last executing test programs: 2m18.816632991s ago: executing program 4 (id=1123): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990af9, 0xffffbfff, '\x00', @p_u16=&(0x7f00000001c0)=0x5}}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001a40)={0xff, @rand_addr=0x64010101, 0x4e23, 0x2, 'wrr\x00', 0x10, 0x9, 0x74}, 0x2c) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="002185000000850a62fe9785d8f2d201a703e47d72a005b7cea16727d1d4cede0b47e356248835a54ad4e3d5c08ba5ba0a78d9b7e5b1fbec62d57262e0ba20670850163c9c42a9fd97b34d82c413c60118ad8a7b46323d1f26161c2585465e3c686fd889c2e4d36a95cd81"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) r4 = socket(0x8, 0x3, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x40}}, 0x20000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000500), 0xd3, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, &(0x7f0000000000)="2d318dc3311954b09be9a9860d4fe291be6e4b783788979004a487139d71263a116ab0a193d30979f7b2b60664d13664531f18384d08a01e8a6150c6583777b145debc775221087fb31ff380b22c0605eb112a576dec3fdca9fbb23f6124a13a6dfe91e69d91e27b7340a3f73fa40282c8ef54671af23924cd922ad8ef61fd8c102ce7511b2bf2b8e980b7e6e8a6c5d1bb5628012ae4ed", &(0x7f0000001680)=""/221}, 0x20) 2m14.270865487s ago: executing program 4 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xb, 0x103ba, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000720c0c40ac0553025a65000000010902120001000000000904000000030402"], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x109403, 0x0) 2m12.397976449s ago: executing program 4 (id=1146): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) accept4(r1, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) write(r1, &(0x7f00000003c0)="b20a9dcbb35d837c163722e97775b58136d181853b0c806aeff11d9e7bbafbb389387a24ea3e3b82daab569c964adf8f58d9e1106d9566020000003a9e228a16da41c0e147befabab8c24fc05dd7a87cabf5bdc674c8f2b48a66c7d6dd2d90f1c53579d91e97bfd767d796c524ab966986d4a905e676654c6cab79cd0567ff5dadef6ecb625779ab3b5151f34d19378c9e6944fc1f19116e0001000020f94100d8bdad30c055c577067adffc89a74ea4e3bc4562f7ef322072789512be56e30edb14a3ffa4fb9f53d433e9263be81d395f176d", 0xd3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r2 = syz_io_uring_setup(0x186, &(0x7f0000000200)={0x0, 0xaab6, 0x100, 0x0, 0xffffffff}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) creat(&(0x7f00000000c0)='./file0\x00', 0xd931d3864d39dd5f) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], 0x20) r6 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r6, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x2b8, 0x2b8, 0x130, 0x2b8, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0xffffffff, 0xffffffff, 'bond_slave_0\x00', 'bridge0\x00', {}, {0xc10c421ca43f3e7e}, 0x88, 0x3, 0xb3}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x29}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0xff, 'wg2\x00', 'macvlan0\x00', {}, {}, 0xff, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x0, 'veth0_to_bond\x00', 'gre0\x00', {}, {}, 0x89, 0x1, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x44}, 0xffffff00, 0xffffff00, 'batadv0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x2f, 0x7, 0x2}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r9, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0xffffffffffffffda, 0x400, {0xae0c, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0xae2, 0x802, 0xee01, 0x0, 0x2000, '\x00', 0x1, 0x8, 0xb4e7, 0x320d3873, {0x8003, 0xa}, {0x0, 0x3}, {0xaeb, 0x7}, {0xf, 0x8}, 0x701, 0xffffffff, 0x8, 0x6}}}}) write$FUSE_INIT(r9, &(0x7f0000001200)={0x50, 0x0, r10, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 2m8.232634244s ago: executing program 4 (id=1157): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000327c00000000000a7c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000005000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e080003400000001710000180070001007274"], 0xa4}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0xffffffffffffff74, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) syz_usb_control_io(r0, 0x0, 0x0) 2m4.293658227s ago: executing program 4 (id=1168): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x200, 0x800, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, {0x4, 0x10}, {0x0, 0x6}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x7}, @TCA_CODEL_LIMIT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x100000000008, 0x20c40) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x100a, 0x4, 0x0, 0x0, 0x5, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) r6 = memfd_create(&(0x7f0000000080)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1br\x14\xdb\xd3\xcd\xfd\xbdnC\xec)\x86\x14\x13\xeb\xb5\n-\xfeha\xfef\xecUO(\x91\x8d\x14\xec\x02u\xd9_FT\xaa\xda\x0e \xa0;\x10', 0x4) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000240)) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f0000000100)=""/74, &(0x7f0000000180)=0x4a) 2m3.879627195s ago: executing program 4 (id=1169): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELSET={0x14}], {0x14}}, 0x3c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000166ff90070000480340001800b000100657874686472000024000280089d01400000000c080003400000000008000440000000220500021000000000380001800c000100626974776973650028000280080003400000000408000140000000140800b006000000000000058008000480040002800900010473797a3000000000140000001100010000000000000000000600000a"], 0x10c}}, 0x0) (async) process_vm_readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)=""/252, 0xfc}], 0x1, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000480)=""/198, 0xc6}, {&(0x7f0000000580)=""/18, 0x12}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/110, 0x6e}, {&(0x7f0000000740)=""/46, 0x2e}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/200, 0xc8}, {&(0x7f0000000940)=""/106, 0x6a}], 0x9, 0x0) 2m3.357002049s ago: executing program 32 (id=1169): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELSET={0x14}], {0x14}}, 0x3c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000166ff90070000480340001800b000100657874686472000024000280089d01400000000c080003400000000008000440000000220500021000000000380001800c000100626974776973650028000280080003400000000408000140000000140800b006000000000000058008000480040002800900010473797a3000000000140000001100010000000000000000000600000a"], 0x10c}}, 0x0) (async) process_vm_readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)=""/252, 0xfc}], 0x1, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000480)=""/198, 0xc6}, {&(0x7f0000000580)=""/18, 0x12}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/110, 0x6e}, {&(0x7f0000000740)=""/46, 0x2e}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/200, 0xc8}, {&(0x7f0000000940)=""/106, 0x6a}], 0x9, 0x0) 11.860867803s ago: executing program 2 (id=1505): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = io_uring_setup(0x23ea, &(0x7f00000001c0)={0x0, 0xb1d4, 0x400, 0x2, 0x200019f}) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc) read(r5, &(0x7f0000000180)=""/52, 0xfffffdef) ioprio_set$pid(0x1, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c1100070080000900", 0x33a) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x235}}}, 0x84) 11.853689388s ago: executing program 1 (id=1506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) io_uring_setup(0x2953, &(0x7f0000000340)={0x0, 0xa52f, 0x200, 0x1, 0x145}) r2 = syz_io_uring_setup(0x3de3, &(0x7f00000003c0)={0x0, 0x4681c, 0x20, 0x1, 0x195}, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/125, 0x7d}], 0x2, &(0x7f00000020c0)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f00000005c0)=""/198, 0xc6}, {&(0x7f00000006c0)=""/31, 0x1f}, {&(0x7f00000040c0)=""/4096}, {&(0x7f00000009c0)=""/31}, {&(0x7f00000050c0)=""/4096}], 0x4, &(0x7f0000000740)=""/35, 0x26}, 0x3}, {{&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)=""/77, 0x4d}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x2, 0x0, 0xffffffffffffffa1}}], 0x3, 0x0, &(0x7f0000000980)={0x77359400}) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) fstat(r0, &(0x7f0000001b40)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000b40)={{r6}, "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"}) io_uring_enter(r2, 0x4c40, 0xb30c, 0x20, &(0x7f0000000140)={[0x7]}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a0000080002800400728014000700000000000000000000000000000000004746453788dcd29682046f387e720c1b0b3ffb9ea3d3"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000040000000400000093f88ab5efd3f90ecc95ad00000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100000000300"/28], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40080c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x40010) 11.738971102s ago: executing program 2 (id=1507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000e4ef1f00060000007f00000001f609ecf351370b14e9367a03731d78de5734c57aee155a5abfdb2c0798f79a879bb9bdb4bb362373d2cffcd80cc5207c014ad788562411f534f05b22595acb149e0cc609b17d33668e431f25912b8a0cea15f5e372f0f15aa4d2e9ccdec1a270694fe677c36b04cb47605e2b8cca2d7c4b6748081ca79ffae8a21cc905ef"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000000000)="b0b3db9e4679cf503bf8135c4749d2c4689c70a2586bffb3c0d8c6f75becf873e20000750f7df17d513b242864ee08246b2e51e08ab64f54d393dd604d36348c51daf1629f2b0256001183db076f6f", 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 11.520888005s ago: executing program 2 (id=1508): socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYRES16=r4, @ANYRES8=r4, @ANYRESDEC], 0xc0}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000006000/0x4000)=nil, 0x0}, 0x68) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 10.416599084s ago: executing program 1 (id=1510): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x1, 0x0, 0x0, {[@md5sig={0x13, 0x12, "473ecfd2106a00"}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = getpgid(0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) sendmmsg$unix(r5, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x24004800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20, 0x80}}], 0x2, 0x408b1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 8.702076671s ago: executing program 1 (id=1515): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1}, &(0x7f0000000180)=0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000002180)=ANY=[@ANYBLOB="12010000c7ce360863078020abd0010203010902120001000000000904000000ff"], 0x0) 8.420388406s ago: executing program 2 (id=1517): syz_usb_connect(0x2, 0x43, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902310001080010000904df0003080662ff09050c02200006b227071000"], 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000001c0)={0xb06, 0x3000, 0x1, r3}) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0xfffff000) 8.086283708s ago: executing program 0 (id=1518): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket(0x22, 0x1, 0x3) getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5199, 0x4) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "6d7ffc5ed7e1a984", "9262f787066c2566b4ed53416673b771", "04597bcc", "54fe9b6efd9256c5"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) munlockall() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001380), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 7.829118475s ago: executing program 0 (id=1520): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0xd006) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000180)={0xfffffffffffffffb, 0xffffffffffff68c7, 0x6eb, 0xfffffffffffff000, 0x76, 0x7, 0x6, 0x2a0f, 0x6, 0x813, 0x10000000000004, 0x80000001, 0x9, 0x6, 0x0, 0x1, 0x400004, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffffffffffffffa, 0x800, 0xfff, 0xecb}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000200000000000001000000000800170065204e22080018"], 0x2c}, 0x1, 0x0, 0x0, 0x404c091}, 0x0) 7.724771322s ago: executing program 0 (id=1522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900308108651f010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010067656e65766530000000000000000000140001007767810000000000000000000000000048000000180a0101000b0000000000000100cab46222a07021abc617dc3f8e8c9900000900020073797a30000000000900010073797a30000000001c000380180003801400010076657468315f746f5f7465616d0000001400000010000004f2ffffff0075e1cc5000"], 0xfc}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x181201, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x6, 0x8, 0x3, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x1000040c, 0xffff}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_INTERRUPT(r8, &(0x7f0000000000)={0x10, 0x2f}, 0x10) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r6) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r10, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r12}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000100)={0x10, 0x0, r12}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000280)={0x8, r4}) 7.641408967s ago: executing program 5 (id=1523): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x1, 0x2) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24080080) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) mq_timedsend(r1, 0x0, 0x3c, 0x4, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x5}, 0x8) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x53, &(0x7f0000000200)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}, {&(0x7f0000000380)="dab46df9a18041693b777b4925043d3436298317ba6cd85ed2fbdbd5f15798e290e7c0ceb5e1847c9aeafa8a0a8a2242bc382eacbd9e968b5809db7a8424f4a62950ad0f15035890f0615f168dbe486e687d2fa44f444ea8f06dd1db085369bcd0186b69b92d9db6d7bdd5b93f44668fd19253ca4e4eb055cec72b9fa66532ddf33f2dd8af8a11bdaf59de88a38030de84daff68d3f81a74a22e65f543c382255eb17e6e5e88ef22aae5b012a8ba9efbf8ad4cee8516379c4c847f158beda0bc58095f2c78"}, {&(0x7f00000001c0)="441b663455d9fd196f17b52a41464b7f3133d8d24b5300327cd22a955d6e3142486c8030e45972de86130b"}, {&(0x7f00000002c0)="93e2856a2a1e9398a770a46e4c71d9a9592c993c0fc3803548aa86238b5824131f5c15ca4777cb89efdbe638f88f4e8b91c0498d5ef0e3113f663ba96fcc3a2e36eee4861fe82eda57afa5fe7b30f7e58a8350e86a95b6b3574ee583d6d39797883ceea09af920c26c25f0f1eb804c8700a57e771db47a7d3b4232a5e67d2f7cd7d4ce3687e1abe059062b35"}], 0x1, 0x0, 0x35, 0x1f00c00e}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r2, &(0x7f0000001580)=ANY=[@ANYBLOB='target PCI:0:0:0.', @ANYRESHEX], 0x13) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000140)=[{{0x2, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200029010203010902120001000080000904"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r9 = syz_open_dev$sndpcmp(0x0, 0x1000, 0x4cac25) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0xc0844123, &(0x7f0000000180)=0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x708, 0x41e3, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.024288849s ago: executing program 0 (id=1525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r3, 0x7fff}, 0xc) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xc00000, 0x2000001}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), 0x0}, 0x20) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xe, r7, 0xfffffffe}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 5.637096499s ago: executing program 0 (id=1527): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) remap_file_pages(&(0x7f0000f9f000/0x2000)=nil, 0x2000, 0x300000a, 0x9, 0x10) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000780)={0x0, 0xaee2, 0x2, 0x2, 0xbfdffff8}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000740)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0x8000, 0x89}, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, @in={0x2, 0x4e21, @remote}], 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000040), 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x680340, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601080000000000000000c00000001400078008001240000000020500150009000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c706f727400000000"], 0x60}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl(r8, 0x3, &(0x7f0000000380)="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") socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5.568249522s ago: executing program 1 (id=1528): ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4040081) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/icmp6\x00') bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000001c0)={'wlan0\x00', 0x4a}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) r2 = socket$kcm(0x29, 0x7, 0x0) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2, 0x15, 0xfe, 0x5, 0x1a, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_key={0xa, 0x8, 0x218, 0x0, "ccf024097bd04ffc9f4c85ed38e3f62dde9fe6c8624dd4c4859f057b3956464a549c06e41bcbdc766d1534361bfb449fbe613853fdd2dc9944edd879d3a9d4f2e2cc6c"}, @sadb_sa={0x2, 0x1, 0x4d2, 0x8, 0x1, 0x3b, 0x0, 0x80000000}, @sadb_lifetime={0x4, 0x2, 0x8, 0x3, 0x3, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_x_nat_t_port={0x1, 0x16, 0x3e64}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_lifetime={0x4, 0x7, 0x2, 0x3, 0x4, 0x1}]}, 0xd0}}, 0x20000081) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)={0x0, 'vxcan1\x00', {}, 0x2}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000003c0)=@arm64={0x1, 0x2, 0x3, '\x00', 0x3d}) fchdir(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000480)={0x360, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2ae}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc6c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb44}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x58b}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc3, 0x3, "08520398e76bfe96e9ed42a6e1622a9323987498365203c58228baf2796fc6292a834aeac5d01a539275f90020dbbb1f248ba6e3f2d1295f20b7e39315b61fa8e5ce19e3c45454d75d52175ca07e0914ea84b070a163b523ba4cfd89c7fbe43fc88139e29f5c5620fd3ef2278442bbda53662559f7f465a74a5eca6871920ab01c1cde5b7e908a20f001dcd30e4559d928a34c97c1f2dae5d70fd06cdbef5fdb4eb658bf292df7e3264624b9f8fb0580f8aba03f55a2570a39e86791cd1090"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "eda1117d95acb04071501fad03a540e7cd03c64c2cc020b8542d06410f09f24063158354"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x40014}, 0x8000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000880)={0x0, 0x1f, 0x6, 0x8, "f17839dc50b64ddb2f628b45eb9c171123007a3106dc5594be612881779fbd27"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000940)={'sit0\x00', r0, 0x8, 0x8, 0x7, 0x401, {{0x1c, 0x4, 0x2, 0x3c, 0x70, 0x64, 0x0, 0x7f, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x24, 0xdb, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x6}, {@empty, 0x6}, {@rand_addr=0x64010100, 0xcea80000}]}, @timestamp_addr={0x44, 0xc, 0x2a, 0x1, 0x4, [{@empty, 0x2}]}, @lsrr={0x83, 0x2b, 0x15, [@broadcast, @loopback, @loopback, @empty, @loopback, @local, @rand_addr=0x64010102, @broadcast, @loopback, @broadcast]}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4418}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x11) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x50, r2, 0xbef8000) r7 = openat$cgroup_ro(r1, &(0x7f0000000b00)='pids.current\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000b40)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000b80)="c8cb98a586e41df3c3daf569ff75ec19dcfb5e28c5e81d4b361906feffe0f9b0fe80df0eb9a49d87e097b66e85d4e9b663ee", 0x32}, {&(0x7f0000000bc0)="f06c0c7b3d2b6763b170d6fb8149", 0xe}, {&(0x7f0000000c00)="36fbf19f366ce21e152cb6ea201b22dab3ec184e6fa5fa4172e83d3ef1b91d7b4400ebda943efadf97ad443b38f419f94a203a65fbaa46be6292ae2efb5215fd122435e7dff0b3af14970b29a5275cf4b10e425cdcdde9155f4414c419f1da0d22cfedda0f958db1688aa14222fe1131bb376d8e0eca9168757123ba994e31496addeb73be464bc30b28ddf2e1675d33c1f6d7146734c03d0d15bda85b1524beb95e207c66b0646d0185f7c141aeff3a914e24d9f20acd9fd66949c6571d3d641feb1e06f54459da162517ab177532b6cd897fd22d2f152aa5f825a2", 0xdc}], 0x3, &(0x7f0000000d40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x20, 