last executing test programs: 4.381851228s ago: executing program 0 (id=3463): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c010000100001000000000000000000e00000020000000000000000000000000a0101000000000100000000000000004e240000000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000001d0033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000a00000000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000002fbd70002abd700028bd700026bd7000030000002800170003"], 0x17c}}, 0x0) 4.178514003s ago: executing program 0 (id=3464): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b61e3ffd016a91052300102030109021b000100000000090400260a0e750014c3733ee20001ff657cfe8c3ee3b7f55b04ef31fb9205e638daa77712ae99dbca", @ANYRES16=0x0], 0x0) 3.9248938s ago: executing program 2 (id=3465): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000041a9e50b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}}) 3.695143804s ago: executing program 2 (id=3467): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000000008000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000000000000000000000000000000ffff7f0000010000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000001ffffffff3c00000002000000e00000020000000000000000000000000000000001000000000000000000000000000000fe800000000000000000000000000000000000003300000002"], 0x23c}}, 0x20000000) 3.534441904s ago: executing program 2 (id=3469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f00000002c0)='./file0\x00', 0x80040, 0x0) renameat2(0xffffffffffffff9c, 0x0, r4, 0x0, 0x20) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf2500"], 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x20000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70002e5d7b1b750dd09093ec30fbdbdf2501000000000000000b000000000c001473797a30000000006d9332dd46b4d632e7dc01f774968031ef0e72cf9bded1d3813f2db8595132fd22399437adec350f500938294e610cb28721ffcb8f53490c7f617aaee014cef1d55dddf112c7c1a590efa0ac8fb536a98a2e31a70befa5d8b509fb35bff9f3a58cb41770ccf81cfb6c7f637a141ca52ac066a206116db1a864d0b7b343959ccfdb9e54db186c9ededae12815a03206930d332f68426d1025a50728737951ca93f0e8daadee528b278bf892e6b74dc785"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) open$dir(&(0x7f00000002c0)='./file0\x00', 0x80040, 0x0) (async) renameat2(0xffffffffffffff9c, 0x0, r4, 0x0, 0x20) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf2500"], 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x20000) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70002e5d7b1b750dd09093ec30fbdbdf2501000000000000000b000000000c001473797a30000000006d9332dd46b4d632e7dc01f774968031ef0e72cf9bded1d3813f2db8595132fd22399437adec350f500938294e610cb28721ffcb8f53490c7f617aaee014cef1d55dddf112c7c1a590efa0ac8fb536a98a2e31a70befa5d8b509fb35bff9f3a58cb41770ccf81cfb6c7f637a141ca52ac066a206116db1a864d0b7b343959ccfdb9e54db186c9ededae12815a03206930d332f68426d1025a50728737951ca93f0e8daadee528b278bf892e6b74dc785"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4044000) (async) 3.459951927s ago: executing program 2 (id=3470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000e000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000050000000060a010400000000000000000100000208000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000000c080002400000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 3.35053572s ago: executing program 2 (id=3473): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x4000) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0x4, 0xffffee30]) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000500)=@ethtool_rxnfc={0x2f, 0x8, 0x9, {0x12, @ether_spec, {0x0, @broadcast, 0x22, 0x740, [0x9, 0x800]}, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x19}, 0x2, 0x81}, {0x0, @remote, 0x12d7, 0x2, [0x1, 0x4]}, 0x5, 0xfffffffd}, 0x6, [0x68e, 0x5, 0x0, 0x6, 0xff, 0x2]}}) (async) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="002228000000280d839f668d1accf5e550912aefb930f0187ff0478fa22a60a54607b71ea9e43d359c479c37f545ed0d769e0ba05516d1baa98536feb959ad2331cc2dd53acd4eac2dd812ae73c335700aa1fdcddd61420274a8ff7ab5552adc25bb24482b6b9fc3cb3cbeea782793b2f41ac01b6a5249b96e2d99670d7798469b29a05301b7aecdc292"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xefb9e000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x2000000db002) (async) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000140)=""/199, &(0x7f0000000240)=0xc7) 2.119161623s ago: executing program 1 (id=3479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000004000000000000000000000000000000000000000000002001000000000000000000000000000100000008002000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500fc000000000000000000000000000001000000003c0000000000000020010000000000000000000000000002020000000400"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="bc000000210001000400000000000000fc020000000000000000000000000001ff02000000000000000000000000000100000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc000000000000000000000000fffd017f000001000000000000000000000000fc020000000000000000000000000001e00000010000000000000000000000003c040000000000000a"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.074444733s ago: executing program 3 (id=3480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000000008000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000000000000000000000000000000ffff7f0000010000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000001ffffffff3c00000002000000e00000020000000000000000000000000000000001000000000000000000000000000000fe800000000000000000000000000000000000003300000002"], 0x23c}}, 0x20000000) 2.054735422s ago: executing program 1 (id=3481): ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="cf09bc2646b22939653e48a7767072c88004a11fd52b57e05d27b8a49577fa1f1be7864312aba59ff5c4cc8c2a5a67ba3214d36d36e5376dbacae62089a7db00924ce0cbc15663e6a2aaf191ac85826a8605270ed72eecb8afbb17f0f5653843e0292c2cafef95fad9018e47393e2951204eeb2ac16d44f160deeb835518f7634291c7205ac16dfee61ce9e61538e2d555e74cbdec75") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x40500, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) r5 = syz_open_dev$radio(&(0x7f0000000340), 0x0, 0x2) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000540)={0xffffffff, 0x30, [0x100000001, 0x7, 0x6, 0x50], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x4, 0x7, 0x101, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)='\x00\x00\x00\x00\x00', 0x5) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r8, 0x84, 0x2, 0x0, &(0x7f0000000000)) r9 = accept4(r8, 0x0, 0x0, 0x40000) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000001680)=""/34, 0x22}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000001740)=""/73, 0x49}, {&(0x7f00000017c0)=""/185, 0xb9}], 0x6}, 0x0) r10 = fsopen(&(0x7f00000000c0)='pvfs2\x00', 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) 1.893678891s ago: executing program 3 (id=3482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0102000000001c000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.685077848s ago: executing program 1 (id=3483): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x400, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="bc000000210001000400000000000000fc020000000000000000000000000001ff02000000000000000000000000000100000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc0000000000000000001000000000017f000001000000000000000000000000fc020000000000000000000000000001e00000010000000000000000000000003c040000000000000a"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.60491116s ago: executing program 3 (id=3484): socket$kcm(0xa, 0x2, 0x0) r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000004) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) syz_open_dev$dri(&(0x7f00000001c0), 0x8e, 0x44000) keyctl$search(0xa, r3, &(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x20010, r2, 0xac0b0000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="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", 0xff0) truncate(&(0x7f0000000340)='./file0\x00', 0x6) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000001480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c757365725f69643d174d00ca6f3888ff289a67e74b66cd17a17751726ab5d4b532c587946941493857d0d9c52ebc8b05dbaf18b78a90568ba4592d8fe76db95eee0163ccff2e8b74badf7064e5711fd86a990c8f345e9c725393f1480e7f4a2f4390e7000dc3a74853a002cc5bfca37a", @ANYRES8=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000840)={0xf0f040, 0x9}) sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setitimer(0x1, &(0x7f0000000000)={{}, {0x20000000000000}}, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x7) landlock_restrict_self(r5, 0xf) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x2}, 0x18, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) 1.419308222s ago: executing program 1 (id=3485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300017000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000050000000060a010400000000000000000100000208000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000000c080002400000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 1.219846581s ago: executing program 3 (id=3486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = getuid() lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000980)={0xa0, 0x19, 0x2, {0x2800, {0x20, 0x0, 0x5}, 0x50, r2, r3, 0x0, 0x4, 0x4, 0x0, 0x7, 0x2, 0x6, 0xffffffffffffffe1, 0x7, 0x1, 0x10, 0xe, 0x6, 0x4, 0x800}}, 0xa0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000840)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000a40)='cpuset.effective_mems\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0x41a0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x4, @mcast1, 0x400}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r8, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@mcast2, @loopback, 0x14, 0x11}}) r9 = socket(0x2, 0x80805, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "579f"}, 0xd) r11 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$KDFONTOP_SET_DEF(r10, 0x4b72, &(0x7f0000000800)={0x2, 0x0, 0x10, 0x1a, 0x62, &(0x7f0000000400)="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"}) ioctl$FE_READ_SIGNAL_STRENGTH(r7, 0x80026f47, &(0x7f0000000380)) sendfile(r11, r10, &(0x7f0000000040)=0x4, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000001100)={r12, 0xb, 0x20}, 0xc) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/4100, 0x1004}, {&(0x7f0000002840)=""/4077, 0xfed}, {&(0x7f0000003880)=""/4172, 0x104c}, {&(0x7f0000000300)=""/128, 0x80}, {&(0x7f0000000880)=""/88, 0x58}], 0x5}, 0x10002) 1.115804484s ago: executing program 0 (id=3487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000009e0b000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003802c435d401c0000800400018024000b80200001800e000100636f6e6e6c696d69740000000c0002"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 914.889826ms ago: executing program 1 (id=3488): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}}) 852.018929ms ago: executing program 3 (id=3489): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c"], 0xfc}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000ffffab5600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}}) 777.354661ms ago: executing program 3 (id=3490): r0 = epoll_create(0x4) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000300)={0xc000003, 0xf, &(0x7f0000000080)=[0x10, 0x1000004, 0x5002, 0xffff32eb, 0x8, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x5, 0x0, 0x1, 0x6, 0xce, 0x80000001], 0x0, 0x4000003}) (async) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000003c0)={0x20, 0x10, 0x9, "a9c6ac8e2ad045564a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x0, 0xe6, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x3, 0x1, 0xf, 0x40, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0xa, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x7, 0x44, 0x6}, [@feature_unit={0x7, 0x24, 0x6, 0x4, 0x6, [0xa]}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0xbb}, @sample_rate={0xf, 0x24, 0xd, 0x5, 0x3, 0x6, [0x2, 0x2, 0x1, 0x3]}, @multiply_unit={0x7, 0x24, 0xc, 0xf7, 0x4, 0xff, 0xd6}, @processing_unit={0x11, 0x24, 0x8, 0x6, 0x6, [0x0, 0x2, 0x1, 0x2, 0x0, 0x1]}, @extension_unit={0x8, 0x24, 0x9, 0x4, 0x6, 0x2, '1'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0xf7, 0x40, "cf38f6ccb5"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8b, 0x40, 0x2e, "d77835853b912f7a75"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xe, 0x6, 0x22, {0x8, 0x25, 0x1, 0x81, 0x3, 0x6, 0xfee}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x7, 0x8, "5a1b49c5278706df"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x71, 0x5, 0x46, {0x8, 0x25, 0x1, 0x80, 0x33, 0x2, 0x9}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0xd6cb837e89df0a8, 0x1, 0xee, 0x9, 0x8, 0x1}, 0x30, &(0x7f0000000140)={0x5, 0xf, 0x30, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x3, 0x5, 0x5524}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "818e696afd3a2d6db14327f364a1c679"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0x96, 0x2a}, @ptm_cap={0x3}]}, 0x8, [{0x61, &(0x7f0000000180)=@string={0x61, 0x3, "732d91913f903013b3a5efa150edb5dbf25c818b08d7588dbfe08019bc6fd1b81816fc13413ea20ce5d1b54150306c59ea5aa745b5f7f5c9790b9b27990fea33abee9d12c231aeac4b54e92b6c36201b17f712204a8ce97d532b4b1414d0c9"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3801}}, {0xd2, &(0x7f00000002c0)=@string={0xd2, 0x3, "357dfde93b5575ff99760f23f4a082b15ad6fb0c2861d12d1108e5d2d18590c15c931937a1928c6c9e74552dc8ec1b1286b7bf28ff64af3cf89b92fc87c4b9ff9adcc8837eec408b54217c41795c7cc06356f77b63eb995af3f58466ecfd835da0bcf90b7f1281ccd693a46ff82c7881f43e4295a9a468e0be1276942ee3edba53c4b6375e88c4290535e15f3474dcda682539e58f28442a50ba275f20a2dbc9e6c4a24cf06e81d575a7647ef8b0c63cf427c5b5ac3645e52f46b7a0ccc3ad4a1aa20e3d26071c6b8d067eadd47fbeea"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x13, &(0x7f0000000600)=@string={0x13, 0x3, "9b55dab24455ed075a2373445a1275a14e"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x419}}]}) 687.255737ms ago: executing program 1 (id=3491): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r2, r4, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000480)={{0xffffffffffffffff, 0x0, 0xb8d16d5b127be288, &(0x7f00000000c0)={@align=0x6c, {0x0, 0xdc36, 0x1, 0x6}}, 0x9, &(0x7f00000001c0)={@_ha_fsid}, 0x0}, 0x0, 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x14f8}, 0x90) connect$inet(r7, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x17f, 0x20203143, 0x2, [0x2], [0x800], [0x0, 0x0, 0x0, 0x1000000], [0x0, 0x0, 0x0, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008811) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd0fab7778df251100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080015"], 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x4044842) 642.038002ms ago: executing program 0 (id=3492): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x0, 0x0, 0x98, &(0x7f0000000080)={0x8000000, 0x1000, 0x10}}) 496.910501ms ago: executing program 0 (id=3493): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000000008000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000000000000000000000000000000ffff7f0000010000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000001ffffffff3c00000002000000e00000020000000000000000000000000000000001000000000000000000000000000000fe800000000000000000000000000000000000003300000002"], 0x23c}}, 0x20000000) 362.755158ms ago: executing program 0 (id=3494): syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb02200002020509050412"], 0x0) syz_usb_connect$uac1(0x4, 0xd6, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x2, 0x30, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x33}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x4, 0x6c, 0x3, 0x1, 0x3}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x5, "4abeb302"}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0x9, "8cca657d76d6"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x403, 0x2, 0x6, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0x7, 0x6, 0x75}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x200, 0x19, 0x3, "143ef0"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x9, 0x7, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x40, 0x2, 0x3, 0x1, "b968", 'H'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x9f0, 0x0, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x1, 0x45, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x1, 0x3, {0x7, 0x25, 0x1, 0xc, 0x4d, 0x1}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x27, 0x0, 0x9, 0xff, 0x2}, 0x21, &(0x7f0000000140)={0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xe6, 0xfb, 0xad1}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x0, 0x101}, @wireless={0xb, 0x10, 0x1, 0xa, 0x0, 0x8, 0x3, 0x6, 0x3}]}, 0x4, [{0x3b, &(0x7f0000000180)=@string={0x3b, 0x3, "29e447f187098a1c24e9d6bbab1cdaa4512faf191c721aac5d71585f473a636ac468eb9c6cc23e61d56b0ff105875af3523fc46817f93e65f6"}}, {0x8f, &(0x7f0000000200)=@string={0x8f, 0x3, "11a6b91219da869acbd96d4dfe606f0b49507c6a08b99d57f08bda7fafbbff52a3d2ffd5f35baa31418308ef7ae2e03377532fd000ba8a6dc762005723713216197d228437cc36fba0a9fffa8a231481e170343951419e8c0a0a2cf804bae86dfcc83f052f9c627c6289ab29fd55c1cd1de30a539117048a1e0f9b5afeabbad19d606fe4ae87754b594581a4d8"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0xa9, &(0x7f0000000300)=@string={0xa9, 0x3, "2909acaee63cca7a188f17bc14df9ed0b3f44a74318ec6fdcfc4508e113540d7d0a4d7776689a7d401f9e55515cc8313c32515c383cfd9851afeb0f408a9beb373f3a9a7ee3b1abd016852a5fe6da2e5ec57f601c245322d51b1a45966cfb674b96c76145c76f72c2704526449d6b012b3bc3619c23c0d13a0a587ef2bb7edddb513ba620f8c73446b121086dce7f48c10588bed5df78fa2770cac7e4ce219b810433b2a724570"}}]}) 0s ago: executing program 2 (id=3495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000020000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) kernel console output (not intermixed with test programs): USB device number 35 using dummy_hcd [ 614.937148][T14096] usb 3-1: device descriptor read/8, error -71 [ 614.946991][ T5923] m920x_read = error: -19 [ 614.947016][ T5923] dvb-usb: error while querying for an remote control event. [ 615.021910][T14708] loop5: detected capacity change from 0 to 6 [ 615.023199][T14708] Dev loop5: unable to read RDB block 6 [ 