{2:2} [ 561.040609][ C1] 4 locks held by syz.0.3009/16171: [ 561.045818][ C1] #0: ffff8880230c0948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 561.056568][ C1] #1: ffff88802510cd60 (&dd->lock){+.+.}-{3:3}, at: dd_insert_requests+0x14d/0xdc0 [ 561.065977][ C1] #2: ffffffff8e539ee0 (rcu_read_lock){....}-{1:3}, at: blk_add_trace_rq+0x31/0x330 [ 561.075466][ C1] #3: ffff8880333cd960 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1c3/0x9b0 [ 561.085384][ C1] stack backtrace: [ 561.089098][ C1] CPU: 1 UID: 0 PID: 16171 Comm: syz.0.3009 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 561.089118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.089129][ C1] Call Trace: [ 561.089137][ C1] [ 561.089145][ C1] dump_stack_lvl+0x189/0x250 [ 561.089171][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.089192][ C1] ? __pfx__printk+0x10/0x10 [ 561.089214][ C1] ? print_lock_name+0xde/0x100 [ 561.089235][ C1] __lock_acquire+0xbcb/0xd20 [ 561.089254][ C1] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 561.089273][ C1] lock_acquire+0x120/0x360 [ 561.089289][ C1] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 561.089312][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 561.089332][ C1] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 561.089351][ C1] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 561.089370][ C1] ? xa_load+0x1ea/0x210 [ 561.089387][ C1] kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 561.089406][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 561.089428][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 561.089448][ C1] ? kvm_xen_set_evtchn_fast+0x1c3/0x9b0 [ 561.089467][ C1] xen_timer_callback+0x109/0x220 [ 561.089487][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 561.089505][ C1] __hrtimer_run_queues+0x4e0/0xc60 [ 561.089531][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 561.089549][ C1] ? read_tsc+0x9/0x20 [ 561.089568][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 561.089595][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 561.089618][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 561.089639][ C1] [ 561.089645][ C1] [ 561.089651][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 561.089669][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x3c/0x70 [ 561.089686][ C1] Code: 8b 15 58 2c 24 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c 8b 91 18 16 00 00 83 fa 02 75 21 <48> 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c 16 00 00 48 39 [ 561.089701][ C1] RSP: 0018:ffffc9000c5d6fb0 EFLAGS: 00000246 [ 561.089716][ C1] RAX: ffffffff81c81938 RBX: ffff88802fbaeb80 RCX: ffff88801cbbbc00 [ 561.089728][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000022 [ 561.089739][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81c816d1 [ 561.089749][ C1] R10: dffffc0000000000 R11: fffffbfff1fc97c7 R12: ffff88802525b180 [ 561.089761][ C1] R13: 000000000110000c R14: dffffc0000000000 R15: 0000000000084700 [ 561.089775][ C1] ? blk_add_trace_rq+0x31/0x330 [ 561.089793][ C1] ? blk_add_trace_rq+0x298/0x330 [ 561.089812][ C1] blk_add_trace_rq+0x298/0x330 [ 561.089831][ C1] dd_insert_requests+0xbef/0xdc0 [ 561.089858][ C1] ? __pfx_dd_insert_requests+0x10/0x10 [ 561.089878][ C1] ? percpu_ref_get_many+0x21/0x1e0 [ 561.089907][ C1] ? percpu_ref_get_many+0x21/0x1e0 [ 561.089927][ C1] ? percpu_ref_get_many+0x18c/0x1e0 [ 561.089949][ C1] blk_mq_dispatch_list+0x736/0xe00 [ 561.089969][ C1] ? blk_mq_dispatch_list+0x180/0xe00 [ 561.089989][ C1] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 561.090011][ C1] blk_mq_flush_plug_list+0x469/0x550 [ 561.090033][ C1] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 561.090051][ C1] ? rcu_is_watching+0x15/0xb0 [ 561.090073][ C1] __blk_flush_plug+0x3d3/0x4b0 [ 561.090094][ C1] ? __pfx___blk_flush_plug+0x10/0x10 [ 561.090115][ C1] blk_finish_plug+0x5e/0x90 [ 561.090133][ C1] read_pages+0x3b2/0x580 [ 561.090153][ C1] ? __pfx_read_pages+0x10/0x10 [ 561.090171][ C1] ? folio_add_lru+0x2d0/0x3d0 [ 561.090190][ C1] ? filemap_add_folio+0x1af/0x270 [ 561.090209][ C1] page_cache_ra_order+0x8ca/0xd40 [ 561.090233][ C1] filemap_fault+0x5a0/0x1200 [ 561.090256][ C1] ? __pfx_filemap_fault+0x10/0x10 [ 561.090277][ C1] ? __handle_mm_fault+0x27b7/0x5440 [ 561.090294][ C1] __do_fault+0x138/0x390 [ 561.090311][ C1] __handle_mm_fault+0x3611/0x5440 [ 561.090331][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 561.090349][ C1] ? follow_page_pte+0x7ef/0x13e0 [ 561.090366][ C1] handle_mm_fault+0x40a/0x8e0 [ 561.090384][ C1] __get_user_pages+0x1699/0x2ce0 [ 561.090416][ C1] populate_vma_page_range+0x29f/0x3a0 [ 561.090439][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 561.090460][ C1] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 561.090480][ C1] ? down_read+0x1ad/0x2e0 [ 561.090495][ C1] __mm_populate+0x24c/0x380 [ 561.090516][ C1] ? __pfx___mm_populate+0x10/0x10 [ 561.090537][ C1] ? up_write+0x1c4/0x420 [ 561.090559][ C1] vm_mmap_pgoff+0x387/0x4d0 [ 561.090582][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 561.090603][ C1] ? __fget_files+0x2a/0x420 [ 561.090624][ C1] ? __fget_files+0x3a0/0x420 [ 561.090643][ C1] ? __fget_files+0x2a/0x420 [ 561.090663][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 561.090680][ C1] do_syscall_64+0xfa/0x3b0 [ 561.090693][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.090713][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.090728][ C1] ? clear_bhb_loop+0x60/0xb0 [ 561.090744][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.090759][ C1] RIP: 0033:0x7fbc3e98ebe9 [ 561.090773][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.090786][ C1] RSP: 002b:00007fbc3f841038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 561.090802][ C1] RAX: ffffffffffffffda RBX: 00007fbc3ebb5fa0 RCX: 00007fbc3e98ebe9 [ 561.090813][ C1] RDX: 000000000300000b RSI: 0000000000b36000 RDI: 0000200000000000 [ 561.090824][ C1] RBP: 00007fbc3ea11e19 R08: 0000000000000003 R09: 00000000e3e1a000 [ 561.090834][ C1] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 561.090844][ C1] R13: 00007fbc3ebb6038 R14: 00007fbc3ebb5fa0 R15: 00007ffe0da01818 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 561.090861][ C1] [ 561.650365][ T8697] m920x_read = error: -19 [ 561.655244][ T8697] dvb-usb: error while querying for an remote control event. [ 561.776733][ T8697] m920x_read = error: -19 [ 561.781488][ T8697] dvb-usb: error while querying for an remote control event. [ 562.094569][ T8697] m920x_read = error: -19 [ 562.161848][ T8697] dvb-usb: error while querying for an remote control event. [ 562.306919][ T8697] m920x_read = error: -19 [ 562.311298][ T8697] dvb-usb: error while querying for an remote control event. [ 562.426740][ T8697] m920x_read = error: -19 [ 562.431129][ T8697] dvb-usb: error while querying for an remote control event. [ 562.560820][ T8701] m920x_read = error: -19 [ 562.565200][ T8701] dvb-usb: error while querying for an remote control event. [ 562.621563][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.686887][ T8701] m920x_read = error: -19 [ 562.691261][ T8701] dvb-usb: error while querying for an remote control event. [ 562.703776][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.790372][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.807133][ T8701] m920x_read = error: -19 [ 562.811503][ T8701] dvb-usb: error while querying for an remote control event. [ 562.864470][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.936689][ T8701] m920x_read = error: -19 [ 562.944615][ T8701] dvb-usb: error while querying for an remote control event. [ 562.959682][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.970787][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.979447][ T12] bridge_slave_1: left allmulticast mode [ 562.986448][ T12] bridge_slave_1: left promiscuous mode [ 562.995743][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.009057][ T12] bridge_slave_0: left allmulticast mode [ 563.014727][ T12] bridge_slave_0: left promiscuous mode [ 563.021382][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.068364][ T8697] m920x_read = error: -19 [ 563.072736][ T8697] dvb-usb: error while querying for an remote control event. [ 563.153056][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.163943][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.175150][ T12] bond0 (unregistering): Released all slaves [ 563.186753][ T8701] m920x_read = error: -19 [ 563.191208][ T8701] dvb-usb: error while querying for an remote control event. [ 563.306713][ T8701] m920x_read = error: -19 [ 563.311176][ T8701] dvb-usb: error while querying for an remote control event. [ 563.392957][ T12] hsr_slave_0: left promiscuous mode [ 563.400427][ T12] hsr_slave_1: left promiscuous mode [ 563.406247][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.417835][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.426162][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.434023][ T8701] m920x_read = error: -19 [ 563.443108][ T8701] dvb-usb: error while querying for an remote control event. [ 563.450685][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.462416][ T12] veth1_macvtap: left promiscuous mode [ 563.468429][ T12] veth0_macvtap: left promiscuous mode [ 563.474017][ T12] veth1_vlan: left promiscuous mode [ 563.479716][ T12] veth0_vlan: left promiscuous mode [ 563.576883][ T8701] m920x_read = error: -19 [ 563.581264][ T8701] dvb-usb: error while querying for an remote control event. [ 563.638828][ T12] team0 (unregistering): Port device team_slave_1 removed [ 563.668561][ T12] team0 (unregistering): Port device team_slave_0 removed [ 563.706613][ T8701] m920x_read = error: -19 [ 563.710982][ T8701] dvb-usb: error while querying for an remote control event. [ 563.832745][ T8701] m920x_read = error: -19 [ 563.838714][ T8701] dvb-usb: error while querying for an remote control event. [ 563.956810][ T8701] m920x_read = error: -19 [ 563.961168][ T8701] dvb-usb: error while querying for an remote control event. [ 564.015019][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.071102][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.081850][ T8701] m920x_read = error: -19 [ 564.088435][ T8701] dvb-usb: error while querying for an remote control event. [ 564.135295][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.163742][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.206720][ T8701] m920x_read = error: -19 [ 564.211126][ T8701] dvb-usb: error while querying for an remote control event. [ 564.275799][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.339825][ T9] m920x_read = error: -19 [ 564.344214][ T9] dvb-usb: error while querying for an remote control event. [ 564.361988][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.412414][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.476792][ T9] m920x_read = error: -19 [ 564.479352][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.481154][ T9] dvb-usb: error while querying for an remote control event. [ 564.565607][ T12] bridge_slave_1: left allmulticast mode [ 564.571359][ T12] bridge_slave_1: left promiscuous mode [ 564.578722][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.588373][ T12] bridge_slave_0: left allmulticast mode [ 564.594042][ T12] bridge_slave_0: left promiscuous mode [ 564.601406][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.608962][ T55] m920x_read = error: -19 [ 564.613330][ T55] dvb-usb: error while querying for an remote control event. [ 564.624113][ T12] bridge_slave_1: left allmulticast mode [ 564.634360][ T12] bridge_slave_1: left promiscuous mode [ 564.641528][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.651217][ T12] bridge_slave_0: left allmulticast mode [ 564.658835][ T12] bridge_slave_0: left promiscuous mode [ 564.664540][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.727329][ T55] m920x_read = error: -19 [ 564.732565][ T55] dvb-usb: error while querying for an remote control event. [ 