last executing test programs: 16.449531574s ago: executing program 2 (id=3791): socket$inet_tcp(0x2, 0x1, 0x0) openat$uhid(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000026c0)={0x8, {"bd3b217c33a08c42a09f8861c5fbe07199ec703998fc6e52d30c3469ed77b1a52e56444e7676b9253e401f9b1e274745ca93b8b504c39414d1af41ab56dc4bdd6105f12b73d4cc5e3694a7fcc7c28c5b2d3fec263d9ebfcf500461cc506fc4e8e84df0263c6a92c3cd45845f0ec07ef846af56ff045acf396534367ad73208887038f280e3b9f8092ab4af8d6fa0c2cea3a5efd2f4377e6316059e30566197408cc7f394f753fc465286dddf71b1258de7d73ba6b5f81a36906b67a0f781e2ef58e6abb848a268718f33dd830b527281a712188c0bc04e438aa0a2fb205ce7f98ebd167b4725486bf8895235587e9478a06a6e437b3a575f7443ab6844e7b3af974d99b85f31d0a38f418b2ac1978a9f4c1d64bd3b1c100896a0a3a60a800e7512f19c3db11d9e242c1381c1534664f3f09a2ee1e6c567d94a205f9916182d41c6b0b2bc02865d2bc88e5ff57a3f60431e9e29a19e0f1760216121275287de4ffbbe69b175d630525293ab098fe124b5d8f307693d08b3c7094a836053ebe6e3a11b31f63d491a3b5bcfb2089c8a37b261dbdd9dabfd89ba8cee0dd1d91a1730cd9dd461c8de5d6917682b6441d806a1c68db08d37dfcb15a2dd9a557208a2f50d7cd756fb3e31657074a54bb569eba4f88fef29875a77c0cb1d5211b183a12ed81b2ad6bd3a730cba6eb3c310589c27cdc77eb02d337a9d93be246e2071a29a80c23cdb2d5f6c6bceb1a4b639163042c3d9177b42641c40cc797749c875e91101d8144f68bd36a6e4e7753fa66086cfe903905ea2593961c22116b14cea470398f590ca877749cb13a5a057e109e17d830ed43a55e7856e45c8af4635999e1d7f401a5c412a52b700aac3e62233f8783c6cf701ade329045e87fd99814186520c1d427ee0f72df20728e6a2889b30b1775ad035b9d25eebea9c7b08e5e76899b753065172785bbf4f33ead4946676446fbac3120087adad6d78357bd406c1eeeeb6b3ecf8c9a2995b263da916f101e8a4637cdcb1ca779799a7ee7c7ebdf15cddea10d3e38064a1757baac1b2745244d3c7ee1e0d3c9d8912599f0a24a89929efc15c76042a7acd24719d961f46fe8972bb68f1d34795fcd635519b381b0588296e92601dabd6ac74aafd829c3af791231a65200fb700c04687e3959b8e5a148c007ed883ebc432ea15566e30e162e76e06390c04ded7be0fbf0de53f94b979ca1cc6346b268a14b0d0f371dec038ea3be4fe55795232e957a351ce6730a80b69d8aaa91f4c085517df4850e0e63476ed3bff284448d0771366c2fdbbb5dcf7612916d3bc17fd26794991f647452b8737e0f4a56089d97d21705a3d5c72b57203d96b38e831d9ff411981c55df8bb9ae2f520f1f5ac91abe4de879195fcd4a203d659b926cb06d2674cb08b07b56f5337bb88bcd06c3af08f834d84dcc9a41fe1a729b6fc6ba5b4f23dbde1e22b495fb69f4f9356d03f1cabbec6109ec13b0b054912642f04ad05707b81060523c0fd18189819bb946ca1cac6bcae063d68cfac4df0235b82c4ba2ffa4af3ed38b528dc0bb1ab0bfe8858f00f8377dfd27ce3aaaae1676b704aa56fb37547fb6fd77c52e29809998867578d2719bbe6c8d23ac34f336712b0f917d0cce2f72fedff920ef9364c0359adcb772e91953b27e9cc6c7e0586a08d13e41db4bea3069c33600536646bba418542ee2990c78fe663abc7513d36cfb340d928e4567c7055eaf1dffadb191b113537863eb20306e34bc8b7257300e9239e98d4ca800f2cc5ad4cfcd40b138b84b7f16fe25495736f4f27a63e0cfa352c2c89247a58e1ea520e13daa5ba293eaa18132d27b991e7a41a38156a8c485df86a9a43e868dd019faae06e8226c32fa79c46ac5ef800c4f6809ee828ec7b991f35e11d75876e2258813b979b6cfe5ff80cd614cf046e9b8761a4e93882b5d586cbacc98ea5a3bdde5bee9e139cb5af006c20dbc14ead6301f800ebe542b5b46f35db018aaab6f6de59f5542870421e13713f9eb3627e8589018c928cd2ba37c78c98e0ce9dc1769e0f57d2a68a0a65784b22a32b9afe38c015fd7dcc6acf9245553512e29a6f87c8d09e8fc5a7b789029c987c79b3bdad196054c989a3fb6523674d17cf8f92e93a5a3903b74db848b99bb2ff97c73bc409bd0f7612a7c72a89ab303b00d89cdb9ef786089be36d840eaa4ef97fb7b454a0c511ed46dea25a17a9592caeec168aa23efc2d365c81f4eea44e79ca79fdd9d642adb6c83b4c8f357903935ce900b53349b75971e5bce8d410c5646af96438c77863e3c052696904adfe14d2b0e79ae5e6184439ccd88515a3766b909f4365f9e96138b077cbba5c06dc9c5dc753d123ff101984fefe4a2111ffa1be39b0f35fad0643454ccbc5e3cea039e9a74fb63bb2dd974338deb8bf1f7ca764457d93f281b902b40df57aaf1ebbd51972956e0f3d68e015d50358f99de35c2c9d80385a0293eec22dba67821a6c655f71e2aaadab6e4effd5a65412eede7ca865cab9d206c6b7083eee455c9eb866be3bcdd8f769c246da7e6209afcb9a5acbc768823f4abfd746d1b320c4e7d23350fc28093f91a40cc85ffab3904f3097dfb2f2f9d56af621a13645a593877918fad9a5c387233e82c1dbc7d14626e8e5e7f25d70045bf0f6666b1ae8155d353fbc4ce4b747db52099dea90138218da26cd63978bb41dfc83d0812ad0efafe65fd46da1e30fd958e35e74a67356a3b33b955d8b4a51c2e8390500981d80022e74292c5c09759b44a2b044abc4d1bae2703e5743d617e09c1619f90e64846ce80b4c08035befe120cc9e6abcf6e7d0f97c24c6d5976610284d23cb8a738dd49e6e07e3935e915057bc5f044bcdd8c2b920c7ddf66cac393efb20ba0c6ee0aacfac1969db68c92ad96d4112a366917e41e400bd738eedf5e78eb0a911a85ee4de7cf43b4f3052ded9847ffd5bb5bc5d644ce60daa4169935a2dafc4c41e1bdd670026719b2c530f6ead6f5a7fff41458710df369eaf809799512a8906507d7761e9be83cdfb678b638bd9d3ef28936357b4f770a1857c58c898e74045a8bddb448912e3ee3ac9b04b32df527619753d29b0d8d1477825bd8f201fab03dcec593610259513bf94091c591ec2e86c2d4567996e8d652381d97e05f41aadb072d0ceb42126f228bd3024d5e2f27f2307fad778aa906dfc455019d0446a2418fcc46c57447798f996772aad4c2115ab848d765ca8b8d6f20c98949c082ac92f9b79fca2c71794321e89d18234fe73cc8e5d5134f297fdcee9822c8e7a378d53854c545a56962b83cb56d5fc64b4020a4542410b1a7573aa33e6cc9bb23964ded029c2c3bdc9b857edd7e15a025618d60dfa5a0f65f12b6e331ac676eb5e9fdb9df9ac454bad0e961942dd74d08d92b61c18d12db127060d462663aa5d8cf4b4106597a7b11f7ae016216591f7e1f4d5f8ee73233b05dcc4a5bfd2ed6925f809a0ee56238a7e95ce9b643f51fce67d4a02d53f1d028206181a84ff82c538abfdca638424e65344acfed4e21cef852d2fc84cf69b18b8b2a646b9b3f5570dc26fd3ee5aabe64b737cd59d337845ebdd7bbbaf0001b4cfc2eabb7eb030ade53e95aeb3029f8904c14c8d513a44e0b3ef9be97de93bfa0beeac12bba0eb7b4263f73977689e3cf5f2ecb00a4fcbf8362d74237ec979212c2d9193f3a4f9c8ef288fdfe4b148eeadd305fa8aa22ca0fd063ca1894a8aa1b43564912bd302150fc5f981dca673794159f4980c8708888fc5315adfdead02bf3bfc8b00d18e1ee135f19bfa94c668015758eb1fabe2a7b842b01274b27eb45c61e374714e1455bc000fb35fee9a95d63230d3136d4247e824394f28ff3559282d156635b56ada0337fac264bffea1d07e6da37e0fd956b5613e6121187b9587d8c105c76dca5d352deb0b0cd6097e07f37b5792eb9347cd2638adfc9e327d2dc3993a65be532349c7cad4f2bf2597c88f56f3d7d7cef295516cdb164d702def2843250c562f5e8e64616bb7320a61ec34abdc369182ddfb656bf210f0122eaaf2383cc9da94351d4f2a3990d60df0ba25c408bea1f01ade9bad1c56415900c5a0e09e8e27ab566a2ca1b59d2b12a135e654ee63ad070188dc5357d211990b76104377c59b013f15e34a7eaf3a34432e42065361fd364320ec7a33dc06ae3bdcab8b3fb7bb5d1b0b9712dad5376f476db34fbb56cc516b6e930d090d6f538bc045654b9a8a58a0e7c4c233fb6e4ae268be465843a985f76db9531294917025a7ddc49407286d664a6a71a4f9c8c99b0f68efe26a5865ac510a26d97e30110f5bcb993b297f55b83fd7c727032029b112fc5ffd79b6bb39a093ca9f1410c2a89de0aadaf35a9d079e931bcf5f3a34c4729c2717082946b48cbe2cae62524bc313927a65902be88fa06a39594cbcd65ea227c7d670421f7f12990bda39918bddb2a4e143b9ee4ed5590001000000000000112d31d8d3085e4606161f9fd8251d8fe1f80f8e4f2949647f15cac0714e8efd62c04dc79094386d8a06c947285b6171bfd6faf75ac5266bafcb5fe425f45c0fe1a515e1e45c5b2148389c245fd9237cd2457a8e58e161306814eab081e895e5b5dd72d2a212e866191fa211a9700a1d654a472ad2c7672c5e544ea75afa717d00c8e440e9d026a8fb7ce556777d25fdf2dc60317fad21ac61be85c819c5e8418b9fada86cc63ddd7826ef26387a51df286294b3e391be719b562e5e12b193270a8429eaccb05269ddf53ce7dbd0bb9d33a1ee85d3867be278c939846cd152b78fea0c512373b6b6d91735f77f3a03223c612d95c3656947dc6dfd9a5f28536c0998b91b87e1e427c54f60ae8f23ba8605373a88083196c3a772cd52a93a12513bbe2fa0112c24afcf7226bad39ff881369e89285bc5b28798c4979f5519168736c8949be775a3c119cc21a03e26b9fcef7f343c8c3bc788c3fed5c836000e0ad1c1a92795596a3d83bfe7fb498c5fa5292da30ed4e228cbb097cedc46ec9f4c24b8ac446116e753a79231545696d61d083f80a09d04dbbdbbd5511dc5bfead94cad322d83eb1cb4b96bccf51ca5862ea7d63937010dae02a0ab225d711be2102680a63d39dbfe78c4aeeac0cf375970eb9f8b515832fbbcdb81ef05b177df248c160c46ea7fd88608514869967b2c1e50ca138ca6dcb38d7d001a5520304dff8139dbe350fd06fc117c820d5c08c53417e38b13b88f80774295ae9be2549556ad1c3f63cfbcbe54f055d4209d6d4ea4cca04e5b89a1cd8ee828bee39131421f490c0fcc48dad84b9372fe282a32ccba69798183eabdce170b7aeb176b9ce8cb2921580745eb81cd9ee29daeed5390f002e04ff850dfbdea524e7f584ad88ac16577f433a20d50b3d279dff738a75e5e221eaf060a8782971f06775648b2a5b8c31d2164fcf92624f658fab0f7e93cbc1fc63c8a0fe41b84c9a31b4dddb18b3c0b1aa9db4ae973c72142bdcbce7b39485a6dab7904a0075dcd125545ba41b45a39d0df75217edbf638c0d76682d775d200ed488cf40c2c39448d1a622f7fbdb8bdfd738053e4ba2cb46c2653cf7210756215ecbf740f6ea2533fdb94bfef2fd0b840ce57c40af95d6d7f7d8a6b9ef1c9f89ca112e94a9e361e29d941f1f024dd8ed9f172ce3f57a7a61e203d1d94537e8176a1d231b121b4b9900c5d517d9fd55222940965cee493666c287a3b2523ed0263aa6139dbae283f6c3547e900a5ccae32816125758e8d5c790952f84259c160efa04ff8", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x70bd25, 0x20, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001780), 0x101080, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000002000)) recvmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000180)=@caif=@dgm, 0x80, &(0x7f0000000100)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/5, 0x5}, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xffdffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @remote, 0x7}, {0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15.378385964s ago: executing program 2 (id=3796): socket(0x40000000015, 0x5, 0x0) io_uring_setup(0x12b9, &(0x7f00000002c0)={0x0, 0x48c7, 0x810, 0xfffffffc, 0x1000168}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x14, 0x41, 0x0, 0x7, 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x10000, 0x111000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_getres(0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000002d00090027bd700000000000040000008814d2cac88a4d33c05eda9ddeab6bd70d05d6a68355f71b43a6284fb9fd8eef1c5c2a0660e8b01ec2a0df"], 0x14}}, 0x84) recvmmsg(r8, 0x0, 0x0, 0x400120a0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x104000, 0x800, 0x9, 0x5}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) 14.932772963s ago: executing program 0 (id=3799): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = getpid() sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x409, 0x3, 0x8, 0xfa11, 0x3}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x4, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80800}) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x2a0080) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000240)={0x0, r8, r9, 0x3, 0x3b39, 0x6, 0x1, 0x7, 0x8, 0x1, 0x3, 0x84d}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002d00010326bd7002badbdf2506000000"], 0x14}}, 0x0) 13.151918726s ago: executing program 0 (id=3802): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@local, 0x8, 0x3}, &(0x7f0000000040)=0x20) socket$inet6(0xa, 0x80000, 0x3) r4 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x0, 0x8, 0x1, "130557e6fffffcff01d67540000000fffbe2ff8600", 0x3136564e}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b04"]) 11.772668307s ago: executing program 0 (id=3813): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000c00)='wg0\x00', 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801bf001a000100feffffff0001000000000000000000000000ffffe0000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/210], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) io_setup(0x8, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x9c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x7d, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x3, @random=0x1, 0x1, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x2}}, @void, @val={0x5, 0x13, {0x19, 0x84, 0x40, "4b38c6a7b7c699511daca3180977757e"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x34}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0xffffffffffffffff, 0xf30, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xf6}}, @void}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000328bd7000ffdf252e0000000800030000", @ANYRES32=r8, @ANYBLOB="0400d000"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x9000) 10.342163623s ago: executing program 2 (id=3819): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000000000000000000000000000018b91100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x80001, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = inotify_init() fgetxattr(r5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0) preadv(r4, &(0x7f0000010540)=[{0x0}], 0x1, 0x0, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 9.01272309s ago: executing program 0 (id=3809): sysfs$1(0x1, &(0x7f0000000080)='/dev/vhost-vsock\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x40000, @ioapic={0x8080000, 0x8, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xfb}, {0x3, 0x9, 0x8d, '\x00', 0x7c}, {0xfc, 0x4, 0x4, '\x00', 0xb9}, {0x11, 0xb, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0xfd, 0x0, 0x7, '\x00', 0x7f}, {0x0, 0xfa}, {0xdd, 0x8f, 0x40, '\x00', 0x4}, {0x39, 0x6, 0x1, '\x00', 0x1}, {0xb}, {0x5, 0xe, 0x0, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x5}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x4, 0x21, 0x80, '\x00', 0x5}, {0x3, 0x1}, {0x0, 0x2, 0x5, '\x00', 0x12}, {0x48, 0x0, 0x9, '\x00', 0xdb}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfe, 0x8, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x9}, {0x7f, 0xff, 0x6, '\x00', 0x7}]}}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000300)={0x0, 0x14, 0x2, "b22c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000140)={0x0, [{0x1, 0x8, 0x3, &(0x7f0000000300)="d4"}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x8, 0x401, &(0x7f0000000440)="92"}, {0x2, 0x0, 0xfffffff1, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x428, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0xa, 0x0}, {0x1, 0x0, 0xd9d, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x4, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x8, 0x0}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') socket(0x2, 0x3, 0xff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x1a56, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socket$key(0xf, 0x3, 0x2) 8.57933539s ago: executing program 2 (id=3810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}) r1 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000540)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x20, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x5, 0xd, 0x0, 0x1, [@generic="a9"]}]}, 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0xf, 0x6, 0x9, 0x7f, 0x7, 0xf, 0x7, 0x7, 0xc3, 0x4, 0x4, 0x7, 0xffffffff, 0x3, 0x5, 0x6, 0xad0, 0x0, 0x2, 0xe54, 0x0, 0xf69}}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xe6, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x2, 0x1, 0x10, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "f02513"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x86, 0x5, 0x4, 0x5}, {0x6, 0x24, 0x1a, 0x2}, [@mdlm_detail={0x64, 0x24, 0x13, 0x7, "07a315b354506290dabe57f87b71483c1c5b46cd1810acd78b8214dd7b65bcfecaa47f65e08a69a4fb693429c23e3eb1b9ce238186fd2eab0b69c6247670b189db19c170018729c1b98b008e643fed0f5f9736ceb6f2b295d517f3836bb4eb68"}, @acm={0x4, 0x24, 0x2, 0x2}, @acm={0x4, 0x24, 0x2, 0xf}, @call_mgmt={0x5}, @acm={0x4, 0x24, 0x2, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x37, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x10, 0xcb, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0xd2, 0x5}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x10, 0x9, 0x4, 0x20, 0xf8}, 0x6c, &(0x7f0000000580)={0x5, 0xf, 0x6c, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x0, 0xf, 0x1}, @generic={0x5d, 0x10, 0x0, "4117f9cb42964640c147e2f37cb29a2ac91a4ab0d706d32b438a09cbdf8f756a59fc133ddc2011008dd73bc5e434438ac892f2a3a71dd9aef6493f9aed2715f9edad3b93bcb714d59d8760fd56ec7bb054ebddaeb57fd7d142eb"}]}, 0x1, [{0x25, &(0x7f00000004c0)=@string={0x25, 0x3, "2e7fc1a51877250d11eeb1b582a0c913c71a07c8620e0c7b9c9cb7ddec12e1a5580754"}}]}) socket$nl_route(0x10, 0x3, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000001c0)=""/189) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x40000000000001f6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) shmctl$IPC_RMID(r1, 0x0) 7.682939265s ago: executing program 4 (id=3815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000380)="78596a1ff1420e9b3c4b", 0xa}], 0x1) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') read$FUSE(r4, &(0x7f0000000800)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f0000000500)=""/230, 0xe6}, {&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000600)=""/102, 0x66}], 0x4, 0x2, 0x4) read(r4, &(0x7f0000000040)=""/12, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000000)={0xb001, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) 6.804740856s ago: executing program 1 (id=3827): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x42281) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000032c0)=ANY=[@ANYBLOB="01000000000000002a000040000000000400000000000000ec6863600a2674556bd20f571a825a2a07e174b2ff8c1e39ee0fc18a1dd58f61cb2e40f3dd1ac1f9922ec059e22bdaf85425ea5f73cc5802007a3be53abda6ad1a7c04f3721ac6c51431f003d7a634038649d53e674a08da790c0669165ead6383d192c300355b8cca70da3350ee82613ae572727fcf20448a8439217861cd91feb6e490dc0454950a50cf861568d8"]) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r5, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000380)=@arm64) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000080)=0x4) 6.737849089s ago: executing program 4 (id=3817): r0 = socket(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) lstat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xc, 0x0, &(0x7f0000000340)) rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3}) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000300)={0x1, 0x1, {0x0}, {r2}, 0x0, 0xffff0001}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe4) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) sendmmsg$unix(r7, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000100)="e596198339aa7f7b7d40e0f5bf7cae84e1a35abf18919d483a78c49eb39fc3bef3d1ef3c3677bcb775a312db55425bc2612fd7f9cf558f228b0e117f6a87d0343521f253302ee9d4b64eadd4430cda02d6f61d", 0x53}, {&(0x7f0000000240)="aa09621c6244083ab8384bc098f40c86814deaf64c3cbbbbb59a05518bedb994869938d08fcd6f8a62b7472cbdb55ac19623b08e56ed630dc8654cad45c5098f4650f259f7", 0x45}, {&(0x7f0000000380)="6b63d1bbabac3829f887dee01a7464c0e0587231cf43d0da95d776495b48fdf316c076af8fe336f8f205ee07f8ec5d22b12914ffdbb566e7b574659c0c60bdc22eae1452f28ef0daeb7c4117f6e17e7a2850cca72fe181bf892b19676fa4f5da4cbdd4cd8bc16b658a76cc7fe0490aa891f16afb4bb0ff1d26ee7c7abd1d431a834e5287e98ab4eb02a4a9a3b7123e0b5ea3635171e3519d6c9a2cd8c5b8b7d23ff38b271d6a3f3b73f26e6f04df49fad4c61a87bf80553bf726a845b165cf21b847", 0xc2}], 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="200000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=r10, @ANYRES32=0xee00, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0c0000000100000001000000180000000100000001000000", @ANYRES32=r1, @ANYRESOCT=r7, @ANYRES32=r0, @ANYBLOB="1c0000000100000001000057", @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r6], 0xe8, 0x8000}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000800)="d3890cf6faa14e1ddbf5c2f5a873ac20b52daa0b26a24106126db16fd85c38b9bb26056b79a4e2acf059df947abb9a325ff13990fe9b53c9db60f81f80331bf24b3ad18c41ffdc48ad4265a4e9d3e6d5d5e53381c05c756b5d47fe4bc3076210194d34415ce69bb8aa16f04bd162cae0c4ea4353a176add71b41313313093c43966c123f5c9c2e0b8c765b54960a92b6521e2bbaaf712d7e8185791a6822633e86971f8c5a6fd639e520b668cd39f9c2422f3ff4dc9e941db44956648fad5865f9cadb9944fe105929d9fc88a404475f0766b6386816f147a85afd371527ccef5547e4cd990d1ad708202a0c", 0xec}, {&(0x7f00000019c0)="0e6df48086a7cc5f5821b0a8d4c2b152b9afc23212d51a4ee573c666d7d06ce8bacac365d3e464c136978c7ff53b46da1b3d8fff7e4506c6a9fd33c740b17d05df24945818f043aa10c7c95b9ee520f324ae85c04537949db0e9281985ce6957a7bc1e304725c0ce0533300db796964d491e8062a1bb13cb4522a06bfbb2569c84bd09c61f3476e40dc0", 0x8a}, {&(0x7f0000000900)="78c117a2c8ead1def0e3cda18b447e6ebb0f3f069f73d17624d6ddafd530e5f7b3f68ff3c37cfd73adac4603c0d312fc768a2d071475ce621048b23350c684", 0x3f}, {&(0x7f0000000940)="310457bbebe6deff", 0x8}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="180000000100000002000000", @ANYRES32=r10, @ANYRES32=r9, @ANYRESOCT=r2, @ANYBLOB="2c0000000100000001000000", @ANYRES32, @ANYRESOCT, @ANYRESHEX=r1, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="1cadbb1e53f377900ee1851060fe6b67959665f729d9f785e05507aadb05d9ad21954f960c80318e850db6acecb93bd9b9502a621ff4aebb42cb6d0ef15bdd973460081cb9076e7fbb49904590a62843fcca5e51eee28168d31936e4dbf45d543a6794116ef26473851b1edc9630fb7e04ceb9db28", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x8c, 