last executing test programs: 16.029488046s ago: executing program 3 (id=646): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r1 = socket(0xb, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') ftruncate(r2, 0x7fffffff) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10, 0x0}, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x80000006, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xefce}, 0x1c) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) r7 = openat$nullb(0xffffff9c, &(0x7f0000000380), 0x183, 0x0) ioctl$BLKGETSIZE(r7, 0x1260, &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 12.410808944s ago: executing program 3 (id=654): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="210400007d01000005e0020200000000058300008000080000fdffffff0000004041ffffffffdce5000005800000000000001b00046e6f6465767b65766f6f7e0545c60005080037d93a8b920000003300704a86cec602007dfa673effeb09b5351f5bde05"], 0x421) 12.264782809s ago: executing program 0 (id=656): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x1, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0xc, &(0x7f0000000300)={0x20, 0x31, 0x2, {0x2, 0x23}}, 0x0}, &(0x7f0000000600)={0x10, &(0x7f0000000440)={0x40, 0x9, 0x43, "b33dac9aa84a4e6efd12d1bfd9c3c919fc8e89cd340eb0091ebb71228abd9a7f669844fb26896d9a87cea72434d5dd7716fee2f7b91ec3808a7d21ea45e48b445aa338"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xcf}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2e}}) mkdir(0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='trylock me'], 0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0x0, 0x3, {0x7, 0x29, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x600) fsync(r4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x24, &(0x7f0000000100)={0x0, 0x1, 0x81, "d8abc123f020c56ef7f731cde7ebccc279"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a40)={0x1c, &(0x7f0000000900)={0x0, 0xa, 0x2, "9980"}, 0x0, 0x0}) 12.238369276s ago: executing program 4 (id=657): r0 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\x00\x00{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9dp]\xc9H\x94\x0e\xf1v\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xd}}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x4}}], {0x14}}, 0xa0}}, 0x44000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x746}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4096, 0x1000}, 0x5}], 0x1, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000140)=0x6, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@random="529f439f17f3", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) close(r1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, &(0x7f0000000c00)=ANY=[@ANYRESDEC=r2], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x2}, 0x94) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r5 = dup(r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100000001f4ffffffff9800000008000300", @ANYRES32=r8], 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = dup(r9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="36566011ebc1"}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd74) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x73, 0x7f, 0xa, 0x10, 0x2c7c, 0x306, 0x7d35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 12.089438301s ago: executing program 3 (id=658): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, 0x0) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x401) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xa608, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) close_range(r4, r4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x1, 0x7, 0x2, 'syz1\x00', 0x46}, 0x6, 0x400, 0x1000, 0x0, 0x1, 0x3, 'syz0\x00', &(0x7f0000000080)=['\x00'], 0x1}) listen(r2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100003ace440844100d805c571dd578450902120001000000000904000000ef01", @ANYRESDEC=r0, @ANYBLOB="f3c13a3c29ae2130b460208bf17d4dda5d0fb3a3f50e92e0ba72c83e10c945e63b8ccccc7a2972f546ee1d49443cf8169479ad4b7832788e02d983f8719eb5f0f067eecb5bd03aedb5d9edf8f8ad23286570a81da432980ca828fd0145825c9fcc6056ca5123a6aff764a73988d2afde490eb4945323935119f5ecfa4e78ad8828a52e53052dccd0050fbb5b6a4211d6eba4b27be867071dca5fcf163a3ce5b33492fe93f6b2f5d05345123873ae6c91f694859dfc06f895cb534b808eabb441be8ba962e7dcd1f96830e7748d737e5feb977569839d78f6950b2b0280f717307d8e", @ANYRESOCT=r1, @ANYRES16, @ANYRESOCT=r2], 0x0) 11.704195221s ago: executing program 1 (id=660): unshare(0x200) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x3}, 'syz1\x00', 0x52}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x14, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000080)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000348028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="fa75adfd30a25feb418d0ab630e22019df5939d54294af2365bf55adf0ae7c0fb984e7ae0451bc933a5cabf0f640b5820c"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000280), 0x9) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000200)=0x1, 0x12) 10.975447242s ago: executing program 2 (id=662): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) ioctl$int_in(r4, 0x5452, &(0x7f0000000c00)=0xf6c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shmat(0x0, &(0x7f000070a000/0x2000)=nil, 0x7000) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000004) 10.241567392s ago: