last executing test programs: 13.664965279s ago: executing program 3 (id=4169): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf9, 0x1, 0x0, @loopback, @private2, 0x8, 0x40, 0x1, 0x3}}) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x40000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180020002e00010026bdf000fcdbdf1b040000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'sit0\x00', {}, 0x2}) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c80001800378013000300717472283414d6bba919736d34290000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 11.491178029s ago: executing program 3 (id=4177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff0100000000000000000000000000016401010100000000000000000000000001000000000000060a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) 11.218026756s ago: executing program 3 (id=4179): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 10.789340839s ago: executing program 3 (id=4181): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x400022c, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$kcm(0x2, 0xf, 0x2) write$tun(r3, 0x0, 0xfdef) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) getpid() r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}, {0x400000b1, 0x0, 0xfffffffffffffff7}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10.473625098s ago: executing program 1 (id=4184): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="00000000ffffff9fb703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.280738448s ago: executing program 1 (id=4186): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001100)={r10, 0x0, {0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ff9]}}) ioctl$BTRFS_IOC_SPACE_INFO(r11, 0x4c08, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 7.029022452s ago: executing program 2 (id=4193): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0x79, 0x1, 0xc, [{@multicast2}, {@local, 0x374}, {@empty, 0x4d2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x18}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000002c0)=0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r2, @ANYRESHEX], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/netlink\x00') read$FUSE(r4, &(0x7f00000095c0)={0x2020}, 0x2020) socket(0x28, 0x5, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8) name_to_handle_at(r4, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@reiserfs_2={0x8, 0x2, {0x3, 0x6}}, &(0x7f0000000280), 0x1000) 6.748525804s ago: executing program 1 (id=4194): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66c", 0x51}], 0x1) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = dup(r3) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newneigh={0x28, 0x1c, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x60, 0x0, 0x8}, [@NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4042810}, 0x4) 6.029061493s ago: executing program 4 (id=4198): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x207, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}], 0x1, 0x8, 0xffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x20}, 0x0) 5.890022549s ago: executing program 4 (id=4199): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@delsa={0x11c, 0x11, 0x20, 0x70bd2b, 0x25dfdbfc, {@in=@rand_addr=0x64010102, 0x4d5, 0xa, 0x2b}, [@user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x0, 0x2}}, @migrate={0x9c, 0x11, [{@in6=@local, @in=@loopback, @in=@broadcast, @in=@multicast1, 0x33, 0x0, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@empty, @in=@empty, @in=@multicast2, @in=@broadcast, 0x78, 0x4, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@remote, 0x0, 0x2}}]}, 0x11c}}, 0x4000080) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xd4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x8, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0xfff2}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000200)=0x1) close(0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000044) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)=r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="f7790066baa00066b86b4266ba2100ed66ba420066ef0f29902cbb0000c4e2b1ba8c88d90000000f83001000000f7842280f07b801000000c4033921820f47a753fd", 0x42}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000040)="0f2003b8010000000f01d99aa4270000ae00f30fa7d0660f8d01003e650f22db0ffecec4c28dbed9c744240000000000c744240200000100c7442406000000000f011424", 0x44}], 0x1, 0x71, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r10, 0x0, 0x0, 0x800) 5.426412167s ago: executing program 2 (id=4202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r1, r1, 0x0, 0x6) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x700, 0x1, 0x46880fdc, 0x6, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x66, 0x0, 0x1, 0x2f, 0x0, @empty, @empty}}}}) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904000002923350000905f402ff030000000905ba"], 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0xb, 0x30, {0x30, 0xc, "b9cbd894f2c5ae14390b017a9741dfbf87da596c994b4327fd8d256b4e0238493d3d6d85efb85189dc1628f3e05f"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f00000000c0)={0x20, 0x11, 0xaa, "bdbad2e93ddb01d00cd489cbc53f6ae21d2d695cabf217be73ae6b7cc2a9e178337024be261c6613d4b4bb5a4167c1f5712c8e7ea042b45da2dd7c295a4ab34dc8ba2ee07692ecb7e0d2a68e5653fbcdcb0ba36173b280dc4ca96193702c10f3f2ed4a81a3e4a9f0f5e6172a97dbbc5ed606264b74c2f6d3f432647eb0816f94c3f6f7494e75f98f03e897eb48cfd6f14dc1a5911e12d34642bc45c1c05c802412843f561ae9b4443e59"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x1, 0x613, 0xd872, 0x6d, 0x8, 0x0, 0x9, 0x0, 0x5, 0x2}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000280)={0x20, 0x83, 0x2}, &(0x7f00000002c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000300)={0x20, 0x89, 0x2}}) 5.281563076s ago: executing program 4 (id=4203): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa402, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, r3, 0x11, 0x70bd2b, 0x25dfdbbd, {{}, {@val={0x8, 0x1, 0x87a}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffe}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8282, 0x0) fallocate(r0, 0x11, 0x600, 0x7c000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="5eeced8e46dc3f0adf33c9f7b986", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) ioctl$FIOCLEX(r6, 0x5451) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a000000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f00000003c0)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001740)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x3, 0x4}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5dd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$VIDIOC_STREAMON(r8, 0x40045612, &(0x7f00000000c0)=0x8) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000000d473205ba1a4a9a4a6e5b61b39959663f400ed0ae71d8b009660b72e5294c3bbecbc8d22d6785765c5ec1f4292622b46c7e3458e61b424e985a92d31e44a7fb0ae8f3dda5da53b5c65a0abe7c617efb787c515b135b2e872572865f1cf8ff92501ffaeee60ee09a801ccaa5e46ce1e7ff516bebbef929a8f0a8bc8a4c226455010555484c48c379d6d23629c47e81c1815e086f50538a13c798000d4b8ffb023e3de3", @ANYRES16=r13, @ANYBLOB="0100000000000000000010000000080008000000000008000900000000001800018014000200776c616e3100"/54], 0x3c}}, 0x0) 5.015029054s ago: executing program 4 (id=4204): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f0000000200)={0x70, 0x24, 0x8d, {0x8d, 0x31, "84277c6236c9d12dcfb8bafd8923abe9d3dab98d150a14780668df46eebeec783fc24aaf993ca90fd0c4f86e3c08731652f5a27ad73b9cb1533e2a168235db02900f6ecbed3218e413260aba59cfe920ba263cff063bb31e00f0a7a7191f74c5a8c572da9d36a4752570a1554dd3f5ec0a02cde5675a5f8970eee6d31adb864732ff91de08b836c2065134"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000400)={0x0, 0x5, 0x98, "4b9fe6ac61f0c47f5cbd4b04f78cab844cd6866e3a5e4d7a0ed4b2e81ada71519cd54751fbebe2e2f7d1b0584f11aa4115975ccc4e158ed25d61a4be7091e4dd9336382814f905bd384123d3aef5a36ea04e51d7e2955798547fbf75d5a930c3f5885d86a49d401692a47773fc83427ea77e23267f7ac6393f62dd1380b188aea28173f0a13e221e68939c7472b867c269b75c1a8126aed3"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0xec, {0xea, "bf766829a5b5aa2d9a5bccba40ef1eb30133ade8813189bcb80d8940df6eb16588daca5eaa3f1cb82dc26a06cc6c9ef27e4f8a7ce7ce7e156754f773070322b8f58e48a178258e1fb75ceabcdff1ed01b152b52175f543b880738963d33c04ea3c7642f3167a78f63e08a90ababbd6bdbe930634ab44c910cd0354fd2010d988f13d73fa70034e630f7a475ef955711f6c07475647b6328fd3fc415c77b476eb8341a0241bb11718e9d589233de163077a2a7838eb8df4845b45a2f08d5c457da9a14f9446d2677bb38aeeaef6743d1963d986520e84f9754bcf785e570e8fc30d62cd85e2fa229d9537"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x9a}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x60}}) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x2, 'k'}, @global=@item_4={0x3, 0x1, 0x0, "1708fef6"}]}}, 0x0}, 0x0) 4.322014894s ago: executing program 0 (id=4205): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001100)={r10, 0x0, {0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ff9]}}) ioctl$BTRFS_IOC_SPACE_INFO(r11, 0x4c08, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 4.249683348s ago: executing program 3 (id=4206): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r4 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r4, 0x14, 0xb9c, 0x2b, 0x0, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000004c0)={0x40, 0x8, 0x6, "a61623bea283"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x7, 0x8, 0x0, [0xc, 0x2, 0x3ff, 0x6, 0x367, 0x6]}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.366569885s ago: executing program 1 (id=4207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0xa0000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x3, 0x7, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2, 0x4e22, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) r7 = accept4(r6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r7, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f00000002c0)={0x3a0, 0x0, 0x304, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TESTDATA={0xae, 0x45, "09a84ec7ac32a3c3ed83ae9fde629cf0786c24c869d6e234f9c5b7699715202178852088d3bd362063ee12c6aedec26b4a87998e24c3975e9a38b5f9be8a0ef387e5499017d1b3f80b706b8374047dbdfb256802616d750350ddda613136a6f20859e046c71884bf8467f4b5694935f1719a2511f4dbe01c29d1a4c969eb3617302f861679c14a1e9fcddc6a6e7632d2f39fddd5474ffb7aba255673425f7067b25de9e4f3707a1d6546"}, @NL80211_ATTR_TESTDATA={0x33, 0x45, "1056519b55665fbb163c1e2099d992a83fd391f2cf98214a6ba583c3890d333a6ff1b5e5b823139d20617bcfb26383"}, @NL80211_ATTR_TESTDATA={0x68, 0x45, "87c7e7206837eb5f647c57eb98f3573997c363f98f57dee878a8f6a870e799d5129191f4cc1cd655411a2011a1706f68fac82c5b18e13d582698dfcdce08e68f13ab693a7085e39d697a2cfb3c2ebbcc18a1ac5dde79537c4b7bb9553e52c82d6a3952c0"}, @NL80211_ATTR_TESTDATA={0xa7, 0x45, "63b6593f94293fe9ac0bc64f90060198489fa005e3b05af1a62b1d6459cb90c7e95bea318beca3adf4110963f6b1e110e19e9cf0490d20f8a0246d3864d9ee820fa6b43c31d11508180855b6c703e25fe6b18667ef7e4c93b92cf375b0692add4ae292ff20356ba160ada6f32f4492a0d0a2ea18a6bb0da7d293a0d91d83d30ed2b53e63befda0183b65e592c26cb0b4c213c1637497e7f322b61b861b4599fd1db798"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x9e, 0x45, "9e4835c3ba52663049c2fd42a52ef8ea8bf33c6d8e24f60d1d13f58413abb6c8cd857aea72dbd3a6ede7f07295f3aadac15c6bad883d86f5b1ace9b8af220e2ae6bc2946edc9a7c96689b82bfcca317432167df3bfaf1067e28ccee3cc5e933113ad0b0520ebc7cc03d62fb9662df2a2f210b4c4686fb9938fea6be286fb6fecb1406f7b73044823c310e323cf12d4734c5b69382b150da47f92"}, @NL80211_ATTR_TESTDATA={0xeb, 0x45, "e20af5ef455303840d138974d82acb80a05a0b1988c85df44fe4970755a7e60f1de6a3c3d8c639b92a25c7a15c5c787a83116bc8fc0d819b2ad0a338694308b9ea3f023c55dc8047beb808414f01389e83a761f197abc49362ae470c8ec87ab501af7aa17c18a986511288972d8462c8c9af9f865e10b9c6ec60ff1c633f078b93cbc6ce605dbd175889b978489db8ea033c7730cf2bfee7440e496b4248562e49ee562b63edc54dddd11420a30e878b82d2551c9e27616b2c5f190f09e442da6ada86648c94c1a1f8d658ebb921a0ae51254f7c7489e68ff85fee10f7be548a82c0dfbcabf883"}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x48800}, 0x101) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) 3.041841884s ago: executing program 4 (id=4208): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d50000e4010902f98a5c01000000090401001186eee2000905821704"], 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffe}, {0x0, 0x8, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast1, 0x404d3, 0xff}, 0xa, @in=@multicast1}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom0\x00', 0x800, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000100000aa00000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000340)=0x1001021, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f0000000040)={0x0, 0x0, '\x00', {0x0, @reserved}}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000280)={0x1, 0x1, 0x3}) 2.971573959s ago: executing program 0 (id=4209): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x68, &(0x7f0000000200)}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 2.224973251s ago: executing program 2 (id=4210): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) lseek(0xffffffffffffffff, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x80000) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x0, 0x67, 0x0, @loopback, @private=0xa010102}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x8, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@cipso={0x86, 0x6}, @cipso={0x86, 0x6, 0x3}]}}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x10000014}) r6 = getpid() r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r8, &(0x7f0000000000)={0x10}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') lseek(r9, 0x8001, 0x1) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r5}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='scalable', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.158902098s ago: executing program 0 (id=4211): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="05000000030000000100", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x300}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f000000c900)={0x0, 0x0, &(0x7f000000c8c0)={&(0x7f000000c840)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x24040000) write$UHID_CREATE2(r2, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xd4, 0x6, 0x57, 0x4, 0x400, 0x216, "2cd7e025f2bcd725f50161b7d7800f6593c83ee71cb477f492167781f101a5d103c4088ae2962e01ae5be48161f839bc41f25b2e9f61bd4695cab38bec88fbed408faa1eefc39fecce88fce088a40850a83f01f0dee119a923d557b7d25dee775ccb61e8923a36a7e6953ccd799cad1724a38020b6c37424cad0de2a0ba9214c574fec3d577866b225f8ce6ccdaeff31ef41b94c3f107eaf5f01de1548684ea0eba95cd67578d366ad42d2ef35f7e7c93699bce29a07887977cac21bc47766f5fea49b7fde515a1169f5b31e7521db24ddc5d26f"}}, 0x1ec) 1.150109941s ago: executing program 3 (id=4212): msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) timer_create(0x4, &(0x7f0000000000)={0x0, 0x2b, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_delete(r0) map_shadow_stack(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) close_range(r1, r2, 0x2) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syncfs(r3) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x10) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) io_uring_setup(0x2c, &(0x7f0000000100)={0x0, 0xbbe6, 0x400, 0x1, 0x26a, 0x0, r3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3000000, 0x4f}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000340)='veth1_macvtap\x00') r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x6369, 0x5}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000400)={r8, 0x4, 0xa2f, 0xd1, 0x0, 0x36c}, &(0x7f0000000440)=0x14) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, @val=@perf_event={0x6}}, 0x18) fstat(r9, &(0x7f00000004c0)) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000540)={0x8}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@delnexthop={0x60, 0x69, 0x100, 0x70bd29, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x8800) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3e}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8844}, 0x4000000) 1.018071013s ago: executing program 1 (id=4213): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) read(r0, &(0x7f0000000080)=""/145, 0x91) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r1, &(0x7f0000000780)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x8, 0xfffffffe) io_setup(0xd66, &(0x7f0000000140)=0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x1, 0x0, &(0x7f0000000000)) io_submit(r2, 0x5, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x10, r0, 0xfffffffffffffffd, 0x0, 0xd47, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0xe, 0xffffffffffffffff, &(0x7f00000007c0)="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", 0x1000, 0xfff, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xc, 0xffffffffffffffff, &(0x7f0000000200)="c021951e3e22a2a875e70e0662f51fa6dc1cc810fcde1af6fdea31a803f98bef6ab117a7e8cf9c9b4ede4ba0387c6e0875b3d8bd03995798ed7dd0b817a3ad8153546978858d90eee918b6f225618971dd9a574357e7c559cdadac771d8159f1802fd16b566f9a8403ef3a44d0b11e35b83a0547ceecad11b2cd47046a5928172a010d3890ab4b77a43c3895add8a359a5542dcd2e5c29a6b3fb691c4ef9866ad2bd2e7850a801ec06c39d7412739fa0c294d4d8a61b5f66afff86546f23e3c0fcbd4f9f", 0xc4, 0x8, 0x0, 0x6, r1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x200, 0xffffffffffffffff, &(0x7f0000000340)="3f347c7c3f8d9bb6a795c8177f6e6b8e64ba54baee25deaf0465f58f703ef2066c7aad0e7077a77756b5412f885d7cd0558ad2604439dcc46ae063ac0a893ab5beebcf7154c513b52ca290b5f74211efdedffbfe8dade467928696e31edb4028749f46a0644b8e8d62ffcf12ad5d36adf7e74d6adaefa92252bf57e38c3ee3a7e482d3b45b4d2f74634a032d20e098bd390fcb34f87e6c0e775e3bec30b1950c8a50cfe7cd22fa5662eb73ccff5f022c5edbb37ccf5385f5d60179ec5638e6dfc491", 0xc2, 0x7, 0x0, 0x0, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x8, r3, &(0x7f0000000500)="d128733cef47e15f576661b4ad00e42ad02c693aa93291cf8b0fa33f28af406a8887d46fdc28e5ab1d4f2565601abdd2f9d94f9e4c1b88113aab22e7727776815dad3ba0", 0x44, 0x7, 0x0, 0x2, r1}]) r4 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) close(r4) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010101}}, 0x24) 949.536498ms ago: executing program 0 (id=4214): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008095}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffffff}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001abed30a900", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x2404c455}, 0x20040000) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001abed30a900", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x2404c455}, 0x20040000) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000240)={r2, &(0x7f0000000140)='%\x00', 