0x20040004}}], 0x2, 0x40845) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, 0x0, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r11) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x8c4) r13 = socket$inet(0x2, 0x801, 0x100) listen(r13, 0x0) r14 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f0102030109021200010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r14, 0x0, 0x0) socket(0x1, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) 6.408022896s ago: executing program 1 (id=3818): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x4008800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') read$FUSE(r1, &(0x7f00000095c0)={0x2020}, 0x2020) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8) read(r1, &(0x7f0000000040)=""/12, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0xb001, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x400000000000003, 0xad, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6f}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd6f00fedbdf25160000000500030001000000050003000000000005000400df000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX=r7, @ANYRES16=r6], 0x2c}}, 0x20000000) 5.98481807s ago: executing program 1 (id=3820): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x297f, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) rt_sigaction(0x4, &(0x7f00000000c0)={0x0, 0x80000003, 0x0, {[0x2, 0x3f1]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x4}]}}}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0xf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x1, 0xaf, 0x2, 0x2}, 0x802}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a45323, &(0x7f00000005c0)={{0x3, 0x3}, 'port1\x00', 0x53, 0x0, 0x3, 0x3ff, 0x8, 0x5, 0x10000, 0x0, 0x0, 0x6}) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 4.986321465s ago: executing program 1 (id=3821): socket$rds(0x15, 0x5, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) 4.975786884s ago: executing program 0 (id=3832): r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780fcff10"], 0x60}}, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x9) recvfrom(r2, &(0x7f0000000140), 0x0, 0x2102, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @host}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e0007"], 0x1f4}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "059500", 0x10, 0x11, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@routing={0x3b, 0x0, 0x0, 0x7, 0x300}], {0x4e21, 0x4e23, 0x8}}}}}}, 0x0) statx(0xffffffffffffffff, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd0, 0x0, 0x0) 4.530201442s ago: executing program 3 (id=3822): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5012, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg(r1, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async, rerun: 32) syz_open_dev$dri(0x0, 0xd21, 0x4000) (async, rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_open_dev$usbmon(0x0, 0x0, 0x0) (async) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) gettid() (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}], 0x7}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36bfe1c3e68f0426d10a1f863ced625e85d7f9f4af20682"}}, 0x0) (async) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x21c) (async, rerun: 64) sched_setscheduler(0x0, 0x2, 0x0) (rerun: 64) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) epoll_create1(0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.284947743s ago: executing program 3 (id=3823): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/4111, 0x100f}], 0x1}, 0x100}], 0x1, 0x10002, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)=0x6e, 0x800) sendto$unix(r1, &(0x7f0000000240)="c62efb65", 0x4, 0x810, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x7c, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x9}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x47a31, 0x9894}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x7fffffff}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80) 3.751136778s ago: executing program 3 (id=3824): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801bf001a000100feffffff0001000000000000000000000000ffffe0000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/210], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) io_setup(0x8, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x9c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x7d, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x3, @random=0x1, 0x1, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x2}}, @void, @val={0x5, 0x13, {0x19, 0x84, 0x40, "4b38c6a7b7c699511daca3180977757e"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x34}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0xffffffffffffffff, 0xf30, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xf6}}, @void}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000328bd7000ffdf252e0000000800030000", @ANYRES32=r9, @ANYBLOB="0400d000"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x9000) 3.694169074s ago: executing program 2 (id=3825): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000004e0001"], 0x18}}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x81, 0xf, 0x100000001, 0x7f, 0x5, 0xfffffffffffff13e, 0x64a943c9, 0x3}, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5f, 0x82, 0x10, 0x20, 0xae6f, 0x79f4, 0x8f99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x58, 0x42, 0x0, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) 3.52382142s ago: executing program 0 (id=3826): syz_usb_connect(0x5, 0x1bb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r1, 0x80, &(0x7f00000000c0)={0x19, 0x7, 0x7}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000280)={0x1, 0x8, 0x0, 0x0}) 3.496738578s ago: executing program 1 (id=3828): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x6, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902760002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d052415a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d000009040101"], 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) unshare(0x22020600) socket$inet6(0xa, 0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_matches\x00') linkat(r4, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000000)={0x0, 0x0, r6, 0x0, '\x00', 0x2a}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01464ba, &(0x7f00000001c0)={0x0, r6, 0x0, 0xe0e0e0e0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007df09808e1050804da20010203010902"], 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000706c78e17d90000e60ddcf948681a330500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 3.244939819s ago: executing program 4 (id=3829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000380)="78596a1ff1420e9b3c4b", 0xa}], 0x1) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x4008800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') read$FUSE(r5, &(0x7f0000000800)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f0000000500)=""/230, 0xe6}, {&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000600)=""/102, 0x66}], 0x4, 0x2, 0x4) read(r5, &(0x7f0000000040)=""/12, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000000)={0xb001, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) 2.225307421s ago: executing program 3 (id=3830): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0xf0ff) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) 2.135524047s ago: executing program 4 (id=3831): pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0xffffffff, 0x2}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r4, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = dup(r3) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x8) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendfile(r5, r5, 0x0, 0xffffffff) 2.12862225s ago: executing program 3 (id=3842): r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780fcff10"], 0x60}}, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x9) recvfrom(r2, &(0x7f0000000140), 0x0, 0x2102, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @host}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x1f4}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "059500", 0x10, 0x11, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@routing={0x3b, 0x0, 0x0, 0x7, 0x300}], {0x4e21, 0x4e23, 0x8}}}}}}, 0x0) statx(0xffffffffffffffff, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd0, 0x0, 0x0) 627.804031ms ago: executing program 3 (id=3833): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000c00)='wg0\x00', 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801bf001a000100feffffff0001000000000000000000000000ffffe0000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/210], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) io_setup(0x8, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x9c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x7d, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x3, @random=0x1, 0x1, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x2}}, @void, @val={0x5, 0x13, {0x19, 0x84, 0x40, "4b38c6a7b7c699511daca3180977757e"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x34}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0xffffffffffffffff, 0xf30, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xf6}}, @void}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000328bd7000ffdf252e0000000800030000", @ANYRES32=r8, @ANYBLOB="0400d000"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x9000) 569.268723ms ago: executing program 4 (id=3834): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="6bf8b5b4b98699c3d3314cdcbd30b296", 0x10}], 0x1, 0x0, 0x0, 0x881}, 0x404c804) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x4000000, 0x0, 0x4, r1, &(0x7f0000000380)="13d32a61f28931e7941a492bdc2a020f", 0x10}]) 444.858332ms ago: executing program 2 (id=3835): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = getpid() sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x409, 0x3, 0x8, 0xfa11, 0x3}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c890702010000000000"], 0x4, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80800}) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x2a0080) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000240)={0x0, r8, r9, 0x3, 0x3b39, 0x6, 0x1, 0x7, 0x8, 0x1, 0x3, 0x84d}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002d00010326bd7002badbdf2506000000"], 0x14}}, 0x0) 418.617279ms ago: executing program 1 (id=3836): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = getpid() sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x409, 0x3, 0x8, 0xfa11, 0x3}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0], 0x4, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80800}) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x2a0080) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000240)={0x0, r8, r9, 0x3, 0x3b39, 0x6, 0x1, 0x7, 0x8, 0x1, 0x3, 0x84d}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002d00010326bd7002badbdf2506000000"], 0x14}}, 0x0) 0s ago: executing program 4 (id=3837): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000c00)='wg0\x00', 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801bf001a000100feffffff0001000000000000000000000000ffffe0000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/210], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) io_setup(0x8, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x9c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x7d, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x3, @random=0x1, 0x1, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x2}}, @void, @val={0x5, 0x13, {0x19, 0x84, 0x40, "4b38c6a7b7c699511daca3180977757e"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x34}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0xffffffffffffffff, 0xf30, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xf6}}, @void}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000328bd7000ffdf252e0000000800030000", @ANYRES32=r8, @ANYBLOB="0400d000"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x9000) kernel console output (not intermixed with test programs): ot/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d558 code=0x7ffc0000 [ 1050.959100][ T6761] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1050.997904][ T30] audit: type=1326 audit(1760789537.546:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.4.3449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d558 code=0x7ffc0000 [ 1051.050187][ T6761] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1051.077092][ T6761] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1051.106244][ T6761] usb 2-1: media controller created [ 1051.178818][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1051.185143][ T5825] dw2102: i2c transfer failed. [ 1051.196797][T18625] fuse: Unknown parameter '‰' [ 1051.377428][ T6761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1051.458883][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1051.464831][ T5825] dw2102: i2c transfer failed. [ 1051.658860][ T6761] DVB: Unable to find symbol dib7000p_attach() [ 1051.675110][ T6761] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1051.745623][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1051.758935][ T9] dw2102: i2c transfer failed. [ 1051.971198][ T6761] rc_core: IR keymap rc-dib0700-rc5 not found [ 1051.979900][ T6761] Registered IR keymap rc-empty [ 1051.995395][ T6761] dvb-usb: could not initialize remote control. [ 1052.005214][ T6761] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1052.030641][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1052.036644][ T9] dw2102: i2c transfer failed. [ 1052.059442][ T6761] usb 2-1: USB disconnect, device number 28 [ 1052.152494][ T6761] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1052.177733][T18633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.185328][T18633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.318952][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1052.324952][ T9] dw2102: i2c transfer failed. [ 1052.599021][ T5148] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1052.610233][ T5148] Bluetooth: hci5: Injecting HCI hardware error event [ 1052.623959][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1052.630082][ T5148] Bluetooth: hci5: hardware error 0x00 [ 1052.638177][ T10] dw2102: i2c transfer failed. [ 1052.899314][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1052.905115][ T9] dw2102: i2c transfer failed. [ 1053.016906][T18633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.079650][T18633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.198847][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1053.204987][ T9] dw2102: i2c transfer failed. [ 1053.261504][T18645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.310042][T18645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.404089][T16511] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.413465][T16511] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.425079][T16511] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.435567][T16511] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.469086][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1053.474874][ T9] dw2102: i2c transfer failed. [ 1053.748894][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1053.754784][ T10] dw2102: i2c transfer failed. [ 1053.795909][T18653] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1053.951578][T18658] kvm: kvm [18657]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1054.018943][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1054.027308][ T10] dw2102: i2c transfer failed. [ 1054.288848][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1054.301875][ T10] dw2102: i2c transfer failed. [ 1054.568854][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1054.589361][ T10] dw2102: i2c transfer failed. [ 1054.758934][ T5148] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1054.849512][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.855991][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.139015][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1055.144995][T13396] dw2102: i2c transfer failed. [ 1055.224579][T18679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.237548][T18679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.428897][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1055.438943][ T10] dw2102: i2c transfer failed. [ 1055.544076][T18686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3466'. [ 1055.699240][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1055.713846][ T10] dw2102: i2c transfer failed. [ 1055.978835][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1055.987305][ T10] dw2102: i2c transfer failed. [ 1056.055982][T18696] fuse: Bad value for 'fd' [ 1056.268785][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1056.276980][T13396] dw2102: i2c transfer failed. [ 1056.628801][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1056.634616][ T10] dw2102: i2c transfer failed. [ 1056.693307][T18703] kvm: kvm [18701]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1056.898816][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1056.904933][ T10] dw2102: i2c transfer failed. [ 1057.197734][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1057.203715][T13396] dw2102: i2c transfer failed. [ 1057.469884][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1057.499476][T13396] dw2102: i2c transfer failed. [ 1057.724215][T14269] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1057.938812][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1057.944850][ T10] dw2102: i2c transfer failed. [ 1057.945081][T14269] usb 2-1: Using ep0 maxpacket: 32 [ 1057.962508][T14269] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.973421][T14269] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1058.030146][T14269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.047262][T14269] usb 2-1: config 0 descriptor?? [ 1058.141468][T14269] dvb-usb: found a 'TeVii S662' in warm state. [ 1058.147770][T14269] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1058.155200][T14269] dvb-usb: bulk message failed: -22 (2/0) [ 1058.168191][T14269] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1058.197313][T14269] dvbdev: DVB: registering new adapter (TeVii S662) [ 1058.209035][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1058.214944][T13396] dw2102: i2c transfer failed. [ 1058.224910][T14269] usb 2-1: media controller created [ 1058.339910][T14269] dvb-usb: bulk message failed: -22 (6/0) [ 1058.340262][T18725] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1058.382364][T14269] dw2102: i2c transfer failed. [ 1058.421641][T14269] dvb-usb: bulk message failed: -22 (6/0) [ 1058.437312][T14269] dw2102: i2c transfer failed. [ 1058.455231][T14269] dvb-usb: bulk message failed: -22 (6/0) [ 1058.475748][T14269] dw2102: i2c transfer failed. [ 1058.515448][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1058.556799][T13396] dw2102: i2c transfer failed. [ 1058.570854][T14269] dvb-usb: bulk message failed: -22 (6/0) [ 1058.589343][T14269] dw2102: i2c transfer failed. [ 1058.604519][T14269] dvb-usb: bulk message failed: -22 (6/0) [ 1058.615715][T14269] dw2102: i2c transfer failed. [ 1058.629067][T14269] dvb-usb: bulk message failed: -22 (6/0) [ 1058.688390][T14269] dw2102: i2c transfer failed. [ 1058.699026][T14269] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1058.744148][T14269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1058.770368][T14269] dvb-usb: bulk message failed: -22 (3/0) [ 1058.781557][T14269] dw2102: command 0x0e transfer failed. [ 1058.809998][T14269] dvb-usb: bulk message failed: -22 (3/0) [ 1058.818872][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1058.824971][ T9] dw2102: i2c transfer failed. [ 1058.849873][T14269] dw2102: command 0x0e transfer failed. [ 1059.088820][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1059.131996][T13396] dw2102: i2c transfer failed. [ 1059.134094][T18733] FAULT_INJECTION: forcing a failure. [ 