615.023228][T14708] loop5: unable to read partition table [ 615.023364][T14708] loop5: partition table beyond EOD, truncated [ 615.023391][T14708] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 615.055448][ T5923] m920x_read = error: -19 [ 615.055476][ T5923] dvb-usb: error while querying for an remote control event. [ 615.165486][ T5712] m920x_read = error: -19 [ 615.165518][ T5712] dvb-usb: error while querying for an remote control event. [ 615.175345][ T5922] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 615.197562][T14096] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 615.218227][T14096] usb 3-1: device descriptor read/8, error -71 [ 615.222236][T14712] loop5: detected capacity change from 0 to 6 [ 615.225011][T14712] Dev loop5: unable to read RDB block 6 [ 615.225044][T14712] loop5: AHDI p1 p2 [ 615.225065][T14712] loop5: partition table partially beyond EOD, truncated [ 615.232023][T14712] loop5: p1 start 1702059890 is beyond EOD, truncated [ 615.275643][ T5720] m920x_read = error: -19 [ 615.275675][ T5720] dvb-usb: error while querying for an remote control event. [ 615.335806][T14096] usb usb3-port1: unable to enumerate USB device [ 615.349424][ T5922] usb 1-1: not running at top speed; connect to a high speed hub [ 615.351319][ T5922] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 56, changing to 4 [ 615.351374][ T5922] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 615.353932][ T5922] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 615.353963][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.353985][ T5922] usb 1-1: Product: syz [ 615.354000][ T5922] usb 1-1: Manufacturer: syz [ 615.354016][ T5922] usb 1-1: SerialNumber: syz [ 615.385752][ T5720] m920x_read = error: -19 [ 615.385780][ T5720] dvb-usb: error while querying for an remote control event. [ 615.458722][T14720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3170'. [ 615.498818][ T5923] m920x_read = error: -19 [ 615.498848][ T5923] dvb-usb: error while querying for an remote control event. [ 615.604329][ T5922] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 615.605589][ T5922] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 615.609954][ T5923] m920x_read = error: -19 [ 615.609981][ T5923] dvb-usb: error while querying for an remote control event. [ 615.616483][ T5922] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 615.633768][ T5922] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 615.635392][ T5922] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 615.638629][ T5922] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 615.677987][ T5922] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 615.680532][ T5922] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 615.721150][ T5923] m920x_read = error: -19 [ 615.721180][ T5923] dvb-usb: error while querying for an remote control event. [ 615.828113][ T5923] m920x_read = error: -19 [ 615.828146][ T5923] dvb-usb: error while querying for an remote control event. [ 615.867554][ T5922] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 615.875663][ T5922] usb 1-1: USB disconnect, device number 4 [ 615.920633][ T6320] udevd[6320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 615.935565][ T5923] m920x_read = error: -19 [ 615.935596][ T5923] dvb-usb: error while querying for an remote control event. [ 616.045588][ T5923] m920x_read = error: -19 [ 616.045619][ T5923] dvb-usb: error while querying for an remote control event. [ 616.091079][T14729] FAULT_INJECTION: forcing a failure. [ 616.091079][T14729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.091105][T14729] CPU: 1 UID: 0 PID: 14729 Comm: syz.1.3172 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 616.091125][T14729] Tainted: [L]=SOFTLOCKUP [ 616.091130][T14729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 616.091139][T14729] Call Trace: [ 616.091145][T14729] [ 616.091152][T14729] dump_stack_lvl+0xe8/0x150 [ 616.091170][T14729] should_fail_ex+0x46b/0x600 [ 616.091197][T14729] _copy_to_user+0x31/0xb0 [ 616.091214][T14729] simple_read_from_buffer+0xe1/0x170 [ 616.091232][T14729] proc_fail_nth_read+0x1be/0x230 [ 616.091250][T14729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 616.091267][T14729] ? rw_verify_area+0x2ac/0x4e0 [ 616.091284][T14729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 616.091299][T14729] vfs_read+0x212/0xa80 [ 616.091322][T14729] ? __pfx_vfs_read+0x10/0x10 [ 616.091340][T14729] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 616.091360][T14729] ? lockdep_hardirqs_on+0x7a/0x110 [ 616.091379][T14729] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 616.091397][T14729] ? mutex_lock_nested+0x152/0x1d0 [ 616.091411][T14729] ? fdget_pos+0x252/0x320 [ 616.091431][T14729] ksys_read+0x156/0x270 [ 616.091456][T14729] ? __pfx_ksys_read+0x10/0x10 [ 616.091492][T14729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.091517][T14729] do_syscall_64+0x174/0x580 [ 616.091547][T14729] ? trace_irq_disable+0x3b/0x140 [ 616.091571][T14729] ? clear_bhb_loop+0x40/0x90 [ 616.091598][T14729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.091619][T14729] RIP: 0033:0x7fba66c0d68e [ 616.091645][T14729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 616.091665][T14729] RSP: 002b:00007fba64ea5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 616.091689][T14729] RAX: ffffffffffffffda RBX: 00007fba64ea66c0 RCX: 00007fba66c0d68e [ 616.091699][T14729] RDX: 000000000000000f RSI: 00007fba64ea60a0 RDI: 0000000000000005 [ 616.091707][T14729] RBP: 00007fba64ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 616.091715][T14729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 616.091724][T14729] R13: 00007fba66ec6038 R14: 00007fba66ec5fa0 R15: 00007ffea6c18668 [ 616.091744][T14729] [ 616.160288][ T5923] m920x_read = error: -19 [ 616.160317][ T5923] dvb-usb: error while querying for an remote control event. [ 616.265831][ T5922] m920x_read = error: -19 [ 616.265925][ T5922] dvb-usb: error while querying for an remote control event. [ 616.384108][ T5923] m920x_read = error: -19 [ 616.384128][ T5923] dvb-usb: error while querying for an remote control event. [ 616.485561][ T5720] m920x_read = error: -19 [ 616.485589][ T5720] dvb-usb: error while querying for an remote control event. [ 616.595484][ T5720] m920x_read = error: -19 [ 616.595524][ T5720] dvb-usb: error while querying for an remote control event. [ 616.705851][ T5922] m920x_read = error: -19 [ 616.705881][ T5922] dvb-usb: error while querying for an remote control event. [ 616.745436][ T5923] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 616.815551][ T5720] m920x_read = error: -19 [ 616.815584][ T5720] dvb-usb: error while querying for an remote control event. [ 616.897016][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 616.903355][ T5923] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 616.903391][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.903413][ T5923] usb 2-1: Product: syz [ 616.903430][ T5923] usb 2-1: Manufacturer: syz [ 616.903440][ T5923] usb 2-1: SerialNumber: syz [ 616.924180][ T5923] usb 2-1: config 0 descriptor?? [ 616.926260][ T5720] m920x_read = error: -19 [ 616.926287][ T5720] dvb-usb: error while querying for an remote control event. [ 616.953789][ T5923] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 616.981833][T14747] loop5: detected capacity change from 0 to 6 [ 616.986040][T14747] Dev loop5: unable to read RDB block 6 [ 616.986085][T14747] loop5: unable to read partition table [ 616.986434][T14747] loop5: partition table beyond EOD, truncated [ 616.986512][T14747] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 617.035488][ T5720] m920x_read = error: -19 [ 617.035577][ T5720] dvb-usb: error while querying for an remote control event. [ 617.151054][ T5720] m920x_read = error: -19 [ 617.151090][ T5720] dvb-usb: error while querying for an remote control event. [ 617.256263][ T5720] m920x_read = error: -19 [ 617.256690][ T5720] dvb-usb: error while querying for an remote control event. [ 617.365692][ T5720] m920x_read = error: -19 [ 617.365724][ T5720] dvb-usb: error while querying for an remote control event. [ 617.475441][ T5712] m920x_read = error: -19 [ 617.475540][ T5712] dvb-usb: error while querying for an remote control event. [ 617.585970][ T5712] m920x_read = error: -19 [ 617.586000][ T5712] dvb-usb: error while querying for an remote control event. [ 617.607499][T14756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3183'. [ 617.628527][ T5720] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 617.695388][ T5712] m920x_read = error: -19 [ 617.695408][ T5712] dvb-usb: error while querying for an remote control event. [ 617.788850][ T5720] usb 3-1: Using ep0 maxpacket: 16 [ 617.790717][ T5720] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 617.790839][ T5720] usb 3-1: config 0 has no interface number 0 [ 617.790892][ T5720] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 617.790915][ T5720] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 617.807581][ T5712] m920x_read = error: -19 [ 617.807610][ T5712] dvb-usb: error while querying for an remote control event. [ 617.811792][ T5720] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 617.811824][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.811900][ T5720] usb 3-1: Product: syz [ 617.811916][ T5720] usb 3-1: Manufacturer: syz [ 617.811929][ T5720] usb 3-1: SerialNumber: syz [ 617.843213][ T5720] usb 3-1: config 0 descriptor?? [ 617.845432][T14753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 617.845635][T14753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 617.926581][ T5712] m920x_read = error: -19 [ 617.926603][ T5712] dvb-usb: error while querying for an remote control event. [ 618.044590][ T5712] m920x_read = error: -19 [ 618.044766][ T5712] dvb-usb: error while querying for an remote control event. [ 618.050257][T14753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 618.051335][T14753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 618.145554][ T5712] m920x_read = error: -19 [ 618.145588][ T5712] dvb-usb: error while querying for an remote control event. [ 618.255038][ T5720] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 618.255649][ T5712] m920x_read = error: -19 [ 618.255730][ T5712] dvb-usb: error while querying for an remote control event. [ 618.365495][ T5922] m920x_read = error: -19 [ 618.365516][ T5922] dvb-usb: error while querying for an remote control event. [ 618.385318][ T5712] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 618.477820][ T5922] m920x_read = error: -19 [ 618.477839][ T5922] dvb-usb: error while querying for an remote control event. [ 618.485486][ T5923] gspca_sonixj: i2c_w8 err -71 [ 618.540225][ T5712] usb 4-1: unable to get BOS descriptor or descriptor too short [ 618.541684][ T5712] usb 4-1: config 80 has an invalid interface number: 29 but max is 0 [ 618.541803][ T5712] usb 4-1: config 80 has no interface number 0 [ 618.541836][ T5712] usb 4-1: config 80 interface 29 altsetting 9 endpoint 0x7 has invalid maxpacket 1023, setting to 8 [ 618.541854][ T5712] usb 4-1: config 80 interface 29 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt [ 618.541869][ T5712] usb 4-1: config 80 interface 29 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 618.541923][ T5712] usb 4-1: config 80 interface 29 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 0 [ 618.541941][ T5712] usb 4-1: config 80 interface 29 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 618.541956][ T5712] usb 4-1: config 80 interface 29 has no altsetting 0 [ 618.547426][ T5712] usb 4-1: string descriptor 0 read error: -22 [ 618.547802][ T5712] usb 4-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice= c.2a [ 618.548215][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.567790][T14762] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 618.569960][ T5923] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 618.589141][ T5922] m920x_read = error: -19 [ 618.589168][ T5922] dvb-usb: error while querying for an remote control event. [ 618.609475][ T5923] usb 2-1: USB disconnect, device number 39 [ 618.627199][ T5712] em28xx 4-1:80.29: New device @ 1.5 Mbps (eb1a:50a6, interface 29, class 29) [ 618.627262][ T5712] em28xx 4-1:80.29: Device initialization failed. [ 618.627277][ T5712] em28xx 4-1:80.29: Device must be connected to a high-speed USB 2.0 port. [ 618.706631][ T5922] m920x_read = error: -19 [ 618.706667][ T5922] dvb-usb: error while querying for an remote control event. [ 618.816141][ T5712] m920x_read = error: -19 [ 618.816245][ T5712] dvb-usb: error while querying for an remote control event. [ 618.849048][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'. [ 618.927173][ T5923] m920x_read = error: -19 [ 618.927207][ T5923] dvb-usb: error while querying for an remote control event. [ 619.017875][ T9] usb 4-1: USB disconnect, device number 36 [ 619.035388][ T5923] m920x_read = error: -19 [ 619.035408][ T5923] dvb-usb: error while querying for an remote control event. [ 619.145773][ T5923] m920x_read = error: -19 [ 619.145878][ T5923] dvb-usb: error while querying for an remote control event. [ 619.255497][ T5923] m920x_read = error: -19 [ 619.255593][ T5923] dvb-usb: error while querying for an remote control event. [ 619.309395][T14774] loop5: detected capacity change from 0 to 7 [ 619.367216][ T5923] m920x_read = error: -19 [ 619.367247][ T5923] dvb-usb: error while querying for an remote control event. [ 619.455602][T14774] Dev loop5: unable to read RDB block 7 [ 619.455658][T14774] loop5: unable to read partition table [ 619.455863][T14774] loop5: partition table beyond EOD, truncated [ 619.455899][T14774] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 619.475554][ T5923] m920x_read = error: -19 [ 619.475801][ T5923] dvb-usb: error while querying for an remote control event. [ 619.517763][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 619.517793][ C1] buffer_io_error: 9 callbacks suppressed [ 619.517801][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 619.586547][ T5923] m920x_read = error: -19 [ 619.586592][ T5923] dvb-usb: error while querying for an remote control event. [ 619.695481][ T5923] m920x_read = error: -19 [ 619.695511][ T5923] dvb-usb: error while querying for an remote control event. [ 619.806709][ T5923] m920x_read = error: -19 [ 619.806739][ T5923] dvb-usb: error while querying for an remote control event. [ 619.922940][ T5923] m920x_read = error: -19 [ 619.922989][ T5923] dvb-usb: error while querying for an remote control event. [ 620.005018][T14786] loop5: detected capacity change from 0 to 6 [ 620.028796][ T5923] m920x_read = error: -19 [ 620.028830][ T5923] dvb-usb: error while querying for an remote control event. [ 620.029623][T14786] Dev loop5: unable to read RDB block 6 [ 620.029656][T14786] loop5: AHDI p1 p2 [ 620.029679][T14786] loop5: partition table partially beyond EOD, truncated [ 620.030616][T14786] loop5: p1 start 1702059890 is beyond EOD, truncated [ 620.138580][ T5923] m920x_read = error: -19 [ 620.138680][ T5923] dvb-usb: error while querying for an remote control event. [ 620.246532][ T5923] m920x_read = error: -19 [ 620.246553][ T5923] dvb-usb: error while querying for an remote control event. [ 620.338150][T14753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.341398][T14753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.368008][ T5712] m920x_read = error: -19 [ 620.368081][ T5712] dvb-usb: error while querying for an remote control event. [ 620.381901][T14792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.382569][T14792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.483591][ T5923] m920x_read = error: -19 [ 620.483625][ T5923] dvb-usb: error while querying for an remote control event. [ 620.539441][ T5720] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 620.539476][ T5720] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 620.540125][ T5720] asix 3-1:0.34: probe with driver asix failed with error -71 [ 620.585950][ T5922] m920x_read = error: -19 [ 620.585980][ T5922] dvb-usb: error while querying for an remote control event. [ 620.599471][ T5720] usb 3-1: USB disconnect, device number 37 [ 620.695709][ T5922] m920x_read = error: -19 [ 620.695729][ T5922] dvb-usb: error while querying for an remote control event. [ 620.779774][T14800] loop5: detected capacity change from 0 to 6 [ 620.780924][T14800] Dev loop5: unable to read RDB block 6 [ 620.780969][T14800] loop5: unable to read partition table [ 620.781194][T14800] loop5: partition table beyond EOD, truncated [ 620.781217][T14800] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 620.806635][ T5720] m920x_read = error: -19 [ 620.806665][ T5720] dvb-usb: error while querying for an remote control event. [ 620.917033][ T5720] m920x_read = error: -19 [ 620.917054][ T5720] dvb-usb: error while querying for an remote control event. [ 620.920489][T14805] loop5: detected capacity change from 0 to 6 [ 620.921630][T14805] Dev loop5: unable to read RDB block 6 [ 620.921674][T14805] loop5: unable to read partition table [ 620.922014][T14805] loop5: partition table beyond EOD, truncated [ 620.922051][T14805] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 621.026137][ T5720] m920x_read = error: -19 [ 621.026168][ T5720] dvb-usb: error while querying for an remote control event. [ 621.135486][ T5720] m920x_read = error: -19 [ 621.135517][ T5720] dvb-usb: error while querying for an remote control event. [ 621.202716][T14814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3203'. [ 621.245550][ T5720] m920x_read = error: -19 [ 621.245666][ T5720] dvb-usb: error while querying for an remote control event. [ 621.245686][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 621.307477][T14818] loop5: detected capacity change from 0 to 6 [ 621.354457][T14818] Dev loop5: unable to read RDB block 6 [ 621.354495][T14818] loop5: AHDI p1 p2 [ 621.354519][T14818] loop5: partition table partially beyond EOD, truncated [ 621.355439][ T5720] m920x_read = error: -19 [ 621.355464][ T5720] dvb-usb: error while querying for an remote control event. [ 621.386697][T14818] loop5: p1 start 1702059890 is beyond EOD, truncated [ 621.405290][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 621.411257][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 621.428263][ T9] usb 