last executing test programs: 13.327904352s ago: executing program 3 (id=2888): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000816000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000c07010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 13.188194191s ago: executing program 3 (id=2891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03ef0000000000002c0012800c0001006d6163766c616e001c00028008000100c738000006ef0200010000001ffe0213726832d3ebc032000000000008000500", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x5c, 0x0, 0x400, 0x7fffffff, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xae, 0x3b, 0xb0, 0x10, 0xbfd, 0x102, 0x9afd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa1, 0x0, 0x1, 0x23, 0x53, 0x87, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x40, 0x4}}]}}]}}]}}, 0x0) 9.939049228s ago: executing program 3 (id=2895): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000001a00)={0xa, 0x4e23, 0x0, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="190636fc0796b393d322e2fea75ddd4b036cc9381054a7b89c577a211f83af3c610ede5410c205c5dca7ae69", 0x2c, 0x4020080, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xb}, &(0x7f00000000c0)=0x8) 9.232426926s ago: executing program 1 (id=2898): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/raw6\x00') ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc02063a1, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000080)={0x28, 0x8, 0x0, 0x0, &(0x7f0000000200)="a6cc8fd5b6a9312cc77d12c6203970e915b5d54ec53a7ba348fda9e978cd9260b3d8cc94b1467f019a0d58990dd9688b3322e39fd1a9f77204614f747e7a6477350760f85e0783ec4ae446f0268001be00a849d22956bab7917b4c38499de87a491c5e75af22046f5da695d535a3c03bd829ba615598a396613a6ed514a8687a9fd25614100f2b64c87b00be53ceaabcb0f22438a10aad5565b619c88d324feda47a990bf1cfad41611d28", 0xab, 0x4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) close(0x3) 9.093501171s ago: executing program 2 (id=2899): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c9050000000000010000a6a600000000", 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x3c, 0x2b, 0x40, 0x1b3b, 0x2951, 0x9eee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x19, 0x0, 0x1, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x0, 0x72, 0xfa}}]}}]}}]}}, 0x0) 8.812733888s ago: executing program 1 (id=2900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000940)=""/223, 0xdf}, {&(0x7f0000000c00)=""/241, 0xf1}, {&(0x7f0000000740)=""/167, 0xa7}], 0x5}, 0x3}], 0x1b00, 0x0, 0x0) 8.812464525s ago: executing program 3 (id=2901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x44}}, 0x0) 8.643644753s ago: executing program 3 (id=2902): syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x45, 0xf, 0x6, 0x7, 0x1}]}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000000000000000000000000086009078000000002c000000000000000000ee3f000000002b03"], 0xfdef) 7.824515759s ago: executing program 3 (id=2903): syz_usb_connect$hid(0x1, 0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000010902240001000080000904000003030002000921050000012205200905810300"/54], 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc4, &(0x7f0000000040), &(0x7f0000000000)=0x4) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000006040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x84, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x2, 0xe0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x5, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "311000100000"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x7, 0x6, 0x4}, [@country_functional={0x10, 0x24, 0x7, 0x1a, 0x1f, [0x3, 0x7, 0x4, 0x8, 0x3]}, @acm={0x4, 0x24, 0x2, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0xf7, 0xe8, 0xd, 0x3}, @dmm={0x7, 0x24, 0x14, 0x1ff, 0x26c}, @dmm={0x7, 0x24, 0x14, 0x0, 0x20}, @mbim_extended={0x8, 0x24, 0x1c, 0xbb, 0x5e, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xe7, 0x9, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xe9, 0x3, 0x86}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x3, 0x6, 0x4, 0x0, 0x2}, 0x11, &(0x7f0000000100)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x9, 0xf11, 0x9}]}, 0x9, [{0x57, &(0x7f0000000080)=@string={0x57, 0x3, "c9751d80e1d3b952de7b166741f2f12eda9c7029c1c87b829ba66842cf1cbdcd11a66113a3a0284aa84e8e5b9eb38373655e9e494c975953956229d0a02dd3d1b4746343aa22c77eb892d2f724f1cdcb962de3b11a"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44a}}, {0xb3, &(0x7f0000000200)=@string={0xb3, 0x3, "ade8b09839bc30803ace7a623cf4d61043f2cfbc64a110fce2642ebd0e3de0d1eedf13c683e5ed87c237a65ad9572ad0013bb5be751728537ac636866d51f595fbd7ff7d5f26c0902a4e73060edc065c62c5cb1eee6c2e580274ba1c3b12c88f826d60780ed7811100521b13cd40039a2d56153a6bcf0a68d3e73b5d8f187306850b7840f665f5dc527405431660d2531fd3573c2e3262d8b92c592d6961f77a78f873f3630dc2422334ef1bb34534bc51"}}, {0x25, &(0x7f00000002c0)=@string={0x25, 0x3, "4a7c9e5445b48bfc4f2226996fb87f2354d41eba6646506a840e5ea3f8a408c061bb7c"}}, {0xb5, &(0x7f0000000300)=ANY=[@ANYBLOB="b503ea450b069796c53e7ae740bef96b3341a9f6818bfaf89b2b03bff42e3282d48928f94106a586be6368ecf431f4513538ac7cfbcedd5e6ffc135a0bac6fdcac2d0372f4e221b7cbd5efd8fabf7feb2be635fede65c21a9651450275c0614e8f9085dfca3f2f7da3b4dcd09bdfda02c63f510d5e84f0b6ef954651eac2188fa78f69a7f18eda386d135596d87eff02b17ed8f112228ca673fee9afa639f106144279bff8d76d17c000"/181]}, {0x8c, &(0x7f00000003c0)=@string={0x8c, 0x3, "e9f5e1c43dd37088d9a8575a922564c7ecdb30c42d37f0cf35d337922443b81275a8a9a191447e77de4a59c4388cfd327681f18354ee9bd725c0ed9231e6d77cdc60d0f2502b7656e8f5f847e395b00c3a4650d2e8766043ccd596258096bb5ad6a18c54bab769afa9d4db9d186865326044800a37942dae43cbc1ea54167da2561a62270fdd4481882b"}}, {0xfc, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x80a}}]}) 7.497294141s ago: executing program 2 (id=2904): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r1, 0xfff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x80002, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}}}, 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'dummy0\x00', {}, 0x7fff}) 6.5486834s ago: executing program 4 (id=2906): socket$packet(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x3, &(0x7f0000000140)=0x401, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x7000000}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) io_submit(0x0, 0x1, &(0x7f0000001700)=[0x0]) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000000000)={0x48, 0x3, 0x0, 0x0, 0x62, 0x0, 0x0}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) 5.97651044s ago: executing program 0 (id=2908): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800c00230000000040000000000c002200000000000000000033a711681f096c0300d4a04857a21811988ac3ccd1aa7bb1651e8cec8d5fc8922854d06e2c5c208c76c0d583240097aaf83c960e4e599b8a1b04a82ab9f7175538bfe1cb8d1a3dc1abedf64e6924252b109297d282a5c7cb1d5673ba4253f31b8919242269c17e621f432bb4bd7ca1f5a2b0d43373a091efe77400861bd892e9022c03401c6357f2e8b4c648a5d75695e31877bbf5e86f07fbf7b73c15dc97e65d9ac36879a8c6947a9773cb5c4bd387"], 0x4c}}, 0x0) 5.072692151s ago: executing program 2 (id=2909): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)}], 0x1, 0x0, 0x0, 0x24000854}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb5, 0x9, 0x5, 0x0, 0x7ffffffc, 0x40, 0xf, 0xc0, 0x40, 0x4, 0x81, 0x6, 0x0, 0x6e8, 0xffffbed3, 0xf0, 0x9, 0x0, 0x7, '\x00', 0xcb, 0xffffffffffffff59}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0x59a35423, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {}, {0x0, 0x35}, {0x0, 0x3, 0x92}, {0x0, 0x0, 0x6, '\x00', 0x4}, {0x0, 0x1, 0x8}, {0x2, 0x6}, {}, {0x73, 0x6, 0x2}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x2, 0x0, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x40}, {0x5, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}]}}) ioctl$KVM_RUN(r6, 0x8004ae98, 0x20e10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0xe, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xff, 0x3, 0xd83f}) socket$netlink(0x10, 0x3, 0xc) dup(r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x2, 0xd7, 0x2}) 5.072483142s ago: executing program 0 (id=2910): setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x1a, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback={0xffffffffffffff80}, 0x4d2, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffffffffffff}, {0x5, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 5.004144446s ago: executing program 1 (id=2911): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xd1) syz_emit_ethernet(0x82, &(0x7f0000000840)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x11, 0x2, @broadcast, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x3, 0xe3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev}, {@private}]}]}}}}}}}, 0x0) 4.91867564s ago: executing program 4 (id=2912): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000001a00)={0xa, 0x4e23, 0x0, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="190636fc0796b393d322e2fea75ddd4b036cc9381054a7b89c577a211f83af3c610ede5410c205c5dca7ae69", 0x2c, 0x4020080, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xb}, &(0x7f00000000c0)=0x8) 4.860658493s ago: executing program 0 (id=2913): syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x45, 0xf, 0x6, 0x7, 0x1}]}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000033000000000000000000ee3f000000002b03"], 0xfdef) 4.76255986s ago: executing program 1 (id=2914): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x4000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x20000) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000080)={0xb, @output={0x0, 0x1, {}, 0x3, 0x5}}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000440)={0xf0f03f, 0x1}) listen(r5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000740)={{0x1, 0x9}, 0x100, './file0\x00'}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r5], &(0x7f0000000200)=""/34, 0x44, 0x22, 0x1, 0x6, 0x0, @void, @value}, 0x28) r11 = syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0x5, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES64=r1, @ANYRESHEX=r12], &(0x7f0000000080)='GPL\x00', 0x80d, 0x91, &(0x7f00000000c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80008, @void, @value}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmsg$nl_route(r13, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000002190095ec22ed58e01776df251d0107003b5bfd8159b695962b003e5343250a50c547d2e54445cfc50a92be79e71752b52ad76939170cff7fdec2aab6d5"], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x48810) 4.741619156s ago: executing program 2 (id=2915): socket$inet(0x2, 0x5, 0x1) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdfffffffddbdf2503000000100001800b00010065a553dced7d1a"], 0x24}}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000004880)=@generic={0x3, 0x8000, 0x2}) 4.343114789s ago: executing program 2 (id=2917): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x4f, 0xb, 0x2, "2e9b1c2300000000000000000000e70000a200", 0x38415261}) socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}], 0x1}, 0x8}], 0x1, 0x40008060, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000940)={'syz0\x00', {}, 0x7, [0x3, 0x800000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1e, 0x0, 0x7, 0x0, 0xfffff7fe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xffffffff], [0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x80, 0x0, 0x0, 0x101, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000, 0x3233], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="0013d20000002903a3853e3955f2518751638d5cd41e066003e8d6667a597ba97d6317b5764dfabc4fe06b72b46622b4a75f1d1745ba38628ab6e744c829c7b185d5ba4fa8577b4e760aed342a091578dacc10b6cf7e9a1931066b9feb7743ec05382361338eb59f4c90ef154f54b8216793e5638ae1514b35e526bb792627fa7f2647f0739c4cceab77306b560478474b8162e2e41e41fe19c3dbda099e53192b87a7df8f37c5945a4d958894a326e8c535a3a4edc5039136f7ed67d1c9ce620a66d92a2e8f7b845104c05a6757b601eeef20477a761e66"], &(0x7f0000000640)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}}) unshare(0x24020400) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x6442c0, 0x198) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x419, 0x600, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0xd94}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0x1a, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x1, 0xff}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x0, 0x2, 0x8, 0x10, 0x6}, 0x15, &(0x7f0000000200)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x0, 0xf00, 0x7f, [0x30]}]}, 0x7, [{0x9c, &(0x7f0000000380)=@string={0x9c, 0x3, "df9a0b85617887d1e3917bf3b9c84af1366307197c81a6bfca0aacdaceb005195ca95bcd48d5c2d874a9b8f29828e78639320c3e9916891aa54c65ed974afd89c0c626cb01886d72e7d3f067606c2a977e0036bfc11c638b182469c2bc1e29303d4581ef5edc806579a64e6144e39fa44941a63ae0f43083969c0795e0357ee1c174f31cdece4630ec64810114dd6a2634e4ba533698082c0aa2"}}, {0x12, &(0x7f00000002c0)=@string={0x12, 0x3, "abd3a4e7170531a99bb33529c7f073bf"}}, {0x94, &(0x7f0000000700)=@string={0x94, 0x3, "1e2da9dbed83af1c36681cd2d69342d9f17795689fd9b79629180d9bec838b2cc2372b7669603b6521c70f6618bd3b802e89edf68f648becf304b34200d0e54e485db4cae753f7b6abaa5f8a3f80f61e15255ccbe59df53b9fa2463be992ce7f01d331ee30d07b9e868f55ef1c1839d0c5a26c186f5a352afd3b1b584be643495fe6b16212769bfa3b786c1080a6d517ce6c"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x807}}, {0x41, &(0x7f0000000800)=@string={0x41, 0x3, "8d609750155f3d773cc1974ffb7cb409bdcf286dee10245e3827abfc3a141fc57b78b1c8f5ec9c7efc53a615d7fb0005ad73cc96596dc7e23bd2721e1c7f90"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3031}}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x27) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x8, 0x6, '\x00', 0x1f8630ad}) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000080)={0x1e0003, 0x0, [0x8, 0xff, 0xfffffffffffffffb, 0x3e00000000000000, 0x7fffffff, 0x7, 0x9, 0xa]}) 3.999842452s ago: executing program 0 (id=2918): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x20, 0x6, 0xed, {0xed, 0x24, "2a5f1abdac0001033709143d73a080c348e4b286ee47b2eb765f5e3f37aa6aba0971b34ef9e31b9d0a16028e2e5d9d506d1ee2a8e544fd086418cb16d5a7a946672bca1b57a4788c5cd17a32a7d71b0733792b3e34c121da30c16b99e5a167b51dd02f6e5b5338c8076adc98d29d98f667d7ef0a910f22f0202a8aadf44328cf152899c028715bd0abbcb039c94124d3e6c9f3db58e10f8b3c228b1aa1a6506a34093f2f35373611a251cea74fb92f4d813d6d33cde73f0c5e8a37ee266e5c9e228dafe175758e75f83ef94e68d8bf346053a75b42f7dffd778106f9f0ba28365fa0bf7e7b3d7f42c26461"}}, &(0x7f0000000180)={0x0, 0x3, 0x47, @string={0x47, 0x3, "13ee8b83c7b62d2f10f19208df02c03b0e4c76ad79226712276191139baa21713f63507a180ca4ddcdc73945efdce783d2873a1bb4f9b35ca45fe007fd38d1dbccba879577"}}, &(0x7f0000000200)={0x0, 0xf, 0x63, {0x5, 0xf, 0x63, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0x2, 0xfc, 0x9, 0x1}, @generic={0x40, 0x10, 0xb, "a8d06bfae1ca38a544b0c154168e49c75248b8b44720f906d23c6dbe4ddae2e569002dc88c093822ddf3b4830eb338fb3a151c2294f507cf1d4416baf3"}, @ssp_cap={0x10, 0x10, 0xa, 0xc0, 0x1, 0x1, 0x0, 0x6, [0x0]}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7b, 0x18, 0x81, 0x0, 'Zi\'\f', "deb8f424"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x6, 0x9, 0xca, 0x0, 0x1}}}, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x40, 0x12, 0xf0, "973f88d4d4f2cb916d08d775144399119a4fd09a4ccf2e12534ff2e37b98883c773f27787e899c138606e7cdd4e0dfbb91e80cfb2f4b7742262048347fca6e353eac5f4377eb4c2192a3f39fd59be5a7c42a855fefaa44d9f69ba3b365f4402365d2780c5c1e65ddfd6842bb463fefb2b4dfb7e534f09ef945285e1e9e524266f7204a11331c846c059695f458265c5b29bb6b75665350e4b5cf379088ddfc5b5aad3178715f32829d365f232df93b11aa83b52b1f64799c9a49ae5bb79370f88a309288e858e8fb3f34074020caca105bc154235c036569e7281bda803f664ccadbdb413677519a6a3b30f6e0218f00"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xef}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x1c00, 0x10, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0xbee}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0xb, 0x2, "47a9"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x1b2f}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x19, 0x2, '\v^'}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xfffd}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0xc5}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x7, 0x0, "4047bcd11c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.861762497s ago: executing program 4 (id=2919): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000001c0)={0x1f, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1}, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f00000000000000000000000000000000000000000000000000000000000000000000000fdff0000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 3.254712223s ago: executing program 0 (id=2920): ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000180)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002213000055982ef9c94d0c3650182195f575842be79e8238"], 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000200)={&(0x7f0000001240)=@newqdisc={0x84, 0x24, 0xd0f, 0x70bd27, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x8, 0xa}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x81, 0x9, 0x1, 0x3, 0x9, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x6, 0x4, 0x5, 0x246, 0x8000000000000000}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x20004, 0x163}}, @TCA_NETEM_CORR={0x0, 0x1, {0x1, 0x8f, 0x2}}, @TCA_NETEM_CORRUPT={0x0, 0x4, {0x101, 0x1}}, @TCA_NETEM_LATENCY64={0xfd38, 0xa, 0x6734}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x400c044}, 0x44080) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb077) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x1, 0x20, 0x18, 0x1ae, &(0x7f0000000e40)="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"}) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0xa4, 0x24, 0x200, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x3, [0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x29}]}]}]}}]}, 0xa4}}, 0x0) syz_usb_connect(0x4, 0x8b6, &(0x7f0000001300)=ANY=[@ANYRESOCT=r8], &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x4, 0x2, 0xa, 0x20, 0x9}, 0x36, &(0x7f0000000080)={0x5, 0xf, 0x36, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xf7, 0x12}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x2, 0x0, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x0, 0xff0f, 0xa5cf, [0xffc0c0, 0xf, 0xff0000]}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x16, &(0x7f0000000100)=@string={0x16, 0x3, "6cae339085fd5fe4a32df358a68533fbc0954ad8"}}, {0xc6, &(0x7f0000000300)=@string={0xc6, 