executing program 3 (id=663): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e09"], 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x4) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) listen(0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x50) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r10, 0x0, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000200)={0x2, r12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) 9.899375196s ago: executing program 1 (id=664): r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0xbd4}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x80) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x8, 0x2, 0x2, "94dcb57f82748761b90fd9c793591aea19fde8d1babfc880e237794549d351bb", 0x49323159}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r7], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB="f1791ff023bd873242e08b01ac9ce1597b9d41032769ecf50705241767b18fd00f94dfde17e9d3d47d07c283ffee3890362db9e4d59f75f9286847920abc456297d17c", @ANYRES16=r6, @ANYBLOB="040026bd7000fedbdf250b00000008002200f6ffffff05002f000000000005002d00010000006a76d87fa875c43aee7302e3af04a1946d8647e645edc3a950e011d4271550c98ba8629d7eede48352102dbcc968c4fa63637d3287e5d6b7a5397d7c6453d58211aa328f6ac401699252e02c249d1d74794bd37146c7207da999389360abb48dcffbd70eb242e1ff89aa11a0f5f1928e761929f95e8a059951f501775c9f875af4d138655aafcdabc609507ea9c25c14eaef4659dbeedfec8c054ae4498122057c142d8bbbe397317df68cf66e05072e81014460e50fd6b6ac72f9288b347ed8f6e3d30ddeb47eeb"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24004800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x80400, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r9, &(0x7f0000001fc0)=""/4086, 0xff6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000010000000000000000007f00000100000000000000000000000000000000000000000000ffff0a01010100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000e3ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff25bd70000100000002000100000000004800210200656362286369706865725f6e756c6c290000000000000000000000000000000000000000cfb3141870e0552f0000000000000000000000000000000000000000000000001c00"], 0x150}}, 0x8080) openat$sequencer(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRES16], 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={'\v\x00', 0x2, 0x5, 0x2, 0x3, 0x0, "f759e10000001000000000fc6300", '\x00\x00\a\x00', "0300", "e805ad13", ["8bada940edff000a00", "da00009b55a9cedc03eee100", "000000ff0000000000000020", "0000000000070000000100"]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 8.746534346s ago: executing program 4 (id=665): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r3, 0x8926, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x7ff, 0xd, "5dee000000594000"}) r4 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100, 0x0, 0x0, 0x0, r2}, 0x0, &(0x7f0000000340)=0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000600)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYRESDEC, @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18000400010000004b0000", @ANYRES32=0x0, @ANYRES8=r4, @ANYRESOCT, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3], 0x90, 0x4000800}}], 0x1, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="00ffff00", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b0001006970766c616e00000c000280060002000200000008000500", @ANYRES32=r11, @ANYBLOB="b67cab324d959383f77ff006433e1fd8e1e1ec230dcde6081a9c731b1fa3eda77597a626da8683dbc78b6d41ae"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', r11, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r12}, 0xc) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r12, 0x68758000) connect$unix(r8, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, &(0x7f0000000180)=0xf) 8.668512151s ago: executing program 2 (id=666): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xa8, 0x0, 0x1, 0x401, 0xfdff, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x0, 0x10000, 0x1, 0x1]}]}, 0xa8}}, 0x0) 8.409220066s ago: executing program 2 (id=667): socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000300)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000079121000000001009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic={0x1000, 0x0, 0x7fffffff, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x25}, {0xff, 0x5, 0x0, '\x00', 0x10}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x3, 0x0, 0x0, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x5}, {0x0, 0x7, 0x80, '\x00', 0x5}, {0x7, 0x3, 0x7f, '\x00', 0xfe}, {0x5, 0x0, 0x7, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x27}, {0x58, 0x6, 0xfe, '\x00', 0x7f}, {0x0, 0x0, 0x41}, {0x0, 0x7f, 0x9}, {0x0, 0x0, 0x7}]}}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000380)={0x7, 0x8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x8000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) 8.165546233s ago: executing program 0 (id=668): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) shutdown(r6, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x10002, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x10000000, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) r7 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x1) chdir(&(0x7f0000000480)='./cgroup\x00') link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x9b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) 