last executing test programs: 1m34.756303202s ago: executing program 2 (id=69): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='statm\x00') r3 = socket$inet6(0xa, 0x80003, 0x6) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000380)=r0) sendmmsg(r3, &(0x7f00000003c0), 0x0, 0xe0ff) syz_usb_disconnect(0xffffffffffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x400, 0x1000, 0x0, 0x1, 0x0, {0x5, 0x9, 0x3}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x1}, 0x1, 0x100, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20000, 0x0, 0x0, 0x0, 0x20, 0x1, 0x4}) readv(r2, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/238, 0xee}], 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e53270c30d04df71e91fa10", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl,directio,privport,directio,cachetag=task\x00,privport,posixacl,afid=0x0000000000000000,dont_appraise,silent,\x00']) 1m34.667353922s ago: executing program 2 (id=73): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc0100001900010025bd70000100000000000000000000000000c9ffff00000100000000000000000000000000000000000000000000000002"], 0x1fc}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000) 1m34.452648179s ago: executing program 2 (id=76): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640), 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000040000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) 1m33.616986252s ago: executing program 2 (id=79): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x22000, 0x0}, &(0x7f0000000240)="ffffffffffff", 0x0, 0x7, 0x0, 0x8000000, 0x0}) 1m33.38747504s ago: executing program 2 (id=81): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r2 = gettid() timer_create(0x3, &(0x7f0000000200)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000200)={0x2, 0xa, 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) close(0xffffffffffffffff) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r8, &(0x7f00000000c0)={&(0x7f0000000180)=@in6={0x2, 0x4e22, 0x0, @loopback}, 0x80, 0x0, 0x22, &(0x7f0000000000)=[@mark={{0xffffffffffffff67, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x109001, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x3) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x2c, 0xffffffffffbffff8) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) timer_delete(r3) tkill(r4, 0x13) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 1m29.623067954s ago: executing program 2 (id=91): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x4000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x9, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec00000021000100000000000000000afc020000000000000000000000000001fe80000000000000000000000000002000000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m14.553932121s ago: executing program 32 (id=91): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x4000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x9, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec00000021000100000000000000000afc020000000000000000000000000001fe80000000000000000000000000002000000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.809941125s ago: executing program 0 (id=468): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x73622a85, 0x100a, 0x0, 0xf0}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 6.580692129s ago: executing program 0 (id=471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c0004003a5f0021000000000c0003"], 0x30}, 0x1, 0x0, 0x0, 0x80001}, 0x0) 6.248392558s ago: executing program 0 (id=477): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "07017555d000", '\x00', "0500", '\x00', ["8ba859c7eaa817c478dcf6e9", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]}) 6.055578888s ago: executing program 0 (id=478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) setuid(0xee00) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0}, &(0x7f0000001380)=0xc) setreuid(r2, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) exit(0xa1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f00001ae000/0x2000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.624873729s ago: executing program 4 (id=480): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) mq_notify(r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) syz_open_dev$sg(0x0, 0x0, 0x28400) capset(0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0xa, 0x2070, 0x3, 0x4009, 0x2, 0x1, 0xfffd, 0x800, 0x8000, 0xfffc, 0x3800, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.282124678s ago: executing program 0 (id=485): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040026bd7000fd9bdf25040000004800078008000100040000000c00030006000000000000000c0004007f000000000000000c00030001000100000000000c000400f7ffffffffffffff0c000300ee07000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40080) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x2, r6, r3, 0x0, 0x0, 0xdead, 0xff8a, &(0x7f0000000240)}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) write(r0, &(0x7f00000000c0)="822a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x7, 0xd92ff, 0x6a05e}) 3.820403051s ago: executing program 0 (id=488): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x82018) 3.142586245s ago: executing program 3 (id=497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000480)="840000000000008cb0004002f4094919e8666abad6008f91d4f7ffffffc8e65cb6b25a26035fa62632eab670c401c35456e590b637375f44f874f47e", 0x3c}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x41, &(0x7f0000000000)=0x6, 0x4) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2030590000005923f14b30278199a90b174343f07b8eec4944fdeaea5e03f73df74b48665d9b4aaa5bf89e8e7bdce9def79ec1ddd5f20c141f093aaddb0994cf49a100471e6dcf42a5f83dfbd16bef73ade3ac07caa7e145d0219b47579fa0"], 0x0, 0x0, 0x0, 0x0}, &(0x7f00000008c0)={0xfffffffffffffd1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c93016001200050018010e00"], 0x1b) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000400)={{0x12, 0x1, 0x420, 0x0, 0x0, 0x0, 0x40, 0x499, 0x5006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x0, 0xb0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x2, 0xfb, 0x8001, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x1, 0x3, {0x7, 0x25, 0x1, 0x8, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xfff8, 0x2, 0x7, "201ee5ce"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0x9, 0x5, 'n]j'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x7f, 0x8, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xc, 0x1, 0x7, 0x2, 'R'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x0, 0xec, 'e'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x76, 0x7, 0x0, {0x7, 0x25, 0x1, 0xc, 0x3, 0x6}}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x151, 0xb, 0x2, 0x1, 0x10}, 0x104, &(0x7f0000000500)={0x5, 0xf, 0x104, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x7e, 0x3, 0x7, 0x0, 0x8, [0xff003f, 0xc03f, 0xf]}, @generic={0xcc, 0x10, 0x1, "9ca095b5dfe6bbec9fa50f74eb0536303d9af0bb23b7085f71e86718a2bd7bec289c516aca39eee2c072e6565e9de1f88bfdf5b921c654cc4cee4374e56068eb40577cd1e3e4ad01f32a5e1f3c6dcb8d21c8ff200826e648900b29f9cb5fa7a83a35753e5c8c955ce9076a169d070ffab62d511c50b4e5fde2d4cbd3a7d18e93d9d95d8f8e64dc67ab8eeb12c12e3bac1cceb839bf2e36c77d6431fffd00bbc28f226ad13bcda9b80ada97c05b0713f6e291829e6bea487999e94efc5e107a31990a7100cc87c2bc5b"}, @ss_container_id={0x14, 0x10, 0x4, 0xbb, "29909b5441a184f3b9953f76a450ac4e"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x9, 0x81}]}, 0x5, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x41f}}, {0xc0, &(0x7f0000000700)=@string={0xc0, 0x3, "50b87e8b9344625cf51b9dbe96171b8cb8492c5c9b01644402fe86513a3cc60e08b5f25cfe6d6c5f1f3145e279e00f5e70f4e2cad84674ea32bcfef2907f779627915e1455a55c7522d3d730c1270ccd8f266946e21ee2cfcf9d44076c4998b8d808f7fff773cd07598f62c73aaa728a124e5cc2babb64779a7eea1af4231454be2b6d0db8b6ec7a931872c76d0afd60944306e8a2cddf5e40289f65a31de0d31874ff135a3dd78e2371a32a4ef7f402c2163a7c1ae8c0bc2673ecf55a3c"}}, {0xdf, &(0x7f00000007c0)=@string={0xdf, 0x3, "3d9b21b37f8ad0a6371f45de7140c59d72c4d8bb4c5cb3f184b78b4d0afcdadc91a6b419b67015ebe88472803138cef243a68e3e22c00fc64cc05d65ef0e9465210f1ad50c2c3ff567dd36c87624b230ee6f34064baebc12ae7556ab1254c9f8500002cb203f2818bc10e0e60194f83dde07774180cf3feea24d333163a32d7f6ddda29fdedf4ab513554e1c182cdc7044cf4244018497bfdc67f165a6bd4a49214f4190cb37e84001835872350942d231edd93340eeb0eeffa833366f7fcc6f2216870752ba0e644b82df636bd0900f51bbbaaa16d9b254df93fb2bc5"}}]}) r3 = socket(0x40000000015, 0x805, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240102000a00020102090401000000010000090401010101020000090501"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) getsockopt(r3, 0x114, 0x2717, 0x0, &(0x7f00000000c0)) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000140)=0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 3.00735339s ago: executing program 4 (id=499): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0xa, 0x3, 0xf0ffffff}, @flat=@handle={0x73682a85, 0x1, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0xffffff6d, 0x0, 0x0}) 2.855478972s ago: executing program 4 (id=501): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x99) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={r2, @loopback, @local}, 0xc) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003680)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000003"], 0x118}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)={0x60, 0x1403, 0x200, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x854}, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gro0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000002140)=0x20) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) pidfd_send_signal(r8, 0x0, &(0x7f00000001c0)={0x1d, 0x10000000, 0x8e6e}, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x4034) read$dsp(r7, &(0x7f0000000040)=""/101, 0x65) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000022f0000000000000aaaaaaaaaaaa81000002080045340060000000000011907800000000e0000001000017c1004c90780f12a9a84c0fa208a428801a969ef6e3ef0a4d084330d9b7301bb27d9599eecd4ec473210ae0c249cdc28783e6b7e265570287546d4ead1657bd123c27e1eeb0e02fa3d8a2b4c2058d192827d58eeacd8595a9d707999f3143399969bc7b21fe3af84a302d513a44da992c3baa54a2c6e7d832f13bcc66224b2d89d6287f4f7cef1be2da69cffb623ab70e0f2609b3272c7be571209ce9c93c"], 0x76) 1.252837377s ago: executing program 4 (id=518): r0 = socket$igmp6(0xa, 0x3, 0x2) getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x0, 0x5, 0xe044, 0x5, 'syz0\x00', 0xffffffff}, 0x5, 0x200, 0x1, 0x0, 0x0, 0x3ffe, 'syz0\x00', 0x0}) prctl$PR_SCHED_CORE(0x41, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f0000001c0007800c0004003a5f0000000000000c0003"], 0x30}, 0x1, 0x0, 0x0, 0x80001}, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="14000000000b0000000000010100000000"], 0x18}, 0x54) 1.00994507s ago: executing program 3 (id=524): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/48, 0x208}], 0x1}, 0x18) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[], 0x208}, 0x1, 0x0, 0x0, 0x8041}, 0x40) 708.987816ms ago: executing program 3 (id=528): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) 638.008494ms ago: executing program 1 (id=530): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x27e2, &(0x7f0000000040)={0x0, 0x1323, 0xc002, 0x6, 0x3c7}, 0x0, 0x0, 0x0) (fail_nth: 29) 626.283795ms ago: executing program 3 (id=531): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x2, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x4000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0xfd, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x2}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec00000021000100000000000000002efc020000000000000000000000000001fe80000000000000000000000000002000000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000fe800000000000000000000000000026fc02000000000000000000000000c1b2c91400000000000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 440.770847ms ago: executing program 1 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x10000, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000005"]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) close(0x3) mount$overlay(0x0, &(0x7f0000000180)='./bus/file0\x00', 0x0, 0x4, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x7, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) 399.879182ms ago: executing program 3 (id=533): socket(0x2, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x3ea4, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}, 0x100000000000000}}, &(0x7f0000000440)) 358.327715ms ago: executing program 1 (id=534): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x200000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000000c0)={0xc, 0x0, {0x4, @usage=0xf, 0x0, 0x8000000000000001, 0xffffffff, 0x0, 0x1, 0x0, 0x81, @struct={0xc, 0x15a9}, 0x6, 0xffff, [0x7, 0xfffffffffffff56e, 0x6, 0x4, 0x4, 0x6a]}, {0x7fffffff, @struct={0x1, 0x101}, 0x0, 0xf3, 0x900000000000000, 0x0, 0x1e59, 0x5, 0x8, @usage=0x7, 0x401, 0xa, [0x10, 0x400, 0x703, 0x8, 0x4, 0xb]}, {0x4, @usage=0x23c9, 0x0, 0x3, 0x4, 0x8, 0x7, 0xffff, 0x90, @struct={0xffffffff, 0x8}, 0x9, 0xb, [0xf, 0x7f, 0x7fff, 0xd0b, 0xc075, 0x4]}, {0xd4, 0x7, 0x17b}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000004c0)={r3, 0x4, 0x5d28}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee00}}, './file0\x00'}) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x4000, &(0x7f0000000a40)={{'fd', 0x3d, r1}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}], [{@obj_user}, {@hash}, {@dont_hash}]}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000b00)={0xee8, 0x7, 0x8, 0x80, 0x81, 0xff, 0x1}, 0xc) fsetxattr$security_evm(r4, &(0x7f0000000b40), &(0x7f0000000b80)=@sha1={0x1, "d35dd134a6ebeea838521136165652301c83627d"}, 0x15, 0x3) preadv2(r0, &(0x7f0000000c40)=[{&(0x7f0000000bc0)=""/126, 0x7e}], 0x1, 0xf7, 0xfff, 0x4) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000c80)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000cc0)=0x0) sendmmsg(r1, &(0x7f0000003780)=[{{&(0x7f0000000d00)=@nfc={0x27, r7, 0x1, 0x2}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000d80)="6a50e97f9e4506d4c63bd15cdb1ab7885fa0b4e6802a9167dc11b1e367e2f5fba47ba313ee6fc9bcd7a508b6fb0632a1328c96290cec2af6a82913e166350adb10dc6e89844f3ad31363241d82b1ef0f347e26c94686ffd839", 0x59}, {&(0x7f0000000e00)="a300c036401bc03c46ef60afb0ae845c6df03808530d185ac73f4ef72bef42b6411bf4c75f920f4e6225abcf1f3b67e123f7289b3279e942490d429e70f0859e5e75252f9fb0e67bbfc0831fff0ae90bb6b9e9239c59e16d6a7b12a46de77040aa9d9f78c386b700396470e81d195398608fd28a2e94eaebfb0da5a920e856ea6e349c3ffd439eb992eeeae31735e5169a016cad641a234637d4bf09a75f3a73f89a2217d2e8be2d9d504a0e35fbe12ed74da6094307bbe0678a9f839f4bc25a676fe731fecd6e29f3dd690e5a3b0b46f7b7b98f98ac1360bc003d", 0xdb}, {&(0x7f0000000f00)="f6fca729740f037732200cb2084fcf258b0c1f73785a459dc5dfee845963f015dbf252e8c3c104fa1613be45f7fbd4346d1876c6efbe5d227f4c822e5235040b34c934776c4f093db0b0cf7b27ebef8b77ea28f019f7557424a2d32119b9082bdef5d00daf1e416c1f080000229903534132f461c3bce2e1bfd7a63d6b", 0x7d}, {&(0x7f0000000f80)="921a765b338a25c3af62032bc27e1cd116de88cdfd84c960808a5e0b9916d30bc18bea72c6e8e180c4066e5e8b23", 0x2e}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="635d13842decf93a2592f56e4d57e83e795255c5ef15e82bf64c2bd6e07064f1eb334a0d095bfb258ee9e2ded72953a710723b60e55f9d8723b1527726f4359eceb9beee258342ebab89ebd2d510995e7c052f12b28c5f698cac1b916718a77f44bff291a6cb70b10671342555f7f2ae46d1a45aed9718fc118ed5b3ebc3db4abcadbe118c51e6c202ea321625724d2d8a23871a45a214202948ceed62be3fb4a1572a50ebe361597ddd74b2", 0xac}], 0x6, &(0x7f0000002100)=[{0x1010, 0x119, 0x4, "9dc0fcc1c09975de1ffdd91d104d4f5bebd99c02302edca1fb589b74a58e94e51d222ea33cbf080c5f90ba6979fb100e0e6095275daf4a7be928e4d3094fe6d33dc3ffed66360ab1ac5e3fc4a8af42d49623ff7129cc2f5733af0a74479458b0863907fb6ba8f19a2998fca1822541e0da472529ea42b2abe543ecd7e7296aa9555b09ac29566e927d4ffd17c4f3936d5e5617f443e27a5951e4a9917fa1d7c08390a9305da7e7c1f525fb7872a8215f9db15e14715f13e1843af9d1bdd6b590539a30117496b5c9052b828fa212c6413fe4d9c10b689a715531a5fea48c6a21344a5d99299a6fec7ce441c390a66991261d9a0ef482be15ed24e3b3b10354cb03fcb288e7634fd12f0d22852e06c306b890ea7363cacba6cae2e565bf399b3cf20dd77f361f3789336ce2303ee3ef0ba2b28ae688bfb3fc0451312478e031c9bd8aebaf2cd1957aa046eabc54ea391198d07a6bb079759241008dc116f69a9af5e83f209ca45b7b9584c0f4b038c11ee169b19e78b151cdd0ba0b9e0544d8b4608f41c7ec9f6496edd5573902fc00d46b384d90339837cf0b91973df677f7dd25d7a937cbef46d86dd612968ab9c66ab6f2de01189c203916ba1511619e9e6d8b7391cf79624a462c924355cce2649e73327159641ba628056611e22c2a357894b70bcdf7a9375430445628419037f30c06206d328717741c8e96ce22f93316adb885b3b574c67e077fcbae246209c5002851a97a96aa21768afbb99d2b1752db6c7bad4ead867965db6f374c823c856f09324acd63aa5b104eb184455e0c37da901549253d610b27543d1585d15e0e3d70903a26b3dd2b28525734b9e0e5d6d294913a05255895901b1d9e0e6651857392eb704e784657d431f96583441ddf40100ced5e80bdb05d8b2485991653e615f5b79e76361b4dbfd1a86189e8cf3e976b26b4c63d49e32e4a5540ed384c8d012549d203fb467988774a592be26a4da3bded4aa909374ad2135b9737a27e78b5b09c7c112c0d2f8a18692b7e378cbafa7cde9bb0d3ae2378027ed5d6bf9794cfabac4eb071038838d9d5d6ca1950bb84b5367e1519490c9a180709764359d0c80cccf612c9564bb800508884d9f35c5f3139c53f3060b04cf9199dcb646d5636b52d8616e91fdcab0bda13c3b6a371d0cca35be53c5027405111412aaff03355759e0acbe4524f2f0a08ee18d99c610af0f8789e75850c394ad8863a7ce69d66bc08f405d1cc22777681ddd8a9a244934b12219086027ac3b76137487250bf92cbf694ad127dc1028faf9c65cae0107100a4e3700cb0bb94a98efd4cc2fa670e11d7d72d3cd08ae4bc0b6c3687d242764145e5775e77dcfe486cfa91ec004cb7545c65fbfad60705ddb161dc1057df08f778891b75c2fb04e2526b277f0bf8f2480c1233e7a2b9b5103f744dcd9dbc6c78e2783ef649705e4b705f8f918306ad63b64e1b365360c6af2a68a814b0e4435adb46595c0f82ddfc551d6be978668fd18b9ee1e65965165ddb45c701dd010e428324304e3d4f2001331ba3fbaab077f03ad5e3fcb16db6d61f333b5ec59debda28547f916259cefbb92c51219f9d8a5b99730e4896fb96340376b251cec10ae26a57a28b4b32fee7adcd60152f114ec596df853ae212c8753ba79555aa2b4fa7141cd10e1da5163fa4356ec4d91d80023acb964d38d80eecdd47dd3199ccfca04cdcfd86d161a6025a19d2880d46d461b1945ebeb54c0df7adf03faecb415cc342bae6b9aa34932a624a782ff76cd4bf96efbf36c381ccad44db54f7bda36319fcd34f7ccbd1030a502dad995a9ee2b54ae674856fd1e8a8a59b42fade26c49bad6058528125732246610b278c6694e0d6ec72668b999b4727d455f7a373e36e6c3b718f09d1679533b2055e95acadba91339634d67629f5d7fd34f4b72f66ad6e50ef2d084b85bde09676942e8eaab8d03a1dd5dd1a5a1f833e06447efecec421d9a46ff8e3f4afd2cfdb20a8057637698140c168f63dd8fb71840386ffdef1217b1cd5612264d9b766568688ffa0eeb2df01245d4db01e2ebc0e0b26e30d797ad9411c597223e77317c4c3cf0089049551aec9a848d727e033c375cca092e783411a603879036f2ef6628f6e5e0c5358efcd647badc343c7c815583f686d79a306fb70f2572a5baa909e4f5fcbb43bf02a0f2007b08d0e7786b480dbd0df279ac244eb626e1a55a336884346957a2101a95a2f5a8703248423716206955d0c69f26235618f7cedb34f5360f096bcf0809f231449bee1a709807fa21b02248f32d02adfa535c19955678eb7fb64931dfc8986428dcffab02688aa277971e885fe29962d58ba17b03dee277fab0ed0596203bffed40f41d0f499d1b822b648fa5c9acf7d1088f770f49f6c2fb4fef019c60578ce4318f9840df2c41c2373dac8423171637d2c48694b80deada8b03fa7ed8921d817efa7275d25699385d9e2f45b37ddf9fba62f84f44048f3871b6628c6097cfc7301ee3f16c44b0dbabd05206f2afeea0a92ec6878358dee76bf6aa7443a533448004408a287c2381c5b6b0117edb0e081aeb3e7284a0fc2c6b03291bcf880fa376f65c745e2e55484a259bddce8630563edb1666ffc5268ceda55f3fb282826b62e3cc0c90746100453afb9c3d01ceee54cc932d4b61ada40fdb76f75a65599b18edd663597616ddec000417d55db086800f1411131af378