4-1: config 4 has an invalid interface number: 127 but max is 0 [ 621.428295][ T9] usb 4-1: config 4 has no interface number 0 [ 621.428334][ T9] usb 4-1: config 4 interface 127 has no altsetting 0 [ 621.429156][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 621.466564][ T5720] m920x_read = error: -19 [ 621.466596][ T5720] dvb-usb: error while querying for an remote control event. [ 621.486143][ T9] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 621.486179][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.486203][ T9] usb 4-1: Product: syz [ 621.486228][ T9] usb 4-1: SerialNumber: syz [ 621.575444][ T5720] m920x_read = error: -19 [ 621.575476][ T5720] dvb-usb: error while querying for an remote control event. [ 621.682735][T14831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3210'. [ 621.689096][ T5720] m920x_read = error: -19 [ 621.689130][ T5720] dvb-usb: error while querying for an remote control event. [ 621.778735][ T9] usb 4-1: USB disconnect, device number 37 [ 621.795482][ T5922] m920x_read = error: -19 [ 621.795511][ T5922] dvb-usb: error while querying for an remote control event. [ 621.907803][ T5922] m920x_read = error: -19 [ 621.907832][ T5922] dvb-usb: error while querying for an remote control event. [ 622.015543][ T5922] m920x_read = error: -19 [ 622.015577][ T5922] dvb-usb: error while querying for an remote control event. [ 622.125462][ T5922] m920x_read = error: -19 [ 622.125495][ T5922] dvb-usb: error while querying for an remote control event. [ 622.235524][ T5922] m920x_read = error: -19 [ 622.235558][ T5922] dvb-usb: error while querying for an remote control event. [ 622.346026][ T5720] m920x_read = error: -19 [ 622.346058][ T5720] dvb-usb: error while querying for an remote control event. [ 622.410644][T14846] loop5: detected capacity change from 0 to 6 [ 622.413419][T14846] Dev loop5: unable to read RDB block 6 [ 622.413463][T14846] loop5: unable to read partition table [ 622.413613][T14846] loop5: partition table beyond EOD, truncated [ 622.413643][T14846] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 622.455835][ T5720] m920x_read = error: -19 [ 622.455871][ T5720] dvb-usb: error while querying for an remote control event. [ 622.572372][ T5922] m920x_read = error: -19 [ 622.572391][ T5922] dvb-usb: error while querying for an remote control event. [ 622.638638][T14852] loop5: detected capacity change from 0 to 6 [ 622.641409][T14852] Dev loop5: unable to read RDB block 6 [ 622.641457][T14852] loop5: unable to read partition table [ 622.641699][T14852] loop5: partition table beyond EOD, truncated [ 622.641722][T14852] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 622.675536][ T5720] m920x_read = error: -19 [ 622.675566][ T5720] dvb-usb: error while querying for an remote control event. [ 622.785522][ T5922] m920x_read = error: -19 [ 622.785571][ T5922] dvb-usb: error while querying for an remote control event. [ 622.840837][T14859] loop5: detected capacity change from 0 to 6 [ 622.853985][T14859] Dev loop5: unable to read RDB block 6 [ 622.854019][T14859] loop5: AHDI p1 p2 [ 622.854042][T14859] loop5: partition table partially beyond EOD, truncated [ 622.854324][T14859] loop5: p1 start 1702059890 is beyond EOD, truncated [ 622.891451][T14856] gfs2: error -5 reading superblock [ 622.898482][ T5922] m920x_read = error: -19 [ 622.898509][ T5922] dvb-usb: error while querying for an remote control event. [ 623.009211][ T5720] m920x_read = error: -19 [ 623.009241][ T5720] dvb-usb: error while querying for an remote control event. [ 623.115601][ T5720] m920x_read = error: -19 [ 623.115631][ T5720] dvb-usb: error while querying for an remote control event. [ 623.226536][ T5720] m920x_read = error: -19 [ 623.226568][ T5720] dvb-usb: error while querying for an remote control event. [ 623.240487][T14876] loop5: detected capacity change from 0 to 6 [ 623.291192][T14876] Dev loop5: unable to read RDB block 6 [ 623.291248][T14876] loop5: unable to read partition table [ 623.291489][T14876] loop5: partition table beyond EOD, truncated [ 623.291537][T14876] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 623.338814][ T5720] m920x_read = error: -19 [ 623.338845][ T5720] dvb-usb: error while querying for an remote control event. [ 623.448785][ T5922] m920x_read = error: -19 [ 623.448804][ T5922] dvb-usb: error while querying for an remote control event. [ 623.476128][T14882] loop5: detected capacity change from 0 to 6 [ 623.481216][T14882] Dev loop5: unable to read RDB block 6 [ 623.481263][T14882] loop5: unable to read partition table [ 623.481508][T14882] loop5: partition table beyond EOD, truncated [ 623.481554][T14882] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 623.556184][ T5720] m920x_read = error: -19 [ 623.556214][ T5720] dvb-usb: error while querying for an remote control event. [ 623.665561][ T5922] m920x_read = error: -19 [ 623.665608][ T5922] dvb-usb: error while querying for an remote control event. [ 623.775820][ T5922] m920x_read = error: -19 [ 623.775851][ T5922] dvb-usb: error while querying for an remote control event. [ 623.781318][T14898] Dev loop5: unable to read RDB block 6 [ 623.781351][T14898] loop5: AHDI p1 p2 [ 623.781377][T14898] loop5: partition table partially beyond EOD, truncated [ 623.781658][T14898] loop5: p1 start 1702059890 is beyond EOD, truncated [ 623.885412][ T5922] m920x_read = error: -19 [ 623.885503][ T5922] dvb-usb: error while querying for an remote control event. [ 623.995659][ T5922] m920x_read = error: -19 [ 623.995692][ T5922] dvb-usb: error while querying for an remote control event. [ 624.001996][T14906] Dev loop5: unable to read RDB block 6 [ 624.002043][T14906] loop5: unable to read partition table [ 624.002286][T14906] loop5: partition table beyond EOD, truncated [ 624.002308][T14906] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 624.105437][ T5922] m920x_read = error: -19 [ 624.105468][ T5922] dvb-usb: error while querying for an remote control event. [ 624.118649][T14912] FAULT_INJECTION: forcing a failure. [ 624.118649][T14912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.118688][T14912] CPU: 1 UID: 0 PID: 14912 Comm: syz.1.3241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 624.118716][T14912] Tainted: [L]=SOFTLOCKUP [ 624.118724][T14912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.118736][T14912] Call Trace: [ 624.118745][T14912] [ 624.118753][T14912] dump_stack_lvl+0xe8/0x150 [ 624.118782][T14912] should_fail_ex+0x46b/0x600 [ 624.118820][T14912] _copy_to_iter+0x404/0x17d0 [ 624.118852][T14912] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 624.118877][T14912] ? __pfx__copy_to_iter+0x10/0x10 [ 624.118895][T14912] ? rt_spin_lock+0x1e0/0x400 [ 624.118920][T14912] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 624.118954][T14912] __skb_datagram_iter+0xf8/0x980 [ 624.118977][T14912] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 624.119008][T14912] skb_copy_datagram_iter+0xb5/0x240 [ 624.119035][T14912] netlink_recvmsg+0x2c3/0xa50 [ 624.119066][T14912] ? __pfx_netlink_recvmsg+0x10/0x10 [ 624.119091][T14912] ? __pfx_aa_sk_perm+0x10/0x10 [ 624.119109][T14912] ? __lock_acquire+0x6b5/0x2d10 [ 624.119138][T14912] ? aa_sock_msg_perm+0x122/0x200 [ 624.119167][T14912] ? __pfx_netlink_recvmsg+0x10/0x10 [ 624.119188][T14912] sock_recvmsg_nosec+0x130/0x170 [ 624.119216][T14912] ____sys_recvmsg+0x23d/0x4f0 [ 624.119244][T14912] ? __pfx_____sys_recvmsg+0x10/0x10 [ 624.119278][T14912] ? import_iovec+0x73/0xa0 [ 624.119304][T14912] ___sys_recvmsg+0x215/0x590 [ 624.119322][T14912] ? get_pid_task+0x20/0x1f0 [ 624.119349][T14912] ? __pfx____sys_recvmsg+0x10/0x10 [ 624.119373][T14912] ? __fget_files+0x2a/0x420 [ 624.119413][T14912] ? __fget_files+0x3a6/0x420 [ 624.119445][T14912] __x64_sys_recvmsg+0x1c0/0x2a0 [ 624.119468][T14912] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 624.119497][T14912] ? __pfx_ksys_write+0x10/0x10 [ 624.119532][T14912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.119555][T14912] do_syscall_64+0x174/0x580 [ 624.119582][T14912] ? trace_irq_disable+0x3b/0x140 [ 624.119605][T14912] ? clear_bhb_loop+0x40/0x90 [ 624.119630][T14912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.119650][T14912] RIP: 0033:0x7fba66c4ce59 [ 624.119671][T14912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.119689][T14912] RSP: 002b:00007fba64ea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 624.119712][T14912] RAX: ffffffffffffffda RBX: 00007fba66ec5fa0 RCX: 00007fba66c4ce59 [ 624.119727][T14912] RDX: 0000000000010002 RSI: 0000200000000000 RDI: 0000000000000003 [ 624.119741][T14912] RBP: 00007fba64ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 624.119754][T14912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.119767][T14912] R13: 00007fba66ec6038 R14: 00007fba66ec5fa0 R15: 00007ffea6c18668 [ 624.119798][T14912] [ 624.172750][T14910] Dev loop5: unable to read RDB block 6 [ 624.172795][T14910] loop5: unable to read partition table [ 624.173010][T14910] loop5: partition table beyond EOD, truncated [ 624.173029][T14910] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 624.175269][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 624.215485][ T5922] m920x_read = error: -19 [ 624.215514][ T5922] dvb-usb: error while querying for an remote control event. [ 624.325416][ T5720] m920x_read = error: -19 [ 624.325442][ T5720] dvb-usb: error while querying for an remote control event. [ 624.435450][ T5720] m920x_read = error: -19 [ 624.435476][ T5720] dvb-usb: error while querying for an remote control event. [ 624.511358][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 624.511392][ T9] usb 1-1: config 0 has no interface number 0 [ 624.511454][ T9] usb 1-1: config 0 interface 1 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 624.511486][ T9] usb 1-1: config 0 interface 1 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.511512][ T9] usb 1-1: config 0 interface 1 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 624.511541][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 624.511579][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 624.511604][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.545505][ T5720] m920x_read = error: -19 [ 624.545533][ T5720] dvb-usb: error while querying for an remote control event. [ 624.545635][ T5922] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 624.576216][T14920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3246'. [ 624.623627][ T9] usb 1-1: config 0 descriptor?? [ 624.639643][ T9] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 624.657426][ T5720] m920x_read = error: -19 [ 624.657455][ T5720] dvb-usb: error while querying for an remote control event. [ 624.720651][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.720964][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.749304][ T5922] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 624.749337][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.749358][ T5922] usb 2-1: Product: syz [ 624.749372][ T5922] usb 2-1: Manufacturer: syz [ 624.749387][ T5922] usb 2-1: SerialNumber: syz [ 624.767280][ T5923] m920x_read = error: -19 [ 624.767307][ T5923] dvb-usb: error while querying for an remote control event. [ 624.876437][ T5923] m920x_read = error: -19 [ 624.876692][ T5923] dvb-usb: error while querying for an remote control event. [ 624.986848][ T5923] m920x_read = error: -19 [ 624.986879][ T5923] dvb-usb: error while querying for an remote control event. [ 625.044438][ T9] hid_parser_main: 1 callbacks suppressed [ 625.044468][ T9] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 625.044507][ T9] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 625.044534][ T9] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 625.044561][ T9] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 625.044588][ T9] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 625.088382][ T9] elan 0003:04F3:0755.001B: failed to start in urb: -90 [ 625.095544][ T5923] m920x_read = error: -19 [ 625.095572][ T5923] dvb-usb: error while querying for an remote control event. [ 625.117445][ T9] elan 0003:04F3:0755.001B: hidraw0: USB HID v0.04 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input1 [ 625.117484][ T9] elan 0003:04F3:0755.001B: Input device is not registered [ 625.143981][ T9] elan 0003:04F3:0755.001B: probe with driver elan failed with error -119 [ 625.205482][ T5923] m920x_read = error: -19 [ 625.205581][ T5923] dvb-usb: error while querying for an remote control event. [ 625.221275][ T5922] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 625.221340][ T5922] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 625.235271][T13249] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 625.301261][ T5923] usb 1-1: USB disconnect, device number 5 [ 625.315469][ T5720] m920x_read = error: -19 [ 625.315494][ T5720] dvb-usb: error while querying for an remote control event. [ 625.385274][T13249] usb 3-1: Using ep0 maxpacket: 16 [ 625.390022][T13249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.390061][T13249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.390096][T13249] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 625.390141][T13249] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 625.390168][T13249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.426879][ T5712] m920x_read = error: -19 [ 625.426910][ T5712] dvb-usb: error while querying for an remote control event. [ 625.487640][T13249] usb 3-1: config 0 descriptor?? [ 625.535915][T12024] m920x_read = error: -19 [ 625.535940][T12024] dvb-usb: error while querying for an remote control event. [ 625.565357][ T5720] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 625.649523][T12024] m920x_read = error: -19 [ 625.649624][T12024] dvb-usb: error while querying for an remote control event. [ 625.725354][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 625.728412][ T5720] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 625.728512][ T5720] usb 4-1: config 1 interface 0 has no altsetting 0 [ 625.731972][ T5720] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 625.732065][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.732089][ T5720] usb 4-1: Product: syz [ 625.732105][ T5720] usb 4-1: Manufacturer: syz [ 625.732116][ T5720] usb 4-1: SerialNumber: syz [ 625.755545][ T5923] m920x_read = error: -19 [ 625.755584][ T5923] dvb-usb: error while querying for an remote control event. [ 625.865735][ T5712] m920x_read = error: -19 [ 625.865768][ T5712] dvb-usb: error while querying for an remote control event. [ 625.925477][T13249] usbhid 3-1:0.0: can't add hid device: -71 [ 625.925620][T13249] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 625.945354][T13249] usb 3-1: USB disconnect, device number 38 [ 625.980731][ T5923] m920x_read = error: -19 [ 625.980758][ T5923] dvb-usb: error while querying for an remote control event. [ 626.085893][ T5923] m920x_read = error: -19 [ 626.085988][ T5923] dvb-usb: error while querying for an remote control event. [ 626.093104][T14933] set_capacity_and_notify: 3 callbacks suppressed [ 626.093188][T14933] loop5: detected capacity change from 0 to 6 [ 626.120517][T14933] Dev loop5: unable to read RDB block 6 [ 626.120564][T14933] loop5: unable to read partition table [ 626.120805][T14933] loop5: partition table beyond EOD, truncated [ 626.120851][T14933] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 626.130048][ T5720] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input57 [ 626.160799][ T4965] bcm5974 4-1:1.0: could not read from device [ 626.278030][ T5923] m920x_read = error: -19 [ 626.278063][ T5923] dvb-usb: error while querying for an remote control event. [ 626.325027][ T4965] bcm5974 4-1:1.0: could not read from device [ 626.333306][ T5720] usb 4-1: USB disconnect, device number 38 [ 626.386182][ T5923] m920x_read = error: -19 [ 626.386285][ T5923] dvb-usb: error while querying for an remote control event. [ 626.458198][ T5922] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 626.459338][ T5922] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 626.514304][ T5923] m920x_read = error: -19 [ 626.514326][ T5923] dvb-usb: error while querying for an remote control event. [ 626.632073][ T5923] m920x_read = error: -19 [ 626.632094][ T5923] dvb-usb: error while querying for an remote control event. [ 626.664522][ T5922] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 626.664573][ T5922] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 626.675356][ T5922] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 626.678538][T14939] FAULT_INJECTION: forcing a failure. [ 626.678538][T14939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 626.678601][T14939] CPU: 1 UID: 0 PID: 14939 Comm: syz.2.3254 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.678630][T14939] Tainted: [L]=SOFTLOCKUP [ 626.678638][T14939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 626.678650][T14939] Call Trace: [ 626.678662][T14939] [ 626.678672][T14939] dump_stack_lvl+0xe8/0x150 [ 626.678700][T14939] should_fail_ex+0x46b/0x600 [ 626.678735][T14939] prepare_alloc_pages+0x22a/0x6b0 [ 626.678770][T14939] __alloc_frozen_pages_noprof+0x12f/0x380 [ 626.678802][T14939] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 626.678833][T14939] ? __pfx_policy_nodemask+0x10/0x10 [ 626.678870][T14939] alloc_pages_mpol+0xd1/0x380 [ 626.678902][T14939] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 626.678934][T14939] vma_alloc_folio_noprof+0xe1/0x1e0 [ 626.678964][T14939] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 626.679001][T14939] do_wp_page+0x1109/0x3d90 [ 626.679024][T14939] ? rt_spin_lock+0x1e0/0x400 [ 626.679062][T14939] ? preempt_count_add+0x91/0x190 [ 626.679090][T14939] ? __pfx_do_wp_page+0x10/0x10 [ 626.679110][T14939] ? rt_spin_lock+0x2ce/0x400 [ 626.679135][T14939] ? __pfx_rt_spin_lock+0x10/0x10 [ 626.679164][T14939] ? pte_offset_map_rw_nolock+0xea/0x160 [ 626.679189][T14939] handle_mm_fault+0xafb/0x14d0 [ 626.679217][T14939] ? handle_mm_fault+0xed/0x14d0 [ 626.679245][T14939] ? __pfx_handle_mm_fault+0x10/0x10 [ 626.679281][T14939] ? __lock_acquire+0x6b5/0x2d10 [ 626.679309][T14939] ? lock_mm_and_find_vma+0xa7/0x340 [ 626.679340][T14939] do_user_addr_fault+0x75b/0x1340 [ 626.679379][T14939] exc_page_fault+0x6a/0xc0 [ 626.679410][T14939] asm_exc_page_fault+0x26/0x30 [ 