7.508475353s ago: executing program 0 (id=669): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="5d69643d9f7218a63a0162", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000002c0)={0x7fffffff, 0x8c85, 0xffff, 0x7, 0x8, "e7e4d945d0a0751740b63967fd65dd2c1970e3", 0x4, 0xffff}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) keyctl$update(0x2, 0x0, &(0x7f0000000080)='A', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000081000000000000262ea05327755100ffffffff184a0000fcffffff0000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000ef030000f0ffffffb70200000800000018", @ANYRES32=0x1], &(0x7f0000000300)='GPL\x00', 0x1960, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x7fffffff, 0x10201) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000600000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009"], 0xb0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 7.505441671s ago: executing program 1 (id=679): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0x4bb, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r6], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010072899f00000000240002801400018008000100ac1414aa08000200ffffffff0c0002800500010000000000080007400000000014001640000000000001000e0000000100000001"], 0x90}}, 0x0) 7.089785631s ago: executing program 3 (id=670): socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000300)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000079121000000001009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic={0x1000, 0x0, 0x7fffffff, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x25}, {0xff, 0x5, 0x0, '\x00', 0x10}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x3, 0x0, 0x0, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x5}, {0x0, 0x7, 0x80, '\x00', 0x5}, {0x7, 0x3, 0x7f, '\x00', 0xfe}, {0x5, 0x0, 0x7, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x27}, {0x58, 0x6, 0xfe, '\x00', 0x7f}, {0x0, 0x0, 0x41}, {0x0, 0x7f, 0x9}, {0x0, 0x0, 0x7}]}}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000380)={0x7, 0x8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x8000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) 7.087375301s ago: executing program 4 (id=671): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) shutdown(r6, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x10002, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x10000000, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) r7 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x1) chdir(&(0x7f0000000480)='./cgroup\x00') link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x9b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) 6.786806463s ago: executing program 1 (id=672): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x4) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) listen(0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x50) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r10, 0x0, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000200)={0x2, r12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) 6.708091499s ago: executing program 4 (id=673): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, 0x0) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x401) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xa608, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) close_range(r4, r4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x1, 0x7, 0x2, 'syz1\x00', 0x46}, 0x6, 0x400, 0x1000, 0x0, 0x1, 0x3, 'syz0\x00', &(0x7f0000000080)=['\x00'], 0x1}) listen(r2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100003ace440844100d805c571dd578450902120001000000000904000000ef01", @ANYRESDEC=r0, @ANYBLOB="f3c13a3c29ae2130b460208bf17d4dda5d0fb3a3f50e92e0ba72c83e10c945e63b8ccccc7a2972f546ee1d49443cf8169479ad4b7832788e02d983f8719eb5f0f067eecb5bd03aedb5d9edf8f8ad23286570a81da432980ca828fd0145825c9fcc6056ca5123a6aff764a73988d2afde490eb4945323935119f5ecfa4e78ad8828a52e53052dccd0050fbb5b6a4211d6eba4b27be867071dca5fcf163a3ce5b33492fe93f6b2f5d05345123873ae6c91f694859dfc06f895cb534b808eabb441be8ba962e7dcd1f96830e7748d737e5feb977569839d78f6950b2b0280f717307d8e", @ANYRESOCT=r1, @ANYRES16, @ANYRESOCT=r2], 0x0) 5.670187808s ago: executing program 0 (id=674): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x33, 0x1, 0x2, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2", 0x30395056}) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000480)=0x1ff) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x5e, 0x1, 0x0, 0x0, {{0xdb4a, 0x3, 0x367a}, {0xf935, 0x7, 0xda7, 0xffff}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xae, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000800)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r10, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x6f, 0x0, @fd, 0x100, &(0x7f0000000540)=[{&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000700)=""/205, 0xcd}], 0x2}) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="450000003aa93e466b90790a59829a6583dac0c75b36e56155cae22ba3493da332c1efc6fb", @ANYRES16=0x0, @ANYBLOB="000027bd7000fbdbdf2513000000240011800400070004000100040001000400050004000200040007000400020004000500050029000a0000000500e40000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x11) io_uring_enter(r8, 