d0e51be72709022c7f3013e8592e6caf38f7c3c95d493c9cf3ba47583faf76764cf71d92df2cea6f43a7ecf6e2993245f1aab5e69b6328019c8d5d91a8387f3aacd2bab0360074e7ed84bcba752c45dac7774618091f81abc0c9f79f638461299fc114c759cf945ef387f2af67944cff2650c88a4e3dfde1ed7dba5a66c4ad30d5babb800704e5b37bab11b258640b3d18338e5818656ada66be7b720674a9139a5600053c6b7592959d5931bebbfdc625997b6d2d659b9743adf94bda77253b290f5b1ada94cdeb22730782e845491d13b53f8f9f7991b7ee189e6516856a6dcb88e9fe3d3f0249f725b41b98936f5ab20255131ba92b808cbe3819dbedaa70359e101ebd884368f6b2575648394b5cceb1bbbb0d4a5f2b143e1b48dd8f3d660af7ffddcb8e8dc88b1e3aef5029c1369895fa3a958d274dbb5d3d336fde18f88f237a8e8f0f9bf501478fc62c4aa0164925329d49a8d5f09958888baced1706b7dd1d765408fcc29fddd9412c8f168c9e1f66ee6451a0acee7a974c963a8f8cde27fd38d1cb122f6185ce8986b886e47e724eeea71d4cc877f23fc9b0334e963112b256fa25f6d9d4d9245dd89fbd06b1b99bc3830bfb20059decad463de47f7c9815ebf4fd3ccba627af55809b52d11b8b165dcab9357709f8fa8aebc72ca513be398324d2be11bc2e92c6e13a0730148baa68c94b472d3525a838cc84bfda6deb1e14ab1b5c9286d93286382125f4a5c16bee94edde82340d19472b7eb629021de16e4d9fa5c20ee03aabcd4e9f72a106843cdf9a7ce2952e3b7640fdddd1020f8d449fff28402b91b096b986bbf4f8834b5fdc4f861c042568a2d12fc380fb651c59a65bc54530bd40d1aa099c5ffe7b966acf80a5f08cd72608e0a2f56373abb2460b4eb0e444cb6189e5d8707137941e889c09dcbebccf1766b1f5e333c7292274ef2c052a4d34acb4e6060e160d873acb767bc1b7a3cc6897e239c94cc7d670f583176afeb8084d4441833d1ad035126429e2df2a495082061a3dcc288bc70b1d52b07cb1121bbb42fee6f444e8a21641f88fbd14d03790a93b9a5d91862490d6d43edddcba9e6756f4ca4ad573e9484b8a36a2904070151d0d5d6c4ef400ec368362d8f0f53b90019c648bd9ee419d80e7df4793eaad55412137ac6b0b9af4c16be1e464184949d419b0588fe3672298fdcb7fa4fe53ab8c745406e18318a1f8d82fa87cde6b8bb0dc1c8c9232a71029a40576e9734bf61e60d77fa747fe4961f94d59211ec7b68632a1d98df96dd647c3329c7c3171fed167fec10fa4b2229d88380eddf64c8543b1620c2c68f9c67c2db52cae82d5b059a20d1cb5e32b0d8ec4734e51958d0d9516f8b6576c2eb4e54723b449695f44e37ec1100b42cd7de42f3c0240a007ea08bea1124aaacaa5b23aaf78f4a351e57b863d7d35679b090077ef6981fe04856948f8910f5b21e813e2df6ed37aa73bad94e939c76d99d53d38b70258c7efc5a5a8502e77ca0a5eb6ffb8d9e2f9ffc67bc8c909af9817d4c263a5e103b27d64368b3867c0e6a603ce0ca30f1999b0720658c99ac66af17bddb45a6df67e20e9e3bd9a58acb2ff0746d6a6a1dc89f7b2a72f92458ea024155db959c785d9bde7c36cf05a10addc2b290c663fee5f5a4e07840082eb9d86b27636eb72b80df218a86813f3c982e0020edd1e4402f36eef666374e3079175536cc7e2fa5d5bc3a76a533e5d1b318995cd0f7a73db38cb85fe380c5c39f31e64b0340807f904dad92acbef4257af515609edfbfacf0fc76eac0e91d4d973cd4f84de4fd9c6295006db7184438abc92567f8c39a71d5e56ac67a3023558d5dc176b3b4dce26dbb7eb8d30c1f409fc8ffdff2017e14bb959f5efd37488ba4ed527b1676c69fc0ea542b562cd0de241ae69cd5210cac13b5326afc0d8d9fde5877cd80cea8fc9a7f11776c0a3af0eafa34cf61466faae66933de73119e94cbd9f258ab9afa7a71819f94f0bbb7c23d04da4fd2d00eda2332f0f18fb096b55aba2ad970af0da4827992e57c7ec806642b02fb031b680611bb98e9d0c6f0576d234e8ea2e758b127e7f1fcb82e00725aea19ef7724edc7d9951e21841c2e5a5098aeb8f1a589b8292ff41c8a0119a5597d96637e2c074497af3bc31298ceef709c1fede31fcc9e10b850b200e1ace3dc33a496d49faee5c9be9a9a8e89e4a26a5ca112af2da9b3c9a6bebb3605959a1778ab16e8eff872776209b6a4e50dd46c76a641d3b326881439352a480e5bf2384f4875250e0511d4de410d8f2eff2658d5abed1bcbba2b8d5c0cc6f9851e8251fcdab5fa77bbdfa60e3aebc5ffa6b1c9884e075bd16bfb29e3c38e6476f91b3570c5615338392a1a6ee95c208156b044ba51018931e04a02fa7558a5162da41fbbf70ba4a1a0a7408a9af771162a2fb67ce9dd40a9fbd0e91f59d3c37551bb865d97bbf90d052051a21164f6dc87eb749b40f584139d4a62b81155f189be3838134a3f7f54a46fadcd0f6d5c9230d27dc5a5fad136578723b93ac14551d5671d71bc0cbfc85ffcd5feafb7ea4f1125fb316a7015034483a2043440ce745a97ba04b8720a566a5d3f8205a23cfcc835cbfec4ae56696e89c025f5b575990a87c981d74521925f16848b23f513665bf22f0c48965922aa67a6d54cf926d466abf07e3da3b1b53c8f11f72386f61ddbace013738d6ad75a299b25c60ef8e53f4679c9674109d9e62690c841c0c5ac029d0987ebdbd81ad8f9146e993f88f1607aca2a57262396def4ff3465726632b50bfc978978d94c9e3b2752020601ab071529ea4c4a23af54e1391dfecce5610a1c9579b64256f38776a2f0370220ad9fc5f04feb13c693eec17c52aaa106873e19f362edbaee8df926e83fb28ceb259994fe7fc0a9153a3c6842bba20b8735a9438b6bff5ef4177a87e3c6fb67e6eac26b101521e19503cb1e18c125b95cfcceab3069bca918930e948c349e8fa356a122b3626143da5dad0639fbe9074e44887a24e86fbb64ee316fcfd53d24d7bf4a3826d3"}, {0xf0, 0x3a, 0x6, "830a77d1079191ecd05a690635cfb3598c8cb7f3248c295c7c634ad18ba4db6bf305b9acbc200b3af42f62fa5fc6f38ace219f3aed52fd11e9dd2cacd7567b296e8817b84f761773f1ddc16b500cfb5ff784b50608d64d83f0952c454a613dc706a85dd19d78f1a71c8fab7ec5fcab6243df7d3f8d5adb0a7b8f1ea2e48b4d5883765de37f41507545a6ddf1bbf2ab4fb7332c5ed4eb6e915c8f343ab1823724a315544f10e75d0153100a26889c8f6580d9f030a02227f86cfa38cb29f52bf1436ed63607500aa5f5334d2dd62a1717421b3507bf7aa93cfebc"}], 0x1100}}, {{&(0x7f0000003200)=@phonet={0x23, 0x3, 0x2, 0x43}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003280)="e0f52e84c4ea066e7e8c2774e8e4456a9044b8207a8baa785a813e4fdda231d5c0049b423bb7a8883b72f05654c283f1e93b7fc5ebec0af6805a5105fd8d832e94662ccd5446e78583bc06f02a13ce4635e857339345d2822450a2fdd43407378d1ac9292e6cd2627392f17cd230961a7b64b85a4abfc76a117035ad46eed69a04b9fb8102b53c4706bc710f457d86c77836b324538833117ecbd649e3f1280ed767730b239add26206411816c3f29f65d6447defacb5b8cb38938d0aa2b7d395d3281b0a8f24344866875c78bf686a956657eecf470dabc60f74b9ee333c685f264d139e4f4ca8080cb1d", 0xeb}, {&(0x7f0000003380)="296aac3597caf7e3ebfb14288d20bb68279ea801726db69b288d627e446302663712eb3fea46fe4bcecd69e573123653f55a8c72", 0x34}, {&(0x7f00000033c0)="98a46c9d13de3b1e88d29b926a1c2f51cf43dd27cb1646f77775e6532d15dd73f22505df88a9958d78b16c9d50ca1bfec415bcc3a793c63a6339a1e9511e5f3b076b14f2ffd3ac74a63c99c879eb239235a2a216cd1f7d34c6552243d8e11ba41c4a6c467d633b67f2abf7a53fae2ae3fc15023a918a92ae7f6ad8c48a1f91510060898da7395f619c419e264b5951cc8febe921805c963773470044e154dd0a3f15bdca7b8fe02d7bc8f62b044e105c26b73ff0e8ac5444ca83e08560e00e0a9655650ab97ac1fbc6b308d668a97716d6b0bd2cd08350cadf0915d83e9126ff31956e3239cca3740b790f", 0xeb}, {&(0x7f00000034c0)="8377dd23c41cc7ff1d5432075939e4abe47eca75c3f85a29e1e96c5b456532680d09196fcf83b456f97125484d44cf68d8320d31e07f22edea6f165fcd4287a748c245b299c20ee1cd4133649261ccd48f06053294", 0x55}, {&(0x7f0000003540)="7baa80cecae5a17299eae67fc695314eb04fa67bfc9d64bc26db3bbe", 0x1c}], 0x5, &(0x7f0000003600)=[{0xc0, 0x88, 0x1, "12cbc7988261c9ea203f5dd20d0270ca8299bf4181b5a67cc69fc01bbdb3d7238284d92fa50e9369d4ceb8ef7488bd9ff25f7c13fd2fc7cd8dc364fc3c9e9cd2aa272eff29d5ce0416cdaf268650c6986ebefb61f8f2d1ca92fc16398534973da7d431e0025eb223d58a6f4a73cd12f3fcd1213d52f08ff3d66679201c8cf15abe48f76b0976cef244d6417d5afd76ba21a92d918e8a13dadb5ebfb8d09f555886d6ba44f80c14aff24eaa366b4c01"}, {0xa0, 0x6, 0x0, "f482dc9960bc1e0846090c42a95297b507cfb5f45de3ead214170671e334784550d14b12d2dbd4d29c79bcfd52cfa0db5a3dbf5d5d318f531dda736d6c3922420e66ba930df61f18e5a82a4c1bebb59f0b6c73a111bf2cb5f253702d0fda7b56be9028ed0bc6868746405307bc18e01eaff1df7af9bb43377484addb19b4cf029d47a31206bd6041082d9b9132f51c"}], 0x160}}], 0x2, 0x8000) sendfile(r0, r1, &(0x7f0000003800)=0x1, 0x7) syz_usb_connect$uac1(0x5, 0xd2, &(0x7f0000003c00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x5, 0x0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x4b}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0xff, "af"}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x2, 0x0, "0fefb0b296b1"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x3, 0x6, 0x35}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x4, 0x6, [0x2, 0x2, 0x6, 0x9, 0xa, 0x7], 0xc}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x9, "c8c0364bd24b"}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x85, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0x4, 0xf, {0x7, 0x25, 0x1, 0xc, 0xfc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x3, 0x6, 0xe, "fc59b2f58facdb"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x20}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x2d, 0x69, 0x2, 0x68}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xd, 0x4, 0x8, {0x7, 0x25, 0x1, 0xc, 0x4, 0x2}}}}}}}}]}}, &(0x7f00000041c0)={0xa, &(0x7f0000003d00)={0xa, 0x6, 0x300, 0x4, 0x4, 0x6, 0x20, 0x5}, 0xfd, &(0x7f0000003d40)={0x5, 0xf, 0xfd, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0xf, 0x6, 0x9, 0x7f80, 0x9, [0xffff0f, 0x30, 0xff00cf, 0x30, 0x0, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x4}, @ptm_cap={0x3}, @generic={0xc3, 0x10, 0x4, "a4b15df20817bfd382751ed286c15e6e568f7342094acc1cac7022dd73f464f45ebe6a632171e42b535f4c680dfc467a2affe05a0f0fd8c916e2ce801edcde622ceca1055dfa2eaf9626491dcefc2ccd768f5905e6ef35037ddb6727ea554c705411f8a75b04103af6067929d2acedd5e3c60e997f1b0957d99ace95dbd91e4b4d41c877b915f70cb5be7be7deab2042c8d0c6805e4f49de4d82501c4a6cf190aeec94303d4051591597b6bcfc6b85965c03d34e1ae8cccaef3b3454280f039c"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xe, 0xfff8}]}, 0x8, [{0x4, &(0x7f0000003e40)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x1409}}, {0xc3, &(0x7f0000003ec0)=@string={0xc3, 0x3, "ecdef8bf47ff1af508dc548ebd83983bb53cb5a9309b4acbb4980fceb37cf0be1459f1199b0b7e965b9ae79e9a97ed4aebd5d1b559002991ca78758dc351c46c22a7a133a2802b3b272bfdedcf89a3a94dff2c23ca8da1330aec1fe6ac883ef91405924affbe111c1c7c3452bd0db4db40acf0d83eac7bd7d1f5673fc382a54274d7adb3049a435bf5564b976f145710e89902f83a67e83e56545d82cfdf5c3c789b8e010d8cab3470a67e40a9c8e9bcacc33ed45f6b59f99b72acf54196df1a20"}}, {0x43, &(0x7f0000003fc0)=@string={0x43, 0x3, "1d977b39b552a4f1ddb1b149f2ebb9b12f661d99d4d3c8fbc0e6e52de3de6d81d8ca0c60c9c2fab9b09bca402e488930e4303c4c9c9afb2ab19c5b62e7f0d7e35f"}}, {0x4, &(0x7f0000004040)=@lang_id={0x4, 0x3, 0x843}}, {0xa6, &(0x7f0000004080)=@string={0xa6, 0x3, "5a8ed6e644246154b8d02960c7aaf877786ad0aaa8d855e646483fea9b524c5b6c6ebe6747a4dc94cba3f2b777dc4abea97e1f555e99013885607a56dcbce38782a6c70dcf3fcf809cae3ac57ed9e83ff9f9ecc49bf0c25d79758fad86e23d3b13494d5433dfc1cdd9265ad5cd885eb5cac35e000ae92e6168aa480e4ec2efe4f98b26f8fe37bab3c0aeb9e0f8836348e66a0536ad62695534b791dfb826535b690f1fe9"}}, {0x4, &(0x7f0000004140)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000004180)=@lang_id={0x4, 0x3, 0x5a13}}]}) r8 = socket$kcm(0x29, 0x2, 0x0) fsync(r1) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r8, 0x80286722, &(0x7f0000004300)={&(0x7f00000042c0)=""/53, 0x35, 0x6, 0x7fff}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000004500)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004440)={0x4c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) 172.983717ms ago: executing program 1 (id=535): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008"], 0x184}, 0x1, 0x0, 0x0, 0x48}, 0x0) 145.326037ms ago: executing program 3 (id=536): syz_open_dev$sndpcmp(0x0, 0x800, 0x541041) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xe}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x58, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 122.931805ms ago: executing program 1 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[], 0x138}}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d40000000001010400000000000000000200003a2400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0xd4}}, 0x0) 22.912067ms ago: executing program 4 (id=538): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) setuid(0xee00) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0}, &(0x7f0000001380)=0xc) setreuid(r2, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) exit(0xa1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f00001ae000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x10}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 1 (id=539): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000001c0)={"008fbced01db0100e800000000000407000074510000000000002000", r1, 0xffffffffffffffff, 0x4000000}) kernel console output (not intermixed with test programs): 1) [ 185.905927][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.906149][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.906366][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.906583][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.906807][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.907032][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.907251][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.907472][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.907731][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.907952][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.908186][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.909286][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.910260][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.910489][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.910727][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.910953][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.911173][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.911388][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.911604][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.911819][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.912044][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.912264][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.912483][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.912704][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.913020][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.913323][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.913642][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.913875][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.914105][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.914333][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.914618][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.914850][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.915085][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.915308][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.915531][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.915752][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.915974][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.916196][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.916422][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.916645][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.916865][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.917091][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.917307][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.917528][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.917745][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.917962][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.918194][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.918427][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.918654][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.918885][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.919103][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.919323][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.919540][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.919757][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.920018][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.920245][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.920462][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.920680][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.920897][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.921115][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.921331][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.921552][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.921772][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.922134][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.922379][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.922620][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.922852][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.923095][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.923327][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.923552][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.923782][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.924021][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.924243][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.924498][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.924725][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.924959][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.925206][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.925438][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.925656][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.925876][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.926099][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.926319][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.926609][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.926936][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.927209][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.927458][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.927701][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.927942][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.928245][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.928654][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.928921][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.929156][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.929421][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.929751][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.929839][ T32] usb 2-1: USB disconnect, device number 15 [ 