564.816013][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.833672][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.844637][ T12] bond0 (unregistering): Released all slaves [ 564.859587][ T55] m920x_read = error: -19 [ 564.863959][ T55] dvb-usb: error while querying for an remote control event. [ 564.981273][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.986904][ T55] m920x_read = error: -19 [ 564.994167][ T55] dvb-usb: error while querying for an remote control event. [ 565.003436][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.012995][ T12] bond0 (unregistering): Released all slaves [ 565.118265][ T8697] m920x_read = error: -19 [ 565.122663][ T8697] dvb-usb: error while querying for an remote control event. [ 565.236786][ T8697] m920x_read = error: -19 [ 565.241158][ T8697] dvb-usb: error while querying for an remote control event. [ 565.374610][ T12] hsr_slave_0: left promiscuous mode [ 565.380433][ T8701] m920x_read = error: -19 [ 565.384804][ T8701] dvb-usb: error while querying for an remote control event. [ 565.384854][ T12] hsr_slave_1: left promiscuous mode [ 565.398390][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.405781][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.414476][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.422109][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.431841][ T12] hsr_slave_0: left promiscuous mode [ 565.437992][ T12] hsr_slave_1: left promiscuous mode [ 565.443571][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.451316][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.459159][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.466670][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.477965][ T12] veth1_macvtap: left promiscuous mode [ 565.483464][ T12] veth0_macvtap: left promiscuous mode [ 565.489120][ T12] veth1_vlan: left promiscuous mode [ 565.494368][ T12] veth0_vlan: left promiscuous mode [ 565.500378][ T12] veth1_macvtap: left promiscuous mode [ 565.505863][ T12] veth0_macvtap: left promiscuous mode [ 565.506723][ T8701] m920x_read = error: -19 [ 565.511470][ T12] veth1_vlan: left promiscuous mode [ 565.517685][ T8701] dvb-usb: error while querying for an remote control event. [ 565.522153][ T12] veth0_vlan: left promiscuous mode [ 565.636687][ T9] m920x_read = error: -19 [ 565.641055][ T9] dvb-usb: error while querying for an remote control event. [ 565.718167][ T12] team0 (unregistering): Port device team_slave_1 removed [ 565.730981][ T12] team0 (unregistering): Port device team_slave_0 removed [ 565.770636][ T9] m920x_read = error: -19 [ 565.775018][ T9] dvb-usb: error while querying for an remote control event. [ 565.893689][ T9] m920x_read = error: -19 [ 565.901995][ T9] dvb-usb: error while querying for an remote control event. [ 565.911066][ T12] team0 (unregistering): Port device team_slave_1 removed [ 565.943579][ T12] team0 (unregistering): Port device team_slave_0 removed [ 566.006954][ T9] m920x_read = error: -19 [ 566.012291][ T9] dvb-usb: error while querying for an remote control event. [ 566.130731][ T9] m920x_read = error: -19 [ 566.135116][ T9] dvb-usb: error while querying for an remote control event. [ 566.246719][ T9] m920x_read = error: -19 [ 566.251092][ T9] dvb-usb: error while querying for an remote control event. [ 566.400387][ T9] m920x_read = error: -19 [ 566.404782][ T9] dvb-usb: error while querying for an remote control event. [ 566.528466][ T9] m920x_read = error: -19 [ 566.532840][ T9] dvb-usb: error while querying for an remote control event. [ 566.646654][ T9] m920x_read = error: -19 [ 566.652285][ T9] dvb-usb: error while querying for an remote control event. [ 566.776630][ T9] m920x_read = error: -19 [ 566.781219][ T9] dvb-usb: error while querying for an remote control event. [ 566.906706][ T9] m920x_read = error: -19 [ 566.911139][ T9] dvb-usb: error while querying for an remote control event. [ 567.026683][ T9] m920x_read = error: -19 [ 567.031375][ T9] dvb-usb: error while querying for an remote