0x3514, 0x77e, 0x24, 0x0, 0x0) 5.095229559s ago: executing program 2 (id=675): r0 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\x00\x00{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9dp]\xc9H\x94\x0e\xf1v\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xd}}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x4}}], {0x14}}, 0xa0}}, 0x44000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x746}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4096, 0x1000}, 0x5}], 0x1, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000140)=0x6, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@random="529f439f17f3", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) close(r1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, &(0x7f0000000c00)=ANY=[@ANYRESDEC=r2], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x2}, 0x94) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r5 = dup(r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100000001f4ffffffff9800000008000300", @ANYRES32=r8], 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = dup(r9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="36566011ebc1"}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd74) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x73, 0x7f, 0xa, 0x10, 0x2c7c, 0x306, 0x7d35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 4.636792226s ago: executing program 0 (id=676): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="5d69643d9f7218a63a0162", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000002c0)={0x7fffffff, 0x8c85, 0xffff, 0x7, 0x8, "e7e4d945d0a0751740b63967fd65dd2c1970e3", 0x4, 0xffff}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) keyctl$update(0x2, 0x0, &(0x7f0000000080)='A', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000081000000000000262ea05327755100ffffffff184a0000fcffffff0000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000ef030000f0ffffffb70200000800000018", @ANYRES32=0x1], &(0x7f0000000300)='GPL\x00', 0x1960, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x7fffffff, 0x10201) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000f50000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009"], 0xb0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 4.261505334s ago: executing program 4 (id=677): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000440)='\x00\x00', 0x2, 0xfffffffffffffffe) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r6, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) 3.584515355s ago: executing program 1 (id=678): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x1, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0xc, &(0x7f0000000300)={0x20, 0x31, 0x2, {0x2, 0x23}}, 0x0}, &(0x7f0000000600)={0x10, &(0x7f0000000440)={0x40, 0x9, 0x43, "b33dac9aa84a4e6efd12d1bfd9c3c919fc8e89cd340eb0091ebb71228abd9a7f669844fb26896d9a87cea72434d5dd7716fee2f7b91ec3808a7d21ea45e48b445aa338"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xcf}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2e}}) mkdir(0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='trylock me'], 0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000009800)="c119ed7667ec1da6ce5ad10520d9f0d916f246337b0557963a20976c5c2e3b9c50442c3aa3ad8af4490e25e8a248ad6569c868927ce88fde8f6dd47700c012579d8f5517c15a8692ebbfe31637d24da9b182159a75eb201be82b5b3482e6f7d3344eb462be4e452a789b9246974e521beb91400d62ba27d79dc7e4a2511c941b7658a426f1b03867abe8958cf54e277c8c7eba60d65881156958563b415fdfb45237d979dfffc5a2399d245c064928d88f8f2ad57fc65556fc4404b0deb7fe8b794c8f853fc356646a4bd5a3bde17b164539cde75bfbcb82189d10658affc840871f99d48a657c0a490f44959ec808a7de09590156b5f4dbe9689884f22c3388c3d735ab0a38bfa911e234a40a7700258e36df5be8b1e6e8d229a9ad553628c9e2d099d87e54328d8e75a59b5add9aa55447c933e752fc3bd90aa92645449401e7a715f3b4bcc17c799eed78a917850f05886472640ec78ba017ae6e83683db81d999696d3ad34143e5d6be46724f4086dd8480e85b070e2980ee952ef91f8467bf542428b1958ead9f7a09641d0c33c1566e77a3c923d94bee7dc9046e8b6803dc5c5a6e34ba951d2a0fe9d6d03a57391560e2328e8c581474e38e40055b45f7467b4dba95d64dac57b6fc0dc8a40f054aa801a3c022dcfadc793ecfb9968d3121157b0a8b25b99b09038c58570205b4166f3bd749d7a0f8bf89033e11c0a456bb72788cf7ccfeb980ce085711f8ea531fcc57206d8e0e0aea1f3220066c7769d71026259468604a5cc7331cc971a4cd78d8552e0e0d9955deb21282a27f0a5f8364d0f9fe91016f086c10a3662a154316891ae4fb8cc3481b2253bbd09c64629f3ffcb5e82b495e6721dce47734254ab64cc119c2a446f34d6cac813a3c0444d9a13ebbc0fa4baf1bdf78b9a9cf6620fe488bf2a1bf7e857ad6ea157542761cc6a7da8d4c2242853a1fd14629491680253603b910466927c2dd4818464d7d9c246b9cd726d123d1dda95d0325370a0f1b5751796d13501a2aa1ec0dc70a5b749f8d171cb7569d9b74354883a2216f452cc712d0829c8c5f206cc7924652473931adfd2bd3940b3adaf54967c0af599d4968da74f25d2cc309dbdbe3d6faa08f2c08205365d3c4a2c8344b1047c7d0caf6b595e5d24c89ea1b532fe3094d7a16c716110b75deb22a5a281c0f133cfcfaf5238a3c493c4f97f890bb33769ea652c67149be70e62de16b65730b3bd2f547c084ee77d456a86bf8f1f7304703d2524443c4b66ceb7d2e5d97124a6ae48158c16cefa3eb94a7ec49ae43dd02f9edd0924d73c7cec977186442518b8dc642dea31dce2b79b4ec5400210817da04caf0198e933e8c618a5f0e7123ca5786c45b10a543e7de350aa4c072c85612a99ec9534f70130eebc0ef842416091a0adba1d30730d04080928c094d49a70f0a354b918725578b27a9b65f1a43a7dc9d8b6c9a23e08ba83bb8802e69454eb316a6a0188713