0x0, 0x7, {[@end, @generic={0x44, 0x2}, @timestamp_addr={0x44, 0xc, 0x65, 0x1, 0x3, [{@broadcast, 0x7bd1}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x962}}], 0xa0}, 0x1) r8 = accept4(r3, &(0x7f0000000e40)=@rc, &(0x7f0000000ec0)=0x80, 0x80800) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$cgroup(r7, &(0x7f00000021c0)='syz0\x00', 0x200002, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000002200)={0xb, 0xffffffffffffffff, 0x1}) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002240), 0x440000, 0x0) r13 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002280), 0x1c4bb3fef4409647, 0x0) r14 = syz_open_dev$vcsu(&(0x7f00000022c0), 0x7, 0x10820) sendmsg$unix(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000f00)="87101616cfea2e99cc8e2ec8a919aa916bd03206946875ba41a8362593df2348b540ad120762597942fbc547c05ce55f101cd1bf9aaf199d8250a4b6ae191f2ffb7e618181637721e99a050ca0118f13ba049dc3b9e24df5ad6401438478b383aa2ac9eaff13c6dce10bdb4586c954f0281a223ec05e605cd85be774d97f733101bb2b4fa6bff13df1c9df9091f10b240bf8bf7c659d07fbe228d1ae28cbbe4b9cb8ddde08f9c7951a704588b3bca21d398b653543a8fda332daeea449f23ed13e22180669ba044c4a89c243780660513bf135da37081666596c9943bd8f066b635b4d6034f7", 0xe6}, {&(0x7f0000001000)="bb7cc029a5e66e109c3a73f4c64bbea2713506528bf2c2433c9d96061451c537e05795de7e79", 0x26}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="02343b81856a5f302c2353bbb6ac76164c4dfd21c442ab6aa2be03ecd7d64697cd42db7ba4000e9418c8dd8003e2ab3f1ca923a338f4a42485c81495ae8bd87fe949f957dba784c54aa51187890a6ccd993b117a1c1c0f11701ade4917252d2a82eb7da08ada615d9e4b00f5c7b7f15db0f71f49600bd3c683b994c933f6dfc477f95f16299cbc", 0x87}, {&(0x7f0000002100)="dd18333cbb87dbd46642681ac629e0229dc65cec7eea85d4919c4e2dbd3e33bbb82ad1a4f78e2af69067e98b2c0713d3815a85eb8496957df214739c48c39dc5", 0x40}], 0x5, &(0x7f0000002480)=[@rights={{0x2c, 0x1, 0x1, [r10, r1, r11, r12, r7, r9, r9]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r13, r8, r14]}}, @rights={{0x20, 0x1, 0x1, [r9, r2, r9, r1]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r7, r8, r1]}}], 0xb0, 0x800}, 0x400c4) 5.566173616s ago: executing program 2 (id=1529): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0x8000, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4b, 0x39cc191a, 0x5f, 0x9, 0x5, 0xb188, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x4, 0x3c5b, 0x1, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x9, 0x4, 0x3, 0x7, 0x0, 0x71, 0x7, 0x1, 0x1, 0x5, 0xd091, 0x3e, 0x7, 0x6, 0x6, 0x0, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x9, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x200c7, 0xf9, 0xd, 0x2bf, 0x6c9, 0x10000007, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f5, 0x0, 0x2, 0x2, 0x9, 0x2, 0x9, 0x8, 0x800000d, 0x6, 0x5, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x3, 0xf5fd, 0x0, 0x5, 0x1, 0x1100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xaa, 0x3, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0xc4, 0x120000, 0xbe, 0x1, 0xa2ed, 0x2, 0x25], [0x9, 0x5, 0x7, 0xb, 0x5, 0x938, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0x1fc, 0x6, 0x6, 0x8, 0x57b, 0x101, 0x10000, 0x6, 0x7fff, 0xfffd, 0x4, 0x20002, 0xb0, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9600, 0xa, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xe, 0x7, 0xfffffffe, 0xa, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 5.267520792s ago: executing program 1 (id=1530): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180)=0xfffffff7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x339) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000003c0)={0x0, 0x3b, 0x8, {0x8, 0xd, "4d8188f0b148"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}}, 0x1c) 4.555993961s ago: executing program 3 (id=1531): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffe0, 0xa}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4010) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x82040, 0x0) 4.352971443s ago: executing program 3 (id=1532): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4000001) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) unshare(0x22020400) socket$l2tp(0x2, 0x2, 0x73) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="87426e7f0a23f7c0697e3e6eaa120ba3e32a0ba0b6ba1a0b82bb43ff8e9befa4e96e8b1cb0a934d12866229e630794e1e6cf6a", 0x33, 0x48804, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "caf8c695"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 4.342382145s ago: executing program 5 (id=1533): syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000600)={0x0, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x113, 0x4a, 0x0, 0x0, r1}) (fail_nth: 10) 2.918036368s ago: executing program 5 (id=1534): r0 = timerfd_create(0x0, 0x80000) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1000800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x642000, 0x0) syz_open_dev$media(0x0, 0x8, 0x10b482) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000000c0)=0x2) r6 = socket$kcm(0x10, 0x8, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a17b6000000000000000001000003090001000000002c00000000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001900b000100657874680072000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c000100626974776973650020000280080006400000000008000140000000140800024000000012040007800900010073797a3000000000140000001100010000000000000000000700000a00"/255], 0x104}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/cpu_byteorder', 0x42, 0x80) syz_open_pts(0xffffffffffffffff, 0x141601) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r7, 0xc008551c, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRESDEC=r7, @ANYRESOCT=r4, @ANYRES8=0x0, @ANYRES16=r7]) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0xffffffff, 0x7, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r9 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x800, 0x10) statx(r9, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x400, &(0x7f0000000240)) landlock_create_ruleset(&(0x7f0000000100)={0x4142}, 0x18, 0x0) 1.960793921s ago: executing program 1 (id=1535): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8004000000000, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x80108907, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x40}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="0030000e0000"], 0x0, 0x0}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1001, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x200238, &(0x7f0000000980)={0x0, 0x0, 0x800, 0x2, 0x2ae}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x80c4) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000140)=0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 1.630572944s ago: executing program 5 (id=1536): r0 = socket(0x10, 0xd, 0x0) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r1 = socket(0x1a, 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x8943, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x7, 0x2, 0x17d, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x1, 0x6, 0x0, 0xbd4], 0xffff1001, 0x120182}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000045000000040000000fa2"], 0x45}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000200)={0x2, 0x34000, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000280)=ANY=[]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10137, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000140), 0x6, 0x662341) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000240)=0x8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r9, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x86) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) 1.154406808s ago: executing program 3 (id=1537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001900010000000000fbdbdf250a000000000000000000000008001e0000040000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x4040052}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) 979.544872ms ago: executing program 3 (id=1538): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}}) r0 = io_uring_setup(0x4668, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x1, 0xa6}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x20, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000055c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) r3 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x24, 0x301, 0x0, 0x80, {0x11}, [@typed={0xc, 0x14b, 0x0, 0x0, @u64=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000300)={0x0, @local, @empty}, &(0x7f0000000340)=0xc) sendmsg$nl_route_sched_retired(r10, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=@newtfilter={0x466c, 0x2c, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x7, 0x6}, {0x10, 0xffe0}, {0x1}}, [@f_rsvp6={{0xa}, {0x428, 0x2, [@TCA_RSVP_POLICE={0x410, 0x5, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x5, 0x7f6, 0x296, 0x8, 0xffffffff, 0x55f, 0x3, 0x1, 0x18, 0x9, 0x6, 0x9, 0x3, 0x8, 0xfffffffe, 0x9, 0x2, 0x2, 0x5, 0x2, 0x3, 0x6, 0x0, 0x5, 0x78, 0x6, 0x5, 0x7, 0x7, 0x81, 0xffff, 0x2, 0x101, 0x1, 0x9, 0x1cbf, 0x204, 0x3, 0x99, 0x9, 0x31, 0x4800000, 0x12, 0x2, 0xd0, 0xb, 0x6, 0x3, 0xf5, 0x3, 0x2, 0x800, 0x6, 0x1, 0x3, 0xfffffffa, 0xfff, 0x3, 0x2, 0x18f, 0x8, 0x80, 0x3, 0x3, 0x9668, 0x4e7a, 0x3, 0x5, 0x3, 0xb, 0xfffffd3e, 0x7ff, 0x8, 0x6000000, 0x3, 0x6, 0x28ee9f1d, 0xb4, 0x5, 0x3, 0x800, 0x6, 0xffffffff, 0x7, 0x8001, 0x8, 0x6, 0x7ff, 0x800, 0x9, 0xb, 0x7, 0x1, 0x8, 0x8, 0x6, 0x6, 0x5, 0x4, 0x4, 0x40, 0xd4, 0x2, 0x3, 0xffffffff, 0x6f0, 0x79a, 0x8, 0x0, 0x7, 0x10, 0x40, 0x4, 0x8, 0x2, 0x8, 0x2, 0x3, 0x2, 0x3, 0x2, 0x4, 0x9, 0xee, 0x5b, 0x2, 0x5, 0x9, 0x6, 0x4, 0x8001, 0x5, 0x8, 0x1000, 0x2, 0xbf, 0xffff0000, 0x8000, 0x0, 0x3ff, 0x1, 0x6, 0x1, 0xfffffd4e, 0xfffffff9, 0x3, 0x7, 0x5, 0x1, 0x3fc0, 0xffff6069, 0x10000, 0x6, 0x7, 0x6, 0x100, 0x5, 0x9, 0x5, 0xfffffff9, 0x10001, 0x4, 0x100, 0x6, 0xcd8b, 0x80, 0x3ff, 0xb, 0x8000, 0x9, 0x8001, 0xa37b, 0x13a, 0x49a, 0x1, 0x8, 0x9d6c, 0x516, 0xbbe1, 0x10001, 0x5, 0x1, 0x40000000, 0x2, 0x2, 0x5, 0x10000, 0x1, 0x10000, 0x1295, 0xb, 0x3, 0x0, 0x1ff, 0x8, 0x40100, 0x2, 0x2, 0xfffffff0, 0xdd20000, 0x6, 0x1, 0x5f, 0x8000, 0x439, 0x8, 0xda, 0x41c84714, 0x3b9, 0x8, 0x1ff800, 0xfffffff8, 0xa, 0x4, 0x3, 0x7, 0x3, 0x7, 0x2, 0x40, 0x8, 0x7, 0x10001, 0x0, 0xca9, 0x0, 0x5, 0xb18a, 0x6, 0x9, 0xa5, 0x100, 0x9, 0x9, 0x30520365, 0x8000000, 0x8, 0x3, 0x4, 0x10, 0x292a, 0x1, 0x800, 0x7ff, 0x6, 0x3ff, 0x32, 0x8, 0xff, 0x3044, 0x3, 0x3ff, 0x4, 0xfffffffe]}]}, @TCA_RSVP_SRC={0x14, 0x3, @empty}]}}, @f_rsvp6={{0xa}, {0x884, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_POLICE={0x81c, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0x1e, 0x5, 0x6, 0x3, 0x1000, 0xe2a, 0x2c, 0x7b46, 0x2, 0x83, 0x3, 0x0, 0x2, 0x5, 0x2, 0x5, 0x0, 0x7, 0x6ad, 0x0, 0x2, 0xfffffbff, 0x10001, 0x783, 0xe8000000, 0x8, 0x4, 0x2, 0x5, 0x4cae, 0x1, 0x8, 0x7af, 0x0, 0x0, 0x10, 0x7, 0x4224, 0x10001, 0x9, 0xfffffff9, 0x4, 0x3e200000, 0x7, 0x45, 0x3, 0x8, 0xffff, 0x4, 0x3, 0x0, 0x7d, 0x79e, 0x1, 0x4, 0x6, 0x4, 0x7, 0x9, 0x9, 0x6, 0x4, 0x4, 0x2, 0x5, 0x0, 0x2, 0x1, 0x3, 0x1ff, 0x39, 0xffffff7f, 0x8000, 0x3, 0x3, 0x9, 0x5, 0x6, 0xd9, 0x8001, 0x4, 0x2c, 0x400, 0x5, 0x4, 0x4, 0xfffffff7, 0x8001, 0xfff, 0xddf2, 0x1, 0xc5, 0xffffff29, 0x2, 0x1, 0x5, 0x10, 0x4, 0x0, 0x0, 0x1, 0x9, 0x2, 0x3, 0x1, 0x2, 0x4, 0x5, 0x8001, 0x4, 0x5, 0x8, 0x1, 0x34a, 0x80, 0x94, 0x4, 0x1, 0x1, 0x0, 0x400, 0x81, 0x1c3cd451, 0x4, 0x0, 0x4ad, 0x5, 0x6, 0x401, 0x9, 0x8, 0x7, 0x6, 0x4, 0x8, 0xd7a, 0xffff, 0xb, 0xfff, 0x9, 0x210, 0x2bc, 0x7ff, 0x5, 0xfbf1, 0xfffffff7, 0x5, 0x800, 0x3, 0x1, 0x7, 0x6, 0x1f7, 0x7687, 0x193, 0x9, 0x10001, 0x8, 0x5, 0x401, 0x5, 0x7fff, 0x44000000, 0x16, 0x9d8e, 0x3, 0x10001, 0x3, 0xfa8, 0x40, 0x5, 0x8, 0x8, 0x0, 0x9, 0x1, 0x3, 0xb, 0x5, 0xdcb890, 0x6, 0x6, 0xdab5, 0xd, 0x101, 0x6, 0xf, 0x3, 0xc, 0x7fffffff, 0xf59, 0x8, 0xb4d, 0xa, 0x8, 0x8, 0x1, 0x1, 0xfffeffff, 0x9, 0xc, 0x4, 0x7, 0x4, 0x0, 0x5, 0xdb, 0x6, 0x7, 0xfffffff8, 0xe294, 0x0, 0x0, 0x1, 0x4a0, 0x14, 0x7, 0x10000, 0x3, 0xfffffffa, 0x94e, 0x1ff, 0xb, 0x3, 0x8b7, 0x10, 0xa, 0x0, 0x9, 0x101, 0x4, 0x6, 0x80000000, 0x4d7, 0x0, 0x922, 0xc, 0x600, 0x9, 0x9, 0x3, 0x3, 0x2, 0x5, 0x7, 0x3ff, 0x3, 0x9, 0x0, 0x9009, 0x9, 0x2, 0x0, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x2, 0xfb27, 0x3, 0xffff, 0xe3, 0x2, 0x1, 0x3907, 0x0, 0x800, 0xffff2a01, 0x400, 0x200, 0x50889cf8, 0x1ff, 0x10, 0x3, 0x7ff, 0x3d65, 0x817, 0x8, 0x0, 0x492, 0x1, 0xdd3, 0x1000, 0x2, 0x2, 0xfff, 0x8000, 0x8, 0x0, 0x10000, 0x7ff, 0x4, 0x7fffffff, 0x0, 0x7, 0x2, 0x9, 0x5, 0x0, 0x6, 0x5, 0x18, 0x2, 0x4, 0x3, 0x0, 0xf, 0xeb1, 0xbc0e, 0x8, 0x0, 0x8, 0x4, 0x8001, 0x9, 0x7, 0x8000, 0xfffffffc, 0x4c9, 0x40000000, 0x4, 0x7, 0x3, 0x4, 0x401, 0x0, 0x5, 0x0, 0x1d, 0x400, 0x6, 0x0, 0x6, 0x42, 0x0, 0x31, 0x2, 0x6, 0x7fffffff, 0x6, 0x5, 0x4c3, 0x4, 0x0, 0x101, 0xfffffeff, 0x4, 0x0, 0x589, 0xffffd003, 0x5, 0x9861, 0x5187, 0x6, 0xc0, 0x8, 0x7, 0x5, 0x8, 0x3, 0xd7, 0x8, 0x3, 0x283418cd, 0x8, 0x2, 0x7, 0x1, 0xf, 0x401, 0x7fff, 0x1, 0x40, 0x6, 0xfff, 0xe, 0x40, 0xf, 0xa, 0x7c25, 0x80000000, 0x4, 0x6, 0x73aa, 0x54ab, 0x5, 0xd, 0x4, 0x2, 0xc7a4, 0x8, 0xda6c, 0xb7, 0x2, 0xffffffff, 0x80000001, 0x3, 0x101, 0x0, 0x2, 0x95, 0x7f, 0x0, 0x8000, 0x62f, 0x6, 0x3, 0x9, 0xa, 0x2, 0x2, 0xa, 0x2, 0x9, 0x5, 0xeb32, 0x4, 0x3, 0x0, 0x7, 0xb, 0x5e2, 0x8, 0x7, 0x1, 0x1, 0x4, 0x80000001, 0x5, 0x6, 0x9, 0x10000, 0x9, 0x4, 0x0, 0x9, 0x10, 0x4, 0xfffffffe, 0xb, 0x6, 0x0, 0x200, 0xa9, 0x7f, 0x0, 0x0, 0x69, 0x6, 0x10001, 0x1, 0x9, 0x3, 0x4b, 0xffffffff, 0x0, 0x8, 0x800, 0x8, 0x6, 0x9, 0x0, 0x7, 0x7, 0x5, 0x7, 0x2, 0x4, 0x50, 0x1529, 0x2, 0x784, 0x7f, 0x7, 0xcdd0, 0x101, 0x0, 0x525, 0x101, 0x9, 0xfff, 0x6, 0x0, 0x5f, 0x1c, 0x1ff, 0x101, 0x8000, 0x0, 0x4, 0x40, 0x1, 0x69a, 0x4, 0x2, 0x1, 0x0, 0x218, 0x2, 0x9, 0x9, 0x3, 0x0, 0x1, 0x7fff, 0x7ff, 0x0, 0x5, 0x1, 0x2, 0xff, 0xfff]}]}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_DST={0x14, 0x2, @local}]}}, @f_rsvp={{0x9}, {0x34e4, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @private=0xa010101}, @TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, @TCA_RSVP_ACT={0x23a0, 0x6, [@m_mpls={0x118, 0x10, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x81}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe000000, 0x2, 0x8, 0x8, 0x4}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xa13f, 0x1, 0x6, 0x9, 0x1}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xc, 0xfffffff8, 0xb, 0x4080, 0x9}, 0x1}}]}, {0x6d, 0x6, "2f0221326b39147815a517fd78e21b30f3960affd49d7a15cce3ae0682da2fff937b6da15d31234561eff3864cac93f080f0efc95b0461978219b52a36e20a4a37e2c98899c8d5b046f772bb6eeeaef041b82a57d682a05deca16ee2f6513b7c57442da47c594db049"}, {0xc}, {0xc}}}, @m_connmark={0x10f8, 0x17, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffd, 0x9, 0xff}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x6, 0x1000, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x80000000, 0x2, 0x652, 0x1ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x6, 0xffffffffffffffff, 0x5, 0x2ce}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x10000000, 0x2, 0x6}, 0xfe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xb43, 0x20000000, 0x43, 0x3}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7a, 0x7, 0x20000000, 0x0, 0x9}}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xcc, 0x12, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x96, 0x6, "dc8aa6508c1450623172191e085e2c626e98db2b7c6766501b097449062db642aafd7bc13668643be90b0eac78d68eb91c0729bec87a947763f9f2a55002d3cc22e5b256c7358d2d99350c1550cd1612bc572a9771d9048da8ec94cd3fd9d017670cc6efa76568b5ca696a80c897ec48b0eedff1d6937c6a41cbbbffaefe0ea9836cdb6ee0b3173f009c321bd21de9a647be"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x10c0, 0x6, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0x4c4c, 0x2, 0x17e2, 0x80000000}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x7, 0x7, 0x2}, 0xffe0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x0, 0x0, 0x0, 0x1}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x100, 0x20000000, 0x1, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x24, 0x10000001, 0x8, 0x7}, 0x9}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_RSVP_ACT={0x1130, 0x6, [@m_mpls={0x106c, 0x3, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfd, 0x7ff, 0x1, 0x5000000, 0x9}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0xc0, 0x14, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000000, 0x80000001, 0x20000000, 0x8, 0x7fffffff}, 0x9}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x64, 0x6, "66c219253332420f3c25153b1b1c8672e6a95aab690969c0cd91ceb549b85a457c0e747ecf20eb29cf6f12de4799d12ee30a5fb16da98c85d2f592a6d06252a54495ec629bcfcd183ad5b0c2fd68bf2046f6aa7c83a6f92e091e0b970e4c7dae"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @f_rsvp6={{0xa}, {0x2c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @TCA_RSVP_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}]}}, @f_tcindex={{0xc}, {0x450, 0x2, [@TCA_TCINDEX_POLICE={0x44c, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0xcfde, 0x7, 0x3ff, 0x81, 0x29, 0x8, 0x8, 0xee2, 0x1, 0x78e, 0x40000, 0xfffffffa, 0x8, 0x40, 0x8001, 0xfff, 0x3, 0x0, 0x8, 0x5e, 0xffff, 0x93, 0x3, 0x10001, 0x10, 0xb7, 0x9, 0x2fa9, 0x3, 0x10000, 0x10, 0xfffffffd, 0x3, 0x3536, 0x84464000, 0x3, 0x5, 0x1d5, 0x3, 0xf2, 0xa, 0x6, 0xe, 0xfffffffc, 0x9, 0x54c, 0x0, 0x81, 0x2, 0x1, 0x4, 0x38c, 0x7fffffff, 0xd9b, 0x1, 0x9, 0x40, 0x7, 0x4, 0x1, 0x44, 0x7fffffff, 0xe, 0x8, 0x6, 0x2, 0x0, 0x8, 0x9, 0x0, 0x4, 0x1, 0x2, 0x9, 0x5, 0x0, 0xa, 0x6, 0xc, 0x20d, 0xc6d7, 0x7ff, 0x0, 0x0, 0xffff, 0xffffff7f, 0x612, 0x9, 0xffffff61, 0x401, 0x9, 0x10001, 0x0, 0x0, 0xc, 0x5983, 0x100, 0x8, 0x64a, 0x7fff, 0x8, 0x81, 0xf, 0x8637, 0x0, 0x0, 0xfbe, 0x9, 0x401, 0xd1f6, 0xc, 0x7, 0x1, 0x7, 0x8, 0xf7, 0x7, 0x8, 0x9, 0x3, 0x5, 0xe, 0x4, 0x6, 0x8, 0x4b23, 0xfffffb33, 0x3, 0x0, 0x100, 0x3, 0x200, 0x0, 0x1, 0x2, 0x33, 0xfff, 0x0, 0x2, 0xff, 0x9, 0x8, 0x8b, 0x2, 0x8001, 0x3ff, 0x7, 0x8000, 0x5, 0x9, 0xffff8001, 0x200, 0x0, 0xd, 0x5, 0x583, 0xffffff74, 0x861f, 0x0, 0x8, 0x2, 0x0, 0xe49a, 0x4, 0xf, 0xec, 0x0, 0x7, 0x10, 0x1d, 0x0, 0x9, 0x10, 0x8, 0xd, 0x6, 0xa, 0x5, 0x7, 0x1, 0x2, 0x0, 0xa, 0x0, 0x0, 0x4, 0x20000, 0x8, 0x7fff, 0x10, 0x9, 0xe00, 0x7, 0x3, 0x1, 0xffffff78, 0x0, 0x7, 0x46, 0x8, 0x1, 0xfff, 0x4, 0x7f, 0x1, 0x7, 0x793, 0x4, 0xe, 0x0, 0x2, 0x0, 0x5, 0x2, 0xf, 0x80, 0x200, 0x0, 0x5, 0x800, 0x8, 0x3, 0x7, 0xff, 0x1, 0x6, 0xac6c, 0x0, 0x2, 0xf, 0xfffffff7, 0xc, 0x40, 0x2, 0x9, 0x24c4, 0x8dff, 0x9, 0x8, 0x77d68139, 0x8, 0x1, 0x2, 0x6, 0x1ff, 0x6b6, 0x9, 0xeb98, 0x9, 0x9, 0x7f, 0x1ff, 0x6, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff1, 0x20000000, 0x80, 0x8001, 0xf11f, {0x3, 0x0, 0x8, 0x4185, 0xc28c, 0x81}, {0x9, 0x0, 0xfff9, 0x45, 0x1, 0x4}, 0x6, 0x5, 0x7ff}}]}]}}]}, 0x466c}, 0x1, 0x0, 0x0, 0x50}, 0xc080) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r9, &(0x7f0000001600), 0x0}, 0x20) 978.864543ms ago: executing program 0 (id=1539): ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000480)={{}, 0x0, 0xa, @inherit={0x48, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000000000000000000ffffffff00000000ffffffff00000000100000000000000003000000000000000100000000000000090000000000000001000000000000007b4afdb9506d2687033d5f5bdee60eb32b600bec"]}, @devid}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000040)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}], 0x1}) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) (async) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x1}, 0x2) (async) write$USERIO_CMD_REGISTER(r4, &(0x7f00000001c0)={0x0, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000400)={0x2, 0xfe}, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x50, r1, 0x8000000) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000013c0)=0xffffffffffffffff) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x7, 0x18, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) unshare(0x40000000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24048884) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) 