last executing test programs: 17m51.761345777s ago: executing program 1 (id=3262): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xd, 0x7}, {0x0}, &(0x7f0000000480)=[{&(0x7f0000000f80)=""/162, 0xa2}], 0x1, 0x47, 0x1a000}}], 0x48, 0x4000000}, 0x0) 17m51.662885371s ago: executing program 1 (id=3263): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a", 0x29}], 0x3, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 17m51.548330156s ago: executing program 1 (id=3265): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats={0x1d, 0x41}}) 17m51.402637165s ago: executing program 1 (id=3266): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usbip_server_init(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17m50.671416307s ago: executing program 1 (id=3271): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x18, 0x200, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x48804) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) socket$inet6(0xa, 0x6, 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES8=r5], 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r7, r7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x0, 0xee00}}, './file0\x00'}) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, r7, r8}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000000180)=0x8) 17m49.070289013s ago: executing program 1 (id=3277): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x43, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x0, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "7c1f"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)=ANY=[@ANYBLOB='grpquota_inodrquota,\x00'/37]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000001c0)=@sg0, r0, &(0x7f0000000340)='./file0\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x73, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x4b5a9da54893e123, 0x8, 0x2, 0xffff, 0x7}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0x1, 0xa00, 0x1, 0x1, 0x0, 0xffffffffffffffff}) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x90, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0xcc}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080)=0x54, 0x4) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, 0x2, 0x1}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="a5cddc490123", {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x3, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0xd0a9a00a8d77fbbc}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010102, @empty, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[], 0x318c) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x9, 0xc9}}}, 0x6) ioctl$TCSETS(r5, 0x40045431, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RVERSION(r8, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0xb391, 0x7, '9P2000.u'}, 0x15) read$FUSE(r2, &(0x7f0000000f00)={0x2020}, 0x2020) 17m33.607327408s ago: executing program 32 (id=3277): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x43, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x0, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "7c1f"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)=ANY=[@ANYBLOB='grpquota_inodrquota,\x00'/37]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000001c0)=@sg0, r0, &(0x7f0000000340)='./file0\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x73, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x4b5a9da54893e123, 0x8, 0x2, 0xffff, 0x7}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0x1, 0xa00, 0x1, 0x1, 0x0, 0xffffffffffffffff}) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x90, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0xcc}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080)=0x54, 0x4) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, 0x2, 0x1}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="a5cddc490123", {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x3, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0xd0a9a00a8d77fbbc}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010102, @empty, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[], 0x318c) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x9, 0xc9}}}, 0x6) ioctl$TCSETS(r5, 0x40045431, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RVERSION(r8, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0xb391, 0x7, '9P2000.u'}, 0x15) read$FUSE(r2, &(0x7f0000000f00)={0x2020}, 0x2020) 6.058180465s ago: executing program 2 (id=10967): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x500, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0140000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x400dc) 5.970273734s ago: executing program 2 (id=10968): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x5) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) ioctl$SIOCAX25NOUID(r1, 0x89e3, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000080)={0x0, 0x22, 0x62, {0x62, 0x21, "bf0d9f23bb920b11ad9b164809a255b0797bea455d627fe0e52a2d4e48eafd29db8fb10cded2a61cc8cea22fe3181c064d0627bf32e625b26f581ccffac3bfe5ac5d6c4e0ff6ba08af3aa697c7af2e15bf7698afe66a2202a3f839942231400d"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "1f756727"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe8c, 0x9b, 0x1, {0x22, 0x71b}}}}, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x20, 0x0, 0x7, "9e5b369f5aa1c2"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000280)={0x20, 0x1, 0x80, "9d2c5e3b7f349b8cfb1048dea0c2299bb070a2cae8d93129355cc103ddcb43ab4fac5f14a76bfbd4984a1b9beafada3f7c9797a1e19154c45dd4115fecfbf98312a37ec663f770e925747493d9ca6beec8937f79b4480b6a6653ac59d9f4df77bdb6177e81d073e3384fa9a38724c49759b8c7ce899cd53f86f503caebbc91fd"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0xf6}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001d00)={0x44, &(0x7f0000000980)={0x40, 0x31, 0x2, 'T6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.439986751s ago: executing program 3 (id=10985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c746c6f75e3c869643de8d202fb3ce8c8b44db181c64872ab87f9125d31fce35ff953dedfbf98e8923f6ec52c1a37d0a0553a5255588c1936144500b16403b62745381b072f965530bf106d03ff9d13f5d7e4bb2dc0d20334e36ee80a85586fbf426536f4e7a9e0623b70fd5552fc58809fd9f1857a580c877cef4122213d40f135f215739d6a96f149f0c5ab8a8a119bdb728be15d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x480d0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r8 = inotify_init() r9 = inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r8, r9) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a05000000000000000000020000070900010073797a3000000000140000001100010000000000000000000a00000a"], 0x48}}, 0x0) 3.185165249s ago: executing program 3 (id=10987): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000019000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 2.962688963s ago: executing program 3 (id=10989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) (fail_nth: 3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4c840, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x2, 0x6a0000) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x26, 0x0) fcntl$lock(r6, 0x6, 0x0) sendmsg$SMC_PNETID_ADD(r5, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r5, 0x0, 0x4000) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x6f4000) sendmsg$NL80211_CMD_JOIN_MESH(r4, 0x0, 0x1) syz_clone(0x20041000, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000540), &(0x7f0000000740)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$BLKRAGET(r6, 0x1263, 0x0) 2.892905657s ago: executing program 0 (id=10990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0xe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0xad, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @random="7c9bc0e50b04acd78573a880a884e96f614e499082784d25060ae4d2ba3995a9aaee3d7b0b8459f6076df74c088a9f1c569ae2cb4c74f849372e0533fa578c9a666b67494c842263f8aa91c3e731b84a34bd269f669c63f5dc2e28e90b151905ed7a8ca66cf2d4a7bc4d47606987780286d0bf61467be390b779d6e33a780fe2d6fea333208ac15f6d184a761b1722bd2a"}}]}, 0xe0}}, 0x0) 2.617096129s ago: executing program 3 (id=10991): ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r4 = dup2(r1, r3) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r6, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) 2.371649634s ago: executing program 0 (id=10992): chdir(0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x8ffd}, 0x2d, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x62) symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000140)={0xb, 0x4, 0x4, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0xffffffff, 0x1000}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x9) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000280)={0x0, 0xa, 0x0, 0x0, 0x80}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 2.370390554s ago: executing program 3 (id=10993): socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x22, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.305827s ago: executing program 4 (id=10994): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_io_uring_setup(0x74f4, &(0x7f0000000080)={0x0, 0xd4f1, 0x80, 0x0, 0x2ec}, &(0x7f0000000140), &(0x7f00000001c0)) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x80}, 0xc) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) 2.284338144s ago: executing program 3 (id=10995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x40, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r2, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) 2.05466904s ago: executing program 2 (id=10996): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x550, 0x40, 0x10, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0x10000000}, {0xf4ef}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x9, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 1.994513695s ago: executing program 2 (id=10997): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000000058700fe88a43de1a400000000020000007d01ff020000000000000000000000000001"], 0xfdef) 1.82771747s ago: executing program 2 (id=10998): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000002c0)='fdinfo/3\x00') r3 = syz_usb_connect$cdc_ncm(0x3, 0xef, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x2, 0x1, 0x5, 0xf9aa6b2ed90b24c0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0xf06}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x6, 0x3, 0xf1}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @mdlm_detail={0x56, 0x24, 0x13, 0x5, "13345516efdc3232d8dfc8beb01f10b73eb477690ce4d7398d5ee95612a5692f6e063c5bb0cee53b92095c8be74b63a4831d9dd9ad91abb706038df6019c0882e647c8d42689447f31f05c57b1f785088a8f"}, @obex={0x5, 0x24, 0x15, 0x9}, @country_functional={0x10, 0x24, 0x7, 0x1, 0x0, [0x7, 0x7, 0x2, 0x6, 0x3]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7, 0xd1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x4, 0x19}}}}}}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0xfc, 0x2, 0x2, 0x8, 0xff}, 0x22, &(0x7f00000001c0)={0x5, 0xf, 0x22, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0xef, 0x0, 0x9, 0x5, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xc, 0x1, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x0, 0xd, 0x4, 0x9}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4001}}, {0xe7, &(0x7f0000002340)=@string={0xe7, 0x3, "aa9defbf931023432df725b8a90e82cf3ce7273cb2f63b350d3034854c439d2c7f7d8acb2bb9171496a0bd88ba82a93fa7ea772185bd01cea8fb53db8530ebef86864e66e7e6233e83bfca716aca307529cd211b3be2d248f8dba50b0daca1c488d91ae32c634940381600200768a789d6b8e44fcfadf658a5319c518c71ee43062e3d91e18d0c3f3970432c1fde33922afefe4446a4295d0b485987d781857fa034a417d6bab88ba67b431f69edce3dcfdcdff454b2ad61253a75cd28fa3a4af62b8af02679a45612008f3c29b8e4997eeecff4b4355b576efa8a7a57ebafe1bc2a5c58ca"}}]}) syz_usb_control_io(r3, &(0x7f0000002640)={0x2c, &(0x7f00000024c0)={0x40, 0x22, 0x64, {0x64, 0x7, "ffd7b50237931a0603f7a5c25c45fc5037941f697dd6353aff643ca64b4b7b5b86e8b114c29157a02e8642eab532b39243b8f478fc5973cce1acb16ee623ddb19c1c203049dbb7c240728dd885e6c57201eb838e73c9b55eb451e01d9a38d2ca4029"}}, &(0x7f0000002540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f0000002580)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x80, 0x1, 0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "cb5e5ad6d121185e92f3b0063be7f5e2"}]}}, &(0x7f00000025c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0xff, 0x1b, "073efab0", "65d8af46"}}, &(0x7f0000002600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x2a, 0x6, 0x0, 0x1, 0xcf1}}}, &(0x7f0000002b40)={0x84, &(0x7f0000002680)={0x40, 0x11, 0xf2, "d1917978d97b20dc7f84ae15eda3882b6d5a94802ed80c0e4b3bbcd9d88ac58221d312f8cf9f82418c36ee7cd26d3ce03a48288d7bac230bc3b1d5b3405a23aefa981cc0b2e4a3ec534b06e6445edeb0c12211fd29eadd493e6c0775daa5e57dc231b32a23642cfe14dee3de085240a0b0ab5c15f7374ec450f6e5d22baa08030b27a181c9477e362a304850669bd42a97312ca913eaf57f5a76c5ee62470f4a73ade807c157d629518e45c658a867c57ad9d445bfa7c054593b93bf97c7dd88ff0537b57980d17876c05675a2aeee3a82fc05477610b05a94210c6286ff4a1fe6a29ad50e1a7252871b7ec94ca93a162a48"}, &(0x7f0000002780)={0x0, 0xa, 0x1}, &(0x7f00000027c0)={0x0, 0x8, 0x1, 0x14}, &(0x7f0000002800)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000002840)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0xff]}}, &(0x7f0000002880)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000028c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000002900)={0x40, 0xb, 0x2, "dd25"}, &(0x7f0000002940)={0x40, 0xf, 0x2, 0x10}, &(0x7f0000002980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000029c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002a00)={0x40, 0x19, 0x2, "d4df"}, &(0x7f0000002a40)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000002a80)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000002ac0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000002b00)={0x40, 0x21, 0x1, 0x8}}) close(0x3) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x195ecf756f4fb9c7, 0x86, 0x29, @vifc_lcl_ifindex, @empty}, 0x10) syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c020002", @ANYRES16=0x0], 0x0) 1.478711665s ago: executing program 0 (id=10999): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000042a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x4850, 0x0, 0x0) rt_sigprocmask(0x1, &(0x7f0000000040)={[0x5]}, &(0x7f0000000080), 0x8) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000100)={r3, 0x10001000, {0x0, 0x0, 0x0, 0x3, 0x78, 0x0, 0xa, 0xf, 0x14, "36f7fd6c0459ef116b8aaa8c0b9d746af382f5e3cbb752d8a925cbba57dae99ba80df26508ef54c396458878e818ebf9b27c6324bd336e63cb0869b23063cb99", "5b62d71dbcc5f0fec3505c18f97d703a5e20ddce7d472bddde5ea563bed8a989d601644f2243b6defa94ddb72841d84b29e2a85b76ff0e0a0bd2421082b07d94", "8092c77a10de5ca53900b3170e6f233019f688064e69083c8d1976203840a9b2", [0xf6, 0x326]}}) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) 1.401793868s ago: executing program 4 (id=11000): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6, 0x0, 0x4}, {0x64}, {0x401, 0x4}]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) listen(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) accept4(r0, 0x0, 0x0, 0x80800) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x1000000d}) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x1008010, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/296]) 973.625806ms ago: executing program 0 (id=11001): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ffffff, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 807.154114ms ago: executing program 0 (id=11002): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r0, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0xf0, 0x40080c4}, 0x4000054) 788.075291ms ago: executing program 0 (id=11003): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640001000a060103"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) (async) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080) 440.458136ms ago: executing program 4 (id=11004): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xffff0000}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 334.946017ms ago: executing program 4 (id=11005): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000700000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x40000070}, 0x44) 334.18492ms ago: executing program 4 (id=11006): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) close_range(r0, r0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1a) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 147.180802ms ago: executing program 4 (id=11007): r0 = add_key$fscrypt_provisioning(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffd) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="b9120b00000f32b9800000c00f3235004000000f303e67f30faeef448355000066baf80cb8cc88208bef66bafc0cb000ee66b8bc008ee0f2420f0f6bffb666b827008ed8f08110d4a80000c463390c3a00", 0x51}], 0x1, 0x7, &(0x7f0000000240)=[@cr4={0x1, 0x82}, @cr0={0x0, 0x2000000a}], 0x2) keyctl$revoke(0x3, r0) (async) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) (async) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 32) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) write$sequencer(r4, &(0x7f0000000140)=[@l={0x92, 0x7, 0xe0, 0x1f, 0x7, 0x80, 0x800}, @e={0xff, 0xa, 0xf, 0x81, @SEQ_CONTROLLER=0xfe, 0x8, 0x8, 0xc0}], 0x10) syz_usb_control_io(r2, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x3, 0x87, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x1, 0x5, "c768faee57"}, 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x41e002, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0000904000000010120000a24010101bb02010211240601040507000a0008000300020005052405060f0f24060205040200020001004100040c240202030202508000090111240605020507002e130a004ef10200000924030102020505f509040100000102000009040101"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=11008): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff0000009a000000000000000000000000ff0200000000000000000000000000014f194e20004d90"], 0x9e) kernel console output (not intermixed with test programs): usb 3-1: Using ep0 maxpacket: 32 [ 1594.964579][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.977540][ T29] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1594.986875][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.995054][ T29] usb 3-1: Product: syz [ 1594.999454][ T29] usb 3-1: Manufacturer: syz [ 1595.004459][ T29] usb 3-1: SerialNumber: syz [ 1595.018741][ T1148] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 1595.058742][ T29] usb 3-1: config 0 descriptor?? [ 1595.069540][ T5942] m920x_read = error: -19 [ 1595.073958][ T5942] dvb-usb: error while querying for an remote control event. [ 1595.080579][ T29] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1595.149600][ T4274] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 1595.202931][ T4278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10715'. [ 1595.228093][ T5942] m920x_read = error: -19 [ 1595.232488][ T5942] dvb-usb: error while querying for an remote control event. [ 1595.249571][ T4278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10715'. [ 1595.262252][ T4278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10715'. [ 1595.272328][ T4278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10715'. [ 1595.281748][ T4278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10715'. [ 1595.304246][ T5942] IPVS: starting estimator thread 0... [ 1595.318573][ T4283] tipc: Started in network mode [ 1595.323638][ T4283] tipc: Node identity ac1414aa, cluster identity 4711 [ 1595.331481][ T4283] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1595.338935][ T4283] tipc: Enabled bearer , priority 10 [ 1595.361785][ T5942] m920x_read = error: -19 [ 1595.367541][ T5942] dvb-usb: error while querying for an remote control event. [ 1595.397713][ T4284] IPVS: using max 32 ests per chain, 76800 per kthread [ 1595.444851][ T4286] FAULT_INJECTION: forcing a failure. [ 1595.444851][ T4286] name failslab, interval 1, probability 0, space 0, times 0 [ 1595.458263][ T4286] CPU: 0 UID: 0 PID: 4286 Comm: syz.4.10719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1595.458296][ T4286] Tainted: [L]=SOFTLOCKUP [ 1595.458304][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1595.458318][ T4286] Call Trace: [ 1595.458327][ T4286] [ 1595.458336][ T4286] dump_stack_lvl+0xe8/0x150 [ 1595.458379][ T4286] should_fail_ex+0x412/0x560 [ 1595.458414][ T4286] should_failslab+0xa8/0x100 [ 1595.458438][ T4286] __kmalloc_node_noprof+0xf0/0x7c0 [ 1595.458469][ T4286] ? crypto_create_tfm_node+0x83/0x3f0 [ 1595.458507][ T4286] crypto_create_tfm_node+0x83/0x3f0 [ 1595.458544][ T4286] crypto_alloc_tfm_node+0x172/0x3f0 [ 1595.458578][ T4286] ? __kmalloc_noprof+0x37d/0x760 [ 1595.458612][ T4286] aead_key_setup_encrypt+0x2c/0xb0 [ 1595.458648][ T4286] ieee80211_key_alloc+0x14de/0x24a0 [ 1595.458681][ T4286] ieee80211_add_key+0x347/0xc20 [ 1595.458711][ T4286] rdev_add_key+0x134/0x2e0 [ 1595.458740][ T4286] nl80211_new_key+0x79a/0x8e0 [ 1595.458786][ T4286] ? __pfx_nl80211_new_key+0x10/0x10 [ 1595.458815][ T4286] ? nl80211_pre_doit+0x4d5/0x8e0 [ 1595.458855][ T4286] genl_family_rcv_msg_doit+0x22a/0x330 [ 1595.458893][ T4286] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1595.458939][ T4286] ? bpf_lsm_capable+0x9/0x20 [ 1595.458961][ T4286] ? security_capable+0x7e/0x2c0 [ 1595.459000][ T4286] genl_rcv_msg+0x61c/0x7a0 [ 1595.459037][ T4286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1595.459067][ T4286] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1595.459096][ T4286] ? __pfx_nl80211_new_key+0x10/0x10 [ 1595.459123][ T4286] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1595.459156][ T4286] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1595.459184][ T4286] ? do_syscall_64+0xe2/0xf80 [ 1595.459208][ T4286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.459240][ T4286] netlink_rcv_skb+0x232/0x4b0 [ 1595.459265][ T4286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1595.459296][ T4286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1595.459319][ T4286] ? genl_rcv+0x19/0x40 [ 1595.459367][ T4286] ? down_read+0x272/0x2e0 [ 1595.459392][ T4286] ? genl_rcv+0xd/0x40 [ 1595.459423][ T4286] genl_rcv+0x28/0x40 [ 1595.459450][ T4286] netlink_unicast+0x80f/0x9b0 [ 1595.459482][ T4286] ? __pfx_netlink_unicast+0x10/0x10 [ 1595.459506][ T4286] ? netlink_sendmsg+0x650/0xb40 [ 1595.459529][ T4286] ? skb_put+0x11b/0x210 [ 1595.459560][ T4286] netlink_sendmsg+0x813/0xb40 [ 1595.459595][ T4286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1595.459624][ T4286] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1595.459658][ T4286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1595.459683][ T4286] sock_sendmsg_nosec+0x18f/0x1d0 [ 1595.459708][ T4286] ____sys_sendmsg+0x589/0x8c0 [ 1595.459738][ T4286] ? __might_fault+0xaf/0x130 [ 1595.459780][ T4286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1595.459818][ T4286] ? import_iovec+0x73/0xa0 [ 1595.459845][ T4286] ___sys_sendmsg+0x2a5/0x360 [ 1595.459873][ T4286] ? __lock_acquire+0x6b5/0x2cf0 [ 1595.459903][ T4286] ? __pfx____sys_sendmsg+0x10/0x10 [ 1595.459971][ T4286] ? __fget_files+0x2a/0x420 [ 1595.459995][ T4286] ? __fget_files+0x3a0/0x420 [ 1595.460033][ T4286] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1595.460065][ T4286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1595.460105][ T4286] ? __pfx_ksys_write+0x10/0x10 [ 1595.460148][ T4286] do_syscall_64+0xe2/0xf80 [ 1595.460173][ T4286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.460194][ T4286] ? trace_irq_disable+0x37/0x100 [ 1595.460220][ T4286] ? clear_bhb_loop+0x40/0x90 [ 1595.460246][ T4286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.460268][ T4286] RIP: 0033:0x7ff71379aeb9 [ 1595.460289][ T4286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.460307][ T4286] RSP: 002b:00007ff7146ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1595.460329][ T4286] RAX: ffffffffffffffda RBX: 00007ff713a15fa0 RCX: 00007ff71379aeb9 [ 1595.460345][ T4286] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1595.460359][ T4286] RBP: 00007ff7146ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.460373][ T4286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1595.460386][ T4286] R13: 00007ff713a16038 R14: 00007ff713a15fa0 R15: 00007ffd48cdfe68 [ 1595.460419][ T4286] [ 1595.882540][ T5942] m920x_read = error: -19 [ 1595.886951][ T5942] dvb-usb: error while querying for an remote control event. [ 1595.997760][T22563] m920x_read = error: -19 [ 1596.002274][T22563] dvb-usb: error while querying for an remote control event. [ 1596.057064][ T1148] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 1596.101629][ T29] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input130 [ 1596.126480][T22563] m920x_read = error: -19 [ 1596.131525][T22563] dvb-usb: error while querying for an remote control event. [ 1596.250551][T22563] m920x_read = error: -19 [ 1596.263800][T22563] dvb-usb: error while querying for an remote control event. [ 1596.301454][ T801] usb 3-1: USB disconnect, device number 68 [ 1596.377623][T22563] m920x_read = error: -19 [ 1596.382034][T22563] dvb-usb: error while querying for an remote control event. [ 1596.445914][ T4312] __nla_validate_parse: 28 callbacks suppressed [ 1596.445934][ T4312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10729'. [ 1596.466131][T22563] tipc: Node number set to 2886997162 [ 1596.497580][T22563] m920x_read = error: -19 [ 1596.497609][T22563] dvb-usb: error while querying for an remote control event. [ 1596.539350][ T4314] netlink: 'syz.0.10730': attribute type 6 has an invalid length. [ 1596.607635][T22563] m920x_read = error: -19 [ 1596.612163][T22563] dvb-usb: error while querying for an remote control event. [ 1596.630954][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10732'. [ 1596.712571][ T1148] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 1596.729922][T22563] m920x_read = error: -19 [ 1596.734311][T22563] dvb-usb: error while querying for an remote control event. [ 1596.771559][ T4327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10742'. [ 1596.848899][T22563] m920x_read = error: -19 [ 1596.856984][T22563] dvb-usb: error while querying for an remote control event. [ 1596.987697][ T5942] m920x_read = error: -19 [ 1596.987728][ T5942] dvb-usb: error while querying for an remote control event. [ 1597.014565][ T4339] netlink: 'syz.2.10737': attribute type 10 has an invalid length. [ 1597.028773][T22563] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1597.097819][ T5942] m920x_read = error: -19 [ 1597.102989][ T5942] dvb-usb: error while querying for an remote control event. [ 1597.157534][ T5981] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1597.199994][T22563] usb 4-1: config 0 has no interfaces? [ 1597.209379][T22563] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1597.219612][T22563] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1597.227879][ T5942] m920x_read = error: -19 [ 1597.234136][ T5942] dvb-usb: error while querying for an remote control event. [ 1597.241991][T22563] usb 4-1: Product: syz [ 1597.246542][T22563] usb 4-1: Manufacturer: syz [ 1597.254588][T22563] usb 4-1: config 0 descriptor?? [ 1597.302061][ T4348] FAULT_INJECTION: forcing a failure. [ 1597.302061][ T4348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1597.318377][ T5981] usb 1-1: Using ep0 maxpacket: 16 [ 1597.324904][ T4348] CPU: 1 UID: 0 PID: 4348 Comm: syz.4.10743 Tainted: G L syzkaller #0 PREEMPT(full) [ 1597.324934][ T4348] Tainted: [L]=SOFTLOCKUP [ 1597.324942][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1597.324956][ T4348] Call Trace: [ 1597.324965][ T4348] [ 1597.324974][ T4348] dump_stack_lvl+0xe8/0x150 [ 1597.325007][ T4348] should_fail_ex+0x412/0x560 [ 1597.325042][ T4348] _copy_to_user+0x31/0xb0 [ 1597.325070][ T4348] simple_read_from_buffer+0xe1/0x170 [ 1597.325091][ T4348] proc_fail_nth_read+0x1bb/0x230 [ 1597.325136][ T4348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1597.325171][ T4348] ? rw_verify_area+0x2a6/0x4d0 [ 1597.325200][ T4348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1597.325235][ T4348] vfs_read+0x20c/0xa70 [ 1597.325263][ T4348] ? fdget_pos+0x246/0x320 [ 1597.325293][ T4348] ? __pfx___mutex_lock+0x10/0x10 [ 1597.325321][ T4348] ? __pfx_vfs_read+0x10/0x10 [ 1597.325351][ T4348] ? __fget_files+0x2a/0x420 [ 1597.325381][ T4348] ? __fget_files+0x3a0/0x420 [ 1597.325404][ T4348] ? __fget_files+0x2a/0x420 [ 1597.325436][ T4348] ksys_read+0x150/0x270 [ 1597.325467][ T4348] ? __pfx_ksys_read+0x10/0x10 [ 1597.325508][ T4348] do_syscall_64+0xe2/0xf80 [ 1597.325533][ T4348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.325554][ T4348] ? trace_irq_disable+0x37/0x100 [ 1597.325558][ T5981] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1597.325582][ T4348] ? clear_bhb_loop+0x40/0x90 [ 1597.325643][ T4348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.325712][ T4348] RIP: 0033:0x7ff71375b78e [ 1597.325770][ T4348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1597.325826][ T4348] RSP: 002b:00007ff7146e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1597.325892][ T4348] RAX: ffffffffffffffda RBX: 00007ff7146ea6c0 RCX: 00007ff71375b78e [ 1597.325932][ T4348] RDX: 000000000000000f RSI: 00007ff7146ea0a0 RDI: 0000000000000004 [ 1597.325972][ T4348] RBP: 00007ff7146ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.326003][ T4348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1597.326042][ T4348] R13: 00007ff713a16038 R14: 00007ff713a15fa0 R15: 00007ffd48cdfe68 [ 1597.326124][ T4348] [ 1597.554196][T22563] m920x_read = error: -19 [ 1597.558644][T22563] dvb-usb: error while querying for an remote control event. [ 1597.567984][ T5981] usb 1-1: config 1 has no interface number 0 [ 1597.575104][ T4329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.577749][ T5981] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1597.612053][ T4350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.617328][ T5981] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1597.626532][ T4329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.638372][ T5981] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1597.650114][ T4350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.661446][ T29] usb 4-1: USB disconnect, device number 76 [ 1597.661990][ T5981] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1597.677390][T22563] m920x_read = error: -19 [ 1597.681847][T22563] dvb-usb: error while querying for an remote control event. [ 1597.691402][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.704447][ T5981] usb 1-1: Product: syz [ 1597.711666][ T5981] usb 1-1: Manufacturer: syz [ 1597.716439][ T5981] usb 1-1: SerialNumber: syz [ 1597.726251][ T4336] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1597.734037][ T4336] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1597.798320][T22563] m920x_read = error: -19 [ 1597.802746][T22563] dvb-usb: error while querying for an remote control event. [ 1597.856760][ T4357] net_ratelimit: 15 callbacks suppressed [ 1597.856793][ T4357] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1597.874303][ T4357] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1597.887521][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1597.927685][T22563] m920x_read = error: -19 [ 1597.932130][T22563] dvb-usb: error while querying for an remote control event. [ 1597.945229][ T4335] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1597.955875][ T4335] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1597.964374][ T5981] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 1597.975414][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1598.001482][ T5981] aqc111 1-1:1.105: probe with driver aqc111 failed with error -32 [ 1598.020957][ T5981] usb 1-1: USB disconnect, device number 52 [ 1598.051624][T22563] m920x_read = error: -19 [ 1598.056101][T22563] dvb-usb: error while querying for an remote control event. [ 1598.134499][ T4364] FAULT_INJECTION: forcing a failure. [ 1598.134499][ T4364] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.137948][ T347] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1598.147640][ T4364] CPU: 0 UID: 0 PID: 4364 Comm: syz.0.10749 Tainted: G L syzkaller #0 PREEMPT(full) [ 1598.147720][ T4364] Tainted: [L]=SOFTLOCKUP [ 1598.147740][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1598.147773][ T4364] Call Trace: [ 1598.147795][ T4364] [ 1598.147831][ T4364] dump_stack_lvl+0xe8/0x150 [ 1598.147924][ T4364] should_fail_ex+0x412/0x560 [ 1598.148018][ T4364] should_failslab+0xa8/0x100 [ 1598.148078][ T4364] __kmalloc_node_noprof+0xf0/0x7c0 [ 1598.148166][ T4364] ? crypto_create_tfm_node+0x83/0x3f0 [ 1598.148257][ T4364] crypto_create_tfm_node+0x83/0x3f0 [ 1598.148351][ T4364] crypto_alloc_tfm_node+0x172/0x3f0 [ 1598.148435][ T4364] ? trace_kmalloc+0x1f/0xb0 [ 1598.148519][ T4364] ieee80211_aes_gmac_key_setup+0x28/0xb0 [ 1598.148610][ T4364] ieee80211_key_alloc+0x13d4/0x24a0 [ 1598.148738][ T4364] ieee80211_add_key+0x347/0xc20 [ 1598.148826][ T4364] rdev_add_key+0x134/0x2e0 [ 1598.148914][ T4364] nl80211_new_key+0x79a/0x8e0 [ 1598.148988][ T4364] ? __pfx_nl80211_new_key+0x10/0x10 [ 1598.149060][ T4364] ? nl80211_pre_doit+0x4d5/0x8e0 [ 1598.149160][ T4364] genl_family_rcv_msg_doit+0x22a/0x330 [ 1598.149259][ T4364] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1598.149369][ T4364] ? bpf_lsm_capable+0x9/0x20 [ 1598.149421][ T4364] ? security_capable+0x7e/0x2c0 [ 1598.149521][ T4364] genl_rcv_msg+0x61c/0x7a0 [ 1598.149614][ T4364] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1598.149686][ T4364] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1598.149770][ T4364] ? __pfx_nl80211_new_key+0x10/0x10 [ 1598.149821][ T4364] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1598.149913][ T4364] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1598.149988][ T4364] ? do_syscall_64+0xe2/0xf80 [ 1598.150063][ T4364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.150163][ T4364] netlink_rcv_skb+0x232/0x4b0 [ 1598.150232][ T4364] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1598.150324][ T4364] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1598.150373][ T4364] ? genl_rcv+0x19/0x40 [ 1598.150477][ T4364] ? down_read+0x272/0x2e0 [ 1598.150542][ T4364] ? genl_rcv+0xd/0x40 [ 1598.150605][ T4364] genl_rcv+0x28/0x40 [ 1598.150671][ T4364] netlink_unicast+0x80f/0x9b0 [ 1598.150778][ T4364] ? __pfx_netlink_unicast+0x10/0x10 [ 1598.150833][ T4364] ? netlink_sendmsg+0x650/0xb40 [ 1598.150905][ T4364] ? skb_put+0x11b/0x210 [ 1598.150981][ T4364] netlink_sendmsg+0x813/0xb40 [ 1598.151070][ T4364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1598.151143][ T4364] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1598.151226][ T4364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1598.151288][ T4364] sock_sendmsg_nosec+0x18f/0x1d0 [ 1598.151350][ T4364] ____sys_sendmsg+0x589/0x8c0 [ 1598.151435][ T4364] ? __might_fault+0xaf/0x130 [ 1598.151540][ T4364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1598.151636][ T4364] ? import_iovec+0x73/0xa0 [ 1598.151713][ T4364] ___sys_sendmsg+0x2a5/0x360 [ 1598.151786][ T4364] ? __lock_acquire+0x6b5/0x2cf0 [ 1598.151881][ T4364] ? __pfx____sys_sendmsg+0x10/0x10 [ 1598.152079][ T4364] ? __fget_files+0x2a/0x420 [ 1598.152158][ T4364] ? __fget_files+0x3a0/0x420 [ 1598.152253][ T4364] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1598.152338][ T4364] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1598.152443][ T4364] ? __pfx_ksys_write+0x10/0x10 [ 1598.152543][ T4364] do_syscall_64+0xe2/0xf80 [ 1598.152606][ T4364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.152659][ T4364] ? trace_irq_disable+0x37/0x100 [ 1598.152738][ T4364] ? clear_bhb_loop+0x40/0x90 [ 1598.152819][ T4364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.152901][ T4364] RIP: 0033:0x7f1b9b39aeb9 [ 1598.152960][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.153012][ T4364] RSP: 002b:00007f1b9c171028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1598.153073][ T4364] RAX: ffffffffffffffda RBX: 00007f1b9b615fa0 RCX: 00007f1b9b39aeb9 [ 1598.153114][ T4364] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1598.153154][ T4364] RBP: 00007f1b9c171090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.153194][ T4364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1598.153227][ T4364] R13: 00007f1b9b616038 R14: 00007f1b9b615fa0 R15: 00007ffd3464d7d8 [ 1598.153321][ T4364] [ 1598.200667][ T5981] m920x_read = error: -19 [ 1598.267672][ T29] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1598.273399][ T5981] dvb-usb: error while querying for an remote control event. [ 1598.404075][ T347] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 