1059.134094][T18733] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.175283][T14269] dvb-usb: bulk message failed: -22 (3/0) [ 1059.186864][T14269] dw2102: command 0x0e transfer failed. [ 1059.191470][T18733] CPU: 0 UID: 0 PID: 18733 Comm: syz.3.3480 Not tainted syzkaller #0 PREEMPT(full) [ 1059.191500][T18733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1059.191511][T18733] Call Trace: [ 1059.191521][T18733] [ 1059.191530][T18733] dump_stack_lvl+0x189/0x250 [ 1059.191557][T18733] ? __pfx____ratelimit+0x10/0x10 [ 1059.191587][T18733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1059.191606][T18733] ? __pfx__printk+0x10/0x10 [ 1059.191641][T18733] should_fail_ex+0x414/0x560 [ 1059.191675][T18733] should_failslab+0xa8/0x100 [ 1059.191701][T18733] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1059.191721][T18733] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1059.191738][T18733] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1059.191755][T18733] ? sctp_add_bind_addr+0x8c/0x370 [ 1059.191779][T18733] sctp_add_bind_addr+0x8c/0x370 [ 1059.191802][T18733] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1059.191826][T18733] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1059.191844][T18733] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1059.191865][T18733] ? sctp_v6_is_any+0x64/0x80 [ 1059.191895][T18733] ? sctp_copy_one_addr+0x93/0x360 [ 1059.191917][T18733] sctp_bind_addr_copy+0xb3/0x3c0 [ 1059.191936][T18733] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1059.191966][T18733] sctp_connect_new_asoc+0x2e0/0x690 [ 1059.191994][T18733] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1059.192018][T18733] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1059.192041][T18733] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1059.192061][T18733] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1059.192084][T18733] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1059.192108][T18733] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1059.192137][T18733] sctp_sendmsg+0x155c/0x2810 [ 1059.192173][T18733] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1059.192198][T18733] ? aa_sk_perm+0x81e/0x950 [ 1059.192223][T18733] ? __pfx_aa_sk_perm+0x10/0x10 [ 1059.192245][T18733] ? sock_rps_record_flow+0x19/0x410 [ 1059.192273][T18733] ? inet_sendmsg+0x2f4/0x370 [ 1059.192296][T18733] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1059.192323][T18733] __sock_sendmsg+0x19c/0x270 [ 1059.192349][T18733] __sys_sendto+0x3bd/0x520 [ 1059.192385][T18733] ? __pfx___sys_sendto+0x10/0x10 [ 1059.192408][T18733] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1059.192447][T18733] ? __fget_files+0x3a0/0x420 [ 1059.192484][T18733] ? ksys_write+0x22a/0x250 [ 1059.192504][T18733] ? exc_page_fault+0x82/0x100 [ 1059.192524][T18733] ? __pfx_ksys_write+0x10/0x10 [ 1059.192553][T18733] __ia32_sys_sendto+0xdd/0x100 [ 1059.192597][T18733] __do_fast_syscall_32+0xb6/0x2b0 [ 1059.192619][T18733] ? lockdep_hardirqs_on+0x9c/0x150 [ 1059.192643][T18733] do_fast_syscall_32+0x34/0x80 [ 1059.192664][T18733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1059.192685][T18733] RIP: 0023:0xf7f72539 [ 1059.192703][T18733] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1059.192720][T18733] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1059.192740][T18733] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1059.192754][T18733] RDX: 0000000000000001 RSI: 0000000000000015 RDI: 0000000080000100 [ 1059.192766][T18733] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1059.192777][T18733] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1059.192788][T18733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1059.192818][T18733] [ 1059.398831][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1059.398893][T13396] dw2102: i2c transfer failed. [ 1059.494761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1059.621181][T14269] dvb-usb: bulk message failed: -22 (3/0) [ 1059.627109][T14269] dw2102: command 0x0e transfer failed. [ 1059.632941][T14269] dvb-usb: bulk message failed: -22 (1/0) [ 1059.639164][T14269] dw2102: command 0x51 transfer failed. [ 1059.647463][T14269] dvb-usb: bulk message failed: -22 (5/0) [ 1059.658891][T14269] dw2102: i2c probe for address 0x68 failed. [ 1059.658994][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1059.667118][T14269] dvb-usb: bulk message failed: -22 (5/0) [ 1059.707693][T13396] dw2102: i2c transfer failed. [ 1059.732380][T14269] dw2102: i2c probe for address 0x69 failed. [ 1059.743133][T14269] dvb-usb: bulk message failed: -22 (5/0) [ 1059.756984][T14269] dw2102: i2c probe for address 0x6a failed. [ 1060.033248][ T30] kauditd_printk_skb: 1187 callbacks suppressed [ 1060.033274][ T30] audit: type=1326 audit(1760789547.316:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18734 comm="syz.4.3481" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x0 [ 1060.062157][ C1] vkms_vblank_simulate: vblank timer overrun [ 1060.088752][T14269] dw2102: probing for demodulator failed. Is the external power switched on? [ 1060.097791][T14269] dvb-usb: no frontend was attached by 'TeVii S662' [ 1060.129173][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1060.143657][ T9] dw2102: i2c transfer failed. [ 1060.189835][T14269] rc_core: IR keymap rc-tt-1500 not found [ 1060.195934][T14269] Registered IR keymap rc-empty [ 1060.204577][T14269] rc rc1: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1 [ 1060.217810][T14269] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1/input93 [ 1060.286616][T18751] fuse: Bad value for 'fd' [ 1060.428823][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1060.434771][ T9] dw2102: i2c transfer failed. [ 1060.758947][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1060.765618][T14269] dvb-usb: schedule remote query interval to 250 msecs. [ 1060.772835][T14269] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1060.780245][T14269] dvb-usb: TeVii S662 successfully initialized and connected. [ 1060.832459][ T9] dw2102: i2c transfer failed. [ 1060.849694][T14269] usb 2-1: USB disconnect, device number 29 [ 1061.108819][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1061.123745][T14269] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1061.126718][ T9] dw2102: i2c transfer failed. [ 1061.150034][T18757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3487'. [ 1061.193730][T18757] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1061.200308][T18757] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1061.214006][T18757] vhci_hcd vhci_hcd.0: Device attached [ 1061.390160][T16685] vhci_hcd: vhci_device speed not set [ 1061.418996][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1061.424833][ T9] dw2102: i2c transfer failed. [ 1061.444718][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3486'. [ 1061.445765][T18765] netlink: 'syz.4.3486': attribute type 13 has an invalid length. [ 1061.454254][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3486'. [ 1061.471327][T16685] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 1061.483325][ T6761] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1061.688813][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1061.694616][ T10] dw2102: i2c transfer failed. [ 1062.242481][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1062.260339][ T10] dw2102: i2c transfer failed. [ 1062.263259][ T6761] usb 4-1: Using ep0 maxpacket: 8 [ 1062.285000][ T6761] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1062.300448][ T6761] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1062.314632][ T6761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 97, changing to 10 [ 1062.326657][ T6761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1062.351437][ T6761] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1062.363118][ T6761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.376725][ T6761] usb 4-1: Product: syz [ 1062.384561][ T6761] usb 4-1: Manufacturer: syz [ 1062.408982][ T6761] usb 4-1: SerialNumber: syz [ 1062.446075][ T6761] usb 4-1: config 0 descriptor?? [ 1062.455572][T18757] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1062.529229][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1062.537191][T18776] kvm: kvm [18775]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1062.546480][ T10] dw2102: i2c transfer failed. [ 1063.507921][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1063.523280][T13396] dw2102: i2c transfer failed. [ 1063.609309][ T6761] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1063.632192][ T6761] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input94 [ 1063.659012][T18758] vhci_hcd: connection reset by peer [ 1063.671228][ T13] vhci_hcd: stop threads [ 1063.675581][ T13] vhci_hcd: release socket [ 1063.700347][ C1] powermate: config urb returned -71 [ 1063.706032][ C1] powermate: config urb returned -71 [ 1063.711670][ C1] powermate: config urb returned -71 [ 1063.717261][ C1] powermate: config urb returned -71 [ 1063.738543][ T6761] usb 4-1: USB disconnect, device number 20 [ 1063.744691][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1063.746522][ T13] vhci_hcd: disconnect device [ 1063.817088][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1063.844260][T13396] dw2102: i2c transfer failed. [ 1063.922561][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3493'. [ 1064.121745][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1064.139475][ T9] dw2102: i2c transfer failed. [ 1064.298955][ T6757] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1064.471436][ T6757] usb 2-1: Using ep0 maxpacket: 8 [ 1064.498863][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1064.504707][T13396] dw2102: i2c transfer failed. [ 1064.513863][ T6757] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1064.589222][ T6757] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1064.727407][T18799] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3496'. [ 1064.768796][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1064.774698][T13396] dw2102: i2c transfer failed. [ 1064.819022][ T6757] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1064.833983][T18802] FAULT_INJECTION: forcing a failure. [ 1064.833983][T18802] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.849413][T18802] CPU: 0 UID: 0 PID: 18802 Comm: syz.2.3497 Not tainted syzkaller #0 PREEMPT(full) [ 1064.849433][T18802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1064.849441][T18802] Call Trace: [ 1064.849446][T18802] [ 1064.849452][T18802] dump_stack_lvl+0x189/0x250 [ 1064.849471][T18802] ? __pfx____ratelimit+0x10/0x10 [ 1064.849490][T18802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1064.849503][T18802] ? __pfx__printk+0x10/0x10 [ 1064.849520][T18802] ? __pfx___might_resched+0x10/0x10 [ 1064.849540][T18802] should_fail_ex+0x414/0x560 [ 1064.849562][T18802] should_failslab+0xa8/0x100 [ 1064.849579][T18802] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1064.849593][T18802] ? __asan_memset+0x22/0x50 [ 1064.849603][T18802] ? alloc_netdev_mqs+0xb97/0x11b0 [ 1064.849617][T18802] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 1064.849646][T18802] alloc_netdev_mqs+0xb97/0x11b0 [ 1064.849663][T18802] rtnl_create_link+0x31f/0xd10 [ 1064.849682][T18802] rtnl_newlink_create+0x25c/0xb00 [ 1064.849702][T18802] ? __lock_acquire+0xab9/0xd20 [ 1064.849720][T18802] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1064.849740][T18802] ? __pfx___mutex_lock+0x10/0x10 [ 1064.849760][T18802] ? ns_capable+0x8a/0xf0 [ 1064.849778][T18802] rtnl_newlink+0x16e4/0x1c80 [ 1064.849795][T18802] ? netlink_deliver_tap+0x19c/0x1b0 [ 1064.849819][T18802] ? __pfx_rtnl_newlink+0x10/0x10 [ 1064.849851][T18802] ? kasan_quarantine_put+0xdd/0x220 [ 1064.849864][T18802] ? lockdep_hardirqs_on+0x9c/0x150 [ 1064.849880][T18802] ? nlmon_xmit+0xb0/0x100 [ 1064.849897][T18802] ? kmem_cache_free+0x19b/0x690 [ 1064.849917][T18802] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1064.849933][T18802] ? lockdep_hardirqs_on+0x9c/0x150 [ 1064.849945][T18802] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1064.849961][T18802] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1064.849984][T18802] ? __dev_queue_xmit+0x27b/0x3b50 [ 1064.850005][T18802] ? __dev_queue_xmit+0x27b/0x3b50 [ 1064.850024][T18802] ? __dev_queue_xmit+0x27b/0x3b50 [ 1064.850047][T18802] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1064.850064][T18802] ? kasan_save_track+0x3e/0x80 [ 1064.850083][T18802] ? __kasan_slab_alloc+0x6c/0x80 [ 1064.850111][T18802] ? __lock_acquire+0xab9/0xd20 [ 1064.850145][T18802] ? __pfx_rtnl_newlink+0x10/0x10 [ 1064.850161][T18802] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1064.850179][T18802] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1064.850194][T18802] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1064.850209][T18802] ? ref_tracker_free+0x63a/0x7d0 [ 1064.850222][T18802] ? __asan_memcpy+0x40/0x70 [ 1064.850233][T18802] ? __pfx_ref_tracker_free+0x10/0x10 [ 1064.850253][T18802] netlink_rcv_skb+0x208/0x470 [ 1064.850270][T18802] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1064.850287][T18802] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1064.850311][T18802] ? netlink_deliver_tap+0x2e/0x1b0 [ 1064.850332][T18802] netlink_unicast+0x82f/0x9e0 [ 1064.850353][T18802] ? __pfx_netlink_unicast+0x10/0x10 [ 1064.850370][T18802] ? netlink_sendmsg+0x642/0xb30 [ 1064.850385][T18802] ? skb_put+0x11b/0x210 [ 1064.850404][T18802] netlink_sendmsg+0x805/0xb30 [ 1064.850426][T18802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1064.850445][T18802] ? __import_iovec+0x5d4/0x7f0 [ 1064.850459][T18802] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1064.850474][T18802] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1064.850489][T18802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1064.850506][T18802] __sock_sendmsg+0x21c/0x270 [ 1064.850523][T18802] ____sys_sendmsg+0x505/0x830 [ 1064.850539][T18802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1064.850567][T18802] ___sys_sendmsg+0x21f/0x2a0 [ 1064.850580][T18802] ? __pfx____sys_sendmsg+0x10/0x10 [ 1064.850616][T18802] ? __fget_files+0x2a/0x420 [ 1064.850630][T18802] ? __fget_files+0x3a0/0x420 [ 1064.850658][T18802] __sys_sendmsg+0x164/0x220 [ 1064.850671][T18802] ? __pfx___sys_sendmsg+0x10/0x10 [ 1064.850689][T18802] ? __pfx_ksys_write+0x10/0x10 [ 1064.850704][T18802] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1064.850717][T18802] ? lockdep_hardirqs_on+0x9c/0x150 [ 1064.850731][T18802] __do_fast_syscall_32+0xb6/0x2b0 [ 1064.850744][T18802] ? lockdep_hardirqs_on+0x9c/0x150 [ 1064.850759][T18802] do_fast_syscall_32+0x34/0x80 [ 1064.850772][T18802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1064.850786][T18802] RIP: 0023:0xf705d539 [ 1064.850799][T18802] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1064.850809][T18802] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1064.850824][T18802] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1064.850833][T18802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1064.850840][T18802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1064.850847][T18802] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1064.850855][T18802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1064.850874][T18802] [ 1065.336429][ T6757] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1065.346529][ T6757] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.378834][ T6757] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1065.387962][ T6757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.410351][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1065.474725][T13396] dw2102: i2c transfer failed. [ 1065.741259][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1065.747039][T13396] dw2102: i2c transfer failed. [ 1065.957798][ T6757] usb 2-1: usb_control_msg returned -32 [ 1065.963703][ T6757] usbtmc 2-1:16.0: can't read capabilities [ 1065.985538][T18808] fuse: Bad value for 'fd' [ 1066.038928][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1066.048089][ T9] dw2102: i2c transfer failed. [ 1066.321271][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1066.333637][ T9] dw2102: i2c transfer failed. [ 1066.588860][T16685] vhci_hcd: vhci_device speed not set [ 1066.598881][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1066.619212][ T9] dw2102: i2c transfer failed. [ 1066.895246][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1066.901855][T13396] dw2102: i2c transfer failed. [ 1067.168930][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1067.174806][T13396] dw2102: i2c transfer failed. [ 1067.394985][T18835] netlink: 1120 bytes leftover after parsing attributes in process `syz.4.3507'. [ 1067.445183][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1067.455741][T13396] dw2102: i2c transfer failed. [ 1067.728781][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1067.735067][ T9] dw2102: i2c transfer failed. [ 1067.980519][T16685] usb 2-1: USB disconnect, device number 30 [ 1067.998943][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1068.004823][ T9] dw2102: i2c transfer failed. [ 1068.209888][T18835] hsr_slave_1 (unregistering): left promiscuous mode [ 1068.258114][T18838] lo: entered allmulticast mode [ 1068.469295][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1068.475172][ T9] dw2102: i2c transfer failed. [ 1068.701851][T18850] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1068.739004][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1068.747304][ T9] dw2102: i2c transfer failed. [ 1068.804332][T18857] input: syz1 as /devices/virtual/input/input95 [ 1069.209013][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1069.214803][ T9] dw2102: i2c transfer failed. [ 1069.517610][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1069.594574][T13396] dw2102: i2c transfer failed. [ 1070.628849][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1070.634672][ T10] dw2102: i2c transfer failed. [ 1070.929148][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1070.938750][ T5825] dw2102: i2c transfer failed. [ 1070.977315][T18886] netlink: 'syz.0.3519': attribute type 21 has an invalid length. [ 1071.018844][T18886] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3519'. [ 1071.172355][T18892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3521'. [ 1071.199336][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1071.205278][ T5825] dw2102: i2c transfer failed. [ 1071.479171][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1071.487172][ T5825] dw2102: i2c transfer failed. [ 1071.562877][T18909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.580592][T18909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.623002][ T5148] Bluetooth: hci2: connection err: -111 [ 1071.631235][ T5148] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1071.702005][T18918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3530'. [ 1071.760472][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1071.766752][ T5825] dw2102: i2c transfer failed. [ 1072.029078][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1072.035325][T13396] dw2102: i2c transfer failed. [ 1072.224856][T18923] policy can only be matched on NF_INET_PRE_ROUTING [ 1072.224883][T18923] unable to load match [ 1072.259222][ T5825] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1072.300663][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1072.306548][ T10] dw2102: i2c transfer failed. [ 1072.392541][T18925] netlink: set zone limit has 8 unknown bytes [ 1072.398916][ T5825] usb 2-1: device descriptor read/64, error -71 [ 1072.568787][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1072.574689][ T10] dw2102: i2c transfer failed. [ 1072.698976][ T5825] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1072.838834][ T5825] usb 2-1: device descriptor read/64, error -71 [ 1072.848935][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1072.854837][T13396] dw2102: i2c transfer failed. [ 1072.951017][ T5825] usb usb2-port1: attempt power cycle [ 1073.128833][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1073.134893][ T10] dw2102: i2c transfer failed. [ 1073.298785][ T5825] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1073.328851][ T5825] usb 2-1: device descriptor read/8, error -71 [ 1073.433511][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1073.440210][ T10] dw2102: i2c transfer failed. [ 1073.568843][ T5825] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1073.584630][T18943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.595511][ T5825] usb 2-1: device descriptor read/8, error -71 [ 1073.596030][T18943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.616229][T18943] netlink: 'syz.4.3538': attribute type 19 has an invalid length. [ 1073.624696][T18943] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3538'. [ 1073.701321][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1073.707386][T13396] dw2102: i2c transfer failed. [ 1073.720253][ T5825] usb usb2-port1: unable to enumerate USB device [ 1073.727547][T18945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3539'. [ 1073.979198][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1073.985168][ T5825] dw2102: i2c transfer failed. [ 1074.249167][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1074.255372][T13396] dw2102: i2c transfer failed. [ 1074.308524][T18955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.317496][T18955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.518787][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1074.524924][T13396] dw2102: i2c transfer failed. [ 1074.799037][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1074.805661][T13396] dw2102: i2c transfer failed. [ 1075.069245][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1075.087160][T13396] dw2102: i2c transfer failed. [ 1075.389018][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1075.418833][ T10] dw2102: i2c transfer failed. [ 1075.681793][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1075.768880][ T5148] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1075.778427][ T5148] Bluetooth: hci2: Injecting HCI hardware error event [ 1075.787217][ T5148] Bluetooth: hci2: hardware error 0x00 [ 1075.873948][ T10] dw2102: i2c transfer failed. [ 1076.248803][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1076.254562][T13396] dw2102: i2c transfer failed. [ 1076.558784][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1076.574866][ T5825] dw2102: i2c transfer failed. [ 1076.678961][ T30] audit: type=1326 audit(1760789564.056:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.4.3552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1076.858813][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1076.874885][T13396] dw2102: i2c transfer failed. [ 1076.928797][ T30] audit: type=1326 audit(1760789564.056:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.4.3552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1077.018864][ T30] audit: type=1326 audit(1760789564.066:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.4.3552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1077.027357][T18993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3552'. [ 1077.117559][ T30] audit: type=1326 audit(1760789564.316:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.4.3552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1077.148844][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1077.154733][ T5825] dw2102: i2c transfer failed. [ 1077.187137][ T30] audit: type=1326 audit(1760789564.316:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.4.3552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1077.250783][ T30] audit: type=1326 audit(1760789564.336:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.4.3552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1077.285076][ T30] audit: type=1326 audit(1760789564.356:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.4.3552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1077.335208][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3554'. [ 1077.351509][ T30] audit: type=1326 audit(1760789564.356:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.4.3552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1077.380143][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3555'. [ 1077.398885][ T30] audit: type=1326 audit(1760789564.356:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.4.3552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1077.428873][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1077.434780][ T5825] dw2102: i2c transfer failed. [ 1077.445730][ T30] audit: type=1326 audit(1760789564.356:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.4.3552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1077.739407][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1077.899447][T19012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3556'. [ 1077.970318][ T5825] dw2102: i2c transfer failed. [ 1077.980926][T19018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.055663][T19018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.228848][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1078.236091][ T10] dw2102: i2c transfer failed. [ 1078.337158][ T6757] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1078.358841][ T5148] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1078.829244][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1078.841611][ T10] dw2102: i2c transfer failed. [ 1078.882834][ T6757] usb 4-1: Using ep0 maxpacket: 32 [ 1078.907068][ T6757] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1078.924816][ T6757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.965467][ T6757] usb 4-1: config 0 descriptor?? [ 1079.148841][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1079.154803][ T10] dw2102: i2c transfer failed. [ 1079.190616][ T6757] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1079.200492][ T6757] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1079.212281][ T6757] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1079.219978][ T6757] usb 4-1: media controller created [ 1079.286987][ T6757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1079.428807][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1079.434935][T13396] dw2102: i2c transfer failed. [ 1079.528409][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3565'. [ 1079.541921][T19032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.624754][T19032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.700138][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1079.707825][T13396] dw2102: i2c transfer failed. [ 1079.789021][T19036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3566'. [ 1079.813346][T19036] bond0: entered promiscuous mode [ 1079.820661][T19036] bond_slave_0: entered promiscuous mode [ 1079.829646][T19036] bond_slave_1: entered promiscuous mode [ 1079.843964][T19036] bond0: left promiscuous mode [ 1079.851063][T19036] bond_slave_0: left promiscuous mode [ 1079.857092][T19036] bond_slave_1: left promiscuous mode [ 1079.968944][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1079.974866][ T10] dw2102: i2c transfer failed. [ 1080.028989][ T6757] stb0899_attach: Driver disabled by Kconfig [ 1080.042709][ T6757] az6027: no front-end attached [ 1080.042709][ T6757] [ 1080.058314][ T6757] az6027: usb out operation failed. (-71) [ 1080.065069][ T6757] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1080.112217][ T6757] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input96 [ 1080.133532][ T6757] dvb-usb: schedule remote query interval to 400 msecs. [ 1080.144063][ T6757] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1080.163137][ T6757] usb 4-1: USB disconnect, device number 21 [ 1080.239922][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1080.250448][T13396] dw2102: i2c transfer failed. [ 1080.349634][ T6757] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1080.519110][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1080.525110][ T9] dw2102: i2c transfer failed. [ 1080.808256][T19052] loop6: detected capacity change from 0 to 63 [ 1080.819852][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1080.825679][T13396] dw2102: i2c transfer failed. [ 1080.830586][T19052] Buffer I/O error on dev loop6, logical block 0, async page read [ 1080.832819][T19052] Buffer I/O error on dev loop6, logical block 0, async page read [ 1080.883820][ T5896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1080.915715][ T5896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1080.942069][T19060] syzkaller0: entered promiscuous mode [ 1080.947724][T19060] syzkaller0: entered allmulticast mode [ 1080.986272][ T5896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1081.017541][ T5896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1081.128837][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1081.161452][T19063] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3574'. [ 1081.171787][T13396] dw2102: i2c transfer failed. [ 1081.183218][ T5896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1081.440103][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1081.465895][T13396] dw2102: i2c transfer failed. [ 1081.703834][T19077] loop8: detected capacity change from 0 to 7 [ 1081.712460][T19077] Dev loop8: unable to read RDB block 7 [ 1081.718141][T19077] loop8: unable to read partition table [ 1081.730115][T19077] loop8: partition table beyond EOD, truncated [ 1081.738438][T19077] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1081.751477][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1081.758395][T13396] dw2102: i2c transfer failed. [ 1081.981518][T19085] netlink: 'syz.3.3582': attribute type 1 has an invalid length. [ 1082.032177][T19085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1082.048958][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1082.060806][T13396] dw2102: i2c transfer failed. [ 1082.319267][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1082.325706][ T9] dw2102: i2c transfer failed. [ 1082.399309][T16685] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1082.629046][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1082.641804][ T9] dw2102: i2c transfer failed. [ 1082.659895][T16685] usb 4-1: Using ep0 maxpacket: 8 [ 1082.681878][T16685] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1082.697466][T16685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.780031][T16685] usb 4-1: Product: syz [ 1082.791937][T16685] usb 4-1: Manufacturer: syz [ 1082.800005][T16685] usb 4-1: SerialNumber: syz [ 1082.807485][T16685] usb 4-1: config 0 descriptor?? [ 1082.941361][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1082.950218][ T10] dw2102: i2c transfer failed. [ 1083.054731][T16685] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1083.267571][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1083.273557][ T10] dw2102: i2c transfer failed. [ 1083.555091][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1083.564847][ T9] dw2102: i2c transfer failed. [ 1083.828810][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1083.838755][ T9] dw2102: i2c transfer failed. [ 1084.118815][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1084.124611][ T10] dw2102: i2c transfer failed. [ 1084.185838][T19114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 1084.226337][T19114] erspan0: entered promiscuous mode [ 1084.232939][T19114] macvtap1: entered promiscuous mode [ 1084.240046][T19114] macvtap1: entered allmulticast mode [ 1084.249964][T19114] erspan0: entered allmulticast mode [ 1084.276818][T19117] erspan0: left allmulticast mode [ 1084.287644][T19117] erspan0: left promiscuous mode [ 1084.389095][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1084.395325][ T10] dw2102: i2c transfer failed. [ 1084.670513][T19090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.678395][T19090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.805604][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1084.814105][ T10] dw2102: i2c transfer failed. [ 1084.847224][T19090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.854605][T19090] bridge0: port 2(bridge_slave_1) entered listening state [ 1084.862378][T19090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.869906][T19090] bridge0: port 1(bridge_slave_0) entered listening state [ 1084.944263][T19090] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1084.988013][T16685] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1085.007061][T19121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3594'. [ 1085.036365][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3594'. [ 1085.051125][T16685] usb 4-1: USB disconnect, device number 22 [ 1085.098805][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1085.104727][ T9] dw2102: i2c transfer failed. [ 1085.219502][T19116] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 1085.370467][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1085.385056][ T9] dw2102: i2c transfer failed. [ 1085.597472][T19129] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3595'. [ 1085.610609][T19131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.661367][T19131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.788798][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1085.807065][ T9] dw2102: i2c transfer failed. [ 1085.998229][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1086.111700][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1086.117581][ T9] dw2102: i2c transfer failed. [ 1086.201091][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.212473][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.223967][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 1086.261636][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.284103][ T10] usb 2-1: config 0 descriptor?? [ 1086.378892][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1086.386685][ T5825] dw2102: i2c transfer failed. [ 1086.518989][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1086.650642][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1086.662268][ T5825] dw2102: i2c transfer failed. [ 1086.702520][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.713336][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1086.734651][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1086.751515][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1086.844228][ T10] itetech 0003:06CB:73F5.0020: collection stack underflow [ 1086.853686][ T10] itetech 0003:06CB:73F5.0020: item 0 0 0 12 parsing failed [ 1086.867846][ T10] itetech 0003:06CB:73F5.0020: probe with driver itetech failed with error -22 [ 1086.882945][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1086.909967][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1086.918523][ T9] usb 4-1: Manufacturer: syz [ 1086.928172][ T9] usb 4-1: config 0 descriptor?? [ 1086.933838][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1086.940079][ T10] dw2102: i2c transfer failed. [ 1087.181863][ T5825] usb 2-1: USB disconnect, device number 35 [ 1087.199077][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1087.204949][T13396] dw2102: i2c transfer failed. [ 1087.622716][ T9] rc_core: IR keymap rc-hauppauge not found [ 1087.628831][ T9] Registered IR keymap rc-empty [ 1087.634971][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1087.663546][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1087.846016][ T5825] dw2102: i2c transfer failed. [ 1087.908861][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1087.996307][ T9] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1088.037650][T19162] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3606'. [ 1088.061387][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input97 [ 1088.099144][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1088.108825][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1088.114805][T13396] dw2102: i2c transfer failed. [ 1088.136027][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1088.136048][ T30] audit: type=1326 audit(1760789575.516:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19161 comm="syz.1.3606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1088.149104][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1088.166189][ T30] audit: type=1326 audit(1760789575.546:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19161 comm="syz.1.3606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1088.188937][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1088.198430][ T30] audit: type=1326 audit(1760789575.566:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19161 comm="syz.1.3606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1088.218857][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1088.228517][ T30] audit: type=1326 audit(1760789575.586:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19161 comm="syz.1.3606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1088.249456][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1088.289118][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1088.301936][ T30] audit: type=1326 audit(1760789575.586:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19161 comm="syz.1.3606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1088.325337][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1088.333613][ T30] audit: type=1326 audit(1760789575.596:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19161 comm="syz.1.3606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1088.356181][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1088.366557][ T30] audit: type=1326 audit(1760789575.596:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19161 comm="syz.1.3606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1088.367986][T19165] loop6: detected capacity change from 0 to 2640 [ 1088.389388][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1088.389641][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1088.389664][ T5825] dw2102: i2c transfer failed. [ 1088.390668][ T30] audit: type=1326 audit(1760789575.596:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19161 comm="syz.1.3606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1088.403215][T19165] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.408888][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1088.447228][T19165] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.459317][ T30] audit: type=1326 audit(1760789575.596:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19161 comm="syz.1.3606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1088.465708][T19165] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.485031][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.493819][ T30] audit: type=1326 audit(1760789575.596:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19161 comm="syz.1.3606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1088.500348][T19165] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.500478][T19165] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.500691][T19165] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.500845][T19165] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.500967][T19165] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.501052][T19165] ldm_validate_partition_table(): Disk read failed. [ 1088.501106][T19165] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.501307][T19165] Buffer I/O error on dev loop6, logical block 0, async page read [ 1088.525015][T13396] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1088.571276][T19165] Dev loop6: unable to read RDB block 0 [ 1088.605456][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1088.614871][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1088.624185][T19165] loop6: unable to read partition table [ 1088.629848][ T9] usb 4-1: USB disconnect, device number 23 [ 1088.642881][T19165] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1088.651850][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1088.657614][ T5825] dw2102: i2c transfer failed. [ 1088.756794][T13396] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1088.783105][T13396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.797522][T13396] usb 2-1: Product: syz [ 1088.803464][T13396] usb 2-1: Manufacturer: syz [ 1088.811392][T13396] usb 2-1: SerialNumber: syz [ 1088.840678][T13396] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1088.880439][T19168] kvm: user requested TSC rate below hardware speed [ 1088.883118][ T5911] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1088.891140][T19168] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3669639965 (58714239440 ns) > initial count (36717352576 ns). Using initial count to start timer. [ 1088.919321][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1088.925356][ T9] dw2102: i2c transfer failed. [ 1089.184944][ T9] usb 2-1: USB disconnect, device number 36 [ 1089.191728][T19176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.192171][T19176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.218466][T13396] dvb-usb: bulk message failed: -22 (1/0) [ 1089.224318][T13396] dw2102: i2c transfer failed. [ 1089.449183][T19181] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3613'. [ 1089.488791][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1089.494675][ T5825] dw2102: i2c transfer failed. [ 1089.758897][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1089.764786][ T5825] dw2102: i2c transfer failed. [ 1089.965466][ T5911] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1089.980660][ T5911] ath9k_htc: Failed to initialize the device [ 1089.998831][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 1090.029042][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1090.044266][ T5825] dw2102: i2c transfer failed. [ 1090.491986][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1090.498065][ T5911] dw2102: i2c transfer failed. [ 1090.759643][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1090.783540][ T9] dw2102: i2c transfer failed. [ 1091.091676][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1091.097597][ T9] dw2102: i2c transfer failed. [ 1091.526399][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1091.542955][ T9] dw2102: i2c transfer failed. [ 1091.808781][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1091.829159][ T5825] dw2102: i2c transfer failed. [ 1092.120595][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1092.126416][ T5825] dw2102: i2c transfer failed. [ 1092.176343][T19211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.187919][T19211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.217848][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'. [ 1092.372832][T19218] FAULT_INJECTION: forcing a failure. [ 1092.372832][T19218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.386337][T19218] CPU: 0 UID: 0 PID: 19218 Comm: syz.3.3623 Not tainted syzkaller #0 PREEMPT(full) [ 1092.386366][T19218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1092.386380][T19218] Call Trace: [ 1092.386389][T19218] [ 1092.386398][T19218] dump_stack_lvl+0x189/0x250 [ 1092.386426][T19218] ? __pfx____ratelimit+0x10/0x10 [ 1092.386457][T19218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1092.386479][T19218] ? __pfx__printk+0x10/0x10 [ 1092.386515][T19218] should_fail_ex+0x414/0x560 [ 1092.386553][T19218] _copy_to_user+0x31/0xb0 [ 1092.386583][T19218] csum_and_copy_to_iter+0x278/0x1c40 [ 1092.386618][T19218] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1092.386660][T19218] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1092.386687][T19218] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 1092.386717][T19218] ? __skb_recv_udp+0x4be/0x980 [ 1092.386749][T19218] ? __skb_recv_udp+0x88b/0x980 [ 1092.386781][T19218] __skb_datagram_iter+0x89f/0x990 [ 1092.386805][T19218] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 1092.386828][T19218] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 1092.386854][T19218] ? csum_partial+0x239/0x2c0 [ 1092.386883][T19218] skb_copy_and_csum_datagram_msg+0x1b8/0x440 [ 1092.386910][T19218] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 1092.386933][T19218] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1092.386963][T19218] udpv6_recvmsg+0x660/0x1590 [ 1092.387006][T19218] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 1092.387034][T19218] ? aa_sk_perm+0x81e/0x950 [ 1092.387055][T19218] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 1092.387074][T19218] inet6_recvmsg+0x1ee/0x6b0 [ 1092.387103][T19218] ? __pfx_aa_sk_perm+0x10/0x10 [ 1092.387127][T19218] ? __pfx_inet6_recvmsg+0x10/0x10 [ 1092.387159][T19218] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1092.387184][T19218] ? security_socket_recvmsg+0x7e/0x2e0 [ 1092.387214][T19218] sock_recvmsg+0x105/0x270 [ 1092.387244][T19218] sock_read_iter+0x231/0x2f0 [ 1092.387270][T19218] ? __pfx_sock_read_iter+0x10/0x10 [ 1092.387306][T19218] ? bpf_lsm_file_permission+0x9/0x20 [ 1092.387333][T19218] ? security_file_permission+0x75/0x290 [ 1092.387371][T19218] vfs_read+0x55a/0xa30 [ 1092.387403][T19218] ? __pfx_vfs_read+0x10/0x10 [ 1092.387436][T19218] ? __fget_files+0x2a/0x420 [ 1092.387472][T19218] ksys_read+0x145/0x250 [ 1092.387493][T19218] ? exc_page_fault+0x82/0x100 [ 1092.387514][T19218] ? __pfx_ksys_read+0x10/0x10 [ 1092.387539][T19218] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1092.387561][T19218] ? lockdep_hardirqs_on+0x9c/0x150 [ 1092.387585][T19218] __do_fast_syscall_32+0xb6/0x2b0 [ 1092.387609][T19218] ? lockdep_hardirqs_on+0x9c/0x150 [ 1092.387634][T19218] do_fast_syscall_32+0x34/0x80 [ 1092.387664][T19218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1092.387687][T19218] RIP: 0023:0xf7f72539 [ 1092.387707][T19218] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1092.387724][T19218] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1092.387747][T19218] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002540 [ 1092.387763][T19218] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 1092.387775][T19218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1092.387788][T19218] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1092.387800][T19218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1092.387834][T19218] [ 1092.723063][ C0] vkms_vblank_simulate: vblank timer overrun [ 1092.736732][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1092.742828][ T5825] dw2102: i2c transfer failed. [ 1093.008793][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1093.014622][ T5825] dw2102: i2c transfer failed. [ 1093.139106][ T6757] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1093.279462][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1093.295593][ T5825] dw2102: i2c transfer failed. [ 1093.303482][ T6757] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1093.324622][ T6757] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.338952][ T6757] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1093.349592][ T6757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1093.362770][ T6757] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1093.376065][ T6757] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1093.385854][ T6757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.395330][ T6757] usb 4-1: Product: syz [ 1093.400198][ T6757] usb 4-1: Manufacturer: syz [ 1093.405445][ T6757] usb 4-1: SerialNumber: syz [ 1093.414216][ T6757] usb 4-1: config 0 descriptor?? [ 1093.420855][T19224] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1093.435193][ C1] usb 4-1: NFC: Urb failure (status -71) [ 1093.449019][ T6757] usb 4-1: NFC: Unable to get FW version [ 1093.459562][ T6757] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 1093.558857][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1093.564782][ T5911] dw2102: i2c transfer failed. [ 1093.576946][T19237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.587053][T19237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.839469][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1093.850375][ T5911] dw2102: i2c transfer failed. [ 1094.119221][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1094.150636][ T5911] dw2102: i2c transfer failed. [ 1094.339668][ T5825] usb 4-1: USB disconnect, device number 24 [ 1094.409067][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1094.415345][ T5911] dw2102: i2c transfer failed. [ 1094.483190][T19250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3634'. [ 1094.678784][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1094.685680][ T5825] dw2102: i2c transfer failed. [ 1094.958932][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1094.968837][ T5825] dw2102: i2c transfer failed. [ 1094.995762][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3639'. [ 1095.035971][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3639'. [ 1095.070326][T19267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.082241][T19267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.249437][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1095.265491][ T5825] dw2102: i2c transfer failed. [ 1095.553825][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1095.591880][ T5911] dw2102: i2c transfer failed. [ 1095.859480][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1095.874513][ T5911] dw2102: i2c transfer failed. [ 1095.889507][ T6757] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 1095.917407][T19277] FAULT_INJECTION: forcing a failure. [ 1095.917407][T19277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.931438][T19277] CPU: 0 UID: 0 PID: 19277 Comm: syz.0.3644 Not tainted syzkaller #0 PREEMPT(full) [ 1095.931467][T19277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1095.931480][T19277] Call Trace: [ 1095.931490][T19277] [ 1095.931499][T19277] dump_stack_lvl+0x189/0x250 [ 1095.931528][T19277] ? __pfx____ratelimit+0x10/0x10 [ 1095.931559][T19277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1095.931581][T19277] ? __pfx__printk+0x10/0x10 [ 1095.931602][T19277] ? __might_fault+0xb0/0x130 [ 1095.931646][T19277] should_fail_ex+0x414/0x560 [ 1095.931684][T19277] _copy_from_user+0x2d/0xb0 [ 1095.931713][T19277] do_sys_poll+0x242/0x1070 [ 1095.931743][T19277] ? __switch_to+0xdc8/0x1690 [ 1095.931777][T19277] ? __pfx_do_sys_poll+0x10/0x10 [ 1095.931804][T19277] ? finish_task_switch+0x18b/0x950 [ 1095.931909][T19277] ? rcu_is_watching+0x15/0xb0 [ 1095.931964][T19277] ? set_compat_user_sigmask+0xc1/0x1b0 [ 1095.931993][T19277] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 1095.932023][T19277] ? __ia32_compat_sys_ppoll_time32+0x176/0x300 [ 1095.932055][T19277] __ia32_compat_sys_ppoll_time32+0x299/0x300 [ 1095.932088][T19277] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 1095.932114][T19277] ? __pfx_ksys_write+0x10/0x10 [ 1095.932140][T19277] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1095.932170][T19277] ? lockdep_hardirqs_on+0x9c/0x150 [ 1095.932194][T19277] __do_fast_syscall_32+0xb6/0x2b0 [ 1095.932225][T19277] do_fast_syscall_32+0x34/0x80 [ 1095.932248][T19277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1095.932273][T19277] RIP: 0023:0xf701d539 [ 1095.932292][T19277] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1095.932311][T19277] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 1095.932335][T19277] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 1095.932351][T19277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1095.932363][T19277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1095.932376][T19277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1095.932388][T19277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1095.932422][T19277] [ 1096.162300][ C0] vkms_vblank_simulate: vblank timer overrun [ 1096.170874][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1096.178801][ T5911] dw2102: i2c transfer failed. [ 1096.263974][ T6757] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1096.290249][ T6757] usb 4-1: config 0 has no interface number 0 [ 1096.347944][ T6757] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1096.384753][T16685] IPVS: starting estimator thread 0... [ 1096.438139][ T6757] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1096.439117][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1096.457171][ T9] dw2102: i2c transfer failed. [ 1096.478415][ T6757] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1096.505304][ T6757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.693290][T19282] IPVS: using max 26 ests per chain, 62400 per kthread [ 1096.738858][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1096.745091][ T9] dw2102: i2c transfer failed. [ 1096.876187][ T6757] usb 4-1: config 0 descriptor?? [ 1096.884732][T19273] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1096.899161][ T6757] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1097.008788][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1097.018164][ T9] dw2102: i2c transfer failed. [ 1097.278824][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1097.284898][ T9] dw2102: i2c transfer failed. [ 1097.298994][T19291] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1097.330187][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 1097.330202][ T30] audit: type=1326 audit(1760789584.716:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19290 comm="syz.1.3649" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad539 code=0x0 [ 1097.548805][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1097.554696][ T5911] dw2102: i2c transfer failed. [ 1097.818851][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1097.825094][ T5911] dw2102: i2c transfer failed. [ 1097.953171][T19297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.962919][T19297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.088861][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1098.095132][ T5911] dw2102: i2c transfer failed. [ 1098.359095][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1098.364939][ T9] dw2102: i2c transfer failed. [ 1098.628918][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1098.641828][T14269] usb 4-1: USB disconnect, device number 25 [ 1098.647774][ T9] dw2102: i2c transfer failed. [ 1098.919034][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1098.926298][ T9] dw2102: i2c transfer failed. [ 1099.195699][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1099.208022][ T9] dw2102: i2c transfer failed. [ 1099.468784][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1099.475027][ T5911] dw2102: i2c transfer failed. [ 1099.795408][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1099.805630][ T9] dw2102: i2c transfer failed. [ 1099.836304][T19331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.845297][T19331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.071049][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1100.076846][ T9] dw2102: i2c transfer failed. [ 1100.168826][T14269] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1100.278897][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1100.286384][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1100.326739][T14269] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 1100.338744][T14269] usb 4-1: config 0 has no interface number 0 [ 1100.339932][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1100.347434][T14269] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1100.358751][ T9] dw2102: i2c transfer failed. [ 1100.372322][T14269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.388772][T14269] usb 4-1: Product: syz [ 1100.393276][T14269] usb 4-1: Manufacturer: syz [ 1100.398006][T14269] usb 4-1: SerialNumber: syz [ 1100.407250][T14269] usb 4-1: config 0 descriptor?? [ 1100.415533][T14269] hub 4-1:0.217: bad descriptor, ignoring hub [ 1100.422038][T14269] hub 4-1:0.217: probe with driver hub failed with error -5 [ 1100.618800][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1100.621582][T14269] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1100.624590][ T5911] dw2102: i2c transfer failed. [ 1100.656988][T19342] netlink: 'syz.4.3666': attribute type 11 has an invalid length. [ 1100.661544][T14269] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1100.689649][T14269] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1100.706844][T14269] usb 4-1: media controller created [ 1100.762097][T14269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1100.836018][T14269] DVB: Unable to find symbol dib7000p_attach() [ 1100.850216][T14269] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1100.861015][T19344] lo: Caught tx_queue_len zero misconfig [ 1100.891862][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1100.898032][ T5911] dw2102: i2c transfer failed. [ 1100.928826][T14269] rc_core: IR keymap rc-dib0700-rc5 not found [ 1100.936090][T14269] Registered IR keymap rc-empty [ 1100.942465][T14269] dvb-usb: could not initialize remote control. [ 1100.951334][T14269] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1100.977329][T14269] usb 4-1: USB disconnect, device number 26 [ 1101.055981][T14269] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1101.159168][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1101.165180][ T9] dw2102: i2c transfer failed. [ 1101.301699][T19358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3670'. [ 1101.382034][T19361] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1101.438997][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1101.474479][ T9] dw2102: i2c transfer failed. [ 1101.778800][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1101.803777][ T9] dw2102: i2c transfer failed. [ 1101.938944][T14269] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1102.141813][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1102.154286][ T5911] dw2102: i2c transfer failed. [ 1102.351492][T14269] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.362220][T14269] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1102.430773][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1102.437886][ T5911] dw2102: i2c transfer failed. [ 1102.450354][T14269] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1102.938179][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1102.959419][T14269] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1102.988991][T14269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.998814][ T9] dw2102: i2c transfer failed. [ 1103.015406][T14269] usb 4-1: Product: syz [ 1103.039402][T14269] usb 4-1: Manufacturer: syz [ 1103.068902][T14269] usb 4-1: SerialNumber: syz [ 1103.093728][T14269] usb 4-1: config 0 descriptor?? [ 1103.121492][T14269] usb 4-1: ucan: probing device on interface #0 [ 1103.128073][T14269] usb 4-1: ucan: invalid EP count (0) [ 1103.154064][T14269] usb 4-1: ucan: probe failed; try to update the device firmware [ 1103.258811][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1103.268771][ T9] dw2102: i2c transfer failed. [ 1103.464459][T19382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.498880][T19382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.548966][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1103.558297][ T9] dw2102: i2c transfer failed. [ 1103.838899][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1103.844860][ T5911] dw2102: i2c transfer failed. [ 1104.110601][T19390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.120669][T19390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.128562][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1104.143240][ T5911] dw2102: i2c transfer failed. [ 1104.408848][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1104.481909][ T5911] dw2102: i2c transfer failed. [ 1104.748797][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1104.756579][ T9] dw2102: i2c transfer failed. [ 1105.018796][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1105.038275][ T5825] dw2102: i2c transfer failed. [ 1105.197240][ T5825] usb 4-1: USB disconnect, device number 27 [ 1105.231078][T19410] Invalid logical block size (32) [ 1105.317030][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1105.330914][ T9] dw2102: i2c transfer failed. [ 1105.389913][T14269] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1105.554894][T14269] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 1105.565723][T14269] usb 2-1: config 0 has no interface number 0 [ 1105.576311][T14269] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1105.585751][T14269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.594208][T14269] usb 2-1: Product: syz [ 1105.598656][T14269] usb 2-1: Manufacturer: syz [ 