878.615839ms ago: executing program 3 (id=1540): socket$kcm(0x10, 0x2, 0x10) (async) r0 = syz_io_uring_setup(0xbc3, 0x0, 0x0, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES8=r1], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) (async) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'batadv_slave_0\x00'}) 814.948021ms ago: executing program 3 (id=1541): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070115c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400003030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000000)={0x0, 0x2, 0x2c, {0x2c, 0x23, "4bb94d9ce00e24e61ecafffa272d784105c14a6022491430f64edafb4506adccbf0442445d7d40a50edc"}}, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x1, 0x5, 0xc, "69a865fd", "98cd38fc"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0x2, 0x8, 0x81, 0x3, 0x1}}}, &(0x7f0000000600)={0x84, &(0x7f0000000180)={0x0, 0x14, 0x3d, "4f033940b53f5929f34b9638798f5d7cfe982c1b2c9f7c7d23bb32447ea9109de637b20d11a47da290ab98f65300a93a9ec132c9250714046a7c094ac3"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x79}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xc6}, &(0x7f0000000280)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000002c0)={0x20, 0x0, 0x8, {0x0, 0x2, [0xff0]}}, &(0x7f0000000340)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000380)={0x40, 0x9, 0x1, 0xf}, &(0x7f00000003c0)={0x40, 0xb, 0x2, "090e"}, &(0x7f0000000400)={0x40, 0xf, 0x2}, &(0x7f0000000440)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000480)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000004c0)={0x40, 0x19, 0x2, "58cd"}, &(0x7f0000000500)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000000540)={0x40, 0x1c, 0x1, 0x9f}, &(0x7f0000000580)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0x21, 0x1, 0x58}}) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) 719.783251ms ago: executing program 2 (id=1542): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40084c0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000480)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$amidi(&(0x7f0000000300), 0x2, 0x8e000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x80001b0}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x1, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x200000000000, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r4}, 0x18) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x2, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, {0x0, r12}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r13 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {r11}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000440)) r14 = socket(0x10, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r13, @ANYRES32=r15, @ANYBLOB="830004000008000020000000000000000009740014000280050009002900000006000f0003e5fe6024374aa07d53131f53bd7f605cdfa66dbd89dea5e13a24fcb51c81d55195f036253b001cfbe64a6e4d0e3d3e78a6aea5b4f30fd6c67247fe3676ce8ec05425308fe4ccc12b385dbcc672019ecd758ff088c319f94c4c946bd00bfe14911a669ebcbd4f3189ce2abaf6e06652d2bbff7a0ef59a86cfa287152eec55dc71afa56343c2999b62f173468c9d431238fb39a8a9c40f45b4ff7285983dc0964f3ebab8997694c118a082b08d5397aee8084a1628389067b172cbca309fc2ef6d909f3eb91b2a7f65cbd95da07fd633a4d0b4"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 540.912389ms ago: executing program 5 (id=1543): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000700)=0x8, 0x4) socket$packet(0x11, 0x3, 0x300) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xeed, 0x400, 0x1, 0x40000333}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) 0s ago: executing program 5 (id=1544): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b269"], 0x1310}, 0x1, 0x30, 0x0, 0x20000004}, 0x84) kernel console output (not intermixed with test programs): [ 435.452333][ T92] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 435.464173][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 435.490841][ T92] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 435.529425][ T92] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.553609][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.705547][ T9] usb 2-1: config 0 has no interfaces? [ 435.744056][ T43] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 435.763846][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 435.777526][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.795698][ T9] usb 2-1: Product: syz [ 435.819400][ T9] usb 2-1: Manufacturer: syz [ 435.839508][ T92] usb 3-1: USB disconnect, device number 92 [ 435.852332][ T9] usb 2-1: SerialNumber: syz [ 435.888997][ T9] usb 2-1: config 0 descriptor?? [ 435.996358][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.061130][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.091285][ T43] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 436.110986][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 436.154224][ T43] usb 4-1: SerialNumber: syz [ 436.274176][ T5923] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 436.353018][ T5923] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 436.400108][ T5923] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 436.415017][ T43] usb 4-1: 0:2 : does not exist [ 436.427915][ T5923] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 436.453077][ T5923] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 436.471650][T11053] xt_socket: unknown flags 0x8 [ 436.490139][ T43] usb 4-1: USB disconnect, device number 91 [ 436.502097][ T5923] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 436.528735][ T5923] usb 6-1: USB disconnect, device number 2 [ 436.623435][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.746278][T11060] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.1277'. [ 436.803694][T11060] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=#' [ 436.892167][T11060] CPU: 0 UID: 0 PID: 11060 Comm: syz.0.1277 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 436.892197][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.892209][T11060] Call Trace: [ 436.892217][T11060] [ 436.892226][T11060] dump_stack_lvl+0x189/0x250 [ 436.892263][T11060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.892290][T11060] ? __pfx__printk+0x10/0x10 [ 436.892311][T11060] ? kernfs_path_from_node+0x2c/0x260 [ 436.892333][T11060] ? kernfs_path_from_node+0x2c/0x260 [ 436.892352][T11060] ? kernfs_path_from_node+0x2c/0x260 [ 436.892373][T11060] ? kernfs_path_from_node+0x22c/0x260 [ 436.892391][T11060] ? kernfs_path_from_node+0x2c/0x260 [ 436.892413][T11060] sysfs_warn_dup+0x8e/0xa0 [ 436.892433][T11060] sysfs_do_create_link_sd+0xc0/0x110 [ 436.892456][T11060] device_add_class_symlinks+0x1cf/0x240 [ 436.892480][T11060] device_add+0x475/0xb50 [ 436.892504][T11060] wiphy_register+0x199a/0x26b0 [ 436.892541][T11060] ? __pfx_wiphy_register+0x10/0x10 [ 436.892560][T11060] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 436.892600][T11060] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 436.892628][T11060] ieee80211_register_hw+0x33e1/0x4120 [ 436.892669][T11060] ? ieee80211_register_hw+0x1421/0x4120 [ 436.892699][T11060] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 436.892724][T11060] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 436.892756][T11060] ? __hrtimer_setup+0x187/0x210 [ 436.892779][T11060] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 436.892801][T11060] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 436.892860][T11060] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 436.892886][T11060] ? trace_kmalloc+0x1f/0xd0 [ 436.892901][T11060] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 436.892919][T11060] ? kstrndup+0xbf/0x160 [ 436.892951][T11060] hwsim_new_radio_nl+0xea4/0x1b10 [ 436.892991][T11060] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 436.893014][T11060] ? irqentry_exit+0x74/0x90 [ 436.893039][T11060] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.893071][T11060] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 436.893099][T11060] genl_family_rcv_msg_doit+0x212/0x300 [ 436.893132][T11060] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 436.893170][T11060] ? bpf_lsm_capable+0x9/0x20 [ 436.893186][T11060] ? security_capable+0x7e/0x2e0 [ 436.893215][T11060] genl_rcv_msg+0x60e/0x790 [ 436.893247][T11060] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.893269][T11060] ? ref_tracker_free+0x63a/0x7d0 [ 436.893292][T11060] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 436.893311][T11060] ? __pfx_ref_tracker_free+0x10/0x10 [ 436.893347][T11060] netlink_rcv_skb+0x208/0x470 [ 436.893369][T11060] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.893395][T11060] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.893434][T11060] ? down_read+0x1ad/0x2e0 [ 436.893455][T11060] genl_rcv+0x28/0x40 [ 436.893479][T11060] netlink_unicast+0x75b/0x8d0 [ 436.893505][T11060] netlink_sendmsg+0x805/0xb30 [ 436.893534][T11060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.893558][T11060] ? aa_sock_msg_perm+0x94/0x160 [ 436.893588][T11060] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.893610][T11060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.893632][T11060] __sock_sendmsg+0x219/0x270 [ 436.893663][T11060] ____sys_sendmsg+0x505/0x830 [ 436.893692][T11060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.893723][T11060] ? import_iovec+0x74/0xa0 [ 436.893745][T11060] ___sys_sendmsg+0x21f/0x2a0 [ 436.893769][T11060] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.893830][T11060] ? __fget_files+0x2a/0x420 [ 436.893848][T11060] ? __fget_files+0x3a0/0x420 [ 436.893879][T11060] __x64_sys_sendmsg+0x19b/0x260 [ 436.893904][T11060] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.893938][T11060] ? rcu_is_watching+0x15/0xb0 [ 436.893971][T11060] ? do_syscall_64+0xbe/0x3b0 [ 436.893992][T11060] do_syscall_64+0xfa/0x3b0 [ 436.894007][T11060] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.894031][T11060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.894049][T11060] ? clear_bhb_loop+0x60/0xb0 [ 436.894071][T11060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.894088][T11060] RIP: 0033:0x7f6aa058e929 [ 436.894106][T11060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.894122][T11060] RSP: 002b:00007f6aa1457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.894141][T11060] RAX: ffffffffffffffda RBX: 00007f6aa07b5fa0 RCX: 00007f6aa058e929 [ 436.894155][T11060] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 436.894167][T11060] RBP: 00007f6aa0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 436.894180][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.894192][T11060] R13: 0000000000000000 R14: 00007f6aa07b5fa0 R15: 00007f6aa08dfa28 [ 436.894223][T11060] [ 438.285392][ T43] usb 2-1: USB disconnect, device number 90 [ 438.713577][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 438.730649][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 438.741634][T11094] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 438.796607][T11094] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1283'. [ 438.863854][ T9] usb 3-1: device descriptor read/64, error -32 [ 438.972861][T11104] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 439.049295][T11104] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 439.058448][T11104] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 439.070712][T11104] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 439.080785][T11104] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 439.089601][T11104] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 439.102196][T11104] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 439.116348][T11104] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 439.126476][T11104] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 439.134890][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 439.142795][T11104] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 439.283670][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 439.829190][T11121] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:4096x16 (0x38414261, 2, 0, 0, 0) [ 440.033511][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.045339][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.789919][T11121] ucma_write: process 100 (syz.5.1287) changed security contexts after opening file descriptor, this is not allowed. [ 441.014707][T11146] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.1290'. [ 441.056114][ T43] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 441.062450][T11146] debugfs: Directory 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=#' with parent 'ieee80211' already present! [ 442.176285][ T43] usb 4-1: config 0 has no interfaces? [ 442.290848][ T43] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 442.317319][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.354005][ T43] usb 4-1: Product: syz [ 442.402407][ T43] usb 4-1: Manufacturer: syz [ 442.451194][ T43] usb 4-1: SerialNumber: syz [ 442.603188][ T43] usb 4-1: config 0 descriptor?? [ 443.253838][ T43] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 443.267201][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1299'. [ 443.496340][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.500862][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 443.520322][ T9] usb 3-1: can't read configurations, error -71 [ 443.528344][ T9] usb usb3-port1: attempt power cycle [ 443.833861][ T92] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 443.883998][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.994902][ T43] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 444.113915][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 444.145987][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 444.178111][T11206] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1304'. [ 444.303853][ T10] usb 6-1: device descriptor read/64, error -32 [ 444.360976][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.376535][ T43] usb 1-1: config 0 descriptor?? [ 444.505361][ T9] usb 4-1: USB disconnect, device number 92 [ 444.563823][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 444.571713][ T92] usb 2-1: config 0 has no interfaces? [ 444.606359][ T92] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 444.643210][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.669142][ T92] usb 2-1: Product: syz [ 444.687395][ T92] usb 2-1: Manufacturer: syz [ 444.708909][ T92] usb 2-1: SerialNumber: syz [ 444.735969][ T92] usb 2-1: config 0 descriptor?? [ 445.055432][ T10] usb 6-1: config 0 has no interfaces? [ 445.078414][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 445.112654][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.148071][ T10] usb 6-1: Product: syz [ 445.152284][ T10] usb 6-1: Manufacturer: syz [ 445.168434][ T10] usb 6-1: SerialNumber: syz [ 445.199973][ T10] usb 6-1: config 0 descriptor?? [ 445.317307][ T5942] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 445.348468][ T43] usb 1-1: string descriptor 0 read error: -71 [ 445.356128][ T43] uclogic 0003:256C:006E.001B: failed retrieving string descriptor #200: -71 [ 445.448856][ T43] uclogic 0003:256C:006E.001B: failed retrieving pen parameters: -71 [ 445.457567][ T43] uclogic 0003:256C:006E.001B: failed probing pen v2 parameters: -71 [ 445.483046][ T43] uclogic 0003:256C:006E.001B: failed probing parameters: -71 [ 445.511664][ T43] uclogic 0003:256C:006E.001B: probe with driver uclogic failed with error -71 [ 445.536683][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.557457][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 445.618929][ T43] usb 1-1: USB disconnect, device number 118 [ 445.637804][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 445.692410][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 445.715805][ T5942] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 445.727660][ T5942] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 445.751195][ T5942] usb 3-1: Manufacturer: syz [ 445.767088][ T5942] usb 3-1: config 0 descriptor?? [ 446.304107][ T43] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 446.478380][ T43] usb 1-1: config 0 has no interfaces? [ 446.491072][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 446.501195][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.509832][ T43] usb 1-1: Product: syz [ 446.524370][ T43] usb 1-1: Manufacturer: syz [ 446.529222][ T43] usb 1-1: SerialNumber: syz [ 446.544938][ T43] usb 1-1: config 0 descriptor?? [ 446.558705][T11231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.568209][T11231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.903912][ T10] usb 2-1: USB disconnect, device number 91 [ 447.124013][ T43] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 447.143681][ T10] usb 6-1: USB disconnect, device number 4 [ 447.196730][T11238] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1312'. [ 447.485899][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 447.614093][ T5895] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 447.621836][ T5923] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 447.690848][ T43] usb 4-1: config 0 has no interfaces? [ 447.700678][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 447.727410][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.752773][ T43] usb 4-1: config 0 descriptor?? [ 447.844122][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 447.851533][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.865037][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 447.877718][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 447.877904][ T5923] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.899698][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 447.931765][ T5895] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 447.979529][ T5923] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.002596][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.019151][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 448.027979][ T5923] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 448.037953][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.046895][ T5895] usb 2-1: config 0 descriptor?? [ 448.057806][ T5923] usb 6-1: config 0 descriptor?? [ 448.193916][ T5942] rc_core: IR keymap rc-hauppauge not found [ 448.200484][ T5942] Registered IR keymap rc-empty [ 448.212271][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.245994][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.274724][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 448.293101][T11240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.382702][T11240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.398343][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 448.457985][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.494607][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.514344][T11249] fuse: Bad value for 'group_id' [ 448.519514][T11249] fuse: Bad value for 'group_id' [ 448.525228][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.554173][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.589331][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.637487][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.665813][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.677419][T11238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.692666][T11238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.706493][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.742048][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.776879][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.810675][ T5942] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 448.821312][ T5942] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 448.841234][ T5942] usb 3-1: USB disconnect, device number 96 [ 448.851969][ T5923] usbhid 6-1:0.0: can't add hid device: -71 [ 448.861920][ T5923] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 448.898279][ T5923] usb 6-1: USB