0x3, "846ece5e2b1031ef8c16b107728cf26b3ca3a5195a79dd0ee39ebd971461f3f23c5b3d2469b42287d4f4d51ca2afb5bf9e4e802c1f782148e95cb44e29f9cd2826a44bfd1189d1d08f953e9447023657bfda49a569ffa268e43beef3f97a502589c591e41a2c8bfa3f5a16f1e43e29210058c84cc327f29161f937df6b0c652d9a156a665d58867dc158f3ca58852d848c5ac2fdd6c663c0cd9d646161adb91a030df5c43e75df8f399be9288df16f517f540a08829da61719cc8b76c572130c5b710425"}}]}) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x5000001) r9 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000540)={0xc, @pix_mp={0x0, 0x3ff, 0x30323953, 0x6, 0xb, [{0xc, 0xe9}, {0x105}, {0x200002, 0xc18d}, {0x6, 0xffff}, {0xff, 0x89}, {0x4, 0x1}, {0x16a, 0x1ff}, {0x8000, 0x10}], 0x4, 0x1, 0x0, 0x0, 0x1}}) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r10, 0x40046411, &(0x7f0000000080)=0x525c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c10000000000000000000", 0x58}], 0x1) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x0) sendmmsg$unix(r13, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd6e0cb005b1abd4d879a097dd9d3e6e12f85505cd45c840f9503b2fff6c33e6a675512ab99729da82acc41b65a398d515700ba76224267cdabfb9576027eb82a82c337e379c488d47691d7fe2c55bbe29a7a37633648559a31b90f145d0f5a2d8d9499f100ba95da30ce9df964d2af22e6551f8a35878071d2b5477c0f1c0ab067a8bd9368c04ed9b6e1547f04d022d726bb32daf66bded05624baa409848f50d96df5d0a86c6ce2b9b0767e85c5233c1e30aaad953301d7294b375db43804290971c857070e9d2c8b6397ab8d56358476fc0359ee79b7956f0ef1ce2edefc6bd340037706a57aa98105019c21be58ce8c868c90db57bfe8304416b3e7e02837ea3ce01ce463321f2ea429ee0c42b27d28c2b6063eb5cd746e26ade0c9ae3049ebb8c5038b01281f26c9777fb1263a5ba1262fa783e07ef5ded966eb85a4a811f5aab0d9575551239e9b0f76e5217744b0a8edcb1504774e36818033e3ab03ca6164df64fdf4352b9c88bfa91add131e13bee44e7eb4e38e613f3bab3c6c8a5038e446d57c9058b975f05f36e0e49171b426b99aa82a0656d7ffc46169ee20456aab06ee429bff9408fb1961e3976e288bee69e9ec6dc72862e1cfcc6c4804457285efcb056b0d834666748129994a3fc172c4c9c622a0c4ddd84bce972d56c70f3687222e5857f9a24b0e138a8359409f5b4ba3206c1a7f35c9e90f3ad903715ab7283e700f9ec2c641f38e998122266a8b1731ce1f03d12a643f281b3ace22f1e403dfe05052fdca3da258f8f1bd7c88949d2a14510b4116c5e403b6cee434d4969113ff8eebc1052e6a1dfa710cadfa0dbd96afa3dd1ab32b10e97d4c015e357bb938d5c2420ed83fff6a17ca9c334fc1b1a3b171f3ca2f4f88a66c59477a73265a8dc10c6d0e5ab2f595e4b9bdd160f35a7917d46df4a50b7651a5991f2444fc0a235f210e8ce8afede0b725d0cabfa20e4d36a836314d180f66614db4fbbd15ef7a947247f7f6f0eb34af0b7aeaaa9210154285dcd0389de273ad3459a1d87f062d9a050c57b6325750aeb9f47d7242117d8e0d38ae1e6cef179809d422ae852bf41f8d5ec42fac487ed46e0511a1f554cd6181e6c81dfdafa7c69daa2ba822e22e305b4b8f34c20fcc8e50cf451f053df249a7f5b20cbc0bc127f55d80bc9c0ba3cf9f0a9c56286215c20f9d60cb61276c6bbf772c151be2520e22b8f6daea2aa1f9e1b30bbeed092d3c2fb92a10fb71e7fea336a0258620c918581487ec04c54ca4e9811a83a6bf39dca6a4e89092cdee6e40024bd7c1ae7b3a8cdbb38c21ccb1de68f7fc9fa4726b832cedcfdd22b71f37d66f350e78e3c19bcae0322f8f070c316bc3c2ba0cb12a43746bd8aaa1645e3f8800b93722ac1791396bb3def1678cb5ab3f42c097c4c3684ea61dc89209ae57906bd4577a93b14eceff6f18893064198d9141a927ced2af06226011187f1851d6a5c1b5ff78a4c6d8b387a781c06a286f052d2e828ed94110cd7b9e6cfcb840e12019678080a6e9e517ce8ba6276c5a919197fd0adf86547135fcec083f2c1fea0e40564f279ceec580e827e39fa77bfa823d6e08aa7bd320491381f21be8b10dc2ed7fee1524680a52bb1e14cb6248519100edd7df29bac5c4ad1c893ee99db03aa7e077ba6608b0db797f31a6cd6d5a01077a41df98fc373ac5c149b87c55bb73bb17b09dffa7847b134b866b9ce179d547750dd2fb9c280e2003d132c87e2535f31232a32d738aeedeff052f256a9c866b6c2cb880d15f1acca7396a8f6113afe45e46e96a6c7762eb09d2c568df561d5484356b4ae71f89bf0126c6670c4fbeee59a89e20206401ef85f083039aa9ceacc2912427b031c35e29c7a702e0054f4dbb01062c0daab2a5faa49a86cd5d48d64bbee12f60ee529a00ad13a579934faff4ec12778038a3e48217fc4eb97ebe3dec9ecdfc0af3e722ed7ca0f12952c2902b0db061098d4bf14664104c440c9d07af7fbaa375274f61b04c17050a3e139dcce999071f18468139182cfe78a84c90c0428d7c75a621a6eaa69e028ce47626235ca3edbbb53e15afebebb25e18c732a820edca2f60be8c0ecd7e5a30282a0add95c6eb43b0afea34d91de7b20f4fb999d17c7fc418738f61cce38d656ce86e2d0a97f31dad0296ee63fb48e859003f88d0a27c874a47301dc0f1fd4f4e9b1bcd7806f715c751b94e182307d2d01278eb0ad2e1a48c3cac80ea5ec28b9b52f5cf6ea8b5611be5a24f91545cae2f581fd58fd47e6aa3b88b380442f21739319050ef702ffe604d7b1341013d330ad4e8d7c3cec17da298b4fcf1205e156f30642d654384d4be8b9eb4add6d9603e8fe122b9d70171d6f8ea5", 0xfffffdef}], 0x1}}], 0x1, 0x0) accept$alg(r13, 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, 0x0) 2.649681195s ago: executing program 4 (id=2921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', '', [{0x20, '\t]\'!*\\'}, {}, {0x20, '@\\'}, {0x20, '@]5'}, {0x20, '\\&'}, {0x20, 'blkio.bfq.io_wait_time_recursive\x00'}, {0x20, '#'}, {0x20, '%[/,.'}]}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a0b000/0x1000)=nil}) socket(0x21, 0x80801, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0x15}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x3, 0x0, 0x1}}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lstat(&(0x7f0000000140)='.\x00', &(0x7f0000000180)) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r6, r7, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r8 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 1.618684735s ago: executing program 1 (id=2922): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="27a403022b590200c900", 0xa}, {0x0}], 0x2}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000008c0)=ANY=[@ANYBLOB="00020000000000000401"], 0x20) syz_usb_connect(0x0, 0xf5, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a052404010704ac18831e"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0xff, 0x6, 0x7fff7ffa}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000094c9965c0000000000000000000000a40630e7241de74e5527b82dbc7b447abd8377ffe2ed7a9c5230e82036e4e6edf9fc43851743750e11dd0b15fecc537f00afc652a4b00ff741452f6a9c33537e79a404aa7757a70aadafff3dbbe17ca2bc687883920c250180cb580b4f63ed5ba082cdcfe95b750814d85b19734b2663dd552bf62b62f2fa504252d59b400d2c96e1a1c810dc4d78627c2eda28692c"], 0x50) lchown(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.044758866s ago: executing program 2 (id=2923): socket$packet(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x3, &(0x7f0000000140)=0x401, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x40000000}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) io_submit(0x0, 0x1, &(0x7f0000001700)=[0x0]) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000000000)={0x48, 0x3, 0x0, 0x0, 0x62, 0x0, 0x0}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) 306.955621ms ago: executing program 4 (id=2924): setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x1a, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback={0xffffffffffffff80}, 0x4d2, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffffffffffff}, {0x5, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 124.758488ms ago: executing program 0 (id=2925): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x20000000}) (async, rerun: 64) r2 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000041f000001060001000100000008000500", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 475.095µs ago: executing program 4 (id=2926): r0 = syz_clone(0x8000200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/softnet_stat\x00') syz_open_procfs(r0, &(0x7f0000000000)='mounts\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r4, @ANYBLOB="000000000000000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x8}, 0x0) r5 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000004880)=@get={0x1, 0x0, 0x3}) 0s ago: executing program 1 (id=2927): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x211}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x7, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc20e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x48, {0x9, 0x21, 0xd, 0xb, 0x1, {0x22, 0xfa7}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x10, 0x6}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000f00)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x20, 0x1, 0x8, "0d023bb34e27ce63"}, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): criptor read/64, error -71 [ 798.980248][ T5952] m920x_read = error: -19 [ 798.988734][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 799.162258][ T5896] m920x_read = error: -19 [ 799.174568][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 799.212078][ T5894] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 799.682010][ T5894] usb 3-1: device descriptor read/64, error -71 [ 799.742036][ T5896] m920x_read = error: -19 [ 799.751681][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 799.793025][ T5894] usb usb3-port1: attempt power cycle [ 799.922035][ T5896] m920x_read = error: -19 [ 799.932845][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 799.933536][T15286] fuse: Bad value for 'fd' [ 800.092273][ T5896] m920x_read = error: -19 [ 800.096687][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 800.322098][ T5896] m920x_read = error: -19 [ 800.326530][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 800.371014][T15282] program syz.1.2728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 800.522611][ T5896] m920x_read = error: -19 [ 800.527670][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 800.722318][ T5952] m920x_read = error: -19 [ 800.727729][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 800.868376][T15317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.892331][T15317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.912531][ T5894] m920x_read = error: -19 [ 800.944507][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 800.972264][ T5952] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 801.122195][ T5894] m920x_read = error: -19 [ 801.126771][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 801.169312][ T5952] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 801.172345][ T47] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 801.185185][ T5952] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 801.185233][ T5952] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 801.185261][ T5952] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 801.217671][T15322] syzkaller0: entered promiscuous mode [ 801.224549][T15322] syzkaller0: entered allmulticast mode [ 801.332055][ T5894] m920x_read = error: -19 [ 801.336494][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 801.370280][ T47] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 801.389872][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.408012][ T47] usb 2-1: Product: syz [ 801.418917][ T47] usb 2-1: Manufacturer: syz [ 801.425417][ T47] usb 2-1: SerialNumber: syz [ 801.488517][ T5952] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 801.489727][ T47] usb 2-1: config 0 descriptor?? [ 801.625402][ T5894] m920x_read = error: -19 [ 801.629783][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 801.858523][ T5952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 801.877706][ T47] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 802.022124][ T5894] m920x_read = error: -19 [ 802.026612][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 802.045847][ T5952] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 802.073402][ T5952] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 802.105678][ T5952] usb 5-1: Product: syz [ 802.109911][ T5952] usb 5-1: Manufacturer: syz [ 802.150023][ T5952] usb 5-1: SerialNumber: syz [ 802.197771][ T5952] usb 5-1: config 0 descriptor?? [ 802.228170][T15315] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 802.242085][ T5894] m920x_read = error: -19 [ 802.246575][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 802.265523][ T5952] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 802.364050][ T5952] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 802.448004][ T5894] m920x_read = error: -19 [ 802.472030][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 802.554948][ T47] sonixb 2-1:0.0: Error reading register 00: -110 [ 802.702148][ T5894] m920x_read = error: -19 [ 802.709375][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 802.746705][T15315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.766086][T15315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.917295][ T5894] m920x_read = error: -19 [ 802.921746][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 803.119654][ T5894] m920x_read = error: -19 [ 803.126450][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 803.295673][ T5894] m920x_read = error: -19 [ 803.300162][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 803.467030][ T5894] m920x_read = error: -19 [ 803.471739][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 803.705399][ T5952] m920x_read = error: -19 [ 803.723675][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 803.930617][ T5894] m920x_read = error: -19 [ 803.941752][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 804.117326][ T5894] m920x_read = error: -19 [ 804.121748][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 804.208885][ T47] usb 5-1: USB disconnect, device number 58 [ 804.231601][ T47] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 804.322056][ T5894] m920x_read = error: -19 [ 804.333421][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 804.344028][T15346] FAULT_INJECTION: forcing a failure. [ 804.344028][T15346] name failslab, interval 1, probability 0, space 0, times 0 [ 804.361326][ T5894] usb 2-1: USB disconnect, device number 68 [ 804.386929][T15346] CPU: 0 UID: 0 PID: 15346 Comm: syz.4.2744 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 804.386962][T15346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 804.386974][T15346] Call Trace: [ 804.386982][T15346] [ 804.386990][T15346] dump_stack_lvl+0x241/0x360 [ 804.387027][T15346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 804.387052][T15346] ? __pfx__printk+0x10/0x10 [ 804.387082][T15346] ? __pfx___might_resched+0x10/0x10 [ 804.387109][T15346] should_fail_ex+0x424/0x570 [ 804.387134][T15346] should_failslab+0xac/0x100 [ 804.387160][T15346] ? __get_vm_area_node+0x132/0x2d0 [ 804.387185][T15346] __kmalloc_cache_node_noprof+0x74/0x3c0 [ 804.387213][T15346] ? __kmalloc_noprof+0x28e/0x4d0 [ 804.387236][T15346] ? packet_set_ring+0x638/0x24b0 [ 804.387266][T15346] __get_vm_area_node+0x132/0x2d0 [ 804.387299][T15346] __vmalloc_node_range_noprof+0x349/0x1390 [ 804.387318][T15346] ? packet_set_ring+0x6e7/0x24b0 [ 804.387374][T15346] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 804.387401][T15346] ? rcu_is_watching+0x15/0xb0 [ 804.387429][T15346] ? packet_set_ring+0x6e7/0x24b0 [ 804.387455][T15346] vzalloc_noprof+0x79/0x90 [ 804.387475][T15346] ? packet_set_ring+0x6e7/0x24b0 [ 804.387500][T15346] packet_set_ring+0x6e7/0x24b0 [ 804.387552][T15346] ? __pfx_packet_set_ring+0x10/0x10 [ 804.387600][T15346] ? _copy_from_user+0x95/0xb0 [ 804.387634][T15346] packet_setsockopt+0x1024/0x1870 [ 804.387668][T15346] ? __pfx_packet_setsockopt+0x10/0x10 [ 804.387695][T15346] ? rcu_read_lock_any_held+0xbb/0x160 [ 804.387732][T15346] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 804.387768][T15346] ? aa_sk_perm+0x96f/0xac0 [ 804.387799][T15346] ? ksys_write+0x24e/0x2d0 [ 804.387821][T15346] ? __pfx_aa_sk_perm+0x10/0x10 [ 804.387850][T15346] ? aa_sock_opt_perm+0x79/0x120 [ 804.387882][T15346] ? __pfx_packet_setsockopt+0x10/0x10 [ 804.387907][T15346] do_sock_setsockopt+0x3b1/0x710 [ 804.387936][T15346] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 804.387953][T15346] ? __fget_files+0x2a/0x420 [ 804.387977][T15346] ? __fget_files+0x39d/0x420 [ 804.387993][T15346] ? __fget_files+0x2a/0x420 [ 804.388020][T15346] __x64_sys_setsockopt+0x1ee/0x280 [ 804.388050][T15346] do_syscall_64+0xf3/0x230 [ 804.388073][T15346] ? clear_bhb_loop+0x45/0xa0 [ 804.388097][T15346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.388116][T15346] RIP: 0033:0x7fab76d8d169 [ 804.388136][T15346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.388153][T15346] RSP: 002b:00007fab77b71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 804.388175][T15346] RAX: ffffffffffffffda RBX: 00007fab76fa5fa0 RCX: 00007fab76d8d169 [ 804.388190][T15346] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000006 [ 804.388203][T15346] RBP: 00007fab77b71090 R08: 000000000000001c R09: 0000000000000000 [ 804.388215][T15346] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 804.388228][T15346] R13: 0000000000000000 R14: 00007fab76fa5fa0 R15: 00007fab770cfa28 [ 804.388260][T15346] [ 804.388428][T15346] syz.4.2744: vmalloc error: size 16777216, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 804.697827][ T5952] m920x_read = error: -19 [ 804.716531][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 804.724387][T15346] ,cpuset=/,mems_allowed=0-1 [ 804.732229][T15346] CPU: 0 UID: 0 PID: 15346 Comm: syz.4.2744 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 804.732261][T15346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 804.732275][T15346] Call Trace: [ 804.732284][T15346] [ 804.732294][T15346] dump_stack_lvl+0x241/0x360 [ 804.732331][T15346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 804.732359][T15346] ? __pfx__printk+0x10/0x10 [ 804.732385][T15346] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 804.732416][T15346] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 804.732441][T15346] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 804.732472][T15346] warn_alloc+0x27c/0x410 [ 804.732498][T15346] ? __pfx_warn_alloc+0x10/0x10 [ 804.732528][T15346] ? __get_vm_area_node+0x280/0x2d0 [ 804.732564][T15346] __vmalloc_node_range_noprof+0x36e/0x1390 [ 804.732616][T15346] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 804.732642][T15346] ? rcu_is_watching+0x15/0xb0 [ 804.732669][T15346] ? packet_set_ring+0x6e7/0x24b0 [ 804.732705][T15346] vzalloc_noprof+0x79/0x90 [ 804.732724][T15346] ? packet_set_ring+0x6e7/0x24b0 [ 804.732751][T15346] packet_set_ring+0x6e7/0x24b0 [ 804.732800][T15346] ? __pfx_packet_set_ring+0x10/0x10 [ 804.732847][T15346] ? _copy_from_user+0x95/0xb0 [ 804.732879][T15346] packet_setsockopt+0x1024/0x1870 [ 804.732911][T15346] ? __pfx_packet_setsockopt+0x10/0x10 [ 804.732939][T15346] ? rcu_read_lock_any_held+0xbb/0x160 [ 804.732963][T15346] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 804.732997][T15346] ? aa_sk_perm+0x96f/0xac0 [ 804.733027][T15346] ? ksys_write+0x24e/0x2d0 [ 804.733049][T15346] ? __pfx_aa_sk_perm+0x10/0x10 [ 804.733076][T15346] ? aa_sock_opt_perm+0x79/0x120 [ 804.733107][T15346] ? __pfx_packet_setsockopt+0x10/0x10 [ 804.733132][T15346] do_sock_setsockopt+0x3b1/0x710 [ 804.733160][T15346] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 