1105.600631][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1105.603483][T14269] usb 2-1: SerialNumber: syz [ 1105.619237][ T9] dw2102: i2c transfer failed. [ 1105.619428][T14269] usb 2-1: config 0 descriptor?? [ 1105.633131][T14269] hub 2-1:0.217: bad descriptor, ignoring hub [ 1105.640173][T14269] hub 2-1:0.217: probe with driver hub failed with error -5 [ 1105.650133][ T5825] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1105.713185][T19416] FAULT_INJECTION: forcing a failure. [ 1105.713185][T19416] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.729329][T19416] CPU: 0 UID: 0 PID: 19416 Comm: syz.4.3686 Not tainted syzkaller #0 PREEMPT(full) [ 1105.729361][T19416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1105.729373][T19416] Call Trace: [ 1105.729383][T19416] [ 1105.729392][T19416] dump_stack_lvl+0x189/0x250 [ 1105.729420][T19416] ? __pfx____ratelimit+0x10/0x10 [ 1105.729451][T19416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1105.729473][T19416] ? __pfx__printk+0x10/0x10 [ 1105.729513][T19416] should_fail_ex+0x414/0x560 [ 1105.729561][T19416] should_failslab+0xa8/0x100 [ 1105.729591][T19416] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1105.729613][T19416] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1105.729634][T19416] ? sctp_add_bind_addr+0x8c/0x370 [ 1105.729662][T19416] sctp_add_bind_addr+0x8c/0x370 [ 1105.729687][T19416] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1105.729713][T19416] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1105.729734][T19416] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1105.729757][T19416] ? sctp_v6_is_any+0x64/0x80 [ 1105.729781][T19416] ? sctp_copy_one_addr+0x93/0x360 [ 1105.729811][T19416] sctp_bind_addr_copy+0xb3/0x3c0 [ 1105.729832][T19416] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1105.729866][T19416] sctp_connect_new_asoc+0x2e0/0x690 [ 1105.729895][T19416] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1105.729918][T19416] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1105.729955][T19416] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1105.729981][T19416] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1105.730014][T19416] sctp_sendmsg+0x155c/0x2810 [ 1105.730054][T19416] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1105.730082][T19416] ? aa_sk_perm+0x81e/0x950 [ 1105.730109][T19416] ? __pfx_aa_sk_perm+0x10/0x10 [ 1105.730134][T19416] ? sock_rps_record_flow+0x19/0x410 [ 1105.730165][T19416] ? inet_sendmsg+0x2f4/0x370 [ 1105.730198][T19416] __sock_sendmsg+0x19c/0x270 [ 1105.730227][T19416] ____sys_sendmsg+0x52d/0x830 [ 1105.730252][T19416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1105.730304][T19416] ___sys_sendmsg+0x21f/0x2a0 [ 1105.730327][T19416] ? __pfx____sys_sendmsg+0x10/0x10 [ 1105.730350][T19416] ? __lock_acquire+0xab9/0xd20 [ 1105.730412][T19416] ? __fget_files+0x2a/0x420 [ 1105.730434][T19416] ? __fget_files+0x3a0/0x420 [ 1105.730472][T19416] __sys_sendmmsg+0x28e/0x430 [ 1105.730500][T19416] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1105.730517][T19416] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1105.730576][T19416] ? ksys_write+0x22a/0x250 [ 1105.730598][T19416] ? exc_page_fault+0x82/0x100 [ 1105.730619][T19416] ? __pfx_ksys_write+0x10/0x10 [ 1105.730650][T19416] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1105.730683][T19416] __do_fast_syscall_32+0xb6/0x2b0 [ 1105.730707][T19416] ? lockdep_hardirqs_on+0x9c/0x150 [ 1105.730733][T19416] do_fast_syscall_32+0x34/0x80 [ 1105.730755][T19416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1105.730780][T19416] RIP: 0023:0xf707d539 [ 1105.730798][T19416] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1105.730815][T19416] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1105.730837][T19416] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002340 [ 1105.730852][T19416] RDX: 0000000000000001 RSI: 0000000004000044 RDI: 0000000000000000 [ 1105.730865][T19416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1105.730878][T19416] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1105.730890][T19416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1105.730924][T19416] [ 1106.084014][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.094528][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1106.100386][ T9] dw2102: i2c transfer failed. [ 1106.127245][T14269] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1106.141129][T14269] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1106.153170][T14269] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1106.162116][T14269] usb 2-1: media controller created [ 1106.198929][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 1106.206981][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.218926][ T5825] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1106.229324][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.252223][ T5825] usb 4-1: config 0 descriptor?? [ 1106.360471][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1106.366316][ T10] dw2102: i2c transfer failed. [ 1106.445322][ T5825] dvb-usb: found a 'TeVii S662' in warm state. [ 1106.451864][ T5825] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1106.457978][ T5825] dvb-usb: bulk message failed: -22 (2/0) [ 1106.477313][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1106.525362][ T5825] dvbdev: DVB: registering new adapter (TeVii S662) [ 1106.532963][ T5825] usb 4-1: media controller created [ 1106.540480][ T5825] dvb-usb: bulk message failed: -22 (6/0) [ 1106.548127][ T5825] dw2102: i2c transfer failed. [ 1106.561277][ T5825] dvb-usb: bulk message failed: -22 (6/0) [ 1106.575194][ T5825] dw2102: i2c transfer failed. [ 1106.578389][T14269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1106.581247][ T5825] dvb-usb: bulk message failed: -22 (6/0) [ 1106.607330][ T5825] dw2102: i2c transfer failed. [ 1106.612617][ T5825] dvb-usb: bulk message failed: -22 (6/0) [ 1106.618579][ T5825] dw2102: i2c transfer failed. [ 1106.627484][ T5825] dvb-usb: bulk message failed: -22 (6/0) [ 1106.633656][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1106.639703][ T9] dw2102: i2c transfer failed. [ 1106.646381][ T5825] dw2102: i2c transfer failed. [ 1106.651792][ T5825] dvb-usb: bulk message failed: -22 (6/0) [ 1106.659162][ T5825] dw2102: i2c transfer failed. [ 1106.664178][ T5825] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1106.898781][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1106.916187][ T9] dw2102: i2c transfer failed. [ 1107.118136][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1107.192546][ T5825] dvb-usb: bulk message failed: -22 (3/0) [ 1107.257465][ T5825] dw2102: command 0x0e transfer failed. [ 1107.288245][T14269] DVB: Unable to find symbol dib7000p_attach() [ 1107.304069][ T5825] dvb-usb: bulk message failed: -22 (3/0) [ 1107.321219][T14269] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1107.388845][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1107.394772][ T9] dw2102: i2c transfer failed. [ 1107.405358][ T5825] dw2102: command 0x0e transfer failed. [ 1107.548891][T14269] rc_core: IR keymap rc-dib0700-rc5 not found [ 1107.555139][T14269] Registered IR keymap rc-empty [ 1107.647790][T14269] dvb-usb: could not initialize remote control. [ 1107.683093][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1107.689093][ T10] dw2102: i2c transfer failed. [ 1107.706037][T14269] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1107.720138][ T5825] dvb-usb: bulk message failed: -22 (3/0) [ 1107.729315][T14269] usb 2-1: USB disconnect, device number 37 [ 1107.741042][ T5825] dw2102: command 0x0e transfer failed. [ 1107.794616][ T5825] dvb-usb: bulk message failed: -22 (3/0) [ 1107.794644][ T5825] dw2102: command 0x0e transfer failed. [ 1107.794658][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1107.843264][T14269] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1107.918325][ T5825] dw2102: command 0x51 transfer failed. [ 1107.961343][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1107.968141][ T10] dw2102: i2c transfer failed. [ 1107.982788][ T5825] dvb-usb: bulk message failed: -22 (5/0) [ 1107.989108][ T5825] dw2102: i2c probe for address 0x68 failed. [ 1107.995223][ T5825] dvb-usb: bulk message failed: -22 (5/0) [ 1108.001392][ T5825] dw2102: i2c probe for address 0x69 failed. [ 1108.007674][ T5825] dvb-usb: bulk message failed: -22 (5/0) [ 1108.014455][ T5825] dw2102: i2c probe for address 0x6a failed. [ 1108.020755][ T5825] dw2102: probing for demodulator failed. Is the external power switched on? [ 1108.029836][ T5825] dvb-usb: no frontend was attached by 'TeVii S662' [ 1108.189153][T19459] netlink: 'syz.0.3694': attribute type 1 has an invalid length. [ 1108.248874][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1108.456271][ T10] dw2102: i2c transfer failed. [ 1108.488806][ T5825] rc_core: IR keymap rc-tt-1500 not found [ 1108.495884][ T5825] Registered IR keymap rc-empty [ 1108.531801][ T5825] rc rc1: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1 [ 1108.564178][ T5825] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1/input100 [ 1108.606056][ T5825] dvb-usb: schedule remote query interval to 250 msecs. [ 1108.620720][ T5825] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1108.647421][ T5825] dvb-usb: TeVii S662 successfully initialized and connected. [ 1108.661403][ T5825] usb 4-1: USB disconnect, device number 28 [ 1108.741427][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1108.747260][ T10] dw2102: i2c transfer failed. [ 1109.624419][ T5825] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1109.632985][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1109.646461][ T5911] dw2102: i2c transfer failed. [ 1109.750200][T19484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.844156][T19484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.911386][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1109.925488][ T5911] dw2102: i2c transfer failed. [ 1109.960412][ T5825] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1110.158819][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 1110.168248][ T5825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.179314][ T5825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1110.193853][ T5825] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1110.203608][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.215220][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1110.221305][ T5911] dw2102: i2c transfer failed. [ 1110.226587][ T5825] usb 4-1: Product: syz [ 1110.236588][ T5825] usb 4-1: Manufacturer: syz [ 1110.254277][ T5825] usb 4-1: SerialNumber: syz [ 1110.467175][T19488] macvtap1: entered promiscuous mode [ 1110.478875][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1110.484956][T19488] syz_tun: entered promiscuous mode [ 1110.485014][ T5911] dw2102: i2c transfer failed. [ 1110.756026][ T5825] usb 4-1: cannot find UAC_HEADER [ 1110.777608][ T5825] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1110.839176][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1110.857246][ T5825] dw2102: i2c transfer failed. [ 1110.873396][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021b70400: rx timeout, send abort [ 1111.031675][T19461] bond2 (unregistering): Released all slaves [ 1111.138816][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1111.144767][ T5825] dw2102: i2c transfer failed. [ 1111.185606][T19507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3708'. [ 1111.373531][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021b70800: rx timeout, send abort [ 1111.381984][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021b70400: abort rx timeout. Force session deactivation [ 1111.408915][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1111.415069][ T5825] dw2102: i2c transfer failed. [ 1111.681240][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1111.693443][ T5825] dw2102: i2c transfer failed. [ 1111.881915][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021b70800: abort rx timeout. Force session deactivation [ 1111.978836][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1112.007880][ T5825] dw2102: i2c transfer failed. [ 1112.289206][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1112.302171][ T5825] dw2102: i2c transfer failed. [ 1112.316523][T19526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3715'. [ 1112.468806][T14269] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1112.566332][ T5825] usb 4-1: USB disconnect, device number 29 [ 1112.610500][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1112.617199][ T10] dw2102: i2c transfer failed. [ 1112.656315][T14269] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 1112.665966][T14269] usb 2-1: config 0 has no interface number 0 [ 1112.762451][T14269] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1112.792586][T14269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.825770][T14269] usb 2-1: Product: syz [ 1112.838996][T14269] usb 2-1: Manufacturer: syz [ 1112.858884][T14269] usb 2-1: SerialNumber: syz [ 1112.875662][T14269] usb 2-1: config 0 descriptor?? [ 1112.900793][T14269] hub 2-1:0.217: bad descriptor, ignoring hub [ 1112.909625][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1112.915960][ T5825] dw2102: i2c transfer failed. [ 1112.927797][T14269] hub 2-1:0.217: probe with driver hub failed with error -5 [ 1113.108019][T19546] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1113.130698][T14269] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1113.134480][ T13] dummy0: left allmulticast mode [ 1113.142823][T14269] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1113.154565][ T13] dummy0: left promiscuous mode [ 1113.168993][ T13] bridge0: port 3(dummy0) entered disabled state [ 1113.179491][T14269] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1113.187306][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1113.201973][ T5825] dw2102: i2c transfer failed. [ 1113.207274][T14269] usb 2-1: media controller created [ 1113.259311][ T13] bridge_slave_1: left allmulticast mode [ 1113.272827][T14269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1113.275249][ T13] bridge_slave_1: left promiscuous mode [ 1113.308990][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.432837][ T13] bridge_slave_0: left allmulticast mode [ 1113.448441][ T13] bridge_slave_0: left promiscuous mode [ 1113.459539][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.467855][T14269] DVB: Unable to find symbol dib7000p_attach() [ 1113.490032][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1113.502266][ T10] dw2102: i2c transfer failed. [ 1113.519591][T14269] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1113.548403][ T13] tipc: Resetting bearer [ 1113.681960][T14269] rc_core: IR keymap rc-dib0700-rc5 not found [ 1113.689212][T14269] Registered IR keymap rc-empty [ 1113.699277][T14269] dvb-usb: could not initialize remote control. [ 1113.713076][T14269] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1113.742393][ T13] tipc: Disabling bearer [ 1113.770995][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1113.771032][T14269] usb 2-1: USB disconnect, device number 38 [ 1113.776893][ T10] dw2102: i2c transfer failed. [ 1113.999001][T14269] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1114.028893][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1114.049884][ T10] dw2102: i2c transfer failed. [ 1114.354834][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1114.384625][ T10] dw2102: i2c transfer failed. [ 1114.463189][T16685] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1114.632434][T16685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.658825][T14269] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1114.679613][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1114.680838][T16685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.685727][ T10] dw2102: i2c transfer failed. [ 1114.725997][T16685] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1114.750323][T16685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.786581][T16685] usb 4-1: config 0 descriptor?? [ 1114.868923][T14269] usb 2-1: Using ep0 maxpacket: 16 [ 1114.899922][T14269] usb 2-1: config 222 has an invalid interface number: 31 but max is 0 [ 1114.908283][T14269] usb 2-1: config 222 has no interface number 0 [ 1114.914780][T14269] usb 2-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 1114.926576][T14269] usb 2-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 1114.938855][T14269] usb 2-1: config 222 interface 31 has no altsetting 0 [ 1114.948527][T14269] usb 2-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 1114.951090][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1114.957976][T14269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.967546][ T10] dw2102: i2c transfer failed. [ 1114.973040][T14269] usb 2-1: Product: syz [ 1114.973067][T14269] usb 2-1: Manufacturer: syz [ 1114.973084][T14269] usb 2-1: SerialNumber: syz [ 1114.989712][T19585] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1115.186238][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.198121][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.211582][T16685] hid-led 0003:0FC5:B080.0021: collection stack underflow [ 1115.212392][ T13] bond0 (unregistering): Released all slaves [ 1115.226720][T16685] hid-led 0003:0FC5:B080.0021: item 0 1 0 12 parsing failed [ 1115.237401][T16685] hid-led 0003:0FC5:B080.0021: probe with driver hid-led failed with error -22 [ 1115.258794][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1115.259592][ T13] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1115.264830][ T10] dw2102: i2c transfer failed. [ 1115.282188][T19587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.295166][ T13] bond1 (unregistering): Released all slaves [ 1115.304181][T19587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.333239][ T13] bond2 (unregistering): Released all slaves [ 1115.373133][T19557] 8ÿ: entered promiscuous mode [ 1115.449394][T14269] ldusb 2-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 1115.464355][T14269] usb 2-1: USB disconnect, device number 39 [ 1115.478039][T14269] ldusb 2-1:222.31: LD USB Device #0 now disconnected [ 1115.553381][ T13] tipc: Left network mode [ 1115.561212][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1115.578360][ T5911] dw2102: i2c transfer failed. [ 1115.638950][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.646214][ C0] bridge0: topology change detected, propagating [ 1115.653152][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.660607][ C0] bridge0: topology change detected, propagating [ 1115.834149][T19592] netlink: 'syz.4.3732': attribute type 10 has an invalid length. [ 1115.847295][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1115.853652][ T5825] dw2102: i2c transfer failed. [ 1115.944047][T19592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1116.011121][T19595] ÿ: entered promiscuous mode [ 1116.016616][T19595] bond_slave_1: entered promiscuous mode [ 1116.024473][T19595] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1116.036655][T19595] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 1116.128790][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1116.134743][ T5825] dw2102: i2c transfer failed. [ 1116.190494][T19602] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1116.348934][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.359975][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.428797][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1116.477782][ T5911] dw2102: i2c transfer failed. [ 1116.748787][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1116.754589][ T5911] dw2102: i2c transfer failed. [ 1117.302212][ T5825] usb 4-1: USB disconnect, device number 30 [ 1117.363976][T19606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.388605][T19606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.427737][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1117.437446][ T10] dw2102: i2c transfer failed. [ 1117.559709][ T13] hsr_slave_0: left promiscuous mode [ 1117.584903][ T13] hsr_slave_1: left promiscuous mode [ 