disconnect, device number 5 [ 448.930062][ T5895] usbhid 2-1:0.0: can't add hid device: -71 [ 448.945360][ T5895] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 448.962776][ T5895] usb 2-1: USB disconnect, device number 92 [ 449.051587][T11256] netlink: 'syz.2.1316': attribute type 1 has an invalid length. [ 449.060567][T11256] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1316'. [ 449.500527][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 449.500544][ T30] audit: type=1326 audit(1750911447.871:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3649f8e929 code=0x7ffc0000 [ 449.539437][ T30] audit: type=1326 audit(1750911447.871:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3649f8e929 code=0x7ffc0000 [ 449.565119][ T30] audit: type=1326 audit(1750911447.881:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3649f8e929 code=0x7ffc0000 [ 449.591278][ T30] audit: type=1326 audit(1750911447.881:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3649f8e929 code=0x7ffc0000 [ 449.623043][ T30] audit: type=1326 audit(1750911447.881:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3649f8e929 code=0x7ffc0000 [ 449.652388][ T30] audit: type=1326 audit(1750911447.881:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3649f8e929 code=0x7ffc0000 [ 449.676121][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 449.684874][ T30] audit: type=1326 audit(1750911447.881:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3649f8e929 code=0x7ffc0000 [ 449.715397][ T30] audit: type=1326 audit(1750911447.881:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3649f8e929 code=0x7ffc0000 [ 449.740159][ T30] audit: type=1326 audit(1750911447.881:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3649f8e929 code=0x7ffc0000 [ 449.798627][ T10] usb 1-1: USB disconnect, device number 119 [ 449.834063][ T30] audit: type=1326 audit(1750911447.881:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3649f8e929 code=0x7ffc0000 [ 449.886060][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.903712][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 449.914122][ T5923] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 449.926110][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 449.946000][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.970527][ T9] usb 6-1: config 0 descriptor?? [ 450.074590][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 450.147349][ T5923] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 450.158654][ T5923] usb 2-1: config 0 has no interface number 0 [ 450.180909][ T92] usb 4-1: USB disconnect, device number 93 [ 450.199957][ T5923] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.230341][ T5923] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.294996][ T5923] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 450.313928][ T10] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 450.351596][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.367311][T11270] tipc: Started in network mode [ 450.383090][T11270] tipc: Node identity 080211000001, cluster identity 4711 [ 450.400502][T11270] tipc: Enabled bearer , priority 0 [ 450.423398][T11271] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 450.441923][T11271] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 450.454691][ T5923] usb 2-1: config 0 descriptor?? [ 450.477353][ T9] kovaplus 0003:1E7D:2D50.001C: item fetching failed at offset 2/5 [ 450.486500][ T10] usb 1-1: device descriptor read/64, error -71 [ 450.503396][T11270] tipc: Resetting bearer [ 450.519031][ T9] kovaplus 0003:1E7D:2D50.001C: parse failed [ 450.546267][ T9] kovaplus 0003:1E7D:2D50.001C: probe with driver kovaplus failed with error -22 [ 450.734722][ T10] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 450.886004][ T10] usb 1-1: device descriptor read/64, error -71 [ 451.039863][ T10] usb usb1-port1: attempt power cycle [ 451.221321][ T5923] uclogic 0003:28BD:0094.001D: pen parameters not found [ 451.233004][ T5923] uclogic 0003:28BD:0094.001D: interface is invalid, ignoring [ 451.254029][ T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 451.383925][ T10] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 451.427921][ T5923] usb 2-1: USB disconnect, device number 93 [ 451.444276][ T24] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 451.454673][ T10] usb 1-1: device descriptor read/8, error -71 [ 451.463454][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.519706][ T24] usb 4-1: config 0 descriptor?? [ 451.533762][ T9] tipc: Node number set to 134418688 [ 451.703753][ T10] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 451.735818][ T10] usb 1-1: device descriptor read/8, error -71 [ 451.863980][ T10] usb usb1-port1: unable to enumerate USB device [ 451.956907][ T24] usb 4-1: Cannot set MAC address [ 451.976352][ T24] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 452.024050][ T24] usb 4-1: USB disconnect, device number 94 [ 452.425651][ T9] usb 6-1: USB disconnect, device number 6 [ 452.523005][T11300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.579051][T11302] fuse: Bad value for 'user_id' [ 452.593625][T11302] fuse: Bad value for 'user_id' [ 452.603655][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 452.621904][T11300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.641965][T11300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.804228][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 452.812231][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 452.824416][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 452.834870][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.844997][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.862442][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.872388][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.943932][ T9] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 453.023939][ T5923] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 453.103604][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 453.117795][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 453.124111][ T10] usbtmc 2-1:16.0: can't read capabilities [ 453.137926][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.169526][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 453.188285][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.202565][ T5923] usb 3-1: config 0 has no interfaces? [ 453.231677][ T9] usb 4-1: config 0 descriptor?? [ 453.241410][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 453.255499][ T5923] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 453.319189][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.332211][T11311] netlink: 'syz.0.1332': attribute type 1 has an invalid length. [ 453.345472][T11311] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1332'. [ 453.353272][T11293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.398093][ T5923] usb 3-1: Product: syz [ 453.454054][ T5923] usb 3-1: Manufacturer: syz [ 453.484426][ T5923] usb 3-1: SerialNumber: syz [ 453.503278][T11293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.674217][ T5923] usb 3-1: config 0 descriptor?? [ 453.682826][T11293] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 453.701963][T11293] netlink: 'syz.1.1326': attribute type 5 has an invalid length. [ 454.187919][ T5923] usb 2-1: USB disconnect, device number 94 [ 454.280919][T11318] netlink: 'syz.5.1333': attribute type 7 has an invalid length. [ 454.435821][T11316] syz.5.1333 (11316): drop_caches: 2 [ 454.441694][T11316] syz.5.1333 (11316): drop_caches: 2 [ 454.790948][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 454.790997][ T30] audit: type=1326 audit(1750911453.161:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11305 comm="syz.3.1331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c0458e929 code=0x0 [ 455.084070][ T24] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 455.224028][ T24] usb 2-1: device descriptor read/64, error -71 [ 455.473926][ T24] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 455.607545][ T24] usb 2-1: device descriptor read/64, error -71 [ 455.635692][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1336'. [ 455.724368][ T24] usb usb2-port1: attempt power cycle [ 456.066183][ T24] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 456.092712][ T10] usb 3-1: USB disconnect, device number 97 [ 456.116521][ T24] usb 2-1: device descriptor read/8, error -71 [ 456.166221][T11336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'. [ 456.364328][ T24] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 456.400318][ T24] usb 2-1: device descriptor read/8, error -71 [ 456.550312][ T24] usb usb2-port1: unable to enumerate USB device [ 456.580979][ T10] usb 4-1: USB disconnect, device number 95 [ 456.673885][ T5895] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 457.038605][T11358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.085527][ T5895] usb 3-1: config 0 has no interfaces? [ 457.151518][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 457.162661][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.172673][T11358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.192043][ T5895] usb 3-1: Product: syz [ 457.197111][ T5895] usb 3-1: Manufacturer: syz [ 457.202118][ T5895] usb 3-1: SerialNumber: syz [ 457.204259][T11358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.222970][ T5895] usb 3-1: config 0 descriptor?? [ 458.277060][T11375] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 458.425779][T11375] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1347'. [ 459.115210][T11388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.198701][T11391] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1352'. [ 459.239805][T11388] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 459.247118][T11391] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²i' [ 459.259247][T11391] CPU: 0 UID: 0 PID: 11391 Comm: syz.3.1352 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 459.259272][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 459.259283][T11391] Call Trace: [ 459.259291][T11391] [ 459.259298][T11391] dump_stack_lvl+0x189/0x250 [ 459.259333][T11391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.259359][T11391] ? __pfx__printk+0x10/0x10 [ 459.259378][T11391] ? kernfs_path_from_node+0x2c/0x260 [ 459.259399][T11391] ? kernfs_path_from_node+0x2c/0x260 [ 459.259416][T11391] ? kernfs_path_from_node+0x2c/0x260 [ 459.259436][T11391] ? kernfs_path_from_node+0x22c/0x260 [ 459.259451][T11391] ? kernfs_path_from_node+0x2c/0x260 [ 459.259472][T11391] sysfs_warn_dup+0x8e/0xa0 [ 459.259503][T11391] sysfs_do_create_link_sd+0xc0/0x110 [ 459.259523][T11391] device_add_class_symlinks+0x1cf/0x240 [ 459.259547][T11391] device_add+0x475/0xb50 [ 459.259570][T11391] wiphy_register+0x199a/0x26b0 [ 459.259608][T11391] ? __pfx_wiphy_register+0x10/0x10 [ 459.259625][T11391] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 459.259654][T11391] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 459.259680][T11391] ieee80211_register_hw+0x33e1/0x4120 [ 459.259718][T11391] ? ieee80211_register_hw+0x1421/0x4120 [ 459.259746][T11391] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 459.259772][T11391] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 459.259799][T11391] ? __hrtimer_setup+0x187/0x210 [ 459.259819][T11391] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 459.259836][T11391] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 459.259885][T11391] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 459.259906][T11391] ? trace_kmalloc+0x1f/0xd0 [ 459.259920][T11391] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 459.259938][T11391] ? kstrndup+0xbf/0x160 [ 459.259969][T11391] hwsim_new_radio_nl+0xea4/0x1b10 [ 459.259991][T11391] ? __pfx___nla_validate_parse+0x10/0x10 [ 459.260032][T11391] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 459.260055][T11391] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 459.260090][T11391] ? __nla_parse+0x40/0x60 [ 459.260124][T11391] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 459.260158][T11391] genl_family_rcv_msg_doit+0x212/0x300 [ 459.260191][T11391] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 459.260231][T11391] ? bpf_lsm_capable+0x9/0x20 [ 459.260247][T11391] ? security_capable+0x7e/0x2e0 [ 459.260273][T11391] genl_rcv_msg+0x60e/0x790 [ 459.260303][T11391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.260321][T11391] ? ref_tracker_free+0x63a/0x7d0 [ 459.260333][T11391] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 459.260343][T11391] ? __pfx_ref_tracker_free+0x10/0x10 [ 459.260361][T11391] netlink_rcv_skb+0x208/0x470 [ 459.260372][T11391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.260387][T11391] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.260409][T11391] ? down_read+0x1ad/0x2e0 [ 459.260420][T11391] genl_rcv+0x28/0x40 [ 459.260431][T11391] netlink_unicast+0x75b/0x8d0 [ 459.260447][T11391] netlink_sendmsg+0x805/0xb30 [ 459.260463][T11391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.260476][T11391] ? aa_sock_msg_perm+0x94/0x160 [ 459.260495][T11391] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.260508][T11391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.260519][T11391] __sock_sendmsg+0x219/0x270 [ 459.260536][T11391] ____sys_sendmsg+0x505/0x830 [ 459.260551][T11391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.260569][T11391] ? import_iovec+0x74/0xa0 [ 459.260581][T11391] ___sys_sendmsg+0x21f/0x2a0 [ 459.260594][T11391] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.260626][T11391] ? __fget_files+0x2a/0x420 [ 459.260636][T11391] ? __fget_files+0x3a0/0x420 [ 459.260652][T11391] __x64_sys_sendmsg+0x19b/0x260 [ 459.260665][T11391] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.260682][T11391] ? rcu_is_watching+0x15/0xb0 [ 459.260699][T11391] ? do_syscall_64+0xbe/0x3b0 [ 459.260710][T11391] do_syscall_64+0xfa/0x3b0 [ 459.260718][T11391] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.260730][T11391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.260740][T11391] ? clear_bhb_loop+0x60/0xb0 [ 459.260751][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.260761][T11391] RIP: 0033:0x7f1c0458e929 [ 459.260771][T11391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.260780][T11391] RSP: 002b:00007f1c0540a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.260793][T11391] RAX: ffffffffffffffda RBX: 00007f1c047b5fa0 RCX: 00007f1c0458e929 [ 459.260800][T11391] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 459.260807][T11391] RBP: 00007f1c04610b39 R08: 0000000000000000 R09: 0000000000000000 [ 459.260813][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.260819][T11391] R13: 0000000000000000 R14: 00007f1c047b5fa0 R15: 00007f1c048dfa28 [ 459.260836][T11391] [ 460.394649][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 460.584470][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 460.619668][ T10] usb 4-1: config 0 has no interfaces? [ 460.636968][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 460.699812][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.739062][ T10] usb 4-1: config 0 descriptor?? [ 460.767070][ T5923] usb 3-1: USB disconnect, device number 98 [ 462.196599][ T9] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 462.405431][ T9] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 462.526630][ T9] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 462.583950][ T5923] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 462.609665][T11445] cgroup: fork rejected by pids controller in /syz5 [ 462.679564][ T9] usb 2-1: config 8 has no interface number 0 [ 462.739179][ T9] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 462.756291][ T5923] usb 1-1: No LPM exit latency info found, disabling LPM. [ 462.771501][ T5923] usb 1-1: string descriptor 0 read error: -22 [ 462.797286][ T5923] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 462.814970][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.840663][ T5923] usb 1-1: config 0 descriptor?? [ 462.950305][ T9] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 463.051674][ T5923] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 463.078815][ T5923] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 463.104613][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.108228][ T5923] dib0700: firmware download failed at 7 with -22 [ 463.166942][ T5923] usb 1-1: USB disconnect, device number 124 [ 463.168646][ T9] usb 2-1: Product: syz [ 463.187288][ T9] usb 2-1: Manufacturer: syz [ 463.218714][ T9] usb 2-1: SerialNumber: syz [ 463.322923][ T92] usb 4-1: USB disconnect, device number 96 [ 463.447250][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.468877][T11433] FAULT_INJECTION: forcing a failure. [ 463.468877][T11433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.493581][T11433] CPU: 0 UID: 0 PID: 11433 Comm: syz.1.1363 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 463.493610][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.493621][T11433] Call Trace: [ 463.493629][T11433] [ 463.493638][T11433] dump_stack_lvl+0x189/0x250 [ 463.493667][T11433] ? __pfx____ratelimit+0x10/0x10 [ 463.493691][T11433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.493716][T11433] ? __pfx__printk+0x10/0x10 [ 463.493736][T11433] ? __might_fault+0xb0/0x130 [ 463.493763][T11433] should_fail_ex+0x414/0x560 [ 463.493790][T11433] _copy_from_user+0x2d/0xb0 [ 463.493809][T11433] do_sock_getsockopt+0x1cd/0x650 [ 463.493834][T11433] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 463.493853][T11433] ? do_syscall_64+0x40/0x3b0 [ 463.493866][T11433] ? __fget_files+0x3a0/0x420 [ 463.493884][T11433] ? __fget_files+0x2a/0x420 [ 463.493909][T11433] __x64_sys_getsockopt+0x1a5/0x250 [ 463.493928][T11433] ? do_syscall_64+0x40/0x3b0 [ 463.493942][T11433] ? do_syscall_64+0x40/0x3b0 [ 463.493958][T11433] do_syscall_64+0xfa/0x3b0 [ 463.493971][T11433] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.493992][T11433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.494006][T11433] ? clear_bhb_loop+0x60/0xb0 [ 463.494026][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.494042][T11433] RIP: 0033:0x7f3649f8e929 [ 463.494058][T11433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.494071][T11433] RSP: 002b:00007f364ada5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 463.494089][T11433] RAX: ffffffffffffffda RBX: 00007f364a1b5fa0 RCX: 00007f3649f8e929 [ 463.494102][T11433] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000005 [ 463.494114][T11433] RBP: 00007f364ada5090 R08: 00002000000000c0 R09: 0000000000000000 [ 463.494125][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.494135][T11433] R13: 0000000000000000 R14: 00007f364a1b5fa0 R15: 00007f364a2dfa28 [ 463.494162][T11433] [ 463.725400][ T9] usb 2-1: USB disconnect, device number 99 [ 463.759932][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.005967][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.323268][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 464.334879][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 464.343274][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 464.353426][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 464.361772][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 464.404789][T11551] netlink: 'syz.3.1371': attribute type 3 has an invalid length. [ 464.412922][T11551] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1371'. [ 464.627930][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.134293][ T5923] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 465.254146][ T24] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 465.333954][ T9] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 465.361820][ T5923] usb 2-1: config 0 has no interfaces? [ 465.414162][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 465.514014][ T24] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 465.602875][ T13] bridge_slave_1: left allmulticast mode [ 465.635306][ T13] bridge_slave_1: left promiscuous mode [ 465.638592][ T5923] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 465.651688][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.655172][ T24] usb 4-1: config 0 has no interface number 0 [ 465.680379][ T13] bridge_slave_0: left allmulticast mode [ 465.687869][ T9] usb 1-1: config 0 has no interfaces? [ 465.703904][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.718559][ T24] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 465.728311][ T5923] usb 2-1: Product: syz [ 465.735804][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.744417][ T5923] usb 2-1: Manufacturer: syz [ 465.749031][ T5923] usb 2-1: SerialNumber: syz [ 465.753607][ T13] bridge_slave_0: left promiscuous mode [ 465.753867][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.770077][ T24] usb 4-1: config 0 descriptor?? [ 465.784566][ T5923] usb 2-1: config 0 descriptor?? [ 465.840539][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 465.935847][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.977941][ T9] usb 1-1: Product: syz [ 465.982126][ T9] usb 1-1: Manufacturer: syz [ 466.001636][ T9] usb 1-1: SerialNumber: syz [ 466.212931][ T9] usb 1-1: config 0 descriptor?? [ 466.282496][ T5923] usb 4-1: USB disconnect, device number 97 [ 466.320046][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 466.413853][ T5829] Bluetooth: hci4: command tx timeout [ 467.598169][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.620284][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.644239][ T13] bond0 (unregistering): Released all slaves [ 467.698910][T11562] chnl_net:caif_netlink_parms(): no params data found [ 467.954023][ T13] : left promiscuous mode [ 468.234154][ T24] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 468.405571][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 468.429773][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.494205][ T5829] Bluetooth: hci4: command tx timeout [ 468.547182][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.590856][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 468.619174][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 468.623614][T11562] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.634007][ T24] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 468.662302][ T24] usb 3-1: Manufacturer: syz [ 468.662404][T11562] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.684305][ T24] usb 3-1: config 0 descriptor?? [ 468.726412][T11562] bridge_slave_0: entered allmulticast mode [ 468.760708][T11562] bridge_slave_0: entered promiscuous mode [ 468.802823][T11562] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.822723][T11562] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.832229][T11562] bridge_slave_1: entered allmulticast mode [ 468.847472][T11562] bridge_slave_1: entered promiscuous mode [ 468.899827][ T13] hsr_slave_0: left promiscuous mode [ 468.906739][ T13] hsr_slave_1: left promiscuous mode [ 468.913099][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.933216][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.957444][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.972159][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.088705][ T13] veth1_macvtap: left promiscuous mode [ 469.099629][ T13] veth0_macvtap: left promiscuous mode [ 469.106850][ T13] veth1_vlan: left promiscuous mode [ 469.112413][ T13] veth0_vlan: left promiscuous mode [ 469.144095][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 469.165849][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 469.211199][ T24] usb 3-1: USB disconnect, device number 99 [ 469.463852][ T92] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 469.624006][ T92] usb 4-1: Using ep0 maxpacket: 16 [ 469.815583][ T92] usb 4-1: config 0 has no interfaces? [ 469.824909][ T92] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 469.844106][ T24] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 469.851317][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.887531][ T92] usb 4-1: config 0 descriptor?? [ 470.048685][ T24] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 470.074025][ T24] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 470.097828][ T24] usb 3-1: config 8 has no interface number 0 [ 470.114314][ T24] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 470.130213][ T24] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 470.140008][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.149007][ T24] usb 3-1: Product: syz [ 470.153203][ T24] usb 3-1: Manufacturer: syz [ 470.158982][ T24] usb 3-1: SerialNumber: syz [ 470.372619][T11628] FAULT_INJECTION: forcing a failure. [ 470.372619][T11628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.386752][T11628] CPU: 1 UID: 0 PID: 11628 Comm: syz.2.1384 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 470.386771][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.386778][T11628] Call Trace: [ 470.386782][T11628] [ 470.386787][T11628] dump_stack_lvl+0x189/0x250 [ 470.386806][T11628] ? __pfx____ratelimit+0x10/0x10 [ 470.386821][T11628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.386835][T11628] ? __pfx__printk+0x10/0x10 [ 470.386852][T11628] should_fail_ex+0x414/0x560 [ 470.386870][T11628] _copy_to_user+0x31/0xb0 [ 470.386881][T11628] simple_read_from_buffer+0xe1/0x170 [ 470.386895][T11628] proc_fail_nth_read+0x1df/0x250 [ 470.386909][T11628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.386921][T11628] ? rw_verify_area+0x258/0x650 [ 470.386935][T11628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.386947][T11628] vfs_read+0x200/0x980 [ 470.386963][T11628] ? __pfx___mutex_lock+0x10/0x10 [ 470.386978][T11628] ? __pfx_vfs_read+0x10/0x10 [ 470.386993][T11628] ? __fget_files+0x2a/0x420 [ 470.387006][T11628] ? __fget_files+0x3a0/0x420 [ 470.387015][T11628] ? __fget_files+0x2a/0x420 [ 470.387029][T11628] ksys_read+0x145/0x250 [ 470.387044][T11628] ? __pfx_ksys_read+0x10/0x10 [ 470.387056][T11628] ? fput+0xa0/0xd0 [ 470.387070][T11628] ? do_syscall_64+0xbe/0x3b0 [ 470.387080][T11628] do_syscall_64+0xfa/0x3b0 [ 470.387089][T11628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.387098][T11628] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 470.387108][T11628] ? clear_bhb_loop+0x60/0xb0 [ 470.387119][T11628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.387129][T11628] RIP: 0033:0x7fbe79f8d33c [ 470.387138][T11628] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 470.387147][T11628] RSP: 002b:00007fbe7aee0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 470.387158][T11628] RAX: ffffffffffffffda RBX: 00007fbe7a1b5fa0 RCX: 00007fbe79f8d33c [ 470.387166][T11628] RDX: 000000000000000f RSI: 00007fbe7aee00a0 RDI: 0000000000000006 [ 470.387172][T11628] RBP: 00007fbe7aee0090 R08: 0000000000000000 R09: 0000000000000000 [ 470.387178][T11628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.387183][T11628] R13: 0000000000000000 R14: 00007fbe7a1b5fa0 R15: 00007fbe7a2dfa28 [ 470.387198][T11628] [ 470.626305][ T5829] Bluetooth: hci4: command tx timeout [ 470.645617][ T24] usb 3-1: USB disconnect, device number 100 [ 472.215519][T11645] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1386'. [ 472.221041][ T92] usb 2-1: USB disconnect, device number 100 [ 472.460374][ T92] usb 1-1: USB disconnect, device number 125 [ 472.716809][ T5829] Bluetooth: hci4: command tx timeout [ 473.143579][ T10] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 473.604287][ T10] usb 1-1: too many configurations: 22, using maximum allowed: 8 [ 473.645156][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 473.655044][ T13] team0 (unregistering): Port device team_slave_1 removed [ 473.663536][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.684884][ T10] usb 1-1: Product: syz [ 473.689098][ T10] usb 1-1: Manufacturer: syz [ 473.694151][ T10] usb 1-1: SerialNumber: syz [ 473.708554][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 473.756232][ T92] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 474.054066][ T13] team0 (unregistering): Port device team_slave_0 removed [ 474.271204][T11663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.297559][T11663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.323652][T11663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.354734][T11663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.891190][T11676] netlink: 'syz.0.1391': attribute type 4 has an invalid length. [ 475.143864][ T92] usb 1-1: Service connection timeout for: 256 [ 475.150111][ T92] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 475.200857][ T43] usb 4-1: USB disconnect, device number 98 [ 475.257873][ T92] ath9k_htc: Failed to initialize the device [ 475.411989][ T92] usb 1-1: ath9k_htc: USB layer deinitialized [ 475.450771][T11562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.558139][ T10] usb 1-1: USB disconnect, device number 126 [ 475.639531][T11562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.914138][ T92] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 476.151597][ T92] usb 3-1: Using ep0 maxpacket: 16 [ 476.254510][T11562] team0: Port device team_slave_0 added [ 476.302393][T11562] team0: Port device team_slave_1 added [ 476.384243][ T92] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.401390][ T92] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.413356][ T92] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 476.422587][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.434849][ T92] usb 3-1: config 0 descriptor?? [ 476.577342][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 476.702063][T11700] netlink: 'syz.3.1394': attribute type 7 has an invalid length. [ 476.904868][T11562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.924529][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.924586][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 476.951297][T11562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.986776][T11562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.008261][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.042279][T11693] syz.3.1394 (11693): drop_caches: 2 [ 477.076934][ T43] usb 3-1: USB disconnect, device number 101 [ 477.099832][T11693] syz.3.1394 (11693): drop_caches: 2 [ 477.130006][T11562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.298299][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 477.313394][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.322462][ T10] usb 2-1: Product: syz [ 477.326708][ T10] usb 2-1: Manufacturer: syz [ 477.331487][ T10] usb 2-1: SerialNumber: syz [ 477.359841][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 477.377006][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 477.603177][ T10] r8152-cfgselector 2-1: Needed 1 retries to read version [ 477.604905][T11562] hsr_slave_0: entered promiscuous mode [ 477.641126][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 477.647805][ T92] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 477.654121][ T5923] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 477.675454][ T10] r8152-cfgselector 2-1: bad CDC descriptors [ 477.728095][T11562] hsr_slave_1: entered promiscuous mode [ 477.746828][T11562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.766658][T11562] Cannot create hsr debugfs directory [ 478.005873][ T92] usb 3-1: config 0 has no interfaces? [ 478.047262][ T5923] usb 1-1: config 0 has no interfaces? [ 478.076867][ T92] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 478.133259][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 478.156696][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.216251][ T92] usb 3-1: Product: syz [ 478.221779][ T5923] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 478.242649][ T92] usb 3-1: Manufacturer: syz [ 478.257736][ T92] usb 3-1: SerialNumber: syz [ 478.280697][ T92] usb 3-1: config 0 descriptor?? [ 478.342221][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.358280][T11725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.418544][ T5923] usb 1-1: Product: syz [ 478.429559][T11725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.450745][ T5923] usb 1-1: Manufacturer: syz [ 478.492326][ T5923] usb 1-1: SerialNumber: syz [ 478.514793][ T5923] usb 1-1: config 0 descriptor?? [ 479.673424][ T5923] r8152-cfgselector 2-1: USB disconnect, device number 101 [ 480.124395][ T5923] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 480.313980][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 480.326360][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 480.347049][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.396394][ T5923] usb 2-1: config 0 descriptor?? [ 480.411772][ T92] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 480.424687][ T5923] pwc: Logitech QuickCam Zoom USB webcam detected. [ 480.431214][ T5923] pwc: Warning: more than 1 configuration available. [ 480.634829][ T5923] pwc: Failed to set LED on/off time (-71) [ 480.651113][ T5923] pwc: send_video_command error -71 [ 480.660821][ T5923] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 480.671328][ T5923] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 480.687931][ T5923] usb 2-1: USB disconnect, device number 102 [ 480.917591][ T92] usb 4-1: config 0 has no interfaces? [ 480.986942][T11562] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 481.073106][ T10] usb 3-1: USB disconnect, device number 102 [ 481.370387][T11562] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 481.394351][ T92] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 481.450812][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.467491][ T92] usb 4-1: Product: syz [ 481.475668][T11562] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 481.482795][ T92] usb 4-1: Manufacturer: syz [ 481.488450][ T92] usb 4-1: SerialNumber: syz [ 481.499581][ T92] usb 4-1: config 0 descriptor?? [ 481.518486][T11562] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 481.525332][ T10] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 481.704780][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.802271][ T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.814003][ T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.824265][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 481.830883][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 481.866918][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.179143][ T10] usb 3-1: config 0 descriptor?? [ 482.575971][T11766] netlink: 'syz.1.1403': attribute type 7 has an invalid length. [ 482.588838][T11763] syz.1.1403 (11763): drop_caches: 2 [ 482.607188][T11763] syz.1.1403 (11763): drop_caches: 2 [ 482.662639][ T10] kye 0003:0458:5015.001E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 482.701296][ T10] kye 0003:0458:5015.001E: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 482.730711][T11562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.743504][ T10] kye 0003:0458:5015.001E: tablet-enabling feature report not found [ 482.771929][ T10] kye 0003:0458:5015.001E: tablet enabling failed [ 482.785208][T11562] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.839319][ T10] usb 3-1: USB disconnect, device number 103 [ 482.947265][T11562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.012910][T11562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.031515][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.038768][ T4065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.055256][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.062496][ T4065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.259440][T11562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.496835][T11562] veth0_vlan: entered promiscuous mode [ 483.588506][T11562] veth1_vlan: entered promiscuous mode [ 483.756200][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 483.789815][T11562] veth0_macvtap: entered promiscuous mode [ 483.806946][T11782] openvswitch: netlink: nsh attr 8224 is out of range max 3 [ 483.834371][T11562] veth1_macvtap: entered promiscuous mode [ 483.846872][T11782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.909196][T11562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.000023][T11562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.037598][T11562] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.066632][T11562] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.095688][T11562] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.113600][T11562] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.296989][ T10] usb 4-1: USB disconnect, device number 99 [ 484.640764][ T92] usb 1-1: USB disconnect, device number 127 [ 484.860934][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.880408][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.912976][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.921976][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.033798][ T92] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 485.294948][ T92] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 485.384077][ T92] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 485.410520][ T92] usb 1-1: config 8 has no interface number 0 [ 485.448178][ T92] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 485.510428][ T92] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 485.534309][ T5908] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 485.544035][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.561093][ T92] usb 1-1: Product: syz [ 485.567505][ T92] usb 1-1: Manufacturer: syz [ 485.572252][ T92] usb 1-1: SerialNumber: syz [ 485.664444][T11831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.718395][ T5908] usb 3-1: unable to get BOS descriptor or descriptor too short [ 485.738463][ T5908] usb 3-1: config 0 has no interfaces? [ 485.748337][ T5908] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 485.771411][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.787075][T11832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.796073][ T5908] usb 3-1: Product: syz [ 485.841097][ T5908] usb 3-1: Manufacturer: syz [ 485.891894][ T5908] usb 3-1: SerialNumber: syz [ 485.947404][ T5908] usb 3-1: config 0 descriptor?? [ 486.292072][T11841] fuse: Bad value for 'group_id' [ 486.335172][T11841] fuse: Bad value for 'group_id' [ 486.512442][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'. [ 486.978165][T11843] netlink: 'syz.2.1412': attribute type 5 has an invalid length. [ 487.205110][ T5923] usb 3-1: USB disconnect, device number 104 [ 487.277758][T11860] netlink: 'syz.5.1419': attribute type 1 has an invalid length. [ 487.295062][ T92] usb 1-1: USB disconnect, device number 2 [ 487.566224][T11875] netlink: 548 bytes leftover after parsing attributes in process `syz.5.1419'. [ 487.644007][ T5929] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 487.841234][ T5929] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.887652][ T5929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.919612][ T5929] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 487.945288][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 487.980308][ T5929] usb 2-1: SerialNumber: syz [ 488.233000][ T5929] usb 2-1: 0:2 : does not exist [ 488.272025][ T5929] usb 2-1: USB disconnect, device number 103 [ 488.397970][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.154235][ T5923] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 489.373980][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 489.440763][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.593341][ T5923] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 489.716672][ T5923] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e6.00 [ 489.767296][ T5923] usb 2-1: New USB device strings: Mfr=88, Product=235, SerialNumber=123 [ 489.976019][ T5923] usb 2-1: Product: syz [ 490.097208][ T5923] usb 2-1: Manufacturer: syz [ 490.152412][ T5923] usb 2-1: SerialNumber: syz [ 490.195277][ T5923] usb 2-1: config 0 descriptor?? [ 490.268332][T11924] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1429'. [ 490.551808][ T43] usb 2-1: USB disconnect, device number 104 [ 490.558615][ T5923] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 490.674149][T11931] fuse: Bad value for 'group_id' [ 490.679149][T11931] fuse: Bad value for 'group_id' [ 490.763549][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 490.855948][ T5923] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 490.874998][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.887023][ T5923] usb 3-1: Product: syz [ 490.891234][ T5923] usb 3-1: Manufacturer: syz [ 490.903994][ T5923] usb 3-1: SerialNumber: syz [ 490.919843][ T5923] usb 3-1: config 0 descriptor?? [ 491.140165][ T5923] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 491.966302][ T92] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 492.143804][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 492.174921][ T92] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 492.205284][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.239582][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1434'. [ 492.259350][ T92] usb 2-1: Product: syz [ 492.265889][ T92] usb 2-1: Manufacturer: syz [ 492.283329][T11967] vlan2: entered promiscuous mode [ 492.289191][ T92] usb 2-1: SerialNumber: syz [ 492.302937][T11967] bond0: entered promiscuous mode [ 492.314817][T11967] bond_slave_0: entered promiscuous mode [ 492.341905][ T92] usb 2-1: config 0 descriptor?? [ 492.369069][ T92] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 492.383890][T11967] bond_slave_1: entered promiscuous mode [ 492.770473][ T5923] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 492.924809][ T5923] usb 3-1: USB disconnect, device number 105 [ 493.434054][T11959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.461715][T11959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.725600][ T92] gspca_sonixj: reg_w1 err -110 [ 493.740440][T11982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.765286][ T92] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 493.818428][T11980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.986352][T11984] netlink: 'syz.2.1436': attribute type 7 has an invalid length. [ 495.109836][T11981] syz.2.1436 (11981): drop_caches: 2 [ 495.178724][ T92] usb 2-1: USB disconnect, device number 105 [ 495.233615][ T5929] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 495.255939][T11981] syz.2.1436 (11981): drop_caches: 2 [ 495.316165][T11996] netlink: 'syz.3.1443': attribute type 1 has an invalid length. [ 495.491335][T11996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.504890][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 495.604393][ T5929] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 495.627032][ T5908] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 495.648095][ T5929] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.668519][ T5929] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 495.697178][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.722724][ T5929] usb 6-1: Product: syz [ 495.731708][ T5929] usb 6-1: Manufacturer: syz [ 495.745134][ T5929] usb 6-1: SerialNumber: syz [ 495.807300][ T5908] usb 1-1: config 0 has no interfaces? [ 495.826698][ T5908] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 495.843270][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.855663][ T5908] usb 1-1: Product: syz [ 495.860212][ T5908] usb 1-1: Manufacturer: syz [ 495.880169][ T5908] usb 1-1: SerialNumber: syz [ 495.895371][ T5908] usb 1-1: config 0 descriptor?? [ 495.943980][ T5923] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 496.026296][ T5929] usb 6-1: 0:2 : does not exist [ 496.111682][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 496.128294][ T5929] usb 6-1: USB disconnect, device number 7 [ 496.166414][ T5923] usb 2-1: config 0 has no interfaces? [ 496.179926][ T5923] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 496.190693][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.209494][ T5923] usb 2-1: Product: syz [ 496.214915][ T5923] usb 2-1: Manufacturer: syz [ 496.219505][ T5923] usb 2-1: SerialNumber: syz [ 496.238721][ T5923] usb 2-1: config 0 descriptor?? [ 496.375882][T12027] bridge1: entered promiscuous mode [ 496.487236][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 496.512202][T12013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.563376][T12013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.616495][ T43] usb 2-1: USB disconnect, device number 106 [ 496.674253][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 496.740672][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 496.782131][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.800245][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 496.819105][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.00 [ 496.832763][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.851120][ T24] usb 4-1: config 0 descriptor?? [ 496.939130][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1451'. [ 497.054109][ T43] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 497.264028][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 497.324935][ T43] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 497.333298][ T43] usb 2-1: config 0 has no interface number 0 [ 497.357599][ T24] apple 0003:05AC:0214.001F: collection stack underflow [ 497.374218][ T43] usb 2-1: config 0 interface 237 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.388766][ T24] apple 0003:05AC:0214.001F: item 0 2 0 12 parsing failed [ 497.432644][ T24] apple 0003:05AC:0214.001F: parse failed [ 497.439149][ T43] usb 2-1: config 0 interface 237 has no altsetting 0 [ 497.463311][ T24] apple 0003:05AC:0214.001F: probe with driver apple failed with error -22 [ 497.481435][ T43] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=2a.b3 [ 497.493912][ T92] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 497.515432][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.547815][ T43] usb 2-1: Product: syz [ 497.554894][ T43] usb 2-1: Manufacturer: syz [ 497.564729][ T5929] usb 4-1: USB disconnect, device number 100 [ 497.578539][ T43] usb 2-1: SerialNumber: syz [ 497.620749][ T43] usb 2-1: config 0 descriptor?? [ 497.630227][ T43] em28xx 2-1:0.237: New device syz syz @ 480 Mbps (eb1a:e303, interface 237, class 237) [ 497.642238][ T43] em28xx 2-1:0.237: Video interface 237 found: [ 497.666140][ T92] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 497.688877][ T92] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.724543][ T92] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 497.743133][ T92] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 497.761450][ T92] usb 6-1: Product: syz [ 497.771652][ T92] usb 6-1: Manufacturer: syz [ 497.800936][ T92] hub 6-1:4.0: USB hub found [ 497.995588][T12035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.004744][T12035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.022686][ T92] hub 6-1:4.0: 6 ports detected [ 498.032641][ T92] hub 6-1:4.0: insufficient power available to use all downstream ports [ 498.169622][T12037] netlink: 'syz.3.1453': attribute type 1 has an invalid length. [ 498.215242][T12037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.231808][T12035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.245006][ T43] em28xx 2-1:0.237: chip ID is em2710/2820 [ 498.252384][T12035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.285014][ T92] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 498.292641][ T92] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 498.325505][ T92] usb 6-1: USB disconnect, device number 8 [ 498.548170][ T43] em28xx 2-1:0.237: reading from i2c device at 0xa0 failed (error=-5) [ 498.563111][ T43] em28xx 2-1:0.237: board has no eeprom [ 498.619619][ T92] usb 1-1: USB disconnect, device number 3 [ 498.625602][T12041] FAULT_INJECTION: forcing a failure. [ 498.625602][T12041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.639623][ T43] em28xx 2-1:0.237: Identified as Kaiomy TVnPC U2 (card=63) [ 498.648273][ T43] em28xx 2-1:0.237: analog set to bulk mode. [ 498.653675][T12041] CPU: 0 UID: 0 PID: 12041 Comm: syz.3.1454 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 498.653700][T12041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.653712][T12041] Call Trace: [ 498.653720][T12041] [ 498.653729][T12041] dump_stack_lvl+0x189/0x250 [ 498.653762][T12041] ? __pfx____ratelimit+0x10/0x10 [ 498.653785][T12041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.653808][T12041] ? __pfx__printk+0x10/0x10 [ 498.653828][T12041] ? __pfx___mutex_lock+0x10/0x10 [ 498.653860][T12041] should_fail_ex+0x414/0x560 [ 498.653886][T12041] _copy_to_user+0x31/0xb0 [ 498.653904][T12041] drm_mode_getconnector+0xc7e/0x1370 [ 498.653938][T12041] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 498.653956][T12041] ? drm_dev_enter+0x49/0x150 [ 498.653996][T12041] drm_ioctl_kernel+0x2cf/0x390 [ 498.654018][T12041] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 498.654043][T12041] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 498.654074][T12041] drm_ioctl+0x67f/0xb10 [ 498.654097][T12041] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 498.654122][T12041] ? __pfx_drm_ioctl+0x10/0x10 [ 498.654155][T12041] ? __fget_files+0x2a/0x420 [ 498.654177][T12041] ? bpf_lsm_file_ioctl+0x9/0x20 [ 498.654199][T12041] ? __pfx_drm_ioctl+0x10/0x10 [ 498.654219][T12041] __se_sys_ioctl+0xf9/0x170 [ 498.654244][T12041] do_syscall_64+0xfa/0x3b0 [ 498.654258][T12041] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.654278][T12041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.654293][T12041] ? clear_bhb_loop+0x60/0xb0 [ 498.654311][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.654325][T12041] RIP: 0033:0x7f1c0458e929 [ 498.654341][T12041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.654354][T12041] RSP: 002b:00007f1c0540a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.654372][T12041] RAX: ffffffffffffffda RBX: 00007f1c047b5fa0 RCX: 00007f1c0458e929 [ 498.654385][T12041] RDX: 0000200000000600 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 498.654396][T12041] RBP: 00007f1c0540a090 R08: 0000000000000000 R09: 0000000000000000 [ 498.654407][T12041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.654417][T12041] R13: 0000000000000000 R14: 00007f1c047b5fa0 R15: 00007f1c048dfa28 [ 498.654446][T12041] [ 498.917581][ T24] em28xx 2-1:0.237: Registering V4L2 extension [ 498.949532][ T43] usb 2-1: USB disconnect, device number 107 [ 498.985690][ T43] em28xx 2-1:0.237: Disconnecting em28xx [ 499.330941][ T24] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 499.490944][ T24] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 499.537743][ T30] audit: type=1326 audit(1750911497.911:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12056 comm="syz.3.1459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c0458e929 code=0x0 [ 500.880758][T12059] syz.5.1456 (12059): drop_caches: 2 [ 500.955321][T12059] syz.5.1456 (12059): drop_caches: 2 [ 500.955500][T12064] netlink: 'syz.5.1456': attribute type 7 has an invalid length. [ 501.099461][ T24] DVB: Unable to find symbol xc2028_attach() [ 501.108377][ T24] tuner: 1-0061: Tuner has no way to set tv freq [ 501.145680][ T24] em28xx 2-1:0.237: Config register raw data: 0xffffffed [ 501.172032][ T24] em28xx 2-1:0.237: AC97 chip type couldn't be determined [ 501.212340][T12064] : entered promiscuous mode [ 501.221872][ T24] em28xx 2-1:0.237: No AC97 audio processor [ 501.250519][ T24] tuner: 1-0061: Tuner has no way to set tv freq [ 501.272072][ T24] videodev: could not get a free minor [ 501.278333][ T24] em28xx 2-1:0.237: can't register radio device [ 501.285484][ T24] em28xx 2-1:0.237: V4L2 device video103 deregistered [ 501.299966][ T24] em28xx 2-1:0.237: Registering input extension [ 501.310920][ T43] em28xx 2-1:0.237: Closing input extension [ 501.379975][ T43] em28xx 2-1:0.237: Freeing device [ 501.457944][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.464955][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.614385][ T24] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 501.769670][T12053] loop6: detected capacity change from 0 to 524287999 [ 501.804536][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 501.824255][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 501.852841][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.877524][ T24] usb 3-1: Product: syz [ 501.882318][ T24] usb 3-1: Manufacturer: syz [ 501.896637][ T24] usb 3-1: SerialNumber: syz [ 501.914101][ T43] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 501.930691][ T24] usb 3-1: config 0 descriptor?? [ 501.954976][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 502.083748][ T92] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 502.096364][ T43] usb 4-1: config 0 has no interfaces? [ 502.109487][ T43] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 502.137922][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=182 [ 502.148891][ T43] usb 4-1: Product: syz [ 502.153217][ T43] usb 4-1: Manufacturer: syz [ 502.161373][ T43] usb 4-1: SerialNumber: syz [ 502.170026][ T43] usb 4-1: config 0 descriptor?? [ 502.258711][ T92] usb 6-1: Using ep0 maxpacket: 8 [ 502.267690][ T92] usb 6-1: config 0 has an invalid interface number: 130 but max is 0 [ 502.278779][ T92] usb 6-1: config 0 has no interface number 0 [ 502.288555][ T92] usb 6-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 502.300512][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.308847][ T92] usb 6-1: Product: syz [ 502.313033][ T92] usb 6-1: Manufacturer: syz [ 502.318757][ T5929] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 502.326540][ T92] usb 6-1: SerialNumber: syz [ 502.333840][ T92] usb 6-1: config 0 descriptor?? [ 502.351296][ T92] as10x_usb: device has been detected [ 502.357741][ T92] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 502.384645][ T92] usb 6-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 502.400862][ T92] as10x_usb: error during firmware upload part1 [ 502.408278][ T92] Registered device PCTV Systems picoStick (74e) [ 502.493765][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 502.507369][ T5929] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.518333][ T5929] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.528646][ T5929] usb 2-1: config 0 interface 0 has no altsetting 0 [ 502.535699][ T5929] usb 2-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 502.544912][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.563633][ T5929] usb 2-1: config 0 descriptor?? [ 502.797132][T12091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.826299][T12091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.845948][ T5929] usb 2-1: USB disconnect, device number 108 [ 503.008384][ T24] gspca_sonixj: reg_w1 err -71 [ 503.066032][ T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 503.122827][ T24] usb 3-1: USB disconnect, device number 106 [ 503.180680][ T43] usb 6-1: USB disconnect, device number 9 [ 503.212117][ T43] Unregistered device PCTV Systems picoStick (74e) [ 503.213124][ T43] as10x_usb: device has been disconnected [ 503.510047][T12105] FAULT_INJECTION: forcing a failure. [ 503.510047][T12105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.529291][T12105] CPU: 1 UID: 0 PID: 12105 Comm: syz.0.1469 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 503.529316][T12105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.529327][T12105] Call Trace: [ 503.529335][T12105] [ 503.529343][T12105] dump_stack_lvl+0x189/0x250 [ 503.529372][T12105] ? __pfx____ratelimit+0x10/0x10 [ 503.529394][T12105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.529418][T12105] ? __pfx__printk+0x10/0x10 [ 503.529438][T12105] ? __pfx___mutex_lock+0x10/0x10 [ 503.529469][T12105] should_fail_ex+0x414/0x560 [ 503.529495][T12105] _copy_to_user+0x31/0xb0 [ 503.529515][T12105] drm_mode_getconnector+0xc7e/0x1370 [ 503.529549][T12105] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 503.529576][T12105] ? drm_dev_enter+0x49/0x150 [ 503.529617][T12105] drm_ioctl_kernel+0x2cf/0x390 [ 503.529641][T12105] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 503.529661][T12105] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 503.529691][T12105] drm_ioctl+0x67f/0xb10 [ 503.529718][T12105] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 503.529743][T12105] ? __pfx_drm_ioctl+0x10/0x10 [ 503.529776][T12105] ? __fget_files+0x2a/0x420 [ 503.529798][T12105] ? bpf_lsm_file_ioctl+0x9/0x20 [ 503.529821][T12105] ? __pfx_drm_ioctl+0x10/0x10 [ 503.529839][T12105] __se_sys_ioctl+0xf9/0x170 [ 503.529863][T12105] do_syscall_64+0xfa/0x3b0 [ 503.529876][T12105] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.529897][T12105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.529913][T12105] ? clear_bhb_loop+0x60/0xb0 [ 503.529933][T12105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.529948][T12105] RIP: 0033:0x7f6aa058e929 [ 503.529965][T12105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.529979][T12105] RSP: 002b:00007f6aa1457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.529999][T12105] RAX: ffffffffffffffda RBX: 00007f6aa07b5fa0 RCX: 00007f6aa058e929 [ 503.530011][T12105] RDX: 0000200000000600 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 503.530022][T12105] RBP: 00007f6aa1457090 R08: 0000000000000000 R09: 0000000000000000 [ 503.530031][T12105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.530040][T12105] R13: 0000000000000000 R14: 00007f6aa07b5fa0 R15: 00007f6aa08dfa28 [ 503.530066][T12105] [ 503.897203][ T43] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 503.932958][T12116] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 503.953343][T12116] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 504.053679][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 504.061163][ T43] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 504.070219][ T43] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 504.081303][ T43] usb 2-1: config 8 has no interface number 0 [ 504.088609][ T43] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 504.101535][ T43] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 504.119601][ T43] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 504.130229][ T43] usb 2-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 504.141474][ T43] usb 2-1: config 8 interface 206 has no altsetting 0 [ 504.154704][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 504.164445][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.182346][ T43] usb 2-1: Product: syz [ 504.191462][ T43] usb 2-1: Manufacturer: syz [ 504.200132][ T43] usb 2-1: SerialNumber: syz [ 504.360349][ T9] usb 4-1: USB disconnect, device number 101 [ 504.483393][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 504.536437][T12134] syz_tun: entered promiscuous mode [ 504.553055][T12134] batadv_slave_0: entered promiscuous mode [ 504.569705][T12134] hsr1: entered allmulticast mode [ 504.572762][ T92] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 504.576949][T12134] syz_tun: entered allmulticast mode [ 504.590332][T12134] batadv_slave_0: entered allmulticast mode [ 504.923578][ T92] usb 6-1: device descriptor read/64, error -71 [ 505.052992][ T43] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 505.087455][ T43] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 505.182546][ T43] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 505.238114][ T24] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 505.329408][ T30] audit: type=1326 audit(1750911503.661:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe79f8e929 code=0x7fc00000 [ 505.351850][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.382105][ T30] audit: type=1326 audit(1750911503.661:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe79f8e929 