804.733177][T15346] ? __fget_files+0x2a/0x420 [ 804.733199][T15346] ? __fget_files+0x39d/0x420 [ 804.733215][T15346] ? __fget_files+0x2a/0x420 [ 804.733243][T15346] __x64_sys_setsockopt+0x1ee/0x280 [ 804.733270][T15346] do_syscall_64+0xf3/0x230 [ 804.733293][T15346] ? clear_bhb_loop+0x45/0xa0 [ 804.733317][T15346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.733336][T15346] RIP: 0033:0x7fab76d8d169 [ 804.733356][T15346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.733373][T15346] RSP: 002b:00007fab77b71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 804.733400][T15346] RAX: ffffffffffffffda RBX: 00007fab76fa5fa0 RCX: 00007fab76d8d169 [ 804.733417][T15346] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000006 [ 804.733429][T15346] RBP: 00007fab77b71090 R08: 000000000000001c R09: 0000000000000000 [ 804.733442][T15346] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 804.733454][T15346] R13: 0000000000000000 R14: 00007fab76fa5fa0 R15: 00007fab770cfa28 [ 804.733486][T15346] [ 804.733495][T15346] Mem-Info: [ 804.742661][T15350] netlink: 'syz.1.2745': attribute type 30 has an invalid length. [ 804.760421][T15346] active_anon:15536 inactive_anon:2 isolated_anon:0 [ 804.760421][T15346] active_file:15647 inactive_file:38598 isolated_file:0 [ 804.760421][T15346] unevictable:768 dirty:108 writeback:0 [ 804.760421][T15346] slab_reclaimable:10220 slab_unreclaimable:104317 [ 804.760421][T15346] mapped:33157 shmem:11540 pagetables:1010 [ 804.760421][T15346] sec_pagetables:0 bounce:0 [ 804.760421][T15346] kernel_misc_reclaimable:0 [ 804.760421][T15346] free:1294435 free_pcp:4927 free_cma:0 [ 804.806490][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2745'. [ 805.140458][ T5952] m920x_read = error: -19 [ 805.143391][T15346] Node 0 active_anon:62172kB inactive_anon:8kB active_file:62456kB inactive_file:154320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132600kB dirty:432kB writeback:0kB shmem:44636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11380kB pagetables:4052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 805.145949][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 805.186113][T15346] Node 1 active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 805.219545][T15346] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 805.264468][T15346] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 805.270502][T15346] Node 0 DMA32 free:1267300kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:62128kB inactive_anon:8kB active_file:62456kB inactive_file:154236kB unevictable:1536kB writepending:432kB present:3129332kB managed:2547240kB mlocked:0kB bounce:0kB free_pcp:688kB local_pcp:592kB free_cma:0kB [ 805.311404][T15346] lowmem_reserve[]: 0 0 0 0 0 [ 805.316966][T15346] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 805.344844][T15346] lowmem_reserve[]: 0 0 0 0 0 [ 805.349824][T15346] Node 1 Normal free:3893956kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18916kB local_pcp:0kB free_cma:0kB [ 805.358907][ T5894] m920x_read = error: -19 [ 805.381749][T15346] lowmem_reserve[]: 0 0 0 0 0 [ 805.388921][T15346] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 805.407830][T15346] Node 0 DMA32: 1625*4kB (UME) 842*8kB (UME) 530*16kB (UME) 342*32kB (UME) 376*64kB (UME) 173*128kB (UME) 99*256kB (UME) 41*512kB (UME) 31*1024kB (UME) 14*2048kB (UM) 264*4096kB (UM) = 1266964kB [ 805.412046][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 805.428977][T15346] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 805.451072][T15346] Node 1 Normal: 247*4kB (UM) 89*8kB (UME) 78*16kB (UME) 228*32kB (UE) 115*64kB (UME) 50*128kB (UME) 35*256kB (UME) 23*512kB (UM) 19*1024kB (UME) 4*2048kB (UME) 933*4096kB (UM) = 3893956kB [ 805.470794][T15346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 805.480532][T15346] Node 0 hugepages_total=6 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 805.490159][T15346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 805.499900][T15346] Node 1 hugepages_total=4294967294 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 805.510579][T15346] 65789 total pagecache pages [ 805.515394][T15346] 2 pages in swap cache [ 805.524946][T15346] Free swap = 124988kB [ 805.529149][T15346] Total swap = 124996kB [ 805.534247][T15346] 2097051 pages RAM [ 805.538087][T15346] 0 pages HighMem/MovableOnly [ 805.545671][T15346] 428583 pages reserved [ 805.550042][T15346] 0 pages cma reserved [ 805.598511][ T5894] m920x_read = error: -19 [ 805.603012][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 805.765980][ T5894] m920x_read = error: -19 [ 805.770422][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 805.944449][ T5894] m920x_read = error: -19 [ 805.948858][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 806.116169][ T5894] m920x_read = error: -19 [ 806.120593][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 806.293756][ T5894] m920x_read = error: -19 [ 806.298312][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 806.462589][ T5894] m920x_read = error: -19 [ 806.467417][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 806.505788][T15350] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 806.652098][ T5952] m920x_read = error: -19 [ 806.656522][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 806.779471][T15366] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (17179869180 ns) > initial count (4 ns). Using initial count to start timer. [ 806.832263][ T5952] m920x_read = error: -19 [ 806.836664][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 806.861977][ T5894] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 807.016938][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 807.029591][ T5952] m920x_read = error: -19 [ 807.040179][ T5894] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 807.054266][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 807.070801][ T5894] usb 2-1: config 0 has no interface number 0 [ 807.077729][ T5894] usb 2-1: config 0 interface 184 has no altsetting 0 [ 807.088673][ T5894] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 807.103205][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.272038][ T5952] m920x_read = error: -19 [ 807.286694][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 807.309654][T15384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.320333][T15384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.338601][ T5894] usb 2-1: Product: syz [ 807.348721][ T5894] usb 2-1: Manufacturer: syz [ 807.357477][ T5894] usb 2-1: SerialNumber: syz [ 807.405835][T15384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.415292][T15384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.432812][ T5894] usb 2-1: config 0 descriptor?? [ 807.468555][ T5894] smsc75xx v1.0.0 [ 807.475971][ T5952] m920x_read = error: -19 [ 807.480460][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 807.673968][ T5952] m920x_read = error: -19 [ 807.694171][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 807.879239][ T5894] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 807.903954][ T5952] m920x_read = error: -19 [ 807.908422][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 807.947643][ T5894] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 807.978980][ T5894] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 808.018598][ T5894] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 808.079004][T15391] netlink: 'syz.2.2756': attribute type 1 has an invalid length. [ 808.122133][ T5894] m920x_read = error: -19 [ 808.126897][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 808.141801][T15391] netlink: 'syz.2.2756': attribute type 1 has an invalid length. [ 808.235346][T15391] netlink: 'syz.2.2756': attribute type 1 has an invalid length. [ 808.308178][T15366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.362140][ T5894] m920x_read = error: -19 [ 808.366617][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 808.545560][ T5894] m920x_read = error: -19 [ 808.551187][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 808.792106][ T5894] m920x_read = error: -19 [ 808.797941][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 808.857151][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.864007][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.883429][T15394] syzkaller0: entered promiscuous mode [ 808.888972][T15394] syzkaller0: entered allmulticast mode [ 808.972301][ T5894] m920x_read = error: -19 [ 808.979369][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 809.028125][ T5894] usb 2-1: USB disconnect, device number 69 [ 809.172190][ T5952] m920x_read = error: -19 [ 809.177984][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 809.382764][ T5894] m920x_read = error: -19 [ 809.387694][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 809.582276][ T5894] m920x_read = error: -19 [ 809.586781][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 809.842371][ T5894] m920x_read = error: -19 [ 809.846999][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 809.981988][ T47] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 810.032516][ T5894] m920x_read = error: -19 [ 810.037054][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 810.151747][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 810.160463][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 810.176832][ T47] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 810.186001][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.222182][ T5952] m920x_read = error: -19 [ 810.226809][ T47] usb 2-1: config 0 descriptor?? [ 810.230137][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 810.392097][ T5894] m920x_read = error: -19 [ 810.396775][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 810.462642][ T47] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 810.553440][ T5894] m920x_read = error: -19 [ 810.558003][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 810.725393][ T47] usb 2-1: USB disconnect, device number 70 [ 810.732181][ T5894] m920x_read = error: -19 [ 810.736753][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 810.946902][ T5894] m920x_read = error: -19 [ 810.951335][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 811.112039][ T5894] m920x_read = error: -19 [ 811.116451][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 811.285834][ T5894] m920x_read = error: -19 [ 811.290253][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 811.378657][T15428] fuse: Unexpected value for 'default_permissions' [ 811.458549][ T5894] m920x_read = error: -19 [ 811.467833][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 811.642485][ T5894] m920x_read = error: -19 [ 811.646919][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 811.849988][ T5894] m920x_read = error: -19 [ 811.854643][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 812.023153][ T5894] m920x_read = error: -19 [ 812.027861][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 812.225471][ T5894] m920x_read = error: -19 [ 812.240095][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 812.408080][ T5894] m920x_read = error: -19 [ 812.412666][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 812.577275][ T5894] m920x_read = error: -19 [ 812.581653][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 812.749094][ T5894] m920x_read = error: -19 [ 812.753656][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 812.912080][ T5896] m920x_read = error: -19 [ 812.916521][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 813.082142][ T5896] m920x_read = error: -19 [ 813.086576][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 813.292031][ T5896] m920x_read = error: -19 [ 813.296461][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 813.364667][ T5839] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 813.462062][ T5894] m920x_read = error: -19 [ 813.466519][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 813.534355][ T5839] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 813.546479][ T5839] usb 5-1: config 0 interface 0 has no altsetting 0 [ 813.569799][ T5839] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 813.595239][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 813.595283][ T5839] usb 5-1: Product: syz [ 813.595300][ T5839] usb 5-1: Manufacturer: syz [ 813.595315][ T5839] usb 5-1: SerialNumber: syz [ 813.598920][ T5839] usb 5-1: config 0 descriptor?? [ 813.608282][ T5839] usb 5-1: selecting invalid altsetting 0 [ 813.636500][ T5894] m920x_read = error: -19 [ 813.636534][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 813.653690][T15449] input: syz0 as /devices/virtual/input/input82 [ 813.679427][ T5896] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 813.692438][ T47] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 813.802410][ T5894] m920x_read = error: -19 [ 813.802445][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 813.812032][ T5896] usb 4-1: device descriptor read/64, error -71 [ 813.828944][ T5839] usb 5-1: USB disconnect, device number 59 [ 813.861720][ T47] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 813.861755][ T47] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 813.861790][ T47] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 813.861818][ T47] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 813.862110][ T47] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 813.862139][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 813.928272][ T47] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 813.928295][ T47] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 813.928309][ T47] usb 3-1: Product: syz [ 813.928319][ T47] usb 3-1: Manufacturer: syz [ 813.928328][ T47] usb 3-1: SerialNumber: syz [ 813.942297][ T47] usb 3-1: config 0 descriptor?? [ 813.958046][T15446] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 813.959790][ T47] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 813.962225][ T5894] m920x_read = error: -19 [ 813.962256][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 813.992533][ T47] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 814.072225][ T5896] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 814.132201][ T5894] m920x_read = error: -19 [ 814.132225][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 814.167235][T14430] udevd[14430]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 814.199407][T15452] delete_channel: no stack [ 814.222154][ T5896] usb 4-1: device descriptor read/64, error -71 [ 814.294806][ T9] m920x_read = error: -19 [ 814.294836][ T9] dvb-usb: error -19 while querying for an remote control event. [ 814.332674][ T5896] usb usb4-port1: attempt power cycle [ 814.363974][T15446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.364269][T15446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.444930][ T5894] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 814.452225][ T5952] m920x_read = error: -19 [ 814.452258][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 814.605235][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 814.605279][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 814.605410][ T5894] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 814.605436][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.611938][ T5894] usb 2-1: config 0 descriptor?? [ 814.618984][ T5952] m920x_read = error: -19 [ 814.619018][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 814.690753][ T5896] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 814.713156][ T5896] usb 4-1: device descriptor read/8, error -71 [ 814.772303][ T5952] m920x_read = error: -19 [ 814.772340][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 814.940511][ T5952] m920x_read = error: -19 [ 814.940616][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 814.951998][ T5896] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 814.993082][ T5896] usb 4-1: device descriptor read/8, error -71 [ 815.092083][ T5952] m920x_read = error: -19 [ 815.092107][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 815.103192][ T5896] usb usb4-port1: unable to enumerate USB device [ 816.407933][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-1) [ 816.419840][ T5839] usb 3-1: USB disconnect, device number 46 [ 816.430845][ T5839] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 816.596112][ T5894] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 816.680964][ T5896] m920x_read = error: -19 [ 816.685549][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 816.693998][ T5894] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 816.706190][ T5894] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 816.716800][ T5894] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 816.724349][ T5894] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 816.740810][ T5894] playstation 0003:054C:0DF2.0040: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 816.799302][T15469] syzkaller0: entered promiscuous mode [ 816.832427][T15469] syzkaller0: entered allmulticast mode [ 816.852910][ T5952] m920x_read = error: -19 [ 816.857810][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 816.872007][ T5899] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 817.001988][ T5899] usb 5-1: device descriptor read/64, error -71 [ 817.032775][ T5952] m920x_read = error: -19 [ 817.042679][ T5894] playstation 0003:054C:0DF2.0040: Failed to retrieve feature with reportID 9: -71 [ 817.052606][ T5894] playstation 0003:054C:0DF2.0040: Failed to retrieve DualSense pairing info: -71 [ 817.079436][ T5859] cgroup: fork rejected by pids controller in /syz1 [ 817.084386][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 817.113371][ T5894] playstation 0003:054C:0DF2.0040: Failed to get MAC address from DualSense [ 817.133647][ T5894] playstation 0003:054C:0DF2.0040: Failed to create dualsense. [ 817.152206][ T5894] playstation 0003:054C:0DF2.0040: probe with driver playstation failed with error -71 [ 817.219792][ T5894] usb 2-1: USB disconnect, device number 71 [ 817.250821][ T5899] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 817.292568][ T5952] m920x_read = error: -19 [ 817.297475][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 817.406711][ T5899] usb 5-1: device descriptor read/64, error -71 [ 817.513746][ T5952] m920x_read = error: -19 [ 817.518197][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 817.522397][ T5899] usb usb5-port1: attempt power cycle [ 817.689297][T15483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.699182][ T5952] m920x_read = error: -19 [ 817.703808][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 