704b30098479f5d99497e60ffb372dbbe07642dea12bf6f3f4b6c508f1e061b0211b9be792fda7bb86f51f018085f2fd5ae316c761b35d562dcfb783b87d6da0820947f5d055f0f7cd3c50f1c61f1da1a73c7ef107f0ad957977a33cdc67f6aa82e03490f5333c1ec0a1fbd14b2aa961d2b3f6315bd06029c4c9654414bd9256de44ecf3b0485a41a9f7183d0469bd327f549201924ab80e3227f228e20e9fd3b646b3134385ed058f4bff4f714cdaa855e2c364d7bbaaf26df65bdb9dfc4f6104d219e41684493c621588ca8d01ef3211c28d613bc67e498b4b80279249bd947d029315dcabea9362e0258a5a819530459df44f7c83972299e54a29afd836fb176cdc1d86398b6c7a75cd15b1f76a0070839b5a24366603a0aee35a9f784e4a633703de42e6648a9626160a25c9033242cd97eb07ffc54a01d94c48333e832ec0eefe51a266fcb526dd2954cd1147d2a2df260affac31e4cec7ece02dce3f61078b0111b94c3bbddd41487e33820ddc8cdf7a1ebc58531f280e2c12a8514bb4e7a176208b73ec6f4cf1b660393837dea00a8474fc41039db848ad6b0375a36ba35582736cf7bdb33a051d49f966fd17a80cef2f0c458d1d5c932e4193c5018105416ff1b27eddf56d4277a49d0adbf34c998a062db4c8263f5c03696cda85a6f0db49a5c58e2809d7519e6ecaa017d90e31eef725fdb3f26d77bb15a3d924d3ccb728535dfdb7517a10b9a54a551c1ec95c6770ee0901d18f24149678f1677d1f5c447aee584c6f1dbb7a952da6b91e8af3d98fe790201b89a05b61abacfe6acd7a774e3a12436d169f54b8e2572f0ed70ca78e801bbc3b783d73c96d5424b82de2d8ba84f585c67cb4c7d8175b8a2fd75a59b24db0403064924a4a6ea5423ee818b70d1c5403da14370fbc98ab4ea6a7fe78e7d3e8da1a3f04856edd96e8b9d7e80064daed38d0ca194a638a11175a9812569a640a8d36afd90f19a1e0118ff7ecade45238544dcf5864697c4d36e444fb82bbc222a8a2bec2869c623f61aa38299d3a4e8806721d579907c31a0cf50b82dcebe08d8c5a21d97a707d5a83de1fb145227d0303334e5cc73c628e818ab6901c001ef8f02557d5ec579189b620f0e3307df5273573f707ee91985823894f9ccd80415c91d7baadd31ceedb3b26212e09a62bc22392fbbf3aa5e340dd3408c1c9e3d1d144dd5260c904812952466ba31a2dc80b8826b1354335b0d754954bc93cfce0eaf93665600f67505595ed66eb38ac98a23ae6568aac700361e784fc8ff3cf0cd19e15a3508f42fb1bca1f95a6502b5ed09df0f75859527025798b890df2f0110cc20798a7096831c9822ed5a9341fd6afc85a78736b857bbfbcae5f61fb5a3ca5577c4bfb6b1ccac7f21e95cb2c1e3fbe91f5a46522bfc49a0e11b4ccae898b5215cebacac2ac8d6685b05a9df649d39e40c66f4f1373e77a722beb0ed05167fa206fd66cae5b01741f86cc1681ce7efcee5d67cf8a89627d7d02ca8ae96e32cd5d74dffa715b7c2e0f24648932930e69667939490cadcd06b4396800152fa3dfb4810ab6c4de8f0814a9fb211517d19932befe0c0613699d481ba2d3140836d9dd074ac5dbbc27284463f190442b453d4a06e1e0053d0e097420e1406b104cc8bdc486a1fc581cf1dca50f63ce3de1403eb4a5080971aa2a2a911c3d24d0370b1c062e6b21c6a694eda76e61b877e596d34ebc507f10c3bbf969793f5b71d026d03cfcc2bdda2acdeea4b7066f07be408f6bb35ba7f3b8196e9a1d1ea30ff709d8c0fa29c40056bd53e609b5217976c422efe8052e4cbda4b12dd2a1286a4460c57bb3a138c55408fa6a0888e32299cc47efb84ad61a98385854824ec253f1279f9d1ffe6becb8c427b53c57b537e0f000000c7902347589230aa7316523108ab38842b3b97a0840d4c3eabd229232a71302edd1f3375d0092cb3a07312400c1be8a94da53a79d2fce38fed341193f6c4dc41f396774145aa18400bf108577e714f4a4c50ce408392f954eeae696d2605bb973b147ef98fa35d576c957a01f262d81157e1c8aaafc708634366afcebbf31cd4b7190d29e0b3a2960ab5ea952eecd38becbb7cf7659a95044a1ebe4240b0d26c7a932c14c1252eb24bad57be94c5632bc42aea31f722904306d39f1d0850ac029537c4425d048ecf3fcb5428638dbcb86e17d60164fc396c706c10f0a1ccb4dff2f36b47510a749dc03e32fd7f13893db135790d29a56fe1fae6d0202831d440242be2086c6e5dc71dae14089fc080a358f159faafb397da8ad8b48b1615112c76627a0e47a7cbfd2cb0e9a9c5316e96f8c2cf4ab7c875ed1bbd5a020ff2f265a1f63b6151a2288c3e83183e68cd12dce8094d392137f061d43421eeeee504e4db172c9fabc6297a5641a9a7696f16660489fd6f7ad9421068bd1294941e51b8d2b818627e3081369583e91c6b8b68c93173dc7fae27f3bb9a4c6a3d69cf5bf28b3f8b5c8fa8a8a90bfc228acd1df93c8b3f15fb318c7524ef2e8b6bc18010b4ac5b448dd3a134531654d610cfc9b393b5b1a22e90377b74ebc64aae95987881c0602311c0fa94cd612889125da49b810acf9617263b55e504b1b9160675cfbef83170fba4134640cc2be541bdb54077dd65304eddabcef91a3445804bcdbf00f53dbd3345c190c2ec117dfa986dd04c3f02b7ba9eee47538c5fda856d432cf343596c53cf3c109ada410a6e7b09c3f14b60c2c8a4cdf5ee0791017cd25f7ad96d0c51a5cc52e2647826662a99266a2f2072b7b1acf805d44d8064d419999df38537ffcd78a78ce3837bfe1faf7dc79f5e0d32ea5e62c06e6aa716e0e048cd5c5fa8b4212ac668ffaca2a4e8afb91aa7425a800fef89fd97587569489088b434510a38a49e8ee3e1b96a307dcd999268967405f354dc0478bac5229203eb9d6aacc2db83e233ce852ad55b799b6923653d3d5788ac56ffdfeb206acac33010161536e3573d54eea1925b6f4edc6aa193e9e362681e34564d146b49ed916ab8d6aea1a78e526c7a0dc56f5ca90d07862d17cb3f21307f2e012ffd011ec64d4cc23faa4a08c4128c0892be5d5999f681dd28bd6796f83e1e0b80ab61249e5049e81c2e692e360194129d1c9aa13d5302d3cbc6060159632c6d3c2db27c3fab53e0919a81ff5878f6328536292905883095b65581b696ee94a8a0dd7d0d11a2e269959a6f848c87eefef283e57fadf325b665ade2d6591b283c33ce9092ceb39df5bf6ff92cd6180353d8021cd3b8a7efb9be4f79b37ee19e4b9eccfec49b1f526420aed78424d5129afca3e28e1e6cb5cfdd894289abd5ee69d29413c548f65baea4c99ae73055000adb0dab38e7bc6c9c562a3214e3b279decf1dc731ceed1e4def2d70360953886da1eb7b18b745fd6d8751d038c6cde166d4101df1418689468d3add001cc44c8f2ab8105fc362cf5792d5c270441af890ba4bd563ce68b57a0f99b80ba93f7fea3765ec1fdadfc7274d4d7c46da05fbaf47e29de56ffc53f71188f94cc3ea26197eb9274aea10f793e348541feda0cb82915fbc966d317b74ef23a851f3a7886fe99c4bf917d5932dc9576313518276f690f400b8de28cc92c2b753ae283c7fa1639af82ab939e3be687621a525dbed50d33cd6366d559a75f1bd1cf25a0bc421c79debae4263beb171539835e6e5447d411383c3d7ebc8157892ab6d5013d49b0b777dc27f629e9e0924d889702dec588045563cc09cf