control event. [ 567.146660][ T9] m920x_read = error: -19 [ 567.151220][ T9] dvb-usb: error while querying for an remote control event. [ 567.276695][ T9] m920x_read = error: -19 [ 567.281091][ T9] dvb-usb: error while querying for an remote control event. [ 567.398404][ T9] m920x_read = error: -19 [ 567.402836][ T9] dvb-usb: error while querying for an remote control event. [ 567.526862][ T9] m920x_read = error: -19 [ 567.531233][ T9] dvb-usb: error while querying for an remote control event. [ 567.667622][ T9] m920x_read = error: -19 [ 567.672029][ T9] dvb-usb: error while querying for an remote control event. [ 567.787169][ T9] m920x_read = error: -19 [ 567.791570][ T9] dvb-usb: error while querying for an remote control event. [ 567.908480][ T9] m920x_read = error: -19 [ 567.912867][ T9] dvb-usb: error while querying for an remote control event. [ 568.028111][ T9] m920x_read = error: -19 [ 568.032500][ T9] dvb-usb: error while querying for an remote control event. [ 568.156637][ T9] m920x_read = error: -19 [ 568.161009][ T9] dvb-usb: error while querying for an remote control event. [ 568.276661][ T9] m920x_read = error: -19 [ 568.281076][ T9] dvb-usb: error while querying for an remote control event. [ 568.396705][ T9] m920x_read = error: -19 [ 568.401081][ T9] dvb-usb: error while querying for an remote control event. [ 568.526701][ T5959] m920x_read = error: -19 [ 568.531079][ T5959] dvb-usb: error while querying for an remote control event. [ 568.647420][ T5959] m920x_read = error: -19 [ 568.651759][ T5959] dvb-usb: error while querying for an remote control event. [ 568.771841][ T5959] m920x_read = error: -19 [ 568.776220][ T5959] dvb-usb: error while querying for an remote control event. [ 568.891636][ T5959] m920x_read = error: -19 [ 568.896016][ T5959] dvb-usb: error while querying for an remote control event. [ 569.006674][ T5959] m920x_read = error: -19 [ 569.013954][ T5959] dvb-usb: error while querying for an remote control event. [ 569.126751][ T5959] m920x_read = error: -19 [ 569.131132][ T5959] dvb-usb: error while querying for an remote control event. [ 569.246791][ T5959] m920x_read = error: -19 [ 569.251170][ T5959] dvb-usb: error while querying for an remote control event. [ 569.366837][ T5959] m920x_read = error: -19 [ 569.373736][ T5959] dvb-usb: error while querying for an remote control event. [ 569.497464][ T5959] m920x_read = error: -19 [ 569.501841][ T5959] dvb-usb: error while querying for an remote control event. [ 569.626677][ T8697] m920x_read = error: -19 [ 569.631055][ T8697] dvb-usb: error while querying for an remote control event. [ 569.750748][ T8697] m920x_read = error: -19 [ 569.755121][ T8697] dvb-usb: error while querying for an remote control event. [ 569.870699][ T8697] m920x_read = error: -19 [ 569.875073][ T8697] dvb-usb: error while querying for an remote control event. [ 569.990230][ T8697] m920x_read = error: -19 [ 569.994611][ T8697] dvb-usb: error while querying for an remote control event. [ 570.116707][ T8697] m920x_read = error: -19 [ 570.122872][ T8697] dvb-usb: error while querying for an remote control event. [ 570.238223][ T8697] m920x_read = error: -19 [ 570.242596][ T8697] dvb-usb: error while querying for an remote control event. [ 570.356950][ T8697] m920x_read = error: -19 [ 570.361328][ T8697] dvb-usb: error while querying for an remote control event. [ 570.491106][ T8697] m920x_read = error: -19 [ 570.495486][ T8697] dvb-usb: error while querying for an remote control event. [ 570.618712][ T8697] m920x_read = error: -19 [ 570.623254][ T8697] dvb-usb: error while querying for an remote control event. [ 570.736892][ T8697] m920x_read = error: -19 [ 570.744872][ T8697] dvb-usb: error while querying for an remote control event. [ 570.858127][ T55] m920x_read = error: -19 [ 570.862514][ T55] dvb-usb: error while querying for an remote control event. [ 570.976711][ T55] m920x_read = error: -19 [ 570.981312][ T55] dvb-usb: error while querying for an remote control event.