code=0x7fc00000 [ 505.404415][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.423632][ T92] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 505.472279][ T43] usb 2-1: USB disconnect, device number 109 [ 505.484159][ T43] garmin_gps 2-1:8.206: device disconnected [ 505.494149][T12150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1481'. [ 505.545314][ T30] audit: type=1326 audit(1750911503.661:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe79f8e929 code=0x7fc00000 [ 505.589737][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 505.620870][ T24] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 505.633752][ T92] usb 6-1: device descriptor read/64, error -71 [ 505.653942][ T30] audit: type=1326 audit(1750911503.661:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe79f8e929 code=0x7fc00000 [ 505.718233][ T30] audit: type=1326 audit(1750911503.661:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe79f8e929 code=0x7fc00000 [ 505.750991][ T30] audit: type=1326 audit(1750911503.661:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe79f8e929 code=0x7fc00000 [ 505.773412][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.781513][ T92] usb usb6-port1: attempt power cycle [ 505.788655][ T30] audit: type=1326 audit(1750911503.661:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe79f8e929 code=0x7fc00000 [ 505.803351][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 505.816122][ T30] audit: type=1326 audit(1750911503.661:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe79f8e929 code=0x7fc00000 [ 505.846670][ T30] audit: type=1326 audit(1750911503.661:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe79f8e929 code=0x7fc00000 [ 505.869329][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.880036][ T30] audit: type=1326 audit(1750911503.661:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe79f8e929 code=0x7fc00000 [ 505.902659][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.959821][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.143557][ T92] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 506.194286][ T92] usb 6-1: device descriptor read/8, error -71 [ 506.251738][ T5929] usb 4-1: USB disconnect, device number 102 [ 506.453795][ T92] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 506.517121][ T92] usb 6-1: device descriptor read/8, error -71 [ 506.673990][ T92] usb usb6-port1: unable to enumerate USB device [ 507.308515][T12121] delete_channel: no stack [ 508.204138][ T24] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 508.363545][ T5929] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 508.375399][ T24] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 508.391962][ T24] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 508.438559][ T24] usb 2-1: config 8 has no interface number 0 [ 508.468458][ T24] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 508.530187][ T24] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 508.548089][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.563969][ T5929] usb 3-1: device descriptor read/64, error -71 [ 508.575642][ T24] usb 2-1: Product: syz [ 508.590085][ T24] usb 2-1: Manufacturer: syz [ 508.605915][ T24] usb 2-1: SerialNumber: syz [ 508.853571][ T5929] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 508.993554][ T5929] usb 3-1: device descriptor read/64, error -71 [ 509.024989][ T5923] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 509.104815][ T5929] usb usb3-port1: attempt power cycle [ 509.173998][ T5923] usb 6-1: device descriptor read/64, error -71 [ 509.223747][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 509.413879][ T5923] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 509.423685][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 509.435264][T12216] loop2: detected capacity change from 0 to 3 [ 509.443275][T12216] ldm_validate_privheads(): Disk read failed. [ 509.452113][T12216] Dev loop2: unable to read RDB block 3 [ 509.459448][ T5929] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 509.471044][T12216] loop2: unable to read partition table [ 509.479863][T12216] loop2: partition table beyond EOD, truncated [ 509.497450][T12216] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 509.508211][ T5929] usb 3-1: device descriptor read/8, error -71 [ 509.517829][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 509.531926][ T9] usb 1-1: too many configurations: 105, using maximum allowed: 8 [ 509.541776][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 509.553152][ T9] usb 1-1: can't read configurations, error -71 [ 509.683837][ T5923] usb 6-1: device descriptor read/64, error -71 [ 509.774088][ T5929] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 509.794520][ T5929] usb 3-1: device descriptor read/8, error -71 [ 509.797530][ T5923] usb usb6-port1: attempt power cycle [ 509.914052][ T5929] usb usb3-port1: unable to enumerate USB device [ 510.154218][ T5895] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 510.194283][ T5923] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 510.243990][ T5923] usb 6-1: device descriptor read/8, error -71 [ 510.314054][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 510.323272][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 510.335672][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 510.346328][ T5895] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 510.357112][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 510.370206][ T5895] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 510.381275][ T5895] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 510.382172][T12223] FAULT_INJECTION: forcing a failure. [ 510.382172][T12223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.391374][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.411147][T12223] CPU: 0 UID: 0 PID: 12223 Comm: syz.0.1503 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 510.411176][T12223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.411187][T12223] Call Trace: [ 510.411196][T12223] [ 510.411205][T12223] dump_stack_lvl+0x189/0x250 [ 510.411235][T12223] ? __pfx____ratelimit+0x10/0x10 [ 510.411257][T12223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.411281][T12223] ? __pfx__printk+0x10/0x10 [ 510.411302][T12223] ? __pfx___mutex_lock+0x10/0x10 [ 510.411334][T12223] should_fail_ex+0x414/0x560 [ 510.411359][T12223] _copy_to_user+0x31/0xb0 [ 510.411379][T12223] drm_mode_getconnector+0xc7e/0x1370 [ 510.411413][T12223] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 510.411431][T12223] ? drm_dev_enter+0x49/0x150 [ 510.411471][T12223] drm_ioctl_kernel+0x2cf/0x390 [ 510.411493][T12223] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 510.411513][T12223] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 510.411543][T12223] drm_ioctl+0x67f/0xb10 [ 510.411566][T12223] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 510.411592][T12223] ? __pfx_drm_ioctl+0x10/0x10 [ 510.411625][T12223] ? __fget_files+0x2a/0x420 [ 510.411646][T12223] ? bpf_lsm_file_ioctl+0x9/0x20 [ 510.411669][T12223] ? __pfx_drm_ioctl+0x10/0x10 [ 510.411689][T12223] __se_sys_ioctl+0xf9/0x170 [ 510.411714][T12223] do_syscall_64+0xfa/0x3b0 [ 510.411729][T12223] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.411750][T12223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.411775][T12223] ? clear_bhb_loop+0x60/0xb0 [ 510.411796][T12223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.411813][T12223] RIP: 0033:0x7f6aa058e929 [ 510.411829][T12223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.411843][T12223] RSP: 002b:00007f6aa1457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.411862][T12223] RAX: ffffffffffffffda RBX: 00007f6aa07b5fa0 RCX: 00007f6aa058e929 [ 510.411874][T12223] RDX: 0000200000000600 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 510.411885][T12223] RBP: 00007f6aa1457090 R08: 0000000000000000 R09: 0000000000000000 [ 510.411895][T12223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.411906][T12223] R13: 0000000000000000 R14: 00007f6aa07b5fa0 R15: 00007f6aa08dfa28 [ 510.411933][T12223] [ 510.655135][ T5895] usb 4-1: config 0 descriptor?? [ 510.660900][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 510.660915][ T30] audit: type=1326 audit(1750911509.031:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c0458e52b code=0x7ffc0000 [ 510.691929][T12221] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 510.704025][ T5923] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 510.721743][ T30] audit: type=1326 audit(1750911509.071:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c0458e52b code=0x7ffc0000 [ 510.757631][ T30] audit: type=1326 audit(1750911509.071:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c0458e52b code=0x7ffc0000 [ 510.757775][ T5923] usb 6-1: device descriptor read/8, error -71 [ 510.787338][ T30] audit: type=1326 audit(1750911509.071:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c0458e52b code=0x7ffc0000 [ 510.810135][ T30] audit: type=1326 audit(1750911509.071:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c0458e52b code=0x7ffc0000 [ 510.833040][ T30] audit: type=1326 audit(1750911509.071:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c0458e52b code=0x7ffc0000 [ 510.855814][ T30] audit: type=1326 audit(1750911509.071:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c045c11e5 code=0x7ffc0000 [ 510.900911][ T30] audit: type=1326 audit(1750911509.271:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0458e929 code=0x7ffc0000 [ 510.929093][ T30] audit: type=1326 audit(1750911509.271:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0458e929 code=0x7ffc0000 [ 510.952578][ T5923] usb usb6-port1: unable to enumerate USB device [ 511.028354][T12221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.045551][ T30] audit: type=1326 audit(1750911509.401:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c0458d290 code=0x7ffc0000 [ 511.085439][T12221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.212975][ T24] usb 2-1: USB disconnect, device number 110 [ 511.445935][ T5923] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 511.823850][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 512.313617][ T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 512.327898][T12240] netlink: 'syz.1.1506': attribute type 7 has an invalid length. [ 512.356994][T12233] syz.1.1506 (12233): drop_caches: 2 [ 512.554676][ T5923] usb 1-1: config 0 has no interfaces? [ 512.594094][ T5923] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 512.598646][T12233] syz.1.1506 (12233): drop_caches: 2 [ 512.658846][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 512.666919][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 512.675912][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 512.688832][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.702494][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 512.711721][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.719973][ T9] usb 3-1: Product: syz [ 512.724642][ T9] usb 3-1: Manufacturer: syz [ 512.729304][ T9] usb 3-1: SerialNumber: syz [ 512.741579][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.783325][ T5923] usb 1-1: config 0 descriptor?? [ 512.813621][ T5829] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 512.876228][ T92] usb 4-1: USB disconnect, device number 103 [ 513.001461][T12248] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1511'. [ 513.036851][T12248] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²i' [ 513.066817][ T9] usb 3-1: 0:2 : does not exist [ 513.087952][ T9] usb 3-1: USB disconnect, device number 111 [ 513.126425][T12248] CPU: 1 UID: 0 PID: 12248 Comm: syz.3.1511 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 513.126454][T12248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.126461][T12248] Call Trace: [ 513.126467][T12248] [ 513.126472][T12248] dump_stack_lvl+0x189/0x250 [ 513.126494][T12248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.126509][T12248] ? __pfx__printk+0x10/0x10 [ 513.126520][T12248] ? kernfs_path_from_node+0x2c/0x260 [ 513.126533][T12248] ? kernfs_path_from_node+0x2c/0x260 [ 513.126543][T12248] ? kernfs_path_from_node+0x2c/0x260 [ 513.126555][T12248] ? kernfs_path_from_node+0x22c/0x260 [ 513.126565][T12248] ? kernfs_path_from_node+0x2c/0x260 [ 513.126578][T12248] sysfs_warn_dup+0x8e/0xa0 [ 513.126589][T12248] sysfs_do_create_link_sd+0xc0/0x110 [ 513.126601][T12248] device_add_class_symlinks+0x1cf/0x240 [ 513.126615][T12248] device_add+0x475/0xb50 [ 513.126630][T12248] wiphy_register+0x199a/0x26b0 [ 513.126651][T12248] ? __pfx_wiphy_register+0x10/0x10 [ 513.126661][T12248] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 513.126677][T12248] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 513.126694][T12248] ieee80211_register_hw+0x33e1/0x4120 [ 513.126716][T12248] ? ieee80211_register_hw+0x1421/0x4120 [ 513.126732][T12248] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 513.126747][T12248] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 513.126764][T12248] ? __hrtimer_setup+0x187/0x210 [ 513.126777][T12248] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 513.126791][T12248] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 513.126822][T12248] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 513.126836][T12248] ? trace_kmalloc+0x1f/0xd0 [ 513.126843][T12248] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 513.126853][T12248] ? kstrndup+0xbf/0x160 [ 513.126870][T12248] hwsim_new_radio_nl+0xea4/0x1b10 [ 513.126881][T12248] ? __pfx___nla_validate_parse+0x10/0x10 [ 513.126903][T12248] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 513.126915][T12248] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 513.126937][T12248] ? __nla_parse+0x40/0x60 [ 513.126951][T12248] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 513.126969][T12248] genl_family_rcv_msg_doit+0x212/0x300 [ 513.126986][T12248] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 513.127006][T12248] ? bpf_lsm_capable+0x9/0x20 [ 513.127015][T12248] ? security_capable+0x7e/0x2e0 [ 513.127032][T12248] genl_rcv_msg+0x60e/0x790 [ 513.127048][T12248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.127059][T12248] ? ref_tracker_free+0x63a/0x7d0 [ 513.127070][T12248] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 513.127080][T12248] ? __pfx_ref_tracker_free+0x10/0x10 [ 513.127098][T12248] netlink_rcv_skb+0x208/0x470 [ 513.127110][T12248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.127123][T12248] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.127143][T12248] ? down_read+0x1ad/0x2e0 [ 513.127154][T12248] genl_rcv+0x28/0x40 [ 513.127165][T12248] netlink_unicast+0x75b/0x8d0 [ 513.127182][T12248] netlink_sendmsg+0x805/0xb30 [ 513.127198][T12248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.127211][T12248] ? aa_sock_msg_perm+0x94/0x160 [ 513.127224][T12248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.127236][T12248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.127247][T12248] __sock_sendmsg+0x219/0x270 [ 513.127263][T12248] ____sys_sendmsg+0x505/0x830 [ 513.127278][T12248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.127294][T12248] ? import_iovec+0x74/0xa0 [ 513.127306][T12248] ___sys_sendmsg+0x21f/0x2a0 [ 513.127318][T12248] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.127351][T12248] ? __fget_files+0x2a/0x420 [ 513.127360][T12248] ? __fget_files+0x3a0/0x420 [ 513.127377][T12248] __x64_sys_sendmsg+0x19b/0x260 [ 513.127390][T12248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.127407][T12248] ? rcu_is_watching+0x15/0xb0 [ 513.127424][T12248] ? do_syscall_64+0xbe/0x3b0 [ 513.127442][T12248] do_syscall_64+0xfa/0x3b0 [ 513.127451][T12248] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.127464][T12248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.127475][T12248] ? clear_bhb_loop+0x60/0xb0 [ 513.127487][T12248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.127496][T12248] RIP: 0033:0x7f1c0458e929 [ 513.127507][T12248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.127515][T12248] RSP: 002b:00007f1c0540a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.127527][T12248] RAX: ffffffffffffffda RBX: 00007f1c047b5fa0 RCX: 00007f1c0458e929 [ 513.127535][T12248] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 513.127542][T12248] RBP: 00007f1c04610b39 R08: 0000000000000000 R09: 0000000000000000 [ 513.127548][T12248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.127554][T12248] R13: 0000000000000000 R14: 00007f1c047b5fa0 R15: 00007f1c048dfa28 [ 513.127572][T12248] [ 513.853237][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 514.174640][T12252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.270952][T12252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.285080][ T5923] usb 1-1: USB disconnect, device number 7 [ 514.311388][T12252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.606414][T12262] FAULT_INJECTION: forcing a failure. [ 514.606414][T12262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.619759][T12262] CPU: 1 UID: 0 PID: 12262 Comm: syz.5.1516 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 514.619782][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.619792][T12262] Call Trace: [ 514.619800][T12262] [ 514.619809][T12262] dump_stack_lvl+0x189/0x250 [ 514.619835][T12262] ? __pfx____ratelimit+0x10/0x10 [ 514.619849][T12262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.619864][T12262] ? __pfx__printk+0x10/0x10 [ 514.619876][T12262] ? __pfx___mutex_lock+0x10/0x10 [ 514.619894][T12262] should_fail_ex+0x414/0x560 [ 514.619910][T12262] _copy_to_user+0x31/0xb0 [ 514.619921][T12262] drm_mode_getconnector+0xc7e/0x1370 [ 514.619941][T12262] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 514.619951][T12262] ? drm_dev_enter+0x49/0x150 [ 514.619974][T12262] drm_ioctl_kernel+0x2cf/0x390 [ 514.619987][T12262] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 514.619998][T12262] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 514.620015][T12262] drm_ioctl+0x67f/0xb10 [ 514.620029][T12262] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 514.620042][T12262] ? __pfx_drm_ioctl+0x10/0x10 [ 514.620061][T12262] ? __fget_files+0x2a/0x420 [ 514.620073][T12262] ? bpf_lsm_file_ioctl+0x9/0x20 [ 514.620088][T12262] ? __pfx_drm_ioctl+0x10/0x10 [ 514.620099][T12262] __se_sys_ioctl+0xf9/0x170 [ 514.620114][T12262] do_syscall_64+0xfa/0x3b0 [ 514.620122][T12262] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.620135][T12262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.620145][T12262] ? clear_bhb_loop+0x60/0xb0 [ 514.620157][T12262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.620166][T12262] RIP: 0033:0x7f859b98e929 [ 514.620176][T12262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.620185][T12262] RSP: 002b:00007f859c76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.620196][T12262] RAX: ffffffffffffffda RBX: 00007f859bbb5fa0 RCX: 00007f859b98e929 [ 514.620204][T12262] RDX: 0000200000000600 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 514.620210][T12262] RBP: 00007f859c76f090 R08: 0000000000000000 R09: 0000000000000000 [ 514.620216][T12262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.620222][T12262] R13: 0000000000000000 R14: 00007f859bbb5fa0 R15: 00007f859bcdfa28 [ 514.620237][T12262] [ 514.924122][ T5923] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 515.084243][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 515.104043][ T9] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 515.121334][ T5923] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 515.132816][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.147568][ T5923] usb 2-1: Product: syz [ 515.151769][ T5923] usb 2-1: Manufacturer: syz [ 515.158086][ T5923] usb 2-1: SerialNumber: syz [ 515.185097][ T5923] usb 2-1: config 0 descriptor?? [ 515.265744][ T9] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 515.274364][ T9] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 515.287683][ T9] usb 3-1: config 8 has no interface number 0 [ 515.306440][ T9] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 515.352989][ T9] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 515.441433][T12282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1522'. [ 515.466473][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.484414][ T9] usb 3-1: Product: syz [ 515.493586][ T9] usb 3-1: Manufacturer: syz [ 515.503507][ T9] usb 3-1: SerialNumber: syz [ 515.515943][T12280] program syz.3.1521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.549877][T12282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.353671][T12291] netlink: 'syz.3.1521': attribute type 10 has an invalid length. [ 516.462752][T12294] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 516.541155][T12291] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 516.562331][T12291] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 516.575057][T12291] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 516.843994][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 516.909499][ T9] usb 3-1: USB disconnect, device number 112 [ 517.113979][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 517.130708][ T24] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 517.142817][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.163387][ T24] usb 6-1: Product: syz [ 517.167820][ T24] usb 6-1: Manufacturer: syz [ 517.172502][ T24] usb 6-1: SerialNumber: syz [ 517.207003][ T24] usb 6-1: config 0 descriptor?? [ 517.221766][ T24] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 517.241743][ T24] usb 6-1: Detected FT4233HP [ 517.354177][ T5895] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 517.529086][ T5895] usb 4-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 517.574522][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.676729][ T5895] usb 4-1: config 0 descriptor?? [ 517.719906][ T5895] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 517.904162][ T5942] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 517.938748][ T5923] usb 2-1: USB disconnect, device number 111 [ 517.946876][ T5895] gspca_sn9c20x: Write register 1000 failed -71 [ 517.990619][ T5895] gspca_sn9c20x: Device initialization failed [ 518.038835][ T5895] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 518.121073][ T5895] usb 4-1: USB disconnect, device number 104 [ 518.168549][ T5942] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 518.202218][ T5942] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 518.242916][ T5942] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 518.265445][ T5942] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 518.319329][ T5942] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 518.359791][ T5942] usb 1-1: config 0 interface 0 has no altsetting 0 [ 518.401493][ T5942] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 518.426749][ T5942] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 518.481779][ T5942] usb 1-1: Product: syz [ 518.492277][ T5942] usb 1-1: Manufacturer: syz [ 518.502536][ T5942] usb 1-1: SerialNumber: syz [ 518.550432][ T5942] usb 1-1: config 0 descriptor?? [ 518.631577][T12306] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 518.639931][ T5923] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 518.673296][ T5942] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 518.747019][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 518.769041][ T5942] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 518.788354][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 518.877714][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 518.963727][ T5929] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 519.071749][ T24] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 519.138728][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.157483][T12321] FAULT_INJECTION: forcing a failure. [ 519.157483][T12321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.176972][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 519.177279][ T24] usb 6-1: USB disconnect, device number 18 [ 519.201540][T12321] CPU: 0 UID: 0 PID: 12321 Comm: syz.5.1533 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 519.201566][T12321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 519.201578][T12321] Call Trace: [ 519.201586][T12321] [ 519.201593][T12321] dump_stack_lvl+0x189/0x250 [ 519.201627][T12321] ? __pfx____ratelimit+0x10/0x10 [ 519.201651][T12321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.201676][T12321] ? __pfx__printk+0x10/0x10 [ 519.201698][T12321] ? __pfx___mutex_lock+0x10/0x10 [ 519.201728][T12321] should_fail_ex+0x414/0x560 [ 519.201754][T12321] _copy_to_user+0x31/0xb0 [ 519.201773][T12321] drm_mode_getconnector+0xc7e/0x1370 [ 519.201808][T12321] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 519.201827][T12321] ? drm_dev_enter+0x49/0x150 [ 519.201869][T12321] drm_ioctl_kernel+0x2cf/0x390 [ 519.201892][T12321] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 519.201912][T12321] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 519.201943][T12321] drm_ioctl+0x67f/0xb10 [ 519.201968][T12321] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 519.201994][T12321] ? __pfx_drm_ioctl+0x10/0x10 [ 519.202029][T12321] ? __fget_files+0x2a/0x420 [ 519.202051][T12321] ? bpf_lsm_file_ioctl+0x9/0x20 [ 519.202074][T12321] ? __pfx_drm_ioctl+0x10/0x10 [ 519.202094][T12321] __se_sys_ioctl+0xf9/0x170 [ 519.202121][T12321] do_syscall_64+0xfa/0x3b0 [ 519.202136][T12321] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.202159][T12321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.202182][T12321] ? clear_bhb_loop+0x60/0xb0 [ 519.202203][T12321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.202220][T12321] RIP: 0033:0x7f859b98e929 [ 519.202236][T12321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.202251][T12321] RSP: 002b:00007f859c76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.202270][T12321] RAX: ffffffffffffffda RBX: 00007f859bbb5fa0 RCX: 00007f859b98e929 [ 519.202283][T12321] RDX: 0000200000000600 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 519.202295][T12321] RBP: 00007f859c76f090 R08: 0000000000000000 R09: 0000000000000000 [ 519.202306][T12321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.202317][T12321] R13: 0000000000000000 R14: 00007f859bbb5fa0 R15: 00007f859bcdfa28 [ 519.202345][T12321] [ 519.437568][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.450568][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 519.483302][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.506414][ T5942] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 519.580977][ T5923] usb 2-1: config 0 descriptor?? [ 519.694266][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 519.706320][ T5942] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.716369][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.772142][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 519.825709][ T5929] usb 3-1: config 0 has no interfaces? [ 519.832144][ T5929] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 519.842359][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.857336][ T5929] usb 3-1: config 0 descriptor?? [ 519.872001][ T5942] usb 4-1: config 0 has no interface number 0 [ 519.906169][ T24] ftdi_sio 6-1:0.0: device disconnected [ 519.912801][ T5942] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.017530][ T5942] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 520.043030][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.099078][ T5942] usb 4-1: config 0 descriptor?? [ 520.166734][ T5923] logitech-djreceiver 0003:046D:C52F.0020: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.1-1/input0 [ 520.208167][ T5942] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 520.399314][ T5929] usb 2-1: USB disconnect, device number 112 [ 520.633236][T12331] block device autoloading is deprecated and will be removed. [ 520.652906][T12331] syz.5.1534: attempt to access beyond end of device [ 520.652906][T12331] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 521.501070][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 521.501126][ T30] audit: type=1326 audit(1750911519.871:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.5.1536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f859b98e929 code=0x0 [ 521.503281][ T5929] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 521.529588][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.823569][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 521.843231][ T5942] usb 4-1: USB disconnect, device number 105 [ 521.933592][ T5929] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 521.943145][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.952982][ T5929] usb 2-1: Product: syz [ 521.957450][ T5929] usb 2-1: Manufacturer: syz [ 521.962140][ T5929] usb 2-1: SerialNumber: syz [ 521.970629][ T5929] usb 2-1: config 0 descriptor?? [ 521.976581][ T5923] usb 1-1: USB disconnect, device number 8 [ 521.995264][ T5923] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 522.307536][T12336] ALSA: mixer_oss: invalid OSS volume '18446744073709551615' [ 522.318809][ T5908] usb 3-1: USB disconnect, device number 113 [ 522.400219][ T5929] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 522.420906][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 522.424392][ T5923] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 522.433184][ T5929] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 522.458861][ T5929] usb 2-1: media controller created [ 522.506194][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.533750][ T9] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 522.606000][ T5923] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 522.618156][ T5923] usb 1-1: config 0 has no interface number 0 [ 522.628773][ T5923] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 522.629775][ T5929] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 522.647018][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.650642][ T5929] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 522.656468][ T5923] usb 1-1: Product: syz [ 522.675061][ T5923] usb 1-1: Manufacturer: syz [ 522.683793][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 522.689278][ T5923] usb 1-1: SerialNumber: syz [ 522.698067][ T5923] usb 1-1: config 0 descriptor?? [ 522.703638][ T5908] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 522.724795][ T9] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 522.733132][ T9] usb 4-1: config 0 has no interface number 0 [ 522.751571][ T9] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 522.772391][ T9] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 522.788709][ T9] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 522.801629][ T9] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.830430][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=b8.c5 [ 522.844103][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.868380][ T9] usb 4-1: Product: syz [ 522.872722][ T9] usb 4-1: Manufacturer: syz [ 522.881438][ T9] usb 4-1: SerialNumber: syz [ 522.891339][ T5908] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 522.906391][ T5908] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 522.907528][ T5923] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 522.920526][ T5908] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 522.943390][ T9] usb 4-1: config 0 descriptor?? [ 522.958000][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.964340][ T5923] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 522.978328][ T5923] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 522.990803][ T5923] usb 1-1: media controller created [ 523.001928][T12356] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 523.033351][ T5908] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 523.040890][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.162810][T12346] ------------[ cut here ]------------ [ 523.169119][T12346] usb 2-1: BOGUS control dir, pipe 80007180 doesn't match bRequestType c0 [ 523.198012][T12362] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.1544'. [ 523.209540][ T24] usb 2-1: USB disconnect, device number 113 [ 523.213843][ T9] iowarrior 4-1:0.186: IOWarrior product=0x1501, serial=42424242 interface=186 now attached to iowarrior0 [ 523.239791][T12346] WARNING: CPU: 0 PID: 12346 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 523.249789][T12346] Modules linked in: [ 523.254146][T12346] CPU: 0 UID: 0 PID: 12346 Comm: syz.0.1539 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 523.266462][T12346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 523.276695][T12346] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 523.282390][T12346] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 2b 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 24 15 63 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 523.302357][T12346] RSP: 0018:ffffc9000396f830 EFLAGS: 00010246 [ 523.309148][T12346] RAX: d6f84176a6b07700 RBX: ffff888143bde300 RCX: ffff8880277a5a00 [ 523.317783][T12346] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 523.325987][T12346] RBP: 1ffff11005199f84 R08: 0000000000000003 R09: 0000000000000004 [ 523.334052][T12346] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888028ccfc20 [ 523.342054][T12346] R13: dffffc0000000000 R14: 0000000080007180 R15: ffff8880206d7780 [ 523.350225][T12346] FS: 00007f6aa14576c0(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 523.359360][T12346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.366015][T12346] CR2: 0000200000003000 CR3: 000000005bc8a000 CR4: 00000000003526f0 [ 523.374085][T12346] Call Trace: [ 523.377391][T12346] [ 523.380385][T12346] usb_start_wait_urb+0x114/0x4c0 [ 523.385516][T12346] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 523.391116][T12346] usb_control_msg+0x232/0x3e0 [ 523.396008][T12346] dtv5100_i2c_msg+0x250/0x330 [ 523.401186][T12346] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 523.406834][T12346] __i2c_transfer+0x874/0x2170 [ 523.412499][T12346] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.418161][T12346] ? __pfx___i2c_transfer+0x10/0x10 [ 523.423400][T12346] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 523.428916][T12346] ? i2c_transfer+0x11d/0x3a0 [ 523.433681][T12346] i2c_transfer+0x25b/0x3a0 [ 523.438218][T12346] ? __pfx_i2c_transfer+0x10/0x10 [ 523.443277][T12346] ? _copy_from_user+0x94/0xb0 [ 523.448185][T12346] i2cdev_ioctl_rdwr+0x460/0x740 [ 523.453170][T12346] i2cdev_ioctl+0x64b/0x7f0 [ 523.457747][T12346] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 523.462848][T12346] ? __fget_files+0x3a0/0x420 [ 523.467602][T12346] ? __fget_files+0x2a/0x420 [ 523.472234][T12346] ? bpf_lsm_file_ioctl+0x9/0x20 [ 523.477262][T12346] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 523.482379][T12346] __se_sys_ioctl+0xf9/0x170 [ 523.487039][T12346] do_syscall_64+0xfa/0x3b0 [ 523.491560][T12346] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.496878][T12346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.502976][T12346] ? clear_bhb_loop+0x60/0xb0 [ 523.507733][T12346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.514208][T12346] RIP: 0033:0x7f6aa058e929 [ 523.518653][T12346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.538914][T12346] RSP: 002b:00007f6aa1457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.547406][T12346] RAX: ffffffffffffffda RBX: 00007f6aa07b5fa0 RCX: 00007f6aa058e929 [ 523.555511][T12346] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000005 [ 523.563559][T12346] RBP: 00007f6aa0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 523.571559][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.579622][T12346] R13: 0000000000000000 R14: 00007f6aa07b5fa0 R15: 00007f6aa08dfa28 [ 523.587660][T12346] [ 523.590708][T12346] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 523.598002][T12346] CPU: 0 UID: 0 PID: 12346 Comm: syz.0.1539 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 523.610078][T12346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 523.620164][T12346] Call Trace: [ 523.623494][T12346] [ 523.626436][T12346] dump_stack_lvl+0x99/0x250 [ 523.631049][T12346] ? __asan_memcpy+0x40/0x70 [ 523.635662][T12346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.640904][T12346] ? __pfx__printk+0x10/0x10 [ 523.645529][T12346] panic+0x2db/0x790 [ 523.649453][T12346] ? __pfx_panic+0x10/0x10 [ 523.653911][T12346] __warn+0x31b/0x4b0 [ 523.657915][T12346] ? usb_submit_urb+0x115d/0x1890 [ 523.662965][T12346] ? usb_submit_urb+0x115d/0x1890 [ 523.668011][T12346] report_bug+0x2be/0x4f0 [ 523.672365][T12346] ? usb_submit_urb+0x115d/0x1890 [ 523.677410][T12346] ? usb_submit_urb+0x115d/0x1890 [ 523.682472][T12346] ? usb_submit_urb+0x115f/0x1890 [ 523.687520][T12346] handle_bug+0x84/0x160 [ 523.691785][T12346] exc_invalid_op+0x1a/0x50 [ 523.696310][T12346] asm_exc_invalid_op+0x1a/0x20 [ 523.701184][T12346] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 523.706837][T12346] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 2b 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 24 15 63 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 523.726471][T12346] RSP: 0018:ffffc9000396f830 EFLAGS: 00010246 [ 523.732552][T12346] RAX: d6f84176a6b07700 RBX: ffff888143bde300 RCX: ffff8880277a5a00 [ 523.740535][T12346] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 523.748503][T12346] RBP: 1ffff11005199f84 R08: 0000000000000003 R09: 0000000000000004 [ 523.756472][T12346] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888028ccfc20 [ 523.764448][T12346] R13: dffffc0000000000 R14: 0000000080007180 R15: ffff8880206d7780 [ 523.772443][T12346] usb_start_wait_urb+0x114/0x4c0 [ 523.777479][T12346] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 523.783041][T12346] usb_control_msg+0x232/0x3e0 [ 523.787807][T12346] dtv5100_i2c_msg+0x250/0x330 [ 523.792568][T12346] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 523.797429][T12346] __i2c_transfer+0x874/0x2170 [ 523.802220][T12346] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.807424][T12346] ? __pfx___i2c_transfer+0x10/0x10 [ 523.812617][T12346] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 523.817982][T12346] ? i2c_transfer+0x11d/0x3a0 [ 523.822654][T12346] i2c_transfer+0x25b/0x3a0 [ 523.827150][T12346] ? __pfx_i2c_transfer+0x10/0x10 [ 523.832166][T12346] ? _copy_from_user+0x94/0xb0 [ 523.836932][T12346] i2cdev_ioctl_rdwr+0x460/0x740 [ 523.841876][T12346] i2cdev_ioctl+0x64b/0x7f0 [ 523.846373][T12346] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 523.851389][T12346] ? __fget_files+0x3a0/0x420 [ 523.856057][T12346] ? __fget_files+0x2a/0x420 [ 523.860641][T12346] ? bpf_lsm_file_ioctl+0x9/0x20 [ 523.865571][T12346] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 523.870642][T12346] __se_sys_ioctl+0xf9/0x170 [ 523.875299][T12346] do_syscall_64+0xfa/0x3b0 [ 523.879829][T12346] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.885031][T12346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.891091][T12346] ? clear_bhb_loop+0x60/0xb0 [ 523.895768][T12346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.901652][T12346] RIP: 0033:0x7f6aa058e929 [ 523.906061][T12346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.925681][T12346] RSP: 002b:00007f6aa1457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.934108][T12346] RAX: ffffffffffffffda RBX: 00007f6aa07b5fa0 RCX: 00007f6aa058e929 [ 523.942099][T12346] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000005 [ 523.950071][T12346] RBP: 00007f6aa0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 523.958044][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.966015][T12346] R13: 0000000000000000 R14: 00007f6aa07b5fa0 R15: 00007f6aa08dfa28 [ 523.973995][T12346] [ 523.977297][T12346] Kernel Offset: disabled [ 523.981622][T12346] Rebooting in 86400 seconds..