0x40, &(0x7f0000000180)={@align=0xd, {0x9, 0xfff7, 0xc595, 0x8001}}, 0x3ff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x6}) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010102}}, 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200c40, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4010, r7, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x6a}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x6a}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x100) (async) listen(r8, 0x100) accept4(r8, 0x0, 0x0, 0x80000) (async) accept4(r8, 0x0, 0x0, 0x80000) shutdown(r8, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 769.590992ms ago: executing program 1 (id=4215): openat$mice(0xffffff9c, &(0x7f00000002c0), 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socket$kcm(0x10, 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x4d6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r2, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = userfaultfd(0x80000) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000dd7000/0x4000)=nil, &(0x7f00001e2000/0x1000)=nil, 0x4000}) 730.044358ms ago: executing program 4 (id=4216): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="060000000400000040020000070000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32], 0x50) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000900)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000844) shutdown(r3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xe, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4d0, 0x2c, 0xd27, 0x70bd2d, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x498, 0x2, [@TCA_BASIC_POLICE={0x494, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x800003, 0xfffffff9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0xfff, 0x3, 0x3, {0x4, 0x0, 0x8, 0xe, 0x6, 0x3}, {0x6, 0x1, 0x1, 0x5, 0xfff8, 0x3}, 0x0, 0x5f, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x9, 0xc53b, 0x5, 0x6, 0x2, 0x4000, 0x9, 0x6, 0x4, 0x2, 0x6, 0x2, 0x7f, 0x2, 0x785, 0x2673, 0x1aa, 0x7fffffff, 0x6, 0x323, 0x9, 0x6, 0x4, 0x6, 0x9, 0x1, 0x5, 0x2, 0x7fff, 0xfffffffd, 0x0, 0x10000, 0x8, 0xa74f, 0x4, 0x4, 0x411c, 0x0, 0x8, 0x40, 0x3, 0xfffffd9f, 0x0, 0x1, 0x94c, 0x0, 0x4, 0xfffff7ae, 0xc244, 0x9, 0x4, 0x8, 0x3, 0x8, 0x100, 0x2, 0x5, 0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x401, 0x3, 0x8, 0x98, 0xf40, 0x7fffffff, 0x2, 0x80000001, 0xc, 0x1, 0x401, 0xe0, 0x9, 0x0, 0x5, 0x8, 0x6e6f34a9, 0x8001, 0x34dc, 0x9, 0x58, 0x6, 0x6, 0xffff, 0x4, 0xfff, 0x2, 0xfffffffe, 0x7, 0x9, 0x400, 0x7, 0x5, 0x8, 0x4, 0x6, 0x7, 0x5, 0x2, 0x1, 0x8001, 0x8, 0x739, 0x80000001, 0x1, 0x3, 0x2, 0x0, 0x6, 0x800, 0x4, 0x3, 0x40, 0x40, 0x3, 0x5, 0x0, 0x3, 0x8b, 0x9, 0x4, 0x3, 0x0, 0x9, 0x1, 0x1340, 0x10001, 0xb, 0x7, 0x4, 0xe0000000, 0x81, 0xe, 0x8, 0x7, 0x9, 0x7, 0x1, 0x9, 0x6, 0x2, 0x8, 0x7fff, 0x50, 0x9, 0x4, 0x1, 0xfffffffb, 0x8, 0x6, 0x5347, 0xce, 0x0, 0x6, 0x4, 0x7, 0x2, 0x5, 0x8, 0x3aa, 0xfa, 0x7, 0x2, 0x3, 0x6, 0x8, 0x7, 0x2, 0x401, 0x9, 0x904, 0x4, 0x9, 0x6, 0x8, 0x0, 0x1, 0x9, 0x9, 0x0, 0x0, 0x7f, 0x5a, 0x7, 0x1, 0x401, 0x7, 0x6, 0x101, 0x3, 0x4c, 0xd, 0xced, 0x401, 0xfffffff7, 0x7, 0xf2, 0x6, 0x8000, 0xb5, 0x8000, 0x9, 0x0, 0xfffffffb, 0x6, 0xffff, 0xffffffff, 0x1, 0x1, 0x10, 0xff, 0x7f8d, 0x8000, 0x5, 0x4, 0x8, 0x7, 0x7, 0x2, 0x3340000, 0x401, 0xa7, 0x4, 0xffff, 0xd, 0x5, 0x2, 0x5, 0x1, 0x4, 0x0, 0x1, 0x7, 0x5c, 0x8, 0x1, 0xffffffff, 0x9b, 0x3, 0x4, 0x9, 0x1, 0x401, 0x2, 0x8, 0x80000000, 0x4, 0x8, 0x8, 0xfffffbff, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x4d0}, 0x1, 0x0, 0x0, 0xc0c3}, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 632.293632ms ago: executing program 2 (id=4217): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="00000000ffffffcbb703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 569.727034ms ago: executing program 0 (id=4218): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 371.524317ms ago: executing program 2 (id=4219): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000140)='&', 0x1, 0x80c4, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) close_range(r0, r1, 0x0) 94.295282ms ago: executing program 0 (id=4220): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000240)={0xa, 0x2, 0x2, {0x46, 0x13, 0xfffb, 0xf7168000}}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, &(0x7f0000000000)={0x130}}) 0s ago: executing program 2 (id=4221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="210000000d000000060000000400000018090600", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98848cd14e9a88d4ea84136ad1b0fa"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x281}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xb4, 0x0, 0x200, 0x70bd2a, 0x8, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b97", 0x31}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e1a97c74fa040f70f2fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x8000, 0xff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x4, 0x2, 0x2}, 0x800}}, 0xb8}}, 0x2c000010) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xf}, 0x94) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) r8 = accept4(r4, 0x0, 0x0, 0x800) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x1c, r9, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) kernel console output (not intermixed with test programs): 8][T21458] binder: 21446:21458 ioctl 4018620d 200000000040 returned -16 [ 928.974093][T21465] CPU: 0 UID: 0 PID: 21465 Comm: syz.0.3939 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.974123][T21465] Tainted: [L]=SOFTLOCKUP [ 928.974131][T21465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 928.974141][T21465] Call Trace: [ 928.974148][T21465] [ 928.974154][T21465] dump_stack_lvl+0xe8/0x150 [ 928.974174][T21465] should_fail_ex+0x412/0x560 [ 928.974191][T21465] should_failslab+0xa8/0x100 [ 928.974206][T21465] __kmalloc_cache_noprof+0x88/0x660 [ 928.974217][T21465] ? nft_pernet+0x23/0x240 [ 928.974230][T21465] ? nf_tables_newtable+0x435/0x1910 [ 928.974248][T21465] nf_tables_newtable+0x435/0x1910 [ 928.974268][T21465] ? __pfx_nfnetlink_has_listeners+0x1/0x10 [ 928.974303][T21465] nfnetlink_rcv+0x1240/0x27b0 [ 928.974350][T21465] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 928.974384][T21465] ? ref_tracker_free+0x693/0x840 [ 928.974430][T21465] ? __netlink_deliver_tap+0x807/0x850 [ 928.974454][T21465] ? netlink_deliver_tap+0x2e/0x1b0 [ 928.974496][T21465] netlink_unicast+0x80f/0x9b0 [ 928.974524][T21465] ? __pfx_netlink_unicast+0x10/0x10 [ 928.974546][T21465] ? netlink_sendmsg+0x650/0xb40 [ 928.974567][T21465] ? skb_put+0x11b/0x210 [ 928.974594][T21465] netlink_sendmsg+0x813/0xb40 [ 928.974627][T21465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.974653][T21465] ? aa_sock_msg_perm+0xf1/0x1b0 [ 928.974679][T21465] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 928.974703][T21465] ____sys_sendmsg+0x972/0x9f0 [ 928.974730][T21465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 928.974757][T21465] ? import_iovec+0x73/0xa0 [ 928.974787][T21465] ___sys_sendmsg+0x2a5/0x360 [ 928.974811][T21465] ? __pfx____sys_sendmsg+0x10/0x10 [ 928.974859][T21465] ? __fget_files+0x2a/0x420 [ 928.974884][T21465] ? __fget_files+0x3a0/0x420 [ 928.974919][T21465] __x64_sys_sendmsg+0x1bd/0x2a0 [ 928.974940][T21465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 928.974968][T21465] ? __pfx_ksys_write+0x10/0x10 [ 928.974999][T21465] do_syscall_64+0x14d/0xf80 [ 928.975016][T21465] ? trace_irq_disable+0x3b/0x150 [ 928.975041][T21465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.975061][T21465] ? clear_bhb_loop+0x40/0x90 [ 928.975091][T21465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.975110][T21465] RIP: 0033:0x7f6aff59c799 [ 928.975127][T21465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.975143][T21465] RSP: 002b:00007f6b0048e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.975163][T21465] RAX: ffffffffffffffda RBX: 00007f6aff815fa0 RCX: 00007f6aff59c799 [ 928.975176][T21465] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 928.975188][T21465] RBP: 00007f6b0048e090 R08: 0000000000000000 R09: 0000000000000000 [ 928.975200][T21465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.975211][T21465] R13: 00007f6aff816038 R14: 00007f6aff815fa0 R15: 00007f6aff93fa48 [ 928.975241][T21465] [ 929.374422][ T5937] m920x_read = error: -19 [ 929.378891][ T5937] dvb-usb: error while querying for an remote control event. [ 929.436400][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 929.450408][ T24] usb 2-1: config index 0 descriptor too short (expected 6701, got 45) [ 929.482224][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.503319][ T5937] m920x_read = error: -19 [ 929.508523][ T5937] dvb-usb: error while querying for an remote control event. [ 929.516067][ T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.569743][ T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.586383][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 929.606345][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 929.617139][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.626469][ T5937] m920x_read = error: -19 [ 929.636888][ T5937] dvb-usb: error while querying for an remote control event. [ 929.637803][ T24] usb 2-1: config 0 descriptor?? [ 929.696424][ T5901] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 929.786420][ T5937] m920x_read = error: -19 [ 929.790815][ T5937] dvb-usb: error while querying for an remote control event. [ 929.869099][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 929.882317][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.915029][ T5901] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 929.935127][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.947210][ T5937] m920x_read = error: -19 [ 929.951620][ T5937] dvb-usb: error while querying for an remote control event. [ 929.953248][ T5901] usb 1-1: Product: syz [ 929.960396][T21461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3937'. [ 929.968319][ T5901] usb 1-1: Manufacturer: syz [ 929.977852][ T5901] usb 1-1: SerialNumber: syz [ 929.990408][ T5901] usb 1-1: config 0 descriptor?? [ 930.017121][ T29] audit: type=1326 audit(1773025228.596:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.2.3937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d2079c799 code=0x0 [ 930.102792][T21457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.116822][ T5937] m920x_read = error: -19 [ 930.120136][T21457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.122998][ T5937] dvb-usb: error while querying for an remote control event. [ 930.148235][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 930.161643][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 930.187007][ T24] usb 2-1: USB disconnect, device number 21 [ 930.246505][ T5937] m920x_read = error: -19 [ 930.251111][ T5937] dvb-usb: error while querying for an remote control event. [ 930.396439][ T5937] m920x_read = error: -19 [ 930.400849][ T5937] dvb-usb: error while querying for an remote control event. [ 930.589964][ T10] m920x_read = error: -19 [ 930.599988][ T10] dvb-usb: error while querying for an remote control event. [ 930.726384][ T10] m920x_read = error: -19 [ 930.730771][ T10] dvb-usb: error while querying for an remote control event. [ 930.854224][T21491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 930.947443][ T10] m920x_read = error: -19 [ 930.953309][ T10] dvb-usb: error while querying for an remote control event. [ 931.186429][ T10] m920x_read = error: -19 [ 931.190122][T21493] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 931.225240][ T10] dvb-usb: error while querying for an remote control event. [ 931.346416][ T10] m920x_read = error: -19 [ 931.376091][ T10] dvb-usb: error while querying for an remote control event. [ 931.513341][ T5937] m920x_read = error: -19 [ 931.518225][ T5937] dvb-usb: error while querying for an remote control event. [ 931.526154][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.533858][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.636644][ T10] m920x_read = error: -19 [ 931.642925][ T10] dvb-usb: error while querying for an remote control event. [ 931.776456][ T10] m920x_read = error: -19 [ 931.780958][ T10] dvb-usb: error while querying for an remote control event. [ 931.916400][ T10] m920x_read = error: -19 [ 931.925532][ T10] dvb-usb: error while querying for an remote control event. [ 932.046446][ T10] m920x_read = error: -19 [ 932.050837][ T10] dvb-usb: error while querying for an remote control event. [ 932.206485][ T10] m920x_read = error: -19 [ 932.214029][ T10] dvb-usb: error while querying for an remote control event. [ 932.337534][ T10] m920x_read = error: -19 [ 932.368018][ T10] dvb-usb: error while querying for an remote control event. [ 932.419220][ T24] usb 1-1: USB disconnect, device number 95 [ 932.460057][T21509] loop4: detected capacity change from 0 to 524287936 [ 932.496620][ T10] m920x_read = error: -19 [ 932.606517][ T10] dvb-usb: error while querying for an remote control event. [ 932.796402][ T5937] m920x_read = error: -19 [ 932.800874][ T5937] dvb-usb: error while querying for an remote control event. [ 932.917133][ T5937] m920x_read = error: -19 [ 932.929841][ T5937] dvb-usb: error while querying for an remote control event. [ 933.046425][ T5937] m920x_read = error: -19 [ 933.050912][ T5937] dvb-usb: error while querying for an remote control event. [ 933.206530][ T5937] m920x_read = error: -19 [ 933.210914][ T5937] dvb-usb: error while querying for an remote control event. [ 933.337395][ T5937] m920x_read = error: -19 [ 933.341783][ T5937] dvb-usb: error while querying for an remote control event. [ 933.516618][ T5937] m920x_read = error: -19 [ 933.526392][ T5937] dvb-usb: error while querying for an remote control event. [ 933.636425][ T5937] m920x_read = error: -19 [ 933.640839][ T5937] dvb-usb: error while querying for an remote control event. [ 933.816417][ T5937] m920x_read = error: -19 [ 933.820852][ T5937] dvb-usb: error while querying for an remote control event. [ 933.936740][ T5937] m920x_read = error: -19 [ 933.941120][ T5937] dvb-usb: error while querying for an remote control event. [ 934.042351][T21531] syz.1.3957 (21531): attempted to duplicate a private mapping with mremap. This is not supported. [ 934.056507][ T5937] m920x_read = error: -19 [ 934.060897][ T5937] dvb-usb: error while querying for an remote control event. [ 934.186441][ T5937] m920x_read = error: -19 [ 934.193203][ T5937] dvb-usb: error while querying for an remote control event. [ 934.349844][ T5937] m920x_read = error: -19 [ 934.366363][ T5937] dvb-usb: error while querying for an remote control event. [ 934.434998][T21535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.477246][T21535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.506466][ T5937] m920x_read = error: -19 [ 934.520652][ T5937] dvb-usb: error while querying for an remote control event. [ 934.656364][T15023] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 934.664116][ T5937] m920x_read = error: -19 [ 934.670367][ T5937] dvb-usb: error while querying for an remote control event. [ 934.806508][ T10] m920x_read = error: -19 [ 934.807152][T21543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3960'. [ 934.810958][ T10] dvb-usb: error while querying for an remote control event. [ 934.813649][T21545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3961'. [ 934.837540][T15023] usb 2-1: Using ep0 maxpacket: 16 [ 934.846517][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3961'. [ 934.862214][T15023] usb 2-1: config 0 has no interfaces? [ 934.877367][T15023] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 934.896525][T15023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.904560][T15023] usb 2-1: Product: syz [ 934.916400][ T10] m920x_read = error: -19 [ 934.921180][ T10] dvb-usb: error while querying for an remote control event. [ 934.928604][T15023] usb 2-1: Manufacturer: syz [ 934.933202][T15023] usb 2-1: SerialNumber: syz [ 934.942101][T15023] usb 2-1: config 0 descriptor?? [ 934.977200][ T24] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 935.050305][T15023] m920x_read = error: -19 [ 935.054696][T15023] dvb-usb: error while querying for an remote control event. [ 935.169519][T15023] m920x_read = error: -19 [ 935.173904][T15023] dvb-usb: error while querying for an remote control event. [ 935.336479][ T24] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 935.344737][ T24] usb 5-1: config 0 has no interface number 0 [ 935.349001][ T5937] usb 2-1: USB disconnect, device number 22 [ 935.350979][ T24] usb 5-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 935.368292][ T24] usb 5-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 935.381969][ T24] usb 5-1: config 0 interface 153 has no altsetting 0 [ 935.402747][ T24] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 935.412191][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.448318][ T24] usb 5-1: Product: syz [ 935.453599][ T24] usb 5-1: Manufacturer: syz [ 935.458861][ T24] usb 5-1: SerialNumber: syz [ 935.471932][ T24] usb 5-1: config 0 descriptor?? [ 935.496608][ T10] m920x_read = error: -19 [ 935.501021][ T10] dvb-usb: error while querying for an remote control event. [ 935.616724][ T5937] m920x_read = error: -19 [ 935.657121][ T5937] dvb-usb: error while querying for an remote control event. [ 935.694712][ T24] hub 5-1:0.153: bad descriptor, ignoring hub [ 935.758010][ T24] hub 5-1:0.153: probe with driver hub failed with error -5 [ 935.778520][ T24] sierra 5-1:0.153: Sierra USB modem converter detected [ 935.808754][ T5937] m920x_read = error: -19 [ 935.848966][ T5937] dvb-usb: error while querying for an remote control event. [ 935.944237][ T24] usb 5-1: USB disconnect, device number 79 [ 935.954572][ T24] sierra 5-1:0.153: device disconnected [ 935.986389][ T10] m920x_read = error: -19 [ 935.990915][ T10] dvb-usb: error while querying for an remote control event. [ 936.036369][ T5937] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 936.116402][T15023] m920x_read = error: -19 [ 936.120792][T15023] dvb-usb: error while querying for an remote control event. [ 936.226319][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 936.242696][ T5937] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 936.274587][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.282723][ T10] m920x_read = error: -19 [ 936.287519][ T10] dvb-usb: error while querying for an remote control event. [ 936.352214][ T5937] pvrusb2: Hardware description: Terratec Grabster AV400 [ 936.371625][ T5937] pvrusb2: ********** [ 936.385961][ T5937] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 936.406853][T15069] m920x_read = error: -19 [ 936.411966][T15069] dvb-usb: error while querying for an