185.929983][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.930205][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.930426][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.930640][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.930865][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.931086][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.931430][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.931689][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.932023][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.932273][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.932513][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.932869][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.933126][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.933360][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.933599][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.936183][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.936498][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.936734][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.939394][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.939667][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.939891][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.940112][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.940334][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.940619][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.940856][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.941097][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.941335][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.941565][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.941810][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.942061][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.942297][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.942522][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.942746][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.942966][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.943188][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.943428][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.949613][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.949866][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.950098][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.950328][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.950551][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.950770][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.951122][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.951352][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.951741][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.952008][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.952245][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.952479][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.952710][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.952943][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.953183][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.953409][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.953638][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.953858][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.954080][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.954303][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.970141][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.970425][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.970649][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.970869][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.971089][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.971318][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.971535][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.971755][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.972055][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.972278][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.972495][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.972713][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.972939][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.973157][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.973374][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.973590][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.973869][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.974087][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.974309][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.974622][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.974848][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.975069][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.975292][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.975511][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.975729][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.975953][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.976169][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.976393][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.978792][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.983863][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.984127][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.984414][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.984653][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.984875][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.985095][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.985319][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.985541][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.985881][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.986145][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.986394][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.986631][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.986861][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.987092][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.987339][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.987642][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.987881][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.988110][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.988330][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.988551][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.988769][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.988987][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.989205][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.989421][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.989646][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.990049][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.990295][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.990529][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.990772][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.991015][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.991267][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.991496][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.991725][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.992157][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 185.992396][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.001327][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.004788][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.005045][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.005271][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.005494][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.005712][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.005933][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.006162][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.006447][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.006669][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.006891][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.007122][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.007349][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.007611][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.007835][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.008068][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.008288][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.008511][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.008731][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.008953][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.009187][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.011788][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.013856][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.014096][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.014334][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.014618][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.014843][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.015073][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.015297][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.015518][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.015745][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.015965][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.016203][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.016421][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.016648][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.016875][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.017095][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.017380][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.022466][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.026980][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.027234][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.027457][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.027686][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.027905][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.028121][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.028337][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.028553][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.028769][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.028989][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.029219][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.029443][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.029666][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.038147][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.038407][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.038650][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.038882][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.039108][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.040682][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.044706][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.044986][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.045210][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.045430][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.045649][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.045869][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.046090][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.046367][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.046589][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.046822][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.047047][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.047271][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.047495][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.047715][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.047933][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.048150][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.048369][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.048589][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.048817][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.049178][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.049423][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.049667][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.049910][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.050144][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.050396][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.052612][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.056312][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.056551][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.056794][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.057016][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.057235][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.057463][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.057689][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.057906][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.058124][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.058412][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.058630][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.058849][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.059069][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.059294][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.059512][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.059757][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.059975][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.060191][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.060407][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.060633][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.060849][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.061068][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.061291][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.061508][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.061724][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.061956][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.062228][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.062489][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.062729][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.062983][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.063238][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.067259][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.067503][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.067727][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.067949][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.068175][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.068396][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.068662][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.068880][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.069100][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.069331][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.069549][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.069770][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.069994][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.070225][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.070443][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.070664][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.070882][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.071102][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.071321][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.071542][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.071765][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.076315][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.076551][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.076789][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.077021][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.077241][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.077461][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.077679][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.077900][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.078122][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.078344][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.078565][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.078782][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.079008][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.079280][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.079505][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.079723][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.079943][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.082063][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.086339][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.086578][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.086800][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.087029][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.087250][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.087469][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.089569][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.092102][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.092338][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.092558][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.092779][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.092999][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.093224][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.093440][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.093659][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.093875][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.094090][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.094306][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.094572][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.094802][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.095028][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.095250][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.095476][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.095750][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.095968][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.096197][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.096422][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.096639][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.096855][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.097078][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.097296][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.097511][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.097726][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.097945][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.101143][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.101454][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.101705][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.101945][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.102197][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.102432][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.102663][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.102893][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.103121][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.103355][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.103581][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.103827][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.104153][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.104534][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.104940][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.105209][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.105454][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.105765][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.106001][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.106251][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.106480][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.106708][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.106937][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.107173][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.110538][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.110803][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.111093][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.111333][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.111558][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.111781][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.112006][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.112248][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.112476][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.112697][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.112928][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.113151][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.115170][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.115397][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