817.719390][T15483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.747204][T15483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.778469][T15483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.865390][ T5952] m920x_read = error: -19 [ 817.870924][T15484] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2783'. [ 817.880348][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 817.891503][ T5899] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 817.917423][ T5899] usb 5-1: device descriptor read/8, error -71 [ 818.046383][ T5952] m920x_read = error: -19 [ 818.051144][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 818.197058][ T5899] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 818.242861][ T5899] usb 5-1: device descriptor read/8, error -71 [ 818.252926][ T5952] m920x_read = error: -19 [ 818.257478][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 818.375045][ T5899] usb usb5-port1: unable to enumerate USB device [ 818.423499][ T5952] m920x_read = error: -19 [ 818.428038][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 818.593762][ T5952] m920x_read = error: -19 [ 818.602351][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 818.761576][T15490] netlink: 'syz.0.2785': attribute type 10 has an invalid length. [ 818.769611][ T5952] m920x_read = error: -19 [ 818.776484][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 818.955273][ T5952] m920x_read = error: -19 [ 818.959726][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 819.127978][ T5952] m920x_read = error: -19 [ 819.132539][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 819.297069][ T5952] m920x_read = error: -19 [ 819.301466][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 819.466889][ T5952] m920x_read = error: -19 [ 819.471281][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 819.632720][ T5952] m920x_read = error: -19 [ 819.652418][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 819.812946][ T5952] m920x_read = error: -19 [ 819.824552][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 819.983031][T15481] netlink: 'syz.2.2783': attribute type 1 has an invalid length. [ 820.002109][ T5952] m920x_read = error: -19 [ 820.011277][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 820.192900][ T5952] m920x_read = error: -19 [ 820.197332][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 820.342038][ T5899] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 820.442159][ T5894] m920x_read = error: -19 [ 820.496812][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 820.551464][ T5899] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 820.656615][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 820.748761][ T5899] usb 4-1: config 0 has no interface number 0 [ 820.765343][ T5899] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 820.808428][ T5899] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 820.822052][ T5894] m920x_read = error: -19 [ 820.826458][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 820.829902][ T5899] usb 4-1: config 0 interface 41 has no altsetting 0 [ 820.869134][ T5899] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 820.878534][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.889119][ T5899] usb 4-1: Product: syz [ 820.901418][ T5899] usb 4-1: Manufacturer: syz [ 820.914224][ T5899] usb 4-1: SerialNumber: syz [ 820.932837][ T5899] usb 4-1: config 0 descriptor?? [ 820.948620][T15495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 820.956420][T15495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 821.004227][ T5894] m920x_read = error: -19 [ 821.008649][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 821.192210][ T5894] m920x_read = error: -19 [ 821.200854][T15495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 821.209600][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 821.224998][T15495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 821.407273][ T5894] m920x_read = error: -19 [ 821.417119][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 821.592123][ T5894] m920x_read = error: -19 [ 821.602390][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 821.672391][ T5899] Error reading MAC address [ 821.856425][ T5894] m920x_read = error: -19 [ 821.871030][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 821.945197][T15517] wireguard0: entered promiscuous mode [ 822.012367][T15519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2793'. [ 822.053898][ T5894] m920x_read = error: -19 [ 822.058325][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 822.062028][ T47] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 822.132122][ T5839] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 822.223047][ T5894] m920x_read = error: -19 [ 822.248069][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 822.305586][ T47] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 822.364883][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 822.378167][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 822.389577][ T5839] usb 5-1: config 0 has no interfaces? [ 822.402171][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 822.413663][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 822.427033][ T47] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 822.523832][ T5894] m920x_read = error: -19 [ 822.531384][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 822.540546][ T5839] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 822.573984][T15524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.587101][ T47] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 822.612533][T15524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.625062][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 822.656268][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.673437][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 822.682392][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 822.689965][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 822.698628][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 822.707024][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 822.765341][ T47] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 822.802024][ T5952] m920x_read = error: -19 [ 822.806608][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 822.834371][ T5839] usb 5-1: Product: syz [ 822.898206][ T5839] usb 5-1: Manufacturer: syz [ 822.942524][ T47] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 822.962713][ T5839] usb 5-1: SerialNumber: syz [ 822.972331][ T5952] m920x_read = error: -19 [ 822.993297][ T5839] usb 5-1: config 0 descriptor?? [ 823.000341][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 823.015698][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.202280][ T5952] m920x_read = error: -19 [ 823.206844][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 823.240181][T15514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2792'. [ 823.327202][ T47] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 823.351156][ T47] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 823.364941][ T47] usb 3-1: Product: syz [ 823.369385][ T47] usb 3-1: Manufacturer: syz [ 823.379836][ T47] usb 3-1: SerialNumber: syz [ 823.382006][ T5952] m920x_read = error: -19 [ 823.389036][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 823.406401][ T47] usb 3-1: config 0 descriptor?? [ 823.436141][T15512] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 823.658874][ T47] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 823.671348][ T47] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 823.805668][T15525] chnl_net:caif_netlink_parms(): no params data found [ 823.922424][ T5952] m920x_read = error: -19 [ 823.926876][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 823.956511][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.008471][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.102106][ T5952] m920x_read = error: -19 [ 824.134622][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 824.362536][ T5952] m920x_read = error: -19 [ 824.366959][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 824.614549][ T5894] m920x_read = error: -19 [ 824.621022][T15525] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.663490][T15525] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.666496][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 824.679044][T15525] bridge_slave_0: entered allmulticast mode [ 824.695283][T15525] bridge_slave_0: entered promiscuous mode [ 824.712942][T15525] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.729774][T15525] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.764084][T15525] bridge_slave_1: entered allmulticast mode [ 824.785433][ T5848] Bluetooth: hci4: command tx timeout [ 824.801194][T15525] bridge_slave_1: entered promiscuous mode [ 824.953980][ T5952] m920x_read = error: -19 [ 824.981018][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 825.061555][T15525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.130880][T15525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.244461][ T5894] m920x_read = error: -19 [ 825.268392][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 825.288846][ T5899] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 825.359718][ T5899] usb 4-1: USB disconnect, device number 17 [ 825.480328][T15536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.526525][ T5952] m920x_read = error: -19 [ 825.536599][T15525] team0: Port device team_slave_0 added [ 825.550796][T15537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.565905][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 825.600562][T15536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.607683][T15525] team0: Port device team_slave_1 added [ 825.633269][ T5894] usb 5-1: USB disconnect, device number 64 [ 825.663541][T15537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.799784][ T5896] m920x_read = error: -19 [ 825.801754][ T47] usb 3-1: USB disconnect, device number 47 [ 825.810635][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 825.820474][T15525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.849320][ T47] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 825.858116][T15525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.937863][T15525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.991960][ T5899] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 826.013892][ T5952] m920x_read = error: -19 [ 826.018256][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 826.051826][T15546] syzkaller0: entered promiscuous mode [ 826.058804][T15546] syzkaller0: entered allmulticast mode [ 826.068550][T15525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.076882][T15525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.103439][T15525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.124787][T15544] bridge0: port 2(bridge_slave_1) entered learning state [ 826.144390][ T5899] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 826.164617][ T5899] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 826.192116][ T5899] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 826.208306][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.229602][T15525] hsr_slave_0: entered promiscuous mode [ 826.242128][ T5894] m920x_read = error: -19 [ 826.246545][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 826.254879][T15539] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 826.261070][T15525] hsr_slave_1: entered promiscuous mode [ 826.268951][T15525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 826.279350][T15525] Cannot create hsr debugfs directory [ 826.313574][ T5899] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 826.437334][ T5894] m920x_read = error: -19 [ 826.441754][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 826.513264][T15548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.526873][ T5899] usb 4-1: USB disconnect, device number 18 [ 826.535492][T15548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.664771][ T5894] m920x_read = error: -19 [ 826.669198][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 826.833099][ T5894] m920x_read = error: -19 [ 826.838856][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 826.867273][ T5848] Bluetooth: hci4: command tx timeout [ 827.006106][ T5894] m920x_read = error: -19 [ 827.010481][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 827.179556][ T5894] m920x_read = error: -19 [ 827.189760][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 827.362367][ T5894] m920x_read = error: -19 [ 827.366788][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 827.572151][ T5894] m920x_read = error: -19 [ 827.576835][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 827.722233][ T5952] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 827.752093][ T5894] m920x_read = error: -19 [ 827.756553][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 827.922186][ T5894] m920x_read = error: -19 [ 827.927044][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 827.937330][ T5952] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.956127][ T5952] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 827.974467][ T5952] usb 4-1: config 1 has no interface number 0 [ 827.980677][ T5952] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.002965][ T5952] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 828.022956][ T5952] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 25966, setting to 1024 [ 828.047082][ T5952] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 828.064778][ T5952] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 828.090233][ T5952] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.099684][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.107909][ T5894] m920x_read = error: -19 [ 828.112490][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 828.120288][ T5952] usb 4-1: Product: syz [ 828.124887][ T5952] usb 4-1: Manufacturer: syz [ 828.129557][ T5952] usb 4-1: SerialNumber: syz [ 828.278137][ T5894] m920x_read = error: -19 [ 828.283924][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 828.351611][T15559] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 828.452724][ T5894] m920x_read = error: -19 [ 828.464283][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 828.642660][ T5894] m920x_read = error: -19 [ 828.647134][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 828.818019][ T5894] m920x_read = error: -19 [ 828.822680][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 828.932217][ T5848] Bluetooth: hci4: command tx timeout [ 828.967566][T15559] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 828.982100][ T5894] m920x_read = error: -19 [ 828.986558][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 829.023526][ T5952] cdc_ncm 4-1:1.1: bind() failure [ 829.183903][ T5894] m920x_read = error: -19 [ 829.188352][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 829.238007][T15525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.258409][ T5896] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 829.311738][T15525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.352136][ T5894] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 829.372113][ T5952] m920x_read = error: -19 [ 829.376500][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 829.437052][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.439992][T15525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.459626][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.482320][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 829.512154][ T5896] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 829.521242][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.542739][ T5952] m920x_read = error: -19 [ 829.547152][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 829.556699][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.560047][T15525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.574681][ T5896] usb 3-1: config 0 descriptor?? [ 829.592013][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.602039][ T5894] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 829.611451][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.632782][ T5894] usb 5-1: config 0 descriptor?? [ 829.731552][T15567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.742395][T15567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.752018][ T5952] m920x_read = error: -19 [ 829.756495][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 829.830054][T15563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.833871][T15525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 829.854797][T15563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.867193][T15525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 829.880087][T15525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 829.899238][T15525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 829.922531][ T5952] m920x_read = error: -19 [ 829.933620][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 830.020751][T15525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.047819][T15525] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.067274][ T5894] itetech 0003:06CB:73F5.0041: unbalanced collection at end of report description [ 830.067991][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.083180][ T5894] itetech 0003:06CB:73F5.0041: probe with driver itetech failed with error -22 [ 830.083889][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.092957][ T5896] plantronics 0003:047F:FFFF.0042: No inputs registered, leaving [ 830.108356][ T5952] m920x_read = error: -19 [ 830.119607][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 830.123420][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.134598][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.164922][ T5896] plantronics 0003:047F:FFFF.0042: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 830.299044][T15563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.308555][T15525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.326665][ T5896] m920x_read = error: -19 [ 830.331189][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 830.343181][T15563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.356114][ T5896] usb 3-1: USB disconnect, device number 48 [ 830.458026][ T47] usb 4-1: USB disconnect, device number 19 [ 830.514651][ T5894] m920x_read = error: -19 [ 830.519076][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 830.538552][T15525] veth0_vlan: entered promiscuous mode [ 830.576057][T15525] veth1_vlan: entered promiscuous mode [ 830.611684][ T5839] usb 5-1: USB disconnect, device number 65 [ 830.626189][T15525] veth0_macvtap: entered promiscuous mode [ 830.675363][T15576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.693874][T15576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.732204][ T5896] m920x_read = error: -19 [ 830.736608][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 830.790912][T15525] veth1_macvtap: entered promiscuous mode [ 830.896776][T15525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.942378][T15525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.952505][ T5896] m920x_read = error: -19 [ 830.967021][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 830.984996][ T47] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 831.002137][T15525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.023661][ T5848] Bluetooth: hci4: command tx timeout [ 831.132558][T15525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.143541][T15525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.153800][ T5896] m920x_read = error: -19 [ 831.158157][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 831.253207][T15525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.269447][T15582] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 831.279801][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2809'. [ 831.319521][ T47] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 831.322070][ T5896] m920x_read = error: -19 [ 831.333250][ T47] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 831.357492][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 831.382417][T15525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.389699][ T47] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 831.418920][T15525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.449235][T15525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.468013][T15525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.490066][ T47] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 831.504879][ T47] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 831.528868][T15525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.549180][T15525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.583228][ T5896] m920x_read = error: -19 [ 831.587605][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 831.752106][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 831.792119][ T5894] m920x_read = error: -19 [ 831.796493][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 831.915397][ T47] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 831.924995][ T47] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 831.933862][ T5896] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 831.941536][ T47] usb 4-1: Product: syz [ 831.949514][ T47] usb 4-1: Manufacturer: syz [ 831.960919][ T47] usb 4-1: SerialNumber: syz [ 831.965864][ T5894] m920x_read = error: -19 [ 831.971798][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 831.992814][ T47] usb 4-1: config 0 descriptor?? [ 832.008246][T15577] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 832.018666][ T47] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 832.034268][ T47] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 832.132884][ T5896] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 832.158638][ T5896] usb 5-1: config 1 interface 0 has no altsetting 0 [ 832.162524][ T5952] m920x_read = error: -19 [ 832.173724][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 832.208965][ T5896] usb 5-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.40 [ 832.226630][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.236018][ T5896] usb 5-1: Product: ␁ [ 832.312890][ T5896] usb 5-1: Manufacturer: Љ [ 832.345022][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.353945][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.414734][ T5952] m920x_read = error: -19 [ 832.455803][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 832.509644][T15589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.530156][T15589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.864336][ T5896] usbhid 5-1:1.0: can't add hid device: -71 [ 832.870587][ T5952] m920x_read = error: -19 [ 832.875616][ T5896] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 832.888194][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 832.910083][ T5896] usb 5-1: USB disconnect, device number 66 [ 832.944737][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.953635][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.073898][ T5952] m920x_read = error: -19 [ 833.085354][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 833.252694][ T5896] m920x_read = error: -19 [ 833.261262][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 833.442274][ T5896] m920x_read = error: -19 [ 833.465220][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 833.692817][ T5896] m920x_read = error: -19 [ 833.742751][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 833.796907][ T47] usb 4-1: USB disconnect, device number 20 [ 833.805190][ T47] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 834.151986][ T5929] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 834.162797][ T5896] m920x_read = error: -19 [ 834.188041][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 834.259199][T15604] syzkaller0: entered promiscuous mode [ 834.265023][T15604] syzkaller0: entered allmulticast mode [ 834.277635][T15609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.299279][T15609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.311972][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 834.333779][ T5929] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 834.352602][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.370620][ T5929] usb 5-1: config 0 descriptor?? [ 834.376079][ T5896] m920x_read = error: -19 [ 834.376111][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 834.405529][ T5929] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 834.406859][T15614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2817'. [ 834.533556][ T5952] m920x_read = error: -19 [ 834.537969][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 834.618987][ T5896] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 834.708943][ T5952] m920x_read = error: -19 [ 834.713773][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 834.774391][ T5896] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 834.783143][ T5896] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 834.800588][ T5896] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 834.809442][T15602] fuse: Bad value for 'fd' [ 834.811466][ T5896] usb 2-1: config 220 has no interface number 2 [ 834.832512][ T5896] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 834.871486][ T5896] usb 2-1: config 220 interface 0 has no altsetting 0 [ 834.878711][ T5952] m920x_read = error: -19 [ 834.883257][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 834.891043][ T5896] usb 2-1: config 220 interface 76 has no altsetting 0 [ 834.899505][ T5896] usb 2-1: config 220 interface 1 has no altsetting 0 [ 834.909282][ T5896] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 834.931001][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.939586][ T5896] usb 2-1: Product: syz [ 834.954597][ T5896] usb 2-1: Manufacturer: syz [ 834.959362][ T5896] usb 2-1: SerialNumber: syz [ 835.048003][ T5952] m920x_read = error: -19 [ 835.052840][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 835.112668][ T5929] gspca_nw80x: reg_r err -110 [ 835.118564][ T5929] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 835.190893][ T5896] usb 2-1: selecting invalid altsetting 0 [ 835.205167][ T5896] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 835.211585][ T5896] usb 2-1: No valid video chain found. [ 835.218009][ T5894] m920x_read = error: -19 [ 835.222568][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 835.241269][ T5896] usb 2-1: selecting invalid altsetting 0 [ 835.254456][ T5896] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 835.281139][ T5896] usb 2-1: USB disconnect, device number 72 [ 835.386933][ T5894] m920x_read = error: -19 [ 835.391439][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 835.552127][ T5896] m920x_read = error: -19 [ 835.556574][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 835.727713][ T5896] m920x_read = error: -19 [ 835.742308][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 835.906095][ T5894] m920x_read = error: -19 [ 835.910836][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 836.072578][ T5894] m920x_read = error: -19 [ 836.077121][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 836.247008][ T5894] m920x_read = error: -19 [ 836.251386][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 836.418464][ T5894] m920x_read = error: -19 [ 836.423006][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 836.593828][ T5894] m920x_read = error: -19 [ 836.598242][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 836.768917][ T5894] m920x_read = error: -19 [ 836.773493][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 836.935692][ T5894] m920x_read = error: -19 [ 836.940119][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 837.021299][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2822'. [ 837.080322][ T5894] usb 5-1: USB disconnect, device number 67 [ 837.132042][ T5896] m920x_read = error: -19 [ 837.136498][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 837.180857][T15625] bridge_slave_0: default FDB implementation only supports local addresses [ 837.445005][ T5894] m920x_read = error: -19 [ 837.449423][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 837.629004][ T5894] m920x_read = error: -19 [ 837.638408][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 837.673086][ T5929] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 837.827099][ T5894] m920x_read = error: -19 [ 837.831702][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 837.869556][ T5929] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 837.920003][ T5929] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 838.005193][ T5929] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 838.012025][ T5894] m920x_read = error: -19 [ 838.025244][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 838.032539][ T5929] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 838.089243][T15654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2831'. [ 838.091894][ T5929] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 838.122764][ T5896] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 838.196752][ T5929] usb 5-1: config 0 interface 0 has no altsetting 0 [ 838.212057][ T5894] m920x_read = error: -19 [ 838.216466][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 838.246948][T15657] syzkaller0: entered promiscuous mode [ 838.252748][T15657] syzkaller0: entered allmulticast mode [ 838.263203][ T5929] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 838.281293][ T5929] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 838.282030][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 838.308223][ T5896] usb 4-1: config 0 has no interfaces? [ 838.313926][ T5896] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 838.332116][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.348922][ T5929] usb 5-1: Product: syz [ 838.371541][ T5896] usb 4-1: config 0 descriptor?? [ 838.377156][ T5929] usb 5-1: Manufacturer: syz [ 838.381810][ T5929] usb 5-1: SerialNumber: syz [ 838.402152][ T5896] m920x_read = error: -19 [ 838.416695][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 838.443916][ T5929] usb 5-1: config 0 descriptor?? [ 838.461148][T15639] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 838.499615][ T5929] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 838.538061][ T5929] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 838.592135][ T5896] m920x_read = error: -19 [ 838.596598][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 838.786404][ T5896] m920x_read = error: -19 [ 838.790919][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 838.820556][T15665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.830225][T15665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.091004][ T5896] m920x_read = error: -19 [ 839.096122][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 839.262948][ T5896] m920x_read = error: -19 [ 839.275471][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 839.453926][ T5896] m920x_read = error: -19 [ 839.458616][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 839.633060][ T5896] m920x_read = error: -19 [ 839.638511][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 839.817974][ T5896] m920x_read = error: -19 [ 839.837482][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 840.027695][ T5896] m920x_read = error: -19 [ 840.032594][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 840.212321][ T5896] m920x_read = error: -19 [ 840.230753][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 840.249184][ T47] usb 5-1: USB disconnect, device number 68 [ 840.261441][ T47] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 840.402572][ T5896] m920x_read = error: -19 [ 840.410982][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 840.574323][ T5896] m920x_read = error: -19 [ 840.578809][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 840.745992][ T5896] m920x_read = error: -19 [ 840.750542][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 840.913165][ T5896] m920x_read = error: -19 [ 840.932047][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 841.112307][ T5896] m920x_read = error: -19 [ 841.116733][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 841.292176][ T5896] m920x_read = error: -19 [ 841.297017][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 841.305670][ T5896] usb 4-1: USB disconnect, device number 21 [ 841.377029][ T47] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 841.462440][ T5952] m920x_read = error: -19 [ 841.473881][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 841.515604][T15688] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2841'. [ 841.524842][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'. [ 841.532190][ T47] usb 5-1: device descriptor read/64, error -71 [ 841.652258][ T5896] m920x_read = error: -19 [ 841.656684][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 841.668942][T15694] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 841.668942][T15694] The task syz.1.2842 (15694) triggered the difference, watch for misbehavior. [ 841.772123][ T47] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 841.791970][ T5894] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 841.799653][ T5952] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 841.852022][ T5896] m920x_read = error: -19 [ 841.856440][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 841.902032][ T47] usb 5-1: device descriptor read/64, error -71 [ 841.932034][ T5894] usb 3-1: device descriptor read/64, error -71 [ 841.954011][ T5952] usb 4-1: config 0 has no interfaces? [ 841.961494][ T5952] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 841.973123][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.981139][ T5952] usb 4-1: Product: syz [ 841.989222][ T5952] usb 4-1: Manufacturer: syz [ 841.993885][ T5952] usb 4-1: SerialNumber: syz [ 842.001428][ T5952] usb 4-1: config 0 descriptor?? [ 842.012538][ T47] usb usb5-port1: attempt power cycle [ 842.022002][ T5896] m920x_read = error: -19 [ 842.026471][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 842.182389][ T5894] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 842.193227][ T5896] m920x_read = error: -19 [ 842.197770][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 842.341969][ T5894] usb 3-1: device descriptor read/64, error -71 [ 842.353200][ T47] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 842.362154][ T5896] m920x_read = error: -19 [ 842.366571][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 842.387151][ T47] usb 5-1: device descriptor read/8, error -71 [ 842.466752][ T5894] usb usb3-port1: attempt power cycle [ 842.478628][T15697] xt_CT: No such helper "snmp" [ 842.542292][ T5896] m920x_read = error: -19 [ 842.549284][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 842.632025][ T47] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 842.667756][ T47] usb 5-1: device descriptor read/8, error -71 [ 842.722086][ T10] m920x_read = error: -19 [ 842.726636][ T10] dvb-usb: error -19 while querying for an remote control event. [ 842.782300][ T47] usb usb5-port1: unable to enumerate USB device [ 842.812168][ T5894] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 842.832834][ T5894] usb 3-1: device descriptor read/8, error -71 [ 842.872200][ T5896] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 842.902272][ T10] m920x_read = error: -19 [ 842.906937][ T10] dvb-usb: error -19 while querying for an remote control event. [ 843.042170][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 843.052938][ T5896] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 843.061090][ T5896] usb 2-1: config 0 has no interface number 0 [ 843.072143][ T10] m920x_read = error: -19 [ 843.076758][ T10] dvb-usb: error -19 while querying for an remote control event. [ 843.086918][ T5894] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 843.097647][ T5896] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 843.109440][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.117997][ T5896] usb 2-1: Product: syz [ 843.122690][ T5896] usb 2-1: Manufacturer: syz [ 843.127586][ T5894] usb 3-1: device descriptor read/8, error -71 [ 843.133948][ T5896] usb 2-1: SerialNumber: syz [ 843.141385][ T5896] usb 2-1: config 0 descriptor?? [ 843.150809][ T5896] gspca_main: se401-2.14.0 probing 047d:5003 [ 843.259086][ T5894] usb usb3-port1: unable to enumerate USB device [ 843.266719][ T5894] m920x_read = error: -19 [ 843.285422][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 843.367901][T15705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.384624][T15705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.462066][ T5894] m920x_read = error: -19 [ 843.466524][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 843.520339][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2846'. [ 843.633254][ T5894] m920x_read = error: -19 [ 843.643544][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 843.692142][ T5896] usb 2-1: reset high-speed USB device number 73 using dummy_hcd [ 843.812700][ T5894] m920x_read = error: -19 [ 843.817183][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 843.842631][ T5896] usb 2-1: device descriptor read/64, error -71 [ 843.992470][ T5894] m920x_read = error: -19 [ 844.000595][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 844.092743][ T5896] usb 2-1: reset high-speed USB device number 73 using dummy_hcd [ 844.195693][ T5894] m920x_read = error: -19 [ 844.209186][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 844.262025][ T5896] usb 2-1: device descriptor read/64, error -71 [ 844.412073][ T5894] m920x_read = error: -19 [ 844.418276][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 844.505550][ T5952] usb 4-1: USB disconnect, device number 22 [ 844.530963][ T5896] usb 2-1: reset high-speed USB device number 73 using dummy_hcd [ 844.583869][ T5896] usb 2-1: device descriptor read/8, error -71 [ 844.592379][ T5894] m920x_read = error: -19 [ 844.596778][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 844.794352][T15719] syzkaller0: entered promiscuous mode [ 844.799964][T15719] syzkaller0: entered allmulticast mode [ 844.822483][ T9] m920x_read = error: -19 [ 844.826895][ T9] dvb-usb: error -19 while querying for an remote control event. [ 844.838084][ T5896] usb 2-1: reset high-speed USB device number 73 using dummy_hcd [ 844.857291][T15723] FAULT_INJECTION: forcing a failure. [ 844.857291][T15723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.872897][ T5896] usb 2-1: device descriptor read/8, error -71 [ 844.907543][T15723] CPU: 1 UID: 0 PID: 15723 Comm: syz.2.2851 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 844.907573][T15723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 844.907585][T15723] Call Trace: [ 844.907594][T15723] [ 844.907603][T15723] dump_stack_lvl+0x241/0x360 [ 844.907639][T15723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 844.907666][T15723] ? __pfx__printk+0x10/0x10 [ 844.907707][T15723] should_fail_ex+0x424/0x570 [ 844.907732][T15723] _copy_from_user+0x2d/0xb0 [ 844.907761][T15723] copy_msghdr_from_user+0xb3/0x580 [ 844.907794][T15723] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 844.907817][T15723] ? __fget_files+0x2a/0x420 [ 844.907838][T15723] ? __fget_files+0x2a/0x420 [ 844.907866][T15723] do_recvmmsg+0x3bf/0xab0 [ 844.907900][T15723] ? __pfx_do_recvmmsg+0x10/0x10 [ 844.907938][T15723] ? rcu_read_lock_any_held+0xbb/0x160 [ 844.907964][T15723] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 844.907990][T15723] ? vfs_write+0xb29/0xd10 [ 844.908024][T15723] ? ksys_write+0x24e/0x2d0 [ 844.908048][T15723] ? __mutex_unlock_slowpath+0x229/0x800 [ 844.908069][T15723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 844.908082][T15723] ? __fget_files+0x2a/0x420 [ 844.908102][T15723] __x64_sys_recvmmsg+0x1ab/0x260 [ 844.908117][T15723] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 844.908134][T15723] ? do_syscall_64+0xb6/0x230 [ 844.908154][T15723] do_syscall_64+0xf3/0x230 [ 844.908177][T15723] ? clear_bhb_loop+0x45/0xa0 [ 844.908200][T15723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.908218][T15723] RIP: 0033:0x7feb97b8d169 [ 844.908236][T15723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.908251][T15723] RSP: 002b:00007feb9894d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 844.908272][T15723] RAX: ffffffffffffffda RBX: 00007feb97da6160 RCX: 00007feb97b8d169 [ 844.908281][T15723] RDX: 0000000000000001 RSI: 0000200000005140 RDI: 0000000000000007 [ 844.908288][T15723] RBP: 00007feb9894d090 R08: 0000000000000000 R09: 0000000000000000 [ 844.908295][T15723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.908302][T15723] R13: 0000000000000001 R14: 00007feb97da6160 R15: 00007feb97ecfa28 [ 844.908321][T15723] [ 844.972033][ T5952] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 845.145625][ T9] m920x_read = error: -19 [ 845.150011][ T9] dvb-usb: error -19 while querying for an remote control event. [ 845.177831][ T5896] gspca_se401: read req failed req 0x06 error -19 [ 845.186765][ T5896] usb 2-1: USB disconnect, device number 73 [ 845.322127][ T5894] m920x_read = error: -19 [ 845.326721][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 845.352183][ T5896] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 845.361951][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 845.369945][ T5952] usb 4-1: config 0 has no interfaces? [ 845.376085][ T5952] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 845.385516][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.397678][ T5952] usb 4-1: config 0 descriptor?? [ 845.491984][ T5896] usb 2-1: device descriptor read/64, error -71 [ 845.503237][ T5952] m920x_read = error: -19 [ 845.507642][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 845.694769][ T5952] m920x_read = error: -19 [ 845.699161][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 845.742226][ T5896] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 845.862043][ T5952] m920x_read = error: -19 [ 845.866681][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 846.032725][ T5952] m920x_read = error: -19 [ 846.037156][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 846.227589][ T5894] m920x_read = error: -19 [ 846.236751][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 846.414621][ T5894] m920x_read = error: -19 [ 846.419915][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 846.592072][ T5894] m920x_read = error: -19 [ 846.598450][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 846.774499][ T5896] m920x_read = error: -19 [ 846.778916][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 846.978443][ T5894] m920x_read = error: -19 [ 846.983113][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 847.173809][ T5896] m920x_read = error: -19 [ 847.178221][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 847.350689][ T5896] m920x_read = error: -19 [ 847.361102][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 847.485235][T15725] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 847.494395][T15725] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 847.512093][T15717] bridge0: port 3(dummy0) entered blocking state [ 847.532114][ T5894] m920x_read = error: -19 [ 847.544542][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 847.553016][T15717] bridge0: port 3(dummy0) entered disabled state [ 847.559566][T15717] dummy0: entered allmulticast mode [ 847.614044][T15717] dummy0: entered promiscuous mode [ 847.676667][T15739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2855'. [ 847.677813][ T5896] usb 4-1: USB disconnect, device number 23 [ 847.695257][T15739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2855'. [ 847.751013][T15745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2856'. [ 847.762261][ T9] m920x_read = error: -19 [ 847.766683][ T9] dvb-usb: error -19 while querying for an remote control event. [ 847.932273][ T5896] m920x_read = error: -19 [ 847.936701][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 847.982367][ T5952] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 848.102810][T15755] random: crng reseeded on system resumption [ 848.122068][ T5896] m920x_read = error: -19 [ 848.126475][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 848.162045][ T5952] usb 3-1: Using ep0 maxpacket: 8 [ 848.184185][ T5952] usb 3-1: too many endpoints for config 0 interface 0 altsetting 4: 65, using maximum allowed: 30 [ 848.198037][ T5952] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.240181][ T5952] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.260345][ T5952] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 848.348503][ T5896] m920x_read = error: -19 [ 848.361967][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 848.381977][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 848.410699][ T5952] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 848.436609][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.455634][T15765] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 848.473934][ T5952] usb 3-1: config 0 descriptor?? [ 848.572060][ T5896] m920x_read = error: -19 [ 848.576599][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 848.809807][ T47] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 848.877158][ T5896] m920x_read = error: -19 [ 848.888273][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 848.921991][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 849.031973][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 849.039793][ T47] usb 4-1: config 64 has an invalid interface number: 213 but max is 3 [ 849.051963][ T47] usb 4-1: config 64 has an invalid interface number: 213 but max is 3 [ 849.062017][ T5896] m920x_read = error: -19 [ 849.066502][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 849.075822][ T47] usb 4-1: config 64 has an invalid interface number: 168 but max is 3 [ 849.092312][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 849.098069][ T47] usb 4-1: config 64 has an invalid interface number: 6 but max is 3 [ 849.121401][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 849.130515][ T47] usb 4-1: config 64 has an invalid descriptor of length 254, skipping remainder of the config [ 849.152016][ T47] usb 4-1: config 64 has 3 interfaces, different from the descriptor's value: 4 [ 849.161427][ T47] usb 4-1: config 64 has no interface number 0 [ 849.168539][ T47] usb 4-1: config 64 has no interface number 1 [ 849.175157][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 849.175191][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 849.205301][ T47] usb 4-1: config 64 has no interface number 2 [ 849.215660][ T47] usb 4-1: config 64 interface 213 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 849.230243][ T47] usb 4-1: config 64 interface 213 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 849.246688][ T47] usb 4-1: config 64 interface 213 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 849.263717][ T5894] m920x_read = error: -19 [ 849.268136][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 849.272927][ T47] usb 4-1: config 64 interface 168 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 849.290094][ T47] usb 4-1: too many endpoints for config 64 interface 6 altsetting 7: 74, using maximum allowed: 30 [ 849.302363][ T47] usb 4-1: config 64 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 849.316175][ T47] usb 4-1: config 64 interface 213 has no altsetting 0 [ 849.331521][T15776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2866'. [ 849.411317][ T47] usb 4-1: config 64 interface 213 has no altsetting 1 [ 849.536215][ T9] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 849.551923][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.579919][ T9] usb 2-1: Product: syz [ 849.587301][T15776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.596637][ T47] usb 4-1: config 64 interface 168 has no altsetting 0 [ 849.618695][ T9] usb 2-1: Manufacturer: syz [ 849.621810][ T47] usb 4-1: config 64 interface 6 has no altsetting 0 [ 849.640845][T15776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.655074][ T47] usb 4-1: New USB device found, idVendor=07b8, idProduct=8188, bcdDevice=1f.c5 [ 849.664745][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.679326][ T47] usb 4-1: Product: ؑ礜롓芬댵㱽姙饣ㄌ㩬⨀㆏嗏≑鎰㒽ᾕꚿ㔐䡗큦᫭䵹祆抇屉⾪₸떗䫒ㇵ๤锗ꬢ徫㳂휄∇ [ 849.695173][ T9] usb 2-1: SerialNumber: syz [ 849.702166][ T5894] m920x_read = error: -19 [ 849.710034][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 849.720139][ T47] usb 4-1: Manufacturer: Ⰹ [ 849.730519][ T47] usb 4-1: SerialNumber: Ⰺ [ 849.755542][ T9] usb 2-1: config 0 descriptor?? [ 849.844975][ T9] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 849.958606][ T9] m920x_read = error: -19 [ 849.967420][ T9] dvb-usb: error -19 while querying for an remote control event. [ 850.051634][ T47] usb 4-1: USB disconnect, device number 24 [ 850.257203][T15779] syzkaller0: entered promiscuous mode [ 850.262874][T15779] syzkaller0: entered allmulticast mode [ 850.271134][T15778] FAULT_INJECTION: forcing a failure. [ 850.271134][T15778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.288050][T15778] CPU: 1 UID: 0 PID: 15778 Comm: syz.4.2867 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 850.288076][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 850.288088][T15778] Call Trace: [ 850.288097][T15778] [ 850.288106][T15778] dump_stack_lvl+0x241/0x360 [ 850.288140][T15778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.288165][T15778] ? __pfx__printk+0x10/0x10 [ 850.288189][T15778] should_fail_ex+0x424/0x570 [ 850.288227][T15778] _copy_to_iter+0x43f/0x1c90 [ 850.288268][T15778] ? __pfx__copy_to_iter+0x10/0x10 [ 850.288294][T15778] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 850.288327][T15778] ? skb_recv_datagram+0x26e/0x310 [ 850.288343][T15778] __skb_datagram_iter+0x101/0x940 [ 850.288359][T15778] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 850.288380][T15778] skb_copy_datagram_iter+0xd1/0x250 [ 850.288407][T15778] netlink_recvmsg+0x2d4/0x1180 [ 850.288432][T15778] ? __lock_acquire+0xad5/0xd80 [ 850.288460][T15778] ? __pfx_netlink_recvmsg+0x10/0x10 [ 850.288483][T15778] ? __pfx_aa_sk_perm+0x10/0x10 [ 850.288501][T15778] ? aa_sock_msg_perm+0x91/0x160 [ 850.288518][T15778] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 850.288529][T15778] ? __pfx_netlink_recvmsg+0x10/0x10 [ 850.288557][T15778] sock_recvmsg+0x22f/0x280 [ 850.288587][T15778] ____sys_recvmsg+0x1c8/0x480 [ 850.288616][T15778] ? __pfx_____sys_recvmsg+0x10/0x10 [ 850.288654][T15778] do_recvmmsg+0x428/0xab0 [ 850.288674][T15778] ? __pfx_do_recvmmsg+0x10/0x10 [ 850.288705][T15778] ? rcu_read_lock_any_held+0xbb/0x160 [ 850.288730][T15778] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 850.288758][T15778] ? vfs_write+0xb29/0xd10 [ 850.288787][T15778] ? ksys_write+0x24e/0x2d0 [ 850.288803][T15778] ? __mutex_unlock_slowpath+0x229/0x800 [ 850.288824][T15778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 850.288837][T15778] ? __fget_files+0x2a/0x420 [ 850.288870][T15778] __x64_sys_recvmmsg+0x1ab/0x260 [ 850.288895][T15778] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 850.288922][T15778] ? do_syscall_64+0xb6/0x230 [ 850.288944][T15778] do_syscall_64+0xf3/0x230 [ 850.288959][T15778] ? clear_bhb_loop+0x45/0xa0 [ 850.288973][T15778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.288984][T15778] RIP: 0033:0x7fab76d8d169 [ 850.288996][T15778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.289013][T15778] RSP: 002b:00007fab77b71038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 850.289036][T15778] RAX: ffffffffffffffda RBX: 00007fab76fa5fa0 RCX: 00007fab76d8d169 [ 850.289050][T15778] RDX: 0000000000000001 RSI: 0000200000005140 RDI: 0000000000000007 [ 850.289062][T15778] RBP: 00007fab77b71090 R08: 0000000000000000 R09: 0000000000000000 [ 850.289074][T15778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.289086][T15778] R13: 0000000000000000 R14: 00007fab76fa5fa0 R15: 00007fab770cfa28 [ 850.289107][T15778] [ 850.579765][ T9] m920x_read = error: -19 [ 850.590718][ T9] dvb-usb: error -19 while querying for an remote control event. [ 850.665729][ T5839] usb 2-1: USB disconnect, device number 76 [ 850.764520][T15774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.773524][T15774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.802630][ T5894] m920x_read = error: -19 [ 850.807018][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 851.000686][ T5894] m920x_read = error: -19 [ 851.038847][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 851.261421][ T5894] m920x_read = error: -19 [ 851.322160][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 851.513096][ T5894] m920x_read = error: -19 [ 851.517582][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 851.572232][ T47] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 851.692838][ T5894] m920x_read = error: -19 [ 851.697344][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 851.784340][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 851.802504][ T47] usb 4-1: config 0 has no interfaces? [ 851.808294][ T47] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 851.822538][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.867464][ T47] usb 4-1: config 0 descriptor?? [ 852.173417][ T5952] usbhid 3-1:0.0: can't add hid device: -71 [ 852.191299][ T5952] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 852.252108][ T5894] m920x_read = error: -19 [ 852.256531][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 852.283594][ T5952] usb 3-1: USB disconnect, device number 53 [ 852.387684][T15792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.441225][T15792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.452046][ T5894] m920x_read = error: -19 [ 852.456454][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 852.541446][ T30] audit: type=1326 audit(1744291556.672:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15793 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb97b8d169 code=0x7ffc0000 [ 852.594570][ T30] audit: type=1326 audit(1744291556.672:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15793 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb97b8d169 code=0x7ffc0000 [ 852.632172][ T5952] m920x_read = error: -19 [ 852.636786][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 852.815275][ T5952] m920x_read = error: -19 [ 852.825836][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 852.998359][ T5952] m920x_read = error: -19 [ 853.003069][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 853.177394][ T5952] m920x_read = error: -19 [ 853.192417][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 853.352869][ T5952] m920x_read = error: -19 [ 853.357367][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 853.532433][ T5952] m920x_read = error: -19 [ 853.536917][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 853.712142][ T5952] m920x_read = error: -19 [ 853.716558][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 853.882784][ T5952] m920x_read = error: -19 [ 853.887449][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 854.063213][ T5952] m920x_read = error: -19 [ 854.068583][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 854.232840][ T5952] m920x_read = error: -19 [ 854.237285][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 854.402131][ T5894] m920x_read = error: -19 [ 854.406579][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 854.428295][T15794] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 854.489174][ T47] usb 4-1: USB disconnect, device number 25 [ 854.516481][T15802] delete_channel: no stack [ 854.530702][T15802] delete_channel: no stack [ 854.572950][ T5894] m920x_read = error: -19 [ 854.577544][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 