1bea68fcfd0a2c6943248009b95cb6055b5c2f521c4120ecb4233c47d7f0454afa93063d5b26b94530b3b3089b85b64ebc684e5c38a561ba437b09582d38fd379e48e752cffc532bb8bec2999b2ce70fb9e5d7101d740008c935680537e8992b576c9f5dbcfb35513c11fa48caaedf52a6bc350aa2acbf1ec561680d8ee9837d3373e2d51183279a95d41eeb9558dee0fa43256b9a19012b3091a4bc1e94961beb05c33869915e69413122a953e0be0fb9759c9b8ac1254aabcce151638d60d197458e9757a1d1b0e7286fd66dbbe9deb51ca7274b3e0efb464ff44aafd5024cc534ce0d725bdd4e43601279231b6fda22ec25a680588794f086a9c094b751c575d0e0251afa27381c55a9c190ee3af55af0d20424db2411233fe46c537b41dc576639979469925a8c8e515539bebba248d3372ec80875afd26a04ef5d1aeb61390901eccf4df562680445ccd6a90fc70cf0ec08910b23e108ba9b35a689fecbeeacccda80a2acc6d2e7ed2990ac386ff3cc7992ea29d94bbe7d13c96cd31763cb8a5a150c6ee1781160e27df9b51678e650d009e95322a0a639c165288be42681e3dea6262e00ffdea6f076b9bc810880cfed87a609f1096dcf6af0f053b5ed80c2053157b97396d2876f6600149cda0fcbdac08621ae99e9fd24393d30c3911da7573c3675a695f9e014a3dc2d2e45296abaff428a733cb742a01df7059828f64e515099141081ab3a263c7c38459dbc0d32fa8768b8fc3550131d286637e25466d2a129d587663d9d0eaf4079a72cf37c9fccf5f2cdda2e9db69d82a87b4cf9c20dee03d935cf6099d1d1174344d551cb569a73c21ccafa6c59b988e0681bb175edd912cd64670598b444825c8f4a280dfee91ba18f50aa0f2fb529e5f73302fa09c4b9937f19ff6175af4f1321d3dc09e692ca7e1934f31ac91fb6e6fca4b1dda3a0063c8eeb5f68d43c820f8b9e1c6903ec1a2626ca3536bc386f42e7d865102daa82db5b2d2b580825afcfb65ca9c5cca7de06d838f84a84ee4f8381c05de2a0ec53bdcc447df8e8b9921c21cdd43312e1454790d727ae9c33487239195afc93149090e3c47dd9ec03feb51551ae92e9dc21ce5ebc4e8c8b99b9dd09ecd33a949aac69299024a52680c91244fcfefb9e2def28d0cdb621d7be8442c67c61b18a1228d341014a3116e9b8f2829e291f788e368b6e36460a6a76987918caa641f06184ab0a3910a43dfa97b3e5c31c837a12a436ee8796f9f507cfc438e6b061a59342be0c0bef0b646973d58830063a28c1cd3f434173f450c2ca3a846adcedf6b5d0bfd0813948e79fb8b6bdf9a5add644ab2a1d9795faae8ab680db6a4ad933848ec6ad09b212605ce497b2dba4eea307c45c17099a3f116508c73371d6f3dad906cf8ee9a9eab88e9365fc78112dfc8a4f865e627f1f6e11357632a3a1a2e9391f56376f8e181555ffc98ab9d93874392e81aa4183e8caec57a4a29613a3c4319595553143adf28bae56b719b8be0b2acc4b03038d48de63b19ca362945637d4a385becaaddad5b3dba297ffe71ca0cc9c9c1ff843ea5f0dff511b88ec7a6001a2570d09606c36d6bede06c4c7e93c77ca3da73f9933b16650df963a39ff34a3e83bad1c14a5a9457166f13c53502e9b9600982aa99598f711ef22720204282c9b02fea3eb55d568160f0fd62633787a77fd8acaed92f2607020c26f6f9386f9021f9123204a3f20e745caf37849b25f360e174718e1d78a32dbdab5d5aeb36c9b3366167b0fee60883a9b0f8bcd9695472ff4820462fa6f75801abe45c4ce02c6de61bddb434bf020b1145f0ca58f035f46107ca63a507498d7a1ffd9f6d3071479aec5999c1e7abc0e014c5be04b92486dce4d8bd88c321f3017050c599a6ed8888f810c75f2607fd35a8795b7478d1c346ce6694a0e1e3604cbe2ec7a31415d80508dd23ffe4db304a2ca1bc65681cff1135b95fc05f0a3b8cada0f5c83e8d0f3cdcbd4bfb48a7895cc9535d81d13ccc8f9534dfc542d9837e352eddd62577ee711d26bb07f41e9948d4b917a926eb8093944ae45cc6dd13ec9b61816950d158226ab7f1b8d8a1465f3eef2e9a63b3ff097282d2541fef5102c8b651ded051d3219f6527d4b5b6fcb1bd0fffe7080abde84ea1acbd2b89b0c9577fd7273675527a12dcaec02b3262389b05c2c09792ce465f7a879de0270fc2b6f28403a1dca0c5fc28f0687351c5bb346de8cfea7532b834904bb012731ef8fe83036c95251c757683834672fa80ba8383308e3e9e536fb0e906a9727e6b2870c3a8ee056d353a3fafe8e9ffde7b0ce951b60b35fc2f7d1e476ad1c45f2559ac66dd007fc27253256f98877a4476ad273880a874023e3f75b14b32366172bf860eb6dbcb0a98b83972e23b02fd02027ca7f9eaa0ee38eef55ccbace6ea3051d79c6017c34b5b502a9b0e52c8b4bd80391af549e6f4accb1cfdf2071de59ba903dde378d9e66ed0cbbddd66ac365e64c8fdb93b97305a55cb39beb745d4a824d1de5282b1b839a72603fe033f8c7aae2cbab65fcfb54eff28eb0bd4c72e3e892f953e3251b88ce178641e79ab5484bff93a8eaaf601be15368b46690ca10e70188f581f999eac931fe48f31b8951ccff1ba5d6cc007246595bdb22a3dcbfb2c9fe0d010bbab856f4c651dc5ab7e8fb0193b1c9924facf3c05a255ef328d589a0a89bfe67c7d971bd7b708517c8540391f6a6b9724069e572be3f85ca86e46e6fdedd22695fd8b364f3d5aa1a585971a39e1822eac8f51661ecd13c41e6349c030434a0dff79f441cb195bb08717345cf29401c834c35d9009895b6e5c03406b202ee333d7f531898967f93aaea74265fc605fb4b5a5750305ab82203f2fb49493a5d3deb285a2777c8641b3d5df1c7cdde888786d314ccdf20b60c5e05279160fae24073027d8b8b61aa4e4760d8d7d785d2fa1e551c2ff644bb83e69fc574c754a195efbca225e7a5e5ffb1f0852cc80187661295786fa35cca2baba685f744ec9e193e212823741437dde5ca003973261a167a389f2e5ead402feecbb4045a39d3ebd76c4bfcc65f60bc841f8488d08f258a95caf36cbac22671ac59a7e3ebd22d600bc417b15daaf296b562928ca6a2d7c11c5e96d3c1f56e683f1a55c07dde2cf889be2ca901606b613a299703312e74f80092ff6128835ea200fad70e0c2d094818ba6178200a211d6b2d2b068a4a0d757361535a73ad59a309c2167c874b23b2abf4e5eaf76e7e6851d4232303b8c9073ccea7398d34732289d0530f4183d004cc4c9827668005d28799ed2b23005f70bfbdcf2f4b6a821c2ca12b7915a5bd6098753218ebc41b16475c8611f492f85b08f551fee983915a5cfc82d24abd29a281963feadfe33cfe14735168b2e0528b0493011aa234d18450d9b29322d7094f3202f6a6b49094dad52707a3a80324835bf34daf557ac5f18695069601c6011fe48084355af3b531fb0e16a6ff81a8f9708e1a610d38dda66365255c7aa3a3d37bd4b58baa13d1b910280567642f97bf4836a1fcf336bf6e9a0fb347abcd1cdccfda04acdca918766a64fe7904b2e67b8872afd4366f9feb944f9b9ae5577c76c55c24b85e44b48d464333ba1a9f6e1e8ba10b57d7d8aab05e86702637485998fecc12b3fb12ff7ba3fd26223881a06350f215a8bffc46eba2cba0af2e11439ce012c667c5cafe3d0690c77b3f1ba108caffd5726393e61f194295cf4c51d0d383632cd9b75