.115619][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.115976][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.116257][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.116505][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.116746][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.116979][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.117217][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.117494][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.117721][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.117939][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.118172][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.118395][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.118618][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.118838][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.119064][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.119284][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.119511][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.119733][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.119949][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.120166][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.120380][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.120624][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.120855][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.121086][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.121306][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.121536][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.121755][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.121994][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.122218][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.122440][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.122658][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.122878][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.123106][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.123324][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.123550][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.123829][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.124081][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.124297][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.124525][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.124745][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.124977][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.135412][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.135680][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.135917][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.136137][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.136355][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.136583][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.136808][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.137159][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.137436][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.137681][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.137922][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.138164][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.138395][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.138633][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.138864][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.139090][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.139317][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.139542][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.139773][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.140006][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.140229][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.140454][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.140754][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.140989][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.141209][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.141426][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.141649][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.141977][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.142229][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.142475][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.142733][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.142996][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.143232][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.143464][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.143715][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.143943][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.146169][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.146419][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.146659][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.146881][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.147109][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.147335][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.147555][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.147889][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.148148][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.148397][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.148635][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.148879][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.149123][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.149356][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.149656][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.149880][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.150106][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.150328][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.150637][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.152846][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.153079][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.153297][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.153536][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.153759][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.153987][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.154220][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.154493][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.154729][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.154958][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.155226][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.155451][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.155681][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.156003][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.156263][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.156503][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.156737][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.156970][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.157209][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.157436][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.157669][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.157893][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.158123][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.158344][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.158628][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.158858][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.159098][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.159320][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.159542][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.159769][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.160003][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.160231][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.160450][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.160666][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.160893][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.161120][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.161348][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.161569][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.161788][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.162088][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.162389][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.162634][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.166887][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.167128][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.167382][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.167597][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.167812][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.168075][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.168296][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.168521][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.168747][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.168973][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.169257][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.169483][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.169712][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.169938][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.170161][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.170399][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.170619][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.170850][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.171075][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.171294][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.171515][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.171744][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.176754][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.176995][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.177219][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.177440][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.177689][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.177914][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.178135][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.178375][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.178597][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.178819][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.179039][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.179262][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.179483][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.179716][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.180021][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.180297][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.180622][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.180906][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.181175][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.181419][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.181646][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.181871][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.182103][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.182349][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.182585][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.182830][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.183063][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.183301][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.183527][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.183756][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.183993][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.184231][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.184511][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.184737][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.184984][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.185237][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.185462][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.185683][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.185991][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.186261][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.186511][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.186746][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.186982][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.187223][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.189811][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.194738][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.194997][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.197635][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.197888][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.198112][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.198334][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.198552][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.200076][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.203142][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.203399][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.203624][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.203847][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.204071][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.204301][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.204577][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.204805][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.205041][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.205252][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.205476][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.205702][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.205947][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.206173][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.206410][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.206641][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.206865][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.207089][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.207311][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.207595][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.207819][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.208043][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.208267][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.208514][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.208743][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.208974][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.209195][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.209417][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.209663][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.209882][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.210102][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.210328][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.210549][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.210778][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.211000][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.211216][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.211434][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.211650][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.211868][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.212085][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.212304][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.212521][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.212757][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.216183][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.218045][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.218280][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.218519][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.218822][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.219056][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.219284][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.219503][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.219731][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.219956][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.220173][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.220399][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.220620][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.221010][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.221264][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.221537][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.221905][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.222173][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.222420][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.222650][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.222881][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.223110][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.223343][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.223571][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.223810][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.224034][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.224312][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.224600][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.224836][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.225059][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.225283][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.225513][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.225815][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.226036][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.226254][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.226475][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.226694][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.226911][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.227135][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.227353][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.227570][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.227941][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.228205][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.228444][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.228678][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.228898][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.229139][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.229394][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.229622][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.229852][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.230078][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.230306][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.230551][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.230791][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.231029][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.231257][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.231482][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.231703][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.231922][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.232155][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