1598.457641][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1598.496106][ T347] usb 4-1: config 0 has no interface number 0 [ 1598.537323][ T5981] m920x_read = error: -19 [ 1598.553850][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 1598.562132][ T5981] dvb-usb: error while querying for an remote control event. [ 1598.583270][ T347] usb 4-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1598.583738][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.653500][ T347] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1598.664003][ T347] usb 4-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1598.674111][ T347] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1598.683323][ T347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.694912][ T347] usb 4-1: config 0 descriptor?? [ 1598.712725][ T29] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1598.722213][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.730552][ T29] usb 5-1: Product: syz [ 1598.734783][ T29] usb 5-1: Manufacturer: syz [ 1598.740009][ T29] usb 5-1: SerialNumber: syz [ 1598.746699][ T4367] pim6reg1: entered promiscuous mode [ 1598.752794][ T4367] pim6reg1: entered allmulticast mode [ 1598.758325][ T5981] m920x_read = error: -19 [ 1598.762709][ T5981] dvb-usb: error while querying for an remote control event. [ 1598.769686][ T29] usb 5-1: config 0 descriptor?? [ 1598.789373][ T29] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1598.877898][ T5981] m920x_read = error: -19 [ 1598.882346][ T5981] dvb-usb: error while querying for an remote control event. [ 1598.910015][ T347] usb 4-1: string descriptor 0 read error: -71 [ 1598.925360][ T347] keyspan 4-1:0.168: Keyspan 2 port adapter converter detected [ 1598.933120][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1598.941325][ T347] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 1 [ 1598.956931][ T347] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 84 [ 1598.965491][ T347] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 2 [ 1598.981032][ T347] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1599.007756][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1599.023302][ T5981] m920x_read = error: -19 [ 1599.027769][ T5981] dvb-usb: error while querying for an remote control event. [ 1599.040264][ T347] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 88 [ 1599.058842][ T347] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 6 [ 1599.089438][ T347] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1599.110748][ T347] usb 4-1: USB disconnect, device number 77 [ 1599.122208][ T347] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1599.137076][ T347] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1599.143703][ T5981] m920x_read = error: -19 [ 1599.155340][ T347] keyspan 4-1:0.168: device disconnected [ 1599.160157][ T5981] dvb-usb: error while querying for an remote control event. [ 1599.288445][ T5981] m920x_read = error: -19 [ 1599.292861][ T5981] dvb-usb: error while querying for an remote control event. [ 1599.407770][ T5981] m920x_read = error: -19 [ 1599.407801][ T5981] dvb-usb: error while querying for an remote control event. [ 1599.487519][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1599.504250][ T4377] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1599.514100][ T4377] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1599.523293][ T5981] m920x_read = error: -19 [ 1599.533418][ T5981] dvb-usb: error while querying for an remote control event. [ 1599.596077][ T4381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10757'. [ 1599.613517][ T4381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10757'. [ 1599.621405][ T29] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input131 [ 1599.657866][ T5981] m920x_read = error: -19 [ 1599.662271][ T5981] dvb-usb: error while querying for an remote control event. [ 1599.787589][ T5981] m920x_read = error: -19 [ 1599.792196][ T5981] dvb-usb: error while querying for an remote control event. [ 1599.817912][ T5981] usb 5-1: USB disconnect, device number 96 [ 1599.907914][ T5942] m920x_read = error: -19 [ 1599.912385][ T5942] dvb-usb: error while querying for an remote control event. [ 1599.958005][T22563] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1599.976495][ T4392] FAULT_INJECTION: forcing a failure. [ 1599.976495][ T4392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1599.992045][ T4392] CPU: 1 UID: 0 PID: 4392 Comm: syz.2.10761 Tainted: G L syzkaller #0 PREEMPT(full) [ 1599.992077][ T4392] Tainted: [L]=SOFTLOCKUP [ 1599.992086][ T4392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1599.992099][ T4392] Call Trace: [ 1599.992108][ T4392] [ 1599.992117][ T4392] dump_stack_lvl+0xe8/0x150 [ 1599.992149][ T4392] should_fail_ex+0x412/0x560 [ 1599.992185][ T4392] _copy_to_user+0x31/0xb0 [ 1599.992210][ T4392] simple_read_from_buffer+0xe1/0x170 [ 1599.992237][ T4392] proc_fail_nth_read+0x1bb/0x230 [ 1599.992267][ T4392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1599.992296][ T4392] ? rw_verify_area+0x2a6/0x4d0 [ 1599.992319][ T4392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1599.992347][ T4392] vfs_read+0x20c/0xa70 [ 1599.992369][ T4392] ? fdget_pos+0x246/0x320 [ 1599.992393][ T4392] ? __pfx___mutex_lock+0x10/0x10 [ 1599.992415][ T4392] ? __pfx_vfs_read+0x10/0x10 [ 1599.992442][ T4392] ? __fget_files+0x2a/0x420 [ 1599.992465][ T4392] ? __fget_files+0x3a0/0x420 [ 1599.992503][ T4392] ? __fget_files+0x2a/0x420 [ 1599.992531][ T4392] ksys_read+0x150/0x270 [ 1599.992567][ T4392] ? __pfx_ksys_read+0x10/0x10 [ 1599.992601][ T4392] do_syscall_64+0xe2/0xf80 [ 1599.992622][ T4392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.992639][ T4392] ? trace_irq_disable+0x37/0x100 [ 1599.992662][ T4392] ? clear_bhb_loop+0x40/0x90 [ 1599.992684][ T4392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.992701][ T4392] RIP: 0033:0x7f7721b5b78e [ 1599.992718][ T4392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1599.992735][ T4392] RSP: 002b:00007f771fdf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1599.992754][ T4392] RAX: ffffffffffffffda RBX: 00007f771fdf66c0 RCX: 00007f7721b5b78e [ 1599.992768][ T4392] RDX: 000000000000000f RSI: 00007f771fdf60a0 RDI: 0000000000000005 [ 1599.992779][ T4392] RBP: 00007f771fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1599.992792][ T4392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.992802][ T4392] R13: 00007f7721e16038 R14: 00007f7721e15fa0 R15: 00007ffcc4b260a8 [ 1599.992829][ T4392] [ 1600.212053][ T5942] m920x_read = error: -19 [ 1600.216437][ T5942] dvb-usb: error while querying for an remote control event. [ 1600.279656][T22563] usb 1-1: device descriptor read/64, error -71 [ 1600.327719][ T5942] m920x_read = error: -19 [ 1600.333180][ T5942] dvb-usb: error while querying for an remote control event. [ 1600.457748][ T5942] m920x_read = error: -19 [ 1600.466637][ T5942] dvb-usb: error while querying for an remote control event. [ 1600.522299][ T4406] netlink: 'syz.3.10768': attribute type 29 has an invalid length. [ 1600.534439][ T4406] netlink: 'syz.3.10768': attribute type 29 has an invalid length. [ 1600.543610][T22563] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1600.553217][ T4406] netlink: 500 bytes leftover after parsing attributes in process `syz.3.10768'. [ 1600.578217][ T5942] m920x_read = error: -19 [ 1600.582649][ T5942] dvb-usb: error while querying for an remote control event. [ 1600.677683][T22563] usb 1-1: device descriptor read/64, error -71 [ 1600.707654][ T5942] m920x_read = error: -19 [ 1600.716701][ T5942] dvb-usb: error while querying for an remote control event. [ 1600.749947][ T4411] syzkaller1: entered promiscuous mode [ 1600.755727][ T4411] syzkaller1: entered allmulticast mode [ 1600.780834][ T4414] FAULT_INJECTION: forcing a failure. [ 1600.780834][ T4414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1600.794456][T22563] usb usb1-port1: attempt power cycle [ 1600.801799][ T4414] CPU: 0 UID: 0 PID: 4414 Comm: syz.4.10771 Tainted: G L syzkaller #0 PREEMPT(full) [ 1600.801834][ T4414] Tainted: [L]=SOFTLOCKUP [ 1600.801841][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1600.801852][ T4414] Call Trace: [ 1600.801858][ T4414] [ 1600.801866][ T4414] dump_stack_lvl+0xe8/0x150 [ 1600.801891][ T4414] should_fail_ex+0x412/0x560 [ 1600.801917][ T4414] _copy_from_user+0x2d/0xb0 [ 1600.801935][ T4414] ___sys_sendmsg+0x1c6/0x360 [ 1600.801956][ T4414] ? __lock_acquire+0x6b5/0x2cf0 [ 1600.801977][ T4414] ? __pfx____sys_sendmsg+0x10/0x10 [ 1600.802024][ T4414] ? __fget_files+0x2a/0x420 [ 1600.802042][ T4414] ? __fget_files+0x3a0/0x420 [ 1600.802068][ T4414] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1600.802091][ T4414] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1600.802120][ T4414] ? __pfx_ksys_write+0x10/0x10 [ 1600.802150][ T4414] do_syscall_64+0xe2/0xf80 [ 1600.802169][ T4414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.802185][ T4414] ? trace_irq_disable+0x37/0x100 [ 1600.802208][ T4414] ? clear_bhb_loop+0x40/0x90 [ 1600.802230][ T4414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.802246][ T4414] RIP: 0033:0x7ff71379aeb9 [ 1600.802262][ T4414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.802275][ T4414] RSP: 002b:00007ff7146ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1600.802292][ T4414] RAX: ffffffffffffffda RBX: 00007ff713a15fa0 RCX: 00007ff71379aeb9 [ 1600.802304][ T4414] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000003 [ 1600.802314][ T4414] RBP: 00007ff7146ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.802324][ T4414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1600.802334][ T4414] R13: 00007ff713a16038 R14: 00007ff713a15fa0 R15: 00007ffd48cdfe68 [ 1600.802358][ T4414] [ 1600.997850][ T5981] m920x_read = error: -19 [ 1601.002272][ T5981] dvb-usb: error while querying for an remote control event. [ 1601.118016][ T5942] m920x_read = error: -19 [ 1601.122454][ T5942] dvb-usb: error while querying for an remote control event. [ 1601.137613][ T5981] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1601.179793][ T4421] input: syz1 as /devices/virtual/input/input132 [ 1601.198092][ T4421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10773'. [ 1601.238115][ T5942] m920x_read = error: -19 [ 1601.242714][ T5942] dvb-usb: error while querying for an remote control event. [ 1601.267541][T22563] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1601.299313][ T5981] usb 4-1: Using ep0 maxpacket: 8 [ 1601.305210][T22563] usb 1-1: device descriptor read/8, error -71 [ 1601.313245][ T5981] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1601.322447][ T5981] usb 4-1: config 52 has an invalid interface number: 171 but max is 0 [ 1601.334544][ T5981] usb 4-1: config 52 has no interface number 0 [ 1601.347632][ T5981] usb 4-1: config 52 interface 171 altsetting 7 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1601.367653][ T2885] m920x_read = error: -19 [ 1601.372067][ T2885] dvb-usb: error while querying for an remote control event. [ 1601.383288][ T5981] usb 4-1: config 52 interface 171 altsetting 7 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1601.394964][ T5981] usb 4-1: No eUSB2 isoc ep 135 companion for config 52 interface 171 altsetting 7 [ 1601.404760][ T5981] usb 4-1: config 52 interface 171 has no altsetting 0 [ 1601.414245][ T5981] usb 4-1: New USB device found, idVendor=12d1, idProduct=a481, bcdDevice=cc.a3 [ 1601.426590][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.435224][ T5981] usb 4-1: Product: syz [ 1601.439700][ T5981] usb 4-1: Manufacturer: syz [ 1601.444324][ T5981] usb 4-1: SerialNumber: syz [ 1601.489394][ T2885] m920x_read = error: -19 [ 1601.493850][ T2885] dvb-usb: error while querying for an remote control event. [ 1601.547586][T22563] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1601.573057][T22563] usb 1-1: device descriptor read/8, error -71 [ 1601.607697][ T2885] m920x_read = error: -19 [ 1601.612119][ T2885] dvb-usb: error while querying for an remote control event. [ 1601.689187][ T5981] option 4-1:52.171: GSM modem (1-port) converter detected [ 1601.698257][T22563] usb usb1-port1: unable to enumerate USB device [ 1601.712381][ T5981] usb 4-1: USB disconnect, device number 78 [ 1601.732710][ T5981] option 4-1:52.171: device disconnected [ 1601.740421][T22563] m920x_read = error: -19 [ 1601.744801][T22563] dvb-usb: error while querying for an remote control event. [ 1601.877612][T22563] m920x_read = error: -19 [ 1601.882114][T22563] dvb-usb: error while querying for an remote control event. [ 1601.997756][ T5981] m920x_read = error: -19 [ 1602.002192][ T5981] dvb-usb: error while querying for an remote control event. [ 1602.117748][ T5981] m920x_read = error: -19 [ 1602.122175][ T5981] dvb-usb: error while querying for an remote control event. [ 1602.237651][ T5981] m920x_read = error: -19 [ 1602.242052][ T5981] dvb-usb: error while querying for an remote control event. [ 1602.257663][ T801] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1602.357714][ T5981] m920x_read = error: -19 [ 1602.362117][ T5981] dvb-usb: error while querying for an remote control event. [ 1602.419591][ T801] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1602.432522][ T801] usb 5-1: not running at top speed; connect to a high speed hub [ 1602.433528][ T801] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 1602.433556][ T801] usb 5-1: config 1 has no interface number 0 [ 1602.433600][ T801] usb 5-1: config 1 interface 138 has no altsetting 0 [ 1602.435528][ T801] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1602.435556][ T801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.435577][ T801] usb 5-1: Product: syz [ 1602.435592][ T801] usb 5-1: Manufacturer: syz [ 1602.435608][ T801] usb 5-1: SerialNumber: syz [ 1602.513274][T22563] m920x_read = error: -19 [ 1602.513305][T22563] dvb-usb: error while querying for an remote control event. [ 1602.617935][T22563] m920x_read = error: -19 [ 1602.622482][T22563] dvb-usb: error while querying for an remote control event. [ 1602.667186][ T4439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.690103][ T4439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.730090][ T801] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1602.737590][T22563] m920x_read = error: -19 [ 1602.742049][T22563] dvb-usb: error while querying for an remote control event. [ 1602.867626][ T5981] m920x_read = error: -19 [ 1602.872056][ T5981] dvb-usb: error while querying for an remote control event. [ 1602.925871][ T801] usb 5-1: USB disconnect, device number 97 [ 1602.988249][ T5981] m920x_read = error: -19 [ 1603.000006][ T5981] dvb-usb: error while querying for an remote control event. [ 1603.017732][ T4460] binder: 4459:4460 unknown command 0 [ 1603.031280][ T4460] binder: 4459:4460 ioctl c0306201 200000000080 returned -22 [ 1603.087493][ C1] net_ratelimit: 13 callbacks suppressed [ 1603.087511][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1603.127550][ T5981] m920x_read = error: -19 [ 1603.131943][ T5981] dvb-usb: error while querying for an remote control event. [ 1603.132133][T22610] udevd[22610]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.138/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1603.167507][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1603.264041][ T4466] FAULT_INJECTION: forcing a failure. [ 1603.264041][ T4466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1603.277263][ T5981] m920x_read = error: -19 [ 1603.283716][ T5981] dvb-usb: error while querying for an remote control event. [ 1603.306341][ T4466] CPU: 1 UID: 0 PID: 4466 Comm: syz.2.10791 Tainted: G L syzkaller #0 PREEMPT(full) [ 1603.306373][ T4466] Tainted: [L]=SOFTLOCKUP [ 1603.306381][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1603.306395][ T4466] Call Trace: [ 1603.306403][ T4466] [ 1603.306413][ T4466] dump_stack_lvl+0xe8/0x150 [ 1603.306445][ T4466] should_fail_ex+0x412/0x560 [ 1603.306480][ T4466] _copy_to_user+0x31/0xb0 [ 1603.306514][ T4466] simple_read_from_buffer+0xe1/0x170 [ 1603.306542][ T4466] proc_fail_nth_read+0x1bb/0x230 [ 1603.306578][ T4466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1603.306613][ T4466] ? rw_verify_area+0x2a6/0x4d0 [ 1603.306641][ T4466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1603.306675][ T4466] vfs_read+0x20c/0xa70 [ 1603.306702][ T4466] ? fdget_pos+0x246/0x320 [ 1603.306733][ T4466] ? __pfx___mutex_lock+0x10/0x10 [ 1603.306759][ T4466] ? __pfx_vfs_read+0x10/0x10 [ 1603.306789][ T4466] ? __fget_files+0x2a/0x420 [ 1603.306818][ T4466] ? __fget_files+0x3a0/0x420 [ 1603.306842][ T4466] ? __fget_files+0x2a/0x420 [ 1603.306876][ T4466] ksys_read+0x150/0x270 [ 1603.306907][ T4466] ? __pfx_ksys_read+0x10/0x10 [ 1603.306948][ T4466] do_syscall_64+0xe2/0xf80 [ 1603.306972][ T4466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.306994][ T4466] ? trace_irq_disable+0x37/0x100 [ 1603.307020][ T4466] ? clear_bhb_loop+0x40/0x90 [ 1603.307046][ T4466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.307068][ T4466] RIP: 0033:0x7f7721b5b78e [ 1603.307087][ T4466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1603.307106][ T4466] RSP: 002b:00007f771fdf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1603.307139][ T4466] RAX: ffffffffffffffda RBX: 00007f771fdf66c0 RCX: 00007f7721b5b78e [ 1603.307155][ T4466] RDX: 000000000000000f RSI: 00007f771fdf60a0 RDI: 0000000000000004 [ 1603.307191][ T4466] RBP: 00007f771fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.307205][ T4466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.307223][ T4466] R13: 00007f7721e16038 R14: 00007f7721e15fa0 R15: 00007ffcc4b260a8 [ 1603.307259][ T4466] [ 1603.348404][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 1603.531972][ T5981] m920x_read = error: -19 [ 1603.536372][ T5981] dvb-usb: error while querying for an remote control event. [ 1603.647532][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1603.680551][T22563] m920x_read = error: -19 [ 1603.685077][T22563] dvb-usb: error while querying for an remote control event. [ 1603.801323][T22563] m920x_read = error: -19 [ 1603.805776][T22563] dvb-usb: error while querying for an remote control event. [ 1603.928075][ T5981] m920x_read = error: -19 [ 1603.932560][ T5981] dvb-usb: error while querying for an remote control event. [ 1604.047638][ T5981] m920x_read = error: -19 [ 1604.053881][ T5981] dvb-usb: error while querying for an remote control event. [ 1604.127510][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1604.177754][ T5981] m920x_read = error: -19 [ 1604.182220][ T5981] dvb-usb: error while querying for an remote control event. [ 1604.199459][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10806'. [ 1604.207709][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1604.210310][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10806'. [ 1604.225631][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10806'. [ 1604.308435][T22563] m920x_read = error: -19 [ 1604.313128][T22563] dvb-usb: error while querying for an remote control event. [ 1604.427673][ T5942] m920x_read = error: -19 [ 1604.432064][ T5942] dvb-usb: error while querying for an remote control event. [ 1604.537586][T22563] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1604.547677][ T5981] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1604.555541][ T5942] m920x_read = error: -19 [ 1604.560314][ T5942] dvb-usb: error while querying for an remote control event. [ 1604.677660][ T5942] m920x_read = error: -19 [ 1604.682730][ T5942] dvb-usb: error while querying for an remote control event. [ 1604.690400][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1604.697818][ T5981] usb 5-1: device descriptor read/64, error -71 [ 1604.710214][T22563] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1604.718642][T22563] usb 4-1: config 0 has no interface number 0 [ 1604.724858][T22563] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1604.739677][T22563] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1604.749811][T22563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.759393][T22563] usb 4-1: Product: syz [ 1604.763659][T22563] usb 4-1: Manufacturer: syz [ 1604.768785][T22563] usb 4-1: SerialNumber: syz [ 1604.776676][T22563] usb 4-1: config 0 descriptor?? [ 1604.783888][ T4506] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1604.792948][T22563] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1604.804355][T22563] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1604.812528][ T5942] m920x_read = error: -19 [ 1604.816914][ T5942] dvb-usb: error while querying for an remote control event. [ 1604.937631][ T5942] m920x_read = error: -19 [ 1604.942455][ T5942] dvb-usb: error while querying for an remote control event. [ 1604.950073][ T5981] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1605.001021][ T4517] openvswitch: netlink: Missing valid actions attribute. [ 1605.029609][ T4517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1605.078755][ T5942] m920x_read = error: -19 [ 1605.083194][ T5942] dvb-usb: error while querying for an remote control event. [ 1605.097689][ T5981] usb 5-1: device descriptor read/64, error -71 [ 1605.167489][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1605.198730][ T5942] m920x_read = error: -19 [ 1605.203270][ T5942] dvb-usb: error while querying for an remote control event. [ 1605.213824][ T5981] usb usb5-port1: attempt power cycle [ 1605.229265][T22563] scsi host1: usb-storage 4-1:0.20 [ 1605.247553][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1605.258456][T22563] usb 4-1: USB disconnect, device number 79 [ 1605.327966][ T5836] m920x_read = error: -19 [ 1605.332399][ T5836] dvb-usb: error while querying for an remote control event. [ 1605.358127][ T5942] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1605.477630][ T2885] m920x_read = error: -19 [ 1605.482067][ T2885] dvb-usb: error while querying for an remote control event. [ 1605.527503][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 1605.534955][ T5942] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1605.544509][ T5942] usb 1-1: config 2 has no interface number 0 [ 1605.555395][ T5942] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1605.567564][ T5981] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1605.575617][ T5942] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1605.598101][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.606183][ T5942] usb 1-1: Product: syz [ 1605.617590][T22563] m920x_read = error: -19 [ 1605.622315][T22563] dvb-usb: error while querying for an remote control event. [ 1605.630555][ T5981] usb 5-1: device descriptor read/8, error -71 [ 1605.647237][ T5942] usb 1-1: Manufacturer: syz [ 1605.657382][ T5942] usb 1-1: SerialNumber: syz [ 1605.746866][ T4537] netlink: 'syz.3.10818': attribute type 10 has an invalid length. [ 1605.767774][ T4537] netlink: 2 bytes leftover after parsing attributes in process `syz.3.10818'. [ 1605.783156][T22563] m920x_read = error: -19 [ 1605.788086][T22563] dvb-usb: error while querying for an remote control event. [ 1605.850117][ T4539] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1605.856707][ T4539] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1605.868938][ T4539] vhci_hcd vhci_hcd.0: Device attached [ 1605.880392][ T4540] vhci_hcd: connection closed [ 1605.880739][ T37] vhci_hcd vhci_hcd.3: stop threads [ 1605.888600][ T5981] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1605.908416][ T37] vhci_hcd vhci_hcd.3: release socket [ 1605.914263][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 1605.915459][T22563] m920x_read = error: -19 [ 1605.928246][ T5981] usb 5-1: device descriptor read/8, error -71 [ 1605.934519][T22563] dvb-usb: error while querying for an remote control event. [ 1606.039365][ T5981] usb usb5-port1: unable to enumerate USB device [ 1606.057762][ T5981] m920x_read = error: -19 [ 1606.068114][ T5981] dvb-usb: error while querying for an remote control event. [ 1606.077866][ T4521] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10812'. [ 1606.117822][ T5942] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1606.149406][ T5942] usb 1-1: USB disconnect, device number 57 [ 1606.199614][ T5981] m920x_read = error: -19 [ 1606.204044][ T5981] dvb-usb: error while querying for an remote control event. [ 1606.318597][ T5981] m920x_read = error: -19 [ 1606.323817][ T5981] dvb-usb: error while querying for an remote control event. [ 1606.437584][ T5981] m920x_read = error: -19 [ 1606.441981][ T5981] dvb-usb: error while querying for an remote control event. [ 1606.460784][ T4553] loop2: detected capacity change from 0 to 7 [ 1606.468091][ T4553] Dev loop2: unable to read RDB block 7 [ 1606.474446][ T4553] loop2: AHDI p1 p2 p3 p4 [ 1606.479007][ T4553] loop2: partition table partially beyond EOD, truncated [ 1606.486233][ T4553] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1606.496069][ T4553] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1606.503258][ T4553] loop2: p3 start 16777215 is beyond EOD, truncated [ 1606.557605][ T5981] m920x_read = error: -19 [ 1606.564407][ T5981] dvb-usb: error while querying for an remote control event. [ 1606.690455][ T5942] m920x_read = error: -19 [ 1606.696155][ T5942] dvb-usb: error while querying for an remote control event. [ 1606.817710][ T5942] m920x_read = error: -19 [ 1606.822157][ T5942] dvb-usb: error while querying for an remote control event. [ 1606.937749][T22563] m920x_read = error: -19 [ 1606.942170][T22563] dvb-usb: error while querying for an remote control event. [ 1607.067614][T22563] m920x_read = error: -19 [ 1607.076098][T22563] dvb-usb: error while querying for an remote control event. [ 1607.198458][T22563] m920x_read = error: -19 [ 1607.202866][T22563] dvb-usb: error while querying for an remote control event. [ 1607.277868][ T29] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1607.357621][ T5981] m920x_read = error: -19 [ 1607.362294][ T5981] dvb-usb: error while querying for an remote control event. [ 1607.413740][ T4589] netlink: 'syz.2.10838': attribute type 23 has an invalid length. [ 1607.437603][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 1607.444512][ T29] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.456195][ T29] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.468529][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1607.478867][ T29] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1607.487685][T22563] m920x_read = error: -19 [ 1607.497174][T22563] dvb-usb: error while querying for an remote control event. [ 1607.509244][ T29] usb 4-1: Product: syz [ 1607.520033][ T29] usb 4-1: Manufacturer: syz [ 1607.549952][ T29] hub 4-1:4.0: USB hub found [ 1607.617597][ T5981] m920x_read = error: -19 [ 1607.622039][ T5981] dvb-usb: error while querying for an remote control event. [ 1607.742622][ T29] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 1607.748668][ T5942] m920x_read = error: -19 [ 1607.754704][ T5942] dvb-usb: error while querying for an remote control event. [ 1607.754706][ T30] audit: type=1800 audit(2000000046.990:484): pid=4599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10843" name="bus" dev="tmpfs" ino=1947 res=0 errno=0 [ 1607.787329][ T4599] overlayfs: overlapping lowerdir path [ 1607.817552][T22563] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1607.867810][ T5942] m920x_read = error: -19 [ 1607.873220][ T5942] dvb-usb: error while querying for an remote control event. [ 1607.911279][ T4604] comedi comedi2: comedi_config --init_data is deprecated [ 1607.987589][ T5942] m920x_read = error: -19 [ 1607.987656][ T5942] dvb-usb: error while querying for an remote control event. [ 1607.987854][ T4606] FAULT_INJECTION: forcing a failure. [ 1607.987854][ T4606] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.987887][ T4606] CPU: 0 UID: 0 PID: 4606 Comm: syz.0.10846 Tainted: G L syzkaller #0 PREEMPT(full) [ 1607.987913][ T4606] Tainted: [L]=SOFTLOCKUP [ 1607.987920][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1607.987932][ T4606] Call Trace: [ 1607.987940][ T4606] [ 1607.987949][ T4606] dump_stack_lvl+0xe8/0x150 [ 1607.987991][ T4606] should_fail_ex+0x412/0x560 [ 1607.988025][ T4606] should_failslab+0xa8/0x100 [ 1607.988047][ T4606] __kmalloc_cache_noprof+0x88/0x660 [ 1607.988077][ T4606] ? vkms_plane_duplicate_state+0x8d/0x110 [ 1607.988103][ T4606] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1607.988137][ T4606] vkms_plane_duplicate_state+0x8d/0x110 [ 1607.988166][ T4606] drm_atomic_get_plane_state+0x25a/0x670 [ 1607.988209][ T4606] drm_client_modeset_commit_atomic+0x227/0x7e0 [ 1607.988249][ T4606] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1607.988298][ T4606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1607.988329][ T4606] ? queue_work_on+0x159/0x1d0 [ 1607.988359][ T4606] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 1607.988389][ T4606] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 1607.988438][ T4606] fb_pan_display+0x39e/0x680 [ 1607.988463][ T4606] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 1607.988501][ T4606] bit_update_start+0x4c/0x1e0 [ 1607.988529][ T4606] fbcon_switch+0x127e/0x2040 [ 1607.988570][ T4606] ? __pfx_fbcon_switch+0x10/0x10 [ 1607.988611][ T4606] ? __pfx_hide_cursor+0x10/0x10 [ 1607.988643][ T4606] ? is_console_locked+0x9/0x20 [ 1607.988671][ T4606] ? set_origin+0x346/0x480 [ 1607.988700][ T4606] csi_J+0x6c4/0xe50 [ 1607.988737][ T4606] do_con_write+0x4243/0x5310 [ 1607.988824][ T4606] ? __pfx_do_con_write+0x10/0x10 [ 1607.988843][ T4606] ? trace_contention_end+0x39/0x100 [ 1607.988872][ T4606] ? __mutex_lock+0x319/0x1300 [ 1607.988905][ T4606] ? n_tty_write+0xe8c/0x12a0 [ 1607.988932][ T4606] ? n_tty_write+0x6ae/0x12a0 [ 1607.988954][ T4606] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1607.988991][ T4606] ? __pfx___mutex_lock+0x10/0x10 [ 1607.989017][ T4606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1607.989047][ T4606] ? fbcon_cursor+0x4ce/0x700 [ 1607.989074][ T4606] con_write+0x27/0x290 [ 1607.989096][ T4606] n_tty_write+0xd84/0x12a0 [ 1607.989146][ T4606] ? __pfx_n_tty_write+0x10/0x10 [ 1607.989171][ T4606] ? __pfx_woken_wake_function+0x10/0x10 [ 1607.989194][ T4606] ? rcu_is_watching+0x15/0xb0 [ 1607.989221][ T4606] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1607.989252][ T4606] ? __pfx_n_tty_write+0x10/0x10 [ 1607.989276][ T4606] file_tty_write+0x559/0xa20 [ 1607.989318][ T4606] vfs_write+0x61d/0xb90 [ 1607.989361][ T4606] ? __pfx_vfs_write+0x10/0x10 [ 1607.989391][ T4606] ? __fget_files+0x2a/0x420 [ 1607.989416][ T4606] ksys_write+0x150/0x270 [ 1607.989439][ T4606] ? __pfx_ksys_write+0x10/0x10 [ 1607.989469][ T4606] do_syscall_64+0xe2/0xf80 [ 1607.989486][ T4606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.989501][ T4606] ? clear_bhb_loop+0x40/0x90 [ 1607.989520][ T4606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.989534][ T4606] RIP: 0033:0x7f1b9b39aeb9 [ 1607.989548][ T4606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.989560][ T4606] RSP: 002b:00007f1b9c171028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1607.989575][ T4606] RAX: ffffffffffffffda RBX: 00007f1b9b615fa0 RCX: 00007f1b9b39aeb9 [ 1607.989586][ T4606] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 1607.989595][ T4606] RBP: 00007f1b9c171090 R08: 0000000000000000 R09: 0000000000000000 [ 1607.989604][ T4606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1607.989613][ T4606] R13: 00007f1b9b616038 R14: 00007f1b9b615fa0 R15: 00007ffd3464d7d8 [ 1607.989638][ T4606] [ 1608.004161][T22563] usb 5-1: Using ep0 maxpacket: 16 [ 1608.052080][T22563] usb 5-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 1608.052135][T22563] usb 5-1: config 0 interface 0 altsetting 94 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 1608.052165][T22563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1608.072611][T22563] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1608.072635][T22563] usb 5-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 1608.072651][T22563] usb 5-1: Product: syz [ 1608.081221][T22563] usb 5-1: config 0 descriptor?? [ 1608.098766][ T5942] m920x_read = error: -19 [ 1608.098819][ T5942] dvb-usb: error while querying for an remote control event. [ 1608.099006][ T5981] usb 4-1: USB disconnect, device number 80 [ 1608.212590][ T5981] m920x_read = error: -19 [ 1608.212633][ T5981] dvb-usb: error while querying for an remote control event. [ 1608.287506][ C1] net_ratelimit: 9 callbacks suppressed [ 1608.287524][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1608.288888][T22563] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1608.289530][T22563] gspca_spca501: reg write: error -71 [ 1608.289548][T22563] spca501 5-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 1608.289641][T22563] spca501 5-1:0.0: probe with driver spca501 failed with error -22 [ 1608.291734][T22563] usb 5-1: USB disconnect, device number 102 [ 1608.317653][ T5981] m920x_read = error: -19 [ 1608.317682][ T5981] dvb-usb: error while querying for an remote control event. [ 1608.382453][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1608.433687][ T5981] m920x_read = error: -19 [ 1608.433713][ T5981] dvb-usb: error while querying for an remote control event. [ 1608.537766][T22563] m920x_read = error: -19 [ 1608.537795][T22563] dvb-usb: error while querying for an remote control event. [ 1608.649119][ T5942] m920x_read = error: -19 [ 1608.649150][ T5942] dvb-usb: error while querying for an remote control event. [ 1608.757603][ T5942] m920x_read = error: -19 [ 1608.762161][ T5942] dvb-usb: error while querying for an remote control event. [ 1608.847570][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1608.887690][ T5981] m920x_read = error: -19 [ 1608.892095][ T5981] dvb-usb: error while querying for an remote control event. [ 1608.907555][ T5942] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1609.009426][ T4619] tipc: Started in network mode [ 1609.014468][ T4619] tipc: Node identity ac1414aa, cluster identity 4711 [ 1609.017990][ T5981] m920x_read = error: -19 [ 1609.023055][ T4619] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1609.026280][ T5981] dvb-usb: error while querying for an remote control event. [ 1609.033401][ T4619] tipc: Enabled bearer , priority 10 [ 1609.122236][ T5942] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1609.130829][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.142210][ T5942] usb 4-1: config 0 has no interface number 0 [ 1609.152391][ T5942] usb 4-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 43 [ 1609.167709][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1609.181732][ T5942] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1609.217692][ T5942] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1609.226819][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.235355][ T5981] m920x_read = error: -19 [ 1609.240305][ T5981] dvb-usb: error while querying for an remote control event. [ 1609.279686][ T5942] usb 4-1: config 0 descriptor?? [ 1609.287177][ T4610] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1609.307490][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1609.327490][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1609.369622][ T5981] m920x_read = error: -19 [ 1609.374031][ T5981] dvb-usb: error while querying for an remote control event. [ 1609.391782][ T5942] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1609.407509][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1609.447493][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1609.536079][ T4610] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 1609.544517][ T5942] m920x_read = error: -19 [ 1609.549368][ T5942] dvb-usb: error while querying for an remote control event. [ 1609.590279][T30768] usb 4-1: Failed to submit usb control message: -71 [ 1609.600600][ T5942] usb 4-1: USB disconnect, device number 81 [ 1609.609743][T30768] usb 4-1: unable to send the bmi data to the device: -71 [ 1609.616926][T30768] usb 4-1: unable to get target info from device [ 1609.631825][T30768] usb 4-1: could not get target info (-71) [ 1609.638444][T30768] usb 4-1: could not probe fw (-71) [ 1609.664532][ T5981] m920x_read = error: -19 [ 1609.669485][ T5981] dvb-usb: error while querying for an remote control event. [ 1609.787966][ T5981] m920x_read = error: -19 [ 1609.792526][ T5981] dvb-usb: error while querying for an remote control event. [ 1609.807990][ T1148] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1609.815564][ T1148] Bluetooth: hci0: command 0x0c1a tx timeout [ 1609.902907][ T4647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10863'. [ 1609.912316][ T5942] m920x_read = error: -19 [ 1609.916698][ T5942] dvb-usb: error while querying