daeceb84ec450a0d344b08596530f1b95ff8b034c04b263a530c59d822e9c8c5c7328e539a18a2905c117944e22eceb60247b7aaaabdf0859a9143ffe2935454b6a87f21bc1de97893c23b48ce03782252f60e880f56b839daae71aa8a19e753506b370739ea88294ca2e0c1af31438ea33b084c43c6fa1381b7f1b9423685c53f3438e1e8893c6d157b297b336cf7f032ab4c01248ea5b2222e24f90240d8f28f6455e36cc423dbd2888d56c3fe6bdbcacf397ac13a1983797f7ccb84a1cb83339d4e9f599a154ac406a3bee3d4b3749b4f0768b0b225f31c9c91dc26a45a2e109a218ddd22af93b86b6fe336d3a051f7e07ff1d1d5eb662de4cfda0dacce0e20c37f34c75a97815591da22aacaa1e3a8028af1b5e15e470e800fd1dbdc99f21687724f07737c2c315e0836cb169f71e689fca00a2c73fe666699cd6571ea106767bd7f0bca061f0b4a21991fd02b8e695b78474ee1c9bc13bcdb9e477c02acf2343d449f9b85bd618bf7a2bc353c356b9578d3316b17f8bd3fc20f2b1a7a4cdc518e79c77d472c5cb6762693388d3124579d884a49a69d7f07c332be891c3244525c2e6b9387c041b93706a0121365cdf69aa839346e5e180945d8af7da0a8f65cd1bad1377d13ff6d02e7ea54d4377a1d3d49d3d357e61890034409b19f44fc02f5574f40fe535bd423bbd96a0a542ccade1b478b78265b25c1322fbbb8ec99cb45b22d737ee248169fe08f8a2958b925ace6372bcf1d1be57e9b4de97bd0db62425c53d869794d4390312b67db5e61d1b42c5afa549065005f359c47734f54b7f30918be1e2d0ff21596258caa287159fbe6dc0090242c43815367bb45067a55e0658d58eefd081b1541cf393561a5a369fe90c6d5d8caba63198c84fa0467fae813ecd3fb740a3783a53dfad07c9493fb3936b802e1bd9fb558bae88c44d9a4795aa634c13a5fba50923636ac6e2952da6c8424cc616eb364c11f876663d105fed392c15dbb00f9caf50af20c44e4fea91480cb4bfecaf126451e6f19146bb2ff26d310416c62410c37b000a1d1f0480419e5f5f320827fce26fbb25c9ab882ad4bdf6a674aaee87b85309a9783bbd34606ed46f6f761c5e124825b0e5df507c505814c769323bfa36170015e1720e2cbf30f79cc8515df1fb7d58695ecf8825e924e098d0dfcd5e396093d996a2fd4a9c5de03254b12dfcd2342f49acbecf18dc3417382e5b507652b1d089eed0805479546eba0fc7d17ecf11d692b4ce817f270720cf20737d3f02e302cf5e18d649bf3405fd262dba305e916280a38e3511307033dd70d2cde39d528e676f6a051ebc73b6ff0d5f63b58970e38e39ea366977a0809e22eed665620f65bbdd2f94ad82f3faaba1bfac309f60f843fe89573787092c8f7a7b44018ba7daba13e6b093b496f79adc0732574cac1cc33e5234d7770ad6cb534dab9856e390e172a91532ae77f4ec98054f4c12b02d0438ddf8d8d173e6a59f66564accb785693897b335199d9d8338e242703ad120f465a19153a1a330dcc275a399af921e0dac2b6d79ea51ec72fe932be071352c12933367487d7385de66d62b2bf5cae6c4d54f099d7c4ee10919dcb33a2b31498d979504b619a6eaf64ed400e491859f9c78c1d9d434d6ac69d570796088d76a47b4999816eb3b15e8de155f1392b75c1517e91df38ef0793610451ad31a0906eecf14c80b679202a6df9f00c7d28d1449988410c652740dde2ace85080e2a4f16824cde15ec4023b1fc4537d6947f1e001d37c90acae2995aab5476a99d3a20af07ae2e564e27e31b30d7bc3b8aa016e3b5c38feb9fc947ace24e83e7ba4f69f72e92f8f26bda8dd09ca791fe9cb1d0e14278c89a20ee2896924e88ba9cb3b916aff3b7a5924a91b4495d0305fb4adb3e036a31e2f200f272d4fa7285f96ab7e7b934464227e108511ded2ae4337aee944e4067c7b741d2f55483243d641b8bcca425bb69f591065a3b45c6f9513b472aff95c1b3e71133b3479cd5fc51e9eefe5bf0f7c2f9256f8d49a2ceb2d11ca0f0eab1e42464cb7d6aaa0c023147c1f108c3d6d1fa379638979170cb6d94fa92e5cf5f69316fd64c027eb10ddfd9b91fc91829f347cd73433e5197fd97fb10e99d2ed8868d49e24d59efa6758667f6ffc18e5258f98afeb01a3d794813fc2b9190090ccceaca0526f06a948d45bc7e2e40cdec3cf78c10676a8bb8a3e5e7200b3726b3407bf666862f9038d8216f9505cf7aa9a04f934d6da311d6500452676dccfd60977c4c99d56dcb7bb45fb2081e19803841a8edd8cc55b08082d9798a5c3a80de66f4ba2ccd90566d393d94608f17724719393b9df7725baacdf0e4e984b454576ad4f793143f4c8dc5f1ca822fbcdc90e9636727ee0638fb26759e6ff79b19c97ad224e5a85e1075833fe7fd2f3424420a5197eaa9d440c52807fc3e96c447dd745e49189f427454aae6aede782a8ac40582d85acc9ae68f95af556945889ae1fe381e69ed18aecb08866f5558ae36b6ff61c86fdb2b6f3eca083dc41c0", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0x0, 0x3, {0x7, 0x29, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x600) fsync(r4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x24, &(0x7f0000000100)={0x0, 0x1, 0x81, "d8abc123f020c56ef7f731cde7ebccc279"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a40)={0x1c, &(0x7f0000000900)={0x0, 0xa, 0x2, "9980"}, 0x0, 0x0}) 2.768539355s ago: executing program 3 (id=680): socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000300)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000079121000000001009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic={0x1000, 0x0, 0x7fffffff, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x25}, {0xff, 0x5, 0x0, '\x00', 0x10}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x3, 0x0, 0x0, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x5}, {0x0, 0x7, 0x80, '\x00', 0x5}, {0x7, 0x3, 0x7f, '\x00', 0xfe}, {0x5, 0x0, 0x7, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x27}, {0x58, 0x6, 0xfe, '\x00', 0x7f}, {0x0, 0x0, 0x41}, {0x0, 0x7f, 0x9}, {0x0, 0x0, 0x7}]}}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000380)={0x7, 0x8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x8000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) 2.383540538s ago: executing program 4 (id=681): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e09"], 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x4) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) listen(0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x50) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r10, 0x0, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000200)={0x2, r12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) 