remote control event. [ 936.430217][ T5937] pvrusb2: Important functionality might not be entirely working. [ 936.439971][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 936.466505][ T5937] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 936.493936][ T5937] pvrusb2: ********** [ 936.526551][T15069] m920x_read = error: -19 [ 936.531018][T15069] dvb-usb: error while querying for an remote control event. [ 936.549249][ T2342] pvrusb2: Invalid write control endpoint [ 936.640132][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 936.660945][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.842128][ T24] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 936.868570][T15069] m920x_read = error: -19 [ 936.873015][ T10] usb 2-1: Product: syz [ 936.884159][T21565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.892623][T15069] dvb-usb: error while querying for an remote control event. [ 936.912818][ T10] usb 2-1: Manufacturer: syz [ 936.922923][ T10] usb 2-1: SerialNumber: syz [ 936.928065][T21565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.969936][ T5901] usb 3-1: USB disconnect, device number 66 [ 937.027892][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 937.056450][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 937.068142][T15023] m920x_read = error: -19 [ 937.075398][ T2342] pvrusb2: Invalid write control endpoint [ 937.093133][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.093157][T15023] dvb-usb: error while querying for an remote control event. [ 937.116324][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 937.145258][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 937.160131][ T24] usb 1-1: config 0 has no interface number 0 [ 937.173420][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 937.199910][ T24] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 937.199924][T15023] m920x_read = error: -19 [ 937.199943][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.240867][ T2342] pvrusb2: Device being rendered inoperable [ 937.266504][ T2342] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 937.322210][ T2342] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 937.323889][T15023] dvb-usb: error while querying for an remote control event. [ 937.353072][ T24] usb 1-1: config 0 descriptor?? [ 937.395876][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 937.432082][ T2342] pvrusb2: Attached sub-driver cx25840 [ 937.436431][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 937.438683][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 937.475106][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 937.565494][ T5937] m920x_read = error: -19 [ 937.582889][ T5937] dvb-usb: error while querying for an remote control event. [ 937.631706][T21584] support for cryptoloop has been removed. Use dm-crypt instead. [ 937.741435][T15023] m920x_read = error: -19 [ 937.758179][T15023] dvb-usb: error while querying for an remote control event. [ 938.009394][T15023] m920x_read = error: -19 [ 938.016327][T15023] dvb-usb: error while querying for an remote control event. [ 938.231774][T21598] FAULT_INJECTION: forcing a failure. [ 938.231774][T21598] name failslab, interval 1, probability 0, space 0, times 0 [ 938.250721][T21598] CPU: 1 UID: 0 PID: 21598 Comm: syz.2.3973 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.250752][T21598] Tainted: [L]=SOFTLOCKUP [ 938.250759][T21598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 938.250770][T21598] Call Trace: [ 938.250778][T21598] [ 938.250787][T21598] dump_stack_lvl+0xe8/0x150 [ 938.250818][T21598] should_fail_ex+0x412/0x560 [ 938.250850][T21598] should_failslab+0xa8/0x100 [ 938.250874][T21598] __kmalloc_noprof+0xe8/0x760 [ 938.250896][T21598] ? alloc_pipe_info+0x1fc/0x4d0 [ 938.250915][T21598] ? __kmalloc_cache_noprof+0x15b/0x660 [ 938.250939][T21598] alloc_pipe_info+0x1fc/0x4d0 [ 938.250963][T21598] splice_direct_to_actor+0xa08/0xc70 [ 938.250998][T21598] ? __pfx_direct_splice_actor+0x10/0x10 [ 938.251023][T21598] ? __pfx_aa_file_perm+0x10/0x10 [ 938.251046][T21598] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 938.251070][T21598] ? get_pid_task+0x20/0x1f0 [ 938.251090][T21598] do_splice_direct+0x195/0x290 [ 938.251112][T21598] ? __pfx_do_splice_direct+0x10/0x10 [ 938.251133][T21598] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 938.251148][T21598] ? bpf_lsm_file_permission+0x9/0x20 [ 938.251166][T21598] ? security_file_permission+0x75/0x260 [ 938.251183][T21598] ? rw_verify_area+0x255/0x4d0 [ 938.251204][T21598] do_sendfile+0x535/0x7d0 [ 938.251228][T21598] ? __pfx_do_sendfile+0x10/0x10 [ 938.251247][T21598] ? __fget_files+0x3a0/0x420 [ 938.251276][T21598] __se_sys_sendfile64+0x144/0x1a0 [ 938.251297][T21598] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 938.251323][T21598] do_syscall_64+0x14d/0xf80 [ 938.251341][T21598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.251355][T21598] ? clear_bhb_loop+0x40/0x90 [ 938.251372][T21598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.251386][T21598] RIP: 0033:0x7f6d2079c799 [ 938.251401][T21598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.251414][T21598] RSP: 002b:00007f6d21575028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 938.251430][T21598] RAX: ffffffffffffffda RBX: 00007f6d20a16180 RCX: 00007f6d2079c799 [ 938.251441][T21598] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 938.251449][T21598] RBP: 00007f6d21575090 R08: 0000000000000000 R09: 0000000000000000 [ 938.251458][T21598] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000001 [ 938.251470][T21598] R13: 00007f6d20a16218 R14: 00007f6d20a16180 R15: 00007f6d20b3fa48 [ 938.251493][T21598] [ 938.525416][ T5937] m920x_read = error: -19 [ 938.591845][ T5937] dvb-usb: error while querying for an remote control event. [ 938.774047][ T5937] m920x_read = error: -19 [ 938.787224][ T5937] dvb-usb: error while querying for an remote control event. [ 938.920483][ T5937] m920x_read = error: -19 [ 938.925011][ T5937] dvb-usb: error while querying for an remote control event. [ 939.046408][ T5937] m920x_read = error: -19 [ 939.051002][ T5937] dvb-usb: error while querying for an remote control event. [ 939.167259][T15069] m920x_read = error: -19 [ 939.174474][T15069] dvb-usb: error while querying for an remote control event. [ 939.306628][ T5937] m920x_read = error: -19 [ 939.321368][ T5937] dvb-usb: error while querying for an remote control event. [ 939.376666][T15069] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 939.466526][ T5937] m920x_read = error: -19 [ 939.477456][ T5937] dvb-usb: error while querying for an remote control event. [ 939.541564][T15069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.553219][T15069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.567533][T15069] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 939.577531][T15069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.586549][ T5937] m920x_read = error: -19 [ 939.591100][ T5937] dvb-usb: error while querying for an remote control event. [ 939.601344][T15069] usb 4-1: config 0 descriptor?? [ 939.636597][T15023] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 939.716400][ T5904] m920x_read = error: -19 [ 939.720838][ T5904] dvb-usb: error while querying for an remote control event. [ 939.789752][T15023] usb 5-1: device descriptor read/64, error -71 [ 939.819201][T21621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.848405][ T5904] m920x_read = error: -19 [ 939.852838][ T5904] dvb-usb: error while querying for an remote control event. [ 939.883369][T15069] usbhid 4-1:0.0: can't add hid device: -71 [ 939.898230][T15069] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 939.929493][T15069] usb 4-1: USB disconnect, device number 65 [ 939.999452][ T5904] m920x_read = error: -19 [ 940.008377][ T5904] dvb-usb: error while querying for an remote control event. [ 940.036947][T15023] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 940.079663][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 940.100049][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 940.122281][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 940.134979][ T5911] m920x_read = error: -19 [ 940.139843][ T5911] dvb-usb: error while querying for an remote control event. [ 940.150042][ T24] usb 1-1: USB disconnect, device number 96 [ 940.166723][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 940.197407][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 940.207031][T15023] usb 5-1: device descriptor read/64, error -71 [ 940.242403][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 940.261071][T15069] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 940.270122][ T5911] m920x_read = error: -19 [ 940.274574][ T5911] dvb-usb: error while querying for an remote control event. [ 940.299588][ T10] usb 2-1: USB disconnect, device number 23 [ 940.316612][T15023] usb usb5-port1: attempt power cycle [ 940.376508][T21632] support for cryptoloop has been removed. Use dm-crypt instead. [ 940.396434][ T5911] m920x_read = error: -19 [ 940.400838][ T5911] dvb-usb: error while querying for an remote control event. [ 940.474613][T15069] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.489104][T15069] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 940.500174][T15069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.512681][T15069] usb 4-1: config 0 descriptor?? [ 940.522587][T15069] pwc: Askey VC010 type 2 USB webcam detected. [ 940.536553][ T10] m920x_read = error: -19 [ 940.541514][ T10] dvb-usb: error while querying for an remote control event. [ 940.606344][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 940.658011][T15023] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 940.666136][ T10] m920x_read = error: -19 [ 940.670624][ T10] dvb-usb: error while querying for an remote control event. [ 940.698212][T15023] usb 5-1: device descriptor read/8, error -71 [ 940.857495][ T10] m920x_read = error: -19 [ 940.865605][ T10] dvb-usb: error while querying for an remote control event. [ 940.921504][T15069] pwc: recv_control_msg error -32 req 02 val 2b00 [ 940.938793][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 940.950965][ T24] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 940.962250][T15069] pwc: recv_control_msg error -32 req 02 val 2700 [ 940.986469][T15023] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 941.040241][ T10] m920x_read = error: -19 [ 941.041151][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.050134][T15069] pwc: recv_control_msg error -71 req 02 val 2c00 [ 941.059976][ T10] dvb-usb: error while querying for an remote control event. [ 941.069237][T15023] usb 5-1: device descriptor read/8, error -71 [ 941.091621][T15069] pwc: recv_control_msg error -71 req 04 val 1000 [ 941.227382][T15023] usb usb5-port1: unable to enumerate USB device [ 941.242077][ T10] m920x_read = error: -19 [ 941.246767][ T10] dvb-usb: error while querying for an remote control event. [ 941.282756][T15069] pwc: recv_control_msg error -71 req 04 val 1300 [ 941.290169][T15069] pwc: recv_control_msg error -71 req 04 val 1400 [ 941.294823][ T24] usb 3-1: config 0 descriptor?? [ 941.329562][T15069] pwc: recv_control_msg error -71 req 02 val 2000 [ 941.333512][T21634] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 941.337653][T15069] pwc: recv_control_msg error -71 req 02 val 2100 [ 941.387133][ T10] m920x_read = error: -19 [ 941.392236][ T10] dvb-usb: error while querying for an remote control event. [ 941.428911][T15069] pwc: recv_control_msg error -71 req 04 val 1500 [ 941.441573][T15069] pwc: recv_control_msg error -71 req 02 val 2500 [ 941.453389][T15069] pwc: recv_control_msg error -71 req 02 val 2400 [ 941.466958][T15069] pwc: recv_control_msg error -71 req 02 val 2600 [ 941.475337][T21652] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 941.486882][T15069] pwc: recv_control_msg error -71 req 02 val 2900 [ 941.497505][T15069] pwc: recv_control_msg error -71 req 02 val 2800 [ 941.504444][T15069] pwc: recv_control_msg error -71 req 04 val 1100 [ 941.516462][ T10] m920x_read = error: -19 [ 941.520831][ T10] dvb-usb: error while querying for an remote control event. [ 941.529273][T15069] pwc: recv_control_msg error -71 req 04 val 1200 [ 941.543515][T15069] pwc: Registered as video103. [ 941.581059][T15069] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input79 [ 941.633368][T15069] usb 4-1: USB disconnect, device number 66 [ 941.657918][ T10] m920x_read = error: -19 [ 941.664650][ T10] dvb-usb: error while querying for an remote control event. [ 941.776518][ T10] m920x_read = error: -19 [ 941.787478][ T10] dvb-usb: error while querying for an remote control event. [ 941.814954][T21634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.843460][T21634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.863553][ T24] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 941.870592][ T24] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 941.877765][ T24] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 941.885815][ T24] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 941.894305][ T24] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 941.909519][ T24] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 941.916827][T15069] m920x_read = error: -19 [ 941.918497][ T24] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 941.926754][T15069] dvb-usb: error while querying for an remote control event. [ 941.928051][ T24] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 941.977676][ T24] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 941.992694][ T24] asus 0003:0B05:1ABE.0036: unknown main item tag 0x0 [ 942.011623][ T24] asus 0003:0B05:1ABE.0036: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.2-1/input0 [ 942.057049][T15069] m920x_read = error: -19 [ 942.064178][T15069] dvb-usb: error while querying for an remote control event. [ 942.074579][ T24] usb 3-1: USB disconnect, device number 67 [ 942.187477][T15069] m920x_read = error: -19 [ 942.195501][T15069] dvb-usb: error while querying for an remote control event. [ 942.203589][T21665] loop4: detected capacity change from 0 to 524287936 [ 942.318797][T21663] fido_id[21663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 942.416802][T15023] m920x_read = error: -19 [ 942.423853][T15023] dvb-usb: error while querying for an remote control event. [ 942.616438][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 942.624409][T15023] m920x_read = error: -19 [ 942.634783][T15023] dvb-usb: error while querying for an remote control event. [ 942.902094][T15023] m920x_read = error: -19 [ 943.002244][T15023] dvb-usb: error while querying for an remote control event. [ 943.226364][T15023] m920x_read = error: -19 [ 943.230862][T15023] dvb-usb: error while querying for an remote control event. [ 943.291590][ T24] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 943.306370][ T24] usb 4-1: config 0 has no interface number 1 [ 943.321126][ T24] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 943.346792][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 943.366473][T15023] m920x_read = error: -19 [ 943.370937][T15023] dvb-usb: error while querying for an remote control event. [ 943.383950][ T24] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice=f0.00 [ 943.397177][ T24] usb 4-1: New USB device strings: Mfr=67, Product=0, SerialNumber=3 [ 943.421471][ T24] usb 4-1: Manufacturer: syz [ 943.516031][ T24] usb 4-1: SerialNumber: syz [ 943.516476][T15023] m920x_read = error: -19 [ 943.553736][T15023] dvb-usb: error while querying for an remote control event. [ 943.556506][ T47] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 943.696570][T15023] m920x_read = error: -19 [ 943.716322][T15023] dvb-usb: error while querying for an remote control event. [ 943.737839][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 943.832597][ T24] usb 4-1: config 0 descriptor?? [ 943.852356][ T47] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 943.867573][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.876544][T15023] m920x_read = error: -19 [ 943.880905][T15023] dvb-usb: error while querying for an remote control event. [ 943.893359][ T47] usb 3-1: Product: syz [ 943.897737][ T47] usb 3-1: Manufacturer: syz [ 943.902382][ T47] usb 3-1: SerialNumber: syz [ 943.997158][ T47] usb 3-1: config 0 descriptor?? [ 944.026369][T15023] m920x_read = error: -19 [ 944.030745][T15023] dvb-usb: error while querying for an remote control event. [ 944.060893][T21673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.076811][T21673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.104809][T21673] syzkaller0: entered promiscuous mode [ 944.110465][T21673] syzkaller0: entered allmulticast mode [ 944.129018][ T47] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 944.166582][T15023] m920x_read = error: -19 [ 944.166830][ T47] dw2102: su3000_power_ctrl: 1, initialized 0 [ 944.170956][T15023] dvb-usb: error while querying for an remote control event. [ 944.215047][ T47] dvb-usb: bulk message failed: -22 (2/0) [ 944.234011][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 944.257335][ T47] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 944.277035][T15023] m920x_read = error: -19 [ 944.281410][T15023] dvb-usb: error while querying for an remote control event. [ 944.281448][ T47] usb 3-1: media controller created [ 944.294789][ T47] dvb-usb: bulk message failed: -22 (6/0) [ 944.360697][ T24] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 944.370775][ T47] dw2102: i2c transfer failed. [ 944.375577][ T47] dvb-usb: bulk message failed: -22 (6/0) [ 944.384888][T21681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.396401][ T24] uvcvideo 4-1:0.199: No valid video chain found. [ 944.403638][T15023] m920x_read = error: -19 [ 944.413693][T15023] dvb-usb: error while querying for an remote control event. [ 944.414151][ T47] dw2102: i2c transfer failed. [ 944.458193][T21681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.466065][ T24] usb 4-1: USB disconnect, device number 67 [ 944.484670][ T47] dvb-usb: bulk message failed: -22 (6/0) [ 944.519357][ T47] dw2102: i2c transfer failed. [ 944.523646][T21681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.546363][ T47] dvb-usb: bulk message failed: -22 (6/0) [ 944.559089][ T47] dw2102: i2c transfer failed. [ 944.567203][T21681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.585301][T15023] m920x_read = error: -19 [ 944.586306][ T47] dvb-usb: bulk message failed: -22 (6/0) [ 944.592983][T15023] dvb-usb: error while querying for an remote control event. [ 944.595355][ T47] dw2102: i2c transfer failed. [ 944.595378][ T47] dvb-usb: bulk message failed: -22 (6/0) [ 944.595394][ T47] dw2102: i2c transfer failed. [ 944.670996][ T47] dvb-usb: MAC address: 02:02:02:02:02:02 [ 944.714034][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 944.776582][T15023] m920x_read = error: -19 [ 944.782836][ T47] dvb-usb: bulk message failed: -22 (3/0) [ 944.799863][T15023] dvb-usb: error while querying for an remote control event. [ 944.809433][ T47] dw2102: command 0x0e transfer failed. [ 944.827401][ T47] dvb-usb: bulk message failed: -22 (3/0) [ 944.844278][ T47] dw2102: command 0x0e transfer failed. [ 944.930176][T15023] m920x_read = error: -19 [ 944.935620][T15023] dvb-usb: error while querying for an remote control event. [ 945.066463][T21710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 945.082300][T15023] m920x_read = error: -19 [ 945.089305][T15023] dvb-usb: error while querying for an remote control event. [ 945.220800][ T47] dvb-usb: bulk message failed: -22 (3/0) [ 945.232906][ T47] dw2102: command 0x0e transfer failed. [ 945.252728][ T47] dvb-usb: bulk message failed: -22 (3/0) [ 945.261056][ T47] dw2102: command 0x0e transfer failed. [ 945.273025][ T47] dvb-usb: bulk message failed: -22 (1/0) [ 945.281244][ T47] dw2102: command 0x51 transfer failed. [ 945.319244][T15023] m920x_read = error: -19 [ 945.327709][T15023] dvb-usb: error while querying for an remote control event. [ 945.579432][ T10] m920x_read = error: -19 [ 945.584007][ T10] dvb-usb: error while querying for an remote control event. [ 945.662394][ T47] DVB: Unable to find symbol ds3000_attach() [ 945.682374][ T47] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 945.706405][ T10] m920x_read = error: -19 [ 945.711073][ T10] dvb-usb: error while querying for an remote control event. [ 945.737195][T21717] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 945.821653][T21717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4005'. [ 945.826407][ T5911] m920x_read = error: -19 [ 945.836646][ T5911] dvb-usb: error while querying for an remote control event. [ 945.927013][ T47] rc_core: IR keymap rc-su3000 not found [ 945.932668][ T47] Registered IR keymap rc-empty [ 945.967917][ T47] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 945.976390][ T5911] m920x_read = error: -19 [ 945.985877][ T5911] dvb-usb: error while querying for an remote control event. [ 946.049742][ T47] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input80 [ 946.088533][ T47] dvb-usb: schedule remote query interval to 150 msecs. [ 946.106440][ T5911] m920x_read = error: -19 [ 946.110862][ T47] dw2102: su3000_power_ctrl: 0, initialized 1 [ 946.110873][ T5911] dvb-usb: error while querying for an remote control event. [ 946.135078][ T47] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 946.217716][ T5911] m920x_read = error: -19 [ 946.227827][ T5911] dvb-usb: error while querying for an remote control event. [ 946.281022][ T47] dvb-usb: bulk message failed: -22 (1/0) [ 946.295278][ T47] dw2102: i2c transfer failed. [ 946.336654][ T47] usb 3-1: USB disconnect, device number 68 [ 946.356925][ T5911] m920x_read = error: -19 [ 946.362046][ T5911] dvb-usb: error while querying for an remote control event. [ 946.464914][T21725] tipc: Started in network mode [ 946.472059][T21725] tipc: Node identity ac141424, cluster identity 4711 [ 946.491972][T21726] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4007'. [ 946.496903][T21725] tipc: New replicast peer: 10.1.1.0 [ 946.546798][T21726] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4007'. [ 946.566427][ T5911] m920x_read = error: -19 [ 946.594689][ T5911] dvb-usb: error while querying for an remote control event. [ 946.617781][T21725] tipc: Enabled bearer , priority 10 [ 946.726433][ T5911] m920x_read = error: -19 [ 946.730988][ T5911] dvb-usb: error while querying for an remote control event. [ 946.878038][ T5911] m920x_read = error: -19 [ 946.894075][ T5911] dvb-usb: error while querying for an remote control event. [ 946.925258][ T47] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 947.046650][ T5911] m920x_read = error: -19 [ 947.051133][ T5911] dvb-usb: error while querying for an remote control event. [ 947.195364][T21741] tipc: Started in network mode [ 947.211239][ T5911] m920x_read = error: -19 [ 947.219704][ T5911] dvb-usb: error while querying for an remote control event. [ 947.227988][T21741] tipc: Node identity ac14140f, cluster identity 4711 [ 947.245137][T21741] tipc: New replicast peer: 255.255.255.255 [ 947.262941][T21741] tipc: Enabled bearer , priority 10 [ 947.346631][T15069] m920x_read = error: -19 [ 947.351018][T15069] dvb-usb: error while querying for an remote control event. [ 947.376329][ T5911] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 947.453955][ T47] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 947.466579][ T10] m920x_read = error: -19 [ 947.470952][ T10] dvb-usb: error while querying for an remote control event. [ 947.526997][ T5911] usb 5-1: too many configurations: 33, using maximum allowed: 8 [ 947.561683][ T5911] usb 5-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 947.570964][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.579130][T15069] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 947.590466][ T5911] usb 5-1: Product: syz [ 947.594660][ T5911] usb 5-1: Manufacturer: syz [ 947.600613][ T5911] usb 5-1: SerialNumber: syz [ 947.606344][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 947.619164][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.621829][ T5911] usb 5-1: config 0 descriptor?? [ 947.635485][ T10] m920x_read = error: -19 [ 947.640130][ T10] dvb-usb: error while querying for an remote control event. [ 947.647614][T15023] tipc: Node number set to 2886997028 [ 947.662691][ T5911] go7007-loader 5-1:0.0: can't handle multiple config [ 947.686353][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 947.696419][ T5911] go7007-loader 5-1:0.0: probe failed [ 947.720487][T21750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4015'. [ 947.730320][T21750] tc_dump_action: action bad kind [ 947.776463][ T10] m920x_read = error: -19 [ 947.780842][ T10] dvb-usb: error while querying for an remote control event. [ 947.860908][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 947.863102][T21737] netlink: 'syz.4.4010': attribute type 8 has an invalid length. [ 947.870298][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.888863][T21737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4010'. [ 947.906093][T15069] usb 2-1: unable to get BOS descriptor or descriptor too short [ 947.933335][ T47] usb 4-1: Product: syz [ 947.947549][T15069] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 947.959078][ T47] usb 4-1: Manufacturer: syz [ 947.968223][T15069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.976327][ T47] usb 4-1: SerialNumber: syz [ 947.982734][T21737] bond0: entered promiscuous mode [ 947.992624][T15069] usb 2-1: Product: syz [ 948.002719][T15069] usb 2-1: Manufacturer: syz [ 948.007472][ T5911] m920x_read = error: -19 [ 948.013444][ T5911] dvb-usb: error while querying for an remote control event. [ 948.020886][T15069] usb 2-1: SerialNumber: syz [ 948.027045][T14058] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 948.028569][T21737] bond_slave_0: entered promiscuous mode [ 948.057915][T21737] gretap0: entered promiscuous mode [ 948.064795][T21737] debugfs: 'hsr1' already exists in 'hsr' [ 948.095446][T21737] Cannot create hsr debugfs directory [ 948.101899][T21737] hsr1: entered promiscuous mode [ 948.124933][ T5911] usb 5-1: USB disconnect, device number 84 [ 948.137358][ T10] m920x_read = error: -19 [ 948.141790][ T10] dvb-usb: error while querying for an remote control event. [ 948.198770][T14058] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.222756][T14058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 948.256739][ T10] m920x_read = error: -19 [ 948.263830][ T10] dvb-usb: error while querying for an remote control event. [ 948.279220][ T47] usb 4-1: 0:2 : does not exist [ 948.290680][ T47] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 948.302458][T14058] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 948.357908][T14058] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 948.376425][ T5911] m920x_read = error: -19 [ 948.381920][ T5911] dvb-usb: error while querying for an remote control event. [ 948.389408][ T10] tipc: Node number set to 2886997007 [ 948.404700][T14058] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.420866][ T47] usb 4-1: USB disconnect, device number 68 [ 948.442982][T14058] usb 1-1: Product: syz [ 948.461664][T14058] usb 1-1: Manufacturer: syz [ 948.481240][T14058] usb 1-1: SerialNumber: syz [ 948.506396][ T5911] m920x_read = error: -19 [ 948.510794][ T5911] dvb-usb: error while querying for an remote control event. [ 948.533460][T14058] usb 1-1: config 0 descriptor?? [ 948.626963][ T10] m920x_read = error: -19 [ 948.631361][ T10] dvb-usb: error while querying for an remote control event. [ 948.686431][ T5911] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 948.701200][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 948.725287][T15069] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 948.746478][ T10] m920x_read = error: -19 [ 948.755510][ T10] dvb-usb: error while querying for an remote control event. [ 948.866471][ T5911] usb 3-1: device descriptor read/64, error -71 [ 948.886440][ T10] m920x_read = error: -19 [ 948.890819][ T10] dvb-usb: error while querying for an remote control event. [ 948.989254][T15069] usb 2-1: USB disconnect, device number 24 [ 949.074621][ T10] m920x_read = error: -19 [ 949.086403][ T10] dvb-usb: error while querying for an remote control event. [ 949.116404][ T5911] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 949.144978][ T6876] udevd[6876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 949.206402][ T10] m920x_read = error: -19 [ 949.210979][ T10] dvb-usb: error while querying for an remote control event. [ 949.256393][ T5911] usb 3-1: device descriptor read/64, error -71 [ 949.386364][ T5911] usb usb3-port1: attempt power cycle [ 949.436500][ T10] m920x_read = error: -19 [ 949.440965][ T10] dvb-usb: error while querying for an remote control event. [ 949.558446][ T10] m920x_read = error: -19 [ 949.563374][ T10] dvb-usb: error while querying for an remote control event. [ 949.686661][ T5904] m920x_read = error: -19 [ 949.691050][ T5904] dvb-usb: error while querying for an remote control event. [ 949.726658][ T5911] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 949.757031][ T5911] usb 3-1: device descriptor read/8, error -71 [ 949.806384][ T10] m920x_read = error: -19 [ 949.810741][ T10] dvb-usb: error while querying for an remote control event. [ 949.926667][ T10] m920x_read = error: -19 [ 949.931026][ T10] dvb-usb: error while querying for an remote control event. [ 950.186362][ T5911] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 950.208633][ T5911] usb 3-1: device descriptor read/8, error -71 [ 950.236537][ T10] m920x_read = error: -19 [ 950.241000][ T10] dvb-usb: error while querying for an remote control event. [ 950.327666][ T5911] usb usb3-port1: unable to enumerate USB device [ 950.406651][ T10] m920x_read = error: -19 [ 950.411241][ T10] dvb-usb: error while querying for an remote control event. [ 950.546405][ T10] m920x_read = error: -19 [ 950.621979][ T5901] usb 1-1: USB disconnect, device number 97 [ 950.625955][ T10] dvb-usb: error while querying for an remote control event. [ 950.778165][ T5911] m920x_read = error: -19 [ 950.784719][ T5911] dvb-usb: error while querying for an remote control event. [ 950.812907][T21794] netlink: 'syz.0.4027': attribute type 29 has an invalid length. [ 950.960337][T21794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4027'. [ 950.969642][ T5911] m920x_read = error: -19 [ 950.974018][ T5911] dvb-usb: error while querying for an remote control event. [ 951.116476][ T5911] m920x_read = error: -19 [ 951.120864][ T5911] dvb-usb: error while querying for an remote control event. [ 951.237329][ T5911] m920x_read = error: -19 [ 951.249737][ T5911] dvb-usb: error while querying for an remote control event. [ 951.405891][ T5911] m920x_read = error: -19 [ 951.415550][ T5911] dvb-usb: error while querying for an remote control event. [ 951.529918][ T5911] m920x_read = error: -19 [ 951.536473][ T5911] dvb-usb: error while querying for an remote control event. [ 951.655856][ T5824] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 951.666491][ T5911] m920x_read = error: -19 [ 951.769812][ T5911] dvb-usb: error while querying for an remote control event. [ 951.832199][T21810] syzkaller0: entered promiscuous mode [ 951.925330][ T5911] m920x_read = error: -19 [ 951.925582][T21810] syzkaller0: entered allmulticast mode [ 951.944550][ T5911] dvb-usb: error while querying for an remote control event. [ 952.056367][T14058] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 952.096372][ T5911] m920x_read = error: -19 [ 952.112860][ T5911] dvb-usb: error while querying for an remote control event. [ 952.209597][T14058] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 952.239175][T14058] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.246618][ T5911] m920x_read = error: -19 [ 952.256714][ T5911] dvb-usb: error while querying for an remote control event. [ 952.276433][T14058] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.301392][T14058] usb 4-1: config 0 interface 0 has no altsetting 0 [ 952.318890][T14058] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.332843][T14058] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.369033][T14058] usb 4-1: config 0 interface 0 has no altsetting 0 [ 952.376583][ T5911] m920x_read = error: -19 [ 952.381207][ T5911] dvb-usb: error while querying for an remote control event. [ 952.389275][T14058] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.407270][T14058] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.419894][T14058] usb 4-1: config 0 interface 0 has no altsetting 0 [ 952.431133][T21822] fuse: Bad value for 'fd' [ 952.450865][T14058] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.465559][T14058] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.516869][ T5911] m920x_read = error: -19 [ 952.548411][T21824] xt_TPROXY: Can be used only with -p tcp or -p udp [ 952.585420][ T5911] dvb-usb: error while querying for an remote control event. [ 952.626497][T14058] usb 4-1: config 0 interface 0 has no altsetting 0 [ 952.652840][T14058] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.721245][T14058] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.773751][ T5911] m920x_read = error: -19 [ 952.779781][ T5911] dvb-usb: error while querying for an remote control event. [ 952.786316][T14058] usb 4-1: config 0 interface 0 has no altsetting 0 [ 952.803606][T14058] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.916422][T15069] m920x_read = error: -19 [ 952.920816][T15069] dvb-usb: error while querying for an remote control event. [ 952.936412][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 952.949743][T14058] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.998720][T14058] usb 4-1: config 0 interface 0 has no altsetting 0 [ 953.026080][T14058] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.044586][T14058] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.067033][ T5911] m920x_read = error: -19 [ 953.075737][ T5911] dvb-usb: error while querying for an remote control event. [ 953.075787][T14058] usb 4-1: config 0 interface 0 has no altsetting 0 [ 953.098533][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 953.111849][ T10] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 953.121313][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.131627][T14058] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.248048][ T10] usb 3-1: Product: syz [ 953.253141][ T10] usb 3-1: Manufacturer: syz [ 953.307044][ T10] usb 3-1: SerialNumber: syz [ 953.338764][T14058] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.363186][T14058] usb 4-1: config 0 interface 0 has no altsetting 0 [ 953.375382][ T5911] m920x_read = error: -19 [ 953.465027][ T5911] dvb-usb: error while querying for an remote control event. [ 953.687677][T14058] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 953.722925][T14058] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 953.771972][ T5911] m920x_read = error: -19 [ 953.788091][ T5911] dvb-usb: error while querying for an remote control event. [ 953.802806][T14058] usb 4-1: Product: syz [ 953.814755][T14058] usb 4-1: Manufacturer: syz [ 953.831290][T14058] usb 4-1: SerialNumber: syz [ 953.856039][T14058] usb 4-1: config 0 descriptor?? [ 953.895600][T14058] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 953.906614][T15069] m920x_read = error: -19 [ 953.911237][T15069] dvb-usb: error while querying for an remote control event. [ 954.113781][T15069] m920x_read = error: -19 [ 954.129126][T15069] dvb-usb: error while querying for an remote control event. [ 954.254037][ T5904] m920x_read = error: -19 [ 954.259650][ T5904] dvb-usb: error while querying for an remote control event. [ 954.348456][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 954.358177][ T5901] usb 4-1: USB disconnect, device number 69 [ 954.367770][ T5901] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 954.386586][ T5904] m920x_read = error: -19 [ 954.391148][ T5904] dvb-usb: error while querying for an remote control event. [ 954.646490][ T5904] m920x_read = error: -19 [ 954.650975][ T5904] dvb-usb: error while querying for an remote control event. [ 954.766547][ T5904] m920x_read = error: -19 [ 954.772452][ T5904] dvb-usb: error while querying for an remote control event. [ 954.886691][ T5904] m920x_read = error: -19 [ 954.891851][ T5904] dvb-usb: error while querying for an remote control event. [ 955.026574][ T5904] m920x_read = error: -19 [ 955.030979][ T5904] dvb-usb: error while querying for an remote control event. [ 955.157202][T15069] m920x_read = error: -19 [ 955.164922][T15069] dvb-usb: error while querying for an remote control event. [ 955.186828][ T5904] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 955.353261][T15069] m920x_read = error: -19 [ 955.357811][T15069] dvb-usb: error while querying for an remote control event. [ 955.416001][ T10] usb 3-1: 1:1 : bogus bTerminalLink 0 [ 955.429584][T21843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.465430][T21843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.474024][T15069] m920x_read = error: -19 [ 955.496565][T15069] dvb-usb: error while querying for an remote control event. [ 955.588809][T21843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4042'. [ 955.626544][T15069] m920x_read = error: -19 [ 955.633727][T15069] dvb-usb: error while querying for an remote control event. [ 955.686622][ T10] usb 3-1: can't set first interface for hiFace device. [ 955.725233][ T10] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 955.756411][T15069] m920x_read = error: -19 [ 955.765897][T15069] dvb-usb: error while querying for an remote control event. [ 955.781389][ T10] usb 3-1: USB disconnect, device number 73 [ 955.889546][ T6207] udevd[6207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 955.916667][T15069] m920x_read = error: -19 [ 955.921026][T15069] dvb-usb: error while querying for an remote control event. [ 956.046515][T15069] m920x_read = error: -19 [ 956.050941][T15069] dvb-usb: error while querying for an remote control event. [ 956.222662][T15069] m920x_read = error: -19 [ 956.227150][T15069] dvb-usb: error while querying for an remote control event. [ 956.271622][T21868] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 956.285086][ T10] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 956.297231][T21869] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 956.301840][ T5904] usb 1-1: unable to get BOS descriptor or descriptor too short [ 956.346569][ T5904] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 956.354370][T15069] m920x_read = error: -19 [ 956.359401][T15069] dvb-usb: error while querying for an remote control event. [ 956.370147][ T5904] usb 1-1: can't read configurations, error -71 [ 956.484872][ T10] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 956.493673][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.504860][T15069] m920x_read = error: -19 [ 956.509236][T15069] dvb-usb: error while querying for an remote control event. [ 956.519522][ T10] usb 3-1: config 0 has no interface number 0 [ 956.540477][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 956.553159][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.581539][ T10] usb 3-1: Product: syz [ 956.604220][ T10] usb 3-1: Manufacturer: syz [ 956.648098][T15069] m920x_read = error: -19 [ 956.694764][ T10] usb 3-1: SerialNumber: syz [ 956.696368][T14058] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 956.699524][T15069] dvb-usb: error while querying for an remote control event. [ 956.717400][ T10] usb 3-1: config 0 descriptor?? [ 956.758564][ T10] hub 3-1:0.31: bad descriptor, ignoring hub [ 956.765018][ T10] hub 3-1:0.31: probe with driver hub failed with error -5 [ 956.777351][ T10] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 956.786537][ T10] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized! [ 956.796480][ T10] uvcvideo 3-1:0.31: Failed to create links for entity 32774 [ 956.812415][ T10] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 956.836552][T15069] m920x_read = error: -19 [ 956.841080][T15069] dvb-usb: error while querying for an remote control event. [ 956.878479][T14058] usb 5-1: config 1 interface 0 has no altsetting 0 [ 956.887774][T14058] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.40 [ 956.897249][T14058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.913765][T14058] usb 5-1: Manufacturer: ␉ [ 956.956389][ T10] m920x_read = error: -19 [ 956.964946][ T10] dvb-usb: error while querying for an remote control event. [ 957.076925][T15069] m920x_read = error: -19 [ 957.078994][ T5901] usb 3-1: USB disconnect, device number 74 [ 957.081444][T15069] dvb-usb: error while querying for an remote control event. [ 957.389422][T15069] m920x_read = error: -19 [ 957.393807][T15069] dvb-usb: error while querying for an remote control event. [ 957.446481][T21874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.456483][T21874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.473681][T21874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.482563][T21874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.501652][T14058] usbhid 5-1:1.0: can't add hid device: -71 [ 957.507751][T14058] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 957.513791][T21891] FAULT_INJECTION: forcing a failure. [ 957.513791][T21891] name failslab, interval 1, probability 0, space 0, times 0 [ 957.528325][ T5904] m920x_read = error: -19 [ 957.531555][T14058] usb 5-1: USB disconnect, device number 85 [ 957.532760][ T5904] dvb-usb: error while querying for an remote control event. [ 957.591038][T21891] CPU: 0 UID: 0 PID: 21891 Comm: syz.3.4056 Tainted: G L syzkaller #0 PREEMPT(full) [ 957.591074][T21891] Tainted: [L]=SOFTLOCKUP [ 957.591081][T21891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 957.591091][T21891] Call Trace: [ 957.591098][T21891] [ 957.591105][T21891] dump_stack_lvl+0xe8/0x150 [ 957.591134][T21891] should_fail_ex+0x412/0x560 [ 957.591161][T21891] should_failslab+0xa8/0x100 [ 957.591185][T21891] __kmalloc_noprof+0xe8/0x760 [ 957.591205][T21891] ? copy_splice_read+0x16f/0xaa0 [ 957.591232][T21891] copy_splice_read+0x16f/0xaa0 [ 957.591264][T21891] ? __pfx_copy_splice_read+0x10/0x10 [ 957.591288][T21891] ? look_up_lock_class+0x57/0x110 [ 957.591304][T21891] ? register_lock_class+0x31/0x2e0 [ 957.591319][T21891] ? file_end_write+0xd8/0x250 [ 957.591333][T21891] ? direct_splice_actor+0x10c/0x160 [ 957.591348][T21891] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 957.591358][T21891] splice_direct_to_actor+0x4a0/0xc70 [ 957.591378][T21891] ? __pfx_direct_splice_actor+0x10/0x10 [ 957.591395][T21891] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 957.591409][T21891] ? get_pid_task+0x20/0x1f0 [ 957.591422][T21891] do_splice_direct+0x195/0x290 [ 957.591438][T21891] ? __pfx_do_splice_direct+0x10/0x10 [ 957.591452][T21891] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 957.591462][T21891] ? bpf_lsm_file_permission+0x9/0x20 [ 957.591474][T21891] ? security_file_permission+0x75/0x260 [ 957.591487][T21891] ? rw_verify_area+0x255/0x4d0 [ 957.591499][T21891] do_sendfile+0x535/0x7d0 [ 957.591516][T21891] ? __pfx_do_sendfile+0x10/0x10 [ 957.591529][T21891] ? __fget_files+0x3a0/0x420 [ 957.591548][T21891] __se_sys_sendfile64+0x144/0x1a0 [ 957.591565][T21891] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 957.591583][T21891] do_syscall_64+0x14d/0xf80 [ 957.591592][T21891] ? trace_irq_disable+0x3b/0x150 [ 957.591606][T21891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.591616][T21891] ? clear_bhb_loop+0x40/0x90 [ 957.591628][T21891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.591638][T21891] RIP: 0033:0x7ff913d9c799 [ 957.591649][T21891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.591658][T21891] RSP: 002b:00007ff914cd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 957.591670][T21891] RAX: ffffffffffffffda RBX: 00007ff914016180 RCX: 00007ff913d9c799 [ 957.591677][T21891] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 957.591684][T21891] RBP: 00007ff914cd4090 R08: 0000000000000000 R09: 0000000000000000 [ 957.591690][T21891] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000001 [ 957.591696][T21891] R13: 00007ff914016218 R14: 00007ff914016180 R15: 00007ff91413fa48 [ 957.591711][T21891] [ 958.148601][ T5904] m920x_read = error: -19 [ 958.153029][ T5904] dvb-usb: error while querying for an remote control event. [ 958.248367][T21896] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4060'. [ 958.267267][T15069] m920x_read = error: -19 [ 958.276552][T15069] dvb-usb: error while querying for an remote control event. [ 958.406369][T15069] m920x_read = error: -19 [ 958.410840][T15069] dvb-usb: error while querying for an remote control event. [ 958.526372][T15069] m920x_read = error: -19 [ 958.530762][T15069] dvb-usb: error while querying for an remote control event. [ 958.543256][T21910] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4065'. [ 958.561406][T21912] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4067'. [ 958.581321][T21914] netlink: 'syz.0.4066': attribute type 29 has an invalid length. [ 958.666399][T15069] m920x_read = error: -19 [ 958.670788][T15069] dvb-usb: error while querying for an remote control event. [ 958.807997][ T5824] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 958.810554][ T5824] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 958.818215][T15069] m920x_read = error: -19 [ 958.834915][T15069] dvb-usb: error while querying for an remote control event. [ 958.946399][T15069] m920x_read = error: -19 [ 958.956453][T15069] dvb-usb: error while querying for an remote control event. [ 958.997898][T21945] FAULT_INJECTION: forcing a failure. [ 958.997898][T21945] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 959.011274][T21945] CPU: 1 UID: 0 PID: 21945 Comm: syz.0.4074 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.011302][T21945] Tainted: [L]=SOFTLOCKUP [ 959.011309][T21945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 959.011319][T21945] Call Trace: [ 959.011328][T21945] [ 959.011336][T21945] dump_stack_lvl+0xe8/0x150 [ 959.011366][T21945] should_fail_ex+0x412/0x560 [ 959.011401][T21945] prepare_alloc_pages+0x22a/0x650 [ 959.011431][T21945] __alloc_frozen_pages_noprof+0x12f/0x380 [ 959.011457][T21945] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 959.011492][T21945] alloc_pages_bulk_noprof+0x558/0x700 [ 959.011516][T21945] ? __kmalloc_noprof+0x37d/0x760 [ 959.011535][T21945] ? copy_splice_read+0x16f/0xaa0 [ 959.011559][T21945] ? __kmalloc_noprof+0x1b8/0x760 [ 959.011580][T21945] copy_splice_read+0x19f/0xaa0 [ 959.011614][T21945] ? __pfx_copy_splice_read+0x10/0x10 [ 959.011641][T21945] ? look_up_lock_class+0x57/0x110 [ 959.011669][T21945] ? register_lock_class+0x31/0x2e0 [ 959.011694][T21945] ? file_end_write+0xd8/0x250 [ 959.011719][T21945] ? direct_splice_actor+0x10c/0x160 [ 959.011745][T21945] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 959.011764][T21945] splice_direct_to_actor+0x4a0/0xc70 [ 959.011797][T21945] ? __pfx_direct_splice_actor+0x10/0x10 [ 959.011829][T21945] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 959.011853][T21945] ? get_pid_task+0x20/0x1f0 [ 959.011877][T21945] do_splice_direct+0x195/0x290 [ 959.011903][T21945] ? __pfx_do_splice_direct+0x10/0x10 [ 959.011929][T21945] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 959.011948][T21945] ? bpf_lsm_file_permission+0x9/0x20 [ 959.011969][T21945] ? security_file_permission+0x75/0x260 [ 959.011990][T21945] ? rw_verify_area+0x255/0x4d0 [ 959.012012][T21945] do_sendfile+0x535/0x7d0 [ 959.012041][T21945] ? __pfx_do_sendfile+0x10/0x10 [ 959.012065][T21945] ? __fget_files+0x3a0/0x420 [ 959.012098][T21945] __se_sys_sendfile64+0x144/0x1a0 [ 959.012123][T21945] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 959.012154][T21945] do_syscall_64+0x14d/0xf80 [ 959.012171][T21945] ? trace_irq_disable+0x3b/0x150 [ 959.012194][T21945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.012213][T21945] ? clear_bhb_loop+0x40/0x90 [ 959.012234][T21945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.012252][T21945] RIP: 0033:0x7f6aff59c799 [ 959.012269][T21945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.012284][T21945] RSP: 002b:00007f6b0044c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 959.012303][T21945] RAX: ffffffffffffffda RBX: 00007f6aff816180 RCX: 00007f6aff59c799 [ 959.012316][T21945] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 959.012327][T21945] RBP: 00007f6b0044c090 R08: 0000000000000000 R09: 0000000000000000 [ 959.012338][T21945] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000001 [ 959.012350][T21945] R13: 00007f6aff816218 R14: 00007f6aff816180 R15: 00007f6aff93fa48 [ 959.012376][T21945] [ 959.468744][T15069] m920x_read = error: -19 [ 959.473083][T15069] dvb-usb: error while querying for an remote control event. [ 959.621458][T21936] dvmrp0: entered allmulticast mode [ 959.650819][T15069] m920x_read = error: -19 [ 959.655206][T15069] dvb-usb: error while querying for an remote control event. [ 959.826366][T15069] m920x_read = error: -19 [ 959.830807][T15069] dvb-usb: error while querying for an remote control event. [ 959.958169][T15069] m920x_read = error: -19 [ 959.972300][T15069] dvb-usb: error while querying for an remote control event. [ 960.086948][T21958] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4080'. [ 960.116421][T15069] m920x_read = error: -19 [ 960.120787][T15069] dvb-usb: error while querying for an remote control event. [ 960.246436][T15069] m920x_read = error: -19 [ 960.251224][T15069] dvb-usb: error while querying for an remote control event. [ 960.364412][T21971] fuse: Bad value for 'user_id' [ 960.378556][T21971] fuse: Bad value for 'user_id' [ 960.491392][T15069] m920x_read = error: -19 [ 960.560496][T15069] dvb-usb: error while querying for an remote control event. [ 960.706369][T15069] m920x_read = error: -19 [ 960.710796][T15069] dvb-usb: error while querying for an remote control event. [ 960.846023][T15069] m920x_read = error: -19 [ 960.853451][T15069] dvb-usb: error while querying for an remote control event. [ 960.920732][T21981] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4086'. [ 960.966523][T15069] m920x_read = error: -19 [ 960.978990][T15069] dvb-usb: error while querying for an remote control event. [ 961.106402][T14058] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 961.146406][T15069] m920x_read = error: -19 [ 961.162450][T15069] dvb-usb: error while querying for an remote control event. [ 961.266502][ T47] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 961.288235][T14058] usb 5-1: Using ep0 maxpacket: 8 [ 961.303469][T15069] m920x_read = error: -19 [ 961.338914][T14058] usb 5-1: unable to get BOS descriptor or descriptor too short [ 961.356658][T14058] usb 5-1: config 4 has an invalid interface number: 133 but max is 0 [ 961.365286][T14058] usb 5-1: config 4 has no interface number 0 [ 961.389927][T14058] usb 5-1: New USB device found, idVendor=12d1, idProduct=8b88, bcdDevice=f3.59 [ 961.399463][T14058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.426560][T14058] usb 5-1: Product: syz [ 961.441353][T15069] dvb-usb: error while querying for an remote control event. [ 961.441617][T14058] usb 5-1: Manufacturer: syz [ 961.485379][T14058] usb 5-1: SerialNumber: syz [ 961.507792][ T47] usb 1-1: config 1 has an invalid interface number: 94 but max is 0 [ 961.541380][ T47] usb 1-1: config 1 has no interface number 0 [ 961.570494][ T47] usb 1-1: config 1 interface 94 altsetting 233 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 961.596435][ T47] usb 1-1: config 1 interface 94 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 961.616336][ T47] usb 1-1: config 1 interface 94 has no altsetting 0 [ 961.633417][ T47] usb 1-1: New USB device found, idVendor=2100, idProduct=9e66, bcdDevice=c7.28 [ 961.660498][ T10] m920x_read = error: -19 [ 961.675093][ T10] dvb-usb: error while querying for an remote control event. [ 961.705705][T21987] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4088'. [ 961.726192][ T5824] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 961.732370][T21975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.742863][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.823535][T21986] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4088'. [ 961.864198][T21975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.906775][ T10] m920x_read = error: -19 [ 961.911164][ T10] dvb-usb: error while querying for an remote control event. [ 962.107435][ T10] m920x_read = error: -19 [ 962.226751][ T10] dvb-usb: error while querying for an remote control event. [ 962.228032][T21993] netlink: 'syz.1.4090': attribute type 1 has an invalid length. [ 962.422237][ T10] m920x_read = error: -19 [ 962.444082][ T10] dvb-usb: error while querying for an remote control event. [ 962.585065][ T10] m920x_read = error: -19 [ 962.591765][ T10] dvb-usb: error while querying for an remote control event. [ 962.716108][ T10] m920x_read = error: -19 [ 962.725235][ T10] dvb-usb: error while querying for an remote control event. [ 962.856441][T15069] m920x_read = error: -19 [ 962.861845][T15069] dvb-usb: error while querying for an remote control event. [ 962.871277][T14058] huawei_cdc_ncm 5-1:4.133: CDC Union missing and no IAD found [ 962.915183][T14058] huawei_cdc_ncm 5-1:4.133: bind() failure [ 962.980062][T15069] m920x_read = error: -19 [ 962.985921][T15069] dvb-usb: error while querying for an remote control event. [ 963.001926][T21993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 963.091347][T14058] usb 5-1: USB disconnect, device number 86 [ 963.106393][T15069] m920x_read = error: -19 [ 963.110990][T15069] dvb-usb: error while querying for an remote control event. [ 963.306497][T15069] m920x_read = error: -19 [ 963.368913][T15069] dvb-usb: error while querying for an remote control event. [ 963.556537][T15069] m920x_read = error: -19 [ 963.561022][T15069] dvb-usb: error while querying for an remote control event. [ 963.686455][T15069] m920x_read = error: -19 [ 963.691267][T15069] dvb-usb: error while querying for an remote control event. [ 963.696365][T14058] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 963.816429][ T10] m920x_read = error: -19 [ 963.820881][ T10] dvb-usb: error while querying for an remote control event. [ 963.962810][T15069] m920x_read = error: -19 [ 963.984002][T15069] dvb-usb: error while querying for an remote control event. [ 963.984432][T14058] usb 5-1: Using ep0 maxpacket: 32 [ 964.056406][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 964.069647][T14058] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 964.093326][ T47] usb 1-1: string descriptor 0 read error: -71 [ 964.128416][ T47] ftdi_sio 1-1:1.94: FTDI USB Serial Device converter detected [ 964.136074][T14058] usb 5-1: config 0 has no interface number 0 [ 964.158562][T15069] m920x_read = error: -19 [ 964.162908][T15069] dvb-usb: error while querying for an remote control event. [ 964.171827][ T47] ftdi_sio ttyUSB0: unknown device type: 0xc728 [ 964.186633][T14058] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 964.376905][ T10] usb 2-1: config 0 has an invalid interface number: 13 but max is 0 [ 964.396733][ T10] usb 2-1: config 0 has no interface number 0 [ 964.413235][ T10] usb 2-1: config 0 interface 13 has no altsetting 0 [ 964.420206][T15069] m920x_read = error: -19 [ 964.436948][T14058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.439843][T15069] dvb-usb: error while querying for an remote control event. [ 964.461756][ T47] usb 1-1: USB disconnect, device number 100 [ 964.484469][T14058] usb 5-1: Product: syz [ 964.510000][T14058] usb 5-1: Manufacturer: syz [ 964.517520][ T47] ftdi_sio 1-1:1.94: device disconnected [ 964.567862][T14058] usb 5-1: SerialNumber: syz [ 964.584147][T14058] usb 5-1: config 0 descriptor?? [ 964.616366][T15069] m920x_read = error: -19 [ 964.620831][T15069] dvb-usb: error while querying for an remote control event. [ 964.715106][ T10] usb 2-1: Dual-Role OTG device on HNP port [ 964.775201][T15069] m920x_read = error: -19 [ 964.783580][ T10] usb 