854.697708][T15814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.744568][T15814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.775380][ T5894] m920x_read = error: -19 [ 854.779903][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 854.926841][T15824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2880'. [ 854.978143][T15828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2880'. [ 854.987655][ T5894] m920x_read = error: -19 [ 855.000406][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 855.000792][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'. [ 855.114551][T15831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2880'. [ 855.162046][ T5894] m920x_read = error: -19 [ 855.166464][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 855.168885][T15827] syzkaller0: entered promiscuous mode [ 855.200698][T15827] syzkaller0: entered allmulticast mode [ 855.221599][T15824] vlan2: entered promiscuous mode [ 855.228197][T15824] hsr0: entered promiscuous mode [ 855.344521][ T5894] m920x_read = error: -19 [ 855.359244][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 855.551977][ T5894] m920x_read = error: -19 [ 855.564820][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 855.626891][ T47] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 855.742055][ T5894] m920x_read = error: -19 [ 855.746467][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 855.853121][ T47] usb 2-1: not running at top speed; connect to a high speed hub [ 855.863533][ T47] usb 2-1: config 1 interface 0 has no altsetting 0 [ 855.891588][ T47] usb 2-1: string descriptor 0 read error: -22 [ 855.902095][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 855.943224][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.956538][ T5952] m920x_read = error: -19 [ 855.962461][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 856.131757][ T5952] m920x_read = error: -19 [ 856.139767][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 856.185437][ T5894] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 856.253985][T15837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.265975][T15837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.312233][ T5952] m920x_read = error: -19 [ 856.316638][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 856.365385][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.379911][ T5894] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 856.405624][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.431268][ T5894] usb 4-1: config 0 descriptor?? [ 856.457475][ T5894] gspca_main: kinect-2.14.0 probing 045e:02bf [ 856.487751][ T5952] m920x_read = error: -19 [ 856.492317][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 856.652335][ T5894] m920x_read = error: -19 [ 856.656867][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 856.672369][ T5952] usb 4-1: USB disconnect, device number 26 [ 856.846853][ T5894] m920x_read = error: -19 [ 856.851586][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 856.980699][T15830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.003059][T15830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.012317][ T5952] m920x_read = error: -19 [ 857.032002][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 857.146301][T15830] program syz.0.2881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 857.212041][ T5952] m920x_read = error: -19 [ 857.216460][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 857.382222][ T5952] m920x_read = error: -19 [ 857.386655][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 857.572497][ T5952] m920x_read = error: -19 [ 857.577148][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 857.762164][ T5952] m920x_read = error: -19 [ 857.778485][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 857.954796][ T5952] m920x_read = error: -19 [ 857.961651][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 858.133118][ T5952] m920x_read = error: -19 [ 858.140270][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 858.304061][ T5952] m920x_read = error: -19 [ 858.308488][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 858.474573][ T5952] m920x_read = error: -19 [ 858.478995][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 858.644812][ T5952] m920x_read = error: -19 [ 858.649208][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 858.713448][ T5952] usb 2-1: USB disconnect, device number 77 [ 858.821988][ T5896] m920x_read = error: -19 [ 858.826403][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 858.970451][T15860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2891'. [ 858.981153][T15860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2891'. [ 859.002005][ T5952] m920x_read = error: -19 [ 859.006919][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 859.182213][ T5839] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 859.282034][ T5952] m920x_read = error: -19 [ 859.289011][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 859.322059][ T47] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 859.462025][ T5952] m920x_read = error: -19 [ 859.466473][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 859.483512][T15873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.503828][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.532412][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 859.545589][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.588841][ T47] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 859.632065][ T5952] m920x_read = error: -19 [ 859.636490][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 859.728641][T15873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.732097][ T5839] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 859.745595][ T47] usb 4-1: config 0 has no interface number 0 [ 859.752815][ T47] usb 4-1: config 0 interface 161 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 859.765486][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.779636][ T47] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 859.948234][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.951591][ T5952] m920x_read = error: -19 [ 859.957924][ T47] usb 4-1: Product: syz [ 859.965016][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 859.973693][ T5839] usb 5-1: config 0 descriptor?? [ 860.142043][ T5896] m920x_read = error: -19 [ 860.187304][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 860.207697][ T47] usb 4-1: Manufacturer: syz [ 860.218923][ T47] usb 4-1: SerialNumber: syz [ 860.852213][ T5952] m920x_read = error: -19 [ 860.859561][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 860.952017][ T47] usb 4-1: config 0 descriptor?? [ 861.001509][T15860] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 861.033538][ T5839] usbhid 5-1:0.0: can't add hid device: -71 [ 861.040411][ T47] kvaser_usb 4-1:0.161: error -ENODEV: Cannot get usb endpoint(s) [ 861.072090][ T5894] m920x_read = error: -19 [ 861.072407][ T5839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 861.077297][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 861.188154][ T5839] usb 5-1: USB disconnect, device number 74 [ 861.249009][ T47] usb 4-1: USB disconnect, device number 27 [ 861.513439][ T5894] m920x_read = error: -19 [ 861.527731][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 861.642039][ T5839] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 861.765873][ T5894] m920x_read = error: -19 [ 861.798909][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 862.002209][ T5894] m920x_read = error: -19 [ 862.006661][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 862.155261][ T5839] usb 5-1: config 0 has no interfaces? [ 862.167558][ T5839] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 862.177973][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.186132][ T5839] usb 5-1: Product: syz [ 862.190824][ T5839] usb 5-1: Manufacturer: syz [ 862.195688][ T5839] usb 5-1: SerialNumber: syz [ 862.203764][ T5839] usb 5-1: config 0 descriptor?? [ 862.374258][ T5894] m920x_read = error: -19 [ 862.378702][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 862.526803][ T47] usb 5-1: USB disconnect, device number 75 [ 862.544735][ T5894] m920x_read = error: -19 [ 862.550627][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 862.777049][ T5894] m920x_read = error: -19 [ 862.782454][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 862.865601][T15896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.894136][T15896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.937174][T15898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.957310][T15898] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 863.128504][ T5894] m920x_read = error: -19 [ 863.139199][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 863.304433][ T5896] m920x_read = error: -19 [ 863.308931][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 863.452139][ T5894] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 863.460943][T15908] syzkaller0: entered promiscuous mode [ 863.466700][T15908] syzkaller0: entered allmulticast mode [ 863.485082][ T5896] m920x_read = error: -19 [ 863.489583][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 863.636616][ T5894] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 863.645467][ T5894] usb 3-1: config 0 has no interface number 0 [ 863.651930][ T5894] usb 3-1: config 0 interface 25 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 863.663439][ T5896] m920x_read = error: -19 [ 863.668024][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 863.688528][ T5894] usb 3-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 863.698587][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.707972][ T5894] usb 3-1: Product: syz [ 863.712671][ T5894] usb 3-1: Manufacturer: syz [ 863.717607][ T5894] usb 3-1: SerialNumber: syz [ 863.763723][ T5894] usb 3-1: config 0 descriptor?? [ 863.785432][ T5894] usb 3-1: Found UVC 0.00 device syz (1b3b:2951) [ 863.800076][ T5894] usb 3-1: No valid video chain found. [ 863.832029][ T5894] m920x_read = error: -19 [ 863.850463][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 863.986732][ T5894] usb 3-1: USB disconnect, device number 54 [ 864.022154][ T5896] m920x_read = error: -19 [ 864.030844][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 864.212422][ T5894] m920x_read = error: -19 [ 864.216838][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 864.403683][ T5894] m920x_read = error: -19 [ 864.408213][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 864.542271][ T5839] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 864.602240][ T5894] m920x_read = error: -19 [ 864.620658][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 864.658900][T15916] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2904'. [ 864.692124][ T5839] usb 4-1: device descriptor read/64, error -71 [ 864.791997][ T5896] m920x_read = error: -19 [ 864.796519][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 864.932800][ T5839] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 864.965720][ T5896] m920x_read = error: -19 [ 864.970847][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 865.024827][ T5894] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 865.088138][ T5839] usb 4-1: device descriptor read/64, error -71 [ 865.144017][ T5896] m920x_read = error: -19 [ 865.155525][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 865.217257][ T5839] usb usb4-port1: attempt power cycle [ 865.333157][ T5896] m920x_read = error: -19 [ 865.337727][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 865.505143][ T5896] m920x_read = error: -19 [ 865.509618][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 865.564083][ T5839] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 865.592713][ T5839] usb 4-1: device descriptor read/8, error -71 [ 865.682293][ T5896] m920x_read = error: -19 [ 865.691366][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 865.832613][ T5839] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 865.867904][ T5839] usb 4-1: device descriptor read/8, error -71 [ 865.900354][ T5896] m920x_read = error: -19 [ 865.922619][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 865.982592][ T5839] usb usb4-port1: unable to enumerate USB device [ 866.089509][ T5896] m920x_read = error: -19 [ 866.096610][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 866.314011][ T5896] m920x_read = error: -19 [ 866.318566][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 866.490852][ T5894] m920x_read = error: -19 [ 866.495435][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 866.672600][ T5894] m920x_read = error: -19 [ 866.677074][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 866.867011][ T5894] m920x_read = error: -19 [ 866.871568][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 866.949040][T15917] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 867.042067][ T5894] m920x_read = error: -19 [ 867.066991][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 867.252057][ T5894] m920x_read = error: -19 [ 867.256480][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 867.442286][ T5952] m920x_read = error: -19 [ 867.446768][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 867.642031][ T5894] m920x_read = error: -19 [ 867.646469][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 867.842469][ T5896] m920x_read = error: -19 [ 867.846891][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 868.032148][ T5896] m920x_read = error: -19 [ 868.036562][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 868.050363][ T5860] bridge0: port 1(syz_tun) entered disabled state [ 868.096058][ T5860] syz_tun (unregistering): left allmulticast mode [ 868.128722][ T5860] syz_tun (unregistering): left promiscuous mode [ 868.138925][ T5860] bridge0: port 1(syz_tun) entered disabled state [ 868.152065][ T5894] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 868.187827][T15956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.188484][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 868.213326][T15956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.221288][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 868.233823][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 868.242006][ T9] m920x_read = error: -19 [ 868.246774][ T9] dvb-usb: error -19 while querying for an remote control event. [ 868.255620][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 868.265593][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 868.350705][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 868.371924][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 868.432242][ T5896] m920x_read = error: -19 [ 868.436236][ T1006] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.439409][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 868.457498][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 868.497285][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 868.524563][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 868.555730][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 868.563816][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 868.587668][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 868.621151][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 868.649232][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 868.659540][ T5896] m920x_read = error: -19 [ 868.669561][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 868.680200][ T1006] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.682482][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 868.702781][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 868.713211][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 868.723531][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 868.734893][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 868.753014][ T5894] usb 3-1: string descriptor 0 read error: -22 [ 868.767625][ T5894] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 868.779782][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.812468][ T5894] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 868.832176][ T5896] m920x_read = error: -19 [ 868.837188][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 868.874434][ T1006] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.890378][T15964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.906282][T15964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.983957][ T1006] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.022246][ T5894] m920x_read = error: -19 [ 869.039201][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 869.098475][T15954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2917'. [ 869.209050][T15954] input: syz0 as /devices/virtual/input/input86 [ 869.222381][ T5894] m920x_read = error: -19 [ 869.228569][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 869.422918][ T1006] dummy0: left allmulticast mode [ 869.443355][ T1006] dummy0: left promiscuous mode [ 869.458487][ T1006] bridge0: port 3(dummy0) entered disabled state [ 869.502334][ T5894] m920x_read = error: -19 [ 869.506748][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 869.528606][ T1006] veth0_to_bridge: left allmulticast mode [ 869.535264][ T1006] veth0_to_bridge: left promiscuous mode [ 869.541747][ T1006] bridge0: port 2(veth0_to_bridge) entered disabled state [ 869.612580][ T30] audit: type=1326 audit(1744291573.752:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab76d8d169 code=0x7ffc0000 [ 869.648511][ T30] audit: type=1326 audit(1744291573.752:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab76d8d169 code=0x7ffc0000 [ 869.654662][T15969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.692024][ T30] audit: type=1326 audit(1744291573.752:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fab76d8d169 code=0x7ffc0000 [ 869.715222][ T5894] m920x_read = error: -19 [ 869.719687][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 869.728488][ T30] audit: type=1326 audit(1744291573.752:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab76d8d169 code=0x7ffc0000 [ 869.751136][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.758036][T15969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.769095][ T30] audit: type=1326 audit(1744291573.752:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fab76d8bb7c code=0x7ffc0000 [ 869.828063][ T30] audit: type=1326 audit(1744291573.752:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab76d8d169 code=0x7ffc0000 [ 869.850488][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.860182][ T30] audit: type=1326 audit(1744291573.752:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab76d8d169 