1117.600515][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.631495][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.652589][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.662446][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.698995][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1117.716206][ T13] veth1_macvtap: left promiscuous mode [ 1117.725198][ T10] dw2102: i2c transfer failed. [ 1117.739153][ T13] veth0_macvtap: left promiscuous mode [ 1117.746276][ T13] veth1_vlan: left promiscuous mode [ 1117.758325][ T13] veth0_vlan: left promiscuous mode [ 1117.788801][T16685] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1117.948762][T16685] usb 2-1: Using ep0 maxpacket: 8 [ 1117.965235][T16685] usb 2-1: config 0 has an invalid interface number: 205 but max is 1 [ 1118.000347][T16685] usb 2-1: config 0 has no interface number 1 [ 1118.002368][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1118.024071][ T10] dw2102: i2c transfer failed. [ 1118.026958][T16685] usb 2-1: config 0 interface 205 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1118.062295][T16685] usb 2-1: New USB device found, idVendor=413c, idProduct=8180, bcdDevice=25.25 [ 1118.072485][T16685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.081001][T16685] usb 2-1: Product: syz [ 1118.105255][T16685] usb 2-1: Manufacturer: syz [ 1118.113444][T16685] usb 2-1: SerialNumber: syz [ 1118.138134][T16685] usb 2-1: config 0 descriptor?? [ 1118.153124][T16685] option 2-1:0.205: GSM modem (1-port) converter detected [ 1118.246840][T19634] FAULT_INJECTION: forcing a failure. [ 1118.246840][T19634] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.263179][T19634] CPU: 1 UID: 0 PID: 19634 Comm: syz.4.3743 Not tainted syzkaller #0 PREEMPT(full) [ 1118.263209][T19634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1118.263222][T19634] Call Trace: [ 1118.263231][T19634] [ 1118.263240][T19634] dump_stack_lvl+0x189/0x250 [ 1118.263269][T19634] ? __pfx____ratelimit+0x10/0x10 [ 1118.263301][T19634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1118.263322][T19634] ? __pfx__printk+0x10/0x10 [ 1118.263351][T19634] ? __pfx___might_resched+0x10/0x10 [ 1118.263386][T19634] should_fail_ex+0x414/0x560 [ 1118.263423][T19634] should_failslab+0xa8/0x100 [ 1118.263451][T19634] __kmalloc_noprof+0xcb/0x7f0 [ 1118.263471][T19634] ? kfree+0x4d/0x6d0 [ 1118.263487][T19634] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1118.263517][T19634] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1118.263544][T19634] ? tomoyo_domain+0xd9/0x130 [ 1118.263574][T19634] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1118.263605][T19634] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1118.263639][T19634] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1118.263691][T19634] ? __lock_acquire+0xab9/0xd20 [ 1118.263741][T19634] ? __fget_files+0x2a/0x420 [ 1118.263773][T19634] ? __fget_files+0x3a0/0x420 [ 1118.263792][T19634] ? __fget_files+0x2a/0x420 [ 1118.263815][T19634] security_file_ioctl_compat+0xcb/0x2d0 [ 1118.263841][T19634] __ia32_compat_sys_ioctl+0x128/0x840 [ 1118.263860][T19634] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1118.263877][T19634] ? __fget_files+0x3a0/0x420 [ 1118.263902][T19634] ? fput+0xa0/0xd0 [ 1118.263926][T19634] ? ksys_write+0x22a/0x250 [ 1118.263941][T19634] ? exc_page_fault+0x82/0x100 [ 1118.263958][T19634] ? __pfx_ksys_write+0x10/0x10 [ 1118.263978][T19634] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1118.263996][T19634] ? lockdep_hardirqs_on+0x9c/0x150 [ 1118.264015][T19634] __do_fast_syscall_32+0xb6/0x2b0 [ 1118.264033][T19634] ? lockdep_hardirqs_on+0x9c/0x150 [ 1118.264053][T19634] do_fast_syscall_32+0x34/0x80 [ 1118.264070][T19634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1118.264090][T19634] RIP: 0023:0xf707d539 [ 1118.264106][T19634] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1118.264120][T19634] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1118.264139][T19634] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000894b [ 1118.264151][T19634] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1118.264162][T19634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1118.264171][T19634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1118.264181][T19634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1118.264207][T19634] [ 1118.264220][T19634] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1118.299542][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1118.364014][T16685] usb 2-1: USB disconnect, device number 40 [ 1118.368837][ T5825] dw2102: i2c transfer failed. [ 1118.380801][T16685] option 2-1:0.205: device disconnected [ 1118.457566][T19636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.585486][T19636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.649072][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1118.654922][ T5825] dw2102: i2c transfer failed. [ 1118.908916][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1118.917424][ T5911] dw2102: i2c transfer failed. [ 1119.200265][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1119.365080][ T10] dw2102: i2c transfer failed. [ 1119.487083][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1119.562078][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3748'. [ 1119.604464][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1119.629622][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1119.635718][ T5911] dw2102: i2c transfer failed. [ 1119.962899][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1120.017182][ T5911] dw2102: i2c transfer failed. [ 1120.323980][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1120.329908][ T5825] dw2102: i2c transfer failed. [ 1120.474682][ T30] audit: type=1326 audit(1760789607.816:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19658 comm="syz.4.3749" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 1120.608885][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1120.670926][ T5825] dw2102: i2c transfer failed. [ 1120.948804][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1120.954764][ T5825] dw2102: i2c transfer failed. [ 1121.219085][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1121.227676][ T5825] dw2102: i2c transfer failed. [ 1121.489709][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1121.506046][ T5911] dw2102: i2c transfer failed. [ 1121.788942][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1121.804590][ T5911] dw2102: i2c transfer failed. [ 1121.810450][T19682] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3754'. [ 1122.089203][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1122.102949][ T5911] dw2102: i2c transfer failed. [ 1122.427282][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1122.468761][ T5825] dw2102: i2c transfer failed. [ 1122.545109][T19700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.562076][T19700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.571762][T19682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.617686][T19682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.692671][T19682] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1122.769092][T19682] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1122.788855][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1122.798736][ T5825] dw2102: i2c transfer failed. [ 1122.800294][T19682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.811144][T19682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.831715][T19682] bond0 (unregistering): Released all slaves [ 1123.089233][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1123.294120][ T5911] dw2102: i2c transfer failed. [ 1123.306947][T19706] fuse: Unknown parameter '‰' [ 1123.559708][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1123.567199][ T5911] dw2102: i2c transfer failed. [ 1123.838790][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1123.844612][ T5911] dw2102: i2c transfer failed. [ 1123.877300][T19712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.953412][T19712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.271606][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1124.277591][ T5911] dw2102: i2c transfer failed. [ 1124.672638][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1124.678605][ T10] dw2102: i2c transfer failed. [ 1125.071906][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1125.078029][ T5911] dw2102: i2c transfer failed. [ 1125.358764][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1125.367279][ T10] dw2102: i2c transfer failed. [ 1125.640401][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1125.646672][ T5911] dw2102: i2c transfer failed. [ 1125.658781][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1125.809195][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1125.824894][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.879496][ T10] usb 4-1: config 0 has no interfaces? [ 1125.908804][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1125.914589][ T5911] dw2102: i2c transfer failed. [ 1125.928335][ T10] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1125.937902][ T10] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1125.991131][ T10] usb 4-1: Product: syz [ 1125.995469][ T10] usb 4-1: Manufacturer: syz [ 1126.025661][ T10] usb 4-1: SerialNumber: syz [ 1126.033771][ T10] usb 4-1: config 0 descriptor?? [ 1126.228805][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1126.237789][ T10] dw2102: i2c transfer failed. [ 1126.498825][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1126.504914][ T10] dw2102: i2c transfer failed. [ 1126.768966][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1126.774859][ T10] dw2102: i2c transfer failed. [ 1127.038912][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1127.050487][ T10] dw2102: i2c transfer failed. [ 1127.258744][T19753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.279831][T19753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.309416][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1127.316389][ T10] dw2102: i2c transfer failed. [ 1127.578859][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1127.584856][ T10] dw2102: i2c transfer failed. [ 1127.848828][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1127.854824][ T10] dw2102: i2c transfer failed. [ 1128.119048][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1128.125476][ T10] dw2102: i2c transfer failed. [ 1128.315135][ T10] usb 4-1: USB disconnect, device number 32 [ 1128.388899][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1128.395170][ T5825] dw2102: i2c transfer failed. [ 1128.596149][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3779'. [ 1128.611687][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3779'. [ 1128.660549][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1128.666567][ T5911] dw2102: i2c transfer failed. [ 1128.799212][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1128.943899][T19778] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1128.958943][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 1128.972303][ T5911] dw2102: i2c transfer failed. [ 1128.984241][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1129.177273][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1129.210401][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.228792][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1129.234824][ T5825] dw2102: i2c transfer failed. [ 1129.265611][ T10] usb 4-1: config 0 descriptor?? [ 1129.504977][ T10] ath6kl: Failed to submit usb control message: -71 [ 1129.512022][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 1129.519403][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1129.525338][ T5825] dw2102: i2c transfer failed. [ 1129.539093][ T10] ath6kl: Unable to send get target info: -71 [ 1129.556752][ T10] ath6kl: Failed to init ath6kl core: -71 [ 1129.587206][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1129.618124][ T10] usb 4-1: USB disconnect, device number 33 [ 1129.797386][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1129.808436][ T9] dw2102: i2c transfer failed. [ 1130.078886][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1130.085012][ T10] dw2102: i2c transfer failed. [ 1130.348807][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1130.356363][ T10] dw2102: i2c transfer failed. [ 1130.415107][T19792] tipc: Started in network mode [ 1130.437800][T19792] tipc: Node identity 7f000001, cluster identity 4711 [ 1130.453037][T19792] tipc: Enabled bearer , priority 10 [ 1130.619054][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1130.627447][ T10] dw2102: i2c transfer failed. [ 1130.669514][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1130.829079][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1130.837146][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.850969][ T9] usb 2-1: config 0 has no interfaces? [ 1130.861275][ T9] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1130.873164][ T9] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1130.888785][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1130.896661][ T10] dw2102: i2c transfer failed. [ 1130.904864][ T9] usb 2-1: Product: syz [ 1130.914964][ T9] usb 2-1: Manufacturer: syz [ 1130.929130][ T9] usb 2-1: SerialNumber: syz [ 1130.950471][ T9] usb 2-1: config 0 descriptor?? [ 1131.168912][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1131.194282][ T9] dw2102: i2c transfer failed. [ 1131.453786][T14269] tipc: Node number set to 2130706433 [ 1131.469184][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1131.477034][ T9] dw2102: i2c transfer failed. [ 1131.749734][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1131.755649][ T9] dw2102: i2c transfer failed. [ 1132.020072][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1132.027023][ T9] dw2102: i2c transfer failed. [ 1132.298766][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1132.316788][ T9] dw2102: i2c transfer failed. [ 1132.488917][ T6757] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1132.598833][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1132.617762][ T9] dw2102: i2c transfer failed. [ 1132.668842][ T6757] usb 4-1: Using ep0 maxpacket: 32 [ 1132.718927][ T6757] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.748871][ T6757] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1132.758152][ T6757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.898774][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1132.913997][ T10] dw2102: i2c transfer failed. [ 1132.923393][ T6757] usb 4-1: config 0 descriptor?? [ 1132.948229][ T6757] dvb-usb: found a 'TeVii S662' in warm state. [ 1132.966379][ T6757] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1132.991592][ T6757] dvb-usb: bulk message failed: -22 (2/0) [ 1133.199199][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1133.205083][ T10] dw2102: i2c transfer failed. [ 1133.208305][ T6757] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1133.516417][ T6757] dvbdev: DVB: registering new adapter (TeVii S662) [ 1133.528977][ T6757] usb 4-1: media controller created [ 1133.534468][ T6757] dvb-usb: bulk message failed: -22 (6/0) [ 1133.540662][ T6757] dw2102: i2c transfer failed. [ 1133.545481][ T5825] usb 2-1: USB disconnect, device number 41 [ 1133.545728][ T6757] dvb-usb: bulk message failed: -22 (6/0) [ 1133.567761][ T6757] dw2102: i2c transfer failed. [ 1133.584079][ T6757] dvb-usb: bulk message failed: -22 (6/0) [ 1133.595309][ T6757] dw2102: i2c transfer failed. [ 1133.608489][ T6757] dvb-usb: bulk message failed: -22 (6/0) [ 1133.759314][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1133.798867][ T9] dw2102: i2c transfer failed. [ 1133.818737][ T6757] dw2102: i2c transfer failed. [ 1133.843970][ T6757] dvb-usb: bulk message failed: -22 (6/0) [ 1133.870026][ T6757] dw2102: i2c transfer failed. [ 1134.036646][ T6757] dvb-usb: bulk message failed: -22 (6/0) [ 1134.046752][ T6757] dw2102: i2c transfer failed. [ 1134.068962][ T6757] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1134.109429][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1134.115749][ T5825] dw2102: i2c transfer failed. [ 1134.153995][ T6757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1134.263847][T19844] fuse: Unknown parameter '‰' [ 1134.435172][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1134.447548][ T5825] dw2102: i2c transfer failed. [ 1134.647450][ T30] audit: type=1326 audit(1760789622.026:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.0.3802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1134.669733][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.728948][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1134.754083][ T10] dw2102: i2c transfer failed. [ 1134.862914][ T6757] dvb-usb: bulk message failed: -22 (3/0) [ 1134.868927][ T6757] dw2102: command 0x0e transfer failed. [ 1134.874608][ T6757] dvb-usb: bulk message failed: -22 (3/0) [ 1134.890310][ T6757] dw2102: command 0x0e transfer failed. [ 1135.035766][ T30] audit: type=1326 audit(1760789622.066:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.0.3802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1135.058498][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.080305][ T30] audit: type=1326 audit(1760789622.246:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.0.3802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=317 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1135.103307][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.239314][ T6757] dvb-usb: bulk message failed: -22 (3/0) [ 1135.275781][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1135.413593][ T9] dw2102: i2c transfer failed. [ 1135.422031][ T6757] dw2102: command 0x0e transfer failed. [ 1135.441247][ T6757] dvb-usb: bulk message failed: -22 (3/0) [ 1135.455695][ T6757] dw2102: command 0x0e transfer failed. [ 1135.473164][ T6757] dvb-usb: bulk message failed: -22 (1/0) [ 1135.507222][ T6757] dw2102: command 0x51 transfer failed. [ 1135.508771][ T30] audit: type=1326 audit(1760789622.246:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.0.3802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1135.519647][ T6757] dvb-usb: bulk message failed: -22 (5/0) [ 1135.588270][ T6757] dw2102: i2c probe for address 0x68 failed. [ 1135.607627][ T6757] dvb-usb: bulk message failed: -22 (5/0) [ 1135.625600][ T6757] dw2102: i2c probe for address 0x69 failed. [ 1135.639256][ T6757] dvb-usb: bulk message failed: -22 (5/0) [ 1135.646702][ T6757] dw2102: i2c probe for address 0x6a failed. [ 1135.680988][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1135.681700][ T6757] dw2102: probing for demodulator failed. Is the external power switched on? [ 1135.686828][ T9] dw2102: i2c transfer failed. [ 1135.707224][ T30] audit: type=1326 audit(1760789622.246:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.0.3802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1135.717198][ T6757] dvb-usb: no frontend was attached by 'TeVii S662' [ 1135.745134][ T30] audit: type=1326 audit(1760789622.246:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.0.3802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1135.783643][ T30] audit: type=1326 audit(1760789622.246:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.0.3802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1135.806974][ T30] audit: type=1326 audit(1760789622.246:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.0.3802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1135.911959][ T30] audit: type=1326 audit(1760789622.376:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.0.3802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1135.939166][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1135.958269][ T9] dw2102: i2c transfer failed. [ 1135.998757][ T30] audit: type=1326 audit(1760789622.376:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.0.3802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1136.049112][ T6757] rc_core: IR keymap rc-tt-1500 not found [ 1136.061531][T19871] veth0_to_bridge: entered allmulticast mode [ 1136.067830][ T6757] Registered IR keymap rc-empty [ 1136.125912][ T6757] rc rc1: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1 [ 