.232422][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.232644][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.232864][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.233094][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.233313][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.233540][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.233762][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.233986][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.234207][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.234500][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.234737][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.235049][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.235303][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.235590][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.235826][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.236058][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.236288][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.236517][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.236763][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.236996][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.237222][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.237450][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.237680][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.237918][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.238142][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.238369][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.238594][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.238816][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.239094][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.239316][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.239537][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.239799][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.240036][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.240271][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.240505][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.240762][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.240994][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.241225][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.241558][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.241819][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.242065][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.247308][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.248410][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.248674][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.248899][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.249118][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.249337][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.249557][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.249786][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.250003][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.250226][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.250446][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.250663][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.250881][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.251098][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.251323][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.251608][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.251982][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.252245][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.252489][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.252728][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.252974][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.255383][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.259925][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.260167][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.260395][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.260619][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.260841][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.261063][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.261283][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.261502][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.261730][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.261959][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.262180][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.262402][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.262621][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.262840][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.263070][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.263293][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.263521][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.263742][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.263972][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.264189][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.264513][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.264803][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.265022][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.265240][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.265458][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.265694][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.269615][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.269912][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.270143][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 186.270216][ T5717] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 186.282920][ T5717] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 186.500186][ T5717] usb 4-1: USB disconnect, device number 16 [ 187.861428][ T6226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.294576][ T5717] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 188.565632][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 188.570013][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.570070][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.570098][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.570119][ T5717] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 188.570141][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.576987][ T5717] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 188.577020][ T5717] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 188.577040][ T5717] usb 4-1: Manufacturer: syz [ 188.634094][ T6626] netlink: 324 bytes leftover after parsing attributes in process `syz.0.222'. [ 188.642070][ T5717] usb 4-1: config 0 descriptor?? [ 188.846103][ T1253] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 188.998418][ T1253] usb 2-1: config 2 has an invalid interface number: 12 but max is 0 [ 188.998448][ T1253] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 188.998467][ T1253] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 188.998485][ T1253] usb 2-1: config 2 has no interface number 0 [ 188.998528][ T1253] usb 2-1: config 2 interface 12 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.998554][ T1253] usb 2-1: config 2 interface 12 altsetting 7 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 188.998579][ T1253] usb 2-1: config 2 interface 12 altsetting 7 endpoint 0x8A has invalid wMaxPacketSize 0 [ 188.998601][ T1253] usb 2-1: config 2 interface 12 has no altsetting 0 [ 189.001350][ T1253] usb 2-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3 [ 189.001379][ T1253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.001399][ T1253] usb 2-1: Product: syz [ 189.001412][ T1253] usb 2-1: Manufacturer: syz [ 189.001427][ T1253] usb 2-1: SerialNumber: syz [ 189.382886][ T1253] em28xx 2-1:2.12: New device syz syz @ 12 Mbps (2040:8265, interface 12, class 12) [ 189.382924][ T1253] em28xx 2-1:2.12: Device initialization failed. [ 189.382937][ T1253] em28xx 2-1:2.12: Device must be connected to a high-speed USB 2.0 port. [ 189.447215][ T1253] usb 2-1: USB disconnect, device number 16 [ 189.554552][ T5717] rc_core: IR keymap rc-hauppauge not found [ 189.554573][ T5717] Registered IR keymap rc-empty [ 189.581267][ T5717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 189.599690][ T5717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 189.787409][ T5717] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 189.810933][ T5717] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 190.034622][ T5717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.062620][ T5717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.074757][ T5717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.097767][ T5717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.134056][ T5717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.145133][ T5717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.164635][ T5717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.185846][ T5717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.207169][ T5717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.224535][ T5717] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.360466][ T5717] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 190.360494][ T5717] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 190.589814][ T5717] usb 4-1: USB disconnect, device number 17 [ 190.699614][ T6648] netlink: 'syz.1.225': attribute type 19 has an invalid length. [ 190.793163][ T6226] veth0_vlan: entered promiscuous mode [ 190.810921][ T6226] veth1_vlan: entered promiscuous mode [ 190.985893][ T6632] binder: binder_mmap: 6629 200000000000-200000004000 bad vm_flags failed -1 [ 191.095011][ T6226] veth0_macvtap: entered promiscuous mode [ 191.178780][ T6226] veth1_macvtap: entered promiscuous mode [ 191.354783][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.443161][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.780368][ T3036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.780429][ T3036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.780466][ T3036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.780520][ T3036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.036697][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 193.408268][ T5717] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 193.649192][ T5717] usb 2-1: No LPM exit latency info found, disabling LPM. [ 193.678895][ T5717] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 193.678932][ T5717] usb 2-1: config 1 interface 0 has no altsetting 0 [ 193.833015][ T5717] usb 2-1: string descriptor 0 read error: -22 [ 193.833162][ T5717] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.40 [ 193.833194][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.942183][ T6671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.248932][ T5717] usbhid 2-1:1.0: can't add hid device: -71 [ 194.249058][ T5717] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 194.407215][ T5717] usb 2-1: USB disconnect, device number 17 [ 194.556018][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 194.556036][ T6677] binder: 6674:6677 ioctl 4018620d 200000004a80 returned -16 [ 194.838806][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.838915][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.987769][ T6682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 195.063540][ T5934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.065370][ T5934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.799740][ T6691] loop2: detected capacity change from 0 to 7 [ 195.886387][ T6691] Dev loop2: unable to read RDB block 7 [ 195.886437][ T6691] loop2: unable to read partition table [ 195.886643][ T6691] loop2: partition table beyond EOD, truncated [ 195.886681][ T6691] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 196.502709][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.502733][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.644519][ T5717] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 196.908022][ T5717] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 196.908056][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.908076][ T5717] usb 2-1: Product: syz [ 196.908091][ T5717] usb 2-1: Manufacturer: syz [ 196.908105][ T5717] usb 2-1: SerialNumber: syz [ 197.341857][ T6707] evm: overlay not supported [ 197.705836][ T5717] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 197.705899][ T5717] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 197.832437][ T5717] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 197.868830][ T5717] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 197.939052][ T5717] usb 2-1: USB disconnect, device number 18 [ 198.464502][ T32] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 198.649475][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.649543][ T32] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 198.649570][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.663532][ T32] usb 4-1: config 0 descriptor?? [ 198.678615][ T32] pwc: Askey VC010 type 2 USB webcam detected. [ 198.882256][ T32] pwc: send_video_command error -71 [ 198.882277][ T32] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 198.882401][ T32] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 198.955034][ T32] usb 4-1: USB disconnect, device number 18 [ 199.071479][ T6735] nbd: must specify at least one socket [ 199.424576][ T32] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 199.687473][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.687539][ T32] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 199.687567][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.753855][ T6751] netlink: 'syz.1.249': attribute type 16 has an invalid length. [ 199.753881][ T6751] netlink: 'syz.1.249': attribute type 3 has an invalid length. [ 199.753905][ T6751] netlink: 'syz.1.249': attribute type 2 has an invalid length. [ 199.753918][ T6751] netlink: 64046 bytes leftover after parsing attributes in process `syz.1.249'. [ 199.803350][ T32] usb 4-1: config 0 descriptor?? [ 199.852598][ T32] pwc: Askey VC010 type 2 USB webcam detected. [ 200.217400][ T32] pwc: recv_control_msg error -32 req 02 val 2b00 [ 200.226089][ T32] pwc: recv_control_msg error -32 req 02 val 2700 [ 200.306455][ T32] pwc: recv_control_msg error -32 req 02 val 2c00 [ 200.308538][ T32] pwc: recv_control_msg error -32 req 04 val 1000 [ 200.340701][ T32] pwc: recv_control_msg error -32 req 04 val 1300 [ 200.343408][ T32] pwc: recv_control_msg error -32 req 04 val 1400 [ 200.345337][ T32] pwc: recv_control_msg error -32 req 02 val 2000 [ 200.353033][ T32] pwc: recv_control_msg error -32 req 02 val 2100 [ 200.579891][ T32] pwc: recv_control_msg error -71 req 02 val 2500 [ 200.583315][ T32] pwc: recv_control_msg error -71 req 02 val 2400 [ 200.584054][ T32] pwc: recv_control_msg error -71 req 02 val 2600 [ 200.584826][ T32] pwc: recv_control_msg error -71 req 02 val 2900 [ 200.585954][ T32] pwc: recv_control_msg error -71 req 02 val 2800 [ 200.586710][ T32] pwc: recv_control_msg error -71 req 04 val 1100 [ 200.588799][ T32] pwc: recv_control_msg error -71 req 04 val 1200 [ 200.674150][ T9] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 200.777308][ T6766] netlink: 'syz.1.253': attribute type 4 has an invalid length. [ 200.777334][ T6766] netlink: 156 bytes leftover after parsing attributes in process `syz.1.253'. [ 200.803719][ T6766] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 200.854794][ T9] usb 1-1: device descriptor read/64, error -71 [ 200.975488][ T5625] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 201.003400][ T32] pwc: Registered as video103. [ 201.057311][ T32] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 201.129796][ T5625] usb 5-1: Using ep0 maxpacket: 32 [ 201.135116][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 201.150803][ T5625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.150837][ T5625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.150876][ T5625] usb 5-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 201.150902][ T5625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.279465][ T5625] usb 5-1: config 0 descriptor?? [ 201.284575][ T9] usb 1-1: device descriptor read/64, error -71 [ 201.327147][ T5625] hub 5-1:0.0: USB hub found [ 201.347990][ T32] usb 4-1: USB disconnect, device number 19 [ 201.385601][ T9] usb usb1-port1: attempt power cycle [ 201.547084][ T5625] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 201.745049][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 201.770976][ T5625] usb 5-1: USB disconnect, device number 2 [ 201.781901][ T9] usb 1-1: device descriptor read/8, error -71 [ 202.084728][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 202.116712][ T9] usb 1-1: device descriptor read/8, error -71 [ 202.215454][ T9] usb usb1-port1: unable to enumerate USB device [ 202.430353][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 203.190094][ T6818] netlink: 'syz.3.261': attribute type 16 has an invalid length. [ 203.190118][ T6818] netlink: 'syz.3.261': attribute type 3 has an invalid length. [ 203.190131][ T6818] netlink: 'syz.3.261': attribute type 2 has an invalid length. [ 203.190144][ T6818] netlink: 64046 bytes leftover after parsing attributes in process `syz.3.261'. [ 203.359296][ T6825] binder: 6824:6825 ioctl c0306201 2000000001c0 returned -14 [ 203.949762][ T5717] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 204.112399][ T6847] FAULT_INJECTION: forcing a failure. [ 204.112399][ T6847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.112441][ T6847] CPU: 0 UID: 0 PID: 6847 Comm: syz.0.272 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 204.112472][ T6847] Tainted: [L]=SOFTLOCKUP [ 204.112479][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.112491][ T6847] Call Trace: [ 204.112500][ T6847] [ 204.112509][ T6847] dump_stack_lvl+0xe8/0x150 [ 204.112544][ T6847] should_fail_ex+0x46b/0x600 [ 204.112579][ T6847] prepare_alloc_pages+0x22a/0x6b0 [ 204.112617][ T6847] __alloc_frozen_pages_noprof+0x12f/0x380 [ 204.112653][ T6847] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 204.112686][ T6847] ? __pfx_policy_nodemask+0x10/0x10 [ 204.112713][ T6847] ? filemap_get_entry+0x378/0x3f0 [ 204.112742][ T6847] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.112770][ T6847] ? __pfx_filemap_get_entry+0x10/0x10 [ 204.112799][ T6847] alloc_pages_mpol+0xd1/0x380 [ 204.112843][ T6847] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 204.112874][ T6847] shmem_get_folio_gfp+0x647/0x1ad0 [ 204.112925][ T6847] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 204.112948][ T6847] ? __lock_acquire+0x6b5/0x2d10 [ 204.112985][ T6847] shmem_fault+0x170/0x380 [ 204.113021][ T6847] __do_fault+0x138/0x2a0 [ 204.113054][ T6847] do_pte_missing+0x65b/0x2940 [ 204.113093][ T6847] ? handle_mm_fault+0xed/0x14d0 [ 204.113124][ T6847] handle_mm_fault+0xdc2/0x14d0 [ 204.113154][ T6847] ? handle_mm_fault+0xed/0x14d0 [ 204.113185][ T6847] ? __pfx_handle_mm_fault+0x10/0x10 [ 204.113213][ T6847] ? follow_page_pte+0xbe2/0xe60 [ 204.113249][ T6847] ? __pfx_follow_page_pte+0x10/0x10 [ 204.113288][ T6847] __get_user_pages+0x16d4/0x2620 [ 204.113323][ T6847] ? __gup_longterm_locked+0x666/0x1630 [ 204.113369][ T6847] __gup_longterm_locked+0x7ed/0x1630 [ 204.113420][ T6847] gup_fast_fallback+0x1cfd/0x2040 [ 204.113480][ T6847] ? __pfx_gup_fast_fallback+0x10/0x10 [ 204.113507][ T6847] ? __kvmalloc_node_noprof+0x3df/0x8e0 [ 204.113536][ T6847] ? is_valid_gup_args+0x11f/0x200 [ 204.113562][ T6847] ? pin_user_pages_fast+0x4d/0xb0 [ 204.113591][ T6847] io_pin_pages+0xba/0x1b0 [ 204.113621][ T6847] io_region_pin_pages+0x7d/0x190 [ 204.113654][ T6847] io_create_region+0x38c/0x4a0 [ 204.113692][ T6847] io_allocate_scq_urings+0x220/0x820 [ 204.113729][ T6847] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.113769][ T6847] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 204.113819][ T6847] ? bpf_lsm_capable+0x9/0x20 [ 204.113839][ T6847] ? security_capable+0x7e/0x2c0 [ 204.113867][ T6847] io_uring_create+0x47d/0x9a0 [ 204.113905][ T6847] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 204.113938][ T6847] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 204.113965][ T6847] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 204.114015][ T6847] ? __pfx_ksys_write+0x10/0x10 [ 204.114057][ T6847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.114082][ T6847] do_syscall_64+0x174/0x580 [ 204.114115][ T6847] ? trace_irq_disable+0x3b/0x140 [ 204.114140][ T6847] ? clear_bhb_loop+0x40/0x90 [ 204.114167][ T6847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.114190][ T6847] RIP: 0033:0x7fba4a14ce59 [ 204.114211][ T6847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.114231][ T6847] RSP: 002b:00007fba483a5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 204.114256][ T6847] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fba4a14ce59 [ 204.114272][ T6847] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00000000000027e2 [ 204.114287][ T6847] RBP: 00007fba483a6090 R08: 0000000000000000 R09: 0000000000000101 [ 204.114302][ T6847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.114316][ T6847] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd375e0708 [ 204.114348][ T6847] [ 204.114539][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 204.158810][ T5717] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 204.252725][ T5717] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.252758][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.252777][ T5717] usb 4-1: Product: э [ 204.252794][ T5717] usb 4-1: Manufacturer: Ё [ 204.252808][ T5717] usb 4-1: SerialNumber: ೗潹ጐ豐ગ왍艦ᇇ鄎༧폘陰᧞ڀꛛ䤑鼀⃕㋤柟偡븛⤙翁읉饛፻岬킁譝橰묙䔵ﰂ璝䦭螡穰噪 [ 204.667372][ T5717] cdc_ncm 4-1:1.0: bind() failure [ 204.724053][ T5717] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 204.724110][ T5717] cdc_ncm 4-1:1.1: bind() failure [ 204.755521][ T5717] usb 4-1: USB disconnect, device number 20 [ 205.030688][ T6859] netlink: 'syz.0.277': attribute type 16 has an invalid length. [ 205.030713][ T6859] netlink: 'syz.0.277': attribute type 3 has an invalid length. [ 205.030727][ T6859] netlink: 'syz.0.277': attribute type 2 has an invalid length. [ 205.030742][ T6859] netlink: 64046 bytes leftover after parsing attributes in process `syz.0.277'. [ 205.252123][ T6869] comedi comedi2: dt2815: I/O base address or length out of range [ 205.252579][ T6869] capability: warning: `syz.1.282' uses deprecated v2 capabilities in a way that may be insecure [ 205.332884][ T6874] netlink: 112 bytes leftover after parsing attributes in process `syz.0.281'. [ 205.619888][ T6884] loop5: detected capacity change from 0 to 7 [ 205.738536][ T1253] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 205.840226][ T6884] loop5: [POWERTEC] p1 p2 p3 p4 [ 205.840517][ T6884] loop5: p1 size 1153433600 extends beyond EOD, truncated [ 205.930016][ T1253] usb 1-1: Using ep0 maxpacket: 32 [ 205.932335][ T1253] usb 1-1: config 0 has no interfaces? [ 206.023594][ T1253] usb 1-1: string descriptor 0 read error: -71 [ 206.023763][ T1253] usb 1-1: New USB device found, idVendor=0c26, idProduct=0012, bcdDevice=53.19 [ 206.023791][ T1253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.032516][ T6884] loop5: p2 size 327680 extends beyond EOD, truncated [ 206.032941][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 206.068218][ T1253] usb 1-1: config 0 descriptor?? [ 206.070440][ T1253] usb 1-1: can't set config #0, error -71 [ 206.078649][ T1253] usb 1-1: USB disconnect, device number 18 [ 206.151128][ T6884] loop5: p3 start 589824 is beyond EOD, truncated [ 206.151158][ T6884] loop5: p4 start 1848407154 is beyond EOD, truncated [ 206.267603][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 206.290139][ T9] usb 4-1: config index 0 descriptor too short (expected 11556, got 36) [ 206.290175][ T9] usb 4-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 206.290197][ T9] usb 4-1: config 0 has no interfaces? [ 206.295887][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 206.295922][ T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 206.295945][ T9] usb 4-1: Product: syz [ 206.295961][ T9] usb 4-1: Manufacturer: syz [ 206.295977][ T9] usb 4-1: SerialNumber: syz [ 206.379937][ T9] usb 4-1: config 0 descriptor?? [ 206.625884][ T9] usb 4-1: USB disconnect, device number 21 [ 206.663623][ T6906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.296'. [ 207.085818][ T1253] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 207.230270][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'. [ 207.239583][ T1253] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.239617][ T1253] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.239666][ T1253] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=d7.00 [ 207.239689][ T1253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.254767][ T1253] usb 1-1: config 0 descriptor?? [ 207.787760][ T1253] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 207.787800][ T1253] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 207.787826][ T1253] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 207.787851][ T1253] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 207.787877][ T1253] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 207.787912][ T1253] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 207.787936][ T1253] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 207.787963][ T1253] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 207.787989][ T1253] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 207.788013][ T1253] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 207.788601][ T1253] asus 0003:0B05:1ABE.0003: unexpected long global item [ 207.789579][ T1253] asus 0003:0B05:1ABE.0003: Asus hid parse failed: -22 [ 207.789700][ T1253] asus 0003:0B05:1ABE.0003: probe with driver asus failed with error -22 [ 207.873721][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.879223][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.917094][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.920150][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.113304][ T1253] usb 1-1: USB disconnect, device number 19 [ 208.769856][ T6974] loop8: detected capacity change from 0 to 7 [ 208.824818][ T821] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 208.859282][ T6974] Dev loop8: unable to read RDB block 7 [ 208.859329][ T6974] loop8: unable to read partition table [ 208.859571][ T6974] loop8: partition table beyond EOD, truncated [ 208.859609][ T6974] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 208.984623][ T6983] netlink: 'syz.3.326': attribute type 10 has an invalid length. [ 209.008492][ T5717] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 209.016549][ T821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.016612][ T821] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 209.016638][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.108728][ T821] usb 5-1: config 0 descriptor?? [ 209.142686][ T821] pwc: Askey VC010 type 2 USB webcam detected. [ 209.172749][ T5717] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 209.189973][ T5717] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.190009][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.190032][ T5717] usb 1-1: Product: 뿸ｇ蹔莽㮘㲵ꦵ鬰쭊颴츏粳뻰夔᧱஛陾驛黧鞚䫭헫뗑Y鄩磊赵凃泄Ꜣ㎡肢㬫⬧觏ꦣｍ⌬跊㎡袬菉Ԕ䪒뻿ᰑ簜刴ල걀갾흻㽧苃䊥흴뎭騄孃囵靋ᑯၗ駨机㻨呖艝㱜魸Ǝ谍㒫꙰䁾좩볩쎬퐾歟陵犛陁᫟ [ 209.190064][ T5717] usb 1-1: Manufacturer: ᐉ [ 209.190080][ T5717] usb 1-1: SerialNumber: 霝㥻劵뇝䦱놹是餝폔﯈ⷥ腭쫘怌싉맺鮰䃊䠮らヤ䰼骜⫻鲱扛 [ 209.341461][ T821] pwc: recv_control_msg error -32 req 02 val 2b00 [ 209.351476][ T821] pwc: recv_control_msg error -32 req 02 val 2700 [ 209.369055][ T821] pwc: recv_control_msg error -32 req 02 val 2c00 [ 209.440974][ T821] pwc: recv_control_msg error -32 req 04 val 1000 [ 209.442243][ T821] pwc: recv_control_msg error -32 req 04 val 1300 [ 209.453905][ T5717] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 209.456425][ T5717] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 209.456452][ T5717] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 209.469764][ T821] pwc: recv_control_msg error -32 req 04 val 1400 [ 209.490890][ T821] pwc: recv_control_msg error -32 req 02 val 2000 [ 209.509469][ T821] pwc: recv_control_msg error -32 req 02 val 2100 [ 209.511568][ T821] pwc: recv_control_msg error -32 req 04 val 1500 [ 209.631958][ T6993] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 209.745251][ T6990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.752689][ T6990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.800541][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.861452][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.887212][ T6993] netlink: 80 bytes leftover after parsing attributes in process `syz.3.329'. [ 210.000206][ T821] pwc: recv_control_msg error -71 req 02 val 2400 [ 210.000786][ T821] pwc: recv_control_msg error -71 req 02 val 2600 [ 210.001320][ T821] pwc: recv_control_msg error -71 req 02 val 2900 [ 210.026734][ T821] pwc: recv_control_msg error -71 req 02 val 2800 [ 210.027557][ T821] pwc: recv_control_msg error -71 req 04 val 1100 [ 210.028749][ T821] pwc: recv_control_msg error -71 req 04 val 1200 [ 210.113638][ T821] pwc: Registered as video103. [ 210.143374][ T821] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 210.165864][ T821] usb 5-1: USB disconnect, device number 3 [ 210.805178][ T5717] usb 1-1: USB disconnect, device number 20 [ 211.024495][ T5807] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 211.044723][ T821] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 211.050494][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.192874][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 211.205461][ T5807] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 211.205659][ T5807] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.206500][ T821] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 211.206553][ T821] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 211.206642][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.213232][ T5807] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 211.213266][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.213287][ T5807] usb 4-1: Product: syz [ 211.213302][ T5807] usb 4-1: Manufacturer: syz [ 211.213319][ T5807] usb 4-1: SerialNumber: syz [ 211.344024][ T821] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 211.534631][ T5717] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 211.660734][ T5807] ljca 4-1:1.0: probe with driver ljca failed with error -71 [ 211.678760][ T5807] usb 4-1: USB disconnect, device number 22 [ 211.702434][ T5717] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 211.702468][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.767982][ T5717] usb 1-1: config 0 descriptor?? [ 211.972101][ T7024] netlink: 'syz.0.340': attribute type 5 has an invalid length. [ 212.147470][ T5717] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f [ 212.147504][ T5717] hackrf 1-1:0.0: Could not detect board [ 212.147571][ T5717] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 212.169779][ T5717] usb 1-1: USB disconnect, device number 21 [ 212.301311][ T7051] loop5: detected capacity change from 0 to 127 [ 212.325426][ T7051] loop5: unable to read partition table [ 212.325669][ T7051] loop_reread_partitions: partition scan of loop5 (被x) failed (rc=-5) [ 212.364574][ T821] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 212.566491][ T821] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 212.566519][ T821] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 212.604596][ T821] usb 5-1: USB disconnect, device number 4 [ 213.417955][ T7054] nbd0: detected capacity change from 0 to 137438953472 [ 213.540644][ T7081] FAULT_INJECTION: forcing a failure. [ 213.540644][ T7081] name failslab, interval 1, probability 0, space 0, times 0 [ 213.540691][ T7081] CPU: 0 UID: 0 PID: 7081 Comm: syz.1.367 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 213.540724][ T7081] Tainted: [L]=SOFTLOCKUP [ 213.540732][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.540745][ T7081] Call Trace: [ 213.540754][ T7081] [ 213.540763][ T7081] dump_stack_lvl+0xe8/0x150 [ 213.540797][ T7081] should_fail_ex+0x46b/0x600 [ 213.540836][ T7081] should_failslab+0xa8/0x100 [ 213.540866][ T7081] __kmalloc_noprof+0xdf/0x7b0 [ 213.540892][ T7081] ? kfree+0x4d/0x6c0 [ 213.540914][ T7081] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 213.540948][ T7081] tomoyo_realpath_from_path+0xe3/0x5d0 [ 213.540990][ T7081] tomoyo_check_open_permission+0x229/0x470 [ 213.541027][ T7081] ? tomoyo_check_open_permission+0x1d3/0x470 [ 213.541062][ T7081] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 213.541097][ T7081] ? __asan_memset+0x22/0x50 [ 213.541147][ T7081] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 213.541181][ T7081] ? tomoyo_file_open+0x166/0x220 [ 213.541215][ T7081] security_file_open+0xa9/0x240 [ 213.541250][ T7081] do_dentry_open+0x4c0/0x13e0 [ 213.541280][ T7081] ? vfs_open+0x31/0x350 [ 213.541308][ T7081] vfs_open+0x3b/0x350 [ 213.541340][ T7081] ? path_openat+0x2ed3/0x3960 [ 213.541375][ T7081] path_openat+0x2eea/0x3960 [ 213.541444][ T7081] ? __pfx_path_openat+0x10/0x10 [ 213.541493][ T7081] ? do_raw_spin_lock+0x12b/0x2f0 [ 213.541527][ T7081] do_file_open+0x23e/0x4a0 [ 213.541557][ T7081] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 213.541604][ T7081] ? __pfx_do_file_open+0x10/0x10 [ 213.541631][ T7081] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 213.541676][ T7081] ? alloc_fd+0x679/0x6f0 [ 213.541710][ T7081] do_sys_openat2+0x115/0x200 [ 213.541738][ T7081] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.541762][ T7081] ? ksys_write+0x248/0x270 [ 213.541903][ T7081] ? __pfx_ksys_write+0x10/0x10 [ 213.541942][ T7081] __x64_sys_openat+0x138/0x170 [ 213.541971][ T7081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.541994][ T7081] do_syscall_64+0x174/0x580 [ 213.542026][ T7081] ? trace_irq_disable+0x3b/0x140 [ 213.542053][ T7081] ? clear_bhb_loop+0x40/0x90 [ 213.542088][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.542111][ T7081] RIP: 0033:0x7fb444c5ce59 [ 213.542133][ T7081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.542153][ T7081] RSP: 002b:00007fb442eb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.542179][ T7081] RAX: ffffffffffffffda RBX: 00007fb444ed5fa0 RCX: 00007fb444c5ce59 [ 213.542195][ T7081] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 213.542208][ T7081] RBP: 00007fb442eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.542222][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.542235][ T7081] R13: 00007fb444ed6038 R14: 00007fb444ed5fa0 R15: 00007fff13c723e8 [ 213.542268][ T7081] [ 213.542277][ T7081] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.741919][ T7083] netlink: 'syz.4.366': attribute type 4 has an invalid length. [ 213.811336][ T5629] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 213.811525][ T5629] Bluetooth: hci4: Injecting HCI hardware error event [ 214.040530][ T5627] block nbd0: Wrong magic (0x25609513) [ 214.112042][ T4927] block nbd0: Receive control failed (result -32) [ 214.118565][ T5617] block nbd0: Receive control failed (result -32) [ 214.257733][ T821] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 214.304798][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 214.414757][ T821] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 214.419880][ T821] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.419915][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.419954][ T821] usb 1-1: Product: 뿸ｇ蹔莽㮘㲵ꦵ鬰쭊颴츏粳뻰夔᧱஛陾驛黧鞚䫭헫뗑Y鄩磊赵凃泄Ꜣ㎡肢㬫⬧觏ꦣｍ⌬跊㎡袬菉Ԕ䪒뻿ᰑ簜刴ල걀갾흻㽧苃䊥흴뎭騄孃囵靋ᑯၗ駨机㻨呖艝㱜魸Ǝ谍㒫꙰䁾좩볩쎬퐾歟陵犛陁᫟ [ 214.419985][ T821] usb 1-1: Manufacturer: ᐉ [ 214.419999][ T821] usb 1-1: SerialNumber: 霝㥻劵뇝䦱놹是餝폔﯈ⷥ腭쫘怌싉맺鮰䃊䠮らヤ䰼骜⫻鲱扛 [ 214.484559][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.548827][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.548865][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.548886][ T9] usb 4-1: Product: syz [ 214.548901][ T9] usb 4-1: Manufacturer: syz [ 214.548917][ T9] usb 4-1: SerialNumber: syz [ 214.686659][ T5625] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.831300][ T821] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 214.840572][ T5625] usb 5-1: Using ep0 maxpacket: 16 [ 214.853966][ T821] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 214.853997][ T821] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 214.867679][ T5625] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.867710][ T5625] usb 5-1: config 0 has no interfaces? [ 214.867741][ T5625] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 214.867764][ T5625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.914026][ T5625] usb 5-1: config 0 descriptor?? [ 215.328287][ T5627] Bluetooth: hci4: command 0x206a tx timeout [ 215.346797][ T5618] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 215.347165][ T5618] Bluetooth: hci4: hardware error 0x00 [ 215.431413][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.499423][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.704577][ T5717] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 215.808010][ T9] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 215.808037][ T9] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 215.808057][ T9] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 215.925109][ T5717] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 215.925140][ T5717] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 215.925163][ T5717] usb 2-1: config 0 has no interface number 0 [ 215.930364][ T821] usb 1-1: USB disconnect, device number 22 [ 215.992253][ T5717] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 215.992288][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.992311][ T5717] usb 2-1: Product: syz [ 215.992326][ T5717] usb 2-1: Manufacturer: syz [ 215.992342][ T5717] usb 2-1: SerialNumber: syz [ 216.040543][ T9] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 216.097071][ T5807] usb 5-1: USB disconnect, device number 5 [ 216.247934][ T5717] usb 2-1: config 0 descriptor?? [ 216.294040][ T6076] udevd[6076]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.387214][ T9] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 216.439174][ T9] usb 4-1: USB disconnect, device number 23 [ 216.467535][ T9] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 216.471850][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.472485][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.483753][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.490533][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.520940][ T5717] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 216.520976][ T5717] uvcvideo 2-1:0.64: No valid video chain found. [ 216.544866][ T5717] usb 2-1: USB disconnect, device number 21 [ 216.737279][ T7117] FAULT_INJECTION: forcing a failure. [ 216.737279][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 