for an remote control event. [ 1610.029464][ T5942] m920x_read = error: -19 [ 1610.033969][ T5942] dvb-usb: error while querying for an remote control event. [ 1610.093906][ T4653] fuse: Unknown parameter '' [ 1610.148312][ T24] tipc: Node number set to 2886997162 [ 1610.160115][ T5942] m920x_read = error: -19 [ 1610.164524][ T5942] dvb-usb: error while querying for an remote control event. [ 1610.232890][ T4655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10867'. [ 1610.317575][ T5942] m920x_read = error: -19 [ 1610.322185][ T5942] dvb-usb: error while querying for an remote control event. [ 1610.437598][ T5942] m920x_read = error: -19 [ 1610.445419][ T5942] dvb-usb: error while querying for an remote control event. [ 1610.567592][ T5942] m920x_read = error: -19 [ 1610.573366][ T5942] dvb-usb: error while querying for an remote control event. [ 1610.699036][ T5981] m920x_read = error: -19 [ 1610.703486][ T5981] dvb-usb: error while querying for an remote control event. [ 1610.827562][ T5981] m920x_read = error: -19 [ 1610.831976][ T5981] dvb-usb: error while querying for an remote control event. [ 1610.968718][ T5981] m920x_read = error: -19 [ 1610.973208][ T5981] dvb-usb: error while querying for an remote control event. [ 1611.004981][ T4690] FAULT_INJECTION: forcing a failure. [ 1611.004981][ T4690] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.018323][ T4690] CPU: 1 UID: 0 PID: 4690 Comm: syz.0.10879 Tainted: G L syzkaller #0 PREEMPT(full) [ 1611.018354][ T4690] Tainted: [L]=SOFTLOCKUP [ 1611.018363][ T4690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1611.018376][ T4690] Call Trace: [ 1611.018386][ T4690] [ 1611.018394][ T4690] dump_stack_lvl+0xe8/0x150 [ 1611.018429][ T4690] should_fail_ex+0x412/0x560 [ 1611.018465][ T4690] should_failslab+0xa8/0x100 [ 1611.018490][ T4690] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1611.018523][ T4690] ? __alloc_skb+0x1d0/0x7d0 [ 1611.018548][ T4690] ? __local_bh_enable_ip+0xd0/0x130 [ 1611.018578][ T4690] __alloc_skb+0x1d0/0x7d0 [ 1611.018603][ T4690] ? netlink_ack_tlv_len+0x6c/0x210 [ 1611.018630][ T4690] netlink_ack+0x146/0xa50 [ 1611.018651][ T4690] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1611.018680][ T4690] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1611.018712][ T4690] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1611.018745][ T4690] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1611.018773][ T4690] ? do_syscall_64+0xe2/0xf80 [ 1611.018807][ T4690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.018839][ T4690] netlink_rcv_skb+0x2b6/0x4b0 [ 1611.018864][ T4690] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1611.018897][ T4690] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1611.018918][ T4690] ? genl_rcv+0x19/0x40 [ 1611.018964][ T4690] ? down_read+0x272/0x2e0 [ 1611.018990][ T4690] ? genl_rcv+0xd/0x40 [ 1611.019022][ T4690] genl_rcv+0x28/0x40 [ 1611.019050][ T4690] netlink_unicast+0x80f/0x9b0 [ 1611.019082][ T4690] ? __pfx_netlink_unicast+0x10/0x10 [ 1611.019107][ T4690] ? netlink_sendmsg+0x650/0xb40 [ 1611.019130][ T4690] ? skb_put+0x11b/0x210 [ 1611.019161][ T4690] netlink_sendmsg+0x813/0xb40 [ 1611.019196][ T4690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1611.019224][ T4690] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1611.019258][ T4690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1611.019283][ T4690] sock_sendmsg_nosec+0x18f/0x1d0 [ 1611.019309][ T4690] ____sys_sendmsg+0x589/0x8c0 [ 1611.019337][ T4690] ? __might_fault+0xaf/0x130 [ 1611.019370][ T4690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1611.019410][ T4690] ? import_iovec+0x73/0xa0 [ 1611.019436][ T4690] ___sys_sendmsg+0x2a5/0x360 [ 1611.019465][ T4690] ? __lock_acquire+0x6b5/0x2cf0 [ 1611.019495][ T4690] ? __pfx____sys_sendmsg+0x10/0x10 [ 1611.019560][ T4690] ? __fget_files+0x2a/0x420 [ 1611.019584][ T4690] ? __fget_files+0x3a0/0x420 [ 1611.019618][ T4690] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1611.019650][ T4690] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1611.019687][ T4690] ? __pfx_ksys_write+0x10/0x10 [ 1611.019730][ T4690] do_syscall_64+0xe2/0xf80 [ 1611.019754][ T4690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.019775][ T4690] ? trace_irq_disable+0x37/0x100 [ 1611.019812][ T4690] ? clear_bhb_loop+0x40/0x90 [ 1611.019838][ T4690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.019860][ T4690] RIP: 0033:0x7f1b9b39aeb9 [ 1611.019880][ T4690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.019898][ T4690] RSP: 002b:00007f1b9c171028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1611.019921][ T4690] RAX: ffffffffffffffda RBX: 00007f1b9b615fa0 RCX: 00007f1b9b39aeb9 [ 1611.019937][ T4690] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1611.019951][ T4690] RBP: 00007f1b9c171090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.019964][ T4690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1611.019978][ T4690] R13: 00007f1b9b616038 R14: 00007f1b9b615fa0 R15: 00007ffd3464d7d8 [ 1611.020011][ T4690] [ 1611.022088][ T4689] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1611.095673][ T5981] m920x_read = error: -19 [ 1611.188564][ T4692] netlink: 'syz.4.10880': attribute type 2 has an invalid length. [ 1611.385142][ T5981] dvb-usb: error while querying for an remote control event. [ 1611.438935][ T4694] tipc: Enabling of bearer rejected, already enabled [ 1611.527692][ T5981] m920x_read = error: -19 [ 1611.532104][ T5981] dvb-usb: error while querying for an remote control event. [ 1611.648300][ T5981] m920x_read = error: -19 [ 1611.652831][ T5981] dvb-usb: error while querying for an remote control event. [ 1611.767772][ T5981] m920x_read = error: -19 [ 1611.772320][ T5981] dvb-usb: error while querying for an remote control event. [ 1611.888362][ T5942] m920x_read = error: -19 [ 1611.892806][ T5942] dvb-usb: error while querying for an remote control event. [ 1611.989399][ T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1612.010805][ T5942] m920x_read = error: -19 [ 1612.015205][ T5942] dvb-usb: error while querying for an remote control event. [ 1612.137945][T22563] m920x_read = error: -19 [ 1612.137976][T22563] dvb-usb: error while querying for an remote control event. [ 1612.148649][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1612.165146][ T24] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 1612.165168][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.165182][ T24] usb 3-1: config 0 has no interface number 0 [ 1612.165208][ T24] usb 3-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1612.165238][ T24] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1612.165255][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.167366][ T24] usb 3-1: config 0 descriptor?? [ 1612.203050][ T5942] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1612.213479][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1612.219432][ T4730] netlink: 'syz.4.10893': attribute type 10 has an invalid length. [ 1612.250785][ T5981] m920x_read = error: -19 [ 1612.250814][ T5981] dvb-usb: error while querying for an remote control event. [ 1612.357100][ T5942] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 1612.394140][ T5981] m920x_read = error: -19 [ 1612.394166][ T5981] dvb-usb: error while querying for an remote control event. [ 1612.461933][ T24] snd-usb-audio 3-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 1612.471596][ T5942] usb 1-1: config 0 has no interface number 0 [ 1612.475986][ T24] usb 3-1: USB disconnect, device number 69 [ 1612.489440][ T5942] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=a2.ec [ 1612.489472][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.489495][ T5942] usb 1-1: Product: syz [ 1612.489512][ T5942] usb 1-1: Manufacturer: syz [ 1612.489529][ T5942] usb 1-1: SerialNumber: syz [ 1612.499235][T22563] m920x_read = error: -19 [ 1612.499271][T22563] dvb-usb: error while querying for an remote control event. [ 1612.518573][ T5942] usb 1-1: config 0 descriptor?? [ 1612.529921][ T5942] redrat3 1-1:0.50: Couldn't find all endpoints [ 1612.608313][ T5942] m920x_read = error: -19 [ 1612.608344][ T5942] dvb-usb: error while querying for an remote control event. [ 1612.705279][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.713401][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.720531][ T5942] m920x_read = error: -19 [ 1612.725503][ T5942] dvb-usb: error while querying for an remote control event. [ 1612.787400][ T4739] syzkaller1: entered promiscuous mode [ 1612.793486][ T4739] syzkaller1: entered allmulticast mode [ 1612.858560][ T5942] m920x_read = error: -19 [ 1612.863038][ T5942] dvb-usb: error while querying for an remote control event. [ 1612.977721][T22563] m920x_read = error: -19 [ 1612.982178][T22563] dvb-usb: error while querying for an remote control event. [ 1613.097612][T22563] m920x_read = error: -19 [ 1613.102017][T22563] dvb-usb: error while querying for an remote control event. [ 1613.135644][ T4747] kernel profiling enabled (shift: 6) [ 1613.227606][T22563] m920x_read = error: -19 [ 1613.232252][T22563] dvb-usb: error while querying for an remote control event. [ 1613.247549][ T5942] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1613.347622][T22563] m920x_read = error: -19 [ 1613.352069][T22563] dvb-usb: error while querying for an remote control event. [ 1613.397590][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 1613.407792][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1613.408078][ T5942] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1613.426070][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.434451][ T5942] usb 4-1: Product: syz [ 1613.439141][ T5942] usb 4-1: Manufacturer: syz [ 1613.443770][ T5942] usb 4-1: SerialNumber: syz [ 1613.451921][ T5942] usb 4-1: config 0 descriptor?? [ 1613.461057][ T5942] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1613.468280][T22563] m920x_read = error: -19 [ 1613.472659][T22563] dvb-usb: error while querying for an remote control event. [ 1613.487690][ C1] net_ratelimit: 22 callbacks suppressed [ 1613.487709][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1613.567515][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1613.577596][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1613.584680][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1613.588125][T22563] m920x_read = error: -19 [ 1613.597081][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1613.601836][T22563] dvb-usb: error while querying for an remote control event. [ 1613.611672][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1613.627396][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1613.637544][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1613.648973][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1613.658504][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.676865][ T24] usb 3-1: config 0 descriptor?? [ 1613.699665][T32660] Bluetooth: hci1: urb ffff888031d0e900 submission failed (90) [ 1613.728167][T22563] m920x_read = error: -19 [ 1613.732832][T22563] dvb-usb: error while querying for an remote control event. [ 1613.807526][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1613.847699][T22563] m920x_read = error: -19 [ 1613.852247][T22563] dvb-usb: error while querying for an remote control event. [ 1613.866341][ T5942] gspca_topro: reg_w err -71 [ 1613.889209][ T4747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.899678][ T5942] gspca_topro: Sensor soi763a [ 1613.906522][ T4747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.918476][ T4747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.927925][ T4747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.930706][ T5942] usb 4-1: USB disconnect, device number 82 [ 1613.953815][ T29] usb 3-1: USB disconnect, device number 70 [ 1613.968483][T22563] m920x_read = error: -19 [ 1613.973563][T22563] dvb-usb: error while querying for an remote control event. [ 1614.047536][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1614.097782][T22563] m920x_read = error: -19 [ 1614.102181][T22563] dvb-usb: error while querying for an remote control event. [ 1614.207515][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1614.218419][ T5942] m920x_read = error: -19 [ 1614.222843][ T5942] dvb-usb: error while querying for an remote control event. [ 1614.337602][ T5942] m920x_read = error: -19 [ 1614.342019][ T5942] dvb-usb: error while querying for an remote control event. [ 1614.421865][ T4751] No source specified [ 1614.457651][ T5942] m920x_read = error: -19 [ 1614.462372][ T5942] dvb-usb: error while querying for an remote control event. [ 1614.526413][ T4754] overlayfs: missing 'lowerdir' [ 1614.531550][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1614.552237][ T29] usb 1-1: USB disconnect, device number 58 [ 1614.587962][T12762] m920x_read = error: -19 [ 1614.593435][T12762] dvb-usb: error while querying for an remote control event. [ 1614.607564][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1614.613337][ T4756] overlayfs: failed to resolve './file0': -2 [ 1614.709918][T12762] m920x_read = error: -19 [ 1614.724222][T12762] dvb-usb: error while querying for an remote control event. [ 1614.762423][ T4761] team0: No ports can be present during mode change [ 1614.854127][ T5942] m920x_read = error: -19 [ 1614.857678][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1614.871877][ T5942] dvb-usb: error while querying for an remote control event. [ 1614.991177][T12762] m920x_read = error: -19 [ 1614.996962][T12762] dvb-usb: error while querying for an remote control event. [ 1615.083092][ T4773] binder: 4772:4773 unknown command 0 [ 1615.088644][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1615.097335][ T4773] binder: 4772:4773 ioctl c0306201 200000000080 returned -22 [ 1615.117693][ T5942] m920x_read = error: -19 [ 1615.123087][ T5942] dvb-usb: error while querying for an remote control event. [ 1615.247626][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1615.251816][ T5942] m920x_read = error: -19 [ 1615.260019][ T5942] dvb-usb: error while querying for an remote control event. [ 1615.286547][T12762] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1615.377638][ T5942] m920x_read = error: -19 [ 1615.382367][ T5942] dvb-usb: error while querying for an remote control event. [ 1615.439776][T12762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1615.451215][T12762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1615.461695][T12762] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1615.476821][T12762] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1615.486874][T12762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.497997][ T5942] m920x_read = error: -19 [ 1615.502423][ T5942] dvb-usb: error while querying for an remote control event. [ 1615.510356][ T5981] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1615.526696][T12762] usb 3-1: config 0 descriptor?? [ 1615.627821][T22563] m920x_read = error: -19 [ 1615.632246][T22563] dvb-usb: error while querying for an remote control event. [ 1615.669311][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1615.680885][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1615.693478][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1615.703389][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1615.716483][ T5981] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1615.726106][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.734534][ T5942] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1615.745734][ T5981] usb 5-1: config 0 descriptor?? [ 1615.751029][ T2885] m920x_read = error: -19 [ 1615.755480][ T2885] dvb-usb: error while querying for an remote control event. [ 1615.837631][ T24] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1615.867749][ T2885] m920x_read = error: -19 [ 1615.872366][ T2885] dvb-usb: error while querying for an remote control event. [ 1615.888063][ T5942] usb 1-1: device descriptor read/64, error -71 [ 1615.960059][T12762] plantronics 0003:047F:FFFF.007C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1615.984401][ T4776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.988321][T12762] m920x_read = error: -19 [ 1615.997401][ T4776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1616.006280][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1616.013977][ T24] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 1616.020063][T12762] dvb-usb: error while querying for an remote control event. [ 1616.029725][ T24] usb 4-1: config 0 has no interface number 0 [ 1616.035413][ T24] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 1616.045710][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.057054][ T24] usb 4-1: Product: syz [ 1616.061633][ T24] usb 4-1: Manufacturer: syz [ 1616.066268][ T24] usb 4-1: SerialNumber: syz [ 1616.098738][ T24] usb 4-1: config 0 descriptor?? [ 1616.114253][ T24] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected [ 1616.127083][ T24] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1616.140626][ T5942] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1616.160808][T12762] m920x_read = error: -19 [ 1616.167623][T12762] dvb-usb: error while querying for an remote control event. [ 1616.234892][ T5981] plantronics 0003:047F:FFFF.007D: unbalanced collection at end of report description [ 1616.246387][ T5981] plantronics 0003:047F:FFFF.007D: parse failed [ 1616.255535][ T5981] plantronics 0003:047F:FFFF.007D: probe with driver plantronics failed with error -22 [ 1616.277757][ T5981] m920x_read = error: -19 [ 1616.277784][ T5981] dvb-usb: error while querying for an remote control event. [ 1616.297986][ T5942] usb 1-1: device descriptor read/64, error -71 [ 1616.310142][ T4792] netlink: 'syz.3.10922': attribute type 10 has an invalid length. [ 1616.331662][ T4792] mac80211_hwsim hwsim91 wlan1: entered promiscuous mode [ 1616.346932][ T4792] mac80211_hwsim hwsim91 wlan1: entered allmulticast mode [ 1616.356409][ T4792] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1616.369627][ T5981] usb 4-1: USB disconnect, device number 83 [ 1616.381701][ T5981] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1616.391740][T12762] m920x_read = error: -19 [ 1616.396123][T12762] dvb-usb: error while querying for an remote control event. [ 1616.404502][ T5981] kobil_sct 4-1:0.148: device disconnected [ 1616.410961][ T5942] usb usb1-port1: attempt power cycle [ 1616.433059][T12762] usb 5-1: USB disconnect, device number 103 [ 1616.472120][ T4771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.482891][ T4771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1616.518065][T22563] m920x_read = error: -19 [ 1616.522521][T22563] dvb-usb: error while querying for an remote control event. [ 1616.637622][T12762] m920x_read = error: -19 [ 1616.642050][T12762] dvb-usb: error while querying for an remote control event. [ 1616.757624][T12762] m920x_read = error: -19 [ 1616.762095][ T5942] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1616.769957][T12762] dvb-usb: error while querying for an remote control event. [ 1616.798264][ T5942] usb 1-1: device descriptor read/8, error -71 [ 1616.877610][T12762] m920x_read = error: -19 [ 1616.882028][T12762] dvb-usb: error while querying for an remote control event. [ 1616.997699][T12762] m920x_read = error: -19 [ 1617.002155][T12762] dvb-usb: error while querying for an remote control event. [ 1617.037624][ T5942] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1617.058228][ T5942] usb 1-1: device descriptor read/8, error -71 [ 1617.127762][T12762] m920x_read = error: -19 [ 1617.132174][T12762] dvb-usb: error while querying for an remote control event. [ 1617.168915][ T5942] usb usb1-port1: unable to enumerate USB device [ 1617.247961][ T5981] m920x_read = error: -19 [ 1617.253263][ T5981] dvb-usb: error while querying for an remote control event. [ 1617.337956][ T5942] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1617.354212][ T4811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10929'. [ 1617.377711][ T5981] m920x_read = error: -19 [ 1617.382158][ T5981] dvb-usb: error while querying for an remote control event. [ 1617.420170][ T24] usb 3-1: reset high-speed USB device number 71 using dummy_hcd [ 1617.487923][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 1617.497763][ T5981] m920x_read = error: -19 [ 1617.502351][ T5981] dvb-usb: error while querying for an remote control event. [ 1617.518225][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.532992][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.542926][ T5942] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1617.552169][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.570211][ T5942] usb 4-1: config 0 descriptor?? [ 1617.637752][T22563] m920x_read = error: -19 [ 1617.642198][T22563] dvb-usb: error while querying for an remote control event. [ 1617.757620][T22563] m920x_read = error: -19 [ 1617.762103][T22563] dvb-usb: error while querying for an remote control event. [ 1617.858031][ T5981] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1617.877591][T22563] m920x_read = error: -19 [ 1617.882022][T22563] dvb-usb: error while querying for an remote control event. [ 1617.983950][ T5942] gt683r_led 0003:1770:FF00.007E: unbalanced delimiter at end of report description [ 1617.994703][ T5942] gt683r_led 0003:1770:FF00.007E: hid parsing failed [ 1618.001627][T22563] m920x_read = error: -19 [ 1618.006470][ T5942] gt683r_led 0003:1770:FF00.007E: probe with driver gt683r_led failed with error -22 [ 1618.016594][T22563] dvb-usb: error while querying for an remote control event. [ 1618.027926][ T5981] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1618.036179][ T5981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.046676][ T5981] usb 5-1: config 0 has no interface number 0 [ 1618.055615][ T5981] usb 5-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 43 [ 1618.068067][ T5981] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1618.081937][ T5981] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1618.091120][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.107656][ T5981] usb 5-1: config 0 descriptor?? [ 1618.113645][ T4814] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 1618.127780][ T5942] m920x_read = error: -19 [ 1618.132306][ T5942] dvb-usb: error while querying for an remote control event. [ 1618.142790][ T5981] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1618.185198][ T5942] usb 4-1: USB disconnect, device number 84 [ 1618.267777][T12762] m920x_read = error: -19 [ 1618.272383][T12762] dvb-usb: error while querying for an remote control event. [ 1618.340458][ T347] usb 5-1: USB disconnect, device number 104 [ 1618.343803][ T9628] usb 5-1: Failed to submit usb control message: -71 [ 1618.366963][ T9628] usb 5-1: unable to send the bmi data to the device: -71 [ 1618.374792][ T9628] usb 5-1: unable to get target info from device [ 1618.381599][ T9628] usb 5-1: could not get target info (-71) [ 1618.387980][T12762] m920x_read = error: -19 [ 1618.388007][T12762] dvb-usb: error while querying for an remote control event. [ 1618.405480][ T9628] usb 5-1: could not probe fw (-71) [ 1618.497678][T12762] m920x_read = error: -19 [ 1618.502294][T12762] dvb-usb: error while querying for an remote control event. [ 1618.567576][ T24] usb 3-1: device descriptor read/64, error -71 [ 1618.617725][T12762] m920x_read = error: -19 [ 1618.632258][T12762] dvb-usb: error while querying for an remote control event. [ 1618.687732][ C1] net_ratelimit: 18 callbacks suppressed [ 1618.687753][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1618.749449][T12762] m920x_read = error: -19 [ 1618.754282][T12762] dvb-usb: error while querying for an remote control event. [ 1618.767532][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1618.774850][ T4825] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1618.781404][ T4825] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1618.791057][ T4825] vhci_hcd vhci_hcd.0: Device attached [ 1618.801657][ T4826] vhci_hcd: connection closed [ 1618.801936][T30768] vhci_hcd vhci_hcd.3: stop threads [ 1618.812189][ T24] usb 3-1: reset high-speed USB device number 71 using dummy_hcd [ 1618.820519][T30768] vhci_hcd vhci_hcd.3: release socket [ 1618.826171][T30768] vhci_hcd vhci_hcd.3: disconnect device [ 1618.827116][ T24] usb 3-1: device reset changed ep0 maxpacket size! [ 1618.841040][ T4829] loop2: detected capacity change from 0 to 7 [ 1618.849537][ T29] usb 3-1: USB disconnect, device number 71 [ 1618.855001][T21363] Dev loop2: unable to read RDB block 7 [ 1618.861876][T21363] loop2: AHDI p1 p2 p3 p4 [ 1618.866591][T21363] loop2: partition table partially beyond EOD, truncated [ 1618.874040][T12762] m920x_read = error: -19 [ 1618.879050][T21363] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1618.885969][T12762] dvb-usb: error while querying for an remote control event. [ 1618.893647][T21363] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1618.904719][T21363] loop2: p3 start 16777215 is beyond EOD, truncated [ 1618.919182][ T4829] Dev loop2: unable to read RDB block 7 [ 1618.927394][ T4829] loop2: AHDI p1 p2 p3 p4 [ 1618.932290][ T4829] loop2: partition table partially beyond EOD, truncated [ 1618.943192][ T4829] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1618.950198][ T4829] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1618.957205][ T4829] loop2: p3 start 16777215 is beyond EOD, truncated [ 1619.007511][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1619.007650][T12762] m920x_read = error: -19 [ 1619.039356][T12762] dvb-usb: error while querying for an remote control event. [ 1619.047547][ T29] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1619.111648][ T4833] netlink: 'syz.0.10937': attribute type 83 has an invalid length. [ 1619.179390][ T5981] m920x_read = error: -19 [ 1619.186449][ T5981] dvb-usb: error while querying for an remote control event. [ 1619.210371][ T4840] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.10937'. [ 1619.220493][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 1619.222423][ T4841] FAULT_INJECTION: forcing a failure. [ 1619.222423][ T4841] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.239344][ T29] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1619.247717][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1619.268276][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.277967][ T4841] CPU: 1 UID: 0 PID: 4841 Comm: syz.4.10939 Tainted: G L syzkaller #0 PREEMPT(full) [ 1619.277993][ T4841] Tainted: [L]=SOFTLOCKUP [ 1619.277999][ T4841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1619.278008][ T4841] Call Trace: [ 1619.278015][ T4841] [ 1619.278021][ T4841] dump_stack_lvl+0xe8/0x150 [ 1619.278048][ T4841] should_fail_ex+0x412/0x560 [ 1619.278074][ T4841] should_failslab+0xa8/0x100 [ 1619.278089][ T4841] ? skb_clone+0x212/0x3a0 [ 1619.278112][ T4841] kmem_cache_alloc_noprof+0x87/0x650 [ 1619.278139][ T4841] skb_clone+0x212/0x3a0 [ 1619.278163][ T4841] __netlink_deliver_tap+0x424/0x8b0 [ 1619.278190][ T4841] ? netlink_deliver_tap+0x2e/0x1b0 [ 1619.278209][ T4841] netlink_deliver_tap+0x19c/0x1b0 [ 1619.278228][ T4841] netlink_sendskb+0x68/0x140 [ 1619.278245][ T4841] netlink_unicast+0x3a3/0x9b0 [ 1619.278266][ T4841] ? __pfx_netlink_unicast+0x10/0x10 [ 1619.278288][ T4841] netlink_rcv_skb+0x2b6/0x4b0 [ 1619.278306][ T4841] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1619.278324][ T4841] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1619.278349][ T4841] ? bpf_lsm_capable+0x9/0x20 [ 1619.278366][ T4841] ? security_capable+0x7e/0x2c0 [ 1619.278395][ T4841] nfnetlink_rcv+0x2c0/0x27b0 [ 1619.278412][ T4841] ? __kernel_text_address+0xd/0x30 [ 1619.278426][ T4841] ? unwind_get_return_address+0x4d/0x90 [ 1619.278465][ T4841] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1619.278489][ T4841] ? arch_stack_walk+0xfb/0x150 [ 1619.278520][ T4841] ? stack_trace_save+0xa9/0x100 [ 1619.278561][ T4841] ? __pfx_stack_trace_save+0x10/0x10 [ 1619.278586][ T4841] ? trim_netdev_trace+0x2a2/0x3d0 [ 1619.278602][ T4841] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1619.278617][ T4841] ? save_netdev_trace_buffer+0x4f7/0x610 [ 1619.278633][ T4841] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1619.278661][ T4841] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 1619.278675][ T4841] ? ref_tracker_free+0x693/0x840 [ 1619.278698][ T4841] ? __netlink_deliver_tap+0x636/0x8b0 [ 1619.278713][ T4841] ? netlink_deliver_tap+0x19c/0x1b0 [ 1619.278729][ T4841] ? netlink_unicast+0x7e3/0x9b0 [ 1619.278742][ T4841] ? netlink_sendmsg+0x813/0xb40 [ 1619.278758][ T4841] ? sock_sendmsg_nosec+0x18f/0x1d0 [ 1619.278773][ T4841] ? ____sys_sendmsg+0x589/0x8c0 [ 1619.278792][ T4841] ? ___sys_sendmsg+0x2a5/0x360 [ 1619.278810][ T4841] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1619.278830][ T4841] ? do_syscall_64+0xe2/0xf80 [ 1619.278847][ T4841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.278868][ T4841] ? __skb_clone+0x483/0x7a0 [ 1619.278893][ T4841] ? skb_clone+0x246/0x3a0 [ 1619.278916][ T4841] ? __netlink_deliver_tap+0x866/0x8b0 [ 1619.278934][ T4841] ? netlink_deliver_tap+0x2e/0x1b0 [ 1619.278956][ T4841] ? netlink_deliver_tap+0x2e/0x1b0 [ 1619.278978][ T4841] netlink_unicast+0x80f/0x9b0 [ 1619.278999][ T4841] ? __pfx_netlink_unicast+0x10/0x10 [ 1619.279016][ T4841] ? netlink_sendmsg+0x650/0xb40 [ 1619.279032][ T4841] ? skb_put+0x11b/0x210 [ 1619.279053][ T4841] netlink_sendmsg+0x813/0xb40 [ 1619.279077][ T4841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1619.279097][ T4841] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1619.279120][ T4841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1619.279137][ T4841] sock_sendmsg_nosec+0x18f/0x1d0 [ 1619.279154][ T4841] ____sys_sendmsg+0x589/0x8c0 [ 1619.279175][ T4841] ? __might_fault+0xaf/0x130 [ 1619.279198][ T4841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1619.279226][ T4841] ? import_iovec+0x73/0xa0 [ 1619.279244][ T4841] ___sys_sendmsg+0x2a5/0x360 [ 1619.279264][ T4841] ? __lock_acquire+0x6b5/0x2cf0 [ 1619.279285][ T4841] ? __pfx____sys_sendmsg+0x10/0x10 [ 1619.279330][ T4841] ? __fget_files+0x2a/0x420 [ 1619.279348][ T4841] ? __fget_files+0x3a0/0x420 [ 1619.279373][ T4841] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1619.279396][ T4841] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1619.279424][ T4841] ? __pfx_ksys_write+0x10/0x10 [ 1619.279453][ T4841] do_syscall_64+0xe2/0xf80 [ 1619.279470][ T4841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.279485][ T4841] ? trace_irq_disable+0x37/0x100 [ 1619.279504][ T4841] ? clear_bhb_loop+0x40/0x90 [ 1619.279522][ T4841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.279543][ T4841] RIP: 0033:0x7ff71379aeb9 [ 1619.279557][ T4841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1619.279571][ T4841] RSP: 002b:00007ff7146ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1619.279587][ T4841] RAX: ffffffffffffffda RBX: 00007ff713a15fa0 RCX: 00007ff71379aeb9 [ 1619.279599][ T4841] RDX: 00000000000008c4 RSI: 00002000000020c0 RDI: 0000000000000003 [ 1619.279609][ T4841] RBP: 00007ff7146ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1619.279618][ T4841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1619.279628][ T4841] R13: 00007ff713a16038 R14: 00007ff713a15fa0 R15: 00007ffd48cdfe68 [ 1619.279651][ T4841] [ 1619.754878][ T5981] m920x_read = error: -19 [ 1619.755905][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1619.759710][ T5981] dvb-usb: error while querying for an remote control event. [ 1619.768746][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1619.782028][ T29] usb 3-1: Product: syz [ 1619.787322][ T29] usb 3-1: Manufacturer: syz [ 1619.792058][ T29] usb 3-1: SerialNumber: syz [ 1619.807513][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1619.833736][ T29] usb 3-1: config 0 descriptor?? [ 1619.846439][ T29] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1619.888291][ T5981] m920x_read = error: -19 [ 1619.892701][ T5981] dvb-usb: error while querying for an remote control event. [ 1619.962430][T12762] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1620.007651][ T5981] m920x_read = error: -19 [ 1620.012047][ T5981] dvb-usb: error while querying for an remote control event. [ 1620.047544][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1620.127688][ T5981] m920x_read = error: -19 [ 1620.132125][ T5981] dvb-usb: error while querying for an remote control event. [ 1620.165651][T12762] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.186494][ T4851] kvm: kvm [4850]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4 [ 1620.196264][T12762] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1620.219739][T12762] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1620.234514][T12762] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1620.243738][T12762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1620.248535][ T29] gspca_stk1135: reg_w 0x0 err -71 [ 1620.258010][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 1620.264464][ T29] gspca_stk1135: Sensor write failed [ 1620.264508][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 1620.264518][ T29] gspca_stk1135: Sensor write failed [ 1620.264543][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 1620.264552][ T29] gspca_stk1135: Sensor read failed [ 1620.264577][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 1620.264584][ T29] gspca_stk1135: Sensor read failed [ 1620.264591][ T29] gspca_stk1135: Detected sensor type unknown (0x0) [ 1620.264619][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 1620.264627][ T29] gspca_stk1135: Sensor read failed [ 1620.264652][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 1620.264660][ T29] gspca_stk1135: Sensor read failed [ 1620.264685][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 1620.264693][ T29] gspca_stk1135: Sensor write failed [ 1620.264718][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 1620.264726][ T29] gspca_stk1135: Sensor write failed [ 1620.264786][ T29] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1620.266629][ T29] usb 3-1: USB disconnect, device number 72 [ 1620.287528][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1620.288035][ T5981] m920x_read = error: -19 [ 1620.288065][ T5981] dvb-usb: error while querying for an remote control event. [ 1620.324901][T12762] usb 1-1: SerialNumber: syz [ 1620.351737][T12762] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1620.351796][T12762] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1620.400134][T12762] m920x_read = error: -19 [ 1620.507599][T12762] dvb-usb: error while querying for an remote control event. [ 1620.523993][ T4855] FAULT_INJECTION: forcing a failure. [ 1620.523993][ T4855] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.539091][ T4855] CPU: 1 UID: 0 PID: 4855 Comm: syz.3.10944 Tainted: G L syzkaller #0 PREEMPT(full) [ 1620.539136][ T4855] Tainted: [L]=SOFTLOCKUP [ 1620.539144][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1620.539158][ T4855] Call Trace: [ 1620.539168][ T4855] [ 1620.539178][ T4855] dump_stack_lvl+0xe8/0x150 [ 1620.539214][ T4855] should_fail_ex+0x412/0x560 [ 1620.539252][ T4855] should_failslab+0xa8/0x100 [ 1620.539277][ T4855] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1620.539311][ T4855] ? __alloc_skb+0x1d0/0x7d0 [ 1620.539336][ T4855] ? __local_bh_enable_ip+0xd0/0x130 [ 1620.539368][ T4855] __alloc_skb+0x1d0/0x7d0 [ 1620.539401][ T4855] ip6_frag_next+0x12d/0xb60 [ 1620.539450][ T4855] ip6_fragment+0x1039/0x23c0 [ 1620.539502][ T4855] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1620.539543][ T4855] ? __pfx_ip6_fragment+0x10/0x10 [ 1620.539570][ T4855] ? ip6_mtu+0x7d/0x490 [ 1620.539595][ T4855] ? ip6_mtu+0x38c/0x490 [ 1620.539622][ T4855] ? ip6_finish_output+0x4ce/0xa10 [ 1620.539651][ T4855] ? ip6_output+0x126/0x550 [ 1620.539679][ T4855] ip6_output+0x340/0x550 [ 1620.539707][ T4855] ? ip6_send_skb+0x10f/0x390 [ 1620.539740][ T4855] ip6_send_skb+0x1d5/0x390 [ 1620.539773][ T4855] rawv6_push_pending_frames+0x6ec/0x8e0 [ 1620.539815][ T4855] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 1620.539852][ T4855] ? __pfx_raw6_getfrag+0x10/0x10 [ 1620.539890][ T4855] rawv6_sendmsg+0x13b3/0x18f0 [ 1620.539940][ T4855] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1620.540009][ T4855] ? __pfx_aa_sk_perm+0x10/0x10 [ 1620.540040][ T4855] ? sock_rps_record_flow+0x19/0x400 [ 1620.540078][ T4855] ? inet_sendmsg+0x2f4/0x370 [ 1620.540108][ T4855] ? aa_file_perm+0x12d/0x1630 [ 1620.540142][ T4855] sock_sendmsg_nosec+0x128/0x1d0 [ 1620.540170][ T4855] sock_write_iter+0x302/0x410 [ 1620.540207][ T4855] ? __pfx_sock_write_iter+0x10/0x10 [ 1620.540268][ T4855] do_iter_readv_writev+0x619/0x8c0 [ 1620.540304][ T4855] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1620.540344][ T4855] ? bpf_lsm_file_permission+0x9/0x20 [ 1620.540365][ T4855] ? security_file_permission+0x75/0x260 [ 1620.540397][ T4855] ? rw_verify_area+0x255/0x4d0 [ 1620.540432][ T4855] vfs_writev+0x33c/0x990 [ 1620.540467][ T4855] ? __pfx_vfs_writev+0x10/0x10 [ 1620.540508][ T4855] ? __fget_files+0x2a/0x420 [ 1620.540540][ T4855] ? __fget_files+0x3a0/0x420 [ 1620.540566][ T4855] ? __fget_files+0x2a/0x420 [ 1620.540603][ T4855] do_writev+0x154/0x2e0 [ 1620.540629][ T4855] ? __pfx_do_writev+0x10/0x10 [ 1620.540667][ T4855] do_syscall_64+0xe2/0xf80 [ 1620.540694][ T4855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.540716][ T4855] ? trace_irq_disable+0x37/0x100 [ 1620.540744][ T4855] ? clear_bhb_loop+0x40/0x90 [ 1620.540775][ T4855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.540791][ T4855] RIP: 0033:0x7f5bc339aeb9 [ 1620.540808][ T4855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1620.540822][ T4855] RSP: 002b:00007f5bc15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1620.540839][ T4855] RAX: ffffffffffffffda RBX: 00007f5bc3615fa0 RCX: 00007f5bc339aeb9 [ 1620.540851][ T4855] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1620.540860][ T4855] RBP: 00007f5bc15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1620.540870][ T4855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1620.540880][ T4855] R13: 00007f5bc3616038 R14: 00007f5bc3615fa0 R15: 00007ffea2f8dd08 [ 1620.540905][ T4855] [ 1620.847684][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1620.895095][T12762] m920x_read = error: -19 [ 1620.899738][T12762] dvb-usb: error while querying for an remote control event. [ 1620.917994][ T5942] usb 1-1: USB disconnect, device number 63 [ 1621.008502][ T5981] m920x_read = error: -19 [ 1621.015405][ T5981] dvb-usb: error while querying for an remote control event. [ 1621.135548][ T5981] m920x_read = error: -19 [ 1621.147579][ T5981] dvb-usb: error while querying for an remote control event. [ 1621.277598][ T5942] m920x_read = error: -19 [ 1621.282129][ T5942] dvb-usb: error while querying for an remote control event. [ 1621.329423][ T4870] comedi comedi2: comedi_config --init_data is deprecated [ 1621.551849][ T5942] m920x_read = error: -19 [ 1621.556772][ T5942] dvb-usb: error while querying for an remote control event. [ 1622.201911][ T5942] m920x_read = error: -19 [ 1622.206343][ T5942] dvb-usb: error while querying for an remote control event. [ 1622.332280][ T5942] m920x_read = error: -19 [ 1622.336719][ T5942] dvb-usb: error while querying for an remote control event. [ 1622.458065][ T5942] m920x_read = error: -19 [ 1622.462486][ T5942] dvb-usb: error while querying for an remote control event. [ 1622.555021][ T4881] netlink: 'syz.4.10951': attribute type 1 has an invalid length. [ 1622.577567][ T4881] nbd: error processing sock list [ 1622.587653][ T5942] m920x_read = error: -19 [ 1622.592063][ T5942] dvb-usb: error while querying for an remote control event. [ 1622.747581][ T5981] m920x_read = error: -19 [ 1622.752041][ T5981] dvb-usb: error while querying for an remote control event. [ 1622.787027][ T4895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10960'. [ 1622.887587][ T5981] m920x_read = error: -19 [ 1622.892008][ T5981] dvb-usb: error while querying for an remote control event. [ 1623.027624][ T5981] m920x_read = error: -19 [ 1623.032079][ T5981] dvb-usb: error while querying for an remote control event. [ 1623.148308][ T5942] m920x_read = error: -19 [ 1623.153698][ T5942] dvb-usb: error while querying for an remote control event. [ 1623.161395][ T4910] netlink: 'syz.2.10965': attribute type 2 has an invalid length. [ 1623.190177][ T4910] netlink: 'syz.2.10965': attribute type 2 has an invalid length. [ 1623.247701][ T5981] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1623.277616][ T5942] m920x_read = error: -19 [ 1623.282036][ T5942] dvb-usb: error while querying for an remote control event. [ 1623.417817][ T5942] m920x_read = error: -19 [ 1623.423110][ T5981] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1623.434676][ T5942] dvb-usb: error while querying for an remote control event. [ 1623.449473][ T5981] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1623.471337][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 1623.510979][ T5981] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1623.532543][ T5981] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1623.568515][ T5942] m920x_read = error: -19 [ 1623.573005][ T5942] dvb-usb: error while querying for an remote control event. [ 1623.582505][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.597543][ T5981] usb 4-1: Product: syz [ 1623.601767][ T5981] usb 4-1: Manufacturer: syz [ 1623.606440][ T5981] usb 4-1: SerialNumber: syz [ 1623.628797][ T5981] usb 4-1: config 0 descriptor?? [ 1623.635088][ T4919] FAULT_INJECTION: forcing a failure. [ 1623.635088][ T4919] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.652269][ T4919] CPU: 0 UID: 0 PID: 4919 Comm: syz.0.10970 Tainted: G L syzkaller #0 PREEMPT(full) [ 1623.652309][ T4919] Tainted: [L]=SOFTLOCKUP [ 1623.652317][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1623.652331][ T4919] Call Trace: [ 1623.652340][ T4919] [ 1623.652350][ T4919] dump_stack_lvl+0xe8/0x150 [ 1623.652385][ T4919] should_fail_ex+0x412/0x560 [ 1623.652424][ T4919] should_failslab+0xa8/0x100 [ 1623.652453][ T4919] __kmalloc_node_noprof+0xf0/0x7c0 [ 1623.652487][ T4919] ? crypto_create_tfm_node+0x83/0x3f0 [ 1623.652524][ T4919] crypto_create_tfm_node+0x83/0x3f0 [ 1623.652561][ T4919] crypto_ahash_init_tfm+0x162/0x770 [ 1623.652602][ T4919] crypto_create_tfm_node+0x18c/0x3f0 [ 1623.652639][ T4919] crypto_spawn_tfm2+0x5c/0x90 [ 1623.652667][ T4919] crypto_ccm_init_tfm+0x4a/0x1f0 [ 1623.652701][ T4919] crypto_create_tfm_node+0x18c/0x3f0 [ 1623.652739][ T4919] crypto_alloc_tfm_node+0x172/0x3f0 [ 1623.652776][ T4919] ? __kmalloc_noprof+0x37d/0x760 [ 1623.652810][ T4919] aead_key_setup_encrypt+0x2c/0xb0 [ 1623.652848][ T4919] ieee80211_key_alloc+0x14de/0x24a0 [ 1623.652882][ T4919] ieee80211_add_key+0x347/0xc20 [ 1623.652915][ T4919] rdev_add_key+0x134/0x2e0 [ 1623.652945][ T4919] nl80211_new_key+0x79a/0x8e0 [ 1623.652975][ T4919] ? __pfx_nl80211_new_key+0x10/0x10 [ 1623.653005][ T4919] ? nl80211_pre_doit+0x4d5/0x8e0 [ 1623.653047][ T4919] genl_family_rcv_msg_doit+0x22a/0x330 [ 1623.653088][ T4919] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1623.653134][ T4919] ? bpf_lsm_capable+0x9/0x20 [ 1623.653158][ T4919] ? security_capable+0x7e/0x2c0 [ 1623.653200][ T4919] genl_rcv_msg+0x61c/0x7a0 [ 1623.653247][ T4919] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1623.653276][ T4919] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1623.653307][ T4919] ? __pfx_nl80211_new_key+0x10/0x10 [ 1623.653328][ T4919] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1623.653362][ T4919] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1623.653391][ T4919] ? do_syscall_64+0xe2/0xf80 [ 1623.653416][ T4919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.653448][ T4919] netlink_rcv_skb+0x232/0x4b0 [ 1623.653475][ T4919] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1623.653509][ T4919] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1623.653531][ T4919] ? genl_rcv+0x19/0x40 [ 1623.653580][ T4919] ? down_read+0x272/0x2e0 [ 1623.653607][ T4919] ? genl_rcv+0xd/0x40 [ 1623.653638][ T4919] genl_rcv+0x28/0x40 [ 1623.653667][ T4919] netlink_unicast+0x80f/0x9b0 [ 1623.653700][ T4919] ? __pfx_netlink_unicast+0x10/0x10 [ 1623.653725][ T4919] ? netlink_sendmsg+0x650/0xb40 [ 1623.653749][ T4919] ? skb_put+0x11b/0x210 [ 1623.653780][ T4919] netlink_sendmsg+0x813/0xb40 [ 1623.653817][ T4919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1623.653845][ T4919] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1623.653880][ T4919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1623.653906][ T4919] sock_sendmsg_nosec+0x18f/0x1d0 [ 1623.653932][ T4919] ____sys_sendmsg+0x589/0x8c0 [ 1623.653962][ T4919] ? __might_fault+0xaf/0x130 [ 1623.653997][ T4919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1623.654038][ T4919] ? import_iovec+0x73/0xa0 [ 1623.654066][ T4919] ___sys_sendmsg+0x2a5/0x360 [ 1623.654094][ T4919] ? __lock_acquire+0x6b5/0x2cf0 [ 1623.654124][ T4919] ? __pfx____sys_sendmsg+0x10/0x10 [ 1623.654194][ T4919] ? __fget_files+0x2a/0x420 [ 1623.654225][ T4919] ? __fget_files+0x3a0/0x420 [ 1623.654263][ T4919] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1623.654297][ T4919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1623.654338][ T4919] ? __pfx_ksys_write+0x10/0x10 [ 1623.654383][ T4919] do_syscall_64+0xe2/0xf80 [ 1623.654408][ T4919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.654430][ T4919] ? trace_irq_disable+0x37/0x100 [ 1623.654458][ T4919] ? clear_bhb_loop+0x40/0x90 [ 1623.654485][ T4919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.654508][ T4919] RIP: 0033:0x7f1b9b39aeb9 [ 1623.654529][ T4919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.654548][ T4919] RSP: 002b:00007f1b9c171028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1623.654572][ T4919] RAX: ffffffffffffffda RBX: 00007f1b9b615fa0 RCX: 00007f1b9b39aeb9 [ 1623.654588][ T4919] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1623.654602][ T4919] RBP: 00007f1b9c171090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.654616][ T4919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1623.654630][ T4919] R13: 00007f1b9b616038 R14: 00007f1b9b615fa0 R15: 00007ffd3464d7d8 [ 1623.654666][ T4919] [ 1623.655594][ T4906] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1624.007818][ C1] net_ratelimit: 15 callbacks suppressed [ 1624.007871][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1624.011027][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1624.014862][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1624.042098][ T5942] m920x_read = error: -19 [ 1624.135831][T30768] wlan0: Trigger new scan to find an IBSS to join [ 1624.162533][ T4922] FAULT_INJECTION: forcing a failure. [ 1624.162533][ T4922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1624.179776][ T4922] CPU: 0 UID: 0 PID: 4922 Comm: syz.4.10969 Tainted: G L syzkaller #0 PREEMPT(full) [ 1624.179813][ T4922] Tainted: [L]=SOFTLOCKUP [ 1624.179823][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1624.179837][ T4922] Call Trace: [ 1624.179846][ T4922] [ 1624.179856][ T4922] dump_stack_lvl+0xe8/0x150 [ 1624.179892][ T4922] should_fail_ex+0x412/0x560 [ 1624.179939][ T4922] _copy_to_user+0x31/0xb0 [ 1624.179967][ T4922] simple_read_from_buffer+0xe1/0x170 [ 1624.179998][ T4922] proc_fail_nth_read+0x1bb/0x230 [ 1624.180037][ T4922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1624.180076][ T4922] ? rw_verify_area+0x2a6/0x4d0 [ 1624.180106][ T4922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1624.180141][ T4922] vfs_read+0x20c/0xa70 [ 1624.180169][ T4922] ? fdget_pos+0x246/0x320 [ 1624.180201][ T4922] ? __pfx___mutex_lock+0x10/0x10 [ 1624.180230][ T4922] ? __pfx_vfs_read+0x10/0x10 [ 1624.180262][ T4922] ? __fget_files+0x2a/0x420 [ 1624.180292][ T4922] ? __fget_files+0x3a0/0x420 [ 1624.180317][ T4922] ? __fget_files+0x2a/0x420 [ 1624.180352][ T4922] ksys_read+0x150/0x270 [ 1624.180386][ T4922] ? __pfx_ksys_read+0x10/0x10 [ 1624.180428][ T4922] do_syscall_64+0xe2/0xf80 [ 1624.180453][ T4922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.180474][ T4922] ? trace_irq_disable+0x37/0x100 [ 1624.180502][ T4922] ? clear_bhb_loop+0x40/0x90 [ 1624.180529][ T4922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.180551][ T4922] RIP: 0033:0x7ff71375b78e [ 1624.180571][ T4922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1624.180589][ T4922] RSP: 002b:00007ff7146e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1624.180613][ T4922] RAX: ffffffffffffffda RBX: 00007ff7146ea6c0 RCX: 00007ff71375b78e [ 1624.180631][ T4922] RDX: 000000000000000f RSI: 00007ff7146ea0a0 RDI: 0000000000000004 [ 1624.180645][ T4922] RBP: 00007ff7146ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.180660][ T4922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1624.180673][ T4922] R13: 00007ff713a16038 R14: 00007ff713a15fa0 R15: 00007ffd48cdfe68 [ 1624.180706][ T4922] [ 1624.249131][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1624.305899][ T5942] dvb-usb: error while querying for an remote control event. [ 1624.419057][T12762] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1624.447679][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1624.517492][ T5981] rc_core: IR keymap rc-imon-rsc not found [ 1624.524413][ T5981] Registered IR keymap rc-empty [ 1624.531724][ T5981] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1624.543446][ T5981] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input134 [ 1624.575638][ T5981] usb 4-1: USB disconnect, device number 85 [ 1624.597618][ T5942] m920x_read = error: -19 [ 1624.602088][ T5942] dvb-usb: error while querying for an remote control event. [ 1624.610816][T12762] usb 3-1: Using ep0 maxpacket: 32 [ 1624.621013][T12762] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1624.632625][T12762] usb 3-1: config 0 has no interface number 0 [ 1624.641205][T12762] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1624.650868][T12762] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1624.660852][T12762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.678028][T12762] usb 3-1: Product: syz [ 1624.682395][T12762] usb 3-1: Manufacturer: syz [ 1624.687066][T12762] usb 3-1: SerialNumber: syz [ 1624.696572][T12762] usb 3-1: config 0 descriptor?? [ 1624.747768][ T5942] m920x_read = error: -19 [ 1624.752297][ T5942] dvb-usb: error while querying for an remote control event. [ 1624.867856][ T5981] m920x_read = error: -19 [ 1624.874641][ T5981] dvb-usb: error while querying for an remote control event. [ 1625.001138][ T5981] m920x_read = error: -19 [ 1625.006064][ T5981] dvb-usb: error while querying for an remote control event. [ 1625.073589][ T4937] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10976'. [ 1625.087561][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1625.087568][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1625.087730][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1625.127690][ T5981] m920x_read = error: -19 [ 1625.132405][ T5981] dvb-usb: error while querying for an remote control event. [ 1625.247898][ T5981] m920x_read = error: -19 [ 1625.252446][ T5981] dvb-usb: error while querying for an remote control event. [ 1625.327497][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1625.367709][ T5981] m920x_read = error: -19 [ 1625.372188][ T5981] dvb-usb: error while querying for an remote control event. [ 1625.487685][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1625.497636][ T5981] m920x_read = error: -19 [ 1625.502086][ T5981] dvb-usb: error while querying for an remote control event. [ 1625.523162][ T4953] FAULT_INJECTION: forcing a failure. [ 1625.523162][ T4953] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.533548][ T4917] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1625.536878][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: syz.0.10983 Tainted: G L syzkaller #0 PREEMPT(full) [ 1625.536960][ T4953] Tainted: [L]=SOFTLOCKUP [ 1625.536981][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1625.537014][ T4953] Call Trace: [ 1625.537037][ T4953] [ 1625.537067][ T4953] dump_stack_lvl+0xe8/0x150 [ 1625.537160][ T4953] should_fail_ex+0x412/0x560 [ 1625.537255][ T4953] should_failslab+0xa8/0x100 [ 1625.537318][ T4953] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1625.537403][ T4953] ? __alloc_skb+0x186/0x7d0 [ 1625.537468][ T4953] ? __alloc_skb+0x1d0/0x7d0 [ 1625.537530][ T4953] ? __local_bh_enable_ip+0xd0/0x130 [ 1625.537661][ T4953] __alloc_skb+0x1d0/0x7d0 [ 1625.537758][ T4953] netlink_sendmsg+0x5d4/0xb40 [ 1625.537853][ T4953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1625.537925][ T4953] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1625.538011][ T4953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1625.538081][ T4953] sock_sendmsg_nosec+0x18f/0x1d0 [ 1625.538156][ T4953] ____sys_sendmsg+0x589/0x8c0 [ 1625.538235][ T4953] ? __might_fault+0xaf/0x130 [ 1625.538323][ T4953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1625.538424][ T4953] ? import_iovec+0x73/0xa0 [ 1625.538498][ T4953] ___sys_sendmsg+0x2a5/0x360 [ 1625.538574][ T4953] ? __lock_acquire+0x6b5/0x2cf0 [ 1625.538652][ T4953] ? __pfx____sys_sendmsg+0x10/0x10 [ 1625.538841][ T4953] ? __fget_files+0x2a/0x420 [ 1625.538912][ T4953] ? __fget_files+0x3a0/0x420 [ 1625.539021][ T4953] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1625.539138][ T4953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1625.539237][ T4953] ? __pfx_ksys_write+0x10/0x10 [ 1625.539348][ T4953] do_syscall_64+0xe2/0xf80 [ 1625.539422][ T4953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.539476][ T4953] ? trace_irq_disable+0x37/0x100 [ 1625.539550][ T4953] ? clear_bhb_loop+0x40/0x90 [ 1625.539617][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.539680][ T4953] RIP: 0033:0x7f1b9b39aeb9 [ 1625.539745][ T4953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1625.539791][ T4953] RSP: 002b:00007f1b9c171028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1625.539857][ T4953] RAX: ffffffffffffffda RBX: 00007f1b9b615fa0 RCX: 00007f1b9b39aeb9 [ 1625.539900][ T4953] RDX: 0000000000040000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1625.539935][ T4953] RBP: 00007f1b9c171090 R08: 0000000000000000 R09: 0000000000000000 [ 1625.539967][ T4953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1625.539999][ T4953] R13: 00007f1b9b616038 R14: 00007f1b9b615fa0 R15: 00007ffd3464d7d8 [ 1625.540085][ T4953] [ 1625.618024][ T5981] m920x_read = error: -19 [ 1625.822827][ T4917] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1625.938387][ T5981] dvb-usb: error while querying for an remote control event. [ 1626.048003][ T5981] m920x_read = error: -19 [ 1626.052483][ T5981] dvb-usb: error while querying for an remote control event. [ 1626.142896][ T4964] comedi comedi3: comedi_parport: I/O port conflict (0x4e27,3) [ 1626.187623][ T5981] m920x_read = error: -19 [ 1626.192126][ T5981] dvb-usb: error while querying for an remote control event. [ 