626.679431][T14939] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 626.679465][T14939] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 626.679483][T14939] RSP: 0018:ffffc9000728f638 EFLAGS: 00050202 [ 626.679503][T14939] RAX: ffffffff84b5de01 RBX: ffff88805f900000 RCX: 0000000000000e5c [ 626.679518][T14939] RDX: 0000000000000000 RSI: ffff88805f900000 RDI: 00002000000017c0 [ 626.679532][T14939] RBP: ffffc9000728f7b0 R08: ffff88805f900e5b R09: 1ffff1100bf201cb [ 626.679547][T14939] R10: dffffc0000000000 R11: ffffed100bf201cc R12: dffffc0000000000 [ 626.679569][T14939] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e5c [ 626.679591][T14939] ? _copy_to_iter+0x421/0x17d0 [ 626.679618][T14939] _copy_to_iter+0x493/0x17d0 [ 626.679651][T14939] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 626.679675][T14939] ? __pfx__copy_to_iter+0x10/0x10 [ 626.679693][T14939] ? rt_spin_lock+0x1e0/0x400 [ 626.679718][T14939] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 626.679752][T14939] __skb_datagram_iter+0xf8/0x980 [ 626.679776][T14939] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 626.679805][T14939] skb_copy_datagram_iter+0xb5/0x240 [ 626.679830][T14939] netlink_recvmsg+0x2c3/0xa50 [ 626.679861][T14939] ? __pfx_netlink_recvmsg+0x10/0x10 [ 626.679885][T14939] ? __pfx_aa_sk_perm+0x10/0x10 [ 626.679904][T14939] ? __lock_acquire+0x6b5/0x2d10 [ 626.679931][T14939] ? aa_sock_msg_perm+0x122/0x200 [ 626.679953][T14939] ? __pfx_netlink_recvmsg+0x10/0x10 [ 626.679973][T14939] sock_recvmsg_nosec+0x130/0x170 [ 626.680002][T14939] ____sys_recvmsg+0x23d/0x4f0 [ 626.680031][T14939] ? __pfx_____sys_recvmsg+0x10/0x10 [ 626.680066][T14939] ? import_iovec+0x73/0xa0 [ 626.680093][T14939] ___sys_recvmsg+0x215/0x590 [ 626.680111][T14939] ? get_pid_task+0x20/0x1f0 [ 626.680139][T14939] ? __pfx____sys_recvmsg+0x10/0x10 [ 626.680164][T14939] ? __fget_files+0x2a/0x420 [ 626.680204][T14939] ? __fget_files+0x3a6/0x420 [ 626.680237][T14939] __x64_sys_recvmsg+0x1c0/0x2a0 [ 626.680261][T14939] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 626.680290][T14939] ? __pfx_ksys_write+0x10/0x10 [ 626.680326][T14939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.680348][T14939] do_syscall_64+0x174/0x580 [ 626.680378][T14939] ? trace_irq_disable+0x3b/0x140 [ 626.680401][T14939] ? clear_bhb_loop+0x40/0x90 [ 626.680426][T14939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.680446][T14939] RIP: 0033:0x7f239528ce59 [ 626.680465][T14939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.680482][T14939] RSP: 002b:00007f23934de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 626.680502][T14939] RAX: ffffffffffffffda RBX: 00007f2395505fa0 RCX: 00007f239528ce59 [ 626.680517][T14939] RDX: 0000000000010002 RSI: 0000200000000000 RDI: 0000000000000003 [ 626.680530][T14939] RBP: 00007f23934de090 R08: 0000000000000000 R09: 0000000000000000 [ 626.680543][T14939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.680555][T14939] R13: 00007f2395506038 R14: 00007f2395505fa0 R15: 00007ffc2391b418 [ 626.680596][T14939] [ 626.726248][ T5922] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 626.738589][ T5923] m920x_read = error: -19 [ 626.738615][ T5923] dvb-usb: error while querying for an remote control event. [ 626.805081][ T5922] usb 2-1: USB disconnect, device number 40 [ 626.845338][ T5720] m920x_read = error: -19 [ 626.845364][ T5720] dvb-usb: error while querying for an remote control event. [ 626.955387][ T5712] m920x_read = error: -19 [ 626.955413][ T5712] dvb-usb: error while querying for an remote control event. [ 627.068110][ T5922] m920x_read = error: -19 [ 627.068140][ T5922] dvb-usb: error while querying for an remote control event. [ 627.175389][ T5720] m920x_read = error: -19 [ 627.175417][ T5720] dvb-usb: error while querying for an remote control event. [ 627.282161][T14952] loop5: detected capacity change from 0 to 6 [ 627.287320][ T5712] m920x_read = error: -19 [ 627.287345][ T5712] dvb-usb: error while querying for an remote control event. [ 627.289620][T14952] Dev loop5: unable to read RDB block 6 [ 627.289661][T14952] loop5: unable to read partition table [ 627.289873][T14952] loop5: partition table beyond EOD, truncated [ 627.289903][T14952] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 627.306866][ T5922] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 627.366940][T14954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3260'. [ 627.397632][ T5712] m920x_read = error: -19 [ 627.397673][ T5712] dvb-usb: error while querying for an remote control event. [ 627.459054][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 627.460787][ T5922] usb 3-1: not running at top speed; connect to a high speed hub [ 627.463931][ T5922] usb 3-1: config 4 has an invalid interface number: 61 but max is 0 [ 627.463961][ T5922] usb 3-1: config 4 has no interface number 0 [ 627.463996][ T5922] usb 3-1: config 4 interface 61 has no altsetting 0 [ 627.505954][ T5720] m920x_read = error: -19 [ 627.505974][ T5720] dvb-usb: error while querying for an remote control event. [ 627.511121][ T5922] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=17.91 [ 627.511161][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.511181][ T5922] usb 3-1: Product: syz [ 627.511196][ T5922] usb 3-1: Manufacturer: syz [ 627.511210][ T5922] usb 3-1: SerialNumber: syz [ 627.607759][T14962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3263'. [ 627.615412][ T5720] m920x_read = error: -19 [ 627.615503][ T5720] dvb-usb: error while querying for an remote control event. [ 627.727282][ T5720] m920x_read = error: -19 [ 627.727444][ T5720] dvb-usb: error while querying for an remote control event. [ 627.839582][ T5712] m920x_read = error: -19 [ 627.839616][ T5712] dvb-usb: error while querying for an remote control event. [ 627.842473][ T5922] mos7840 3-1:4.61: required endpoints missing [ 627.852742][ T5922] usb 3-1: USB disconnect, device number 39 [ 627.945573][ T5712] m920x_read = error: -19 [ 627.945594][ T5712] dvb-usb: error while querying for an remote control event. [ 628.058046][ T5922] m920x_read = error: -19 [ 628.058067][ T5922] dvb-usb: error while querying for an remote control event. [ 628.105946][T14971] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3266'. [ 628.165335][ T5922] m920x_read = error: -19 [ 628.165364][ T5922] dvb-usb: error while querying for an remote control event. [ 628.196686][T14975] sctp: [Deprecated]: syz.3.3269 (pid 14975) Use of int in max_burst socket option. [ 628.196686][T14975] Use struct sctp_assoc_value instead [ 628.238908][T14977] FAULT_INJECTION: forcing a failure. [ 628.238908][T14977] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 628.238936][T14977] CPU: 1 UID: 0 PID: 14977 Comm: syz.0.3270 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 628.238956][T14977] Tainted: [L]=SOFTLOCKUP [ 628.238960][T14977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 628.238968][T14977] Call Trace: [ 628.238974][T14977] [ 628.238980][T14977] dump_stack_lvl+0xe8/0x150 [ 628.239000][T14977] should_fail_ex+0x46b/0x600 [ 628.239023][T14977] prepare_alloc_pages+0x22a/0x6b0 [ 628.239045][T14977] __alloc_frozen_pages_noprof+0x12f/0x380 [ 628.239065][T14977] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 628.239086][T14977] ? __pfx_policy_nodemask+0x10/0x10 [ 628.239118][T14977] alloc_pages_mpol+0xd1/0x380 [ 628.239138][T14977] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 628.239158][T14977] vma_alloc_folio_noprof+0xe1/0x1e0 [ 628.239177][T14977] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 628.239200][T14977] do_wp_page+0x1109/0x3d90 [ 628.239214][T14977] ? rt_spin_lock+0x1e0/0x400 [ 628.239242][T14977] ? preempt_count_add+0x91/0x190 [ 628.239261][T14977] ? __pfx_do_wp_page+0x10/0x10 [ 628.239274][T14977] ? rt_spin_lock+0x2ce/0x400 [ 628.239290][T14977] ? __pfx_rt_spin_lock+0x10/0x10 [ 628.239307][T14977] ? pte_offset_map_rw_nolock+0xea/0x160 [ 628.239324][T14977] handle_mm_fault+0xafb/0x14d0 [ 628.239342][T14977] ? handle_mm_fault+0xed/0x14d0 [ 628.239359][T14977] ? __pfx_handle_mm_fault+0x10/0x10 [ 628.239393][T14977] ? lock_mm_and_find_vma+0xa7/0x340 [ 628.239413][T14977] do_user_addr_fault+0x75b/0x1340 [ 628.239438][T14977] exc_page_fault+0x6a/0xc0 [ 628.239458][T14977] asm_exc_page_fault+0x26/0x30 [ 628.239471][T14977] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 628.239488][T14977] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 628.239503][T14977] RSP: 0018:ffffc900077df638 EFLAGS: 00050202 [ 628.239523][T14977] RAX: ffffffff84b5de01 RBX: ffff888037ac4000 RCX: 000000000000061c [ 628.239540][T14977] RDX: 0000000000000000 RSI: ffff888037ac4840 RDI: 0000200000002000 [ 628.239556][T14977] RBP: ffffc900077df7b0 R08: ffff888037ac4e5b R09: 1ffff11006f589cb [ 628.239572][T14977] R10: dffffc0000000000 R11: ffffed1006f589cc R12: dffffc0000000000 [ 628.239588][T14977] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e5c [ 628.239612][T14977] ? _copy_to_iter+0x421/0x17d0 [ 628.239641][T14977] _copy_to_iter+0x493/0x17d0 [ 628.239677][T14977] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 628.239705][T14977] ? __pfx__copy_to_iter+0x10/0x10 [ 628.239724][T14977] ? rt_spin_lock+0x1e0/0x400 [ 628.239753][T14977] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 628.239792][T14977] __skb_datagram_iter+0xf8/0x980 [ 628.239818][T14977] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 628.239853][T14977] skb_copy_datagram_iter+0xb5/0x240 [ 628.239882][T14977] netlink_recvmsg+0x2c3/0xa50 [ 628.239916][T14977] ? __pfx_netlink_recvmsg+0x10/0x10 [ 628.239942][T14977] ? __pfx_aa_sk_perm+0x10/0x10 [ 628.239963][T14977] ? __lock_acquire+0x6b5/0x2d10 [ 628.239995][T14977] ? aa_sock_msg_perm+0x122/0x200 [ 628.240020][T14977] ? __pfx_netlink_recvmsg+0x10/0x10 [ 628.240044][T14977] sock_recvmsg_nosec+0x130/0x170 [ 628.240078][T14977] ____sys_recvmsg+0x23d/0x4f0 [ 628.240118][T14977] ? __pfx_____sys_recvmsg+0x10/0x10 [ 628.240156][T14977] ? import_iovec+0x73/0xa0 [ 628.240185][T14977] ___sys_recvmsg+0x215/0x590 [ 628.240206][T14977] ? get_pid_task+0x20/0x1f0 [ 628.240234][T14977] ? __pfx____sys_recvmsg+0x10/0x10 [ 628.240263][T14977] ? __fget_files+0x2a/0x420 [ 628.240303][T14977] ? __fget_files+0x3a6/0x420 [ 628.240339][T14977] __x64_sys_recvmsg+0x1c0/0x2a0 [ 628.240366][T14977] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 628.240400][T14977] ? __pfx_ksys_write+0x10/0x10 [ 628.240441][T14977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.240466][T14977] do_syscall_64+0x174/0x580 [ 628.240499][T14977] ? trace_irq_disable+0x3b/0x140 [ 628.240525][T14977] ? clear_bhb_loop+0x40/0x90 [ 628.240553][T14977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.240577][T14977] RIP: 0033:0x7f4736b2ce59 [ 628.240598][T14977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.240618][T14977] RSP: 002b:00007f4734d86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 628.240642][T14977] RAX: ffffffffffffffda RBX: 00007f4736da5fa0 RCX: 00007f4736b2ce59 [ 628.240659][T14977] RDX: 0000000000010002 RSI: 0000200000000000 RDI: 0000000000000003 [ 628.240674][T14977] RBP: 00007f4734d86090 R08: 0000000000000000 R09: 0000000000000000 [ 628.240688][T14977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.240700][T14977] R13: 00007f4736da6038 R14: 00007f4736da5fa0 R15: 00007fffc2425938 [ 628.240734][T14977] [ 628.275326][ T5922] m920x_read = error: -19 [ 628.275353][ T5922] dvb-usb: error while querying for an remote control event. [ 628.385514][ T5922] m920x_read = error: -19 [ 628.385542][ T5922] dvb-usb: error while querying for an remote control event. [ 628.495345][ T5922] m920x_read = error: -19 [ 628.495374][ T5922] dvb-usb: error while querying for an remote control event. [ 628.605674][ T5922] m920x_read = error: -19 [ 628.605702][ T5922] dvb-usb: error while querying for an remote control event. [ 628.660211][T14989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3276'. [ 628.715306][ T5922] m920x_read = error: -19 [ 628.715335][ T5922] dvb-usb: error while querying for an remote control event. [ 628.825670][ T5712] m920x_read = error: -19 [ 628.825701][ T5712] dvb-usb: error while querying for an remote control event. [ 628.934857][T14998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3279'. [ 628.936372][ T5922] m920x_read = error: -19 [ 628.936398][ T5922] dvb-usb: error while querying for an remote control event. [ 629.045428][ T5720] m920x_read = error: -19 [ 629.045455][ T5720] dvb-usb: error while querying for an remote control event. [ 629.155444][ T5712] m920x_read = error: -19 [ 629.155477][ T5712] dvb-usb: error while querying for an remote control event. [ 629.205363][ T5922] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 629.265756][ T5712] m920x_read = error: -19 [ 629.265790][ T5712] dvb-usb: error while querying for an remote control event. [ 629.355365][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 629.359192][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.359255][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 629.359285][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 629.359300][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 629.359315][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.360774][ T5922] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 629.360808][ T5922] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 629.360830][ T5922] usb 4-1: Manufacturer: syz [ 629.370577][ T5922] usb 4-1: config 0 descriptor?? [ 629.376397][ T5712] m920x_read = error: -19 [ 629.376427][ T5712] dvb-usb: error while querying for an remote control event. [ 629.485506][ T5712] m920x_read = error: -19 [ 629.485528][ T5712] dvb-usb: error while querying for an remote control event. [ 629.595968][ T5712] m920x_read = error: -19 [ 629.595987][ T5712] dvb-usb: error while querying for an remote control event. [ 629.665429][ T5922] rc_core: IR keymap rc-hauppauge not found [ 629.665447][ T5922] Registered IR keymap rc-empty [ 629.665553][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.685459][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.719029][ T5922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 629.724759][ T5922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input58 [ 629.732929][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.745750][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.746090][ T5720] m920x_read = error: -19 [ 629.746112][ T5720] dvb-usb: error while querying for an remote control event. [ 629.765346][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.806158][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.825603][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.845392][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.856019][ T5712] m920x_read = error: -19 [ 629.856045][ T5712] dvb-usb: error while querying for an remote control event. [ 629.865896][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.885664][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.906463][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.925810][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.948885][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 629.982176][ T5712] m920x_read = error: -19 [ 629.982197][ T5712] dvb-usb: error while querying for an remote control event. [ 630.046961][ T5922] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 630.046993][ T5922] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 630.086343][ T5922] m920x_read = error: -19 [ 630.086376][ T5922] dvb-usb: error while querying for an remote control event. [ 630.197950][ T5922] m920x_read = error: -19 [ 630.197978][ T5922] dvb-usb: error while querying for an remote control event. [ 630.305413][ T5922] m920x_read = error: -19 [ 630.305510][ T5922] dvb-usb: error while querying for an remote control event. [ 630.416900][ T5922] m920x_read = error: -19 [ 630.416931][ T5922] dvb-usb: error while querying for an remote control event. [ 630.485038][T13249] usb 4-1: USB disconnect, device number 39 [ 630.525363][ T5922] m920x_read = error: -19 [ 630.525392][ T5922] dvb-usb: error while querying for an remote control event. [ 630.636058][ T5922] m920x_read = error: -19 [ 630.636079][ T5922] dvb-usb: error while querying for an remote control event. [ 630.745392][ T5922] m920x_read = error: -19 [ 630.745423][ T5922] dvb-usb: error while querying for an remote control event. [ 630.855419][ T5922] m920x_read = error: -19 [ 630.855452][ T5922] dvb-usb: error while querying for an remote control event. [ 630.966611][ T5922] m920x_read = error: -19 [ 630.966645][ T5922] dvb-usb: error while querying for an remote control event. [ 631.075343][ T5922] m920x_read = error: -19 [ 631.075377][ T5922] dvb-usb: error while querying for an remote control event. [ 631.096438][T15032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3294'. [ 631.187868][ T5922] m920x_read = error: -19 [ 631.187888][ T5922] dvb-usb: error while querying for an remote control event. [ 631.247107][T15039] loop5: detected capacity change from 0 to 6 [ 631.248219][T15039] Dev loop5: unable to read RDB block 6 [ 631.248265][T15039] loop5: unable to read partition table [ 631.248467][T15039] loop5: partition table beyond EOD, truncated [ 631.248487][T15039] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 631.295455][ T5922] m920x_read = error: -19 [ 631.295486][ T5922] dvb-usb: error while querying for an remote control event. [ 631.406133][ T5922] m920x_read = error: -19 [ 631.406164][ T5922] dvb-usb: error while querying for an remote control event. [ 631.515401][ T5712] m920x_read = error: -19 [ 631.515433][ T5712] dvb-usb: error while querying for an remote control event. [ 631.625412][ T5712] m920x_read = error: -19 [ 631.625444][ T5712] dvb-usb: error while querying for an remote control event. [ 631.687424][ T5922] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 631.767892][ T5720] m920x_read = error: -19 [ 631.767914][ T5720] dvb-usb: error while querying for an remote control event. [ 631.795496][T15059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3306'. [ 631.855290][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 631.857251][ T5922] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 631.857283][ T5922] usb 1-1: config 0 has no interface number 0 [ 631.859809][ T5922] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 631.859843][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.859865][ T5922] usb 1-1: Product: syz [ 631.859882][ T5922] usb 1-1: Manufacturer: syz [ 631.859898][ T5922] usb 1-1: SerialNumber: syz [ 631.862788][T15061] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 631.878629][ T5922] usb 1-1: config 0 descriptor?? [ 631.899422][ T5720] m920x_read = error: -19 [ 631.899453][ T5720] dvb-usb: error while querying for an remote control event. [ 631.906804][ T5712] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 632.005661][T12024] m920x_read = error: -19 [ 632.005683][T12024] dvb-usb: error while querying for an remote control event. [ 632.082702][ T5712] usb 2-1: config 1 interface 0 altsetting 211 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 632.082782][ T5712] usb 2-1: config 1 interface 0 altsetting 211 bulk endpoint 0x82 has invalid maxpacket 8 [ 632.082799][ T5712] usb 2-1: config 1 interface 0 altsetting 211 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 632.082817][ T5712] usb 2-1: config 1 interface 0 has no altsetting 0 [ 632.088902][ T5712] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 632.089224][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.089247][ T5712] usb 2-1: Product: 韲 [ 632.089370][ T5712] usb 2-1: Manufacturer: 㐊 [ 632.089386][ T5712] usb 2-1: SerialNumber: ࡏ뼠ꈟẁ䘬ឺ⹊⫧䕯䲿ඌ轈ꂨ企ꞁ풋涚쵼箭앓⌓썅⧄ﵖ餰䂙㌃霭ʇㆦ〵롅ｵ縉Ṓ嶵꫞뿞取෥魚鮲䪈͓䲔蛋谸ᩬ๑䅱練泿꿇႒훑팕퐪洌戤猪䤆췒㻻 [ 632.136996][T15055] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 632.137158][T15055] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 632.138039][ T5923] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 632.152761][ T5922] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 632.153273][ T5922] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 632.209343][ T32] m920x_read = error: -19 [ 632.209387][ T32] dvb-usb: error while querying for an remote control event. [ 632.258303][ T5922] uvcvideo 1-1:0.31: Failed to create links for entity 5 [ 632.258324][ T5922] uvcvideo 1-1:0.31: Failed to register entities (-22). [ 632.267356][ T5923] usb 3-1: device descriptor read/64, error -71 [ 632.315386][T12024] m920x_read = error: -19 [ 632.315405][T12024] dvb-usb: error while querying for an remote control event. [ 632.324106][ T5922] usb 1-1: USB disconnect, device number 6 [ 632.409571][ T5712] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 632.475468][ T5712] m920x_read = error: -19 [ 632.475489][ T5712] dvb-usb: error while querying for an remote control event. [ 632.545961][ T5923] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 632.585514][ T5712] m920x_read = error: -19 [ 632.585547][ T5712] dvb-usb: error while querying for an remote control event. [ 632.591768][T15055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.592410][T15055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.599516][ T5712] usb 2-1: USB disconnect, device number 41 [ 632.625470][T13249] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 632.675412][ T5923] usb 3-1: device descriptor read/64, error -71 [ 632.695428][ T5922] m920x_read = error: -19 [ 632.695450][ T5922] dvb-usb: error while querying for an remote control event. [ 632.793200][ T5923] usb usb3-port1: attempt power cycle [ 632.795412][T13249] usb 4-1: Using ep0 maxpacket: 16 [ 632.805518][ T5712] m920x_read = error: -19 [ 632.805545][ T5712] dvb-usb: error while querying for an remote control event. [ 632.819277][T13249] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 632.819312][T13249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.819325][T13249] usb 4-1: Product: syz [ 632.819334][T13249] usb 4-1: Manufacturer: syz [ 632.819344][T13249] usb 4-1: SerialNumber: syz [ 632.915468][ T5712] m920x_read = error: -19 [ 632.915502][ T5712] dvb-usb: error while querying for an remote control event. [ 633.026520][ T5712] m920x_read = error: -19 [ 633.026552][ T5712] dvb-usb: error while querying for an remote control event. [ 633.047951][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 633.135419][ T5922] m920x_read = error: -19 [ 633.135451][ T5922] dvb-usb: error while querying for an remote control event. [ 633.135548][ T5923] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 633.159260][ T5923] usb 3-1: device descriptor read/8, error -71 [ 633.210376][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 633.210453][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.210467][ T9] usb 1-1: Product: syz [ 633.210476][ T9] usb 1-1: Manufacturer: syz [ 633.210486][ T9] usb 1-1: SerialNumber: syz [ 633.245692][ T5922] m920x_read = error: -19 [ 633.245722][ T5922] dvb-usb: error while querying for an remote control event. [ 633.260809][ T9] usb 1-1: config 0 descriptor?? [ 633.273629][ T9] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 633.356654][ T5922] m920x_read = error: -19 [ 633.356689][ T5922] dvb-usb: error while querying for an remote control event. [ 633.395625][ T5923] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 633.420629][ T5923] usb 3-1: device descriptor read/8, error -71 [ 633.465531][ T5922] m920x_read = error: -19 [ 633.465561][ T5922] dvb-usb: error while querying for an remote control event. [ 633.469190][T15066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.471849][T15066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.512394][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3309'. [ 633.521673][T15066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.522271][T15066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.525637][ T5923] usb usb3-port1: unable to enumerate USB device [ 633.575746][ T5923] m920x_read = error: -19 [ 633.575779][ T5923] dvb-usb: error while querying for an remote control event. [ 633.641874][T15076] loop5: detected capacity change from 0 to 6 [ 633.642959][T15076] Dev loop5: unable to read RDB block 6 [ 633.642990][T15076] loop5: AHDI p1 p2 [ 633.643013][T15076] loop5: partition table partially beyond EOD, truncated [ 633.643257][T15076] loop5: p1 start 1702059890 is beyond EOD, truncated [ 633.686088][ T5923] m920x_read = error: -19 [ 633.686121][ T5923] dvb-usb: error while querying for an remote control event. [ 633.768261][ T9] sonixb 1-1:0.0: Error writing register 01: -71 [ 633.768950][ T9] sonixb 1-1:0.0: probe with driver sonixb failed with error -71 [ 633.795751][ T5923] m920x_read = error: -19 [ 633.795779][ T5923] dvb-usb: error while querying for an remote control event. [ 633.830984][ T9] usb 1-1: USB disconnect, device number 7 [ 633.855920][T15080] loop5: detected capacity change from 0 to 6 [ 633.858193][T15080] Dev loop5: unable to read RDB block 6 [ 633.858239][T15080] loop5: unable to read partition table [ 633.858711][T15080] loop5: partition table beyond EOD, truncated [ 633.858735][T15080] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 633.906148][ T5923] m920x_read = error: -19 [ 633.906184][ T5923] dvb-usb: error while querying for an remote control event. [ 634.015841][ T5922] m920x_read = error: -19 [ 634.015874][ T5922] dvb-usb: error while querying for an remote control event. [ 634.083511][T15086] loop5: detected capacity change from 0 to 6 [ 634.087052][T15086] Dev loop5: unable to read RDB block 6 [ 634.087097][T15086] loop5: unable to read partition table [ 634.087323][T15086] loop5: partition table beyond EOD, truncated [ 634.087343][T15086] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 634.125947][ T5922] m920x_read = error: -19 [ 634.125977][ T5922] dvb-usb: error while querying for an remote control event. [ 634.236950][ T5922] m920x_read = error: -19 [ 634.236981][ T5922] dvb-usb: error while querying for an remote control event. [ 634.347448][ T5922] m920x_read = error: -19 [ 634.347480][ T5922] dvb-usb: error while querying for an remote control event. [ 634.446218][T13249] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 634.446340][T13249] usb 4-1: MIDIStreaming interface descriptor not found [ 634.456553][ T5922] m920x_read = error: -19 [ 634.456579][ T5922] dvb-usb: error while querying for an remote control event. [ 634.554962][T15096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3324'. [ 634.568334][ T5922] m920x_read = error: -19 [ 634.568364][ T5922] dvb-usb: error while querying for an remote control event. [ 634.679163][ T5922] m920x_read = error: -19 [ 634.679196][ T5922] dvb-usb: error while querying for an remote control event. [ 634.788499][ T5922] m920x_read = error: -19 [ 634.788531][ T5922] dvb-usb: error while querying for an remote control event. [ 634.844258][T15102] loop5: detected capacity change from 0 to 6 [ 634.851315][T15102] Dev loop5: unable to read RDB block 6 [ 634.851348][T15102] loop5: AHDI p1 p2 [ 634.851368][T15102] loop5: partition table partially beyond EOD, truncated [ 634.851605][T15102] loop5: p1 start 1702059890 is beyond EOD, truncated [ 634.898420][ T5922] m920x_read = error: -19 [ 634.898440][ T5922] dvb-usb: error while querying for an remote control event. [ 635.005514][ T5712] m920x_read = error: -19 [ 635.005545][ T5712] dvb-usb: error while querying for an remote control event. [ 635.040685][T15106] loop5: detected capacity change from 0 to 6 [ 635.041721][T15106] Dev loop5: unable to read RDB block 6 [ 635.041766][T15106] loop5: unable to read partition table [ 635.041990][T15106] loop5: partition table beyond EOD, truncated [ 635.042013][T15106] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 635.115379][ T5923] m920x_read = error: -19 [ 635.115398][ T5923] dvb-usb: error while querying for an remote control event. [ 635.157902][ T32] usb 4-1: USB disconnect, device number 40 [ 635.186075][ T5922] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 635.241028][ T5923] m920x_read = error: -19 [ 635.241059][ T5923] dvb-usb: error while querying for an remote control event. [ 635.335286][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 635.337318][ T5922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.337349][ T5922] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 635.347565][ T5712] m920x_read = error: -19 [ 635.347655][ T5712] dvb-usb: error while querying for an remote control event. [ 635.356449][ T5922] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 635.356482][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 635.356503][ T5922] usb 1-1: SerialNumber: syz [ 635.367309][ T5923] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 635.404308][ T5922] usb 1-1: 0:2 : does not exist [ 635.442762][T15113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3331'. [ 635.455380][ T5712] m920x_read = error: -19 [ 635.455399][ T5712] dvb-usb: error while querying for an remote control event. [ 635.515673][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 635.521077][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 635.524547][ T5923] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 635.524579][ T5923] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 635.524601][ T5923] usb 2-1: config 7 has no interface number 0 [ 635.534404][ T5923] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 635.534436][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.534667][ T5923] usb 2-1: Product: syz [ 635.534683][ T5923] usb 2-1: Manufacturer: syz [ 635.534698][ T5923] usb 2-1: SerialNumber: syz [ 635.574380][ T32] m920x_read = error: -19 [ 635.574778][ T32] dvb-usb: error while querying for an remote control event. [ 635.666007][T15117] loop5: detected capacity change from 0 to 6 [ 635.670434][T15117] Dev loop5: unable to read RDB block 6 [ 635.670467][T15117] loop5: unable to read partition table [ 635.670700][T15117] loop5: partition table beyond EOD, truncated [ 635.670731][T15117] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 635.676461][ T32] m920x_read = error: -19 [ 635.676492][ T32] dvb-usb: error while querying for an remote control event. [ 635.783811][ T5923] usb 2-1: Limiting number of CPorts to U8_MAX [ 635.808874][ T5922] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 635.855946][ T5922] usb 1-1: 5:0: failed to get current value for ch 2 (-22) [ 635.874635][ T32] m920x_read = error: -19 [ 635.874664][ T32] dvb-usb: error while querying for an remote control event. [ 635.897932][ T5922] usb 1-1: 5:0: failed to get current value for ch 3 (-22) [ 635.943534][ T5922] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 635.993958][ T32] m920x_read = error: -19 [ 635.993988][ T32] dvb-usb: error while querying for an remote control event. [ 636.014187][ T5922] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 636.014225][ T5922] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 636.014246][ T5922] usb 1-1: [5] FU [Feature 5 Playback Volume] ch = 3, val = 0/1/1 [ 636.060195][ T5922] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 636.060239][ T5922] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 636.060259][ T5922] usb 1-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 636.083674][ T5922] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 636.097413][ T32] m920x_read = error: -19 [ 636.097793][ T32] dvb-usb: error while querying for an remote control event. [ 636.108346][ T5922] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 636.114713][ T5923] usb 2-1: Not enough endpoints found in device, aborting! [ 636.132879][ T5922] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 636.167782][ T5922] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 636.277409][ T5923] m920x_read = error: -19 [ 636.277430][ T5923] dvb-usb: error while querying for an remote control event. [ 636.314997][ T5922] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 636.334222][ T5922] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 636.385399][ T5923] m920x_read = error: -19 [ 636.385461][ T5923] dvb-usb: error while querying for an remote control event. [ 636.398106][ T5922] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 636.499730][ T32] m920x_read = error: -19 [ 636.499761][ T32] dvb-usb: error while querying for an remote control event. [ 636.549731][ T5922] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 636.605446][ T32] m920x_read = error: -19 [ 636.605474][ T32] dvb-usb: error while querying for an remote control event. [ 636.627583][ T5922] usb 1-1: USB disconnect, device number 8 [ 636.693894][ T6320] udevd[6320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.717027][ T32] m920x_read = error: -19 [ 636.717057][ T32] dvb-usb: error while querying for an remote control event. [ 636.825578][ T32] m920x_read = error: -19 [ 636.825609][ T32] dvb-usb: error while querying for an remote control event. [ 636.935567][ T5923] m920x_read = error: -19 [ 636.935678][ T5923] dvb-usb: error while querying for an remote control event. [ 637.063723][ T32] m920x_read = error: -19 [ 637.063746][ T32] dvb-usb: error while querying for an remote control event. [ 637.075696][ T5922] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 637.189334][ T32] m920x_read = error: -19 [ 637.189357][ T32] dvb-usb: error while querying for an remote control event. [ 637.282174][ T5923] usb 2-1: USB disconnect, device number 42 [ 637.296089][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 637.323360][ T32] m920x_read = error: -19 [ 637.323387][ T32] dvb-usb: error while querying for an remote control event. [ 637.336620][ T5922] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 637.336650][ T5922] usb 1-1: config 0 has no interface number 0 [ 637.336698][ T5922] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 637.407078][ T5922] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 637.407527][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.407552][ T5922] usb 1-1: Product: syz [ 637.407567][ T5922] usb 1-1: Manufacturer: syz [ 637.407581][ T5922] usb 1-1: SerialNumber: syz [ 637.425486][T12024] m920x_read = error: -19 [ 637.425517][T12024] dvb-usb: error while querying for an remote control event. [ 637.475513][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 637.536820][T12024] m920x_read = error: -19 [ 637.536850][T12024] dvb-usb: error while querying for an remote control event. [ 637.576963][ T5922] usb 1-1: config 0 descriptor?? [ 637.578322][T15136] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 637.653513][T12024] m920x_read = error: -19 [ 637.653546][T12024] dvb-usb: error while querying for an remote control event. [ 637.756036][T12024] m920x_read = error: -19 [ 637.756065][T12024] dvb-usb: error while querying for an remote control event. [ 637.841771][T15136] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 637.958804][T12024] m920x_read = error: -19 [ 637.958834][T12024] dvb-usb: error while querying for an remote control event. [ 638.066378][T12024] m920x_read = error: -19 [ 638.066480][T12024] dvb-usb: error while querying for an remote control event. [ 638.191406][ T5923] m920x_read = error: -19 [ 638.191440][ T5923] dvb-usb: error while querying for an remote control event. [ 638.296750][ T5923] m920x_read = error: -19 [ 638.296784][ T5923] dvb-usb: error while querying for an remote control event. [ 638.405567][ T5923] m920x_read = error: -19 [ 638.405599][ T5923] dvb-usb: error while querying for an remote control event. [ 638.425289][ T9] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 638.464397][T15152] loop5: detected capacity change from 0 to 6 [ 638.478351][T15152] Dev loop5: unable to read RDB block 6 [ 638.478611][T15152] loop5: AHDI p1 p2 [ 638.478635][T15152] loop5: partition table partially beyond EOD, truncated [ 638.479341][T15152] loop5: p1 start 1702059890 is beyond EOD, truncated [ 638.517436][ T5923] m920x_read = error: -19 [ 638.517469][ T5923] dvb-usb: error while querying for an remote control event. [ 638.570118][T15136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3339'. [ 638.570194][T15136] nbd: must specify a size in bytes for the device [ 638.630321][ T5923] m920x_read = error: -19 [ 638.630387][ T5923] dvb-usb: error while querying for an remote control event. [ 638.663209][ T5922] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 638.663571][ T5922] asix 1-1:0.188: probe with driver asix failed with error -71 [ 638.675558][ T5922] usb 1-1: USB disconnect, device number 9 [ 638.826352][ T5923] m920x_read = error: -19 [ 638.826383][ T5923] dvb-usb: error while querying for an remote control event. [ 