216.737320][ T7117] CPU: 1 UID: 0 PID: 7117 Comm: syz.3.379 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 216.737349][ T7117] Tainted: [L]=SOFTLOCKUP [ 216.737357][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.737369][ T7117] Call Trace: [ 216.737377][ T7117] [ 216.737387][ T7117] dump_stack_lvl+0xe8/0x150 [ 216.737417][ T7117] should_fail_ex+0x46b/0x600 [ 216.737455][ T7117] should_failslab+0xa8/0x100 [ 216.737486][ T7117] kmem_cache_alloc_noprof+0x87/0x680 [ 216.737512][ T7117] ? skb_clone+0x212/0x3a0 [ 216.737537][ T7117] skb_clone+0x212/0x3a0 [ 216.737562][ T7117] __netlink_deliver_tap+0x424/0x8b0 [ 216.737611][ T7117] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.737643][ T7117] netlink_deliver_tap+0x19c/0x1b0 [ 216.737679][ T7117] netlink_unicast+0x754/0x920 [ 216.737723][ T7117] netlink_sendmsg+0x813/0xb40 [ 216.737764][ T7117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.737789][ T7117] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 216.737821][ T7117] ? aa_sock_msg_perm+0x122/0x200 [ 216.737846][ T7117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.737867][ T7117] sock_sendmsg_nosec+0x13a/0x180 [ 216.737897][ T7117] ____sys_sendmsg+0x55c/0x870 [ 216.737937][ T7117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.737982][ T7117] ? import_iovec+0x73/0xa0 [ 216.738012][ T7117] ___sys_sendmsg+0x2a5/0x360 [ 216.738043][ T7117] ? __lock_acquire+0x6b5/0x2d10 [ 216.738073][ T7117] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.738141][ T7117] ? __fget_files+0x2a/0x420 [ 216.738166][ T7117] ? __fget_files+0x3a6/0x420 [ 216.738208][ T7117] __x64_sys_sendmsg+0x1c3/0x2a0 [ 216.738246][ T7117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.738290][ T7117] ? __pfx_ksys_write+0x10/0x10 [ 216.738331][ T7117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.738356][ T7117] do_syscall_64+0x174/0x580 [ 216.738387][ T7117] ? trace_irq_disable+0x3b/0x140 [ 216.738411][ T7117] ? clear_bhb_loop+0x40/0x90 [ 216.738439][ T7117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.738462][ T7117] RIP: 0033:0x7f010367ce59 [ 216.738483][ T7117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.738502][ T7117] RSP: 002b:00007f01018ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.738526][ T7117] RAX: ffffffffffffffda RBX: 00007f01038f5fa0 RCX: 00007f010367ce59 [ 216.738543][ T7117] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 216.738555][ T7117] RBP: 00007f01018ce090 R08: 0000000000000000 R09: 0000000000000000 [ 216.738569][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.738583][ T7117] R13: 00007f01038f6038 R14: 00007f01038f5fa0 R15: 00007ffc538195f8 [ 216.738619][ T7117] [ 217.404115][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 217.404168][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 217.405168][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 217.599259][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 217.764549][ T7136] netlink: 'syz.4.387': attribute type 16 has an invalid length. [ 217.764702][ T7136] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.387'. [ 217.874503][ T5618] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 218.188920][ T821] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 218.337275][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.337315][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 218.337343][ T821] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 218.337387][ T821] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 218.337413][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.360156][ T821] usb 1-1: config 0 descriptor?? [ 218.364180][ T7142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.755670][ T1253] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 218.914809][ T1253] usb 2-1: Using ep0 maxpacket: 16 [ 218.922712][ T1253] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 218.922744][ T1253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.940879][ T1253] usb 2-1: config 0 descriptor?? [ 219.210872][ T821] usbhid 1-1:0.0: can't add hid device: -71 [ 219.211091][ T821] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 219.263131][ T821] usb 1-1: USB disconnect, device number 23 [ 219.364133][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.377823][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.389225][ T1253] usbhid 2-1:0.0: can't add hid device: -71 [ 219.389355][ T1253] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 219.440476][ T1253] usb 2-1: USB disconnect, device number 22 [ 219.647171][ T821] IPVS: starting estimator thread 0... [ 219.734852][ T7183] IPVS: using max 13 ests per chain, 31200 per kthread [ 219.878045][ T5625] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 220.014869][ T5625] usb 5-1: device descriptor read/64, error -71 [ 220.084606][ T1253] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 220.154217][ T7201] netlink: 324 bytes leftover after parsing attributes in process `syz.3.411'. [ 220.255799][ T5625] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 220.278543][ T1253] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.278575][ T1253] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 220.278629][ T1253] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.288828][ T1253] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 220.288859][ T1253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.288878][ T1253] usb 1-1: Product: syz [ 220.288891][ T1253] usb 1-1: Manufacturer: syz [ 220.288905][ T1253] usb 1-1: SerialNumber: syz [ 220.320181][ T1253] usb 1-1: config 0 descriptor?? [ 220.368130][ T1253] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 220.385323][ T5625] usb 5-1: device descriptor read/64, error -71 [ 220.495570][ T5625] usb usb5-port1: attempt power cycle [ 220.865048][ T5625] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 220.879296][ T7220] autofs: Unknown parameter '77777' [ 220.898204][ T5625] usb 5-1: device descriptor read/8, error -71 [ 221.175907][ T5625] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 221.199108][ T5625] usb 5-1: device descriptor read/8, error -71 [ 221.201899][ T7227] FAULT_INJECTION: forcing a failure. [ 221.201899][ T7227] name failslab, interval 1, probability 0, space 0, times 0 [ 221.201941][ T7227] CPU: 1 UID: 0 PID: 7227 Comm: syz.1.422 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 221.201973][ T7227] Tainted: [L]=SOFTLOCKUP [ 221.201980][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.201994][ T7227] Call Trace: [ 221.202002][ T7227] [ 221.202011][ T7227] dump_stack_lvl+0xe8/0x150 [ 221.202046][ T7227] should_fail_ex+0x46b/0x600 [ 221.202084][ T7227] should_failslab+0xa8/0x100 [ 221.202116][ T7227] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 221.202148][ T7227] ? vfs_parse_monolithic_sep+0x21d/0x360 [ 221.202186][ T7227] kmemdup_nul+0x36/0xf0 [ 221.202211][ T7227] vfs_parse_monolithic_sep+0x21d/0x360 [ 221.202244][ T7227] ? __pfx_ovl_next_opt+0x10/0x10 [ 221.202268][ T7227] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 221.202314][ T7227] ? alloc_fs_context+0x9e9/0xd50 [ 221.202356][ T7227] do_new_mount+0x304/0xd30 [ 221.202380][ T7227] ? apparmor_capable+0x126/0x170 [ 221.202413][ T7227] ? security_capable+0x7e/0x2c0 [ 221.202436][ T7227] ? __pfx_do_new_mount+0x10/0x10 [ 221.202470][ T7227] ? ns_capable+0x89/0xe0 [ 221.202505][ T7227] ? path_mount+0x690/0x10e0 [ 221.202529][ T7227] ? user_path_at+0xd4/0x160 [ 221.202562][ T7227] ? user_path_at+0xd4/0x160 [ 221.202593][ T7227] __se_sys_mount+0x31d/0x420 [ 221.202625][ T7227] ? __pfx___se_sys_mount+0x10/0x10 [ 221.202659][ T7227] ? __x64_sys_mount+0x20/0xc0 [ 221.202685][ T7227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.202709][ T7227] do_syscall_64+0x174/0x580 [ 221.202744][ T7227] ? clear_bhb_loop+0x40/0x90 [ 221.202771][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.202795][ T7227] RIP: 0033:0x7fb444c5ce59 [ 221.202816][ T7227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.202835][ T7227] RSP: 002b:00007fb442eb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 221.202861][ T7227] RAX: ffffffffffffffda RBX: 00007fb444ed5fa0 RCX: 00007fb444c5ce59 [ 221.202878][ T7227] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 221.202894][ T7227] RBP: 00007fb442eb6090 R08: 00002000000001c0 R09: 0000000000000000 [ 221.202909][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.202922][ T7227] R13: 00007fb444ed6038 R14: 00007fb444ed5fa0 R15: 00007fff13c723e8 [ 221.202957][ T7227] [ 221.315011][ T5625] usb usb5-port1: unable to enumerate USB device [ 221.673219][ T7236] netlink: 'syz.3.426': attribute type 16 has an invalid length. [ 221.673247][ T7236] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.426'. [ 222.024895][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.431'. [ 222.825916][ T7266] binder_alloc: 7264: binder_alloc_buf size 5188146770730811480 failed, no address space [ 222.826133][ T7266] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 222.924294][ T1253] usb 1-1: USB disconnect, device number 24 [ 223.274569][ T5625] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 223.348594][ T7274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.444'. [ 223.436576][ T5625] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 223.460661][ T5625] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.460698][ T5625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.460721][ T5625] usb 4-1: Product: 뿸ｇ蹔莽㮘㲵ꦵ鬰쭊颴츏粳뻰夔᧱஛陾驛黧鞚䫭헫뗑Y鄩磊赵凃泄Ꜣ㎡肢㬫⬧觏ꦣｍ⌬跊㎡袬菉Ԕ䪒뻿ᰑ簜刴ල걀갾흻㽧苃䊥흴뎭騄孃囵靋ᑯၗ駨机㻨呖艝㱜魸Ǝ谍㒫꙰䁾좩볩쎬퐾歟陵犛陁᫟ [ 223.460754][ T5625] usb 4-1: Manufacturer: ᐉ [ 223.460771][ T5625] usb 4-1: SerialNumber: 霝㥻劵뇝䦱놹是餝폔﯈ⷥ腭쫘怌싉맺鮰䃊䠮らヤ䰼骜⫻鲱扛 [ 223.785236][ T5625] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 223.785785][ T5625] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 223.785813][ T5625] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 223.977526][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.449'. [ 224.237009][ T5625] usb 4-1: USB disconnect, device number 24 [ 224.324911][ T6076] udevd[6076]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.692910][ T7307] FAULT_INJECTION: forcing a failure. [ 224.692910][ T7307] name failslab, interval 1, probability 0, space 0, times 0 [ 224.692953][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.1.457 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 224.692983][ T7307] Tainted: [L]=SOFTLOCKUP [ 224.692991][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.693004][ T7307] Call Trace: [ 224.693013][ T7307] [ 224.693022][ T7307] dump_stack_lvl+0xe8/0x150 [ 224.693055][ T7307] should_fail_ex+0x46b/0x600 [ 224.693089][ T7307] ? __pfx_super_s_dev_test+0x10/0x10 [ 224.693120][ T7307] should_failslab+0xa8/0x100 [ 224.693151][ T7307] __kmalloc_cache_noprof+0x84/0x690 [ 224.693178][ T7307] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 224.693204][ T7307] ? alloc_super+0x5b/0xac0 [ 224.693231][ T7307] ? __pfx_super_s_dev_test+0x10/0x10 [ 224.693263][ T7307] alloc_super+0x5b/0xac0 [ 224.693291][ T7307] ? rt_spin_unlock+0x160/0x200 [ 224.693317][ T7307] ? __pfx_super_s_dev_test+0x10/0x10 [ 224.693346][ T7307] sget_fc+0x329/0xa40 [ 224.693375][ T7307] ? __pfx_super_s_dev_set+0x10/0x10 [ 224.693408][ T7307] get_tree_bdev_flags+0x214/0x4f0 [ 224.693440][ T7307] ? __pfx_efs_fill_super+0x10/0x10 [ 224.693474][ T7307] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 224.693516][ T7307] vfs_get_tree+0x92/0x2a0 [ 224.693549][ T7307] do_new_mount+0x341/0xd30 [ 224.693572][ T7307] ? apparmor_capable+0x126/0x170 [ 224.693608][ T7307] ? __pfx_do_new_mount+0x10/0x10 [ 224.693632][ T7307] ? ns_capable+0x89/0xe0 [ 224.693668][ T7307] ? user_path_at+0xd4/0x160 [ 224.693701][ T7307] ? user_path_at+0xd4/0x160 [ 224.693732][ T7307] __se_sys_mount+0x31d/0x420 [ 224.693765][ T7307] ? __pfx___se_sys_mount+0x10/0x10 [ 224.693805][ T7307] ? __x64_sys_mount+0x20/0xc0 [ 224.693828][ T7307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.693851][ T7307] do_syscall_64+0x174/0x580 [ 224.693881][ T7307] ? trace_irq_disable+0x3b/0x140 [ 224.693907][ T7307] ? clear_bhb_loop+0x40/0x90 [ 224.693935][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.693957][ T7307] RIP: 0033:0x7fb444c5ce59 [ 224.693979][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.693999][ T7307] RSP: 002b:00007fb442eb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.694023][ T7307] RAX: ffffffffffffffda RBX: 00007fb444ed5fa0 RCX: 00007fb444c5ce59 [ 224.694038][ T7307] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 0000200000000040 [ 224.694052][ T7307] RBP: 00007fb442eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.694066][ T7307] R10: 0000000000208008 R11: 0000000000000246 R12: 0000000000000002 [ 224.694079][ T7307] R13: 00007fb444ed6038 R14: 00007fb444ed5fa0 R15: 00007fff13c723e8 [ 224.694111][ T7307] [ 226.060338][ T7338] loop8: detected capacity change from 0 to 8 [ 226.084794][ T7338] Dev loop8: unable to read RDB block 8 [ 226.084862][ T7338] loop8: unable to read partition table [ 226.085098][ T7338] loop8: partition table beyond EOD, truncated [ 226.085136][ T7338] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 226.099057][ T7339] tipc: Started in network mode [ 226.099090][ T7339] tipc: Node identity 00000000000000003a5f0021, cluster identity 4711 [ 226.279026][ T7344] loop2: detected capacity change from 0 to 7 [ 226.280435][ T7344] Dev loop2: unable to read RDB block 7 [ 226.280477][ T7344] loop2: unable to read partition table [ 226.280706][ T7344] loop2: partition table beyond EOD, truncated [ 226.280727][ T7344] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 226.327538][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.328176][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.599809][ T821] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 226.614567][ T5625] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 226.773038][ T5625] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 226.788293][ T5625] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.788329][ T5625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.788351][ T5625] usb 4-1: Product: 뿸ｇ蹔莽㮘㲵ꦵ鬰쭊颴츏粳뻰夔᧱஛陾驛黧鞚䫭헫뗑Y鄩磊赵凃泄Ꜣ㎡肢㬫⬧觏ꦣｍ⌬跊㎡袬菉Ԕ䪒뻿ᰑ簜刴ල걀갾흻㽧苃䊥흴뎭騄孃囵靋ᑯၗ駨机㻨呖艝㱜魸Ǝ谍㒫꙰䁾좩볩쎬퐾歟陵犛陁᫟ [ 226.788382][ T5625] usb 4-1: Manufacturer: ᐉ [ 226.788398][ T5625] usb 4-1: SerialNumber: 霝㥻劵뇝䦱놹是餝폔﯈ⷥ腭쫘怌싉맺鮰䃊䠮らヤ䰼骜⫻鲱扛 [ 227.147501][ T5625] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 227.148023][ T5625] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 227.148050][ T5625] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 227.267454][ T5625] usb 4-1: USB disconnect, device number 25 [ 227.333222][ T6076] udevd[6076]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.374539][ T32] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 227.528298][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 227.528359][ T32] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 227.528389][ T32] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 227.587988][ T32] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.588026][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.588049][ T32] usb 5-1: Product: syz [ 227.588066][ T32] usb 5-1: Manufacturer: syz [ 227.588080][ T32] usb 5-1: SerialNumber: syz [ 227.632415][ T7363] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 227.842271][ T7363] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 227.842569][ T7363] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 227.982621][ T7370] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.481'. [ 228.022897][ T7371] FAULT_INJECTION: forcing a failure. [ 228.022897][ T7371] name failslab, interval 1, probability 0, space 0, times 0 [ 228.022933][ T7371] CPU: 1 UID: 0 PID: 7371 Comm: syz.1.483 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 228.022959][ T7371] Tainted: [L]=SOFTLOCKUP [ 228.022965][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 228.022976][ T7371] Call Trace: [ 228.022983][ T7371] [ 228.022991][ T7371] dump_stack_lvl+0xe8/0x150 [ 228.023024][ T7371] should_fail_ex+0x46b/0x600 [ 228.023056][ T7371] should_failslab+0xa8/0x100 [ 228.023080][ T7371] __kmalloc_cache_noprof+0x84/0x690 [ 228.023102][ T7371] ? fuse_dev_chan_new+0x65/0x4c0 [ 228.023125][ T7371] fuse_dev_chan_new+0x65/0x4c0 [ 228.023150][ T7371] fuse_get_tree+0x44/0x3a0 [ 228.023171][ T7371] vfs_get_tree+0x92/0x2a0 [ 228.023200][ T7371] do_new_mount+0x341/0xd30 [ 228.023226][ T7371] ? __pfx_do_new_mount+0x10/0x10 [ 228.023246][ T7371] ? path_mount+0x66d/0x10e0 [ 228.023269][ T7371] ? user_path_at+0xd4/0x160 [ 228.023295][ T7371] ? user_path_at+0xd4/0x160 [ 228.023318][ T7371] __se_sys_mount+0x31d/0x420 [ 228.023343][ T7371] ? __pfx___se_sys_mount+0x10/0x10 [ 228.023373][ T7371] ? __x64_sys_mount+0x20/0xc0 [ 228.023392][ T7371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.023411][ T7371] do_syscall_64+0x174/0x580 [ 228.023437][ T7371] ? trace_irq_disable+0x3b/0x140 [ 228.023457][ T7371] ? clear_bhb_loop+0x40/0x90 [ 228.023478][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.023495][ T7371] RIP: 0033:0x7fb444c5ce59 [ 228.023514][ T7371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.023529][ T7371] RSP: 002b:00007fb442e95028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.023550][ T7371] RAX: ffffffffffffffda RBX: 00007fb444ed6090 RCX: 00007fb444c5ce59 [ 228.023564][ T7371] RDX: 0000200000000380 RSI: 00002000000002c0 RDI: 0000200000000240 [ 228.023576][ T7371] RBP: 00007fb442e95090 R08: 0000000000000000 R09: 0000000000000000 [ 228.023587][ T7371] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000002 [ 228.023599][ T7371] R13: 00007fb444ed6128 R14: 00007fb444ed6090 R15: 00007fff13c723e8 [ 228.023628][ T7371] [ 228.394963][ T7373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.508893][ T7363] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 228.509035][ T7363] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 228.542562][ T7373] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 228.711310][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.712001][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.724174][ T32] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 228.724206][ T32] cdc_ncm 5-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 228.724228][ T32] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 228.882690][ T7387] FAULT_INJECTION: forcing a failure. [ 228.882690][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 228.882731][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: syz.1.490 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 228.882763][ T7387] Tainted: [L]=SOFTLOCKUP [ 228.882770][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 228.882782][ T7387] Call Trace: [ 228.882790][ T7387] [ 228.882799][ T7387] dump_stack_lvl+0xe8/0x150 [ 228.882828][ T7387] should_fail_ex+0x46b/0x600 [ 228.882864][ T7387] should_failslab+0xa8/0x100 [ 228.882893][ T7387] kmem_cache_alloc_noprof+0x87/0x680 [ 228.882915][ T7387] ? rcu_is_watching+0x15/0xb0 [ 228.882939][ T7387] ? security_file_alloc+0x34/0x310 [ 228.882967][ T7387] security_file_alloc+0x34/0x310 [ 228.882993][ T7387] init_file+0x96/0x2d0 [ 228.883015][ T7387] alloc_empty_file+0x74/0x1d0 [ 228.883036][ T7387] path_openat+0x11b/0x3960 [ 228.883069][ T7387] ? try_to_take_rt_mutex+0x840/0xb00 [ 228.883091][ T7387] ? arch_stack_walk+0xfb/0x150 [ 228.883126][ T7387] ? __lock_acquire+0x6b5/0x2d10 [ 228.883153][ T7387] ? __pfx_path_openat+0x10/0x10 [ 228.883180][ T7387] ? kasan_save_track+0x4f/0x80 [ 228.883199][ T7387] ? kasan_save_track+0x3e/0x80 [ 228.883217][ T7387] ? __kasan_slab_alloc+0x6c/0x80 [ 228.883245][ T7387] ? do_raw_spin_lock+0x12b/0x2f0 [ 228.883272][ T7387] do_file_open+0x23e/0x4a0 [ 228.883296][ T7387] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 228.883326][ T7387] ? __pfx_do_file_open+0x10/0x10 [ 228.883347][ T7387] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 228.883389][ T7387] ? alloc_fd+0x679/0x6f0 [ 228.883418][ T7387] do_sys_openat2+0x115/0x200 [ 228.883456][ T7387] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.883485][ T7387] ? exc_page_fault+0x6a/0xc0 [ 228.883514][ T7387] ? do_user_addr_fault+0xc6f/0x1340 [ 228.883538][ T7387] __x64_sys_openat+0x138/0x170 [ 228.883560][ T7387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.883579][ T7387] do_syscall_64+0x174/0x580 [ 228.883604][ T7387] ? trace_irq_disable+0x3b/0x140 [ 228.883625][ T7387] ? clear_bhb_loop+0x40/0x90 [ 228.883645][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.883663][ T7387] RIP: 0033:0x7fb444c1d68e [ 228.883682][ T7387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.883697][ T7387] RSP: 002b:00007fb442eb5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 228.883718][ T7387] RAX: ffffffffffffffda RBX: 00007fb442eb66c0 RCX: 00007fb444c1d68e [ 228.883732][ T7387] RDX: 0000000000082000 RSI: 00007fb442eb5c00 RDI: ffffffffffffff9c [ 228.883744][ T7387] RBP: 00007fb442eb5c00 R08: 0000000000000000 R09: 0000000000000000 [ 228.883756][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 228.883768][ T7387] R13: 00007fb444ed6038 R14: 00007fb444ed5fa0 R15: 00007fff13c723e8 [ 228.883798][ T7387] [ 229.233938][ T32] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 229.264293][ T32] usb 5-1: USB disconnect, device number 10 [ 229.273752][ T32] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 229.585717][ T7405] binder: 7404:7405 ioctl c0306201 2000000001c0 returned -14 [ 229.664645][ T5765] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 229.846534][ T7414] fuseblk: Unknown parameter 'gro [ 231.884347][ T7479] dump_stack_lvl+0xe8/0x150 [ 231.884381][ T7479] should_fail_ex+0x46b/0x600 [ 231.884428][ T7479] prepare_alloc_pages+0x22a/0x6b0 [ 231.884466][ T7479] __alloc_frozen_pages_noprof+0x12f/0x380 [ 231.884502][ T7479] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 231.884537][ T7479] ? __pfx_policy_nodemask+0x10/0x10 [ 231.884564][ T7479] ? filemap_get_entry+0x378/0x3f0 [ 231.884592][ T7479] ? do_raw_spin_lock+0x12b/0x2f0 [ 231.884614][ T7479] ? __pfx_filemap_get_entry+0x10/0x10 [ 231.884647][ T7479] alloc_pages_mpol+0xd1/0x380 [ 231.884680][ T7479] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 231.884713][ T7479] shmem_get_folio_gfp+0x647/0x1ad0 [ 231.884764][ T7479] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 231.884788][ T7479] ? __lock_acquire+0x6b5/0x2d10 [ 231.884825][ T7479] shmem_fault+0x170/0x380 [ 231.884859][ T7479] __do_fault+0x138/0x2a0 [ 231.884893][ T7479] do_pte_missing+0x65b/0x2940 [ 231.884931][ T7479] ? handle_mm_fault+0xed/0x14d0 [ 231.884963][ T7479] handle_mm_fault+0xdc2/0x14d0 [ 231.884994][ T7479] ? handle_mm_fault+0xed/0x14d0 [ 231.885025][ T7479] ? __pfx_handle_mm_fault+0x10/0x10 [ 231.885052][ T7479] ? follow_page_pte+0xbe2/0xe60 [ 231.885088][ T7479] ? __pfx_follow_page_pte+0x10/0x10 [ 231.885126][ T7479] __get_user_pages+0x16d4/0x2620 [ 231.885161][ T7479] ? __gup_longterm_locked+0x666/0x1630 [ 231.885206][ T7479] __gup_longterm_locked+0x7ed/0x1630 [ 231.885258][ T7479] gup_fast_fallback+0x1cfd/0x2040 [ 231.885318][ T7479] ? __pfx_gup_fast_fallback+0x10/0x10 [ 231.885346][ T7479] ? __kvmalloc_node_noprof+0x3df/0x8e0 [ 231.885374][ T7479] ? is_valid_gup_args+0x11f/0x200 [ 231.885402][ T7479] ? pin_user_pages_fast+0x4d/0xb0 [ 231.885437][ T7479] io_pin_pages+0xba/0x1b0 [ 231.885466][ T7479] io_region_pin_pages+0x7d/0x190 [ 231.885499][ T7479] io_create_region+0x38c/0x4a0 [ 231.885537][ T7479] io_allocate_scq_urings+0x220/0x820 [ 231.885575][ T7479] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 231.885616][ T7479] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 231.885655][ T7479] ? bpf_lsm_capable+0x9/0x20 [ 231.885674][ T7479] ? security_capable+0x7e/0x2c0 [ 231.885705][ T7479] io_uring_create+0x47d/0x9a0 [ 231.885743][ T7479] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 231.885777][ T7479] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 231.885806][ T7479] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 231.885855][ T7479] ? __pfx_ksys_write+0x10/0x10 [ 231.885896][ T7479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.885920][ T7479] do_syscall_64+0x174/0x580 [ 231.885954][ T7479] ? trace_irq_disable+0x3b/0x140 [ 231.885979][ T7479] ? clear_bhb_loop+0x40/0x90 [ 231.886008][ T7479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.886030][ T7479] RIP: 0033:0x7fb444c5ce59 [ 231.886052][ T7479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.886072][ T7479] RSP: 002b:00007fb442eb5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 231.886097][ T7479] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fb444c5ce59 [ 231.886114][ T7479] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00000000000027e2 [ 231.886129][ T7479] RBP: 00007fb442eb6090 R08: 0000000000000000 R09: 0000000000000101 [ 231.886143][ T7479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.886157][ T7479] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff13c723e8 [ 231.886199][ T7479] [ 232.457634][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.536'. [ 232.528204][ T5618] block nbd1: Receive control failed (result -107) [ 232.532625][ T5618] [ 232.532635][ T5618] ====================================================== [ 232.532641][ T5618] WARNING: possible circular locking dependency detected [ 232.532649][ T5618] syzkaller #0 Tainted: G L [ 232.532657][ T5618] ------------------------------------------------------ [ 232.532661][ T5618] kworker/u9:3/5618 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 232.532669][ T5618] ffff88801d74d718 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 232.532710][ T5618] [ 232.532710][ T5618] but task is already holding lock: [ 232.532714][ T5618] ffff888035add660 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c37/0x1d60 [ 232.532742][ T5618] [ 232.532742][ T5618] which lock already depends on the new lock. [ 232.532742][ T5618] [ 232.532746][ T5618] [ 232.532746][ T5618] the existing dependency chain (in reverse order) is: [ 232.532750][ T5618] [ 232.532750][ T5618] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 232.532767][ T5618] mutex_lock_nested+0x5a/0x1d0 [ 232.532781][ T5618] nbd_queue_rq+0x37b/0x1100 [ 232.532792][ T5618] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 232.532809][ T5618] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 232.532828][ T5618] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 232.532845][ T5618] blk_mq_run_hw_queue+0x368/0x520 [ 232.532860][ T5618] blk_mq_dispatch_list+0xd1f/0xe20 [ 232.532877][ T5618] blk_mq_flush_plug_list+0x48d/0x570 [ 232.532893][ T5618] __blk_flush_plug+0x3ed/0x4d0 [ 232.532910][ T5618] __submit_bio+0x28d/0x580 [ 232.532919][ T5618] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 232.532935][ T5618] block_read_full_folio+0x7b7/0x830 [ 232.532947][ T5618] filemap_read_folio+0x137/0x3b0 [ 232.532963][ T5618] do_read_cache_folio+0x2bf/0x560 [ 232.532979][ T5618] read_part_sector+0xb8/0x2b0 [ 232.532994][ T5618] adfspart_check_ICS+0xb1/0x960 [ 232.533011][ T5618] bdev_disk_changed+0x840/0x1780 [ 232.533027][ T5618] blkdev_get_whole+0x2e5/0x480 [ 232.533043][ T5618] bdev_open+0x31e/0xcc0 [ 232.533058][ T5618] blkdev_open+0x485/0x620 [ 232.533068][ T5618] do_dentry_open+0x83d/0x13e0 [ 232.533080][ T5618] vfs_open+0x3b/0x350 [ 232.533090][ T5618] path_openat+0x2eea/0x3960 [ 232.533105][ T5618] do_file_open+0x23e/0x4a0 [ 232.533120][ T5618] do_sys_openat2+0x115/0x200 [ 232.533132][ T5618] __x64_sys_openat+0x138/0x170 [ 232.533144][ T5618] do_syscall_64+0x174/0x580 [ 232.533160][ T5618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.533171][ T5618] [ 232.533171][ T5618] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 232.533187][ T5618] mutex_lock_nested+0x5a/0x1d0 [ 232.533199][ T5618] nbd_queue_rq+0xc6/0x1100 [ 232.533211][ T5618] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 232.533227][ T5618] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 232.533245][ T5618] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 232.533262][ T5618] blk_mq_run_hw_queue+0x368/0x520 [ 232.533277][ T5618] blk_mq_dispatch_list+0xd1f/0xe20 [ 232.533294][ T5618] blk_mq_flush_plug_list+0x48d/0x570 [ 232.533311][ T5618] __blk_flush_plug+0x3ed/0x4d0 [ 232.533327][ T5618] __submit_bio+0x28d/0x580 [ 232.533336][ T5618] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 232.533352][ T5618] block_read_full_folio+0x7b7/0x830 [ 232.533363][ T5618] filemap_read_folio+0x137/0x3b0 [ 232.533378][ T5618] do_read_cache_folio+0x2bf/0x560 [ 232.533394][ T5618] read_part_sector+0xb8/0x2b0 [ 232.533410][ T5618] adfspart_check_ICS+0xb1/0x960 [ 232.533426][ T5618] bdev_disk_changed+0x840/0x1780 [ 232.533442][ T5618] blkdev_get_whole+0x2e5/0x480 [ 232.533465][ T5618] bdev_open+0x31e/0xcc0 [ 232.533481][ T5618] blkdev_open+0x485/0x620 [ 232.533490][ T5618] do_dentry_open+0x83d/0x13e0 [ 232.533501][ T5618] vfs_open+0x3b/0x350 [ 232.533512][ T5618] path_openat+0x2eea/0x3960 [ 232.533527][ T5618] do_file_open+0x23e/0x4a0 [ 232.533541][ T5618] do_sys_openat2+0x115/0x200 [ 232.533553][ T5618] __x64_sys_openat+0x138/0x170 [ 232.533565][ T5618] do_syscall_64+0x174/0x580 [ 232.533581][ T5618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.533592][ T5618] [ 232.533592][ T5618] -> #4 (set->srcu){.+.+}-{0:0}: [ 232.533608][ T5618] __synchronize_srcu+0xca/0x300 [ 232.533621][ T5618] elevator_switch+0x1e8/0x7a0 [ 232.533636][ T5618] elevator_change+0x2cc/0x450 [ 232.533651][ T5618] elevator_set_default+0x36c/0x430 [ 232.533667][ T5618] blk_register_queue+0x3e9/0x4e0 [ 232.533677][ T5618] __add_disk+0x677/0xd50 [ 232.533688][ T5618] add_disk_fwnode+0xfb/0x480 [ 232.533699][ T5618] nbd_dev_add+0x72c/0xb50 [ 232.533709][ T5618] nbd_init+0x168/0x1f0 [ 232.533723][ T5618] do_one_initcall+0x250/0x870 [ 232.533737][ T5618] do_initcall_level+0x104/0x190 [ 232.533749][ T5618] do_initcalls+0x59/0xa0 [ 232.533760][ T5618] kernel_init_freeable+0x2a6/0x3e0 [ 232.533771][ T5618] kernel_init+0x1d/0x1d0 [ 232.533783][ T5618] ret_from_fork+0x514/0xb70 [ 232.533796][ T5618] ret_from_fork_asm+0x1a/0x30 [ 232.533810][ T5618] [ 232.533810][ T5618] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 232.533825][ T5618] mutex_lock_nested+0x5a/0x1d0 [ 232.533837][ T5618] elevator_change+0x1b3/0x450 [ 232.533853][ T5618] elevator_set_none+0xb5/0x140 [ 232.533868][ T5618] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 232.533880][ T5618] nbd_start_device+0x17f/0xb20 [ 232.533891][ T5618] nbd_genl_connect+0x1651/0x1c80 [ 232.533902][ T5618] genl_family_rcv_msg_doit+0x22a/0x330 [ 232.533917][ T5618] genl_rcv_msg+0x61c/0x7a0 [ 232.533930][ T5618] netlink_rcv_skb+0x232/0x4b0 [ 232.533946][ T5618] genl_rcv+0x28/0x40 [ 232.533958][ T5618] netlink_unicast+0x780/0x920 [ 232.533973][ T5618] netlink_sendmsg+0x813/0xb40 [ 232.533987][ T5618] sock_sendmsg_nosec+0x13a/0x180 [ 232.534006][ T5618] ____sys_sendmsg+0x55c/0x870 [ 232.534025][ T5618] ___sys_sendmsg+0x2a5/0x360 [ 232.534041][ T5618] __x64_sys_sendmsg+0x1c3/0x2a0 [ 232.534058][ T5618] do_syscall_64+0x174/0x580 [ 232.534075][ T5618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.534086][ T5618] [ 232.534086][ T5618] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 232.534105][ T5618] blk_alloc_queue+0x54e/0x690 [ 232.534121][ T5618] __blk_mq_alloc_disk+0x197/0x390 [ 232.534131][ T5618] nbd_dev_add+0x499/0xb50 [ 232.534142][ T5618] nbd_init+0x168/0x1f0 [ 232.534154][ T5618] do_one_initcall+0x250/0x870 [ 232.534166][ T5618] do_initcall_level+0x104/0x190 [ 232.534178][ T5618] do_initcalls+0x59/0xa0 [ 232.534189][ T5618] kernel_init_freeable+0x2a6/0x3e0 [ 232.534200][ T5618] kernel_init+0x1d/0x1d0 [ 232.534211][ T5618] ret_from_fork+0x514/0xb70 [ 232.534223][ T5618] ret_from_fork_asm+0x1a/0x30 [ 232.534238][ T5618] [ 232.534238][ T5618] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 232.534253][ T5618] fs_reclaim_acquire+0x71/0x100 [ 232.534268][ T5618] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 232.534281][ T5618] __alloc_skb+0x1d0/0x7d0 [ 232.534295][ T5618] __ip6_append_data+0x2d3c/0x3f60 [ 232.534312][ T5618] ip6_append_data+0x10f/0x2a0 [ 232.534341][ T5618] rawv6_sendmsg+0x12d3/0x18e0 [ 232.534368][ T5618] sock_sendmsg_nosec+0x10e/0x180 [ 232.534387][ T5618] ____sys_sendmsg+0x55c/0x870 [ 232.534413][ T5618] ___sys_sendmsg+0x2a5/0x360 [ 232.534437][ T5618] __x64_sys_sendmsg+0x1c3/0x2a0 [ 232.534484][ T5618] do_syscall_64+0x174/0x580 [ 232.534511][ T5618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.534530][ T5618] [ 232.534530][ T5618] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 232.534551][ T5618] __lock_acquire+0x15a5/0x2d10 [ 232.534564][ T5618] lock_acquire+0x106/0x350 [ 232.534576][ T5618] lock_sock_nested+0x41/0x130 [ 232.534588][ T5618] inet_shutdown+0x6a/0x390 [ 232.534602][ T5618] nbd_mark_nsock_dead+0x2e9/0x560 [ 232.534614][ T5618] recv_work+0x1c4c/0x1d60 [ 232.534627][ T5618] process_one_work+0x98b/0x1630 [ 232.534642][ T5618] worker_thread+0xb49/0x1140 [ 232.534658][ T5618] kthread+0x388/0x470 [ 232.534669][ T5618] ret_from_fork+0x514/0xb70 [ 232.534682][ T5618] ret_from_fork_asm+0x1a/0x30 [ 232.534696][ T5618] [ 232.534696][ T5618] other info that might help us debug this: [ 232.534696][ T5618] [ 232.534700][ T5618] Chain exists of: [ 232.534700][ T5618] sk_lock-AF_INET6 --> &cmd->lock --> &nsock->tx_lock [ 232.534700][ T5618] [ 232.534719][ T5618] Possible unsafe locking scenario: [ 232.534719][ T5618] [ 232.534723][ T5618] CPU0 CPU1 [ 232.534726][ T5618] ---- ---- [ 232.534730][ T5618] lock(&nsock->tx_lock); [ 232.534738][ T5618] lock(&cmd->lock); [ 232.534746][ T5618] lock(&nsock->tx_lock); [ 232.534755][ T5618] lock(sk_lock-AF_INET6); [ 232.534763][ T5618] [ 232.534763][ T5618] *** DEADLOCK *** [ 232.534763][ T5618] [ 232.534766][ T5618] 3 locks held by kworker/u9:3/5618: [ 232.534773][ T5618] #0: ffff888027138138 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 232.534811][ T5618] #1: ffffc9000481fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 232.534849][ T5618] #2: ffff888035add660 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c37/0x1d60 [ 232.534878][ T5618] [ 232.534878][ T5618] stack backtrace: [ 232.534888][ T5618] CPU: 0 UID: 0 PID: 5618 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 232.534906][ T5618] Tainted: [L]=SOFTLOCKUP [ 232.534911][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 232.534920][ T5618] Workqueue: nbd1-recv recv_work [ 232.534935][ T5618] Call Trace: [ 232.534940][ T5618] [ 232.534946][ T5618] dump_stack_lvl+0xe8/0x150 [ 232.534961][ T5618] print_circular_bug+0x2e1/0x300 [ 232.534980][ T5618] check_noncircular+0x12e/0x150 [ 232.534997][ T5618] __lock_acquire+0x15a5/0x2d10 [ 232.535012][ T5618] ? do_raw_spin_unlock+0xf5/0x210 [ 232.535024][ T5618] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 232.535041][ T5618] ? try_to_wake_up+0x7f2/0x1380 [ 232.535057][ T5618] ? inet_shutdown+0x6a/0x390 [ 232.535071][ T5618] lock_acquire+0x106/0x350 [ 232.535084][ T5618] ? inet_shutdown+0x6a/0x390 [ 232.535101][ T5618] lock_sock_nested+0x41/0x130 [ 232.535115][ T5618] ? inet_shutdown+0x6a/0x390 [ 232.535129][ T5618] inet_shutdown+0x6a/0x390 [ 232.535144][ T5618] nbd_mark_nsock_dead+0x2e9/0x560 [ 232.535159][ T5618] recv_work+0x1c4c/0x1d60 [ 232.535175][ T5618] ? lockdep_unlock+0x5d/0xd0 [ 232.535190][ T5618] ? __pfx_recv_work+0x10/0x10 [ 232.535205][ T5618] ? process_one_work+0x8be/0x1630 [ 232.535223][ T5618] ? lock_acquire+0x221/0x350 [ 232.535237][ T5618] ? process_one_work+0x8be/0x1630 [ 232.535253][ T5618] process_one_work+0x98b/0x1630 [ 232.535274][ T5618] ? __pfx_process_one_work+0x10/0x10 [ 232.535289][ T5618] ? do_raw_spin_lock+0x12b/0x2f0 [ 232.535304][ T5618] worker_thread+0xb49/0x1140 [ 232.535326][ T5618] kthread+0x388/0x470 [ 232.535339][ T5618] ? __pfx_worker_thread+0x10/0x10 [ 232.535355][ T5618] ? __pfx_kthread+0x10/0x10 [ 232.535368][ T5618] ret_from_fork+0x514/0xb70 [ 232.535382][ T5618] ? __pfx_ret_from_fork+0x10/0x10 [ 232.535395][ T5618] ? __switch_to+0xc79/0x1410 [ 232.535407][ T5618] ? __pfx_kthread+0x10/0x10 [ 232.535420][ T5618] ret_from_fork_asm+0x1a/0x30 [ 232.535438][ T5618] [ 234.155622][ T6337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.365616][ T6337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.576102][ T6337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.815634][ T6337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.166351][ T6337] bridge_slave_1: left allmulticast mode [ 235.166382][ T6337] bridge_slave_1: left promiscuous mode [ 235.166570][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.334932][ T6337] bridge_slave_0: left allmulticast mode [ 235.334954][ T6337] bridge_slave_0: left promiscuous mode [ 235.335095][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.085191][ T6337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.164973][ T6337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.185745][ T6337] bond0 (unregistering): Released all slaves [ 236.226641][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 236.726568][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 237.197174][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 237.454488][ T6337] hsr_slave_0: left promiscuous mode [ 237.494550][ T6337] hsr_slave_1: left promiscuous mode [ 237.495992][ T6337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.496014][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.535372][ T6337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.535396][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.594780][ T6337] veth1_macvtap: left promiscuous mode [ 237.594821][ T6337] veth0_macvtap: left promiscuous mode [ 237.594906][ T6337] veth1_vlan: left promiscuous mode [ 237.594962][ T6337] veth0_vlan: left promiscuous mode [ 238.094870][ T6337] team0 (unregistering): Port device team_slave_1 removed [ 238.135046][ T6337] team0 (unregistering): Port device team_slave_0 removed [ 238.226862][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 239.546201][ T6337] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.755580][ T6337] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.966176][ T6337] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.175801][ T6337] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.554728][ T6337] bridge_slave_1: left allmulticast mode [ 240.554762][ T6337] bridge_slave_1: left promiscuous mode [ 240.554965][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.714976][ T6337] bridge_slave_0: left allmulticast mode [ 240.714998][ T6337] bridge_slave_0: left promiscuous mode [ 240.715134][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.274901][ T6337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.354971][ T6337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.375541][ T6337] bond0 (unregistering): Released all slaves [ 241.417460][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 241.977603][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 242.418439][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11