last executing test programs: 8.009078723s ago: executing program 4 (id=4532): socket$kcm(0xa, 0x1, 0x106) 7.870524035s ago: executing program 4 (id=4534): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 7.731389974s ago: executing program 2 (id=4535): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r4, &(0x7f00000059c0)={0x2020}, 0x2020) socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r7, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) execve(0x0, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r9 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r9, r8, 0x9, 0x0, @val=@netkit={@void, @value=r8}}, 0x1c) syz_io_uring_setup(0xcaf, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 7.723518567s ago: executing program 4 (id=4536): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r1) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040)=0x2fb, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="93fc85ff30d22ecafcc67af208004500002400000000002f90780004000000000001320088be0010907801000001f439992d"], 0x0) writev(r5, &(0x7f0000002a40)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="e7455dbaf14f00ab12f41f5c4cf54c8e67990b49135863932ec6278f30eed83b2d55b026e1787bb9b6d813e03b514cd028ebdae5f81b35be21843b406a32b44cf319da772c68a4dbc9981629fb6b923fb83244c104eb91", 0x57}, {&(0x7f00000003c0)="b26d1d4961b02619d8109ffaa026c953614e48b212053a8ddfe30fa777be5234846b731cae31b6e1f71b14cbd4023fb28785216220717b89198f210b3974814ec81214435e6066f1e26b1fa27fa2b4d410fd3467deb9c4800559ff27c79f7db780247883896e899c589a80c70972d1b88e9b2a66ac5cb2037d2087c01c72ce78defe8aefdb9ef8179cb08a7668ed6eaf024e932e6da6cd59891835ba08f0d1", 0x9f}, {&(0x7f0000001940)="0c0f2ddccb82ca92afb6639c6f7ea2ed7794c03ccbc1179e48e9cc1b6748cdf9b0f3a3e5d13fb197ef34248e307c4d7ba7df2c25f80428d845c6002148b7ea205250a543912baac41fb720483551524b46be", 0x52}, {&(0x7f0000004180)="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", 0x104f}, {&(0x7f00000029c0)="3e554c82545d6fab6a0b11691c84122b151988238680dd5bbca47ff5255e53ed9a350b4ae0c86ba7d4001067d0af487fa0a92db9189a448f0ebd423cc95e8d7d9d23a9e6c603d51ee820f27b72300e15dcb56508a3c24ba2", 0x58}], 0x6) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x10000008, 0x8001, 0xfffffffe, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsopen(0x0, 0x0) (async) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e9ef92d7308243d3e8ca34e208f", "e1d5c22cb6cd3148b85dddbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x0, 0x4}) openat$kvm(0xffffffffffffff9c, 0x0, 0x20200, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000640)="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", 0x15d}], 0x4f}, 0x4048043) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000019c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES16=r5, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$packet(r2, &(0x7f00000001c0)="11eb", 0x2, 0x2404c081, &(0x7f0000000140)={0x11, 0x15, r9, 0x1, 0x5, 0x6, @multicast}, 0x14) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x2) (async) read$dsp(0xffffffffffffffff, &(0x7f0000003100)=""/81, 0x51) 6.032790989s ago: executing program 3 (id=4545): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000000000000000000000000000080ff0200010000000000000000070000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 5.60214628s ago: executing program 1 (id=4547): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x400000000000000}}, {0x28}}}}, 0x328) 5.342793388s ago: executing program 1 (id=4548): r0 = syz_open_dev$I2C(0x0, 0x1, 0x402) r1 = dup(0xffffffffffffffff) read(r0, 0x0, 0x700) sendmsg$inet6(r1, &(0x7f0000001840)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @empty, 0x3}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000100)="7cdb45c99a16cf11c1454e943335398ca2818bb78b13d9a6bf47663a5193284c0737f79410cf3a2743a5960aae02643c7566122cc9", 0x35}, {&(0x7f0000000240)="375898ec261a1b662c2f914f2aaa6b1b5dec078832ea44adaf7bc39550f9596c740f6a2bf2384286ade70a9063cfdd969f0dbfa0cad6d02560366aece63d417127a0b52472cb6e89af2594b542cc33cd18f5d76086d546e9313433bd10bad6b2431a5a816e6e3d5825efec4313efe6f6e5e9861623cbdeaf04ce1d6467339e0b27c3c98f29843b288eb6776d6627029ab3e7e3acfd", 0x95}, {&(0x7f0000000300)="b792cfa901d52f0a37fdfc66bfd07368cb11ce9c2ea43892b9866e5c306a7c7b14ee138d56956b365c94da32b21affeb0b273bdc488196588fa10fb7f29b4a", 0x3f}, {&(0x7f0000000380)="5869474a1f6e824ab8e97643174b2bca167267eb982e8f9e65c33d37b9aecba6941fdb68", 0x24}, {&(0x7f00000003c0)="7dab8efeaf684f6ce835f6a86481e27e3593", 0x12}, {&(0x7f0000000400)="b0f3bda88d9e10874db8286d8707ea450df3fc0ea319acd7359cb73c2dec5597980f683b72a7f833c7d16322d5adc0da1dd80fdd52541b427e8813707ede307c3fcc3b54aaf98d88c54900fbf4d4e7dd497e146ad84a19e49dc66d8e24837007e30fd89d668da3151c8c9e40a1ad01ad69f0417d1ce6da12a9dd720280c9d35fffc696a6328cb913c0cb7f9fad6e469ae276498e89414591dcdd16c808e513e08aa12f37f0e3b532d6eacb5549e65c3021c9e813acf04ca03746c8191e9f7c5bf812014c86598ec33c11ae32618fb22980beb43721cb785aa0939a6bddd14883cc45b369f10ecd9de6a6079c", 0xec}, {&(0x7f0000000500)="831cb1c3c6336c0b1f440e73f8fdacf9bdf72aedad6ac0f9", 0x18}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="3c114806a00b98dfbf150031438502ee76ba7480ff47770bd113c6d86e84e09194e07b", 0x23}, {&(0x7f0000001580)="07420f711a6d7b50f96d61b7eacb21f8593cd4a87b0a22ca18fd385a6c326658f97da300cce32ca086ecfe9cdf13de5f795830fa17d08a501315d312dc51f710187c97600b338665e78879505b11256d2ac6a356c5094c5261b3ee88710f7586ca470922f9dfc4f6e315e719b67ab4b43d8737e7e99891d1f69fbbebbd1ad25b659431cb50837ba7e9d4d377314c0ba39a207d821f303de9880ed611ba03290966caee53ab884b296916db73474880bd43bd24918335fd059f5e0e198b6454a17d724d20497c9883d5151c", 0xcb}], 0xa, &(0x7f0000001740)=[@flowinfo={{0x14, 0x29, 0xb, 0xf}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x7, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2564}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x8}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hopopts={{0x20, 0x29, 0x36, {0x6c, 0x0, '\x00', [@generic={0x7}]}}}, @dstopts={{0x40, 0x29, 0x37, {0x33, 0x4, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1c}}, @jumbo={0xc2, 0x4, 0x38000}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x6}]}}}], 0x100}, 0x8090) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001800010600000000000000001c140000fe0000010000000008000100", @ANYRESHEX], 0x40}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r5, 0x4, 0x0) fcntl$setstatus(r5, 0x4, 0x42400) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001500010029bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00"], 0xb8}}, 0x10000000) 5.332990183s ago: executing program 2 (id=4549): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 5.124262378s ago: executing program 3 (id=4550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000080)=""/55, 0x37}, {0x0}], 0x3}, 0x1}], 0x1, 0x2120, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010088be0000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 5.02239684s ago: executing program 1 (id=4551): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40801) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000002c0)="b8009800000f23c80f21f8350800b0000f23f80f7800c4e205ab3b2e2e0fc7ab407528d3c744240094350000c744240200000100c7442406000000000f011424d35641b8009800000f23c80f21f835000030000f23f8b805000000b96f4800000f01d965660f3880a3f4ffffffc20200", 0x70}], 0x1, 0xb, &(0x7f0000000100), 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) unshare(0xe11f690eaf2a4a9b) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/clear_refs\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000340)={0x2098f0100, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x4e) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) 5.021246485s ago: executing program 2 (id=4552): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r1) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800faff0a1400000800150005000000080015000500"/40], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000140)=0xb, 0x4) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x102) getdents(r6, 0x0, 0x4e) 4.924874114s ago: executing program 4 (id=4553): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000020", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x3, 0x9, 0x8003, 0x0, 0x5, 0xe4, 0xfffffe0000000001, 0x0, 0xffffbfff}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x1c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x880) socket(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000000000f124000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x22004043}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=@setlink={0x58, 0x13, 0x5, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40601}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x6}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40012}, 0x48000) 4.578561983s ago: executing program 0 (id=4555): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 4.466185875s ago: executing program 3 (id=4556): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f0000000600010000000000080005ef", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.331823475s ago: executing program 0 (id=4557): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r0, 0x4000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002e00090027bd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x0, 0x0, 0x3}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002008300000008000340000000d508000440000000010800064000"], 0x94}}, 0x8000) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r6, &(0x7f0000000180)=0xfe5f, 0x12) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r6, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f0102030109021200"], 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r7 = syz_open_dev$I2C(0x0, 0x1, 0x402) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1e8, 0x0, 0x710, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x80000001}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0xcb4}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x54, 0x16, 0xffff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x15}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xb5b1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x400}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x400}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x401}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x4}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) (async) pwrite64(r7, 0x0, 0x0, 0x26c) sync() 4.25963558s ago: executing program 3 (id=4558): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="40000600000002cbad2a03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x40040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8002, 0x0) ioctl$TCSETSW(r8, 0x5403, &(0x7f00000027c0)={0xab6, 0x3, 0xffffffc0, 0x80, 0x1, "e625b7fcf9fe176d572f93d8e16b493ad3f282"}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0xffffffffffffffa4, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r7, 0x309, 0x70bd2b, 0x0, {0x1d}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000) add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x331002, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x60, 0xf0, 0x60, 0x600, 0x0, 0xffff, 0x10, 0x0, {0x5, 0x10040}, {0x0, 0x200002, 0xffffffff}, {0x8000}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x3fe, 0x0, 0x0, 0x21, 0x0, 0x3, 0x7}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x1) 3.729392411s ago: executing program 2 (id=4559): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x1, 0xff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x2d03629c, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0x10000000, 0xe9}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x2182, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x4241, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1, 0x1, 0x0) unshare(0x8040480) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f00000001c0)=[{r7, 0x400}], 0x1, 0x0, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010700000000000000000a00000008000300", @ANYRES32, @ANYBLOB="cb6d920ca68d09252d7da907f6698c50300926589c7a7cd7a46b12da1a8d23cae228219ee5c14876169e2d9133bc58236c1594e5d30ccbb73386c0816e3444408c925d947101b7c08e7cdcdf88e4d8132cbf59cdec5067"], 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)={0x200f}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000440)={0x9d0000, 0x200, 0x8, r4, 0x0, 0x0}) r9 = dup(0xffffffffffffffff) inotify_rm_watch(r9, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r9, 0xc02c564a, &(0x7f0000000240)={0xfffffffd, 0x32314752, 0x3, @discrete={0x0, 0x1ff}}) 2.921315969s ago: executing program 1 (id=4560): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000000000000000000000000000fbff0200010000000000000000070000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 2.310101434s ago: executing program 4 (id=4561): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x9, @loopback, 0x2}, 0x1c) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6a000000001811fffe8000000000001800000000000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0) 2.057408681s ago: executing program 4 (id=4562): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000380)=[@cpuid={0x64, 0x18, {0x4, 0x4}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0xab, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x5e, 0x8000000000000001, 0x7, 0x4}}, @code={0xa, 0x47, {"0f4863a73ef34f0faeed66b842000f00d867f2f40f23eac46201457cc45626260f01cfb8010000000f01d9f20f1abb600000000f235a"}}, @in_dx={0x69, 0x20, {0x15c7, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xe166}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x1, 0x28, 0x1}}, @rdmsr={0x66, 0x18, {0x919}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x86, 0x2, 0x6, 0x3}}, @out_dx={0x6a, 0x28, {0x8331, 0x3, 0x80}}, @rdmsr={0x66, 0x18}, @nested_load_syzos={0x136, 0x40, {0x1, 0x8000, [@wr_drn={0x68, 0x20, {0x6}}]}}, @wr_crn={0x67, 0x20, {0x3, 0x6}}, @wrmsr={0x65, 0x20, {0x2a4, 0x10}}, @set_irq_handler={0xc8, 0x20, {0x7d, 0x1}}, @cpuid={0x64, 0x18, {0x9, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x88, 0x7, 0x6, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x327}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000800)={0x0, 0x7, 0xc, "55fe549ecd9d643d6404a056"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000080)={0x60, 0x6, 0x28, "ddff7f00000000ebe9d2f5d738b923fa601992837848cca576ccdf080000000f7a907dd861996ba7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(0x0, 0x1, 0x402) dup(0xffffffffffffffff) read(r2, 0x0, 0x700) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001500010029bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00"], 0xb8}}, 0x10000000) 1.976300927s ago: executing program 1 (id=4563): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_pgetevents(0x0, 0x0, 0xffffffffffffff76, 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) syz_clone(0x800011, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r1, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mlock(&(0x7f000064c000/0x2000)=nil, 0x2000) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000050000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1.889631958s ago: executing program 2 (id=4564): socket$inet(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) madvise(&(0x7f0000279000/0x2000)=nil, 0x2000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x8001) sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d0", 0xd4}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed", 0xe3}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) 1.837988186s ago: executing program 0 (id=4565): syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) (fail_nth: 53) 1.404181914s ago: executing program 0 (id=4566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}]}}}]}, 0x40}}, 0x0) 1.32414535s ago: executing program 1 (id=4567): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0xffffffff}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000240)=[{0xe, 0x81, 0x0, 0xfd, @tick=0x1, {0x10, 0x49}, {0xe}, @result={0x6, 0x5}}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x4, 0x7fffffff, 0x36, 0x0, 0x11}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[], 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4010011, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r9, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a00fffb0000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.27519535s ago: executing program 0 (id=4568): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.053830584s ago: executing program 3 (id=4569): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x4000000}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc}) 689.308978ms ago: executing program 0 (id=4570): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x54, &(0x7f0000000200)}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c0002800500010000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x220, 0x110, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000440)=ANY=[@ANYBLOB="01"], 0x48, 0xfffffffffffffffd) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r6 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0xe}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e21, 0xfffbfff6, @mcast2, 0xfffff000}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10001}, 0x1c) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @mcast1, 0x4}, 0x60) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 202.046161ms ago: executing program 2 (id=4571): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001580)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000014c0)=""/171, 0xab}, {&(0x7f0000001680)=""/243, 0xf3}, {&(0x7f0000001780)=""/142, 0x8e}, {&(0x7f0000001840)=""/95, 0x5f}, {&(0x7f00000018c0)=""/237, 0xed}, {&(0x7f00000019c0)=""/56, 0x38}], 0x6, &(0x7f0000001a80)=""/34, 0x22}, 0x1}, {{&(0x7f0000001ac0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b40)=""/164, 0xa4}, {&(0x7f0000001c00)=""/228, 0xe4}], 0x2, &(0x7f0000001d40)=""/4096, 0x1000}, 0x100}], 0x2, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x3, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r3}) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000001c0)={0x1, 0x4, 0x12, &(0x7f0000000080)=""/18}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, r5, 0x2000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) read(r0, 0x0, 0x0) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000300)='asymmetric\x00', 0x0) 0s ago: executing program 3 (id=4572): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000680)={0x0, "4900bb33663fb3b6d05a929145325c94db33661d4653f6702f7c8d16a03d8bc8", 0x5, 0x4, 0x6660, 0x8000, 0x8, 0x1, 0x0, 0x5}) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_pidfd_open(r3, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f0000000800), 