638.937583][ T5923] m920x_read = error: -19 [ 638.937616][ T5923] dvb-usb: error while querying for an remote control event. [ 639.045768][ T5712] m920x_read = error: -19 [ 639.045800][ T5712] dvb-usb: error while querying for an remote control event. [ 639.075297][ T5923] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 639.155430][T12024] m920x_read = error: -19 [ 639.155451][T12024] dvb-usb: error while querying for an remote control event. [ 639.229143][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 639.231878][ T38] audit: type=1326 audit(1780791965.863:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15170 comm="syz.3.3348" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f9af1adce59 code=0x0 [ 639.232075][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.236228][ T5923] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 639.236259][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.236280][ T5923] usb 2-1: Product: syz [ 639.236295][ T5923] usb 2-1: Manufacturer: syz [ 639.236309][ T5923] usb 2-1: SerialNumber: syz [ 639.248492][ T5923] usb 2-1: config 0 descriptor?? [ 639.262555][ T5923] asix 2-1:0.0: probe with driver asix failed with error -22 [ 639.273337][T12024] m920x_read = error: -19 [ 639.273364][T12024] dvb-usb: error while querying for an remote control event. [ 639.375526][ T5923] m920x_read = error: -19 [ 639.375561][ T5923] dvb-usb: error while querying for an remote control event. [ 639.412097][T15177] loop5: detected capacity change from 0 to 6 [ 639.419410][T15177] Dev loop5: unable to read RDB block 6 [ 639.419456][T15177] loop5: unable to read partition table [ 639.419667][T15177] loop5: partition table beyond EOD, truncated [ 639.419700][T15177] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 639.479457][T15154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.480172][T15154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.485721][ T5712] m920x_read = error: -19 [ 639.485748][ T5712] dvb-usb: error while querying for an remote control event. [ 639.487572][T12024] usb 2-1: USB disconnect, device number 43 [ 639.595439][ T5712] m920x_read = error: -19 [ 639.595470][ T5712] dvb-usb: error while querying for an remote control event. [ 639.705909][ T5923] m920x_read = error: -19 [ 639.705943][ T5923] dvb-usb: error while querying for an remote control event. [ 639.744874][T15185] loop5: detected capacity change from 0 to 6 [ 639.749951][T15185] Dev loop5: unable to read RDB block 6 [ 639.749996][T15185] loop5: unable to read partition table [ 639.750206][T15185] loop5: partition table beyond EOD, truncated [ 639.752628][T15185] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 639.802881][T15189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3355'. [ 639.817239][ T5923] m920x_read = error: -19 [ 639.817272][ T5923] dvb-usb: error while querying for an remote control event. [ 639.928125][T12024] m920x_read = error: -19 [ 639.928156][T12024] dvb-usb: error while querying for an remote control event. [ 640.049241][ T5712] m920x_read = error: -19 [ 640.049272][ T5712] dvb-usb: error while querying for an remote control event. [ 640.050575][T15198] loop5: detected capacity change from 0 to 6 [ 640.053347][T15198] Dev loop5: unable to read RDB block 6 [ 640.053393][T15198] loop5: unable to read partition table [ 640.054062][T15198] loop5: partition table beyond EOD, truncated [ 640.054128][T15198] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 640.170633][T12024] m920x_read = error: -19 [ 640.170656][T12024] dvb-usb: error while querying for an remote control event. [ 640.291327][T12024] m920x_read = error: -19 [ 640.291360][T12024] dvb-usb: error while querying for an remote control event. [ 640.324287][T15205] loop5: detected capacity change from 0 to 6 [ 640.349706][T15205] Dev loop5: unable to read RDB block 6 [ 640.349733][T15205] loop5: AHDI p1 p2 [ 640.349747][T15205] loop5: partition table partially beyond EOD, truncated [ 640.349986][T15205] loop5: p1 start 1702059890 is beyond EOD, truncated [ 640.397263][T12024] m920x_read = error: -19 [ 640.397293][T12024] dvb-usb: error while querying for an remote control event. [ 640.518568][T12024] m920x_read = error: -19 [ 640.518588][T12024] dvb-usb: error while querying for an remote control event. [ 640.629255][T12024] m920x_read = error: -19 [ 640.629285][T12024] dvb-usb: error while querying for an remote control event. [ 640.738194][T12024] m920x_read = error: -19 [ 640.738225][T12024] dvb-usb: error while querying for an remote control event. [ 640.741487][T15218] loop5: detected capacity change from 0 to 6 [ 640.744918][T15218] Dev loop5: unable to read RDB block 6 [ 640.744965][T15218] loop5: unable to read partition table [ 640.765540][T15218] loop5: partition table beyond EOD, truncated [ 640.765585][T15218] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 640.845803][T12024] m920x_read = error: -19 [ 640.845834][T12024] dvb-usb: error while querying for an remote control event. [ 640.968617][T12024] m920x_read = error: -19 [ 640.968647][T12024] dvb-usb: error while querying for an remote control event. [ 640.972113][T15222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3369'. [ 641.075453][T12024] m920x_read = error: -19 [ 641.075473][T12024] dvb-usb: error while querying for an remote control event. [ 641.185627][ T5712] m920x_read = error: -19 [ 641.185661][ T5712] dvb-usb: error while querying for an remote control event. [ 641.293390][T15235] loop5: detected capacity change from 0 to 6 [ 641.297502][ T5712] m920x_read = error: -19 [ 641.297529][ T5712] dvb-usb: error while querying for an remote control event. [ 641.314090][T15235] Dev loop5: unable to read RDB block 6 [ 641.314140][T15235] loop5: unable to read partition table [ 641.314379][T15235] loop5: partition table beyond EOD, truncated [ 641.314415][T15235] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 641.358371][T12024] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 641.405435][ T5923] m920x_read = error: -19 [ 641.405456][ T5923] dvb-usb: error while querying for an remote control event. [ 641.485321][T12024] usb 2-1: device descriptor read/64, error -71 [ 641.505389][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 641.518014][ T5923] m920x_read = error: -19 [ 641.518041][ T5923] dvb-usb: error while querying for an remote control event. [ 641.544344][T15247] loop5: detected capacity change from 0 to 6 [ 641.554677][T15247] Dev loop5: unable to read RDB block 6 [ 641.554724][T15247] loop5: unable to read partition table [ 641.554969][T15247] loop5: partition table beyond EOD, truncated [ 641.555026][T15247] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 641.626602][ T5923] m920x_read = error: -19 [ 641.626622][ T5923] dvb-usb: error while querying for an remote control event. [ 641.677363][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 641.677400][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.677423][ T9] usb 4-1: Product: syz [ 641.677440][ T9] usb 4-1: Manufacturer: syz [ 641.677457][ T9] usb 4-1: SerialNumber: syz [ 641.726226][T12024] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 641.729202][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 641.735604][ T5712] m920x_read = error: -19 [ 641.735635][ T5712] dvb-usb: error while querying for an remote control event. [ 641.790197][ T5705] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 641.845512][ T5712] m920x_read = error: -19 [ 641.845543][ T5712] dvb-usb: error while querying for an remote control event. [ 641.856939][T12024] usb 2-1: device descriptor read/64, error -71 [ 641.956433][ T5712] m920x_read = error: -19 [ 641.956464][ T5712] dvb-usb: error while querying for an remote control event. [ 641.965590][T12024] usb usb2-port1: attempt power cycle [ 641.995607][T15231] netlink: 'syz.3.3374': attribute type 9 has an invalid length. [ 641.995632][T15231] netlink: 'syz.3.3374': attribute type 2 has an invalid length. [ 642.065807][ T5923] m920x_read = error: -19 [ 642.065838][ T5923] dvb-usb: error while querying for an remote control event. [ 642.175461][ T5923] m920x_read = error: -19 [ 642.175494][ T5923] dvb-usb: error while querying for an remote control event. [ 642.214720][ T5923] usb 4-1: USB disconnect, device number 41 [ 642.287194][ T5922] m920x_read = error: -19 [ 642.287228][ T5922] dvb-usb: error while querying for an remote control event. [ 642.295874][ T5712] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 642.305312][T12024] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 642.325914][T12024] usb 2-1: device descriptor read/8, error -71 [ 642.395540][ T5922] m920x_read = error: -19 [ 642.395574][ T5922] dvb-usb: error while querying for an remote control event. [ 642.445233][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 642.448262][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 642.449435][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.449502][ T5712] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 642.452167][ T5712] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 642.452195][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.452215][ T5712] usb 1-1: Product: syz [ 642.452224][ T5712] usb 1-1: Manufacturer: syz [ 642.452233][ T5712] usb 1-1: SerialNumber: syz [ 642.507693][ T32] m920x_read = error: -19 [ 642.507778][ T32] dvb-usb: error while querying for an remote control event. [ 642.565383][T12024] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 642.588745][T12024] usb 2-1: device descriptor read/8, error -71 [ 642.615428][ T32] m920x_read = error: -19 [ 642.615451][ T32] dvb-usb: error while querying for an remote control event. [ 642.713215][T12024] usb usb2-port1: unable to enumerate USB device [ 642.725668][T12024] m920x_read = error: -19 [ 642.725698][T12024] dvb-usb: error while querying for an remote control event. [ 642.836343][T12024] m920x_read = error: -19 [ 642.836433][T12024] dvb-usb: error while querying for an remote control event. [ 642.915734][ T5705] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 642.945526][T12024] m920x_read = error: -19 [ 642.945565][T12024] dvb-usb: error while querying for an remote control event. [ 643.035713][ T5705] ath9k_htc: Failed to initialize the device [ 643.036621][ T5923] usb 4-1: ath9k_htc: USB layer deinitialized [ 643.058896][T12024] m920x_read = error: -19 [ 643.059156][T12024] dvb-usb: error while querying for an remote control event. [ 643.167236][T12024] m920x_read = error: -19 [ 643.167258][T12024] dvb-usb: error while querying for an remote control event. [ 643.275549][T12024] m920x_read = error: -19 [ 643.275583][T12024] dvb-usb: error while querying for an remote control event. [ 643.385688][ T5923] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 643.386299][T12024] m920x_read = error: -19 [ 643.386325][T12024] dvb-usb: error while querying for an remote control event. [ 643.495465][T12024] m920x_read = error: -19 [ 643.495744][T12024] dvb-usb: error while querying for an remote control event. [ 643.540040][ T5923] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 643.540299][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 643.540340][ T5923] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 643.540360][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.569875][ T5923] usb 4-1: config 0 descriptor?? [ 643.592218][T15269] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3388'. [ 643.616809][T12024] m920x_read = error: -19 [ 643.616831][T12024] dvb-usb: error while querying for an remote control event. [ 643.726360][ T32] m920x_read = error: -19 [ 643.726442][ T32] dvb-usb: error while querying for an remote control event. [ 643.836184][ T32] m920x_read = error: -19 [ 643.836206][ T32] dvb-usb: error while querying for an remote control event. [ 643.895295][ T5922] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 643.945339][ T32] m920x_read = error: -19 [ 643.945361][ T32] dvb-usb: error while querying for an remote control event. [ 644.052016][ T5922] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 644.052042][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.052055][ T5922] usb 3-1: Product: syz [ 644.052065][ T5922] usb 3-1: Manufacturer: syz [ 644.052075][ T5922] usb 3-1: SerialNumber: syz [ 644.056372][ T32] m920x_read = error: -19 [ 644.056533][ T32] dvb-usb: error while querying for an remote control event. [ 644.104678][ T5922] usb 3-1: config 0 descriptor?? [ 644.138181][ T5922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 644.165351][ T32] m920x_read = error: -19 [ 644.165434][ T32] dvb-usb: error while querying for an remote control event. [ 644.227514][ T5923] usbhid 4-1:0.0: can't add hid device: -71 [ 644.227794][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 644.262707][ T5923] usb 4-1: USB disconnect, device number 42 [ 644.276280][ T32] m920x_read = error: -19 [ 644.276300][ T32] dvb-usb: error while querying for an remote control event. [ 644.385422][ T32] m920x_read = error: -19 [ 644.385519][ T32] dvb-usb: error while querying for an remote control event. [ 644.496562][ T5923] m920x_read = error: -19 [ 644.496583][ T5923] dvb-usb: error while querying for an remote control event. [ 644.605347][ T5923] m920x_read = error: -19 [ 644.605422][ T5923] dvb-usb: error while querying for an remote control event. [ 644.716213][ T32] m920x_read = error: -19 [ 644.716235][ T32] dvb-usb: error while querying for an remote control event. [ 644.793115][T15275] loop5: detected capacity change from 0 to 6 [ 644.808429][T15275] Dev loop5: unable to read RDB block 6 [ 644.808462][T15275] loop5: unable to read partition table [ 644.808647][T15275] loop5: partition table beyond EOD, truncated [ 644.808743][T15275] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 644.825814][ T32] m920x_read = error: -19 [ 644.825916][ T32] dvb-usb: error while querying for an remote control event. [ 644.936210][ T32] m920x_read = error: -19 [ 644.936807][ T32] dvb-usb: error while querying for an remote control event. [ 645.087969][ T32] m920x_read = error: -19 [ 645.087991][ T32] dvb-usb: error while querying for an remote control event. [ 645.129230][T15277] loop5: detected capacity change from 0 to 6 [ 645.131761][T15277] Dev loop5: unable to read RDB block 6 [ 645.131797][T15277] loop5: AHDI p1 p2 [ 645.131829][T15277] loop5: partition table partially beyond EOD, truncated [ 645.143024][T15277] loop5: p1 start 1702059890 is beyond EOD, truncated [ 645.198881][ T32] m920x_read = error: -19 [ 645.198950][ T32] dvb-usb: error while querying for an remote control event. [ 645.306869][ T32] m920x_read = error: -19 [ 645.306901][ T32] dvb-usb: error while querying for an remote control event. [ 645.419822][ T32] m920x_read = error: -19 [ 645.419918][ T32] dvb-usb: error while querying for an remote control event. [ 645.453965][ T5712] snd-ua101 1-1:1.1: invalid num_altsetting [ 645.454456][ T5712] snd-ua101 1-1:1.0: invalid num_altsetting [ 645.538310][ T32] m920x_read = error: -19 [ 645.538351][ T32] dvb-usb: error while querying for an remote control event. [ 645.649876][ T5923] m920x_read = error: -19 [ 645.650143][ T5923] dvb-usb: error while querying for an remote control event. [ 645.673212][T15289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3396'. [ 645.744182][ T5712] usb 1-1: USB disconnect, device number 10 [ 645.755862][ T5923] m920x_read = error: -19 [ 645.755882][ T5923] dvb-usb: error while querying for an remote control event. [ 645.974874][T12024] m920x_read = error: -19 [ 645.974896][T12024] dvb-usb: error while querying for an remote control event. [ 646.076160][T12024] m920x_read = error: -19 [ 646.076191][T12024] dvb-usb: error while querying for an remote control event. [ 646.186035][T12024] m920x_read = error: -19 [ 646.186133][T12024] dvb-usb: error while querying for an remote control event. [ 646.245412][ T9] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 646.295651][T12024] m920x_read = error: -19 [ 646.295683][T12024] dvb-usb: error while querying for an remote control event. [ 646.307087][T15299] loop5: detected capacity change from 0 to 6 [ 646.311540][T15299] Dev loop5: unable to read RDB block 6 [ 646.311586][T15299] loop5: unable to read partition table [ 646.311895][T15299] loop5: partition table beyond EOD, truncated [ 646.311914][T15299] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 646.405600][ T5712] m920x_read = error: -19 [ 646.405907][ T5712] dvb-usb: error while querying for an remote control event. [ 646.429332][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.429397][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 646.429428][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 646.429458][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 646.429482][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 646.437165][ T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 646.437201][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 646.437225][ T9] usb 2-1: Product: syz [ 646.437241][ T9] usb 2-1: Manufacturer: syz [ 646.437257][ T9] usb 2-1: SerialNumber: syz [ 646.515520][ T5712] m920x_read = error: -19 [ 646.515550][ T5712] dvb-usb: error while querying for an remote control event. [ 646.524497][T15302] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3402'. [ 646.557138][ T9] usb 2-1: config 0 descriptor?? [ 646.625532][T12024] m920x_read = error: -19 [ 646.625609][T12024] dvb-usb: error while querying for an remote control event. [ 646.735597][ T5923] m920x_read = error: -19 [ 646.735628][ T5923] dvb-usb: error while querying for an remote control event. [ 646.764547][ T9] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 646.764853][ T9] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 646.816673][ T9] usb 2-1: USB disconnect, device number 48 [ 646.845504][ T5923] m920x_read = error: -19 [ 646.845803][ T5712] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 646.845922][ T5923] dvb-usb: error while querying for an remote control event. [ 646.955713][ T5923] m920x_read = error: -19 [ 646.955747][ T5923] dvb-usb: error while querying for an remote control event. [ 646.975348][ T5712] usb 4-1: device descriptor read/64, error -71 [ 647.067261][ T5923] m920x_read = error: -19 [ 647.067294][ T5923] dvb-usb: error while querying for an remote control event. [ 