code=0x7ffc0000 [ 869.882772][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.891749][ T5894] m920x_read = error: -19 [ 869.896853][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 869.905440][ T30] audit: type=1326 audit(1744291573.752:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fab76d8bb7c code=0x7ffc0000 [ 869.938539][ T30] audit: type=1326 audit(1744291573.752:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab76d8d169 code=0x7ffc0000 [ 869.966207][ T30] audit: type=1326 audit(1744291573.752:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab76d8d169 code=0x7ffc0000 [ 870.080550][ T5894] m920x_read = error: -19 [ 870.085284][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 870.174835][ T1006] dvmrp0 (unregistering): left allmulticast mode [ 870.267516][ T5894] m920x_read = error: -19 [ 870.274126][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 870.299531][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.306015][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.377688][ T5848] Bluetooth: hci3: command tx timeout [ 870.449386][ T5896] m920x_read = error: -19 [ 870.454967][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 870.538542][ T1006] bond0 (unregistering): Released all slaves [ 870.637787][ T5896] m920x_read = error: -19 [ 870.660018][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 870.780714][ T1006] bond1 (unregistering): Released all slaves [ 870.806355][T15974] syzkaller1: entered promiscuous mode [ 870.813613][T15974] syzkaller1: entered allmulticast mode [ 870.832038][ T5896] m920x_read = error: -19 [ 870.837696][T15960] chnl_net:caif_netlink_parms(): no params data found [ 870.839356][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 870.862682][ T5839] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 870.997730][ T5894] usb 3-1: USB disconnect, device number 55 [ 871.044622][ T5839] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 871.062067][ T5896] m920x_read = error: -19 [ 871.077249][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 871.091083][ T5839] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 871.117081][ T5839] usb 2-1: config 220 interface 0 has no altsetting 0 [ 871.161074][ T5839] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 871.179106][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.191147][ T5839] usb 2-1: Product: syz [ 871.202461][ T5839] usb 2-1: Manufacturer: syz [ 871.207123][ T5839] usb 2-1: SerialNumber: syz [ 871.272468][ T5896] m920x_read = error: -19 [ 871.285696][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 871.453753][ T5839] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 871.470032][ T5839] usb 2-1: No valid video chain found. [ 871.482410][ T5896] m920x_read = error: -19 [ 871.492359][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 871.503781][ T5839] usb 2-1: USB disconnect, device number 78 [ 871.629397][T15960] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.649121][T15960] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.667243][ T5952] m920x_read = error: -19 [ 871.679114][T15960] bridge_slave_0: entered allmulticast mode [ 871.685471][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 871.701794][T15960] bridge_slave_0: entered promiscuous mode [ 871.750466][ T1006] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode [ 871.847914][T15960] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.862701][ T5952] m920x_read = error: -19 [ 871.879616][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 871.896229][T15960] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.912174][T15960] bridge_slave_1: entered allmulticast mode [ 871.923008][T15960] bridge_slave_1: entered promiscuous mode [ 872.072016][ T5896] m920x_read = error: -19 [ 872.076449][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 872.177670][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 872.217796][ T1006] hsr_slave_0: left promiscuous mode [ 872.226851][ T1006] hsr_slave_1: left promiscuous mode [ 872.244239][ T1006] veth1_macvtap: left promiscuous mode [ 872.250452][ T1006] veth0_macvtap: left promiscuous mode [ 872.282194][ T5896] m920x_read = error: -19 [ 872.286648][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 872.431794][ T1006] [ 872.434194][ T1006] ====================================================== [ 872.441244][ T1006] WARNING: possible circular locking dependency detected [ 872.448297][ T1006] 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 Not tainted [ 872.455511][ T1006] ------------------------------------------------------ [ 872.462548][ T1006] kworker/u8:5/1006 is trying to acquire lock: [ 872.468986][ T1006] ffff88805e3d4e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_vlan_rx_kill_vid+0x36/0xe0 [ 872.479144][ T1006] [ 872.479144][ T1006] but task is already holding lock: [ 872.482019][ T5896] m920x_read = error: -19 [ 872.486515][ T1006] ffff88805e2a8d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 872.491030][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 872.502610][ T1006] [ 872.502610][ T1006] which lock already depends on the new lock. [ 872.502610][ T1006] [ 872.502621][ T1006] [ 872.502621][ T1006] the existing dependency chain (in reverse order) is: [ 872.502629][ T1006] [ 872.502629][ T1006] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 872.502667][ T1006] lock_acquire+0x116/0x2f0 [ 872.502688][ T1006] __mutex_lock+0x1a5/0x10c0 [ 872.502710][ T1006] dev_set_mtu+0x11c/0x270 [ 872.553743][ T1006] team_add_slave+0x83b/0x28b0 [ 872.559068][ T1006] do_set_master+0x579/0x730 [ 872.564229][ T1006] do_setlink+0x111d/0x43a0 [ 872.569283][ T1006] rtnl_newlink+0x17e2/0x1fe0 [ 872.574497][ T1006] rtnetlink_rcv_msg+0x80f/0xd70 [ 872.580053][ T1006] netlink_rcv_skb+0x208/0x480 [ 872.585609][ T1006] netlink_unicast+0x7f8/0x9a0 [ 872.590897][ T1006] netlink_sendmsg+0x8c3/0xcd0 [ 872.596193][ T1006] __sock_sendmsg+0x221/0x270 [ 872.601396][ T1006] ____sys_sendmsg+0x523/0x860 [ 872.606684][ T1006] __sys_sendmsg+0x271/0x360 [ 872.611803][ T1006] do_syscall_64+0xf3/0x230 [ 872.616934][ T1006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.623351][ T1006] [ 872.623351][ T1006] -> #0 (team->team_lock_key#3){+.+.}-{4:4}: [ 872.631538][ T1006] validate_chain+0xa69/0x24e0 [ 872.636830][ T1006] __lock_acquire+0xad5/0xd80 [ 872.642031][ T1006] lock_acquire+0x116/0x2f0 [ 872.647058][ T1006] __mutex_lock+0x1a5/0x10c0 [ 872.652290][ T1006] team_vlan_rx_kill_vid+0x36/0xe0 [ 872.658104][ T1006] vlan_vid_del+0x483/0x770 [ 872.663137][ T1006] vlan_device_event+0x23c/0x1e00 [ 872.668685][ T1006] notifier_call_chain+0x1a5/0x3f0 [ 872.674412][ T1006] dev_close_many+0x33e/0x4c0 [ 872.679639][ T1006] unregister_netdevice_many_notify+0x628/0x2510 [ 872.686502][ T1006] default_device_exit_batch+0x7ff/0x880 [ 872.692667][ T1006] cleanup_net+0x8af/0xd60 [ 872.697617][ T1006] process_scheduled_works+0xac3/0x18e0 [ 872.703689][ T1006] worker_thread+0x870/0xd50 [ 872.708804][ T1006] kthread+0x7b7/0x940 [ 872.713401][ T1006] ret_from_fork+0x4b/0x80 [ 872.718343][ T1006] ret_from_fork_asm+0x1a/0x30 [ 872.723627][ T1006] [ 872.723627][ T1006] other info that might help us debug this: [ 872.723627][ T1006] [ 872.733854][ T1006] Possible unsafe locking scenario: [ 872.733854][ T1006] [ 872.741400][ T1006] CPU0 CPU1 [ 872.746850][ T1006] ---- ---- [ 872.752212][ T1006] lock(&dev_instance_lock_key#3); [ 872.757522][ T1006] lock(team->team_lock_key#3); [ 872.765000][ T1006] lock(&dev_instance_lock_key#3); [ 872.772729][ T1006] lock(team->team_lock_key#3); [ 872.777684][ T1006] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 872.777684][ T1006] *** DEADLOCK *** [ 872.777684][ T1006] [ 872.785915][ T1006] 5 locks held by kworker/u8:5/1006: [ 872.791288][ T1006] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 872.802270][ T1006] #1: ffffc900039dfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 872.812894][ T1006] #2: ffffffff900f0890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 872.822306][ T1006] #3: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 872.832416][ T1006] #4: ffff88805e2a8d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 872.844443][ T1006] [ 872.844443][ T1006] stack backtrace: [ 872.850425][ T1006] CPU: 1 UID: 0 PID: 1006 Comm: kworker/u8:5 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 872.850446][ T1006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 872.850458][ T1006] Workqueue: netns cleanup_net [ 872.850481][ T1006] Call Trace: [ 872.850488][ T1006] [ 872.850495][ T1006] dump_stack_lvl+0x241/0x360 [ 872.850519][ T1006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 872.850539][ T1006] ? __pfx__printk+0x10/0x10 [ 872.850559][ T1006] ? print_lock+0x171/0x1a0 [ 872.850578][ T1006] print_circular_bug+0x2e1/0x300 [ 872.850599][ T1006] check_noncircular+0x142/0x160 [ 872.850619][ T1006] validate_chain+0xa69/0x24e0 [ 872.850645][ T1006] __lock_acquire+0xad5/0xd80 [ 872.850663][ T1006] lock_acquire+0x116/0x2f0 [ 872.850677][ T1006] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 872.850696][ T1006] __mutex_lock+0x1a5/0x10c0 [ 872.850714][ T1006] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 872.850730][ T1006] ? __cancel_work+0x24c/0x390 [ 872.850749][ T1006] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 872.850762][ T1006] ? __cancel_work+0x2f0/0x390 [ 872.850781][ T1006] ? __pfx___mutex_lock+0x10/0x10 [ 872.850798][ T1006] ? __pfx___cancel_work+0x10/0x10 [ 872.850818][ T1006] ? do_raw_spin_unlock+0x13c/0x8b0 [ 872.850841][ T1006] team_vlan_rx_kill_vid+0x36/0xe0 [ 872.850857][ T1006] vlan_vid_del+0x483/0x770 [ 872.850880][ T1006] vlan_device_event+0x23c/0x1e00 [ 872.850896][ T1006] ? br_device_event+0x28f/0xae0 [ 872.850915][ T1006] ? __pfx_phonet_device_notify+0x10/0x10 [ 872.850930][ T1006] ? __pfx_vlan_device_event+0x10/0x10 [ 872.850944][ T1006] ? __pfx_br_device_event+0x10/0x10 [ 872.850961][ T1006] ? raw_notifier+0x9d/0x740 [ 872.850980][ T1006] ? isotp_notifier+0xa4/0x6b0 [ 872.850994][ T1006] ? cgw_notifier+0xd8/0x3b0 [ 872.851007][ T1006] ? packet_notifier+0x76/0xa30 [ 872.851027][ T1006] notifier_call_chain+0x1a5/0x3f0 [ 872.851047][ T1006] dev_close_many+0x33e/0x4c0 [ 872.851068][ T1006] ? __pfx_dev_close_many+0x10/0x10 [ 872.851091][ T1006] unregister_netdevice_many_notify+0x628/0x2510 [ 872.851111][ T1006] ? lockdep_hardirqs_on+0x9d/0x150 [ 872.851128][ T1006] ? __local_bh_enable_ip+0x168/0x200 [ 872.851143][ T1006] ? batadv_tt_local_remove+0x119/0x230 [ 872.851158][ T1006] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 872.851172][ T1006] ? batadv_tt_local_remove+0x119/0x230 [ 872.851187][ T1006] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 872.851208][ T1006] ? unregister_netdevice_queue+0x2c4/0x400 [ 872.851228][ T1006] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 872.851249][ T1006] default_device_exit_batch+0x7ff/0x880 [ 872.851280][ T1006] ? __pfx_default_device_exit_batch+0x10/0x10 [ 872.851302][ T1006] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 872.851322][ T1006] ? cfg802154_pernet_exit+0xc3/0xe0 [ 872.851336][ T1006] ? __pfx_default_device_exit_batch+0x10/0x10 [ 872.851357][ T1006] cleanup_net+0x8af/0xd60 [ 872.851380][ T1006] ? __pfx_cleanup_net+0x10/0x10 [ 872.851404][ T1006] ? process_scheduled_works+0x9cb/0x18e0 [ 872.851421][ T1006] process_scheduled_works+0xac3/0x18e0 [ 872.851445][ T1006] ? __pfx_process_scheduled_works+0x10/0x10 [ 872.851464][ T1006] ? assign_work+0x367/0x3d0 [ 872.851481][ T1006] worker_thread+0x870/0xd50 [ 872.851502][ T1006] ? __kthread_parkme+0x1a8/0x200 [ 872.851521][ T1006] ? __pfx_worker_thread+0x10/0x10 [ 872.851537][ T1006] kthread+0x7b7/0x940 [ 872.851557][ T1006] ? __pfx_worker_thread+0x10/0x10 [ 872.851574][ T1006] ? __pfx_kthread+0x10/0x10 [ 872.851593][ T1006] ? __pfx_kthread+0x10/0x10 [ 872.851612][ T1006] ? __pfx_kthread+0x10/0x10 [ 872.851630][ T1006] ? __pfx_kthread+0x10/0x10 [ 872.851649][ T1006] ? _raw_spin_unlock_irq+0x23/0x50 [ 872.851664][ T1006] ? lockdep_hardirqs_on+0x9d/0x150 [ 872.851680][ T1006] ? __pfx_kthread+0x10/0x10 [ 872.851699][ T1006] ret_from_fork+0x4b/0x80 [ 872.851715][ T1006] ? __pfx_kthread+0x10/0x10 [ 872.851734][ T1006] ret_from_fork_asm+0x1a/0x30 [ 872.851752][ T1006] [ 872.853037][ T5896] m920x_read = error: -19 [ 872.904815][ T5848] Bluetooth: hci3: command tx timeout [ 872.904997][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 872.949535][ T5828] syz-executor (5828) used greatest stack depth: 18520 bytes left [ 873.112950][ T5952] m920x_read = error: -19 [ 873.112977][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 873.213953][ T5839] usb 1-1: USB disconnect, device number 49 [ 873.283848][ T5839] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 873.398486][ T5952] m920x_read = error: -19 [ 873.402993][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 873.574403][ T5952] m920x_read = error: -19 [ 873.578812][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 873.744921][ T5952] m920x_read = error: -19 [ 873.749751][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 873.913720][ T5952] m920x_read = error: -19 [ 873.918202][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 873.968813][T15960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.133383][ T5894] m920x_read = error: -19 [ 874.137822][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 874.316067][ T5952] m920x_read = error: -19 [ 874.320482][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 874.512391][ T5952] m920x_read = error: -19 [ 874.516825][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 874.692199][ T5896] m920x_read = error: -19 [ 874.696614][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 874.862015][ T5894] m920x_read = error: -19 [ 874.866470][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 875.052185][ T5894] m920x_read = error: -19 [ 875.056775][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 875.221954][ T5952] m920x_read = error: -19 [ 875.226392][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 875.392127][ T5894] m920x_read = error: -19 [ 875.396702][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 875.562115][ T5894] m920x_read = error: -19 [ 875.566838][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 875.732245][ T5894] m920x_read = error: -19 [ 875.737642][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 875.902152][ T5894] m920x_read = error: -19 [ 875.906830][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 876.081989][ T5894] m920x_read = error: -19 [ 876.086391][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 876.263476][ T5894] m920x_read = error: -19 [ 876.267909][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 876.442828][ T5894] m920x_read = error: -19 [ 876.447189][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 876.611987][ T5894] m920x_read = error: -19 [ 876.616374][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 876.791964][ T5894] m920x_read = error: -19 [ 876.796329][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 876.962003][ T5894] m920x_read = error: -19 [ 876.966397][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 877.132128][ T5894] m920x_read = error: -19 [ 877.137050][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 877.302152][ T5894] m920x_read = error: -19 [ 877.306539][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 877.481975][ T5894] m920x_read = error: -19 [ 877.486358][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 877.662910][ T5894] m920x_read = error: -19 [ 877.667342][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 877.842001][ T5952] m920x_read = error: -19 [ 877.846393][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 878.012258][ T5952] m920x_read = error: -19 [ 878.016658][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 878.192474][ T5952] m920x_read = error: -19 [ 878.196859][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 878.365466][ T5952] m920x_read = error: -19 [ 878.371208][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 878.532350][ T5952] m920x_read = error: -19 [ 878.536710][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 878.701991][ T5952] m920x_read = error: -19 [ 878.706415][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 878.872192][ T5952] m920x_read = error: -19 [ 878.876562][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 879.042936][ T5952] m920x_read = error: -19 [ 879.047742][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 879.222387][ T5952] m920x_read = error: -19 [ 879.226844][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 879.402014][ T5952] m920x_read = error: -19 [ 879.406413][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 879.572142][ T5952] m920x_read = error: -19 [ 879.576529][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 879.752444][ T5952] m920x_read = error: -19 [ 879.756836][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 879.922359][ T5952] m920x_read = error: -19 [ 879.926729][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 880.093778][ T5952] m920x_read = error: -19 [ 880.098140][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 880.262217][ T5952] m920x_read = error: -19 [ 880.266584][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 880.432429][ T5952] m920x_read = error: -19 [ 880.436818][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 880.602343][ T5952] m920x_read = error: -19 [ 880.606832][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 880.771951][ T5952] m920x_read = error: -19 [ 880.776361][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 880.942733][ T5952] m920x_read = error: -19 [ 880.947156][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 881.111958][ T5952] m920x_read = error: -19 [ 881.116340][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 881.282809][ T5952] m920x_read = error: -19 [ 881.287222][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 881.452503][ T5952] m920x_read = error: -19 [ 881.457040][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 881.632367][ T5952] m920x_read = error: -19 [ 881.636766][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 881.802076][ T5952] m920x_read = error: -19 [ 881.806467][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 881.972983][ T5952] m920x_read = error: -19 [ 881.977356][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 882.142488][ T5952] m920x_read = error: -19 [ 882.146879][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 882.312549][ T5952] m920x_read = error: -19 [ 882.317056][ T5952] dvb-usb: error -19 while querying for an remote control event.