0x8, 0x0) r5 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) (async) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000680)={0x0, "4900bb33663fb3b6d05a929145325c94db33661d4653f6702f7c8d16a03d8bc8", 0x5, 0x4, 0x6660, 0x8000, 0x8, 0x1, 0x0, 0x5}) (async) unshare(0x66000080) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) syz_pidfd_open(r3, 0x0) (async) waitid$P_PIDFD(0x3, r4, &(0x7f0000000800), 0x8, 0x0) (async) gettid() (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0) (async) kernel console output (not intermixed with test programs): umber 38 using dummy_hcd [ 1121.278246][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 1121.303867][ T5968] m920x_read = error: -19 [ 1121.308656][ T5968] dvb-usb: error while querying for an remote control event. [ 1121.325063][ T5920] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1121.332977][ T5920] usb 5-1: can't read configurations, error -61 [ 1121.444211][ T5968] m920x_read = error: -19 [ 1121.448642][ T5968] dvb-usb: error while querying for an remote control event. [ 1121.469375][ T5920] usb usb5-port1: unable to enumerate USB device [ 1121.604142][ T5968] m920x_read = error: -19 [ 1121.608570][ T5968] dvb-usb: error while querying for an remote control event. [ 1121.742421][T21019] syzkaller0: entered promiscuous mode [ 1121.754060][ T5968] m920x_read = error: -19 [ 1121.754663][T21019] syzkaller0: entered allmulticast mode [ 1121.760811][ T5968] dvb-usb: error while querying for an remote control event. [ 1121.793144][T21021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4300'. [ 1121.870721][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4301'. [ 1121.894017][ T5968] m920x_read = error: -19 [ 1121.898713][ T5968] dvb-usb: error while querying for an remote control event. [ 1121.916946][T21024] bridge_slave_1 (unregistering): left allmulticast mode [ 1121.935685][T21024] bridge_slave_1 (unregistering): left promiscuous mode [ 1121.943611][T21024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.043904][ T5968] m920x_read = error: -19 [ 1122.048589][ T5968] dvb-usb: error while querying for an remote control event. [ 1122.173787][ T5968] m920x_read = error: -19 [ 1122.178638][ T5968] dvb-usb: error while querying for an remote control event. [ 1122.293878][T11591] m920x_read = error: -19 [ 1122.298422][T11591] dvb-usb: error while querying for an remote control event. [ 1122.362800][T21039] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1122.369387][T21039] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1122.379264][T21039] vhci_hcd vhci_hcd.0: Device attached [ 1122.413792][T11591] m920x_read = error: -19 [ 1122.418233][ T5968] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1122.427575][T11591] dvb-usb: error while querying for an remote control event. [ 1122.543794][ T5919] m920x_read = error: -19 [ 1122.548185][ T5919] dvb-usb: error while querying for an remote control event. [ 1122.596461][ T5968] usb 4-1: config 0 has no interfaces? [ 1122.607155][ T5968] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1122.621136][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.634629][ T5968] usb 4-1: Product: syz [ 1122.641399][ T5968] usb 4-1: Manufacturer: syz [ 1122.649087][ T5968] usb 4-1: SerialNumber: syz [ 1122.655186][T11591] usb 34-1: SetAddress Request (18) to port 0 [ 1122.668661][ T5968] usb 4-1: config 0 descriptor?? [ 1122.674741][T11591] usb 34-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1122.693311][ T5968] m920x_read = error: -19 [ 1122.704432][ T5968] dvb-usb: error while querying for an remote control event. [ 1122.823792][ T5968] m920x_read = error: -19 [ 1122.829723][ T5968] dvb-usb: error while querying for an remote control event. [ 1122.866729][T21040] vhci_hcd: connection reset by peer [ 1122.872682][ T58] vhci_hcd vhci_hcd.0: stop threads [ 1122.878448][ T58] vhci_hcd vhci_hcd.0: release socket [ 1122.883773][ T5919] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1122.894132][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 1122.943810][ T5968] m920x_read = error: -19 [ 1122.948282][ T5968] dvb-usb: error while querying for an remote control event. [ 1123.056290][ T5919] usb 5-1: not running at top speed; connect to a high speed hub [ 1123.070390][ T5919] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1527, setting to 64 [ 1123.082548][ T5968] m920x_read = error: -19 [ 1123.091520][ T5968] dvb-usb: error while querying for an remote control event. [ 1123.160415][ T5919] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1123.202835][ T5919] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1123.214019][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.223289][ T5919] usb 5-1: Product: syz [ 1123.243687][ T5919] usb 5-1: Manufacturer: syz [ 1123.259748][ T5919] usb 5-1: SerialNumber: syz [ 1123.361833][ T5968] m920x_read = error: -19 [ 1123.441737][ T5968] dvb-usb: error while querying for an remote control event. [ 1123.462957][T21043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1123.574170][ T5968] m920x_read = error: -19 [ 1123.578660][ T5968] dvb-usb: error while querying for an remote control event. [ 1123.694258][ T5968] m920x_read = error: -19 [ 1123.699925][ T5968] dvb-usb: error while querying for an remote control event. [ 1123.823825][ T5968] m920x_read = error: -19 [ 1123.832168][ T5968] dvb-usb: error while querying for an remote control event. [ 1123.846468][ T5919] usb 5-1: USB disconnect, device number 39 [ 1124.061912][ T5968] m920x_read = error: -19 [ 1124.066808][ T5968] dvb-usb: error while querying for an remote control event. [ 1124.193873][ T5919] m920x_read = error: -19 [ 1124.198905][ T5919] dvb-usb: error while querying for an remote control event. [ 1124.219065][T21059] FAULT_INJECTION: forcing a failure. [ 1124.219065][T21059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.233247][T21059] CPU: 0 UID: 0 PID: 21059 Comm: syz.2.4311 Tainted: G L syzkaller #0 PREEMPT(full) [ 1124.233269][T21059] Tainted: [L]=SOFTLOCKUP [ 1124.233277][T21059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1124.233284][T21059] Call Trace: [ 1124.233290][T21059] [ 1124.233295][T21059] dump_stack_lvl+0xe8/0x150 [ 1124.233317][T21059] should_fail_ex+0x412/0x560 [ 1124.233337][T21059] _copy_from_user+0x2d/0xb0 [ 1124.233352][T21059] __sys_sendto+0x2b0/0x710 [ 1124.233369][T21059] ? __pfx___sys_sendto+0x10/0x10 [ 1124.233395][T21059] ? fput_close_sync+0x11f/0x240 [ 1124.233412][T21059] ? __pfx_fput_close_sync+0x10/0x10 [ 1124.233433][T21059] __x64_sys_sendto+0xde/0x100 [ 1124.233448][T21059] do_syscall_64+0x14d/0xf80 [ 1124.233463][T21059] ? trace_irq_disable+0x3b/0x150 [ 1124.233474][T21059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.233486][T21059] ? clear_bhb_loop+0x40/0x90 [ 1124.233500][T21059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.233512][T21059] RIP: 0033:0x7fda4535d04e [ 1124.233532][T21059] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1124.233542][T21059] RSP: 002b:00007fda46199de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1124.233556][T21059] RAX: ffffffffffffffda RBX: 00007fda4619b6c0 RCX: 00007fda4535d04e [ 1124.233565][T21059] RDX: 0000000000000024 RSI: 00007fda46199fe0 RDI: 0000000000000004 [ 1124.233572][T21059] RBP: 0000000000000000 R08: 00007fda46199e64 R09: 000000000000000c [ 1124.233579][T21059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1124.233587][T21059] R13: 0000000000000000 R14: 00007fda46199fe0 R15: 0000000000000000 [ 1124.233603][T21059] [ 1124.334020][ T797] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1124.335780][ T5919] m920x_read = error: -19 [ 1124.419971][ T5919] dvb-usb: error while querying for an remote control event. [ 1124.459496][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4312'. [ 1124.534149][ T5919] m920x_read = error: -19 [ 1124.542608][ T5919] dvb-usb: error while querying for an remote control event. [ 1124.569032][ T797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.594258][ T797] usb 1-1: config 0 has no interfaces? [ 1124.601128][ T797] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1124.613224][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.632973][ T797] usb 1-1: config 0 descriptor?? [ 1124.673843][ T5919] m920x_read = error: -19 [ 1124.681899][ T5919] dvb-usb: error while querying for an remote control event. [ 1124.803928][ T5919] m920x_read = error: -19 [ 1124.808560][ T5919] dvb-usb: error while querying for an remote control event. [ 1124.873280][ T1209] usb 1-1: USB disconnect, device number 5 [ 1124.901877][T21074] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4317'. [ 1124.934637][ T5968] m920x_read = error: -19 [ 1124.939164][ T5968] dvb-usb: error while querying for an remote control event. [ 1125.004518][ T5919] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1125.053884][ T5968] m920x_read = error: -19 [ 1125.058409][ T5968] dvb-usb: error while querying for an remote control event. [ 1125.163983][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 1125.193226][ T5968] m920x_read = error: -19 [ 1125.197988][ T5968] dvb-usb: error while querying for an remote control event. [ 1125.207009][ T1209] usb 4-1: USB disconnect, device number 78 [ 1125.215002][ T5919] usb 5-1: config 0 has no interfaces? [ 1125.245570][ T5919] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1125.254740][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.271564][ T5919] usb 5-1: Product: syz [ 1125.279896][ T5919] usb 5-1: Manufacturer: syz [ 1125.289366][ T5919] usb 5-1: SerialNumber: syz [ 1125.310080][ T5919] usb 5-1: config 0 descriptor?? [ 1125.345662][ T5919] m920x_read = error: -19 [ 1125.350125][ T5919] dvb-usb: error while querying for an remote control event. [ 1125.474272][ T5919] m920x_read = error: -19 [ 1125.478793][ T5919] dvb-usb: error while querying for an remote control event. [ 1125.719623][ T5919] m920x_read = error: -19 [ 1125.890229][ T1209] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1125.901564][ T5919] dvb-usb: error while querying for an remote control event. [ 1125.912599][T21086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.930645][T21086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.023872][ T5919] m920x_read = error: -19 [ 1126.029578][ T5919] dvb-usb: error while querying for an remote control event. [ 1126.087942][T21088] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1126.094621][T21088] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1126.098684][ T1209] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.115341][ T1209] usb 4-1: config 0 has no interfaces? [ 1126.123496][ T1209] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1126.134735][T21088] vhci_hcd vhci_hcd.0: Device attached [ 1126.140411][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.150964][ T1209] usb 4-1: config 0 descriptor?? [ 1126.206858][ T1209] m920x_read = error: -19 [ 1126.221925][ T1209] dvb-usb: error while querying for an remote control event. [ 1126.245588][ T5968] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1126.264965][T21089] vhci_hcd: connection closed [ 1126.271868][ T1329] vhci_hcd vhci_hcd.1: stop threads [ 1126.283551][ T1329] vhci_hcd vhci_hcd.1: release socket [ 1126.294002][ T1329] vhci_hcd vhci_hcd.1: disconnect device [ 1126.379055][ T1209] usb 4-1: USB disconnect, device number 79 [ 1126.386228][ T5919] m920x_read = error: -19 [ 1126.390635][ T5919] dvb-usb: error while querying for an remote control event. [ 1126.444328][ T5968] usb 1-1: Using ep0 maxpacket: 16 [ 1126.452065][ T5968] usb 1-1: config 0 has no interfaces? [ 1126.459283][ T5968] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1126.469410][ T5968] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1126.480161][ T5968] usb 1-1: Manufacturer: syz [ 1126.488497][ T5968] usb 1-1: config 0 descriptor?? [ 1126.504593][ T5919] m920x_read = error: -19 [ 1126.509793][ T5919] dvb-usb: error while querying for an remote control event. [ 1126.624395][ T1209] m920x_read = error: -19 [ 1126.628955][ T1209] dvb-usb: error while querying for an remote control event. [ 1126.820426][T21083] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1126.836415][ T1209] m920x_read = error: -19 [ 1126.840806][ T1209] dvb-usb: error while querying for an remote control event. [ 1126.866167][T21083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4320'. [ 1126.952617][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4323'. [ 1126.964527][ T1209] m920x_read = error: -19 [ 1126.970517][ T1209] dvb-usb: error while querying for an remote control event. [ 1126.983373][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4323'. [ 1127.140408][ T1209] m920x_read = error: -19 [ 1127.145486][ T1209] dvb-usb: error while querying for an remote control event. [ 1127.200671][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4324'. [ 1127.284315][ T1209] m920x_read = error: -19 [ 1127.288730][ T1209] dvb-usb: error while querying for an remote control event. [ 1127.404737][ T1209] m920x_read = error: -19 [ 1127.411052][ T1209] dvb-usb: error while querying for an remote control event. [ 1127.525108][ T1209] m920x_read = error: -19 [ 1127.529638][ T1209] dvb-usb: error while querying for an remote control event. [ 1127.649957][ T1209] m920x_read = error: -19 [ 1127.664084][ T1209] dvb-usb: error while querying for an remote control event. [ 1127.725547][T11591] usb 34-1: device descriptor read/8, error -110 [ 1127.757381][ T1209] usb 5-1: USB disconnect, device number 40 [ 1127.783830][ T5968] m920x_read = error: -19 [ 1127.788303][ T5968] dvb-usb: error while querying for an remote control event. [ 1127.904090][T21114] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4328'. [ 1127.925325][ T5919] m920x_read = error: -19 [ 1127.929801][ T5919] dvb-usb: error while querying for an remote control event. [ 1128.100570][T21119] syzkaller0: entered promiscuous mode [ 1128.103813][ T5919] m920x_read = error: -19 [ 1128.125062][T21119] syzkaller0: entered allmulticast mode [ 1128.132572][ T5919] dvb-usb: error while querying for an remote control event. [ 1128.156134][T11591] usb usb34-port1: attempt power cycle [ 1128.294259][ T1209] m920x_read = error: -19 [ 1128.302407][ T1209] dvb-usb: error while querying for an remote control event. [ 1128.326828][T21129] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1128.425630][ T1209] m920x_read = error: -19 [ 1128.432411][ T1209] dvb-usb: error while querying for an remote control event. [ 1128.563790][ T1209] m920x_read = error: -19 [ 1128.568670][ T1209] dvb-usb: error while querying for an remote control event. [ 1128.605575][ T5909] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1128.704673][ T1209] m920x_read = error: -19 [ 1128.735685][T11591] usb usb34-port1: unable to enumerate USB device [ 1128.753550][ T1209] dvb-usb: error while querying for an remote control event. [ 1128.766843][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.777685][ T5909] usb 4-1: config 0 has no interfaces? [ 1128.813434][ T5909] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1128.859445][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.883007][ T5909] usb 4-1: config 0 descriptor?? [ 1128.923255][ T1209] usb 1-1: USB disconnect, device number 6 [ 1129.013996][T11591] m920x_read = error: -19 [ 1129.018771][T11591] dvb-usb: error while querying for an remote control event. [ 1129.135668][ T5909] usb 4-1: USB disconnect, device number 80 [ 1129.143792][T11591] m920x_read = error: -19 [ 1129.148249][T11591] dvb-usb: error while querying for an remote control event. [ 1129.214152][T21156] fuse: Bad value for 'fd' [ 1129.273970][ T1209] m920x_read = error: -19 [ 1129.278393][ T1209] dvb-usb: error while querying for an remote control event. [ 1129.403886][ T1209] m920x_read = error: -19 [ 1129.408720][ T1209] dvb-usb: error while querying for an remote control event. [ 1129.456006][T21160] bond0: (slave bond_slave_1): Releasing backup interface [ 1129.533785][ T1209] m920x_read = error: -19 [ 1129.538262][ T1209] dvb-usb: error while querying for an remote control event. [ 1129.653781][ T1209] m920x_read = error: -19 [ 1129.658259][ T1209] dvb-usb: error while querying for an remote control event. [ 1129.892840][ T1209] m920x_read = error: -19 [ 1129.897553][ T1209] dvb-usb: error while querying for an remote control event. [ 1130.044057][ T1209] m920x_read = error: -19 [ 1130.048843][ T1209] dvb-usb: error while querying for an remote control event. [ 1130.104996][T21142] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1130.111448][T21142] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1130.118318][T21142] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1130.248977][ T1209] m920x_read = error: -19 [ 1130.253581][ T1209] dvb-usb: error while querying for an remote control event. [ 1130.290299][T21167] loop2: detected capacity change from 0 to 7 [ 1130.301896][T21167] Dev loop2: unable to read RDB block 7 [ 1130.308871][T21167] loop2: AHDI p1 p3 [ 1130.313318][T21142] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1130.319677][T21167] loop2: partition table partially beyond EOD, truncated [ 1130.327845][T21142] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1130.334685][T21167] loop2: p1 size 16777216 extends beyond EOD, truncated [ 1130.414451][ T1209] m920x_read = error: -19 [ 1130.418881][ T1209] dvb-usb: error while querying for an remote control event. [ 1130.533883][ T1209] m920x_read = error: -19 [ 1130.538326][ T1209] dvb-usb: error while querying for an remote control event. [ 1130.617991][T21173] vlan2: entered promiscuous mode [ 1130.624590][ T5920] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1130.655339][ T1209] m920x_read = error: -19 [ 1130.659832][ T1209] dvb-usb: error while querying for an remote control event. [ 1130.720886][ T5194] Dev loop2: unable to read RDB block 7 [ 1130.730600][ T5194] loop2: AHDI p1 p3 [ 1130.740589][ T5194] loop2: partition table partially beyond EOD, truncated [ 1130.772362][ T5194] loop2: p1 size 16777216 extends beyond EOD, truncated [ 1130.784433][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 1130.786073][ T5919] m920x_read = error: -19 [ 1130.796825][ T5919] dvb-usb: error while querying for an remote control event. [ 1130.799689][ T5920] usb 1-1: config 0 has no interfaces? [ 1130.880168][ T5920] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1130.912565][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.954340][ T5920] usb 1-1: Product: syz [ 1130.958593][ T5920] usb 1-1: Manufacturer: syz [ 1130.974199][ T5919] m920x_read = error: -19 [ 1130.979108][ T5919] dvb-usb: error while querying for an remote control event. [ 1130.983838][ T5920] usb 1-1: SerialNumber: syz [ 1130.993094][ T5920] usb 1-1: config 0 descriptor?? [ 1131.004751][T17677] Bluetooth: hci5: command 0x0c1a tx timeout [ 1131.040495][T14975] udevd[14975]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1131.117284][ T5919] m920x_read = error: -19 [ 1131.135505][ T5919] dvb-usb: error while querying for an remote control event. [ 1131.264040][T11591] m920x_read = error: -19 [ 1131.268523][T11591] dvb-usb: error while querying for an remote control event. [ 1131.383940][ T1209] m920x_read = error: -19 [ 1131.388348][ T1209] dvb-usb: error while querying for an remote control event. [ 1131.403723][ T5919] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1131.544167][ T1209] m920x_read = error: -19 [ 1131.548614][ T1209] dvb-usb: error while querying for an remote control event. [ 1131.591758][T21196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.602881][ T5919] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1131.611438][ T5919] usb 5-1: config 0 has no interface number 0 [ 1131.624511][T21196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.632391][ T5919] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1131.651808][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.673889][ T1209] m920x_read = error: -19 [ 1131.678300][ T1209] dvb-usb: error while querying for an remote control event. [ 1131.686913][ T5919] usb 5-1: config 0 descriptor?? [ 1131.695560][ T5919] cp210x 5-1:0.1: cp210x converter detected [ 1131.740120][T21197] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4350'. [ 1131.823841][T11591] m920x_read = error: -19 [ 1131.828460][T11591] dvb-usb: error while querying for an remote control event. [ 1131.853158][T21197] netlink: 'syz.3.4350': attribute type 34 has an invalid length. [ 1131.943989][T11591] m920x_read = error: -19 [ 1131.948403][T11591] dvb-usb: error while querying for an remote control event. [ 1132.043764][ T797] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1132.063942][ T1209] m920x_read = error: -19 [ 1132.068477][ T1209] dvb-usb: error while querying for an remote control event. [ 1132.094516][ T5919] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 1132.111397][ T5919] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1132.118533][T11591] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1132.123819][T17736] Bluetooth: hci0: command 0x0c1a tx timeout [ 1132.126832][T17677] Bluetooth: hci3: command 0x0c1a tx timeout [ 1132.183886][ T1209] m920x_read = error: -19 [ 1132.189224][ T1209] dvb-usb: error while querying for an remote control event. [ 1132.195346][ T797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.207519][ T797] usb 3-1: config 0 has no interfaces? [ 1132.213035][ T797] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1132.222302][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.233754][ T797] usb 3-1: config 0 descriptor?? [ 1132.284904][T11591] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 1132.302320][T11591] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1132.304567][ T797] usb 5-1: USB disconnect, device number 41 [ 1132.318207][T11591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.327630][ T1209] m920x_read = error: -19 [ 1132.334017][ T797] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1132.334125][ T1209] dvb-usb: error while querying for an remote control event. [ 1132.349447][T11591] usb 4-1: Product: syz [ 1132.353804][T11591] usb 4-1: Manufacturer: syz [ 1132.358431][T11591] usb 4-1: SerialNumber: syz [ 1132.364444][T17677] Bluetooth: hci1: command 0x0c1a tx timeout [ 1132.365079][T17736] Bluetooth: hci2: command 0x0c1a tx timeout [ 1132.389888][ T797] cp210x 5-1:0.1: device disconnected [ 1132.392274][T11591] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1132.426538][ T1209] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1132.476982][ T5920] usb 3-1: USB disconnect, device number 54 [ 1132.484294][T11591] m920x_read = error: -19 [ 1132.496859][T11591] dvb-usb: error while querying for an remote control event. [ 1132.623973][T11591] m920x_read = error: -19 [ 1132.628888][T11591] dvb-usb: error while querying for an remote control event. [ 1132.704115][T11591] usb 1-1: USB disconnect, device number 7 [ 1132.744897][ T5919] m920x_read = error: -19 [ 1132.757513][ T5919] dvb-usb: error while querying for an remote control event. [ 1132.883873][ T5919] m920x_read = error: -19 [ 1132.891810][ T5919] dvb-usb: error while querying for an remote control event. [ 1132.912312][T21212] binder: 21210:21212 unknown command 1768304430 [ 1132.920181][T21212] binder: 21210:21212 ioctl c0306201 200000000640 returned -22 [ 1133.003928][ T5919] m920x_read = error: -19 [ 1133.013392][ T5919] dvb-usb: error while querying for an remote control event. [ 1133.113402][T21222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4355'. [ 1133.125557][T21222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4355'. [ 1133.143827][T11591] m920x_read = error: -19 [ 1133.152910][T11591] dvb-usb: error while querying for an remote control event. [ 1133.293834][T11591] m920x_read = error: -19 [ 1133.298646][T11591] dvb-usb: error while querying for an remote control event. [ 1133.401177][T21230] netlink: 'syz.2.4356': attribute type 8 has an invalid length. [ 1133.433462][T11591] m920x_read = error: -19 [ 1133.438285][T11591] dvb-usb: error while querying for an remote control event. [ 1133.505173][ T1209] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1133.512415][ T1209] ath9k_htc: Failed to initialize the device [ 1133.554017][T11591] m920x_read = error: -19 [ 1133.558526][T11591] dvb-usb: error while querying for an remote control event. [ 1133.594062][ T1209] usb 4-1: ath9k_htc: USB layer deinitialized [ 1133.675426][T11591] m920x_read = error: -19 [ 1133.680532][T11591] dvb-usb: error while querying for an remote control event. [ 1133.843620][T11591] m920x_read = error: -19 [ 1133.866679][T11591] dvb-usb: error while querying for an remote control event. [ 1133.983830][ T5968] m920x_read = error: -19 [ 1133.989550][ T5968] dvb-usb: error while querying for an remote control event. [ 1134.103935][ T5968] m920x_read = error: -19 [ 1134.108992][ T5968] dvb-usb: error while querying for an remote control event. [ 1134.237556][T21247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4361'. [ 1134.267424][ T5968] m920x_read = error: -19 [ 1134.271876][ T5968] dvb-usb: error while querying for an remote control event. [ 1134.433781][T11591] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1134.494083][ T5919] m920x_read = error: -19 [ 1134.499477][ T5919] dvb-usb: error while querying for an remote control event. [ 1134.645388][ T5919] m920x_read = error: -19 [ 1134.649944][ T1209] usb 4-1: USB disconnect, device number 81 [ 1134.656595][ T5919] dvb-usb: error while querying for an remote control event. [ 1134.673730][T11591] usb 5-1: Using ep0 maxpacket: 16 [ 1134.734470][T11591] usb 5-1: config 0 has no interfaces? [ 1134.757565][T11591] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1134.767945][T11591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.776825][ T5919] m920x_read = error: -19 [ 1134.783599][ T5919] dvb-usb: error while querying for an remote control event. [ 1134.827739][T11591] usb 5-1: Product: syz [ 1134.844836][T11591] usb 5-1: Manufacturer: syz [ 1134.855769][T11591] usb 5-1: SerialNumber: syz [ 1134.887338][T11591] usb 5-1: config 0 descriptor?? [ 1134.909570][ T5919] m920x_read = error: -19 [ 1134.926336][ T5919] dvb-usb: error while querying for an remote control event. [ 1135.274306][ T5919] m920x_read = error: -19 [ 1135.278738][T11591] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1135.402623][ T5919] dvb-usb: error while querying for an remote control event. [ 1135.457146][T21256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.474880][T21256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.611860][ T1209] m920x_read = error: -19 [ 1135.619679][ T1209] dvb-usb: error while querying for an remote control event. [ 1135.643729][T11591] usb 4-1: Using ep0 maxpacket: 32 [ 1135.651759][T11591] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1135.672196][T11591] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1135.682381][T11591] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1135.699513][T11591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.739865][T11591] usb 4-1: config 0 descriptor?? [ 1135.745606][ T1209] m920x_read = error: -19 [ 1135.750515][ T1209] dvb-usb: error while querying for an remote control event. [ 1135.873913][ T1209] m920x_read = error: -19 [ 1135.878457][ T1209] dvb-usb: error while querying for an remote control event. [ 1136.001692][ T1209] m920x_read = error: -19 [ 1136.006566][ T1209] dvb-usb: error while querying for an remote control event. [ 1136.028668][T11591] corsair-cpro 0003:1B1C:0C10.0024: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1136.123984][ T5919] m920x_read = error: -19 [ 1136.128772][ T5919] dvb-usb: error while querying for an remote control event. [ 1136.243854][ T5919] m920x_read = error: -19 [ 1136.248346][ T5919] dvb-usb: error while querying for an remote control event. [ 1136.372989][ T5919] m920x_read = error: -19 [ 1136.410453][ T5919] dvb-usb: error while querying for an remote control event. [ 1136.474907][T11591] corsair-cpro 0003:1B1C:0C10.0024: probe with driver corsair-cpro failed with error -71 [ 1136.543982][ T1209] m920x_read = error: -19 [ 1136.548482][ T1209] dvb-usb: error while querying for an remote control event. [ 1136.571435][T11591] usb 4-1: USB disconnect, device number 82 [ 1136.666437][ T1209] m920x_read = error: -19 [ 1136.670862][ T1209] dvb-usb: error while querying for an remote control event. [ 1136.758111][ T5920] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1136.804448][ T1209] m920x_read = error: -19 [ 1136.808938][ T1209] dvb-usb: error while querying for an remote control event. [ 1136.933952][ T1209] m920x_read = error: -19 [ 1136.938268][ T5920] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1136.938511][T11591] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1136.946797][ T5920] usb 3-1: config 0 has no interface number 0 [ 1136.960104][ T1209] dvb-usb: error while querying for an remote control event. [ 1136.986275][ T5920] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1137.000774][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.010909][ T5920] usb 3-1: Product: syz [ 1137.015499][ T5920] usb 3-1: Manufacturer: syz [ 1137.020134][ T5920] usb 3-1: SerialNumber: syz [ 1137.028900][ T5920] usb 3-1: config 0 descriptor?? [ 1137.083913][ T5919] m920x_read = error: -19 [ 1137.088343][ T5919] dvb-usb: error while querying for an remote control event. [ 1137.124506][T11591] usb 4-1: too many configurations: 158, using maximum allowed: 8 [ 1137.144207][T11591] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1137.154456][T11591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.174180][T11591] usb 4-1: Product: syz [ 1137.178462][T11591] usb 4-1: Manufacturer: syz [ 1137.183835][T11591] usb 4-1: SerialNumber: syz [ 1137.196712][ T5919] usb 5-1: USB disconnect, device number 42 [ 1137.210354][ T1209] m920x_read = error: -19 [ 1137.218474][T11591] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1137.227232][ T1209] dvb-usb: error while querying for an remote control event. [ 1137.257873][ T5968] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1137.289813][ T5920] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1137.337107][ T5920] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1137.356722][ T5920] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1137.366508][ T5920] usb 3-1: media controller created [ 1137.373821][T11591] m920x_read = error: -19 [ 1137.386002][T11591] dvb-usb: error while querying for an remote control event. [ 1137.392546][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1137.483228][T21264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.491346][ T5920] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1137.494450][T11591] m920x_read = error: -19 [ 1137.502397][T11591] dvb-usb: error while querying for an remote control event. [ 1137.512538][T21264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.553952][ T5920] usb 3-1: USB disconnect, device number 55 [ 1137.554964][T11591] usb 4-1: USB disconnect, device number 83 [ 1137.614903][ T1209] m920x_read = error: -19 [ 1137.619436][ T1209] dvb-usb: error while querying for an remote control event. [ 1137.673797][ T5919] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1137.733855][ T1209] m920x_read = error: -19 [ 1137.738337][ T1209] dvb-usb: error while querying for an remote control event. [ 1137.825847][ T5919] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 1137.841070][ T5919] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.851946][ T5919] usb 5-1: config 171 has no interface number 0 [ 1137.859192][ T1209] m920x_read = error: -19 [ 1137.864383][ T5919] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1137.875230][ T1209] dvb-usb: error while querying for an remote control event. [ 1137.882970][ T5919] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1137.893574][ T5919] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1137.908987][T21294] tipc: Started in network mode [ 1137.909954][ T5919] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1137.914527][T21294] tipc: Node identity 22e98ec32a4, cluster identity 4711 [ 1137.924140][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.931305][T21294] tipc: Enabled bearer , priority 0 [ 1137.938725][ T5919] usb 5-1: Product: syz [ 1137.950057][ T5919] usb 5-1: Manufacturer: syz [ 1137.951431][T21294] syzkaller0: entered promiscuous mode [ 1137.954887][ T5919] usb 5-1: SerialNumber: syz [ 1137.960972][T21294] syzkaller0: entered allmulticast mode [ 1137.969679][T21289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1137.983955][ T1209] m920x_read = error: -19 [ 1137.989095][ T1209] dvb-usb: error while querying for an remote control event. [ 1138.003109][T21294] tipc: Resetting bearer [ 1138.011978][T21294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4374'. [ 1138.021414][T21294] netlink: 'syz.0.4374': attribute type 14 has an invalid length. [ 1138.031559][T21294] netlink: 'syz.0.4374': attribute type 13 has an invalid length. [ 1138.055687][T21294] vxlan0: entered promiscuous mode [ 1138.077855][ T58] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.089247][ T58] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.107260][ T58] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.116784][ T1209] m920x_read = error: -19 [ 1138.121205][ T1209] dvb-usb: error while querying for an remote control event. [ 1138.243938][ T1209] m920x_read = error: -19 [ 1138.248695][ T1209] dvb-usb: error while querying for an remote control event. [ 1138.437541][ T5968] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1138.447795][ T1209] m920x_read = error: -19 [ 1138.452264][ T1209] dvb-usb: error while querying for an remote control event. [ 1138.462415][ T5968] ath9k_htc: Failed to initialize the device [ 1138.480975][T11591] usb 4-1: ath9k_htc: USB layer deinitialized [ 1138.584092][ T1209] m920x_read = error: -19 [ 1138.588865][ T1209] dvb-usb: error while querying for an remote control event. [ 1138.703873][ T1209] m920x_read = error: -19 [ 1138.708354][ T1209] dvb-usb: error while querying for an remote control event. [ 1138.771949][T21292] tipc: Resetting bearer [ 1138.880069][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1138.880092][ T29] audit: type=1326 audit(1775366008.614:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21307 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4539c819 code=0x7ffc0000 [ 1138.941297][T21292] tipc: Disabling bearer [ 1138.957491][T21311] netlink: 'syz.2.4378': attribute type 1 has an invalid length. [ 1138.972255][ T29] audit: type=1326 audit(1775366008.624:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21307 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4539c819 code=0x7ffc0000 [ 1139.004041][T11591] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1139.043921][ T1209] m920x_read = error: -19 [ 1139.048487][ T1209] dvb-usb: error while querying for an remote control event. [ 1139.079867][ T29] audit: type=1326 audit(1775366008.624:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21307 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fda4539c819 code=0x7ffc0000 [ 1139.123795][ T29] audit: type=1326 audit(1775366008.624:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21307 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4539c819 code=0x7ffc0000 [ 1139.134229][ T5919] ath6kl: Failed to submit usb control message: -110 [ 1139.198791][T21305] netlink: 'syz.4.4372': attribute type 21 has an invalid length. [ 1139.207256][ T1209] m920x_read = error: -19 [ 1139.207501][T21305] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4372'. [ 1139.213808][ T1209] dvb-usb: error while querying for an remote control event. [ 1139.239095][ T5919] ath6kl: unable to send the bmi data to the device: -110 [ 1139.246381][T11591] usb 4-1: Using ep0 maxpacket: 16 [ 1139.262366][T11591] usb 4-1: too many configurations: 158, using maximum allowed: 8 [ 1139.271230][ T29] audit: type=1326 audit(1775366008.624:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21307 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4539c819 code=0x7ffc0000 [ 1139.272915][ T5919] ath6kl: Unable to send get target info: -110 [ 1139.294202][ T29] audit: type=1326 audit(1775366008.624:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21307 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fda4539c819 code=0x7ffc0000 [ 1139.323118][ T29] audit: type=1326 audit(1775366008.624:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21307 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4539c819 code=0x7ffc0000 [ 1139.346270][ T29] audit: type=1326 audit(1775366008.624:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21307 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4539c819 code=0x7ffc0000 [ 1139.368977][ T29] audit: type=1326 audit(1775366008.624:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21307 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda4539c819 code=0x7ffc0000 [ 1139.391842][ T29] audit: type=1326 audit(1775366008.624:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21307 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4539c819 code=0x7ffc0000 [ 1139.397381][T11591] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.08 [ 1139.424324][ T1209] m920x_read = error: -19 [ 1139.430154][T21317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1139.445197][ T1209] dvb-usb: error while querying for an remote control event. [ 1139.543936][T11591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.552297][T11591] usb 4-1: Product: syz [ 1139.580583][T11591] usb 4-1: Manufacturer: syz [ 1139.597557][T11591] usb 4-1: SerialNumber: syz [ 1139.606566][ T5919] ath6kl: Failed to init ath6kl core: -110 [ 1139.617359][ T5919] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 1139.628066][T15389] m920x_read = error: -19 [ 1139.632787][T15389] dvb-usb: error while querying for an remote control event. [ 1139.686694][T11591] usb 4-1: can't set config #1, error -71 [ 1139.727149][T11591] usb 4-1: USB disconnect, device number 84 [ 1139.863769][T15389] m920x_read = error: -19 [ 1139.871995][T15389] dvb-usb: error while querying for an remote control event. [ 1140.043800][T15389] m920x_read = error: -19 [ 1140.049398][T15389] dvb-usb: error while querying for an remote control event. [ 1140.196809][T11591] m920x_read = error: -19 [ 1140.201274][T11591] dvb-usb: error while querying for an remote control event. [ 1140.363883][T11591] m920x_read = error: -19 [ 1140.368338][T11591] dvb-usb: error while querying for an remote control event. [ 1140.493812][T11591] m920x_read = error: -19 [ 1140.508837][T11591] dvb-usb: error while querying for an remote control event. [ 1140.655099][T11591] m920x_read = error: -19 [ 1140.659696][T11591] dvb-usb: error while querying for an remote control event. [ 1140.719614][T21330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4384'. [ 1140.814107][T11591] m920x_read = error: -19 [ 1140.815099][T21330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4384'. [ 1140.818521][T11591] dvb-usb: error while querying for an remote control event. [ 1141.050036][ T5968] m920x_read = error: -19 [ 1141.059863][ T5968] dvb-usb: error while querying for an remote control event. [ 1141.213819][ T5968] m920x_read = error: -19 [ 1141.218222][ T5968] dvb-usb: error while querying for an remote control event. [ 1141.373859][ T5968] m920x_read = error: -19 [ 1141.384628][ T5968] dvb-usb: error while querying for an remote control event. [ 1141.506841][ T5920] usb 5-1: USB disconnect, device number 43 [ 1141.514298][ T5968] m920x_read = error: -19 [ 1141.518693][ T5968] dvb-usb: error while querying for an remote control event. [ 1141.564123][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1141.673947][ T5968] m920x_read = error: -19 [ 1141.678375][ T5968] dvb-usb: error while querying for an remote control event. [ 1141.803822][ T5968] m920x_read = error: -19 [ 1141.810205][ T5968] dvb-usb: error while querying for an remote control event. [ 1141.934029][ T5968] m920x_read = error: -19 [ 1141.942233][ T5968] dvb-usb: error while querying for an remote control event. [ 1142.037290][T21356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4390'. [ 1142.093862][T11591] m920x_read = error: -19 [ 1142.098355][T11591] dvb-usb: error while querying for an remote control event. [ 1142.127578][T21357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4392'. [ 1142.202393][T21360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.212621][T21360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.224921][ T5968] m920x_read = error: -19 [ 1142.229355][ T5968] dvb-usb: error while querying for an remote control event. [ 1142.364205][T11591] m920x_read = error: -19 [ 1142.368631][T11591] dvb-usb: error while querying for an remote control event. [ 1142.434069][ T5968] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1142.515058][T15389] m920x_read = error: -19 [ 1142.519622][T15389] dvb-usb: error while querying for an remote control event. [ 1142.633830][T15389] m920x_read = error: -19 [ 1142.638528][T15389] dvb-usb: error while querying for an remote control event. [ 1142.645986][ T5968] usb 4-1: Using ep0 maxpacket: 16 [ 1142.657637][ T5968] usb 4-1: config 4 has an invalid interface number: 243 but max is 3 [ 1142.666286][ T5968] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1142.675652][ T5968] usb 4-1: config 4 has an invalid interface number: 78 but max is 3 [ 1142.689277][T21376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1142.693999][ T5968] usb 4-1: config 4 has an invalid interface number: 140 but max is 3 [ 1142.708762][ T5968] usb 4-1: config 4 has an invalid interface number: 4 but max is 3 [ 1142.718970][ T5968] usb 4-1: config 4 has an invalid interface number: 219 but max is 3 [ 1142.727609][ T5968] usb 4-1: config 4 has 5 interfaces, different from the descriptor's value: 4 [ 1142.737441][ T5968] usb 4-1: config 4 has no interface number 0 [ 1142.751024][ T5968] usb 4-1: config 4 has no interface number 1 [ 1142.775944][T15389] m920x_read = error: -19 [ 1142.775948][ T797] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1142.793463][ T5968] usb 4-1: config 4 has no interface number 2 [ 1142.794163][ T5920] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 1142.799698][T15389] dvb-usb: error while querying for an remote control event. [ 1142.815204][ T5968] usb 4-1: config 4 has no interface number 3 [ 1142.821434][ T5968] usb 4-1: config 4 interface 243 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1142.934121][T15389] m920x_read = error: -19 [ 1142.950940][T15389] dvb-usb: error while querying for an remote control event. [ 1142.965623][ T5968] usb 4-1: config 4 interface 243 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1142.980259][ T5968] usb 4-1: config 4 interface 243 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 1142.993755][ T5968] usb 4-1: config 4 interface 243 altsetting 6 bulk endpoint 0xF has invalid maxpacket 1023 [ 1143.023848][ T797] usb 1-1: Using ep0 maxpacket: 16 [ 1143.023848][ T5968] usb 4-1: config 4 interface 78 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1143.023880][ T5968] usb 4-1: config 4 interface 78 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1143.052085][ T5968] usb 4-1: config 4 interface 78 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 1143.073075][ T797] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1143.083971][T15389] m920x_read = error: -19 [ 1143.085874][ T797] usb 1-1: config 5 has an invalid interface number: 21 but max is 0 [ 1143.088800][T15389] dvb-usb: error while querying for an remote control event. [ 1143.096881][ T797] usb 1-1: config 5 has no interface number 0 [ 1143.111170][ T5920] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1143.119401][ T5920] usb 5-1: config 0 has no interface number 0 [ 1143.129602][ T797] usb 1-1: config 5 interface 21 has no altsetting 0 [ 1143.136648][ T5920] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1143.157642][ T5968] usb 4-1: too many endpoints for config 4 interface 140 altsetting 100: 141, using maximum allowed: 30 [ 1143.160736][ T797] usb 1-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=93.d3 [ 1143.199772][ T5968] usb 4-1: config 4 interface 140 altsetting 100 bulk endpoint 0x7 has invalid maxpacket 64 [ 1143.217977][ T5920] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1143.218033][ T5920] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1143.218058][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.219622][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.229494][T15389] m920x_read = error: -19 [ 1143.238994][ T5920] usb 5-1: config 0 descriptor?? [ 1143.267533][T15389] dvb-usb: error while querying for an remote control event. [ 1143.283946][ T5968] usb 4-1: config 4 interface 140 altsetting 100 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1143.295920][ T797] usb 1-1: Product: syz [ 1143.303933][ T5968] usb 4-1: config 4 interface 140 altsetting 100 has an invalid descriptor for endpoint zero, skipping [ 1143.324319][ T797] usb 1-1: Manufacturer: syz [ 1143.329051][ T797] usb 1-1: SerialNumber: syz [ 1143.344047][ T5968] usb 4-1: config 4 interface 140 altsetting 100 has a duplicate endpoint with address 0x5, skipping [ 1143.365325][ T5968] usb 4-1: config 4 interface 140 altsetting 100 has a duplicate endpoint with address 0x5, skipping [ 1143.377135][T21383] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1143.395428][T15389] m920x_read = error: -19 [ 1143.400085][T15389] dvb-usb: error while querying for an remote control event. [ 1143.410207][ T5968] usb 4-1: config 4 interface 140 altsetting 100 has 5 endpoint descriptors, different from the interface descriptor's value: 141 [ 1143.434307][ T5968] usb 4-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1143.483746][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1143.494714][ T5968] usb 4-1: config 4 interface 4 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1143.515560][ T5968] usb 4-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1143.527304][ T5920] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1143.529562][ T5968] usb 4-1: config 4 interface 219 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1143.548988][T15389] m920x_read = error: -19 [ 1143.550158][T21380] x_tables: duplicate underflow at hook 1 [ 1143.553366][T15389] dvb-usb: error while querying for an remote control event. [ 1143.559388][ T5968] usb 4-1: config 4 interface 219 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 1143.581766][ T5968] usb 4-1: config 4 interface 219 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1143.600578][ T5968] usb 4-1: config 4 interface 243 has no altsetting 0 [ 1143.616865][ T797] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1143.617471][ T5968] usb 4-1: config 4 interface 78 has no altsetting 0 [ 1143.635992][ T5968] usb 4-1: config 4 interface 140 has no altsetting 0 [ 1143.643056][ T5968] usb 4-1: config 4 interface 4 has no altsetting 0 [ 1143.647833][ T797] usb 1-1: USB disconnect, device number 8 [ 1143.654719][ T5968] usb 4-1: config 4 interface 219 has no altsetting 0 [ 1143.665148][T15389] m920x_read = error: -19 [ 1143.669508][T15389] dvb-usb: error while querying for an remote control event. [ 1143.702856][ T5968] usb 4-1: New USB device found, idVendor=0c45, idProduct=612e, bcdDevice=22.43 [ 1143.719437][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.761926][ T5968] usb 4-1: Product: syz [ 1143.771166][ T5968] usb 4-1: Manufacturer: syz [ 1143.802150][T15389] m920x_read = error: -19 [ 1143.810775][T15389] dvb-usb: error while querying for an remote control event. [ 1143.827780][ T5968] usb 4-1: SerialNumber: syz [ 1143.946423][T15389] m920x_read = error: -19 [ 1143.951052][T15389] dvb-usb: error while querying for an remote control event. [ 1144.033449][ T5968] usb 4-1: Interface #219 referenced by multiple IADs [ 1144.062242][T21365] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1144.086025][T15389] m920x_read = error: -19 [ 1144.090544][T15389] dvb-usb: error while querying for an remote control event. [ 1144.215313][T15389] m920x_read = error: -19 [ 1144.219812][T15389] dvb-usb: error while querying for an remote control event. [ 1144.356563][T15389] m920x_read = error: -19 [ 1144.362285][T15389] dvb-usb: error while querying for an remote control event. [ 1144.565804][T21399] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1144.593416][T15389] m920x_read = error: -19 [ 1144.600770][T15389] dvb-usb: error while querying for an remote control event. [ 1144.714468][T15389] m920x_read = error: -19 [ 1144.719498][T15389] dvb-usb: error while querying for an remote control event. [ 1144.748640][T21400] libceph: resolve '. [ 1144.748640][T21400] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 1144.748640][T21400] ' (ret=-3): failed [ 1144.834340][T15389] m920x_read = error: -19 [ 1144.839185][T15389] dvb-usb: error while querying for an remote control event. [ 1144.916081][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4406'. [ 1144.964748][T15389] m920x_read = error: -19 [ 1144.970150][T15389] dvb-usb: error while querying for an remote control event. [ 1145.093984][T15389] m920x_read = error: -19 [ 1145.099432][T15389] dvb-usb: error while querying for an remote control event. [ 1145.224535][T15389] m920x_read = error: -19 [ 1145.237241][T15389] dvb-usb: error while querying for an remote control event. [ 1145.353972][T15389] m920x_read = error: -19 [ 1145.394637][T15389] dvb-usb: error while querying for an remote control event. [ 1145.514081][T11591] m920x_read = error: -19 [ 1145.528918][T11591] dvb-usb: error while querying for an remote control event. [ 1145.537096][T15389] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1145.548931][ T5968] usb 4-1: USB disconnect, device number 85 [ 1145.674445][T11591] m920x_read = error: -19 [ 1145.682747][T11591] dvb-usb: error while querying for an remote control event. [ 1145.733968][T15389] usb 3-1: Using ep0 maxpacket: 32 [ 1145.753313][T15389] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1145.770502][T15389] usb 3-1: config 0 has no interface number 0 [ 1145.773274][T21412] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 21412 comm: syz.3.4408) [ 1145.795979][T15389] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1145.814019][T11591] m920x_read = error: -19 [ 1145.819409][T11591] dvb-usb: error while querying for an remote control event. [ 1145.827296][T15389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.828348][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1145.828363][ T29] audit: type=1800 audit(1775366015.664:2738): pid=21412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4408" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=97414 res=0 errno=0 [ 1145.882986][ T5968] usb 5-1: USB disconnect, device number 44 [ 1145.906048][T15389] usb 3-1: Product: syz [ 1145.910273][T15389] usb 3-1: Manufacturer: syz [ 1145.940874][T15389] usb 3-1: SerialNumber: syz [ 1145.999008][T15389] usb 3-1: config 0 descriptor?? [ 1146.004180][T11591] m920x_read = error: -19 [ 1146.019276][T11591] dvb-usb: error while querying for an remote control event. [ 1146.154177][ T5968] m920x_read = error: -19 [ 1146.158719][ T5968] dvb-usb: error while querying for an remote control event. [ 1146.273832][ T5968] m920x_read = error: -19 [ 1146.278526][ T5968] dvb-usb: error while querying for an remote control event. [ 1146.403809][ T5968] m920x_read = error: -19 [ 1146.430665][T21425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.474529][T11591] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1146.483088][ T5968] dvb-usb: error while querying for an remote control event. [ 1146.492734][T15389] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1146.512271][T15389] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1146.673904][ T5968] m920x_read = error: -19 [ 1146.678380][ T5968] dvb-usb: error while querying for an remote control event. [ 1146.703808][T11591] usb 5-1: Using ep0 maxpacket: 16 [ 1146.711233][T11591] usb 5-1: config 0 has no interfaces? [ 1146.722522][T11591] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1146.735771][T11591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.750834][T11591] usb 5-1: Product: syz [ 1146.758479][T11591] usb 5-1: Manufacturer: syz [ 1146.767993][T11591] usb 5-1: SerialNumber: syz [ 1146.781942][T11591] usb 5-1: config 0 descriptor?? [ 1146.793858][ T5968] m920x_read = error: -19 [ 1146.800294][ T5968] dvb-usb: error while querying for an remote control event. [ 1146.924000][ T5968] m920x_read = error: -19 [ 1146.929243][ T5968] dvb-usb: error while querying for an remote control event. [ 1147.045536][ T5968] m920x_read = error: -19 [ 1147.060652][ T5968] dvb-usb: error while querying for an remote control event. [ 1147.183882][ T5968] m920x_read = error: -19 [ 1147.191389][ T5968] dvb-usb: error while querying for an remote control event. [ 1147.314091][ T5968] m920x_read = error: -19 [ 1147.318995][ T5968] dvb-usb: error while querying for an remote control event. [ 1147.443813][T11591] m920x_read = error: -19 [ 1147.448360][T11591] dvb-usb: error while querying for an remote control event. [ 1147.568827][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4417'. [ 1147.603815][T11591] m920x_read = error: -19 [ 1147.608228][T11591] dvb-usb: error while querying for an remote control event. [ 1147.727513][T21441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4418'. [ 1147.744723][T11591] m920x_read = error: -19 [ 1147.750821][T11591] dvb-usb: error while querying for an remote control event. [ 1147.873894][T11591] m920x_read = error: -19 [ 1147.878468][T11591] dvb-usb: error while querying for an remote control event. [ 1147.993842][T11591] m920x_read = error: -19 [ 1147.998565][T11591] dvb-usb: error while querying for an remote control event. [ 1148.113807][T11591] m920x_read = error: -19 [ 1148.118321][T11591] dvb-usb: error while querying for an remote control event. [ 1148.234010][T11591] m920x_read = error: -19 [ 1148.238768][T11591] dvb-usb: error while querying for an remote control event. [ 1148.354350][T11591] m920x_read = error: -19 [ 1148.360122][T11591] dvb-usb: error while querying for an remote control event. [ 1148.474332][T11591] m920x_read = error: -19 [ 1148.485632][T11591] dvb-usb: error while querying for an remote control event. [ 1148.654501][T11591] m920x_read = error: -19 [ 1148.660991][T11591] dvb-usb: error while querying for an remote control event. [ 1148.810484][T11591] m920x_read = error: -19 [ 1148.815206][T15389] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1148.840857][T11591] dvb-usb: error while querying for an remote control event. [ 1148.850431][T15389] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1148.944061][T15389] usb 3-1: USB disconnect, device number 56 [ 1148.963790][ T5968] m920x_read = error: -19 [ 1148.968295][ T5968] dvb-usb: error while querying for an remote control event. [ 1149.083785][ T5968] m920x_read = error: -19 [ 1149.088441][ T5968] dvb-usb: error while querying for an remote control event. [ 1149.168431][ T5920] usb 5-1: USB disconnect, device number 45 [ 1149.203798][T15389] m920x_read = error: -19 [ 1149.208507][T15389] dvb-usb: error while querying for an remote control event. [ 1149.236685][T21466] binder: 21465:21466 ioctl c0bc5310 200000000280 returned -22 [ 1149.243907][ T5968] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1149.261134][T21466] binder: 21465:21466 ioctl c0306201 2000000003c0 returned -14 [ 1149.323979][T15389] m920x_read = error: -19 [ 1149.340657][T15389] dvb-usb: error while querying for an remote control event. [ 1149.443714][ T5968] usb 4-1: Using ep0 maxpacket: 16 [ 1149.482351][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1149.513228][T11591] m920x_read = error: -19 [ 1149.517742][T11591] dvb-usb: error while querying for an remote control event. [ 1149.530650][ T5968] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1149.560820][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.604545][ T5968] usb 4-1: Product: syz [ 1149.608919][ T5968] usb 4-1: Manufacturer: syz [ 1149.613551][ T5968] usb 4-1: SerialNumber: syz [ 1149.636149][T11591] m920x_read = error: -19 [ 1149.640567][T11591] dvb-usb: error while querying for an remote control event. [ 1149.657058][ T5968] usb 4-1: config 0 descriptor?? [ 1149.690680][ T5968] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1149.766170][ T5968] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1149.794162][T11591] m920x_read = error: -19 [ 1149.798781][T11591] dvb-usb: error while querying for an remote control event. [ 1149.913865][T11591] m920x_read = error: -19 [ 1149.918328][T11591] dvb-usb: error while querying for an remote control event. [ 1149.964827][ T5968] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1150.034767][T11591] m920x_read = error: -19 [ 1150.044033][T11591] dvb-usb: error while querying for an remote control event. [ 1150.056592][ T5968] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1150.067754][ T5968] em28xx 4-1:0.0: board has no eeprom [ 1150.143970][ T5968] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1150.153189][ T5968] em28xx 4-1:0.0: dvb set to bulk mode. [ 1150.171311][T11591] em28xx 4-1:0.0: Binding DVB extension [ 1150.187335][T21482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4430'. [ 1150.198296][ T5968] usb 4-1: USB disconnect, device number 86 [ 1150.218008][ T5968] em28xx 4-1:0.0: Disconnecting em28xx [ 1150.233943][T15389] m920x_read = error: -19 [ 1150.238518][T15389] dvb-usb: error while querying for an remote control event. [ 1150.373835][T15389] m920x_read = error: -19 [ 1150.378498][T15389] dvb-usb: error while querying for an remote control event. [ 1150.413996][T11591] em28xx 4-1:0.0: Registering input extension [ 1150.526853][ T5968] em28xx 4-1:0.0: Closing input extension [ 1150.610390][ T5968] em28xx 4-1:0.0: Freeing device [ 1150.638779][ T1209] m920x_read = error: -19 [ 1150.665933][ T1209] dvb-usb: error while querying for an remote control event. [ 1150.683785][T11591] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1150.803859][ T1209] m920x_read = error: -19 [ 1150.808564][ T1209] dvb-usb: error while querying for an remote control event. [ 1150.823984][T11591] usb 5-1: device descriptor read/64, error -71 [ 1150.923808][ T5968] m920x_read = error: -19 [ 1150.928186][ T5968] dvb-usb: error while querying for an remote control event. [ 1150.994560][ T1209] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1151.043810][ T5968] m920x_read = error: -19 [ 1151.048240][ T5968] dvb-usb: error while querying for an remote control event. [ 1151.073801][T11591] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1151.098727][T21500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.184746][ T5968] m920x_read = error: -19 [ 1151.189639][ T5968] dvb-usb: error while querying for an remote control event. [ 1151.214047][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 1151.225694][ T1209] usb 1-1: config 0 has no interfaces? [ 1151.245316][ T1209] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1151.297365][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.314873][ T1209] usb 1-1: Product: syz [ 1151.319110][ T1209] usb 1-1: Manufacturer: syz [ 1151.323934][T11591] usb 5-1: device descriptor read/64, error -71 [ 1151.334904][ T1209] usb 1-1: SerialNumber: syz [ 1151.343824][ T5968] m920x_read = error: -19 [ 1151.348217][ T5968] dvb-usb: error while querying for an remote control event. [ 1151.372277][ T1209] usb 1-1: config 0 descriptor?? [ 1151.444160][T11591] usb usb5-port1: attempt power cycle [ 1151.463749][ T1209] m920x_read = error: -19 [ 1151.468162][ T1209] dvb-usb: error while querying for an remote control event. [ 1151.594328][ T1209] m920x_read = error: -19 [ 1151.598827][ T1209] dvb-usb: error while querying for an remote control event. [ 1151.723805][ T1209] m920x_read = error: -19 [ 1151.728231][ T1209] dvb-usb: error while querying for an remote control event. [ 1151.814116][T11591] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1151.821587][T21508] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4439'. [ 1151.844335][T21509] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4439'. [ 1151.866298][ T1209] m920x_read = error: -19 [ 1151.870899][ T1209] dvb-usb: error while querying for an remote control event. [ 1151.871599][T21509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1151.879449][T11591] usb 5-1: device descriptor read/8, error -71 [ 1151.902825][T21509] bond0 (unregistering): Released all slaves [ 1152.003867][ T1209] m920x_read = error: -19 [ 1152.014961][ T1209] dvb-usb: error while querying for an remote control event. [ 1152.103545][T21515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4440'. [ 1152.133924][ T1209] m920x_read = error: -19 [ 1152.138809][ T1209] dvb-usb: error while querying for an remote control event. [ 1152.168970][T11591] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1152.199348][T11591] usb 5-1: device descriptor read/8, error -71 [ 1152.253932][ T1209] m920x_read = error: -19 [ 1152.264223][ T1209] dvb-usb: error while querying for an remote control event. [ 1152.324161][T11591] usb usb5-port1: unable to enumerate USB device [ 1152.394054][T11591] m920x_read = error: -19 [ 1152.402978][T11591] dvb-usb: error while querying for an remote control event. [ 1152.428670][T21519] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4441'. [ 1152.527026][T11591] m920x_read = error: -19 [ 1152.538707][T11591] dvb-usb: error while querying for an remote control event. [ 1152.653776][T11591] m920x_read = error: -19 [ 1152.658260][T11591] dvb-usb: error while querying for an remote control event. [ 1152.845175][T11591] m920x_read = error: -19 [ 1152.853855][T11591] dvb-usb: error while querying for an remote control event. [ 1152.983941][ T1209] m920x_read = error: -19 [ 1152.993738][ T1209] dvb-usb: error while querying for an remote control event. [ 1153.183799][ T1209] m920x_read = error: -19 [ 1153.188474][ T1209] dvb-usb: error while querying for an remote control event. [ 1153.339456][ T1209] m920x_read = error: -19 [ 1153.348705][ T1209] dvb-usb: error while querying for an remote control event. [ 1153.463976][ T1209] m920x_read = error: -19 [ 1153.468471][ T1209] dvb-usb: error while querying for an remote control event. [ 1153.603345][T21524] FAULT_INJECTION: forcing a failure. [ 1153.603345][T21524] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.625210][ T1209] m920x_read = error: -19 [ 1153.633317][ T1209] dvb-usb: error while querying for an remote control event. [ 1153.676779][T21524] CPU: 1 UID: 0 PID: 21524 Comm: syz.4.4443 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.676813][T21524] Tainted: [L]=SOFTLOCKUP [ 1153.676819][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1153.676827][T21524] Call Trace: [ 1153.676832][T21524] [ 1153.676838][T21524] dump_stack_lvl+0xe8/0x150 [ 1153.676861][T21524] should_fail_ex+0x412/0x560 [ 1153.676888][T21524] should_failslab+0xa8/0x100 [ 1153.676905][T21524] __kmalloc_noprof+0xe8/0x760 [ 1153.676919][T21524] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1153.676935][T21524] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1153.676954][T21524] ? tomoyo_path_number_perm+0x219/0x630 [ 1153.676969][T21524] tomoyo_path_number_perm+0x246/0x630 [ 1153.676987][T21524] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1153.677005][T21524] ? __lock_acquire+0x6b5/0x2cf0 [ 1153.677026][T21524] ? errseq_sample+0x40/0x70 [ 1153.677040][T21524] ? file_init_path+0x434/0x590 [ 1153.677066][T21524] ? __fget_files+0x2a/0x420 [ 1153.677079][T21524] ? __fget_files+0x2a/0x420 [ 1153.677089][T21524] ? __fget_files+0x3a0/0x420 [ 1153.677098][T21524] ? __fget_files+0x2a/0x420 [ 1153.677111][T21524] security_file_ioctl+0xc3/0x2a0 [ 1153.677128][T21524] __se_sys_ioctl+0x47/0x170 [ 1153.677146][T21524] do_syscall_64+0x14d/0xf80 [ 1153.677162][T21524] ? trace_irq_disable+0x3b/0x150 [ 1153.677172][T21524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.677184][T21524] ? clear_bhb_loop+0x40/0x90 [ 1153.677199][T21524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.677211][T21524] RIP: 0033:0x7f0fdf79c4ab [ 1153.677223][T21524] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1153.677233][T21524] RSP: 002b:00007f0fe06d5e50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1153.677247][T21524] RAX: ffffffffffffffda RBX: 00007f0fe06d5f70 RCX: 00007f0fdf79c4ab [ 1153.677256][T21524] RDX: 00007f0fe06d5ed0 RSI: 0000000000008913 RDI: 0000000000000005 [ 1153.677264][T21524] RBP: 0000000000000025 R08: 0000000000000000 R09: 0000000000000000 [ 1153.677271][T21524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1153.677278][T21524] R13: 0000000000000047 R14: 00007f0fe06d5f90 R15: 00007f0fe06d5ed0 [ 1153.677296][T21524] [ 1153.679022][T21524] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1153.918400][ T1209] m920x_read = error: -19 [ 1153.922969][ T1209] dvb-usb: error while querying for an remote control event. [ 1153.970387][T11591] usb 1-1: USB disconnect, device number 9 [ 1154.114132][ T1209] m920x_read = error: -19 [ 1154.118557][ T1209] dvb-usb: error while querying for an remote control event. [ 1154.263992][ T1209] m920x_read = error: -19 [ 1154.268418][ T1209] dvb-usb: error while querying for an remote control event. [ 1154.434427][ T1209] m920x_read = error: -19 [ 1154.445214][ T1209] dvb-usb: error while querying for an remote control event. [ 1154.569755][T21535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4447'. [ 1154.579221][ T1209] m920x_read = error: -19 [ 1154.583783][ T1209] dvb-usb: error while querying for an remote control event. [ 1154.648872][T21541] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4448'. [ 1154.704764][ T1209] m920x_read = error: -19 [ 1154.709295][ T1209] dvb-usb: error while querying for an remote control event. [ 1154.831212][T21547] netlink: 'syz.3.4450': attribute type 1 has an invalid length. [ 1154.854454][ T1209] m920x_read = error: -19 [ 1154.858946][ T1209] dvb-usb: error while querying for an remote control event. [ 1154.978673][ T1209] m920x_read = error: -19 [ 1154.983197][ T1209] dvb-usb: error while querying for an remote control event. [ 1155.002913][T21552] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1155.002913][T21552] The task syz.3.4452 (21552) triggered the difference, watch for misbehavior. [ 1155.113286][ T1209] m920x_read = error: -19 [ 1155.117777][ T1209] dvb-usb: error while querying for an remote control event. [ 1155.251879][ T1209] m920x_read = error: -19 [ 1155.262376][ T1209] dvb-usb: error while querying for an remote control event. [ 1155.330892][T21559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4453'. [ 1155.383774][T11591] m920x_read = error: -19 [ 1155.383805][T11591] dvb-usb: error while querying for an remote control event. [ 1155.510568][T11591] m920x_read = error: -19 [ 1155.510590][T11591] dvb-usb: error while querying for an remote control event. [ 1155.624068][ T1209] m920x_read = error: -19 [ 1155.624092][ T1209] dvb-usb: error while querying for an remote control event. [ 1155.685334][T11591] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1155.734732][ T5968] m920x_read = error: -19 [ 1155.734767][ T5968] dvb-usb: error while querying for an remote control event. [ 1155.746032][T21566] fuse: Bad value for 'fd' [ 1155.773993][ T1209] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1155.861040][ T5968] m920x_read = error: -19 [ 1155.866057][ T5968] dvb-usb: error while querying for an remote control event. [ 1155.893706][T11591] usb 5-1: Using ep0 maxpacket: 16 [ 1155.900709][T11591] usb 5-1: config 0 has no interfaces? [ 1155.909310][T11591] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1155.924262][T11591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.966030][T11591] usb 5-1: Product: syz [ 1155.970366][T11591] usb 5-1: Manufacturer: syz [ 1155.975886][T11591] usb 5-1: SerialNumber: syz [ 1155.984011][ T5968] m920x_read = error: -19 [ 1155.991917][ T5968] dvb-usb: error while querying for an remote control event. [ 1156.004655][T11591] usb 5-1: config 0 descriptor?? [ 1156.130138][ T1209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.148868][ T1209] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1156.159063][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.167495][ T1209] usb 3-1: Product: syz [ 1156.171783][ T1209] usb 3-1: Manufacturer: syz [ 1156.214453][T21571] FAULT_INJECTION: forcing a failure. [ 1156.214453][T21571] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.248401][T11591] m920x_read = error: -19 [ 1156.253907][T11591] dvb-usb: error while querying for an remote control event. [ 1156.263746][T21571] CPU: 0 UID: 0 PID: 21571 Comm: syz.1.4457 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.263770][T21571] Tainted: [L]=SOFTLOCKUP [ 1156.263775][T21571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1156.263783][T21571] Call Trace: [ 1156.263788][T21571] [ 1156.263794][T21571] dump_stack_lvl+0xe8/0x150 [ 1156.263816][T21571] should_fail_ex+0x412/0x560 [ 1156.263836][T21571] ? alloc_inode+0x6a/0x1b0 [ 1156.263853][T21571] should_failslab+0xa8/0x100 [ 1156.263870][T21571] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1156.263883][T21571] ? simple_start_creating+0xcc/0x110 [ 1156.263898][T21571] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1156.263912][T21571] alloc_inode+0x6a/0x1b0 [ 1156.263929][T21571] new_inode+0x22/0x170 [ 1156.263949][T21571] __debugfs_create_file+0xb8/0x400 [ 1156.263970][T21571] debugfs_create_file_short+0x3f/0x60 [ 1156.263986][T21571] ieee80211_debugfs_recreate_netdev+0x2aa/0x1460 [ 1156.264007][T21571] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 1156.264023][T21571] ? ieee80211_do_open+0x2140/0x2490 [ 1156.264042][T21571] ieee80211_if_change_type+0x508/0x940 [ 1156.264060][T21571] ieee80211_change_iface+0xd5/0x510 [ 1156.264082][T21571] cfg80211_change_iface+0x6bf/0xed0 [ 1156.264110][T21571] nl80211_set_interface+0x773/0xa90 [ 1156.264134][T21571] ? __pfx_nl80211_set_interface+0x10/0x10 [ 1156.264154][T21571] ? nl80211_pre_doit+0x4fb/0x930 [ 1156.264174][T21571] genl_family_rcv_msg_doit+0x22a/0x330 [ 1156.264195][T21571] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1156.264218][T21571] ? bpf_lsm_capable+0x9/0x20 [ 1156.264234][T21571] ? security_capable+0x7e/0x2c0 [ 1156.264256][T21571] genl_rcv_msg+0x61c/0x7a0 [ 1156.264276][T21571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.264290][T21571] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1156.264304][T21571] ? __pfx_nl80211_set_interface+0x10/0x10 [ 1156.264320][T21571] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1156.264336][T21571] ? __lock_acquire+0x6b5/0x2cf0 [ 1156.264358][T21571] netlink_rcv_skb+0x232/0x4b0 [ 1156.264371][T21571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.264387][T21571] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1156.264410][T21571] ? down_read+0x272/0x2e0 [ 1156.264425][T21571] ? genl_rcv+0xd/0x40 [ 1156.264441][T21571] genl_rcv+0x28/0x40 [ 1156.264454][T21571] netlink_unicast+0x80f/0x9b0 [ 1156.264477][T21571] ? __pfx_netlink_unicast+0x10/0x10 [ 1156.264495][T21571] ? netlink_sendmsg+0x650/0xb40 [ 1156.264507][T21571] ? skb_put+0x11b/0x210 [ 1156.264523][T21571] netlink_sendmsg+0x813/0xb40 [ 1156.264541][T21571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.264556][T21571] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1156.264575][T21571] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1156.264589][T21571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.264602][T21571] __sys_sendto+0x672/0x710 [ 1156.264618][T21571] ? __pfx___sys_sendto+0x10/0x10 [ 1156.264647][T21571] ? fput_close_sync+0x11f/0x240 [ 1156.264664][T21571] ? __pfx_fput_close_sync+0x10/0x10 [ 1156.264687][T21571] __x64_sys_sendto+0xde/0x100 [ 1156.264703][T21571] do_syscall_64+0x14d/0xf80 [ 1156.264717][T21571] ? trace_irq_disable+0x3b/0x150 [ 1156.264728][T21571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.264740][T21571] ? clear_bhb_loop+0x40/0x90 [ 1156.264755][T21571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.264767][T21571] RIP: 0033:0x7f779455d04e [ 1156.264779][T21571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1156.264789][T21571] RSP: 002b:00007f77954edde8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1156.264804][T21571] RAX: ffffffffffffffda RBX: 00007f77954ef6c0 RCX: 00007f779455d04e [ 1156.264812][T21571] RDX: 0000000000000024 RSI: 00007f77954edfe0 RDI: 0000000000000004 [ 1156.264820][T21571] RBP: 0000000000000000 R08: 00007f77954ede64 R09: 000000000000000c [ 1156.264827][T21571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1156.264834][T21571] R13: 0000000000000000 R14: 00007f77954edfe0 R15: 0000000000000000 [ 1156.264853][T21571] [ 1156.264884][T21571] debugfs: out of free dentries, can not create file 'state' [ 1156.675345][ T1209] usb 3-1: SerialNumber: syz [ 1156.755033][ T1209] usb 3-1: config 0 descriptor?? [ 1156.852547][T11591] m920x_read = error: -19 [ 1156.862112][T11591] dvb-usb: error while querying for an remote control event. [ 1156.880858][ T1209] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 1156.917410][ T1209] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1156.936690][ T1209] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1156.983782][ T1209] m920x_read = error: -19 [ 1156.988220][ T1209] dvb-usb: error while querying for an remote control event. [ 1157.159715][ T1209] m920x_read = error: -19 [ 1157.200401][ T1209] dvb-usb: error while querying for an remote control event. [ 1157.327486][ T1209] m920x_read = error: -19 [ 1157.331916][ T1209] dvb-usb: error while querying for an remote control event. [ 1157.473889][ T1209] m920x_read = error: -19 [ 1157.479764][ T1209] dvb-usb: error while querying for an remote control event. [ 1157.593871][ T1209] m920x_read = error: -19 [ 1157.598430][ T1209] dvb-usb: error while querying for an remote control event. [ 1157.805033][ T1209] m920x_read = error: -19 [ 1157.811142][T21591] binder: BINDER_SET_CONTEXT_MGR already set [ 1157.830230][T21591] binder: 21589:21591 ioctl 4018620d 200000000180 returned -16 [ 1158.348591][ T5920] usb 5-1: USB disconnect, device number 50 [ 1158.386416][T21617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4464'. [ 1158.413743][ T1209] dvb-usb: error while querying for an remote control event. [ 1158.461731][ T797] usb 3-1: USB disconnect, device number 57 [ 1158.478312][ T797] garmin_gps 3-1:0.0: device disconnected [ 1158.594967][ T1209] m920x_read = error: -19 [ 1158.620000][ T1209] dvb-usb: error while querying for an remote control event. [ 1158.768086][ T1209] m920x_read = error: -19 [ 1158.772480][ T1209] dvb-usb: error while querying for an remote control event. [ 1158.924494][ T13] wlan0: Trigger new scan to find an IBSS to join [ 1158.954123][ T1209] m920x_read = error: -19 [ 1158.966173][ T1209] dvb-usb: error while querying for an remote control event. [ 1159.033757][ T797] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1159.083953][ T1209] m920x_read = error: -19 [ 1159.088382][ T1209] dvb-usb: error while querying for an remote control event. [ 1159.224762][ T1209] m920x_read = error: -19 [ 1159.229182][ T1209] dvb-usb: error while querying for an remote control event. [ 1159.265530][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 1159.278096][ T797] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 1159.340900][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1159.349390][ T797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.361524][ T1209] m920x_read = error: -19 [ 1159.366540][ T1209] dvb-usb: error while querying for an remote control event. [ 1159.369728][ T797] usb 1-1: config 0 has no interface number 0 [ 1159.380717][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1159.391223][ T797] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.406767][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1159.415155][ T797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.508170][ T797] usb 1-1: config 0 has no interface number 0 [ 1159.519387][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1159.564763][ T797] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.578082][ T1209] m920x_read = error: -19 [ 1159.582949][ T1209] dvb-usb: error while querying for an remote control event. [ 1159.605207][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1159.615970][ T797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.643222][ T797] usb 1-1: config 0 has no interface number 0 [ 1159.736657][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1159.748468][ T1209] m920x_read = error: -19 [ 1159.752912][ T1209] dvb-usb: error while querying for an remote control event. [ 1159.807418][ T797] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.845595][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1159.874454][ T797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.895936][ T1209] m920x_read = error: -19 [ 1159.931171][ T1209] dvb-usb: error while querying for an remote control event. [ 1160.015004][ T797] usb 1-1: config 0 has no interface number 0 [ 1160.028865][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1160.046886][ T797] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.114508][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1160.122664][ T797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.123967][ T1209] m920x_read = error: -19 [ 1160.153785][ T797] usb 1-1: config 0 has no interface number 0 [ 1160.154092][ T1209] dvb-usb: error while querying for an remote control event. [ 1160.159986][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1160.266477][ T797] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.326603][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1160.342887][ T797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.363873][ T1209] m920x_read = error: -19 [ 1160.370962][ T1209] dvb-usb: error while querying for an remote control event. [ 1160.380979][ T797] usb 1-1: config 0 has no interface number 0 [ 1160.442449][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1160.462806][ T797] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.493859][ T1209] m920x_read = error: -19 [ 1160.498555][ T1209] dvb-usb: error while querying for an remote control event. [ 1160.515252][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1160.523334][ T797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.595983][ T797] usb 1-1: config 0 has no interface number 0 [ 1160.608159][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1160.613802][ T1209] m920x_read = error: -19 [ 1160.623973][ T1209] dvb-usb: error while querying for an remote control event. [ 1160.646633][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4470'. [ 1160.659867][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4470'. [ 1160.770765][ T1209] m920x_read = error: -19 [ 1160.775751][ T1209] dvb-usb: error while querying for an remote control event. [ 1160.783360][ T797] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.804406][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1160.812966][ T797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.889413][ T1209] m920x_read = error: -19 [ 1160.962108][ T1209] dvb-usb: error while querying for an remote control event. [ 1161.001927][ T797] usb 1-1: config 0 has no interface number 0 [ 1161.103796][ T5916] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1161.104100][ T1209] m920x_read = error: -19 [ 1161.133837][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1161.143923][ T797] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1161.147437][ T1209] dvb-usb: error while querying for an remote control event. [ 1161.159373][ T797] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1161.173981][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.183743][ T797] usb 1-1: Product: syz [ 1161.190328][ T797] usb 1-1: Manufacturer: syz [ 1161.200598][ T797] usb 1-1: SerialNumber: syz [ 1161.265669][ T797] usb 1-1: config 0 descriptor?? [ 1161.274696][ T797] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 1161.283905][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 1161.293733][ T5916] usb 3-1: config 0 has no interfaces? [ 1161.306495][ T5916] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1161.315766][ T5916] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1161.324155][ T5916] usb 3-1: Manufacturer: syz [ 1161.336932][ T5916] usb 3-1: config 0 descriptor?? [ 1161.353997][ T1209] m920x_read = error: -19 [ 1161.362079][ T1209] dvb-usb: error while querying for an remote control event. [ 1161.492215][ T1209] m920x_read = error: -19 [ 1161.503971][ T1209] dvb-usb: error while querying for an remote control event. [ 1161.590518][T21625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.599508][T21625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.740177][ T1209] m920x_read = error: -19 [ 1161.757901][T21625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.758636][ T1209] dvb-usb: error while querying for an remote control event. [ 1161.774390][T21625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.018070][ T797] usb 1-1: USB disconnect, device number 10 [ 1162.064834][ T1209] m920x_read = error: -19 [ 1162.069407][ T1209] dvb-usb: error while querying for an remote control event. [ 1162.233790][ T1209] m920x_read = error: -19 [ 1162.238464][ T1209] dvb-usb: error while querying for an remote control event. [ 1162.403847][T11591] m920x_read = error: -19 [ 1162.408238][T11591] dvb-usb: error while querying for an remote control event. [ 1162.534311][T11591] m920x_read = error: -19 [ 1162.539203][ T1209] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1162.547167][T11591] dvb-usb: error while querying for an remote control event. [ 1162.667195][T11591] m920x_read = error: -19 [ 1162.671669][T11591] dvb-usb: error while querying for an remote control event. [ 1162.703806][ T1209] usb 5-1: Using ep0 maxpacket: 16 [ 1162.805906][T11591] m920x_read = error: -19 [ 1162.810504][T11591] dvb-usb: error while querying for an remote control event. [ 1162.819286][ T1209] usb 5-1: config 0 has no interfaces? [ 1162.829653][ T1209] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1162.859734][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.869888][ T1209] usb 5-1: Product: syz [ 1162.880314][ T1209] usb 5-1: Manufacturer: syz [ 1162.892119][ T1209] usb 5-1: SerialNumber: syz [ 1162.962964][T11591] m920x_read = error: -19 [ 1162.967398][T11591] dvb-usb: error while querying for an remote control event. [ 1162.977439][ T1209] usb 5-1: config 0 descriptor?? [ 1163.060521][T21660] vlan2: entered promiscuous mode [ 1163.093758][ T1209] m920x_read = error: -19 [ 1163.098195][ T1209] dvb-usb: error while querying for an remote control event. [ 1163.253799][ T1209] m920x_read = error: -19 [ 1163.258246][ T1209] dvb-usb: error while querying for an remote control event. [ 1163.373812][ T1209] m920x_read = error: -19 [ 1163.388519][ T1209] dvb-usb: error while querying for an remote control event. [ 1163.432635][T21662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4477'. [ 1163.518034][ T1209] m920x_read = error: -19 [ 1163.528079][ T1209] dvb-usb: error while querying for an remote control event. [ 1163.654806][ T1209] m920x_read = error: -19 [ 1163.659307][ T1209] dvb-usb: error while querying for an remote control event. [ 1163.773842][ T1209] m920x_read = error: -19 [ 1163.778541][ T1209] dvb-usb: error while querying for an remote control event. [ 1163.893954][ T1209] m920x_read = error: -19 [ 1163.898496][ T1209] dvb-usb: error while querying for an remote control event. [ 1164.013849][T11591] m920x_read = error: -19 [ 1164.018407][T11591] dvb-usb: error while querying for an remote control event. [ 1164.063768][ T1209] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1164.146327][T11591] m920x_read = error: -19 [ 1164.151090][T11591] dvb-usb: error while querying for an remote control event. [ 1164.225588][ T1209] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1164.249288][ T1209] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1164.493818][T11591] m920x_read = error: -19 [ 1164.498296][T11591] dvb-usb: error while querying for an remote control event. [ 1164.510636][ T1209] usb 4-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1164.520573][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.588129][ T1209] usb 4-1: Product: syz [ 1164.616241][T11591] m920x_read = error: -19 [ 1164.631420][T11591] dvb-usb: error while querying for an remote control event. [ 1164.646783][ T1209] usb 4-1: Manufacturer: syz [ 1164.660807][ T1209] usb 4-1: SerialNumber: syz [ 1164.773830][T11591] m920x_read = error: -19 [ 1164.778443][T11591] dvb-usb: error while querying for an remote control event. [ 1164.843323][T11591] usb 3-1: USB disconnect, device number 58 [ 1164.912349][ T5968] m920x_read = error: -19 [ 1164.916923][ T5968] dvb-usb: error while querying for an remote control event. [ 1165.054407][ T5968] m920x_read = error: -19 [ 1165.058886][ T5968] dvb-usb: error while querying for an remote control event. [ 1165.090088][ T1209] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input57 [ 1165.116514][ T5179] bcm5974 4-1:1.0: could not read from device [ 1165.137694][ T5179] bcm5974 4-1:1.0: could not read from device [ 1165.158341][ T1209] usb 4-1: USB disconnect, device number 87 [ 1165.179674][T11591] m920x_read = error: -19 [ 1165.185432][T11591] dvb-usb: error while querying for an remote control event. [ 1165.263430][T21693] dlm: non-version read from control device 5 [ 1165.299359][ T5968] usb 5-1: USB disconnect, device number 51 [ 1165.306728][ T5919] m920x_read = error: -19 [ 1165.311193][ T5919] dvb-usb: error while querying for an remote control event. [ 1165.374073][T11591] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1165.424280][T15389] m920x_read = error: -19 [ 1165.429141][T15389] dvb-usb: error while querying for an remote control event. [ 1165.519715][T21697] kvm: pic: single mode not supported [ 1165.519734][T21697] pic_ioport_write: 101 callbacks suppressed [ 1165.519746][T21697] kvm: pic: level sensitive irq not supported [ 1165.544048][T11591] usb 1-1: Using ep0 maxpacket: 16 [ 1165.556977][ T5968] m920x_read = error: -19 [ 1165.563814][T21701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4490'. [ 1165.580603][ T5968] dvb-usb: error while querying for an remote control event. [ 1165.616864][T11591] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.646021][T11591] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1165.673257][T11591] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1165.692366][T11591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.708382][T11591] usb 1-1: Product: syz [ 1165.718559][T11591] usb 1-1: Manufacturer: syz [ 1165.728591][T11591] usb 1-1: SerialNumber: syz [ 1165.733820][ T5968] m920x_read = error: -19 [ 1165.740480][ T5968] dvb-usb: error while querying for an remote control event. [ 1165.844649][ T5920] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1165.864168][ T5968] m920x_read = error: -19 [ 1165.872709][ T5968] dvb-usb: error while querying for an remote control event. [ 1165.898832][T21705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4492'. [ 1165.968301][T21690] x_tables: duplicate underflow at hook 3 [ 1165.982049][T21690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.993889][ T1209] m920x_read = error: -19 [ 1165.998323][ T1209] dvb-usb: error while querying for an remote control event. [ 1166.012975][T21690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.023763][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 1166.043454][ T5920] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.064461][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1166.071418][ T5920] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1166.080979][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.099216][T11591] usb 1-1: 0:2 : does not exist [ 1166.102870][ T5920] usb 4-1: config 0 descriptor?? [ 1166.124167][ T5968] m920x_read = error: -19 [ 1166.128668][ T5968] dvb-usb: error while querying for an remote control event. [ 1166.145898][T11591] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1166.239590][T11591] usb 1-1: USB disconnect, device number 11 [ 1166.269601][ T5968] m920x_read = error: -19 [ 1166.281013][T14975] udevd[14975]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1166.297671][ T5968] dvb-usb: error while querying for an remote control event. [ 1166.413904][ T5968] m920x_read = error: -19 [ 1166.418438][ T5968] dvb-usb: error while querying for an remote control event. [ 1166.533874][T11591] m920x_read = error: -19 [ 1166.539393][T11591] dvb-usb: error while querying for an remote control event. [ 1166.585271][ T5920] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1166.670156][T11591] m920x_read = error: -19 [ 1166.682853][T11591] dvb-usb: error while querying for an remote control event. [ 1166.817455][T11591] m920x_read = error: -19 [ 1166.830434][T11591] dvb-usb: error while querying for an remote control event. [ 1166.954688][T11591] m920x_read = error: -19 [ 1166.959604][T11591] dvb-usb: error while querying for an remote control event. [ 1167.090766][T11591] m920x_read = error: -19 [ 1167.100669][T11591] dvb-usb: error while querying for an remote control event. [ 1167.115347][T11591] usb 4-1: USB disconnect, device number 88 [ 1167.228073][ T5968] m920x_read = error: -19 [ 1167.232853][ T5968] dvb-usb: error while querying for an remote control event. [ 1167.437180][T11591] m920x_read = error: -19 [ 1167.441672][T11591] dvb-usb: error while querying for an remote control event. [ 1167.479744][T21719] sctp: [Deprecated]: syz.0.4496 (pid 21719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1167.479744][T21719] Use struct sctp_sack_info instead [ 1167.554113][T11591] m920x_read = error: -19 [ 1167.559771][T11591] dvb-usb: error while querying for an remote control event. [ 1167.674042][T11591] m920x_read = error: -19 [ 1167.678475][T11591] dvb-usb: error while querying for an remote control event. [ 1167.820938][T11591] m920x_read = error: -19 [ 1167.825764][T11591] dvb-usb: error while querying for an remote control event. [ 1167.943828][T11591] m920x_read = error: -19 [ 1167.948459][T11591] dvb-usb: error while querying for an remote control event. [ 1168.064282][T11591] m920x_read = error: -19 [ 1168.068990][T11591] dvb-usb: error while querying for an remote control event. [ 1168.182699][ T5920] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1168.193789][ T5968] m920x_read = error: -19 [ 1168.198708][ T5968] dvb-usb: error while querying for an remote control event. [ 1168.233725][T11591] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1168.313777][ T5968] m920x_read = error: -19 [ 1168.318185][ T5968] dvb-usb: error while querying for an remote control event. [ 1168.383733][T11591] usb 1-1: Using ep0 maxpacket: 16 [ 1168.390707][T11591] usb 1-1: config 0 has no interfaces? [ 1168.405177][T11591] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1168.414900][T11591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.426878][T11591] usb 1-1: Product: syz [ 1168.427362][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.454048][T11591] usb 1-1: Manufacturer: syz [ 1168.463986][ T5920] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1168.464269][T11591] usb 1-1: SerialNumber: syz [ 1168.478974][ T5968] m920x_read = error: -19 [ 1168.483320][ T5968] dvb-usb: error while querying for an remote control event. [ 1168.504131][ T5920] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1168.515073][T11591] usb 1-1: config 0 descriptor?? [ 1168.551407][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.562331][ T5920] usb 4-1: Product: syz [ 1168.568957][ T5920] usb 4-1: Manufacturer: syz [ 1168.573875][ T5920] usb 4-1: SerialNumber: syz [ 1168.589047][ T5920] cdc_mbim 4-1:1.0: skipping garbage [ 1168.623785][T11591] m920x_read = error: -19 [ 1168.628219][T11591] dvb-usb: error while querying for an remote control event. [ 1168.754954][T11591] m920x_read = error: -19 [ 1168.760197][T11591] dvb-usb: error while querying for an remote control event. [ 1168.791181][T21727] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1168.884512][T11591] m920x_read = error: -19 [ 1168.893988][T11591] dvb-usb: error while querying for an remote control event. [ 1169.041921][T11591] m920x_read = error: -19 [ 1169.050575][T11591] dvb-usb: error while querying for an remote control event. [ 1169.164318][T11591] m920x_read = error: -19 [ 1169.310680][T11591] dvb-usb: error while querying for an remote control event. [ 1169.443797][T11591] m920x_read = error: -19 [ 1169.448702][T11591] dvb-usb: error while querying for an remote control event. [ 1169.460964][T21752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4505'. [ 1169.545809][T21727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1169.557100][T21727] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1169.567643][ T5920] cdc_mbim 4-1:1.0: dwNtbInMaxSize=6 is too small. Using 2048 [ 1169.578807][ T5920] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 1169.800439][T11591] m920x_read = error: -19 [ 1169.804948][T11591] dvb-usb: error while querying for an remote control event. [ 1169.896970][ T5920] cdc_mbim 4-1:1.0: setting tx_max = 60 [ 1169.906790][ T5920] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1169.916533][T11591] m920x_read = error: -19 [ 1169.930352][T11591] dvb-usb: error while querying for an remote control event. [ 1169.933530][ T5920] wwan wwan0: port wwan0mbim0 attached [ 1169.988326][ T5920] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 5a:38:cc:c3:b4:73 [ 1170.066530][ T5920] usb 4-1: USB disconnect, device number 89 [ 1170.073840][T11591] m920x_read = error: -19 [ 1170.084294][T11591] dvb-usb: error while querying for an remote control event. [ 1170.117153][ T5920] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1170.196953][ T5920] wwan wwan0: port wwan0mbim0 disconnected [ 1170.254204][T11591] m920x_read = error: -19 [ 1170.268048][T11591] dvb-usb: error while querying for an remote control event. [ 1170.394254][T11591] m920x_read = error: -19 [ 1170.406058][T11591] dvb-usb: error while querying for an remote control event. [ 1170.544799][T11591] m920x_read = error: -19 [ 1170.551198][T11591] dvb-usb: error while querying for an remote control event. [ 1170.674169][T11591] m920x_read = error: -19 [ 1170.678698][T11591] dvb-usb: error while querying for an remote control event. [ 1171.009663][T11591] m920x_read = error: -19 [ 1171.022799][T11591] dvb-usb: error while querying for an remote control event. [ 1171.184052][T11591] m920x_read = error: -19 [ 1171.189244][T11591] dvb-usb: error while querying for an remote control event. [ 1171.243844][ T5920] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1171.316159][T11591] m920x_read = error: -19 [ 1171.349779][T11591] dvb-usb: error while querying for an remote control event. [ 1171.359416][ T5968] usb 1-1: USB disconnect, device number 12 [ 1171.428726][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 1171.481340][ T5920] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1171.500059][T11591] m920x_read = error: -19 [ 1171.509769][T11591] dvb-usb: error while querying for an remote control event. [ 1171.630961][ T5920] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1171.668380][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.683768][T11591] m920x_read = error: -19 [ 1171.688237][T11591] dvb-usb: error while querying for an remote control event. [ 1171.724950][ T5920] usb 4-1: Product: syz [ 1171.734145][ T5920] usb 4-1: Manufacturer: syz [ 1171.746531][ T5920] usb 4-1: SerialNumber: syz [ 1171.764123][ T5920] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1171.781803][ T5920] r8152-cfgselector 4-1: config 0 descriptor?? [ 1171.803966][T11591] m920x_read = error: -19 [ 1171.808394][T11591] dvb-usb: error while querying for an remote control event. [ 1171.943825][T11591] m920x_read = error: -19 [ 1171.948383][T11591] dvb-usb: error while querying for an remote control event. [ 1171.989895][T21794] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1172.080247][T11591] m920x_read = error: -19 [ 1172.092183][T11591] dvb-usb: error while querying for an remote control event. [ 1172.224792][T11591] m920x_read = error: -19 [ 1172.239609][T11591] dvb-usb: error while querying for an remote control event. [ 1172.374265][T11591] m920x_read = error: -19 [ 1172.379135][T11591] dvb-usb: error while querying for an remote control event. [ 1172.503841][T11591] m920x_read = error: -19 [ 1172.599628][T11591] dvb-usb: error while querying for an remote control event. [ 1172.733836][T11591] m920x_read = error: -19 [ 1172.738473][T11591] dvb-usb: error while querying for an remote control event. [ 1172.861692][T11591] m920x_read = error: -19 [ 1172.866268][T11591] dvb-usb: error while querying for an remote control event. [ 1172.984058][T11591] m920x_read = error: -19 [ 1172.988572][T11591] dvb-usb: error while querying for an remote control event. [ 1173.123877][T11591] m920x_read = error: -19 [ 1173.128764][T11591] dvb-usb: error while querying for an remote control event. [ 1173.243821][T11591] m920x_read = error: -19 [ 1173.248607][T11591] dvb-usb: error while querying for an remote control event. [ 1173.376034][T11591] m920x_read = error: -19 [ 1173.405687][T11591] dvb-usb: error while querying for an remote control event. [ 1173.563956][T11591] m920x_read = error: -19 [ 1173.565296][ T1314] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1173.568377][T11591] dvb-usb: error while querying for an remote control event. [ 1173.745749][T11591] m920x_read = error: -19 [ 1173.750263][T11591] dvb-usb: error while querying for an remote control event. [ 1173.768112][T21827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4518'. [ 1173.896107][ T5920] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1173.912757][T11591] m920x_read = error: -19 [ 1173.923390][ T5920] r8152-cfgselector 4-1: bad CDC descriptors [ 1173.952464][T11591] dvb-usb: error while querying for an remote control event. [ 1173.963186][ T5920] r8152-cfgselector 4-1: USB disconnect, device number 90 [ 1174.113917][T11591] m920x_read = error: -19 [ 1174.124916][T11591] dvb-usb: error while querying for an remote control event. [ 1174.265819][T11591] m920x_read = error: -19 [ 1174.278010][T11591] dvb-usb: error while querying for an remote control event. [ 1174.413815][T11591] m920x_read = error: -19 [ 1174.418333][T11591] dvb-usb: error while querying for an remote control event. [ 1174.534696][ T5920] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1174.564930][T11591] m920x_read = error: -19 [ 1174.581969][T11591] dvb-usb: error while querying for an remote control event. [ 1174.703935][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 1174.742330][ T5920] usb 4-1: config 0 has no interfaces? [ 1174.761963][ T5920] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1174.774887][T11591] m920x_read = error: -19 [ 1174.779298][T11591] dvb-usb: error while querying for an remote control event. [ 1174.781736][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.809337][T21845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4522'. [ 1174.833743][ T5920] usb 4-1: Product: syz [ 1174.838788][ T5920] usb 4-1: Manufacturer: syz [ 1174.854407][T21845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4522'. [ 1174.863721][ T5920] usb 4-1: SerialNumber: syz [ 1174.895599][ T5920] usb 4-1: config 0 descriptor?? [ 1174.973780][T11591] m920x_read = error: -19 [ 1174.978291][T11591] dvb-usb: error while querying for an remote control event. [ 1175.094756][T21851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4524'. [ 1175.128224][T11591] m920x_read = error: -19 [ 1175.132663][T11591] dvb-usb: error while querying for an remote control event. [ 1175.218556][T21853] kvm: pic: single mode not supported [ 1175.218584][T21853] kvm: pic: level sensitive irq not supported [ 1175.253912][T11591] m920x_read = error: -19 [ 1175.314869][T11591] dvb-usb: error while querying for an remote control event. [ 1175.326376][T21858] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1175.433795][T11591] m920x_read = error: -19 [ 1175.438279][T11591] dvb-usb: error while querying for an remote control event. [ 1175.584873][T11591] m920x_read = error: -19 [ 1175.630154][T11591] dvb-usb: error while querying for an remote control event. [ 1175.784226][T11591] m920x_read = error: -19 [ 1175.788770][T11591] dvb-usb: error while querying for an remote control event. [ 1175.854285][T21874] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4528'. [ 1175.925854][T11591] m920x_read = error: -19 [ 1175.932089][T11591] dvb-usb: error while querying for an remote control event. [ 1176.055123][T11591] m920x_read = error: -19 [ 1176.061522][T11591] dvb-usb: error while querying for an remote control event. [ 1176.197274][ T5968] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1176.244012][T11591] m920x_read = error: -19 [ 1176.249461][T11591] dvb-usb: error while querying for an remote control event. [ 1176.373915][T11591] m920x_read = error: -19 [ 1176.379254][T11591] dvb-usb: error while querying for an remote control event. [ 1176.387067][ T5968] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1176.403783][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.417418][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4539'. [ 1176.433124][ T5968] usb 5-1: Product: syz [ 1176.445391][ T5968] usb 5-1: Manufacturer: syz [ 1176.463707][ T5968] usb 5-1: SerialNumber: syz [ 1176.481669][ T5968] usb 5-1: config 0 descriptor?? [ 1176.513821][T11591] m920x_read = error: -19 [ 1176.518529][T11591] dvb-usb: error while querying for an remote control event. [ 1176.654664][T11591] m920x_read = error: -19 [ 1176.662014][T11591] dvb-usb: error while querying for an remote control event. [ 1176.851550][T11591] m920x_read = error: -19 [ 1176.868166][T11591] dvb-usb: error while querying for an remote control event. [ 1176.893046][T21902] usb usb7: usbfs: process 21902 (syz.1.4541) did not claim interface 0 before use [ 1176.985412][T21902] kvm: pic: single mode not supported [ 1176.985429][T21902] kvm: pic: level sensitive irq not supported [ 1177.003883][T11591] m920x_read = error: -19 [ 1177.032673][T11591] dvb-usb: error while querying for an remote control event. [ 1177.142415][T11591] usb 4-1: USB disconnect, device number 91 [ 1177.165963][ T1209] m920x_read = error: -19 [ 1177.180293][ T1209] dvb-usb: error while querying for an remote control event. [ 1177.191030][T21905] FAULT_INJECTION: forcing a failure. [ 1177.191030][T21905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.224422][T21905] CPU: 0 UID: 0 PID: 21905 Comm: syz.1.4542 Tainted: G L syzkaller #0 PREEMPT(full) [ 1177.224454][T21905] Tainted: [L]=SOFTLOCKUP [ 1177.224461][T21905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1177.224479][T21905] Call Trace: [ 1177.224486][T21905] [ 1177.224495][T21905] dump_stack_lvl+0xe8/0x150 [ 1177.224528][T21905] should_fail_ex+0x412/0x560 [ 1177.224562][T21905] _copy_from_user+0x2d/0xb0 [ 1177.224587][T21905] ___sys_sendmsg+0x1c6/0x360 [ 1177.224617][T21905] ? __pfx____sys_sendmsg+0x10/0x10 [ 1177.224673][T21905] ? __fget_files+0x2a/0x420 [ 1177.224690][T21905] ? __fget_files+0x3a0/0x420 [ 1177.224717][T21905] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1177.224742][T21905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1177.224777][T21905] ? __pfx_ksys_write+0x10/0x10 [ 1177.224810][T21905] do_syscall_64+0x14d/0xf80 [ 1177.224833][T21905] ? trace_irq_disable+0x3b/0x150 [ 1177.224851][T21905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.224868][T21905] ? clear_bhb_loop+0x40/0x90 [ 1177.224893][T21905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.224912][T21905] RIP: 0033:0x7f779459c819 [ 1177.224931][T21905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.224947][T21905] RSP: 002b:00007f77954ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1177.224969][T21905] RAX: ffffffffffffffda RBX: 00007f7794815fa0 RCX: 00007f779459c819 [ 1177.224983][T21905] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1177.224995][T21905] RBP: 00007f77954ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.225008][T21905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.225020][T21905] R13: 00007f7794816038 R14: 00007f7794815fa0 R15: 00007f779493fa48 [ 1177.225050][T21905] [ 1177.457204][ T1209] m920x_read = error: -19 [ 1177.461647][ T1209] dvb-usb: error while querying for an remote control event. [ 1177.485201][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.491752][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.574583][T11591] m920x_read = error: -19 [ 1177.579229][T11591] dvb-usb: error while querying for an remote control event. [ 1177.693842][ T1209] m920x_read = error: -19 [ 1177.698264][ T1209] dvb-usb: error while querying for an remote control event. [ 1177.730281][T21915] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1177.804913][ T5968] usb 5-1: Firmware version (0.0) predates our first public release. [ 1177.821867][ T5968] usb 5-1: Please update to version 0.2 or newer [ 1177.829882][ T1209] m920x_read = error: -19 [ 1177.849266][ T1209] dvb-usb: error while querying for an remote control event. [ 1177.964586][T12439] wlan0: Trigger new scan to find an IBSS to join [ 1177.984241][ T5968] m920x_read = error: -19 [ 1177.988652][ T5968] dvb-usb: error while querying for an remote control event. [ 1178.081133][T21928] xt_CONNSECMARK: invalid mode: 66 [ 1178.134165][ T5968] m920x_read = error: -19 [ 1178.147153][ T5968] dvb-usb: error while querying for an remote control event. [ 1178.284644][ T5968] m920x_read = error: -19 [ 1178.293762][ T5968] dvb-usb: error while querying for an remote control event. [ 1178.371660][T21933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4548'. [ 1178.423713][T21933] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4548'. [ 1178.433789][ T5968] m920x_read = error: -19 [ 1178.438198][ T5968] dvb-usb: error while querying for an remote control event. [ 1178.563827][ T5968] m920x_read = error: -19 [ 1178.572932][ T5968] dvb-usb: error while querying for an remote control event. [ 1178.581898][ T1209] usb 5-1: USB disconnect, device number 52 [ 1178.588313][T21939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4550'. [ 1178.647672][T21941] vivid-000: ================= START STATUS ================= [ 1178.656955][T21941] vivid-000: Test Pattern: 75% Colorbar [ 1178.663041][T21941] vivid-000: Fill Percentage of Frame: 100 [ 1178.670679][T21941] vivid-000: Horizontal Movement: Move Right Slow [ 1178.677641][T21941] vivid-000: Vertical Movement: No Movement [ 1178.707353][T21941] vivid-000: OSD Text Mode: All [ 1178.712443][T21941] vivid-000: Show Border: false [ 1178.717991][ T5968] m920x_read = error: -19 [ 1178.722351][ T5968] dvb-usb: error while querying for an remote control event. [ 1178.739711][T21944] binder: 21937:21944 ioctl c0306201 0 returned -14 [ 1178.809299][T21941] vivid-000: Show Square: false [ 1178.824070][T21941] vivid-000: Sensor Flipped Horizontally: false [ 1178.835303][ T5968] m920x_read = error: -19 [ 1178.841480][ T5968] dvb-usb: error while querying for an remote control event. [ 1178.862353][T21941] vivid-000: Sensor Flipped Vertically: false [ 1178.954503][ T5968] m920x_read = error: -19 [ 1178.958937][ T5968] dvb-usb: error while querying for an remote control event. [ 1178.965297][T21941] vivid-000: Insert SAV Code in Image: false [ 1179.005681][T21950] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1179.024356][T21941] vivid-000: Insert EAV Code in Image: false [ 1179.044647][T21941] vivid-000: Insert Video Guard Band: false [ 1179.055385][T21941] vivid-000: Reduced Framerate: false [ 1179.090085][ T5968] m920x_read = error: -19 [ 1179.091551][T21941] vivid-000: HDMI 000-0 Is Connected To: [ 1179.100195][ T5968] dvb-usb: error while querying for an remote control event. [ 1179.148090][T21941] Test Pattern Generator [ 1179.175031][T21941] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1179.239222][T21941] vivid-000: Enable Capture Cropping: true [ 1179.269758][T21941] vivid-000: Enable Capture Composing: true [ 1179.273837][ T5968] m920x_read = error: -19 [ 1179.296255][ T5968] dvb-usb: error while querying for an remote control event. [ 1179.301730][T21941] vivid-000: Enable Capture Scaler: true [ 1179.345060][T21941] vivid-000: Timestamp Source: End of Frame [ 1179.359546][T21941] vivid-000: Colorspace: Rec. 709 [ 1179.365204][T21941] vivid-000: Transfer Function: Default [ 1179.372558][T21941] vivid-000: Y'CbCr Encoding: Default [ 1179.381235][T21941] vivid-000: HSV Encoding: Hue 0-179 [ 1179.388336][T21941] vivid-000: Quantization: Default [ 1179.463779][ T5968] m920x_read = error: -19 [ 1179.523826][ T5968] dvb-usb: error while querying for an remote control event. [ 1179.532306][T21941] vivid-000: Apply Alpha To Red Only: true [ 1179.538814][T21941] vivid-000: Standard Aspect Ratio: 4x3 [ 1179.546663][T21941] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1179.554231][T21941] vivid-000: DV Timings: 640x480p59 inactive [ 1179.633878][ T5968] m920x_read = error: -19 [ 1179.638409][ T5968] dvb-usb: error while querying for an remote control event. [ 1179.692187][T21941] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1179.722595][T21941] vivid-000: Maximum EDID Blocks: 2 [ 1179.763852][T21941] vivid-000: Limited RGB Range (16-235): true [ 1179.763882][T21941] vivid-000: Rx RGB Quantization Range: Automatic [ 1179.763897][T21941] vivid-000: Power Present: 0x00000001 [ 1179.763913][T21941] tpg source WxH: 1280x720 (Y'CbCr) [ 1179.763942][T21941] tpg field: 1 [ 1179.763949][T21941] tpg crop: (0,0)/64x64 [ 1179.763957][T21941] tpg compose: (0,0)/16x16 [ 1179.763965][T21941] tpg colorspace: 3 [ 1179.763971][T21941] tpg transfer function: 0/0 [ 1179.763978][T21941] tpg Y'CbCr encoding: 3/0 [ 1179.763984][T21941] tpg quantization: 0/0 [ 1179.763991][T21941] tpg RGB range: 0/1 [ 1179.763998][T21941] vivid-000: ================== END STATUS ================== [ 1179.813776][ T5968] m920x_read = error: -19 [ 1179.813798][ T5968] dvb-usb: error while querying for an remote control event. [ 1179.944243][ T5968] m920x_read = error: -19 [ 1179.948789][ T5968] dvb-usb: error while querying for an remote control event. [ 1180.149637][ T5968] m920x_read = error: -19 [ 1180.157278][ T5968] dvb-usb: error while querying for an remote control event. [ 1180.445094][ T5968] m920x_read = error: -19 [ 1180.450646][ T5968] dvb-usb: error while querying for an remote control event. [ 1180.573986][ T1209] m920x_read = error: -19 [ 1180.578602][ T1209] dvb-usb: error while querying for an remote control event. [ 1180.782452][ T1209] m920x_read = error: -19 [ 1180.793733][ T1209] dvb-usb: error while querying for an remote control event. [ 1180.914548][ T1209] m920x_read = error: -19 [ 1180.919038][ T1209] dvb-usb: error while querying for an remote control event. [ 1181.003844][ T1314] wlan0: Trigger new scan to find an IBSS to join [ 1181.055626][ T1209] m920x_read = error: -19 [ 1181.063122][ T1209] dvb-usb: error while querying for an remote control event. [ 1181.206287][ T1209] m920x_read = error: -19 [ 1181.210684][ T1209] dvb-usb: error while querying for an remote control event. [ 1181.336671][ T1209] m920x_read = error: -19 [ 1181.342462][ T1209] dvb-usb: error while querying for an remote control event. [ 1181.473792][ T1209] m920x_read = error: -19 [ 1181.478373][ T1209] dvb-usb: error while querying for an remote control event. [ 1181.624040][ T1209] m920x_read = error: -19 [ 1181.628471][ T1209] dvb-usb: error while querying for an remote control event. [ 1181.699123][T21987] FAULT_INJECTION: forcing a failure. [ 1181.699123][T21987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.724873][ T29] audit: type=1326 audit(1775366051.544:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.1.