647.175563][ T5923] m920x_read = error: -19 [ 647.175774][ T5923] dvb-usb: error while querying for an remote control event. [ 647.215320][ T5712] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 647.299864][ T5923] m920x_read = error: -19 [ 647.299886][ T5923] dvb-usb: error while querying for an remote control event. [ 647.339128][T15306] fuse: Invalid rootmode [ 647.355391][ T5712] usb 4-1: device descriptor read/64, error -71 [ 647.405713][ T5923] m920x_read = error: -19 [ 647.405745][ T5923] dvb-usb: error while querying for an remote control event. [ 647.468814][ T5712] usb usb4-port1: attempt power cycle [ 647.515493][T12024] m920x_read = error: -19 [ 647.515567][T12024] dvb-usb: error while querying for an remote control event. [ 647.625545][T12024] m920x_read = error: -19 [ 647.625579][T12024] dvb-usb: error while querying for an remote control event. [ 647.695320][ T5923] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 647.736097][T12024] m920x_read = error: -19 [ 647.736119][T12024] dvb-usb: error while querying for an remote control event. [ 647.835299][ T5712] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 647.847349][ T5720] m920x_read = error: -19 [ 647.847378][ T5720] dvb-usb: error while querying for an remote control event. [ 647.850949][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 647.858149][ T5712] usb 4-1: device descriptor read/8, error -71 [ 647.861494][ T5923] usb 2-1: string descriptor 0 read error: -22 [ 647.861865][ T5923] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 647.861946][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.955446][ T5720] m920x_read = error: -19 [ 647.955528][ T5720] dvb-usb: error while querying for an remote control event. [ 647.988119][ T5922] gspca_stk1135: reg_w 0x1b err -71 [ 647.989228][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 647.989246][ T5922] gspca_stk1135: Sensor write failed [ 647.989275][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 647.989711][ T5922] gspca_stk1135: Sensor write failed [ 647.989744][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 647.990033][ T5922] gspca_stk1135: Sensor read failed [ 647.990067][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 647.990079][ T5922] gspca_stk1135: Sensor read failed [ 647.990087][ T5922] gspca_stk1135: Detected sensor type unknown (0x0) [ 647.990125][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 647.990548][ T5922] gspca_stk1135: Sensor read failed [ 647.990580][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 647.990593][ T5922] gspca_stk1135: Sensor read failed [ 647.990623][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 647.998084][ T5922] gspca_stk1135: Sensor write failed [ 647.998173][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 647.998186][ T5922] gspca_stk1135: Sensor write failed [ 647.998348][ T5922] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 648.016620][ T5922] usb 3-1: USB disconnect, device number 45 [ 648.077255][ T5720] m920x_read = error: -19 [ 648.077284][ T5720] dvb-usb: error while querying for an remote control event. [ 648.135970][ T5712] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 648.165032][ T5712] usb 4-1: device descriptor read/8, error -71 [ 648.189657][ T5720] m920x_read = error: -19 [ 648.189753][ T5720] dvb-usb: error while querying for an remote control event. [ 648.266137][ T5712] usb usb4-port1: unable to enumerate USB device [ 648.295508][ T5712] m920x_read = error: -19 [ 648.295544][ T5712] dvb-usb: error while querying for an remote control event. [ 648.405506][ T5922] m920x_read = error: -19 [ 648.405537][ T5922] dvb-usb: error while querying for an remote control event. [ 648.422747][T15316] loop5: detected capacity change from 0 to 6 [ 648.436091][T15310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.454296][T15316] Dev loop5: unable to read RDB block 6 [ 648.454344][T15316] loop5: unable to read partition table [ 648.454703][T15316] loop5: partition table beyond EOD, truncated [ 648.454794][T15316] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 648.469442][T15310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.521629][ T5922] m920x_read = error: -19 [ 648.521662][ T5922] dvb-usb: error while querying for an remote control event. [ 648.605251][T15318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3407'. [ 648.625436][ T5922] m920x_read = error: -19 [ 648.625524][ T5922] dvb-usb: error while querying for an remote control event. [ 648.694952][T15320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3408'. [ 648.735517][ T5922] m920x_read = error: -19 [ 648.735545][ T5922] dvb-usb: error while querying for an remote control event. [ 648.880687][ T5712] m920x_read = error: -19 [ 648.880717][ T5712] dvb-usb: error while querying for an remote control event. [ 648.894572][ T5923] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 648.894621][ T5923] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 648.986286][ T5922] m920x_read = error: -19 [ 648.986319][ T5922] dvb-usb: error while querying for an remote control event. [ 648.993996][ T5923] usb 2-1: USB disconnect, device number 49 [ 649.095512][ T5922] m920x_read = error: -19 [ 649.095544][ T5922] dvb-usb: error while querying for an remote control event. [ 649.205720][ T5922] m920x_read = error: -19 [ 649.205753][ T5922] dvb-usb: error while querying for an remote control event. [ 649.347483][ T5923] m920x_read = error: -19 [ 649.347507][ T5923] dvb-usb: error while querying for an remote control event. [ 649.459041][ T5923] m920x_read = error: -19 [ 649.459069][ T5923] dvb-usb: error while querying for an remote control event. [ 649.568519][ T5923] m920x_read = error: -19 [ 649.568549][ T5923] dvb-usb: error while querying for an remote control event. [ 649.587948][T15342] loop5: detected capacity change from 0 to 6 [ 649.595210][T15342] Dev loop5: unable to read RDB block 6 [ 649.595258][T15342] loop5: unable to read partition table [ 649.595502][T15342] loop5: partition table beyond EOD, truncated [ 649.595525][T15342] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 649.675853][ T5922] m920x_read = error: -19 [ 649.675882][ T5922] dvb-usb: error while querying for an remote control event. [ 649.756941][T15346] program syz.3.3418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 649.782903][T15349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3420'. [ 649.784958][T15346] Invalid source name [ 649.785866][ T5922] m920x_read = error: -19 [ 649.785891][ T5922] dvb-usb: error while querying for an remote control event. [ 649.835605][ T5923] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 649.898348][ T5922] m920x_read = error: -19 [ 649.898380][ T5922] dvb-usb: error while querying for an remote control event. [ 649.987933][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 649.987982][ T5923] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 649.988009][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.005475][ T5720] m920x_read = error: -19 [ 650.005518][ T5720] dvb-usb: error while querying for an remote control event. [ 650.007313][ T5923] usb 3-1: config 0 descriptor?? [ 650.056103][ T5712] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 650.117089][ T5720] m920x_read = error: -19 [ 650.117121][ T5720] dvb-usb: error while querying for an remote control event. [ 650.185362][ T5712] usb 2-1: device descriptor read/64, error -71 [ 650.225780][ T5720] m920x_read = error: -19 [ 650.225875][ T5720] dvb-usb: error while querying for an remote control event. [ 650.336489][T12024] m920x_read = error: -19 [ 650.336509][T12024] dvb-usb: error while querying for an remote control event. [ 650.425722][ T5712] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 650.432895][ T5923] logitech-djreceiver 0003:046D:C53A.001C: ignoring exceeding usage max [ 650.441414][ T5923] logitech-djreceiver 0003:046D:C53A.001C: reserved main item tag 0xe [ 650.441456][ T5923] logitech-djreceiver 0003:046D:C53A.001C: reserved main item tag 0xd [ 650.441483][ T5923] logitech-djreceiver 0003:046D:C53A.001C: unknown main item tag 0x1 [ 650.449007][T12024] m920x_read = error: -19 [ 650.449035][T12024] dvb-usb: error while querying for an remote control event. [ 650.450027][T15371] loop5: detected capacity change from 0 to 6 [ 650.454050][T15371] Dev loop5: unable to read RDB block 6 [ 650.454091][T15371] loop5: unable to read partition table [ 650.454296][T15371] loop5: partition table beyond EOD, truncated [ 650.454315][T15371] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 650.568583][ T5923] m920x_read = error: -19 [ 650.568615][ T5923] dvb-usb: error while querying for an remote control event. [ 650.571108][ T5712] usb 2-1: device descriptor read/64, error -71 [ 650.624718][T12024] usb 3-1: USB disconnect, device number 46 [ 650.660319][T15373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3432'. [ 650.675431][ T5923] m920x_read = error: -19 [ 650.675460][ T5923] dvb-usb: error while querying for an remote control event. [ 650.676594][ T5712] usb usb2-port1: attempt power cycle [ 650.785552][ T5923] m920x_read = error: -19 [ 650.785584][ T5923] dvb-usb: error while querying for an remote control event. [ 650.895512][ T5720] m920x_read = error: -19 [ 650.895534][ T5720] dvb-usb: error while querying for an remote control event. [ 650.939076][T15382] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 650.939151][T15382] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 650.941398][T15382] sg_write: data in/out 808464396/136 bytes for SCSI command 0x0-- guessing data in; [ 650.941398][T15382] program syz.0.3436 not setting count and/or reply_len properly [ 651.005476][T12024] m920x_read = error: -19 [ 651.005509][T12024] dvb-usb: error while querying for an remote control event. [ 651.016455][ T5712] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 651.036163][ T5712] usb 2-1: device descriptor read/8, error -71 [ 651.115765][ T5923] m920x_read = error: -19 [ 651.115786][ T5923] dvb-usb: error while querying for an remote control event. [ 651.185311][ T5720] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 651.225784][ T5923] m920x_read = error: -19 [ 651.225816][ T5923] dvb-usb: error while querying for an remote control event. [ 651.275386][ T5712] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 651.296029][ T5712] usb 2-1: device descriptor read/8, error -71 [ 651.315342][ T5720] usb 1-1: device descriptor read/64, error -71 [ 651.325721][T12024] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 651.335440][ T5923] m920x_read = error: -19 [ 651.335467][ T5923] dvb-usb: error while querying for an remote control event. [ 651.405679][ T5712] usb usb2-port1: unable to enumerate USB device [ 651.445478][ T5712] m920x_read = error: -19 [ 651.445499][ T5712] dvb-usb: error while querying for an remote control event. [ 651.477562][T12024] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 651.477597][T12024] usb 4-1: config 0 has no interface number 0 [ 651.477640][T12024] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 42349, setting to 64 [ 651.479309][T12024] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 651.479339][T12024] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 651.479356][T12024] usb 4-1: Manufacturer: syz [ 651.479366][T12024] usb 4-1: SerialNumber: syz [ 651.486947][T12024] usb 4-1: config 0 descriptor?? [ 651.514548][T15386] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 651.555665][ T5712] m920x_read = error: -19 [ 651.555730][ T5712] dvb-usb: error while querying for an remote control event. [ 651.555808][ T5720] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 651.667301][ T5712] m920x_read = error: -19 [ 651.667324][ T5712] dvb-usb: error while querying for an remote control event. [ 651.708616][ T5720] usb 1-1: device descriptor read/64, error -71 [ 651.742922][T12024] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 651.743110][T12024] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 651.773962][T12024] usb 4-1: USB disconnect, device number 47 [ 651.776492][ T5923] m920x_read = error: -19 [ 651.776518][ T5923] dvb-usb: error while querying for an remote control event. [ 651.820979][ T5720] usb usb1-port1: attempt power cycle [ 651.885599][ T5712] m920x_read = error: -19 [ 651.885622][ T5712] dvb-usb: error while querying for an remote control event. [ 651.995436][T12024] m920x_read = error: -19 [ 651.995469][T12024] dvb-usb: error while querying for an remote control event. [ 652.107168][T12024] m920x_read = error: -19 [ 652.107196][T12024] dvb-usb: error while querying for an remote control event. [ 652.165268][ T5720] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 652.186497][ T5720] usb 1-1: device descriptor read/8, error -71 [ 652.215506][ T5923] m920x_read = error: -19 [ 652.215538][ T5923] dvb-usb: error while querying for an remote control event. [ 652.325524][ T5923] m920x_read = error: -19 [ 652.325548][ T5923] dvb-usb: error while querying for an remote control event. [ 652.435631][ T5923] m920x_read = error: -19 [ 652.435664][ T5923] dvb-usb: error while querying for an remote control event. [ 652.486597][ T5720] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 652.511518][ T5720] usb 1-1: device descriptor read/8, error -71 [ 652.545553][ T5923] m920x_read = error: -19 [ 652.545584][ T5923] dvb-usb: error while querying for an remote control event. [ 652.616001][ T5720] usb usb1-port1: unable to enumerate USB device [ 652.655390][ T5720] m920x_read = error: -19 [ 652.655419][ T5720] dvb-usb: error while querying for an remote control event. [ 652.767606][ T5720] m920x_read = error: -19 [ 652.767625][ T5720] dvb-usb: error while querying for an remote control event. [ 652.811713][T15398] loop5: detected capacity change from 0 to 6 [ 652.812800][T15398] Dev loop5: unable to read RDB block 6 [ 652.812846][T15398] loop5: unable to read partition table [ 652.813060][T15398] loop5: partition table beyond EOD, truncated [ 652.813084][T15398] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 652.875462][ T5720] m920x_read = error: -19 [ 652.875492][ T5720] dvb-usb: error while querying for an remote control event. [ 652.989323][ T5720] m920x_read = error: -19 [ 652.989350][ T5720] dvb-usb: error while querying for an remote control event. [ 653.097916][T12024] m920x_read = error: -19 [ 653.097946][T12024] dvb-usb: error while querying for an remote control event. [ 653.218514][T12024] m920x_read = error: -19 [ 653.218544][T12024] dvb-usb: error while querying for an remote control event. [ 653.302888][T15411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3449'. [ 653.325557][T12024] m920x_read = error: -19 [ 653.325587][T12024] dvb-usb: error while querying for an remote control event. [ 653.438152][ T5720] m920x_read = error: -19 [ 653.438184][ T5720] dvb-usb: error while querying for an remote control event. [ 653.522529][T15422] nbd: couldn't find a device at index 4194308 [ 653.546422][ T5720] m920x_read = error: -19 [ 653.546454][ T5720] dvb-usb: error while querying for an remote control event. [ 653.573413][T15424] loop5: detected capacity change from 0 to 6 [ 653.574559][T15424] Dev loop5: unable to read RDB block 6 [ 653.574605][T15424] loop5: unable to read partition table [ 653.574837][T15424] loop5: partition table beyond EOD, truncated [ 653.574875][T15424] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 653.595280][T12024] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 653.648826][ T38] audit: type=1326 audit(1780791980.303:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.1.3455" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba66c4ce59 code=0x0 [ 653.657378][ T5720] m920x_read = error: -19 [ 653.657405][ T5720] dvb-usb: error while querying for an remote control event. [ 653.702760][T15428] netlink: 'syz.1.3455': attribute type 5 has an invalid length. [ 653.748348][T12024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.748388][T12024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.748431][T12024] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 653.748457][T12024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.772134][T12024] usb 4-1: config 0 descriptor?? [ 653.772785][ T5720] m920x_read = error: -19 [ 653.772808][ T5720] dvb-usb: error while querying for an remote control event. [ 653.830763][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3456'. [ 653.880404][ T5720] m920x_read = error: -19 [ 653.880425][ T5720] dvb-usb: error while querying for an remote control event. [ 653.986828][ T5720] m920x_read = error: -19 [ 653.986856][ T5720] dvb-usb: error while querying for an remote control event. [ 654.095588][ T5923] m920x_read = error: -19 [ 654.095621][ T5923] dvb-usb: error while querying for an remote control event. [ 654.104832][T15438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3460'. [ 654.209206][T12024] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 654.214493][ T5720] m920x_read = error: -19 [ 654.214525][ T5720] dvb-usb: error while querying for an remote control event. [ 654.234737][T12024] cp2112 0003:10C4:EA90.001D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 654.315504][ T5720] m920x_read = error: -19 [ 654.315525][ T5720] dvb-usb: error while querying for an remote control event. [ 654.386868][T12024] cp2112 0003:10C4:EA90.001D: Part Number: 0x82 Device Version: 0xFE [ 654.425528][ T5720] m920x_read = error: -19 [ 654.425625][ T5720] dvb-usb: error while querying for an remote control event. [ 654.535569][ T5720] m920x_read = error: -19 [ 654.535660][ T5720] dvb-usb: error while querying for an remote control event. [ 654.645501][ T5720] m920x_read = error: -19 [ 654.645522][ T5720] dvb-usb: error while querying for an remote control event. [ 654.738119][T13249] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 654.757205][T15450] loop5: detected capacity change from 0 to 6 [ 654.759370][T15450] Dev loop5: unable to read RDB block 6 [ 654.759403][T15450] loop5: AHDI p1 p2 [ 654.759425][T15450] loop5: partition table partially beyond EOD, truncated [ 654.759541][ T5720] m920x_read = error: -19 [ 654.759567][ T5720] dvb-usb: error while querying for an remote control event. [ 654.759675][T15450] loop5: p1 start 1702059890 is beyond EOD, truncated [ 