2-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice=1e.7a [ 964.856027][T15069] dvb-usb: error while querying for an remote control event. [ 964.888769][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.917175][ T10] usb 2-1: Product: syz [ 964.921374][ T10] usb 2-1: Manufacturer: syz [ 964.927305][ T10] usb 2-1: SerialNumber: syz [ 965.036532][T15069] m920x_read = error: -19 [ 965.040903][T15069] dvb-usb: error while querying for an remote control event. [ 965.380968][T21999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.382381][ T10] usb 2-1: config 0 descriptor?? [ 965.417663][T21999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.475863][T15069] m920x_read = error: -19 [ 965.498185][T15069] dvb-usb: error while querying for an remote control event. [ 965.519702][T14058] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 965.536228][T14058] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 965.626540][T15069] m920x_read = error: -19 [ 965.630928][T15069] dvb-usb: error while querying for an remote control event. [ 965.758030][T15069] m920x_read = error: -19 [ 965.794034][T15069] dvb-usb: error while querying for an remote control event. [ 965.976909][T14058] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 965.996742][T15023] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 966.007208][T14058] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 966.056408][ T5937] m920x_read = error: -19 [ 966.060889][ T5937] dvb-usb: error while querying for an remote control event. [ 966.166516][T15023] usb 4-1: Using ep0 maxpacket: 32 [ 966.179840][ T5904] m920x_read = error: -19 [ 966.184582][ T5904] dvb-usb: error while querying for an remote control event. [ 966.198791][T15023] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.226509][T15023] usb 4-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 966.246373][T14058] usb 5-1: USB disconnect, device number 87 [ 966.286400][T15023] usb 4-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 966.319560][T15023] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 966.333920][ T5904] m920x_read = error: -19 [ 966.349382][ T5904] dvb-usb: error while querying for an remote control event. [ 966.372085][T15023] usb 4-1: config 0 interface 0 has no altsetting 0 [ 966.389458][T15023] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 966.410580][T15023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.430471][T15023] usb 4-1: Product: syz [ 966.443062][T15023] usb 4-1: Manufacturer: syz [ 966.453190][T15023] usb 4-1: SerialNumber: syz [ 966.470779][T15023] usb 4-1: config 0 descriptor?? [ 966.478680][ T5904] m920x_read = error: -19 [ 966.494766][ T5904] dvb-usb: error while querying for an remote control event. [ 966.510760][T22022] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 966.643178][ T5904] m920x_read = error: -19 [ 966.648211][ T5904] dvb-usb: error while querying for an remote control event. [ 966.770395][ T5937] m920x_read = error: -19 [ 966.789239][ T5937] dvb-usb: error while querying for an remote control event. [ 966.838015][ T5904] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 966.889458][T15023] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 966.916884][ T5937] m920x_read = error: -19 [ 966.928704][ T5937] dvb-usb: error while querying for an remote control event. [ 966.972190][T15023] usb 4-1: USB disconnect, device number 70 [ 966.978457][ T5904] usb 1-1: device descriptor read/64, error -71 [ 967.031085][ T6877] udevd[6877]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 967.058373][ T5937] m920x_read = error: -19 [ 967.062855][ T5937] dvb-usb: error while querying for an remote control event. [ 967.196453][ T5937] m920x_read = error: -19 [ 967.200995][ T5937] dvb-usb: error while querying for an remote control event. [ 967.246919][ T5904] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 967.317747][ T5937] m920x_read = error: -19 [ 967.322564][ T5937] dvb-usb: error while querying for an remote control event. [ 967.386401][ T5904] usb 1-1: device descriptor read/64, error -71 [ 967.437604][ T5937] m920x_read = error: -19 [ 967.444238][ T5937] dvb-usb: error while querying for an remote control event. [ 967.506722][ T5904] usb usb1-port1: attempt power cycle [ 967.548470][T22041] bridge_slave_0: left allmulticast mode [ 967.554157][T22041] bridge_slave_0: left promiscuous mode [ 967.559971][T22041] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.573465][T22041] bridge_slave_1: left allmulticast mode [ 967.576407][ T5937] m920x_read = error: -19 [ 967.586046][ T5937] dvb-usb: error while querying for an remote control event. [ 967.599042][T22041] bridge_slave_1: left promiscuous mode [ 967.613469][T22041] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.644767][T22041] bond0: (slave bond_slave_0): Releasing backup interface [ 967.673849][T22041] bond0: (slave bond_slave_1): Releasing backup interface [ 967.715328][T22041] team0: Port device team_slave_0 removed [ 967.721437][ T5937] m920x_read = error: -19 [ 967.726411][ T5937] dvb-usb: error while querying for an remote control event. [ 967.753049][T22041] team0: Port device team_slave_1 removed [ 967.787248][T22041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.815030][T22041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.836701][ T5937] m920x_read = error: -19 [ 967.855762][ T5904] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 967.875940][ T10] snd-usb-caiaq 2-1:0.13: can't set alt interface. [ 967.886437][ T5937] dvb-usb: error while querying for an remote control event. [ 967.904564][ T10] usb 2-1: unable to init card! (ret=-5) [ 967.916822][ T5904] usb 1-1: device descriptor read/8, error -71 [ 967.924187][ T10] snd-usb-caiaq 2-1:0.13: probe with driver snd-usb-caiaq failed with error -5 [ 967.948361][ T10] usb 2-1: USB disconnect, device number 25 [ 967.998242][T22041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.007939][T22041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.017225][ T5937] m920x_read = error: -19 [ 968.035959][T22041] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 968.059587][ T5937] dvb-usb: error while querying for an remote control event. [ 968.196723][ T5904] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 968.214686][ T5937] m920x_read = error: -19 [ 968.226594][ T5937] dvb-usb: error while querying for an remote control event. [ 968.247381][ T5904] usb 1-1: device descriptor read/8, error -71 [ 968.366893][ T5904] usb usb1-port1: unable to enumerate USB device [ 968.386467][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 968.756530][ T5904] m920x_read = error: -19 [ 968.766427][ T5904] dvb-usb: error while querying for an remote control event. [ 968.886410][ T5937] m920x_read = error: -19 [ 968.890799][ T5937] dvb-usb: error while querying for an remote control event. [ 968.917059][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 968.936472][ T5904] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 968.960440][ T10] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 969.081391][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.091814][ T5937] m920x_read = error: -19 [ 969.098491][ T5937] dvb-usb: error while querying for an remote control event. [ 969.116595][ T10] usb 2-1: config 0 has no interface number 1 [ 969.177365][ T10] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 969.198783][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 969.218853][ T5904] usb 1-1: device descriptor read/64, error -71 [ 969.246370][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.256493][T15023] m920x_read = error: -19 [ 969.261086][T15023] dvb-usb: error while querying for an remote control event. [ 969.271820][ T10] usb 2-1: Product: syz [ 969.279541][ T10] usb 2-1: Manufacturer: syz [ 969.289709][ T10] usb 2-1: SerialNumber: syz [ 969.311627][ T10] usb 2-1: config 0 descriptor?? [ 969.338133][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 969.376580][T15023] m920x_read = error: -19 [ 969.381006][T15023] dvb-usb: error while querying for an remote control event. [ 969.506399][T15023] m920x_read = error: -19 [ 969.511895][T15023] dvb-usb: error while querying for an remote control event. [ 969.643622][T22068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.647362][T15069] m920x_read = error: -19 [ 969.647388][T15069] dvb-usb: error while querying for an remote control event. [ 969.647728][T22068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.736386][T15023] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 969.756427][T15069] m920x_read = error: -19 [ 969.756452][T15069] dvb-usb: error while querying for an remote control event. [ 969.866415][T15069] m920x_read = error: -19 [ 969.866442][T15069] dvb-usb: error while querying for an remote control event. [ 969.886429][T15023] usb 3-1: Using ep0 maxpacket: 32 [ 969.888929][T15023] usb 3-1: unable to get BOS descriptor or descriptor too short [ 969.890455][T15023] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2031, setting to 1024 [ 969.893502][T15023] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 969.956918][T15023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.966082][T15023] usb 3-1: Product: syz [ 969.974252][T15023] usb 3-1: Manufacturer: syz [ 969.979088][T15069] m920x_read = error: -19 [ 969.985535][T15069] dvb-usb: error while querying for an remote control event. [ 970.003439][T15023] usb 3-1: SerialNumber: syz [ 970.107871][T15069] m920x_read = error: -19 [ 970.112690][T15069] dvb-usb: error while querying for an remote control event. [ 970.246640][T15023] usb 3-1: 1:1: cannot set freq 15490714 to ep 0x1 [ 970.260937][T15023] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 970.442369][ T5904] m920x_read = error: -19 [ 970.447078][ T5904] dvb-usb: error while querying for an remote control event. [ 970.494379][T22077] fuse: Unknown parameter ' Z' [ 970.522145][T15023] usb 3-1: USB disconnect, device number 75 [ 970.556438][T15069] m920x_read = error: -19 [ 970.560868][T15069] dvb-usb: error while querying for an remote control event. [ 970.677351][T15069] m920x_read = error: -19 [ 970.681845][T15069] dvb-usb: error while querying for an remote control event. [ 970.796419][T15069] m920x_read = error: -19 [ 970.801082][T15069] dvb-usb: error while querying for an remote control event. [ 970.926507][T15069] m920x_read = error: -19 [ 970.930998][T15069] dvb-usb: error while querying for an remote control event. [ 971.056450][T15069] m920x_read = error: -19 [ 971.060929][T15069] dvb-usb: error while querying for an remote control event. [ 971.173753][T22083] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4117'. [ 971.204681][T15069] m920x_read = error: -19 [ 971.209343][T15069] dvb-usb: error while querying for an remote control event. [ 971.216361][T14058] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 971.323676][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 971.327863][ T2342] pvrusb2: Invalid write control endpoint [ 971.350586][T15069] m920x_read = error: -19 [ 971.375341][ T2342] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 971.375380][T15069] dvb-usb: error while querying for an remote control event. [ 971.398801][T14058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 971.412285][ T10] usb 2-1: USB disconnect, device number 26 [ 971.426330][T14058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.436107][T14058] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 971.460505][ T2342] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 971.498807][T14058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 971.511046][T14058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.529801][T14058] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 971.546355][T15023] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 971.556609][T15069] m920x_read = error: -19 [ 971.561264][T15069] dvb-usb: error while querying for an remote control event. [ 971.597296][T14058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 971.609780][T14058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.629755][T14058] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 971.662566][T14058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 971.680341][T14058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.705464][T14058] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 971.706439][T15069] m920x_read = error: -19 [ 971.733654][T15069] dvb-usb: error while querying for an remote control event. [ 971.747218][T14058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 971.758855][T15023] usb 1-1: Using ep0 maxpacket: 8 [ 971.766371][T14058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.793023][T15023] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 971.813349][T14058] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 971.821214][T15023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.836919][T15023] usb 1-1: Product: syz [ 971.841149][T15023] usb 1-1: Manufacturer: syz [ 971.848925][T15023] usb 1-1: SerialNumber: syz [ 971.869193][T14058] usb 3-1: New USB device found, idVendor=04b4, idProduct=0000, bcdDevice= 0.00 [ 971.869730][T15023] usb 1-1: config 0 descriptor?? [ 971.890368][T15023] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 971.897555][T15069] m920x_read = error: -19 [ 971.902270][T15069] dvb-usb: error while querying for an remote control event. [ 971.915371][T14058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.958765][T14058] usb 3-1: config 0 descriptor?? [ 972.016507][T15069] m920x_read = error: -19 [ 972.020941][T15069] dvb-usb: error while querying for an remote control event. [ 972.096976][T15023] gspca_m5602: Failed to find a sensor [ 972.110895][T15023] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 972.136408][T15069] m920x_read = error: -19 [ 972.140853][T15069] dvb-usb: error while querying for an remote control event. [ 972.161735][T15023] usb 1-1: USB disconnect, device number 107 [ 972.288167][ T5904] m920x_read = error: -19 [ 972.292576][ T5904] dvb-usb: error while querying for an remote control event. [ 972.382019][T14058] hid (null): bogus close delimiter [ 972.414945][ T5904] m920x_read = error: -19 [ 972.420121][ T5904] dvb-usb: error while querying for an remote control event. [ 972.469629][T14058] hid-generic 0003:04B4:0000.0037: bogus close delimiter [ 972.506697][T14058] hid-generic 0003:04B4:0000.0037: item 0 1 2 10 parsing failed [ 972.516974][T14058] hid-generic 0003:04B4:0000.0037: probe with driver hid-generic failed with error -22 [ 972.546762][T15023] m920x_read = error: -19 [ 972.551326][T15023] dvb-usb: error while querying for an remote control event. [ 972.585833][T15023] usb 3-1: USB disconnect, device number 76 [ 973.051324][ T5904] m920x_read = error: -19 [ 973.055694][ T5904] dvb-usb: error while querying for an remote control event. [ 973.176477][T15069] m920x_read = error: -19 [ 973.180950][T15069] dvb-usb: error while querying for an remote control event. [ 973.296455][T15069] m920x_read = error: -19 [ 973.300895][T15069] dvb-usb: error while querying for an remote control event. [ 973.441893][T15069] m920x_read = error: -19 [ 973.478763][T15069] dvb-usb: error while querying for an remote control event. [ 973.488127][T22108] netlink: 'syz.2.4125': attribute type 6 has an invalid length. [ 973.586474][T15069] m920x_read = error: -19 [ 973.590865][T15069] dvb-usb: error while querying for an remote control event. [ 973.716662][T15069] m920x_read = error: -19 [ 973.721030][T15069] dvb-usb: error while querying for an remote control event. [ 973.857394][T15069] m920x_read = error: -19 [ 973.861852][T15069] dvb-usb: error while querying for an remote control event. [ 973.986377][ T5904] m920x_read = error: -19 [ 973.990758][ T5904] dvb-usb: error while querying for an remote control event. [ 974.206711][ T5904] m920x_read = error: -19 [ 974.211096][ T5904] dvb-usb: error while querying for an remote control event. [ 974.468452][ T5904] m920x_read = error: -19 [ 974.472984][ T5904] dvb-usb: error while querying for an remote control event. [ 974.606503][ T5904] m920x_read = error: -19 [ 974.611072][ T5904] dvb-usb: error while querying for an remote control event. [ 974.926614][ T5904] m920x_read = error: -19 [ 974.931039][ T5904] dvb-usb: error while querying for an remote control event. [ 975.091132][ T5904] m920x_read = error: -19 [ 975.102341][ T5904] dvb-usb: error while querying for an remote control event. [ 975.236344][ T5904] m920x_read = error: -19 [ 975.240789][ T5904] dvb-usb: error while querying for an remote control event. [ 975.528392][ T5904] m920x_read = error: -19 [ 975.532995][ T5904] dvb-usb: error while querying for an remote control event. [ 975.646710][ T5904] m920x_read = error: -19 [ 975.651283][ T5904] dvb-usb: error while querying for an remote control event. [ 975.766470][ T5904] m920x_read = error: -19 [ 975.770947][ T5904] dvb-usb: error while querying for an remote control event. [ 975.886698][ T5904] m920x_read = error: -19 [ 975.891126][ T5904] dvb-usb: error while querying for an remote control event. [ 976.008436][ T5904] m920x_read = error: -19 [ 976.040888][ T5904] dvb-usb: error while querying for an remote control event. [ 976.089935][ T5824] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 976.187473][ T5904] m920x_read = error: -19 [ 976.210263][ T5904] dvb-usb: error while querying for an remote control event. [ 976.258752][T22173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4142'. [ 976.346708][ T5904] m920x_read = error: -19 [ 976.351131][ T5904] dvb-usb: error while querying for an remote control event. [ 976.452127][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4142'. [ 976.496379][ T5904] m920x_read = error: -19 [ 976.501180][ T5904] dvb-usb: error while querying for an remote control event. [ 976.587561][T22178] bond1: (slave vcan1): refused to change device type [ 976.656658][ T5904] m920x_read = error: -19 [ 976.662173][ T5904] dvb-usb: error while querying for an remote control event. [ 976.776726][ T5904] m920x_read = error: -19 [ 976.784924][ T5904] dvb-usb: error while querying for an remote control event. [ 976.902651][T22189] loop4: detected capacity change from 0 to 524287936 [ 976.941660][ T5904] m920x_read = error: -19 [ 976.953438][ T5904] dvb-usb: error while querying for an remote control event. [ 977.059998][ T5904] m920x_read = error: -19 [ 977.064531][ T5904] dvb-usb: error while querying for an remote control event. [ 977.077202][ T24] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 977.186944][ T5904] m920x_read = error: -19 [ 977.194899][ T5904] dvb-usb: error while querying for an remote control event. [ 977.256372][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 977.275392][ T24] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 977.295925][ T24] usb 1-1: config 0 has no interface number 0 [ 977.322406][ T5904] m920x_read = error: -19 [ 977.329789][ T5904] dvb-usb: error while querying for an remote control event. [ 977.358410][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 977.406758][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.425128][ T24] usb 1-1: Product: syz [ 977.437536][ T24] usb 1-1: Manufacturer: syz [ 977.444403][ T24] usb 1-1: SerialNumber: syz [ 977.446397][ T5904] m920x_read = error: -19 [ 977.453573][ T5904] dvb-usb: error while querying for an remote control event. [ 977.470247][ T24] usb 1-1: config 0 descriptor?? [ 977.566378][ T5904] m920x_read = error: -19 [ 977.570883][ T5904] dvb-usb: error while querying for an remote control event. [ 977.735403][ T24] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 977.743326][ T24] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 977.776980][T14058] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 977.788088][ T24] usb 1-1: USB disconnect, device number 108 [ 977.809818][ T5904] m920x_read = error: -19 [ 977.814612][ T5904] dvb-usb: error while querying for an remote control event. [ 977.926349][T14058] usb 4-1: device descriptor read/64, error -71 [ 977.969489][ T5904] m920x_read = error: -19 [ 977.973869][ T5904] dvb-usb: error while querying for an remote control event. [ 978.119299][ T5904] m920x_read = error: -19 [ 978.123897][ T5904] dvb-usb: error while querying for an remote control event. [ 978.176498][T14058] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 978.236444][ T5904] m920x_read = error: -19 [ 978.240836][ T5904] dvb-usb: error while querying for an remote control event. [ 978.316650][T14058] usb 4-1: device descriptor read/64, error -71 [ 978.376507][ T5904] m920x_read = error: -19 [ 978.382811][ T5904] dvb-usb: error while querying for an remote control event. [ 978.465618][T14058] usb usb4-port1: attempt power cycle [ 978.506681][ T5904] m920x_read = error: -19 [ 978.511079][ T5904] dvb-usb: error while querying for an remote control event. [ 978.646426][ T5904] m920x_read = error: -19 [ 978.651008][ T5904] dvb-usb: error while querying for an remote control event. [ 978.786388][ T5904] m920x_read = error: -19 [ 978.790805][ T5904] dvb-usb: error while querying for an remote control event. [ 978.956357][T14058] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 979.140153][T14058] usb 4-1: device descriptor read/8, error -71 [ 979.179292][T22223] loop4: detected capacity change from 0 to 524287936 [ 979.269709][T15069] m920x_read = error: -19 [ 979.288400][T15069] dvb-usb: error while querying for an remote control event. [ 979.398427][T14058] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 979.426447][T15069] m920x_read = error: -19 [ 979.430970][T15069] dvb-usb: error while querying for an remote control event. [ 979.477128][T14058] usb 4-1: device descriptor read/8, error -71 [ 979.557592][T15069] m920x_read = error: -19 [ 979.572271][T15069] dvb-usb: error while querying for an remote control event. [ 979.606736][T14058] usb usb4-port1: unable to enumerate USB device [ 979.728094][T15069] m920x_read = error: -19 [ 979.743215][T15069] dvb-usb: error while querying for an remote control event. [ 979.897183][T15069] m920x_read = error: -19 [ 979.910924][T15069] dvb-usb: error while querying for an remote control event. [ 980.037274][T15069] m920x_read = error: -19 [ 980.041915][T15069] dvb-usb: error while querying for an remote control event. [ 980.068136][T14058] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 980.116567][ T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 980.158123][T15069] m920x_read = error: -19 [ 980.162516][T15069] dvb-usb: error while querying for an remote control event. Stopping sshd: [ 980.242049][T14058] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 980.251452][T14058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.279311][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.292197][T14058] usb 1-1: config 0 descriptor?? stopped /usr/sbin/sshd (pid 5583) [ 980.308399][T15069] m920x_read = error: -19 [ 980.309555][T14058] cp210x 1-1:0.0: cp210x converter detected [ 980.312762][T15069] dvb-usb: error while querying for an remote control event. [ 980.329448][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df OK [ 980.361201][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.438150][ T24] usb 5-1: config 0 descriptor?? [ 980.471458][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 980.516392][T15069] m920x_read = error: -19 [ 980.520948][T15069] dvb-usb: error while querying for an remote control event. Stopping crond: [ 980.656404][T15069] m920x_read = error: -19 [ 980.660896][T15069] dvb-usb: error while querying for an remote control event. stopped /usr/sbin/crond (pid 5566) [ 980.686957][ T24] pwc: send_video_command error -71 OK [ 980.705072][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 980.725392][T14058] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 980.760763][ T24] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 980.775128][T14058] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 980.788365][T14058] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 980.803426][ T24] usb 5-1: USB disconnect, device number 88 [ 980.817934][T15069] m920x_read = error: -19 [ 980.824950][T14058] usb 1-1: cp210x converter now attached to ttyUSB0 [ 980.831776][T15069] dvb-usb: error while querying for an remote control event. [ 980.878637][T14058] usb 1-1: USB disconnect, device number 109 [ 980.958649][T14058] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 980.981677][T15069] m920x_read = error: -19 [ 980.982172][T14058] cp210x 1-1:0.0: device disconnected [ 981.000722][T15069] dvb-usb: error while querying for an remote control event. [ 981.064676][T22268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.099518][T22268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Stopping dhcpcd... [ 981.161243][T15069] m920x_read = error: -19 [ 981.165634][T15069] dvb-usb: error while querying for an remote control event. [ 981.206759][ T24] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 981.299683][T15069] m920x_read = error: -19 [ 981.316351][T15069] dvb-usb: error while querying for an remote control event. stopped /sbin/dhcpcd (pid 5488) [ 981.349115][ T24] usb 5-1: device descriptor read/64, error -71 [ 981.467490][T15069] m920x_read = error: -19 [ 981.473976][T15069] dvb-usb: error while querying for an remote control event. [ 981.690741][T15069] m920x_read = error: -19 [ 981.690775][ T24] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 981.695121][T15069] dvb-usb: error while querying for an remote control event. [ 981.862758][T15069] m920x_read = error: -19 [ 981.862786][T15069] dvb-usb: error while querying for an remote control event. [ 981.916803][ T24] usb 5-1: device descriptor read/64, error -71 [ 981.966753][ T5904] m920x_read = error: -19 [ 981.966778][ T5904] dvb-usb: error while querying for an remote control event. [ 982.030714][ T24] usb usb5-port1: attempt power cycle Stopping network: [ 982.086530][ T5904] m920x_read = error: -19 [ 982.086555][ T5904] dvb-usb: error while querying for an remote control event. [ 982.200432][ T5904] m920x_read = error: -19 [ 982.207783][ T5904] dvb-usb: error while querying for an remote control event. [ 982.331396][ T5904] m920x_read = error: -19 [ 982.336335][ T5904] dvb-usb: error while querying for an remote control event. [ 982.396356][ T24] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 982.497639][ T24] usb 5-1: device descriptor read/8, error -71 [ 982.588767][ T5904] m920x_read = error: -19 [ 982.593211][ T5904] dvb-usb: error while querying for an remote control event. [ 982.727247][T15069] m920x_read = error: -19 [ 982.731857][T15069] dvb-usb: error while querying for an remote control event. [ 982.748781][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 982.787201][ T24] usb 5-1: device descriptor read/8, error -71 [ 982.847892][T15069] m920x_read = error: -19 [ 982.852381][T15069] dvb-usb: error while querying for an remote control event. [ 982.907733][ T24] usb usb5-port1: unable to enumerate USB device [ 982.922144][T22304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4174'. [ 982.956295][T22304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4174'. [ 982.978892][T15069] m920x_read = error: -19 [ 982.983292][T15069] dvb-usb: error while querying for an remote control event. [ 983.152063][T15069] m920x_read = error: -19 [ 983.158189][T15069] dvb-usb: error while querying for an remote control event. [ 983.297280][T15069] m920x_read = error: -19 [ 983.312459][T15069] dvb-usb: error while querying for an remote control event. [ 983.447106][T15069] m920x_read = error: -19 [ 983.451585][T15069] dvb-usb: error while querying for an remote control event. OK [ 983.576695][T15069] m920x_read = error: -19 [ 983.582952][T15069] dvb-usb: error while querying for an remote control event. Stopping iptables: [ 983.716533][T15069] m920x_read = error: -19 [ 983.723434][T15069] dvb-usb: error while querying for an remote control event. OK [ 983.967880][T15069] m920x_read = error: -19 [ 983.975913][T15069] dvb-usb: error while querying for an remote control event. [ 984.126523][T15069] m920x_read = error: -19 [ 984.131016][T15069] dvb-usb: error while querying for an remote control event. Stopping system message bus: [ 984.255503][T22338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4183'. [ 984.264672][T15069] m920x_read = error: -19 [ 984.274805][T15069] dvb-usb: error while querying for an remote control event. [ 984.442994][T15069] m920x_read = error: -19 [ 984.449649][T15069] dvb-usb: error while querying for an remote control event. [ 984.606754][T15069] m920x_read = error: -19 [ 984.611199][T15069] dvb-usb: error while querying for an remote control event. [ 984.633907][T22352] binder: 22348:22352 ioctl c0306201 200000000640 returned -22 [ 985.023161][T15069] m920x_read = error: -19 [ 985.225077][T15069] dvb-usb: error while querying for an remote control event. [ 985.375537][T22365] FAULT_INJECTION: forcing a failure. [ 985.375537][T22365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.438355][T15069] m920x_read = error: -19 [ 985.452588][T15069] dvb-usb: error while querying for an remote control event. [ 985.697118][T22364] loop4: detected capacity change from 0 to 524287936 [ 985.951540][T22365] CPU: 0 UID: 0 PID: 22365 Comm: syz.4.4188 Tainted: G L syzkaller #0 PREEMPT(full) [ 985.951567][T22365] Tainted: [L]=SOFTLOCKUP [ 985.951573][T22365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 985.951584][T22365] Call Trace: [ 985.951591][T22365] [ 985.951599][T22365] dump_stack_lvl+0xe8/0x150 [ 985.951628][T22365] should_fail_ex+0x412/0x560 [ 985.951652][T22365] _copy_to_user+0x31/0xb0 [ 985.951677][T22365] simple_read_from_buffer+0xe1/0x170 [ 985.951704][T22365] proc_fail_nth_read+0x1bb/0x230 [ 985.951773][T22365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 985.951800][T22365] ? rw_verify_area+0x2a6/0x4d0 [ 985.951817][T22365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 985.951838][T22365] vfs_read+0x20c/0xa70 [ 985.951854][T22365] ? fdget_pos+0x246/0x320 [ 985.951882][T22365] ? __pfx___mutex_lock+0x10/0x10 [ 985.951902][T22365] ? __pfx_vfs_read+0x10/0x10 [ 985.951922][T22365] ? __fget_files+0x2a/0x420 [ 985.951950][T22365] ? __fget_files+0x3a0/0x420 [ 985.951973][T22365] ? __fget_files+0x2a/0x420 [ 985.952004][T22365] ksys_read+0x150/0x270 [ 985.952024][T22365] ? __pfx_ksys_read+0x10/0x10 [ 985.952051][T22365] do_syscall_64+0x14d/0xf80 [ 985.952066][T22365] ? trace_irq_disable+0x3b/0x150 [ 985.952098][T22365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.952117][T22365] ? clear_bhb_loop+0x40/0x90 [ 985.952139][T22365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.952155][T22365] RIP: 0033:0x7f406955cfce [ 985.952172][T22365] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 985.952187][T22365] RSP: 002b:00007f406a50dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 985.952206][T22365] RAX: ffffffffffffffda RBX: 00007f406a50e6c0 RCX: 00007f406955cfce [ 985.952218][T22365] RDX: 000000000000000f RSI: 00007f406a50e0a0 RDI: 0000000000000004 [ 985.952230][T22365] RBP: 00007f406a50e090 R08: 0000000000000000 R09: 0000000000000000 [ 985.952241][T22365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.952251][T22365] R13: 00007f4069816038 R14: 00007f4069815fa0 R15: 00007f406993fa48 [ 985.952280][T22365] [ 986.394296][ T5904] m920x_read = error: -19 [ 986.398761][ T5904] dvb-usb: error while querying for an remote control event. [ 986.570653][ T5904] m920x_read = error: -19 [ 986.581806][ T5904] dvb-usb: error while querying for an remote control event. [ 986.789001][ T5904] m920x_read = error: -19 [ 986.793708][ T5904] dvb-usb: error while querying for an remote control event. [ 986.956415][ T5904] m920x_read = error: -19 [ 987.021859][ T5904] dvb-usb: error while querying for an remote control event. [ 987.186888][ T5904] m920x_read = error: -19 [ 987.195710][ T5904] dvb-usb: error while querying for an remote control event. done [ 987.616397][ T5904] m920x_read = error: -19 [ 987.621939][ T5904] dvb-usb: error while querying for an remote control event. [ 987.766939][ T5904] m920x_read = error: -19 [ 987.771354][ T5904] dvb-usb: error while querying for an remote control event. [ 987.916556][ T5904] m920x_read = error: -19 [ 987.921021][ T5904] dvb-usb: error while querying for an remote control event. [ 988.126389][ T5937] m920x_read = error: -19 [ 988.134311][ T5937] dvb-usb: error while querying for an remote control event. [ 988.202879][ T5904] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 988.266427][ T5937] m920x_read = error: -19 [ 988.281631][ T5937] dvb-usb: error while querying for an remote control event. [ 988.376373][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 988.401214][ T5904] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.436654][ T5937] m920x_read = error: -19 [ 988.441032][ T5937] dvb-usb: error while querying for an remote control event. [ 988.466646][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 988.500755][T22395] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4195'. [ 988.532249][ T5904] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 988.548835][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.581968][ T5904] usb 3-1: Product: syz [ 988.590340][ T5904] usb 3-1: Manufacturer: syz [ 988.594955][ T5904] usb 3-1: SerialNumber: syz [ 988.599883][T15069] m920x_read = error: -19 [ 988.605932][T15069] dvb-usb: error while querying for an remote control event. [ 988.757956][T15069] m920x_read = error: -19 [ 988.762560][T15069] dvb-usb: error while querying for an remote control event. [ 988.862831][ T5904] usb 3-1: 0:2 : does not exist [ 988.870407][T22403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4198'. [ 988.904295][ T5904] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 988.941754][T15069] m920x_read = error: -19 [ 988.969696][T15069] dvb-usb: error while querying for an remote control event. [ 989.136504][T15069] m920x_read = error: -19 [ 989.140854][T15069] dvb-usb: error while querying for an remote control event. [ 989.183842][ T5904] usb 3-1: USB disconnect, device number 77 [ 989.309783][T22408] program syz.0.4200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 989.336394][T15069] m920x_read = error: -19 [ 989.340809][T15069] dvb-usb: error while querying for an remote control event. [ 989.476829][T15069] m920x_read = error: -19 [ 989.481206][T15069] dvb-usb: error while querying for an remote control event. [ 989.676371][ T5904] m920x_read = error: -19 [ 989.680779][ T5904] dvb-usb: error while querying for an remote control event. [ 989.816698][T15069] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 989.888694][ T5904] m920x_read = error: -19 [ 989.905604][ T5904] dvb-usb: error while querying for an remote control event. Stopping klogd: [ 990.025458][T15069] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 990.049597][T15069] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 990.059831][ T5937] m920x_read = error: -19 [ 990.066404][ T5937] dvb-usb: error while querying for an remote control event. [ 990.083502][T15069] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 990.110430][ T5904] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 990.125433][T15069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 704, setting to 64 [ 990.152153][T15069] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 990.161600][T15069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.190734][T15069] usb 3-1: Product: syz [ 990.200607][T15069] usb 3-1: Manufacturer: syz [ 990.211087][T15069] usb 3-1: SerialNumber: syz [ 990.216998][ T5937] m920x_read = error: -19 [ 990.221858][ T5937] dvb-usb: error while querying for an remote control event. [ 990.252627][T15069] usb 3-1: config 0 descriptor?? [ 990.264738][T22412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 990.275477][T15069] usb 3-1: ucan: probing device on interface #0 [ 990.288698][T15069] usb 3-1: ucan: invalid endpoint configuration [ 990.302605][T15069] usb 3-1: ucan: probe failed; try to update the device firmware [ 990.310848][ T5904] usb 5-1: Using ep0 maxpacket: 16 OK [ 990.324574][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.352299][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.363431][T15069] m920x_read = error: -19 [ 990.372791][T15069] dvb-usb: error while querying for an remote control event. [ 990.390399][ T5904] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 990.409665][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.437858][ T5904] usb 5-1: config 0 descriptor?? Stopping acpid: [ 990.496476][T15069] m920x_read = error: -19 [ 990.500923][T15069] dvb-usb: error while querying for an remote control event. [ 990.617223][T15069] m920x_read = error: -19 [ 990.622077][T15069] dvb-usb: error while querying for an remote control event. [ 990.736320][T22433] loop4: detected capacity change from 0 to 524287936 [ 990.776017][T15069] m920x_read = error: -19 [ 990.783729][T15069] dvb-usb: error while querying for an remote control event. [ 990.906371][T15069] m920x_read = error: -19 [ 990.910762][T15069] dvb-usb: error while querying for an remote control event. [ 990.918351][T15023] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 990.959032][ T5904] ntrig 0003:1B96:0008.0038: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 991.046464][T15069] m920x_read = error: -19 [ 991.050861][T15069] dvb-usb: error while querying for an remote control event. [ 991.076634][T15023] usb 4-1: Using ep0 maxpacket: 