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779459c819 code=0x7ffc0000 [ 1181.753838][ T1209] m920x_read = error: -19 [ 1181.758263][ T1209] dvb-usb: error while querying for an remote control event. [ 1181.764067][T21987] CPU: 1 UID: 0 PID: 21987 Comm: syz.0.4565 Tainted: G L syzkaller #0 PREEMPT(full) [ 1181.764096][T21987] Tainted: [L]=SOFTLOCKUP [ 1181.764102][T21987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1181.764113][T21987] Call Trace: [ 1181.764121][T21987] [ 1181.764128][T21987] dump_stack_lvl+0xe8/0x150 [ 1181.764158][T21987] should_fail_ex+0x412/0x560 [ 1181.764197][T21987] _copy_from_iter+0x1d3/0x1670 [ 1181.764220][T21987] ? rcu_is_watching+0x15/0xb0 [ 1181.764249][T21987] ? __pfx__copy_from_iter+0x10/0x10 [ 1181.764275][T21987] ? netlink_sendmsg+0x650/0xb40 [ 1181.764292][T21987] ? skb_put+0x11b/0x210 [ 1181.764316][T21987] netlink_sendmsg+0x6c0/0xb40 [ 1181.764343][T21987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1181.764364][T21987] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1181.764391][T21987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1181.764411][T21987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1181.764430][T21987] __sys_sendto+0x672/0x710 [ 1181.764453][T21987] ? __pfx___sys_sendto+0x10/0x10 [ 1181.764495][T21987] ? fput_close_sync+0x11f/0x240 [ 1181.764519][T21987] ? __pfx_fput_close_sync+0x10/0x10 [ 1181.764552][T21987] __x64_sys_sendto+0xde/0x100 [ 1181.764575][T21987] do_syscall_64+0x14d/0xf80 [ 1181.764597][T21987] ? trace_irq_disable+0x3b/0x150 [ 1181.764612][T21987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.764630][T21987] ? clear_bhb_loop+0x40/0x90 [ 1181.764652][T21987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.764669][T21987] RIP: 0033:0x7fd7d935d04e [ 1181.764687][T21987] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1181.764701][T21987] RSP: 002b:00007fd7da22bde8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1181.764721][T21987] RAX: ffffffffffffffda RBX: 00007fd7da22d6c0 RCX: 00007fd7d935d04e [ 1181.764734][T21987] RDX: 000000000000003c RSI: 00007fd7da22bfe0 RDI: 0000000000000004 [ 1181.764745][T21987] RBP: 0000000000000000 R08: 00007fd7da22be64 R09: 000000000000000c [ 1181.764756][T21987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1181.764766][T21987] R13: 0000000000000000 R14: 00007fd7da22bfe0 R15: 0000000000000000 [ 1181.764793][T21987] [ 1181.783480][ T29] audit: type=1326 audit(1775366051.544:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.1.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779459c819 code=0x7ffc0000 [ 1182.013862][ T29] audit: type=1326 audit(1775366051.544:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.1.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f779459c819 code=0x7ffc0000 [ 1182.036582][ T29] audit: type=1326 audit(1775366051.544:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.1.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779459c819 code=0x7ffc0000 [ 1182.060793][ T29] audit: type=1326 audit(1775366051.544:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.1.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779459c819 code=0x7ffc0000 [ 1182.083760][ T5916] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1182.103924][ T29] audit: type=1326 audit(1775366051.544:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.1.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779459c819 code=0x7ffc0000 [ 1182.126797][ T29] audit: type=1326 audit(1775366051.544:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.1.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779459c819 code=0x7ffc0000 [ 1182.151631][ T29] audit: type=1326 audit(1775366051.544:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.1.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779459c819 code=0x7ffc0000 [ 1182.175045][ T29] audit: type=1326 audit(1775366051.544:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.1.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779459c819 code=0x7ffc0000 [ 1182.198050][ T29] audit: type=1326 audit(1775366051.544:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.1.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f779459c819 code=0x7ffc0000 [ 1182.253782][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 1182.265497][ T5916] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1182.282826][ T5916] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1182.302019][ T5916] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1182.334302][ T1209] m920x_read = error: -19 [ 1182.336064][ T5916] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1182.338715][ T1209] dvb-usb: error while querying for an remote control event. [ 1182.408649][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.459849][T21998] vlan2: entered promiscuous mode [ 1182.481697][ T5916] usb 5-1: Product: syz [ 1182.498757][ T1209] m920x_read = error: -19 [ 1182.505435][ T1209] dvb-usb: error while querying for an remote control event. [ 1182.520858][ T5916] usb 5-1: Manufacturer: syz [ 1182.526991][ T5916] usb 5-1: SerialNumber: syz [ 1182.673867][ T1209] m920x_read = error: -19 [ 1182.677478][ T5916] usb 5-1: config 0 descriptor?? [ 1182.680084][ T1209] dvb-usb: error while querying for an remote control event. [ 1182.803825][ T1209] m920x_read = error: -19 [ 1182.808784][ T1209] dvb-usb: error while querying for an remote control event. [ 1182.924434][ T1209] m920x_read = error: -19 [ 1182.928908][ T1209] dvb-usb: error while querying for an remote control event. [ 1183.053808][ T1209] m920x_read = error: -19 [ 1183.079353][ T1209] dvb-usb: error while querying for an remote control event. [ 1183.092946][ T5916] gs_usb 5-1:0.0: Configuring for 159 interfaces [ 1183.294068][ T1209] m920x_read = error: -19 [ 1183.298589][ T1209] dvb-usb: error while querying for an remote control event. [ 1183.413973][ T5920] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1183.445709][ T1209] m920x_read = error: -19 [ 1183.452770][ T1209] dvb-usb: error while querying for an remote control event. [ 1183.508799][T21983] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4562'. [ 1183.525610][ T5916] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1183.535962][ T5916] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1183.560189][ T5916] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1183.582014][ T1209] m920x_read = error: -19 [ 1183.589255][T22012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1183.616187][ T1209] dvb-usb: error while querying for an remote control event. [ 1183.633774][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 1183.666638][ T5920] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.678301][ T5916] usb 5-1: USB disconnect, device number 53 [ 1183.704560][ T5920] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1183.743986][ T1209] m920x_read = error: -19 [ 1183.748486][ T1209] dvb-usb: error while querying for an remote control event. [ 1183.767369][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.843735][ T797] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1183.873873][ T1209] m920x_read = error: -19 [ 1183.878352][ T1209] dvb-usb: error while querying for an remote control event. [ 1183.963862][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.971649][ T5968] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1183.995476][ T797] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 1184.004142][ T1209] ------------[ cut here ]------------ [ 1184.010023][ T1209] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1184.019953][ T1209] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#0: kworker/0:2/1209 [ 1184.030716][ T1209] Modules linked in: [ 1184.035142][ T1209] CPU: 0 UID: 0 PID: 1209 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1184.046115][ T1209] Tainted: [L]=SOFTLOCKUP [ 1184.050475][ T1209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1184.061010][ T1209] Workqueue: mld mld_ifc_work [ 1184.065772][ T1209] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 1184.072046][ T1209] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 1184.091861][ T1209] RSP: 0018:ffffc9000540e658 EFLAGS: 00010246 [ 1184.098021][ T1209] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1184.106041][ T1209] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff902323b0 [ 1184.114056][ T1209] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1184.122063][ T1209] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888025985528 [ 1184.130086][ T1209] R13: 0000000000000000 R14: ffffffff902323b0 R15: ffff88805218b178 [ 1184.138199][ T1209] FS: 0000000000000000(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 1184.147192][ T1209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1184.153855][ T1209] CR2: 0000200000404030 CR3: 000000003306a000 CR4: 00000000003526f0 [ 1184.161935][ T1209] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1184.169981][ T1209] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1184.178015][ T1209] Call Trace: [ 1184.181333][ T1209] [ 1184.184318][ T1209] rate_control_send_low+0x1a7/0x7b0 [ 1184.189648][ T1209] ? __lock_acquire+0x6b5/0x2cf0 [ 1184.194722][ T1209] rate_control_get_rate+0x20b/0x5d0 [ 1184.200117][ T1209] ieee80211_tx_h_rate_ctrl+0xaf6/0x1760 [ 1184.205856][ T1209] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1184.211988][ T1209] invoke_tx_handlers_late+0xba/0x18a0 [ 1184.217544][ T1209] ? ieee80211_tx_h_select_key+0xd1b/0x1ab0 [ 1184.223485][ T1209] ieee80211_tx_dequeue+0x403e/0x54d0 [ 1184.228966][ T1209] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1184.234796][ T1209] ? ieee80211_next_txq+0x82e/0x9a0 [ 1184.240023][ T1209] ieee80211_handle_wake_tx_queue+0x132/0x2c0 [ 1184.246157][ T1209] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 1184.252788][ T1209] ? ieee80211_queue_skb+0x184f/0x2260 [ 1184.258318][ T1209] ? __local_bh_enable_ip+0xd0/0x130 [ 1184.263754][ T1209] ieee80211_queue_skb+0x1a3f/0x2260 [ 1184.269196][ T1209] ieee80211_tx+0x2c2/0x4b0 [ 1184.273780][ T1209] ? __pfx_ieee80211_tx+0x10/0x10 [ 1184.278858][ T1209] ? ieee80211_xmit+0x315/0x400 [ 1184.283785][ T1209] __ieee80211_subif_start_xmit+0xd12/0x1660 [ 1184.289798][ T1209] ? __ieee80211_subif_start_xmit+0x2cf/0x1660 [ 1184.296135][ T1209] ? process_scheduled_works+0xb6e/0x18c0 [ 1184.302009][ T1209] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1184.308471][ T1209] ? skb_network_protocol+0x23d/0x3f0 [ 1184.313894][ T1209] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 1184.320195][ T1209] ieee80211_subif_start_xmit+0xf3/0x570 [ 1184.326076][ T1209] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1184.332382][ T1209] ? __pfx_netif_skb_features+0x10/0x10 [ 1184.338009][ T1209] dev_hard_start_xmit+0x2d8/0x870 [ 1184.343160][ T1209] __dev_queue_xmit+0x16d1/0x3890 [ 1184.348265][ T1209] ? __dev_queue_xmit+0x277/0x3890 [ 1184.353411][ T1209] ? ___neigh_create+0x1c5f/0x2280 [ 1184.358574][ T1209] ? __local_bh_enable_ip+0xd0/0x130 [ 1184.363902][ T1209] ? lockdep_hardirqs_on+0x7a/0x110 [ 1184.369156][ T1209] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1184.374571][ T1209] ? neigh_resolve_output+0x438/0x750 [ 1184.379973][ T1209] ? eth_header+0x11b/0x200 [ 1184.384541][ T1209] ? __asan_memcpy+0x40/0x70 [ 1184.389145][ T1209] ? eth_header+0x11b/0x200 [ 1184.393705][ T1209] ? __pfx_eth_header+0x10/0x10 [ 1184.398600][ T1209] ? neigh_resolve_output+0x624/0x750 [ 1184.404116][ T1209] ? ip6_output+0x126/0x550 [ 1184.408627][ T1209] ip6_output+0x340/0x550 [ 1184.412989][ T1209] ? __pfx_ip6_output+0x10/0x10 [ 1184.417902][ T1209] NF_HOOK+0x177/0x4f0 [ 1184.422063][ T1209] ? __pfx_NF_HOOK+0x10/0x10 [ 1184.426681][ T1209] ? __pfx_dst_output+0x10/0x10 [ 1184.431563][ T1209] ? lockdep_hardirqs_on+0x7a/0x110 [ 1184.436811][ T1209] ? __local_bh_enable_ip+0xd0/0x130 [ 1184.442119][ T1209] ? icmp6_dst_alloc+0x3a6/0x440 [ 1184.447087][ T1209] mld_sendpack+0x8b4/0xe40 [ 1184.451631][ T1209] ? look_up_lock_class+0x57/0x110 [ 1184.456789][ T1209] ? mld_sendpack+0x213/0xe40 [ 1184.461492][ T1209] ? __pfx_mld_sendpack+0x10/0x10 [ 1184.466636][ T1209] mld_ifc_work+0x835/0xe70 [ 1184.471157][ T1209] ? process_scheduled_works+0xa8d/0x18c0 [ 1184.476936][ T1209] process_scheduled_works+0xb6e/0x18c0 [ 1184.482556][ T1209] ? __pfx_process_scheduled_works+0x10/0x10 [ 1184.488605][ T1209] ? assign_work+0x3d5/0x5e0 [ 1184.493303][ T1209] worker_thread+0xa53/0xfc0 [ 1184.497985][ T1209] kthread+0x388/0x470 [ 1184.502079][ T1209] ? __pfx_worker_thread+0x10/0x10 [ 1184.507310][ T1209] ? __pfx_kthread+0x10/0x10 [ 1184.511927][ T1209] ret_from_fork+0x51e/0xb90 [ 1184.516583][ T1209] ? __pfx_ret_from_fork+0x10/0x10 [ 1184.521719][ T1209] ? __switch_to+0xc7d/0x1450 [ 1184.526516][ T1209] ? __pfx_kthread+0x10/0x10 [ 1184.531119][ T1209] ret_from_fork_asm+0x1a/0x30 [ 1184.535981][ T1209] [ 1184.539056][ T1209] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1184.546363][ T1209] CPU: 0 UID: 0 PID: 1209 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1184.557319][ T1209] Tainted: [L]=SOFTLOCKUP [ 1184.561662][ T1209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1184.571730][ T1209] Workqueue: mld mld_ifc_work [ 1184.576603][ T1209] Call Trace: [ 1184.579918][ T1209] [ 1184.582879][ T1209] vpanic+0x56c/0xa60 [ 1184.586950][ T1209] ? __pfx__printk+0x10/0x10 [ 1184.591561][ T1209] ? __pfx_vpanic+0x10/0x10 [ 1184.596092][ T1209] ? is_bpf_text_address+0x292/0x2b0 [ 1184.601571][ T1209] ? is_bpf_text_address+0x26/0x2b0 [ 1184.606971][ T1209] panic+0xc5/0xd0 [ 1184.610728][ T1209] ? __pfx_panic+0x10/0x10 [ 1184.615167][ T1209] ? ret_from_fork_asm+0x1a/0x30 [ 1184.620140][ T1209] __warn+0x315/0x4f0 [ 1184.624133][ T1209] ? __rate_control_send_low+0x524/0x800 [ 1184.629924][ T1209] ? __rate_control_send_low+0x524/0x800 [ 1184.635563][ T1209] __report_bug+0x29a/0x540 [ 1184.640123][ T1209] ? __rate_control_send_low+0x524/0x800 [ 1184.645873][ T1209] ? __pfx___report_bug+0x10/0x10 [ 1184.650956][ T1209] report_bug_entry+0x19a/0x290 [ 1184.655943][ T1209] ? __rate_control_send_low+0x5bb/0x800 [ 1184.661609][ T1209] ? __rate_control_send_low+0x5c0/0x800 [ 1184.667269][ T1209] handle_bug+0xce/0x200 [ 1184.671553][ T1209] exc_invalid_op+0x1a/0x50 [ 1184.676095][ T1209] asm_exc_invalid_op+0x1a/0x20 [ 1184.680991][ T1209] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 1184.687253][ T1209] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 1184.707203][ T1209] RSP: 0018:ffffc9000540e658 EFLAGS: 00010246 [ 1184.713481][ T1209] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1184.721476][ T1209] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff902323b0 [ 1184.729489][ T1209] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1184.737482][ T1209] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888025985528 [ 1184.745488][ T1209] R13: 0000000000000000 R14: ffffffff902323b0 R15: ffff88805218b178 [ 1184.753678][ T1209] ? __rate_control_send_low+0x58d/0x800 [ 1184.759347][ T1209] rate_control_send_low+0x1a7/0x7b0 [ 1184.764747][ T1209] ? __lock_acquire+0x6b5/0x2cf0 [ 1184.769781][ T1209] rate_control_get_rate+0x20b/0x5d0 [ 1184.775099][ T1209] ieee80211_tx_h_rate_ctrl+0xaf6/0x1760 [ 1184.780766][ T1209] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1184.786905][ T1209] invoke_tx_handlers_late+0xba/0x18a0 [ 1184.792667][ T1209] ? ieee80211_tx_h_select_key+0xd1b/0x1ab0 [ 1184.798582][ T1209] ieee80211_tx_dequeue+0x403e/0x54d0 [ 1184.804134][ T1209] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1184.809896][ T1209] ? ieee80211_next_txq+0x82e/0x9a0 [ 1184.815128][ T1209] ieee80211_handle_wake_tx_queue+0x132/0x2c0 [ 1184.821438][ T1209] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 1184.828100][ T1209] ? ieee80211_queue_skb+0x184f/0x2260 [ 1184.833693][ T1209] ? __local_bh_enable_ip+0xd0/0x130 [ 1184.839019][ T1209] ieee80211_queue_skb+0x1a3f/0x2260 [ 1184.844361][ T1209] ieee80211_tx+0x2c2/0x4b0 [ 1184.849022][ T1209] ? __pfx_ieee80211_tx+0x10/0x10 [ 1184.854124][ T1209] ? ieee80211_xmit+0x315/0x400 [ 1184.859121][ T1209] __ieee80211_subif_start_xmit+0xd12/0x1660 [ 1184.865140][ T1209] ? __ieee80211_subif_start_xmit+0x2cf/0x1660 [ 1184.871352][ T1209] ? process_scheduled_works+0xb6e/0x18c0 [ 1184.877154][ T1209] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1184.883601][ T1209] ? skb_network_protocol+0x23d/0x3f0 [ 1184.889010][ T1209] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 1184.895260][ T1209] ieee80211_subif_start_xmit+0xf3/0x570 [ 1184.900927][ T1209] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1184.907199][ T1209] ? __pfx_netif_skb_features+0x10/0x10 [ 1184.912770][ T1209] dev_hard_start_xmit+0x2d8/0x870 [ 1184.918035][ T1209] __dev_queue_xmit+0x16d1/0x3890 [ 1184.923111][ T1209] ? __dev_queue_xmit+0x277/0x3890 [ 1184.928252][ T1209] ? ___neigh_create+0x1c5f/0x2280 [ 1184.933433][ T1209] ? __local_bh_enable_ip+0xd0/0x130 [ 1184.938743][ T1209] ? lockdep_hardirqs_on+0x7a/0x110 [ 1184.944091][ T1209] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1184.949473][ T1209] ? neigh_resolve_output+0x438/0x750 [ 1184.954866][ T1209] ? eth_header+0x11b/0x200 [ 1184.959390][ T1209] ? __asan_memcpy+0x40/0x70 [ 1184.964108][ T1209] ? eth_header+0x11b/0x200 [ 1184.968719][ T1209] ? __pfx_eth_header+0x10/0x10 [ 1184.973588][ T1209] ? neigh_resolve_output+0x624/0x750 [ 1184.978985][ T1209] ? ip6_output+0x126/0x550 [ 1184.983677][ T1209] ip6_output+0x340/0x550 [ 1184.988023][ T1209] ? __pfx_ip6_output+0x10/0x10 [ 1184.992890][ T1209] NF_HOOK+0x177/0x4f0 [ 1184.996982][ T1209] ? __pfx_NF_HOOK+0x10/0x10 [ 1185.001610][ T1209] ? __pfx_dst_output+0x10/0x10 [ 1185.006498][ T1209] ? lockdep_hardirqs_on+0x7a/0x110 [ 1185.011742][ T1209] ? __local_bh_enable_ip+0xd0/0x130 [ 1185.017157][ T1209] ? icmp6_dst_alloc+0x3a6/0x440 [ 1185.022217][ T1209] mld_sendpack+0x8b4/0xe40 [ 1185.026744][ T1209] ? look_up_lock_class+0x57/0x110 [ 1185.031990][ T1209] ? mld_sendpack+0x213/0xe40 [ 1185.036681][ T1209] ? __pfx_mld_sendpack+0x10/0x10 [ 1185.041751][ T1209] mld_ifc_work+0x835/0xe70 [ 1185.046267][ T1209] ? process_scheduled_works+0xa8d/0x18c0 [ 1185.052004][ T1209] process_scheduled_works+0xb6e/0x18c0 [ 1185.057598][ T1209] ? __pfx_process_scheduled_works+0x10/0x10 [ 1185.063703][ T1209] ? assign_work+0x3d5/0x5e0 [ 1185.068332][ T1209] worker_thread+0xa53/0xfc0 [ 1185.072979][ T1209] kthread+0x388/0x470 [ 1185.077065][ T1209] ? __pfx_worker_thread+0x10/0x10 [ 1185.082185][ T1209] ? __pfx_kthread+0x10/0x10 [ 1185.086791][ T1209] ret_from_fork+0x51e/0xb90 [ 1185.091403][ T1209] ? __pfx_ret_from_fork+0x10/0x10 [ 1185.096634][ T1209] ? __switch_to+0xc7d/0x1450 [ 1185.101514][ T1209] ? __pfx_kthread+0x10/0x10 [ 1185.106111][ T1209] ret_from_fork_asm+0x1a/0x30 [ 1185.110931][ T1209] [ 1185.114595][ T1209] Kernel Offset: disabled [ 1185.118951][ T1209] Rebooting in 86400 seconds..