1626.260282][ T4969] netlink: 'syz.3.10987': attribute type 29 has an invalid length. [ 1626.281435][ T4969] netlink: 'syz.3.10987': attribute type 29 has an invalid length. [ 1626.291947][ T4969] netlink: 500 bytes leftover after parsing attributes in process `syz.3.10987'. [ 1626.307599][ T5981] m920x_read = error: -19 [ 1626.312105][ T5981] dvb-usb: error while querying for an remote control event. [ 1626.418755][ T4981] FAULT_INJECTION: forcing a failure. [ 1626.418755][ T4981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1626.428217][ T5981] m920x_read = error: -19 [ 1626.436494][ T5981] dvb-usb: error while querying for an remote control event. [ 1626.460183][ T4981] CPU: 1 UID: 0 PID: 4981 Comm: syz.3.10989 Tainted: G L syzkaller #0 PREEMPT(full) [ 1626.460217][ T4981] Tainted: [L]=SOFTLOCKUP [ 1626.460225][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1626.460240][ T4981] Call Trace: [ 1626.460249][ T4981] [ 1626.460259][ T4981] dump_stack_lvl+0xe8/0x150 [ 1626.460296][ T4981] should_fail_ex+0x412/0x560 [ 1626.460331][ T4981] _copy_from_iter+0x1d3/0x1670 [ 1626.460375][ T4981] ? rcu_is_watching+0x15/0xb0 [ 1626.460403][ T4981] ? __pfx__copy_from_iter+0x10/0x10 [ 1626.460444][ T4981] ? netlink_sendmsg+0x650/0xb40 [ 1626.460469][ T4981] ? skb_put+0x11b/0x210 [ 1626.460499][ T4981] netlink_sendmsg+0x6c0/0xb40 [ 1626.460534][ T4981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1626.460562][ T4981] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1626.460597][ T4981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1626.460623][ T4981] sock_sendmsg_nosec+0x18f/0x1d0 [ 1626.460649][ T4981] ____sys_sendmsg+0x589/0x8c0 [ 1626.460680][ T4981] ? __might_fault+0xaf/0x130 [ 1626.460714][ T4981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1626.460754][ T4981] ? import_iovec+0x73/0xa0 [ 1626.460781][ T4981] ___sys_sendmsg+0x2a5/0x360 [ 1626.460810][ T4981] ? __lock_acquire+0x6b5/0x2cf0 [ 1626.460849][ T4981] ? __pfx____sys_sendmsg+0x10/0x10 [ 1626.460916][ T4981] ? __fget_files+0x2a/0x420 [ 1626.460942][ T4981] ? __fget_files+0x3a0/0x420 [ 1626.460978][ T4981] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1626.461012][ T4981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1626.461052][ T4981] ? __pfx_ksys_write+0x10/0x10 [ 1626.461096][ T4981] do_syscall_64+0xe2/0xf80 [ 1626.461122][ T4981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.461144][ T4981] ? trace_irq_disable+0x37/0x100 [ 1626.461173][ T4981] ? clear_bhb_loop+0x40/0x90 [ 1626.461200][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.461222][ T4981] RIP: 0033:0x7f5bc339aeb9 [ 1626.461243][ T4981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.461262][ T4981] RSP: 002b:00007f5bc15f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1626.461284][ T4981] RAX: ffffffffffffffda RBX: 00007f5bc3615fa0 RCX: 00007f5bc339aeb9 [ 1626.461301][ T4981] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000003 [ 1626.461316][ T4981] RBP: 00007f5bc15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1626.461330][ T4981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1626.461344][ T4981] R13: 00007f5bc3616038 R14: 00007f5bc3615fa0 R15: 00007ffea2f8dd08 [ 1626.461376][ T4981] [ 1626.536372][T12762] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1626.737201][ T5981] m920x_read = error: -19 [ 1626.741679][ T5981] dvb-usb: error while querying for an remote control event. [ 1626.772019][T12762] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1626.779563][T12762] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1626.790603][T12762] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1626.813600][T12762] usb 3-1: USB disconnect, device number 73 [ 1626.828565][ T4971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1626.867750][ T5942] m920x_read = error: -19 [ 1626.872274][ T5942] dvb-usb: error while querying for an remote control event. [ 1626.997562][ T5942] m920x_read = error: -19 [ 1627.007269][ T5942] dvb-usb: error while querying for an remote control event. [ 1627.117693][T12762] m920x_read = error: -19 [ 1627.122340][T12762] dvb-usb: error while querying for an remote control event. [ 1627.138033][ T5002] netlink: 'syz.4.10994': attribute type 2 has an invalid length. [ 1627.237762][ T5942] m920x_read = error: -19 [ 1627.242777][ T5942] dvb-usb: error while querying for an remote control event. [ 1627.357596][ T5981] m920x_read = error: -19 [ 1627.362048][ T5981] dvb-usb: error while querying for an remote control event. [ 1627.398155][ T5942] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1627.490985][ T5981] m920x_read = error: -19 [ 1627.495402][ T5981] dvb-usb: error while querying for an remote control event. [ 1627.537844][ T5942] usb 4-1: device descriptor read/64, error -71 [ 1627.608134][ T5981] m920x_read = error: -19 [ 1627.612790][ T5981] dvb-usb: error while querying for an remote control event. [ 1627.727721][ T5981] m920x_read = error: -19 [ 1627.732218][ T5981] dvb-usb: error while querying for an remote control event. [ 1627.797548][ T5942] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1627.845802][ T5826] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1627.849148][ T5981] m920x_read = error: -19 [ 1627.862893][ T5981] dvb-usb: error while querying for an remote control event. [ 1627.927686][ T5942] usb 4-1: device descriptor read/64, error -71 [ 1627.977675][ T5981] m920x_read = error: -19 [ 1627.982096][ T5981] dvb-usb: error while querying for an remote control event. [ 1628.027546][ T5826] usb 3-1: Using ep0 maxpacket: 16 [ 1628.035917][ T5826] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1628.041540][ T5942] usb usb4-port1: attempt power cycle [ 1628.052557][ T5826] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1628.063109][ T9630] wlan0: Trigger new scan to find an IBSS to join [ 1628.065869][ T5826] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1628.098141][T22563] m920x_read = error: -19 [ 1628.102746][T22563] dvb-usb: error while querying for an remote control event. [ 1628.217187][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.225762][ T5826] usb 3-1: Product: 䀁 [ 1628.230595][T22563] m920x_read = error: -19 [ 1628.235296][ T5826] usb 3-1: Manufacturer: Њ [ 1628.240016][T22563] dvb-usb: error while querying for an remote control event. [ 1628.278490][ T5826] usb 3-1: SerialNumber: 鶪뿯႓䌣력ຩ쾂㰧㔻」蔴䍌ⲝ絿쮊뤫ᐗꂖ袽芺㾩ⅷ붅츁ﮨゅ蚆晎㸣뾃燊쩪田촩ᬡ䣒஥갍쒡挬䁉ᘸ 标覧룖俤귏壶ㆥ农熌䏮⸆鄽跡㼌瀹ⱃ鈳︪䓾ꑆ崩䠋蝙臗羅㒠ឤ뫖许箦ὃ㷎뉔憭㨥쵵﨨䨺⯶礦嚤㲏렩駤㖴坛﩮窊⪼塜 [ 1628.347810][ T5981] m920x_read = error: -19 [ 1628.352350][ T5981] dvb-usb: error while querying for an remote control event. [ 1628.424119][ T5016] binder: 5015:5016 unknown command 0 [ 1628.432113][ T5016] binder: 5015:5016 ioctl c0306201 200000000080 returned -22 [ 1628.458330][ T5942] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1628.467618][ T5981] m920x_read = error: -19 [ 1628.472055][ T5981] dvb-usb: error while querying for an remote control event. [ 1628.480531][ T5942] usb 4-1: device descriptor read/8, error -71 [ 1628.587690][ T5981] m920x_read = error: -19 [ 1628.592107][ T5981] dvb-usb: error while querying for an remote control event. [ 1628.707601][ T5981] m920x_read = error: -19 [ 1628.712032][ T5981] dvb-usb: error while querying for an remote control event. [ 1628.727590][ T5942] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1628.748518][ T5942] usb 4-1: device descriptor read/8, error -71 [ 1628.762431][ T5008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.771727][ T5008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1628.784227][ T5826] cdc_ncm 3-1:1.0: bind() failure [ 1628.804859][ T5826] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1628.811907][ T5826] cdc_ncm 3-1:1.1: bind() failure [ 1628.827591][ T5981] m920x_read = error: -19 [ 1628.832015][ T5981] dvb-usb: error while querying for an remote control event. [ 1628.837561][ T5826] usb 3-1: USB disconnect, device number 74 [ 1628.859382][ T5942] usb usb4-port1: unable to enumerate USB device [ 1628.867683][ T29] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1628.947721][ T5942] m920x_read = error: -19 [ 1628.952155][ T5942] dvb-usb: error while querying for an remote control event. [ 1629.043596][ T5026] can0: slcan on ttyS3. [ 1629.047930][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 1629.065430][ T29] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1629.070704][ T5942] m920x_read = error: -19 [ 1629.076278][ T29] usb 1-1: config 0 has no interface number 0 [ 1629.085084][T30768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.086846][ T5942] dvb-usb: error while querying for an remote control event. [ 1629.099958][ T29] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1629.114728][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.124059][ T29] usb 1-1: Product: syz [ 1629.129766][ T29] usb 1-1: Manufacturer: syz [ 1629.134557][ T29] usb 1-1: SerialNumber: syz [ 1629.146056][ T29] usb 1-1: config 0 descriptor?? [ 1629.156424][ T29] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1629.167902][ T5028] can0 (unregistered): slcan off ttyS3. [ 1629.228086][ T5942] m920x_read = error: -19 [ 1629.232901][ T5942] dvb-usb: error while querying for an remote control event. [ 1629.247526][ C0] net_ratelimit: 15 callbacks suppressed [ 1629.247546][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1629.247683][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1629.267352][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1629.281672][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.291075][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.300738][ T5032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.310821][ T5032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.348090][T22563] m920x_read = error: -19 [ 1629.352912][T22563] dvb-usb: error while querying for an remote control event. [ 1629.363144][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 1629.375111][ C1] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 1629.383581][ C1] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1629.394442][ C1] Tainted: [L]=SOFTLOCKUP [ 1629.398848][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1629.408937][ C1] Workqueue: usb_hub_wq hub_event [ 1629.414003][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 1629.419226][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 1629.438861][ C1] RSP: 0018:ffffc90000a087f8 EFLAGS: 00010002 [ 1629.445059][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 1629.453059][ C1] RDX: ffffc90002362000 RSI: 000000000000001f RDI: 0000000000000020 [ 1629.461066][ C1] RBP: 0000000000000000 R08: ffff88807907001f R09: 1ffff1100f20e003 [ 1629.469060][ C1] R10: dffffc0000000000 R11: ffffed100f20e004 R12: dffffc0000000000 [ 1629.477063][ C1] R13: ffff888079070018 R14: 00000000000001c0 R15: 0000000000000000 [ 1629.485057][ C1] FS: 0000000000000000(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 1629.494008][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1629.500628][ C1] CR2: 00007f1b995d3fd8 CR3: 000000003db2a000 CR4: 00000000003526f0 [ 1629.508653][ C1] Call Trace: [ 1629.511970][ C1] [ 1629.514844][ C1] ? __asan_memcpy+0x40/0x70 [ 1629.519480][ C1] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 1629.525768][ C1] queue_work_on+0x106/0x1d0 [ 1629.530416][ C1] qt2_read_bulk_callback+0x58d/0x1030 [ 1629.535915][ C1] ? __pfx_qt2_read_bulk_callback+0x10/0x10 [ 1629.541843][ C1] ? kcov_remote_start+0x88/0x7a0 [ 1629.547008][ C1] ? kcov_remote_start+0x88/0x7a0 [ 1629.552085][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 1629.557505][ C1] dummy_timer+0xbbd/0x45d0 [ 1629.562090][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1629.567165][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1629.573010][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1629.577984][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1629.582947][ C1] __hrtimer_run_queues+0x529/0xc30 [ 1629.588184][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1629.593934][ C1] ? read_tsc+0x9/0x20 [ 1629.598027][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 1629.603169][ C1] handle_softirqs+0x22a/0x7c0 [ 1629.607959][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1629.612751][ C1] __irq_exit_rcu+0x5f/0x150 [ 1629.617363][ C1] irq_exit_rcu+0x9/0x30 [ 1629.621632][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1629.627289][ C1] [ 1629.630234][ C1] [ 1629.633183][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1629.639185][ C1] RIP: 0010:kernfs_new_node+0x0/0x210 [ 1629.644671][ C1] Code: e8 f5 71 c1 ff 48 8b 03 5b 41 5e 41 5f e9 d8 61 3f 09 cc e8 72 f8 57 ff eb a3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 45 89 ce 45 [ 1629.647975][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1629.664304][ C1] RSP: 0018:ffffc90000a46a18 EFLAGS: 00000206 [ 1629.664333][ C1] RAX: ffffffff826d4f64 RBX: 0000000000000000 RCX: 0000000000000000 [ 1629.664352][ C1] RDX: 00000000000041ed RSI: ffff8880467f2ee0 RDI: ffff888073926690 [ 1629.693377][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 1629.701499][ C1] R10: dffffc0000000000 R11: ffffffff85fdfae0 R12: 00000000000041ed [ 1629.709499][ C1] R13: ffff8880467f2ee0 R14: ffff888079070558 R15: ffff888073926690 [ 1629.717762][ C1] ? __pfx_device_get_ownership+0x10/0x10 [ 1629.723525][ C1] ? kernfs_create_dir_ns+0x24/0x130 [ 1629.728844][ C1] kernfs_create_dir_ns+0x44/0x130 [ 1629.734040][ C1] sysfs_create_dir_ns+0x12f/0x2a0 [ 1629.739219][ C1] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1629.744888][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1629.750044][ C1] kobject_add_internal+0x62b/0xd00 [ 1629.755294][ C1] kobject_add+0x163/0x240 [ 1629.759755][ C1] ? __pfx_kobject_add+0x10/0x10 [ 1629.764736][ C1] ? class_to_subsys+0xb6/0x120 [ 1629.769634][ C1] ? get_device_parent+0xbc/0x3a0 [ 1629.774694][ C1] device_add+0x408/0xb70 [ 1629.779058][ C1] usb_serial_probe+0x26f4/0x2e50 [ 1629.784114][ C1] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 1629.791433][ C1] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 1629.798662][ C1] usb_probe_interface+0x668/0xc90 [ 1629.803799][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 1629.809470][ C1] really_probe+0x267/0xaf0 [ 1629.814005][ C1] __driver_probe_device+0x18c/0x320 [ 1629.819319][ C1] driver_probe_device+0x4f/0x240 [ 1629.824376][ C1] __device_attach_driver+0x2d4/0x4c0 [ 1629.829795][ C1] bus_for_each_drv+0x258/0x2f0 [ 1629.834712][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 1629.840647][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1629.846077][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1629.851508][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1629.857354][ C1] __device_attach+0x2c5/0x450 [ 1629.862169][ C1] ? __pfx___device_attach+0x10/0x10 [ 1629.867511][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1629.872411][ C1] device_initial_probe+0xa1/0xd0 [ 1629.877485][ C1] bus_probe_device+0x12a/0x220 [ 1629.882386][ C1] ? device_add+0x726/0xb70 [ 1629.887020][ C1] device_add+0x7b6/0xb70 [ 1629.891487][ C1] usb_set_configuration+0x1a87/0x2110 [ 1629.896996][ C1] usb_generic_driver_probe+0x8d/0x150 [ 1629.902526][ C1] usb_probe_device+0x1c4/0x3b0 [ 1629.907403][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 1629.912915][ C1] really_probe+0x267/0xaf0 [ 1629.917470][ C1] __driver_probe_device+0x18c/0x320 [ 1629.922809][ C1] driver_probe_device+0x4f/0x240 [ 1629.927868][ C1] __device_attach_driver+0x2d4/0x4c0 [ 1629.933269][ C1] bus_for_each_drv+0x258/0x2f0 [ 1629.938153][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 1629.944082][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1629.949484][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1629.954723][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1629.960563][ C1] __device_attach+0x2c5/0x450 [ 1629.966145][ C1] ? __pfx___device_attach+0x10/0x10 [ 1629.971456][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1629.976329][ C1] device_initial_probe+0xa1/0xd0 [ 1629.981384][ C1] bus_probe_device+0x12a/0x220 [ 1629.986255][ C1] ? device_add+0x726/0xb70 [ 1629.990784][ C1] device_add+0x7b6/0xb70 [ 1629.995143][ C1] usb_new_device+0xa08/0x16f0 [ 1629.999945][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 1630.005173][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1630.010401][ C1] hub_event+0x2a1c/0x4f30 [ 1630.014850][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1630.019835][ C1] ? __pfx_hub_event+0x10/0x10 [ 1630.024632][ C1] ? process_one_work+0x87c/0x15a0 [ 1630.029772][ C1] ? process_one_work+0x87c/0x15a0 [ 1630.034911][ C1] process_one_work+0x949/0x15a0 [ 1630.039898][ C1] ? irqentry_exit+0x59e/0x620 [ 1630.044809][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1630.050305][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1630.055385][ C1] worker_thread+0xb46/0x1140 [ 1630.060136][ C1] kthread+0x388/0x470 [ 1630.064239][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1630.069370][ C1] ? __pfx_kthread+0x10/0x10 [ 1630.073990][ C1] ret_from_fork+0x51b/0xa40 [ 1630.078607][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1630.083770][ C1] ? __switch_to+0xc7d/0x1400 [ 1630.088472][ C1] ? __pfx_kthread+0x10/0x10 [ 1630.093105][ C1] ret_from_fork_asm+0x1a/0x30 [ 1630.097919][ C1] [ 1630.100976][ C1] Modules linked in: [ 1630.104902][ C1] ---[ end trace 0000000000000000 ]--- [ 1630.110374][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 1630.115610][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 1630.135324][ C1] RSP: 0018:ffffc90000a087f8 EFLAGS: 00010002 [ 1630.141425][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 1630.149484][ C1] RDX: ffffc90002362000 RSI: 000000000000001f RDI: 0000000000000020 [ 1630.157568][ C1] RBP: 0000000000000000 R08: ffff88807907001f R09: 1ffff1100f20e003 [ 1630.165658][ C1] R10: dffffc0000000000 R11: ffffed100f20e004 R12: dffffc0000000000 [ 1630.173653][ C1] R13: ffff888079070018 R14: 00000000000001c0 R15: 0000000000000000 [ 1630.181731][ C1] FS: 0000000000000000(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 1630.190686][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1630.197377][ C1] CR2: 00007f1b995d3fd8 CR3: 000000003db2a000 CR4: 00000000003526f0 [ 1630.205410][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1630.213308][ C1] Kernel Offset: disabled [ 1630.217650][ C1] Rebooting in 86400 seconds..