8 [ 991.087781][T15023] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 991.102605][T15023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.133300][T15023] usb 4-1: Product: syz [ 991.145838][T15023] usb 4-1: Manufacturer: syz [ 991.191911][T15023] usb 4-1: SerialNumber: syz [ 991.201333][T15069] m920x_read = error: -19 [ 991.209013][T15069] dvb-usb: error while querying for an remote control event. [ 991.217775][T15023] usb 4-1: config 0 descriptor?? [ 991.236471][ T5904] usb 5-1: USB disconnect, device number 93 [ 991.326503][T15069] m920x_read = error: -19 [ 991.331477][T15069] dvb-usb: error while querying for an remote control event. [ 991.466394][T15069] m920x_read = error: -19 [ 991.470795][T15069] dvb-usb: error while querying for an remote control event. [ 991.504407][T15023] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 991.586381][ T5904] m920x_read = error: -19 [ 991.597119][ T5904] dvb-usb: error while querying for an remote control event. [ 991.611370][T22440] iommufd_mock iommufd_mock0: Adding to iommu group 0 OK [ 991.736491][ T5904] m920x_read = error: -19 [ 991.740837][ T5904] dvb-usb: error while querying for an remote control event. [ 991.856622][ T5904] m920x_read = error: -19 [ 991.861133][ T5904] dvb-usb: error while querying for an remote control event. Stopping syslogd: [ 991.999731][ T5904] m920x_read = error: -19 [ 992.004529][ T5904] dvb-usb: error while querying for an remote control event. [ 992.312379][T15069] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 992.496392][ T5828] m920x_read = error: -19 [ 992.500827][ T5828] dvb-usb: error while querying for an remote control event. [ 992.533172][ T5904] usb 3-1: USB disconnect, device number 78 [ 992.539419][T15069] usb 5-1: Using ep0 maxpacket: 32 [ 992.563935][T15069] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) stopped /sbin/syslogd (pid 5176)[ 992.586477][T15069] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 992.602057][T15069] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 OK [ 992.686804][ T5828] m920x_read = error: -19 [ 992.707664][ T5828] dvb-usb: error while querying for an remote control event. [ 992.720252][T15069] usb 5-1: config 1 has no interface number 0 [ 992.889851][ T5904] m920x_read = error: -19 [ 992.904394][ T5904] dvb-usb: error while querying for an remote control event. [ 992.922673][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.926376][T15069] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 992.929098][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.057112][ T5904] m920x_read = error: -19 [ 993.061466][ T5904] dvb-usb: error while querying for an remote control event. [ 993.195994][T15069] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 993.215012][T15069] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 993.225393][T15069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=228 [ 993.234537][T15069] usb 5-1: SerialNumber: syz [ 993.247168][T15069] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 993.316469][ T5904] m920x_read = error: -19 [ 993.323256][ T5904] dvb-usb: error while querying for an remote control event. [ 993.456390][ T5904] m920x_read = error: -19 [ 993.460773][ T5904] dvb-usb: error while querying for an remote control event. [ 993.496001][T15069] snd_usb_pod 5-1:1.1: set_interface failed [ 993.512579][T15069] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 993.548100][T15069] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 993.596535][ T5904] m920x_read = error: -19 [ 993.601149][ T5904] dvb-usb: error while querying for an remote control event. [ 993.649189][T15023] usb write operation failed. (-71) [ 993.687636][T15023] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 993.729975][T15069] usb 5-1: USB disconnect, device number 94 [ 993.758434][T15023] dvbdev: DVB: registering new adapter (Terratec H7) [ 993.776370][ T5904] m920x_read = error: -19 [ 993.780765][ T5904] dvb-usb: error while querying for an remote control event. [ 993.798387][T15023] usb 4-1: media controller created [ 993.828599][T15023] usb read operation failed. (-71) [ 993.943871][ T5904] m920x_read = error: -19 [ 993.966510][ T5904] dvb-usb: error while querying for an remote control event. [ 993.974070][T15023] usb write operation failed. (-71) [ 993.992810][T15023] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 umount: can't remount debugfs re[ 994.012477][T15023] usb 4-1: USB disconnect, device number 75 ad-only umount: tmpfs busy - remounted read-only [ 994.086622][T15069] m920x_read = error: -19 [ 994.091622][T15069] dvb-usb: error while querying for an remote control event. [ 994.227783][T15023] m920x_read = error: -19 [ 994.232160][T15023] dvb-usb: error while querying for an remote control event. [ 994.311842][T22480] veth1_to_bond: entered allmulticast mode [ 994.318492][T22480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4218'. [ 994.415603][T15023] m920x_read = error: -19 [ 994.421491][T22480] veth1_to_bond (unregistering): left allmulticast mode [ 994.433964][T15023] dvb-usb: error while querying for an remote control event. [ 994.461446][T22480] bond0: (slave bond_slave_1): Releasing backup interface [ 994.556859][T15023] m920x_read = error: -19 [ 994.561332][T15023] dvb-usb: error while querying for an remote control event. [ 994.676478][T15023] m920x_read = error: -19 [ 994.682148][T15023] dvb-usb: error while querying for an remote control event. [ 994.741642][T21201] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only [ 994.796540][T15023] m920x_read = error: -19 [ 994.801058][T15023] dvb-usb: error while querying for an remote control event. umount: can't remount /dev/root read-only The system is going down NOW! [ 994.917075][T15023] m920x_read = error: -19 [ 994.931004][T15023] dvb-usb: error while querying for an remote control event. Connection to 10.128.1.18 closed by remote host. [ 995.029349][ T5194] udevd[5194]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes [ 995.057007][T15023] m920x_read = error: -19 [ 995.062474][T15023] dvb-usb: error while querying for an remote control event. [ 995.236665][T15023] m920x_read = error: -19 [ 995.241045][T15023] dvb-usb: error while querying for an remote control event. [ 995.416386][T15069] m920x_read = error: -19 [ 995.420746][T15069] dvb-usb: error while querying for an remote control event. [ 995.566399][T15069] m920x_read = error: -19 [ 995.570754][T15069] dvb-usb: error while querying for an remote control event. [ 995.720054][T21201] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.756485][T15069] m920x_read = error: -19 [ 995.760869][T15069] dvb-usb: error while querying for an remote control event. [ 995.916619][T15069] m920x_read = error: -19 [ 995.921003][T15069] dvb-usb: error while querying for an remote control event. [ 996.106639][T15023] m920x_read = error: -19 [ 996.110990][T15023] dvb-usb: error while querying for an remote control event. [ 996.215217][T21201] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.265518][T15069] m920x_read = error: -19 [ 996.284981][T15069] dvb-usb: error while querying for an remote control event. [ 996.427059][T15023] m920x_read = error: -19 [ 996.432264][T15023] dvb-usb: error while querying for an remote control event. [ 996.487104][T21201] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.546438][T15023] m920x_read = error: -19 [ 996.550809][T15023] dvb-usb: error while querying for an remote control event. [ 996.667974][T15069] m920x_read = error: -19 [ 996.672419][T15069] dvb-usb: error while querying for an remote control event. Sent SIGKILL to[ 996.789138][T15069] m920x_read = error: -19 all processes [ 996.799761][T15069] dvb-usb: error while querying for an remote control event. Requesting system poweroff [ 996.936403][T15069] m920x_read = error: -19 [ 996.940833][T15069] dvb-usb: error while querying for an remote control event. [ 997.025213][T21201] bond0 (unregistering): Released all slaves [ 997.037731][T21201] bond1 (unregistering): Released all slaves [ 997.077051][T15069] m920x_read = error: -19 [ 997.081477][T15069] dvb-usb: error while querying for an remote control event. [ 997.129510][T21201] tipc: Disabling bearer [ 997.142835][T21201] tipc: Left network mode [ 997.196451][T15069] m920x_read = error: -19 [ 997.200847][T15069] dvb-usb: error while querying for an remote control event. [ 997.319060][T15069] m920x_read = error: -19 [ 997.323409][T15069] dvb-usb: error while querying for an remote control event. [ 997.447907][T15069] m920x_read = error: -19 [ 997.452305][T15069] dvb-usb: error while querying for an remote control event. [ 997.576418][T15069] m920x_read = error: -19 [ 997.580841][T15069] dvb-usb: error while querying for an remote control event. [ 997.630962][T21201] hsr_slave_0: left promiscuous mode [ 997.637262][T21201] hsr_slave_1: left promiscuous mode [ 997.646030][T21201] veth1_macvtap: left promiscuous mode [ 997.651779][T21201] veth0_macvtap: left promiscuous mode [ 997.658989][T21201] veth1_vlan: left promiscuous mode [ 997.664211][T21201] veth0_vlan: left promiscuous mode [ 997.696366][T15023] m920x_read = error: -19 [ 997.700745][T15023] dvb-usb: error while querying for an remote control event. [ 997.816357][T15023] m920x_read = error: -19 [ 997.820740][T15023] dvb-usb: error while querying for an remote control event. [ 997.835598][T22492] smc: removing smcd device lo [ 997.835749][ T2342] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 997.866359][ T2342] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 997.875462][ T2342] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 997.891279][ T2342] pvrusb2: Failure uploading firmware1 [ 997.898426][ T2342] pvrusb2: Device initialization was not successful. [ 997.905224][ T2342] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 997.914659][ T10] pvrusb2: Device being rendered inoperable [ 997.923189][ T2342] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 997.932804][ T2342] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 997.941986][ T2342] ------------[ cut here ]------------ [ 997.947669][ T2342] ret [ 997.947684][ T2342] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa30, CPU#0: pvrusb2-context/2342 [ 997.963216][ T2342] Modules linked in: [ 997.967910][ T2342] CPU: 0 UID: 0 PID: 2342 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 997.979215][ T2342] Tainted: [L]=SOFTLOCKUP [ 997.983540][ T2342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 997.993595][ T2342] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 998.000604][ T2342] Code: c1 fb e9 5d fc ff ff e8 48 4f c1 fb c6 05 dd 30 f7 09 01 48 c7 c7 20 aa 52 8c e8 75 6b 23 fb e9 85 fc ff ff e8 2b 4f c1 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 20 ab 52 8c 4c 89 e2 e8 35 fd 27 fb e9 [ 998.020637][ T2342] RSP: 0018:ffffc90005ec7670 EFLAGS: 00010293 [ 998.026747][ T2342] RAX: ffffffff86044e85 RBX: dffffc0000000000 RCX: ffff88802b7d0000 [ 998.034721][ T2342] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 998.043312][ T2342] RBP: 0000000000000001 R08: ffffffff90118bb7 R09: 1ffffffff2023176 [ 998.051461][ T2342] R10: dffffc0000000000 R11: fffffbfff2023177 R12: ffffffff8caca060 [ 998.059509][ T2342] R13: 0000000000001770 R14: ffff8880259e50b0 R15: 00000000fffffff5 [ 998.067681][ T2342] FS: 0000000000000000(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 998.076644][ T2342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 998.083233][ T2342] CR2: 0000200000358030 CR3: 0000000034490000 CR4: 00000000003526f0 [ 998.091204][ T2342] Call Trace: [ 998.094468][ T2342] [ 998.097434][ T2342] ? kfree+0x1c1/0x630 [ 998.101782][ T2342] ? _request_firmware+0xf11/0x1780 [ 998.107346][ T2342] ? __kmalloc_cache_noprof+0x15b/0x660 [ 998.112933][ T2342] _request_firmware+0x1052/0x1780 [ 998.118075][ T2342] ? __pfx__request_firmware+0x10/0x10 [ 998.123523][ T2342] ? trace_contention_end+0x3d/0x150 [ 998.128815][ T2342] ? __mutex_lock+0x319/0x1300 [ 998.133588][ T2342] request_firmware+0x36/0x50 [ 998.138305][ T2342] pvr2_locate_firmware+0xb3/0x500 [ 998.143516][ T2342] pvr2_upload_firmware1+0x1ba/0x910 [ 998.148824][ T2342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 998.154789][ T2342] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 998.160602][ T2342] ? __lock_acquire+0x6b5/0x2cf0 [ 998.165549][ T2342] ? __pfx_pvr2_context_notify+0x10/0x10 [ 998.171262][ T2342] pvr2_hdw_initialize+0x428/0x3c50 [ 998.176471][ T2342] ? finish_task_switch+0x240/0x920 [ 998.181675][ T2342] ? lockdep_hardirqs_on+0x7a/0x110 [ 998.186875][ T2342] ? __pfx___mutex_trylock_common+0x10/0x10 [ 998.192764][ T2342] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 998.198428][ T2342] ? rcu_is_watching+0x15/0xb0 [ 998.203479][ T2342] ? trace_contention_end+0x3d/0x150 [ 998.209123][ T2342] ? pvr2_context_thread_func+0x26a/0xb40 [ 998.214882][ T2342] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 998.220534][ T2342] ? __pfx___mutex_lock+0x10/0x10 [ 998.225540][ T2342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 998.231548][ T2342] ? schedule+0x90/0x360 [ 998.235776][ T2342] ? schedule+0x16e/0x360 [ 998.240139][ T2342] pvr2_context_thread_func+0x490/0xb40 [ 998.245685][ T2342] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 998.251763][ T2342] ? __pfx_autoremove_wake_function+0x10/0x10 [ 998.257861][ T2342] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 998.263701][ T2342] ? __kthread_parkme+0x7a/0x1f0 [ 998.268687][ T2342] kthread+0x388/0x470 [ 998.272748][ T2342] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 998.278825][ T2342] ? __pfx_kthread+0x10/0x10 [ 998.283424][ T2342] ret_from_fork+0x51e/0xb90 [ 998.288020][ T2342] ? __pfx_ret_from_fork+0x10/0x10 [ 998.293115][ T2342] ? __switch_to+0xc7d/0x1450 [ 998.297857][ T2342] ? __pfx_kthread+0x10/0x10 [ 998.302430][ T2342] ret_from_fork_asm+0x1a/0x30 [ 998.307508][ T2342] [ 998.310534][ T2342] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 998.317798][ T2342] CPU: 0 UID: 0 PID: 2342 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 998.329059][ T2342] Tainted: [L]=SOFTLOCKUP [ 998.333361][ T2342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 998.343394][ T2342] Call Trace: [ 998.346654][ T2342] [ 998.349567][ T2342] vpanic+0x56c/0xa60 [ 998.353563][ T2342] ? __pfx__printk+0x10/0x10 [ 998.358132][ T2342] ? __pfx_vpanic+0x10/0x10 [ 998.362616][ T2342] ? is_bpf_text_address+0x292/0x2b0 [ 998.367880][ T2342] ? is_bpf_text_address+0x26/0x2b0 [ 998.373058][ T2342] panic+0xc5/0xd0 [ 998.376775][ T2342] ? __pfx_panic+0x10/0x10 [ 998.381175][ T2342] ? ret_from_fork_asm+0x1a/0x30 [ 998.386095][ T2342] __warn+0x315/0x4f0 [ 998.390057][ T2342] ? firmware_fallback_sysfs+0x746/0xa30 [ 998.395673][ T2342] ? firmware_fallback_sysfs+0x746/0xa30 [ 998.401287][ T2342] __report_bug+0x29a/0x540 [ 998.405862][ T2342] ? firmware_fallback_sysfs+0x746/0xa30 [ 998.411481][ T2342] ? __pfx___report_bug+0x10/0x10 [ 998.416492][ T2342] ? irqentry_exit+0x59e/0x620 [ 998.421235][ T2342] ? rcu_is_watching+0x15/0xb0 [ 998.425987][ T2342] ? firmware_fallback_sysfs+0x748/0xa30 [ 998.431599][ T2342] ? firmware_fallback_sysfs+0x746/0xa30 [ 998.437232][ T2342] ? firmware_fallback_sysfs+0x746/0xa30 [ 998.442874][ T2342] report_bug+0x16a/0x220 [ 998.447192][ T2342] ? firmware_fallback_sysfs+0x746/0xa30 [ 998.452807][ T2342] ? firmware_fallback_sysfs+0x748/0xa30 [ 998.458420][ T2342] handle_bug+0x9c/0x200 [ 998.462643][ T2342] exc_invalid_op+0x1a/0x50 [ 998.467123][ T2342] asm_exc_invalid_op+0x1a/0x20 [ 998.471950][ T2342] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 998.478174][ T2342] Code: c1 fb e9 5d fc ff ff e8 48 4f c1 fb c6 05 dd 30 f7 09 01 48 c7 c7 20 aa 52 8c e8 75 6b 23 fb e9 85 fc ff ff e8 2b 4f c1 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 20 ab 52 8c 4c 89 e2 e8 35 fd 27 fb e9 [ 998.497761][ T2342] RSP: 0018:ffffc90005ec7670 EFLAGS: 00010293 [ 998.503807][ T2342] RAX: ffffffff86044e85 RBX: dffffc0000000000 RCX: ffff88802b7d0000 [ 998.511761][ T2342] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 998.519714][ T2342] RBP: 0000000000000001 R08: ffffffff90118bb7 R09: 1ffffffff2023176 [ 998.527669][ T2342] R10: dffffc0000000000 R11: fffffbfff2023177 R12: ffffffff8caca060 [ 998.535617][ T2342] R13: 0000000000001770 R14: ffff8880259e50b0 R15: 00000000fffffff5 [ 998.543573][ T2342] ? firmware_fallback_sysfs+0x745/0xa30 [ 998.549212][ T2342] ? kfree+0x1c1/0x630 [ 998.553267][ T2342] ? _request_firmware+0xf11/0x1780 [ 998.558454][ T2342] ? __kmalloc_cache_noprof+0x15b/0x660 [ 998.563991][ T2342] _request_firmware+0x1052/0x1780 [ 998.569096][ T2342] ? __pfx__request_firmware+0x10/0x10 [ 998.574541][ T2342] ? trace_contention_end+0x3d/0x150 [ 998.579816][ T2342] ? __mutex_lock+0x319/0x1300 [ 998.584566][ T2342] request_firmware+0x36/0x50 [ 998.589228][ T2342] pvr2_locate_firmware+0xb3/0x500 [ 998.594329][ T2342] pvr2_upload_firmware1+0x1ba/0x910 [ 998.599598][ T2342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 998.605562][ T2342] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 998.611365][ T2342] ? __lock_acquire+0x6b5/0x2cf0 [ 998.616304][ T2342] ? __pfx_pvr2_context_notify+0x10/0x10 [ 998.621922][ T2342] pvr2_hdw_initialize+0x428/0x3c50 [ 998.627102][ T2342] ? finish_task_switch+0x240/0x920 [ 998.632281][ T2342] ? lockdep_hardirqs_on+0x7a/0x110 [ 998.637471][ T2342] ? __pfx___mutex_trylock_common+0x10/0x10 [ 998.643349][ T2342] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 998.648960][ T2342] ? rcu_is_watching+0x15/0xb0 [ 998.653704][ T2342] ? trace_contention_end+0x3d/0x150 [ 998.658978][ T2342] ? pvr2_context_thread_func+0x26a/0xb40 [ 998.664679][ T2342] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 998.670288][ T2342] ? __pfx___mutex_lock+0x10/0x10 [ 998.675299][ T2342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 998.681258][ T2342] ? schedule+0x90/0x360 [ 998.685488][ T2342] ? schedule+0x16e/0x360 [ 998.689821][ T2342] pvr2_context_thread_func+0x490/0xb40 [ 998.695345][ T2342] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 998.701389][ T2342] ? __pfx_autoremove_wake_function+0x10/0x10 [ 998.707437][ T2342] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 998.713224][ T2342] ? __kthread_parkme+0x7a/0x1f0 [ 998.718148][ T2342] kthread+0x388/0x470 [ 998.722201][ T2342] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 998.728243][ T2342] ? __pfx_kthread+0x10/0x10 [ 998.732809][ T2342] ret_from_fork+0x51e/0xb90 [ 998.737381][ T2342] ? __pfx_ret_from_fork+0x10/0x10 [ 998.742472][ T2342] ? __switch_to+0xc7d/0x1450 [ 998.747130][ T2342] ? __pfx_kthread+0x10/0x10 [ 998.751709][ T2342] ret_from_fork_asm+0x1a/0x30 [ 998.756486][ T2342] [ 998.759767][ T2342] Kernel Offset: disabled [ 998.764086][ T2342] Rebooting in 86400 seconds..