1136.127693][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.150168][ T6757] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1/input102 [ 1136.237612][ T6757] dvb-usb: schedule remote query interval to 250 msecs. [ 1136.242313][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1136.256723][ T6757] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1136.262931][ T5825] dw2102: i2c transfer failed. [ 1136.270861][ T6757] dvb-usb: TeVii S662 successfully initialized and connected. [ 1136.327788][ T6757] usb 4-1: USB disconnect, device number 34 [ 1136.528846][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1136.536846][ T9] dw2102: i2c transfer failed. [ 1136.542951][ T6757] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1136.552176][ T6760] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1136.728835][ T6760] usb 2-1: Using ep0 maxpacket: 8 [ 1136.745373][ T6760] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1136.771204][ T6760] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1136.785395][ T6760] usb 2-1: string descriptor 0 read error: -22 [ 1136.795530][ T6760] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1136.808966][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1136.815012][ T9] dw2102: i2c transfer failed. [ 1136.823593][ T6760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.119386][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1137.125526][ T9] dw2102: i2c transfer failed. [ 1137.204572][ T6760] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1137.218808][ T6757] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1137.247483][ T6760] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1137.279237][ T6760] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1137.286954][ T6760] usb 2-1: media controller created [ 1137.334318][ T6760] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1137.415128][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1137.431449][ T6757] usb 4-1: Using ep0 maxpacket: 16 [ 1137.448393][ T6757] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1137.460517][ T9] dw2102: i2c transfer failed. [ 1137.793214][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1137.881737][ T10] dw2102: i2c transfer failed. [ 1138.119761][ T6757] usb 4-1: config 0 has no interface number 0 [ 1138.360101][ T6757] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1138.451169][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1138.463610][ T6757] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1138.467668][ T10] dw2102: i2c transfer failed. [ 1138.474680][ T6760] zl10353_read_register: readreg error (reg=127, ret==0) [ 1138.538898][ T6757] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1138.665362][ T6757] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1138.689454][ T6757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.735169][ T6757] usb 4-1: Product: syz [ 1138.748873][ T6757] usb 4-1: Manufacturer: syz [ 1138.768815][ T6757] usb 4-1: SerialNumber: syz [ 1138.776975][ T6757] usb 4-1: config 0 descriptor?? [ 1138.784398][T19883] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1138.791993][T19883] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1138.800992][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1138.892589][ T9] dw2102: i2c transfer failed. [ 1139.009998][T19883] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1139.031389][T19883] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1139.158794][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1139.164759][ T10] dw2102: i2c transfer failed. [ 1139.305190][ T6757] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1139.342850][ T6757] usb 4-1: USB disconnect, device number 35 [ 1139.370095][T19911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.381196][T19911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.428796][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1139.435832][ T10] dw2102: i2c transfer failed. [ 1139.708910][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1139.714908][ T10] dw2102: i2c transfer failed. [ 1139.828806][ T6757] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1139.978982][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1139.981609][ T6757] usb 4-1: config index 0 descriptor too short (expected 897, got 27) [ 1139.984830][ T10] dw2102: i2c transfer failed. [ 1140.000240][ T6757] usb 4-1: config 2 has an invalid interface number: 1 but max is -1 [ 1140.011566][ T6757] usb 4-1: config 2 has an invalid interface number: 1 but max is -1 [ 1140.020118][ T6757] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 1140.020150][ T6757] usb 4-1: config 2 has no interface number 0 [ 1140.023480][ T6757] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 1140.045911][ T6757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.045943][ T6757] usb 4-1: Product: syz [ 1140.045960][ T6757] usb 4-1: Manufacturer: syz [ 1140.045978][ T6757] usb 4-1: SerialNumber: syz [ 1140.103207][T16685] usb 2-1: USB disconnect, device number 42 [ 1140.265777][ T6757] cdc_ncm 4-1:2.1: CDC Union missing and no IAD found [ 1140.274322][ T6757] cdc_ncm 4-1:2.1: bind() failure [ 1140.280940][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1140.286966][ T10] dw2102: i2c transfer failed. [ 1140.289336][ T6757] usb 4-1: no audio or video endpoints found [ 1140.302958][ T6757] usb 4-1: USB disconnect, device number 36 [ 1140.578824][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1140.585105][ T10] dw2102: i2c transfer failed. [ 1140.852682][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1140.858479][ T10] dw2102: i2c transfer failed. [ 1140.909557][T19928] kvm: kvm [19927]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1141.021714][T19934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.033065][T19934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.046974][T19935] fuse: Unknown parameter '‰' [ 1141.201806][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1141.229868][ T10] dw2102: i2c transfer failed. [ 1141.548788][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1141.554997][ T10] dw2102: i2c transfer failed. [ 1141.818768][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1141.847030][ T10] dw2102: i2c transfer failed. [ 1142.235761][T19947] fuse: Bad value for 'fd' [ 1142.425438][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1142.446014][ T5825] dw2102: i2c transfer failed. [ 1142.738838][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1142.747975][ T10] dw2102: i2c transfer failed. [ 1143.040948][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1143.067639][ T5825] dw2102: i2c transfer failed. [ 1143.221411][T19957] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3832'. [ 1143.358845][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1143.368218][ T10] dw2102: i2c transfer failed. [ 1143.450181][T19965] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1143.678834][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1143.864754][ T5825] dw2102: i2c transfer failed. [ 1144.094054][T19972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3825'. [ 1144.128927][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1144.139957][ T5825] dw2102: i2c transfer failed. [ 1144.409354][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1144.429163][ T9] dw2102: i2c transfer failed. [ 1144.700100][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1144.716924][ T5825] dw2102: i2c transfer failed. [ 1144.978789][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1144.984701][ T9] dw2102: i2c transfer failed. [ 1145.018778][ T6757] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1145.190523][ T6757] usb 2-1: config index 0 descriptor too short (expected 897, got 27) [ 1145.199871][ T6757] usb 2-1: config 2 has an invalid interface number: 1 but max is -1 [ 1145.211403][ T6757] usb 2-1: config 2 has an invalid interface number: 1 but max is -1 [ 1145.221530][ T6757] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 1145.232404][ T6757] usb 2-1: config 2 has no interface number 0 [ 1145.248799][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1145.249683][ T6757] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 1145.254918][ T9] dw2102: i2c transfer failed. [ 1145.264584][ T6757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.278410][ T6757] usb 2-1: Product: syz [ 1145.283133][ T6757] usb 2-1: Manufacturer: syz [ 1145.287962][ T6757] usb 2-1: SerialNumber: syz [ 1145.524088][ T6757] cdc_ncm 2-1:2.1: CDC Union missing and no IAD found [ 1145.528827][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1145.543347][ T6757] cdc_ncm 2-1:2.1: bind() failure [ 1145.554445][ T6757] usb 2-1: no audio or video endpoints found [ 1145.562071][ T5825] dw2102: i2c transfer failed. [ 1145.564532][ T6757] usb 2-1: USB disconnect, device number 43 [ 1145.927855][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1145.947047][ T9] dw2102: i2c transfer failed. [ 1146.546592][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1146.557737][ T9] dw2102: i2c transfer failed. [ 1146.847000][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1146.876366][ T9] dw2102: i2c transfer failed. [ 1147.148437][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1147.166724][ T5825] dw2102: i2c transfer failed. [ 1147.392147][T20019] fuse: Unknown parameter '‰' [ 1147.616902][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1147.626150][ T5825] dw2102: i2c transfer failed. [ 1147.756193][ T31] INFO: task kworker/0:4:5887 blocked for more than 143 seconds. [ 1147.947259][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1148.089421][ T9] dw2102: i2c transfer failed. [ 1148.138048][ T31] Not tainted syzkaller #0 [ 1148.153612][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1148.179202][ T31] task:kworker/0:4 state:D stack:15320 pid:5887 tgid:5887 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1148.194030][ T31] Workqueue: usb_hub_wq hub_event [ 1148.202990][ T31] Call Trace: [ 1148.207697][ T31] [ 1148.348968][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1148.355001][ T9] dw2102: i2c transfer failed. [ 1148.370813][ T31] __schedule+0x1798/0x4cc0 [ 1148.379458][ T31] ? __pfx___schedule+0x10/0x10 [ 1148.388618][ T31] ? schedule+0x91/0x360 [ 1148.398747][ T31] schedule+0x165/0x360 [ 1148.416940][ T31] schedule_timeout+0x9a/0x270 [ 1148.443280][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1148.700669][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1148.718162][ T5825] dw2102: i2c transfer failed. [ 1148.742876][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1148.750623][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1148.756549][ T31] ? wait_for_completion+0x267/0x5d0 [ 1148.778815][ T31] wait_for_completion+0x2bf/0x5d0 [ 1148.798810][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1148.806922][ T31] i2c_del_adapter+0x581/0x6e0 [ 1148.815846][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1148.825406][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1148.857474][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 1148.864241][ T31] ? kfree+0x19a/0x6d0 [ 1148.869630][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 1148.875151][ T31] dvb_usb_device_exit+0x1be/0x350 [ 1148.881503][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1148.888061][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1148.894316][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1148.902134][ T31] ? usb_disable_interface+0x31d/0x350 [ 1148.908209][ T31] usb_unbind_interface+0x26e/0x910 [ 1148.936038][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1148.952502][ T31] device_release_driver_internal+0x4d9/0x800 [ 1148.964604][ T31] bus_remove_device+0x34d/0x410 [ 1148.978870][ T31] device_del+0x511/0x8e0 [ 1148.988730][ T31] ? __pm_runtime_barrier+0x212/0x460 [ 1148.998838][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 1149.005785][ T5825] dw2102: i2c transfer failed. [ 1149.019779][ T31] ? __pfx_device_del+0x10/0x10 [ 1149.031904][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1149.042850][ T31] usb_disable_device+0x3e9/0x8a0 [ 1149.057142][ T31] usb_disconnect+0x330/0x950 [ 1149.070301][ T31] hub_event+0x1cf5/0x4a20 [ 1149.080820][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1149.092922][ T31] ? register_lock_class+0x51/0x320 [ 1149.107169][ T31] ? __pfx_hub_event+0x10/0x10 [ 1149.117698][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1149.195052][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1149.226866][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1149.264397][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1149.270395][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1149.276361][ T9] dw2102: i2c transfer failed. [ 1149.303896][ T31] process_scheduled_works+0xae1/0x17b0 [ 1149.327905][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1149.343329][ T31] worker_thread+0x8a0/0xda0 [ 1149.358395][ T31] kthread+0x711/0x8a0 [ 1149.372406][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1149.379400][ T31] ? __pfx_kthread+0x10/0x10 [ 1149.384269][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1149.543195][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1149.550409][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1149.566793][ T31] ? __pfx_kthread+0x10/0x10 [ 1149.574536][ T9] dw2102: i2c transfer failed. [ 1149.579117][ T31] ret_from_fork+0x4bc/0x870 [ 1149.589574][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1149.594837][ T31] ? __switch_to_asm+0x39/0x70 [ 1149.599963][ T31] ? __switch_to_asm+0x33/0x70 [ 1149.604844][ T31] ? __pfx_kthread+0x10/0x10 [ 1149.609746][ T31] ret_from_fork_asm+0x1a/0x30 [ 1149.614632][ T31] [ 1149.617867][ T31] [ 1149.617867][ T31] Showing all locks held in the system: [ 1149.627065][ T31] 4 locks held by kworker/0:0/9: [ 1149.633335][ T31] 1 lock held by khungtaskd/31: [ 1149.643638][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1149.683429][ T31] 1 lock held by khugepaged/38: [ 1149.695238][ T31] 2 locks held by getty/5586: [ 1149.706809][ T31] #0: ffff8880336810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1149.731690][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1149.799283][ T31] 3 locks held by udevd/5871: [ 1149.804564][ T31] 5 locks held by kworker/0:4/5887: [ 1149.814601][ T31] #0: ffff88801d2b5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1149.828752][ T31] #1: ffffc900043c7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1149.844781][ T31] #2: ffff888144b5d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1149.854395][ T31] #3: ffff88802e8fe198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 1149.865136][ T31] #4: ffff88807cc3f160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1149.876973][ T31] 4 locks held by udevd/6444: [ 1149.885176][ T31] #0: ffff888079f57418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 1149.895080][ T31] #1: ffff88807b8fe088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1149.904980][ T31] #2: ffff888056391a58 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1149.915387][ T31] #3: ffff88802e8fe198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1149.925508][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1149.931877][ T9] dw2102: i2c transfer failed. [ 1149.937061][ T31] 2 locks held by dhcpcd/20031: [ 1149.946212][ T31] #0: ffff88806a126258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 1149.956924][ T31] #1: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1149.989184][ T31] [ 1149.991662][ T31] ============================================= [ 1149.991662][ T31] [ 1150.012743][ T31] NMI backtrace for cpu 0 [ 1150.012778][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1150.012801][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1150.012814][ T31] Call Trace: [ 1150.012823][ T31] [ 1150.012832][ T31] dump_stack_lvl+0x189/0x250 [ 1150.012865][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1150.012886][ T31] ? __pfx__printk+0x10/0x10 [ 1150.012920][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1150.012951][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1150.012981][ T31] ? __pfx__printk+0x10/0x10 [ 1150.013007][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1150.013036][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1150.013066][ T31] watchdog+0xf60/0xfa0 [ 1150.013099][ T31] ? watchdog+0x1e2/0xfa0 [ 1150.013131][ T31] kthread+0x711/0x8a0 [ 1150.013156][ T31] ? __pfx_watchdog+0x10/0x10 [ 1150.013181][ T31] ? __pfx_kthread+0x10/0x10 [ 1150.013204][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1150.013234][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1150.013252][ T31] ? __pfx_kthread+0x10/0x10 [ 1150.013274][ T31] ret_from_fork+0x4bc/0x870 [ 1150.013303][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1150.013337][ T31] ? __switch_to_asm+0x39/0x70 [ 1150.013358][ T31] ? __switch_to_asm+0x33/0x70 [ 1150.013380][ T31] ? __pfx_kthread+0x10/0x10 [ 1150.013402][ T31] ret_from_fork_asm+0x1a/0x30 [ 1150.013443][ T31] [ 1150.013452][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1150.168071][ C1] NMI backtrace for cpu 1 [ 1150.168092][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1150.168112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1150.168122][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1150.168146][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 b1 1b 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1150.168160][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1150.168177][ C1] RAX: 6b80d861086ce100 RBX: ffffffff8196bc07 RCX: 6b80d861086ce100 [ 1150.168189][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e8bf1 RDI: ffffffff8bc07de0 [ 1150.168201][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 1150.168213][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e1e70 [ 1150.168225][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038dcb58 [ 1150.168237][ C1] FS: 0000000000000000(0000) GS:ffff888125e0b000(0000) knlGS:0000000000000000 [ 1150.168250][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1150.168262][ C1] CR2: 0000557da98da168 CR3: 0000000075602000 CR4: 00000000003526f0 [ 1150.168279][ C1] Call Trace: [ 1150.168289][ C1] [ 1150.168296][ C1] default_idle+0x13/0x20 [ 1150.168315][ C1] default_idle_call+0x73/0xb0 [ 1150.168334][ C1] do_idle+0x1e7/0x510 [ 1150.168358][ C1] ? __pfx_do_idle+0x10/0x10 [ 1150.168385][ C1] cpu_startup_entry+0x44/0x60 [ 1150.168407][ C1] start_secondary+0x101/0x110 [ 1150.168426][ C1] common_startup_64+0x13e/0x147 [ 1150.168449][ C1] [ 1150.359859][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1150.367795][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1150.377116][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1150.387262][ T31] Call Trace: [ 1150.390902][ T31] [ 1150.393945][ T31] dump_stack_lvl+0x99/0x250 [ 1150.398628][ T31] ? __asan_memcpy+0x40/0x70 [ 1150.403229][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1150.408533][ T31] ? __pfx__printk+0x10/0x10 [ 1150.413296][ T31] vpanic+0x237/0x6d0 [ 1150.417468][ T31] ? __pfx_vpanic+0x10/0x10 [ 1150.422150][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1150.428110][ T31] panic+0xb9/0xc0 [ 1150.432019][ T31] ? __pfx_panic+0x10/0x10 [ 1150.436541][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1150.442650][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1150.449072][ T31] watchdog+0xf9f/0xfa0 [ 1150.453519][ T31] ? watchdog+0x1e2/0xfa0 [ 1150.457953][ T31] kthread+0x711/0x8a0 [ 1150.462122][ T31] ? __pfx_watchdog+0x10/0x10 [ 1150.467111][ T31] ? __pfx_kthread+0x10/0x10 [ 1150.471931][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1150.477652][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1150.483196][ T31] ? __pfx_kthread+0x10/0x10 [ 1150.488098][ T31] ret_from_fork+0x4bc/0x870 [ 1150.493155][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1150.498639][ T31] ? __switch_to_asm+0x39/0x70 [ 1150.503662][ T31] ? __switch_to_asm+0x33/0x70 [ 1150.508439][ T31] ? __pfx_kthread+0x10/0x10 [ 1150.513209][ T31] ret_from_fork_asm+0x1a/0x30 [ 1150.518007][ T31] [ 1150.521383][ T31] Kernel Offset: disabled [ 1150.525909][ T31] Rebooting in 86400 seconds..