654.827871][T15452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3466'. [ 654.865542][T13249] usb 1-1: device descriptor read/64, error -71 [ 654.865627][ T5720] m920x_read = error: -19 [ 654.865652][ T5720] dvb-usb: error while querying for an remote control event. [ 654.975654][ T5720] m920x_read = error: -19 [ 654.975685][ T5720] dvb-usb: error while querying for an remote control event. [ 654.979133][T12024] cp2112 0003:10C4:EA90.001D: error setting SMBus config [ 655.030371][T12024] cp2112 0003:10C4:EA90.001D: probe with driver cp2112 failed with error -71 [ 655.058379][T12024] usb 4-1: USB disconnect, device number 48 [ 655.085389][ T5712] m920x_read = error: -19 [ 655.085427][ T5712] dvb-usb: error while querying for an remote control event. [ 655.105364][T13249] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 655.138736][T15458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3469'. [ 655.195595][ T5712] m920x_read = error: -19 [ 655.195617][ T5712] dvb-usb: error while querying for an remote control event. [ 655.243479][T15465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3471'. [ 655.246292][T13249] usb 1-1: device descriptor read/64, error -71 [ 655.305444][T12024] m920x_read = error: -19 [ 655.305477][T12024] dvb-usb: error while querying for an remote control event. [ 655.375455][T13249] usb usb1-port1: attempt power cycle [ 655.430259][ T5712] m920x_read = error: -19 [ 655.430288][ T5712] dvb-usb: error while querying for an remote control event. [ 655.535356][ T5712] m920x_read = error: -19 [ 655.535385][ T5712] dvb-usb: error while querying for an remote control event. [ 655.585230][T12024] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 655.647795][ T5712] m920x_read = error: -19 [ 655.647890][ T5712] dvb-usb: error while querying for an remote control event. [ 655.745324][T13249] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 655.756043][ T5712] m920x_read = error: -19 [ 655.756070][ T5712] dvb-usb: error while querying for an remote control event. [ 655.781274][T13249] usb 1-1: device descriptor read/8, error -71 [ 655.865536][ T5712] m920x_read = error: -19 [ 655.865556][ T5712] dvb-usb: error while querying for an remote control event. [ 655.923488][T15481] loop5: detected capacity change from 0 to 6 [ 655.969341][T15481] Dev loop5: unable to read RDB block 6 [ 655.969367][T15481] loop5: AHDI p1 p2 [ 655.969589][T15481] loop5: partition table partially beyond EOD, truncated [ 655.970536][T15481] loop5: p1 start 1702059890 is beyond EOD, truncated [ 655.975655][ T5712] m920x_read = error: -19 [ 655.975681][ T5712] dvb-usb: error while querying for an remote control event. [ 656.065487][T13249] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 656.086208][T13249] usb 1-1: device descriptor read/8, error -71 [ 656.087222][ T5712] m920x_read = error: -19 [ 656.087239][ T5712] dvb-usb: error while querying for an remote control event. [ 656.199198][ T5712] m920x_read = error: -19 [ 656.199219][ T5712] dvb-usb: error while querying for an remote control event. [ 656.216445][T13249] usb usb1-port1: unable to enumerate USB device [ 656.305704][ T5712] m920x_read = error: -19 [ 656.305723][ T5712] dvb-usb: error while querying for an remote control event. [ 656.343912][T15483] batadv_slave_0: entered promiscuous mode [ 656.368682][T15482] batadv_slave_0: left promiscuous mode [ 656.415364][ T5712] m920x_read = error: -19 [ 656.415385][ T5712] dvb-usb: error while querying for an remote control event. [ 656.522859][T15485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3479'. [ 656.526167][ T5712] m920x_read = error: -19 [ 656.526195][ T5712] dvb-usb: error while querying for an remote control event. [ 656.635405][ T5712] m920x_read = error: -19 [ 656.635502][ T5712] dvb-usb: error while querying for an remote control event. [ 656.752775][ T5712] m920x_read = error: -19 [ 656.752795][ T5712] dvb-usb: error while querying for an remote control event. [ 656.855436][ T5712] m920x_read = error: -19 [ 656.855530][ T5712] dvb-usb: error while querying for an remote control event. [ 656.965614][ T5712] m920x_read = error: -19 [ 656.965647][ T5712] dvb-usb: error while querying for an remote control event. [ 657.044294][T15494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3483'. [ 657.081636][ T5923] m920x_read = error: -19 [ 657.081742][ T5923] dvb-usb: error while querying for an remote control event. [ 657.151240][ T38] audit: type=1800 audit(1780791983.793:81): pid=15496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3484" name="file0" dev="tmpfs" ino=1149 res=0 errno=0 [ 657.151754][T15497] fuse: Bad value for 'user_id' [ 657.151769][T15497] fuse: Bad value for 'user_id' [ 657.185887][ T5712] m920x_read = error: -19 [ 657.185917][ T5712] dvb-usb: error while querying for an remote control event. [ 657.295367][ T5712] m920x_read = error: -19 [ 657.295388][ T5712] dvb-usb: error while querying for an remote control event. [ 657.439326][ T5712] m920x_read = error: -19 [ 657.439359][ T5712] dvb-usb: error while querying for an remote control event. [ 657.572809][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 657.572903][ T5923] m920x_read = error: -19 [ 657.572957][ T5923] dvb-usb: error while querying for an remote control event. [ 657.678503][ T5712] m920x_read = error: -19 [ 657.678524][ T5712] dvb-usb: error while querying for an remote control event. [ 657.727505][T15505] loop5: detected capacity change from 0 to 6 [ 657.744329][T15505] Dev loop5: unable to read RDB block 6 [ 657.744363][T15505] loop5: AHDI p1 p2 [ 657.744386][T15505] loop5: partition table partially beyond EOD, truncated [ 657.744640][T15505] loop5: p1 start 1702059890 is beyond EOD, truncated [ 657.787466][ T5712] m920x_read = error: -19 [ 657.787497][ T5712] dvb-usb: error while querying for an remote control event. [ 657.895415][ T5712] m920x_read = error: -19 [ 657.895437][ T5712] dvb-usb: error while querying for an remote control event. [ 658.005885][ T5923] m920x_read = error: -19 [ 658.005916][ T5923] dvb-usb: error while querying for an remote control event. [ 658.115669][ T5720] m920x_read = error: -19 [ 658.115772][ T5720] dvb-usb: error while querying for an remote control event. [ 658.185503][ T5712] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 658.229003][ T5720] m920x_read = error: -19 [ 658.229093][ T5720] dvb-usb: error while querying for an remote control event. [ 658.335574][ T5720] m920x_read = error: -19 [ 658.335603][ T5720] dvb-usb: error while querying for an remote control event. [ 658.335723][ T5712] usb 4-1: Using ep0 maxpacket: 16 [ 658.423808][ T5712] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 113, changing to 7 [ 658.446490][ T5720] m920x_read = error: -19 [ 658.446518][ T5720] dvb-usb: error while querying for an remote control event. [ 658.456276][ T5712] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 658.456375][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.456397][ T5712] usb 4-1: Product: и [ 658.456411][ T5712] usb 4-1: Manufacturer: ࠬ [ 658.456426][ T5712] usb 4-1: SerialNumber: 㠁 [ 658.555396][ T5720] m920x_read = error: -19 [ 658.555416][ T5720] dvb-usb: error while querying for an remote control event. [ 658.607001][ T5705] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 658.669267][ T5720] m920x_read = error: -19 [ 658.669288][ T5720] dvb-usb: error while querying for an remote control event. [ 658.767634][ T5705] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 658.767668][ T5705] usb 1-1: config 5 has no interface number 0 [ 658.767717][ T5705] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 658.767749][ T5705] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 658.767775][ T5705] usb 1-1: config 5 interface 123 has no altsetting 0 [ 658.784606][ T5720] m920x_read = error: -19 [ 658.784633][ T5720] dvb-usb: error while querying for an remote control event. [ 658.797731][ T5712] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 658.809221][ T5712] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 658.835394][ T5705] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 658.835431][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.835456][ T5705] usb 1-1: Product: syz [ 658.835472][ T5705] usb 1-1: Manufacturer: syz [ 658.835489][ T5705] usb 1-1: SerialNumber: syz [ 658.885347][ T5720] m920x_read = error: -19 [ 658.885376][ T5720] dvb-usb: error while querying for an remote control event. [ 658.995474][ T5720] m920x_read = error: -19 [ 658.995505][ T5720] dvb-usb: error while querying for an remote control event. [ 659.105469][ T5720] m920x_read = error: -19 [ 659.105493][ T5720] dvb-usb: error while querying for an remote control event. [ 659.216330][ T5923] m920x_read = error: -19 [ 659.216361][ T5923] dvb-usb: error while querying for an remote control event. [ 659.219064][ T5712] usb 4-1: USB disconnect, device number 49 [ 659.321217][T15517] ================================================================== [ 659.321303][T15517] BUG: KASAN: slab-use-after-free in clear_tfile_check_list[ 659.321303][T15517] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380 [ 659.321373][T15517] Read of size 8 at addr ffff88802a69e7c8 by task syz.1.3491/15517 [ 659.321394][T15517] [ 659.321419][T15517] CPU: 1 UID: 0 PID: 15517 Comm: syz.1.3491 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 659.321460][T15517] Tainted: [L]=SOFTLOCKUP [ 659.321470][T15517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 659.321485][T15517] Call Trace: [ 659.321495][T15517] [ 659.321506][T15517] dump_stack_lvl+0xe8/0x150 [ 659.321536][T15517] print_address_description+0x55/0x1e0 [ 659.321568][T15517] ? clear_tfile_check_list+0x114/0x380 [ 659.321601][T15517] print_report+0x58/0x70 [ 659.321630][T15517] kasan_report+0x117/0x150 [ 659.321662][T15517] ? clear_tfile_check_list+0x114/0x380 [ 659.321700][T15517] clear_tfile_check_list+0x114/0x380 [ 659.321733][T15517] ? clear_tfile_check_list+0x22/0x380 [ 659.321769][T15517] do_epoll_ctl_file+0x8fd/0xed0 [ 659.321801][T15517] ? do_epoll_ctl_file+0xac3/0xed0 [ 659.321833][T15517] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 659.321875][T15517] ? __fget_files+0x3a6/0x420 [ 659.321901][T15517] ? __fget_files+0x2a/0x420 [ 659.321931][T15517] __se_sys_epoll_ctl+0x14e/0x210 [ 659.321960][T15517] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 659.321993][T15517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.322017][T15517] do_syscall_64+0x174/0x580 [ 659.322051][T15517] ? trace_irq_disable+0x3b/0x140 [ 659.322077][T15517] ? clear_bhb_loop+0x40/0x90 [ 659.322103][T15517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.322126][T15517] RIP: 0033:0x7fba66c4ce59 [ 659.322148][T15517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.322175][T15517] RSP: 002b:00007fba64e64028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 659.322202][T15517] RAX: ffffffffffffffda RBX: 00007fba66ec6180 RCX: 00007fba66c4ce59 [ 659.322221][T15517] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000008 [ 659.322236][T15517] RBP: 00007fba66ce2d6f R08: 0000000000000000 R09: 0000000000000000 [ 659.322252][T15517] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.322269][T15517] R13: 00007fba66ec6218 R14: 00007fba66ec6180 R15: 00007ffea6c18668 [ 659.322295][T15517] [ 659.322304][T15517] [ 659.322310][T15517] Allocated by task 15516: [ 659.322352][T15517] kasan_save_track+0x3e/0x80 [ 659.322375][T15517] __kasan_slab_alloc+0x6c/0x80 [ 659.322400][T15517] kmem_cache_alloc_noprof+0x33b/0x680 [ 659.322424][T15517] ep_insert+0x512/0x1820 [ 659.322450][T15517] do_epoll_ctl_file+0x8bb/0xed0 [ 659.322477][T15517] __se_sys_epoll_ctl+0x14e/0x210 [ 659.322504][T15517] do_syscall_64+0x174/0x580 [ 659.322535][T15517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.322556][T15517] [ 659.322562][T15517] Freed by task 15516: [ 659.322573][T15517] kasan_save_track+0x3e/0x80 [ 659.322595][T15517] kasan_save_free_info+0x46/0x50 [ 659.322626][T15517] __kasan_slab_free+0x5c/0x80 [ 659.322648][T15517] kmem_cache_free+0x187/0x6c0 [ 659.322673][T15517] eventpoll_release_file+0xc2/0x240 [ 659.322700][T15517] __fput+0x83c/0xa70 [ 659.322721][T15517] task_work_run+0x1d9/0x270 [ 659.322745][T15517] get_signal+0x11eb/0x1330 [ 659.322774][T15517] arch_do_signal_or_restart+0xbc/0x840 [ 659.322795][T15517] exit_to_user_mode_loop+0xa9/0x680 [ 659.322817][T15517] do_syscall_64+0x353/0x580 [ 659.322845][T15517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.322875][T15517] [ 659.322881][T15517] The buggy address belongs to the object at ffff88802a69e7c0 [ 659.322881][T15517] which belongs to the cache ep_head of size 16 [ 659.322910][T15517] The buggy address is located 8 bytes inside of [ 659.322910][T15517] freed 16-byte region [ffff88802a69e7c0, ffff88802a69e7d0) [ 659.322957][T15517] [ 659.322963][T15517] The buggy address belongs to the physical page: [ 659.322996][T15517] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a69e7e0 pfn:0x2a69e [ 659.323020][T15517] memcg:ffff888060830801 [ 659.323031][T15517] flags: 0x80000000000200(workingset|node=0|zone=1) [ 659.323049][T15517] page_type: f5(slab) [ 659.323072][T15517] raw: 0080000000000200 ffff888140aeadc0 ffff88801b322088 ffffea0000bd7010 [ 659.323094][T15517] raw: ffff88802a69e7e0 000000080080003b 00000000f5000000 ffff888060830801 [ 659.323106][T15517] page dumped because: kasan: bad access detected [ 659.323117][T15517] page_owner tracks the page as allocated [ 659.323126][T15517] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4984, tgid 4984 (udevd), ts 46611358341, free_ts 46608823624 [ 659.323166][T15517] post_alloc_hook+0x1f9/0x250 [ 659.323191][T15517] get_page_from_freelist+0x265c/0x26e0 [ 659.323220][T15517] __alloc_frozen_pages_noprof+0x18d/0x380 [ 659.323249][T15517] allocate_slab+0x74/0x5e0 [ 659.323279][T15517] refill_objects+0x33c/0x3d0 [ 659.323310][T15517] __pcs_replace_empty_main+0x373/0x720 [ 659.323344][T15517] kmem_cache_alloc_noprof+0x433/0x680 [ 659.323367][T15517] ep_insert+0x512/0x1820 [ 659.323392][T15517] do_epoll_ctl_file+0x8bb/0xed0 [ 659.323418][T15517] __se_sys_epoll_ctl+0x14e/0x210 [ 659.323443][T15517] do_syscall_64+0x174/0x580 [ 659.323473][T15517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.323494][T15517] page last free pid 4989 tgid 4989 stack trace: [ 659.323507][T15517] __free_frozen_pages+0x10af/0x1190 [ 659.323532][T15517] __slab_free+0x252/0x2a0 [ 659.323558][T15517] qlist_free_all+0x99/0x100 [ 659.323579][T15517] kasan_quarantine_reduce+0x148/0x160 [ 659.323602][T15517] __kasan_slab_alloc+0x22/0x80 [ 659.323626][T15517] __kmalloc_cache_noprof+0x338/0x690 [ 659.323652][T15517] kernfs_fop_open+0x39a/0xcb0 [ 659.323682][T15517] do_dentry_open+0x83d/0x13e0 [ 659.323703][T15517] vfs_open+0x3b/0x350 [ 659.323724][T15517] path_openat+0x2eea/0x3960 [ 659.323751][T15517] do_file_open+0x23e/0x4a0 [ 659.323780][T15517] do_sys_openat2+0x115/0x200 [ 659.323803][T15517] __x64_sys_openat+0x138/0x170 [ 659.323824][T15517] do_syscall_64+0x174/0x580 [ 659.323865][T15517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.323886][T15517] [ 659.323892][T15517] Memory state around the buggy address: [ 659.323905][T15517] ffff88802a69e680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 659.323922][T15517] ffff88802a69e700: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 659.323938][T15517] >ffff88802a69e780: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 659.323950][T15517] ^ [ 659.323963][T15517] ffff88802a69e800: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 659.323978][T15517] ffff88802a69e880: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 659.323990][T15517] ================================================================== [ 659.325434][ T5720] m920x_read = error: -19 [ 659.325458][ T5720] dvb-usb: error while querying for an remote control event. [ 659.339201][T15517] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 659.339228][T15517] CPU: 1 UID: 0 PID: 15517 Comm: syz.1.3491 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 659.339260][T15517] Tainted: [L]=SOFTLOCKUP [ 659.339269][T15517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 659.339282][T15517] Call Trace: [ 659.339300][T15517] [ 659.339310][T15517] vpanic+0x56c/0xa60 [ 659.339347][T15517] ? __pfx_vpanic+0x10/0x10 [ 659.339376][T15517] ? __pfx___schedule+0x10/0x10 [ 659.339405][T15517] panic+0xc5/0xd0 [ 659.339433][T15517] ? __pfx_panic+0x10/0x10 [ 659.339460][T15517] ? preempt_schedule_thunk+0x16/0x40 [ 659.339493][T15517] ? clear_tfile_check_list+0x114/0x380 [ 659.339522][T15517] check_panic_on_warn+0x89/0xb0 [ 659.339545][T15517] ? clear_tfile_check_list+0x114/0x380 [ 659.339573][T15517] end_report+0x73/0x170 [ 659.339597][T15517] ? clear_tfile_check_list+0x114/0x380 [ 659.339623][T15517] kasan_report+0x128/0x150 [ 659.339648][T15517] ? clear_tfile_check_list+0x114/0x380 [ 659.339679][T15517] clear_tfile_check_list+0x114/0x380 [ 659.339707][T15517] ? clear_tfile_check_list+0x22/0x380 [ 659.339737][T15517] do_epoll_ctl_file+0x8fd/0xed0 [ 659.339763][T15517] ? do_epoll_ctl_file+0xac3/0xed0 [ 659.339790][T15517] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 659.339817][T15517] ? __fget_files+0x3a6/0x420 [ 659.339840][T15517] ? __fget_files+0x2a/0x420 [ 659.339865][T15517] __se_sys_epoll_ctl+0x14e/0x210 [ 659.339893][T15517] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 659.339922][T15517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.339944][T15517] do_syscall_64+0x174/0x580 [ 659.339973][T15517] ? trace_irq_disable+0x3b/0x140 [ 659.339996][T15517] ? clear_bhb_loop+0x40/0x90 [ 659.340019][T15517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.340040][T15517] RIP: 0033:0x7fba66c4ce59 [ 659.340060][T15517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.340079][T15517] RSP: 002b:00007fba64e64028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 659.340103][T15517] RAX: ffffffffffffffda RBX: 00007fba66ec6180 RCX: 00007fba66c4ce59 [ 659.340120][T15517] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000008 [ 659.340133][T15517] RBP: 00007fba66ce2d6f R08: 0000000000000000 R09: 0000000000000000 [ 659.340146][T15517] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.340160][T15517] R13: 00007fba66ec6218 R14: 00007fba66ec6180 R15: 00007ffea6c18668 [ 659.340182][T15517] [ 659.340506][T15517] Kernel Offset: disabled