1.698746042s ago: executing program 2 (id=682): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="380900001000000000000000ed0000074da2ff9f000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001800128008000100767469000c0002800800050064010100"], 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3a322bb29c735580"}}, 0x38}, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "fde9e2", 0x18, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, {[@routing={0x3b, 0x2, 0x1, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}]}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x8, 0x7, &(0x7f0000000080)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x85ff, 0x0, 0x0, 0x37}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x121301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f00000000c0)={0x20, 0x1, 0x73c, 0x7, 0x2f, 0x5, &(0x7f0000000000)="057abda7cd4ec9aba1c3a0a1a04c635d5105c5670ff9edeeca39ed2cb58d2129b0802545063f4258e9c17393bba6ba"}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.697456872s ago: executing program 0 (id=692): socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000300)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c0009"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000200)=0x7ff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000079121000000001009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic={0x1000, 0x0, 0x7fffffff, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x25}, {0xff, 0x5, 0x0, '\x00', 0x10}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x3, 0x0, 0x0, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x5}, {0x0, 0x7, 0x80, '\x00', 0x5}, {0x7, 0x3, 0x7f, '\x00', 0xfe}, {0x5, 0x0, 0x7, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x27}, {0x58, 0x6, 0xfe, '\x00', 0x7f}, {0x0, 0x0, 0x41}, {0x0, 0x7f, 0x9}, {0x0, 0x0, 0x7}]}}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000380)={0x7, 0x8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x8000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) 97.639276ms ago: executing program 1 (id=683): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) shutdown(r5, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x10002, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x10000000, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) r6 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x1) chdir(&(0x7f0000000480)='./cgroup\x00') link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x9b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) 0s ago: executing program 2 (id=684): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) shutdown(r6, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x10002, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x10000000, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) r7 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x1) chdir(&(0x7f0000000480)='./cgroup\x00') link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x9b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) kernel console output (not intermixed with test programs): vice=d7.3b [ 195.089584][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.098441][ T5942] usb 5-1: Product: syz [ 195.102660][ T5942] usb 5-1: Manufacturer: syz [ 195.114434][ T5942] usb 5-1: SerialNumber: syz [ 195.126579][ T48] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 195.176521][ T5846] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 195.185001][ T5942] usb 5-1: config 0 descriptor?? [ 195.280423][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 195.286191][ T48] usb 2-1: too many configurations: 69, using maximum allowed: 8 [ 195.311073][ T48] usb 2-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 195.326451][ T48] usb 2-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 195.345196][ T48] usb 2-1: Product: syz [ 195.349852][ T48] usb 2-1: Manufacturer: syz [ 195.354508][ T48] usb 2-1: SerialNumber: syz [ 195.367147][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 195.387272][ T48] usb 2-1: config 0 descriptor?? [ 195.400119][ T5846] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 195.425889][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.444885][ T5846] usb 3-1: Product: syz [ 195.454299][ T5846] usb 3-1: Manufacturer: syz [ 195.470254][ T5846] usb 3-1: SerialNumber: syz [ 195.491803][ T5846] usb 3-1: config 0 descriptor?? [ 195.525040][ T5846] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 195.550340][ T5846] em28xx 3-1:0.0: Device initialization failed. [ 195.562993][ T5846] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 195.600815][ T48] usb 2-1: USB disconnect, device number 17 [ 195.624551][ T7150] FAULT_INJECTION: forcing a failure. [ 195.624551][ T7150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.671518][ T7150] CPU: 1 UID: 0 PID: 7150 Comm: syz.0.321 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 195.671546][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.671557][ T7150] Call Trace: [ 195.671566][ T7150] [ 195.671574][ T7150] dump_stack_lvl+0x189/0x250 [ 195.671604][ T7150] ? __pfx____ratelimit+0x10/0x10 [ 195.671637][ T7150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.671661][ T7150] ? __pfx__printk+0x10/0x10 [ 195.671688][ T7150] ? __might_fault+0xb0/0x130 [ 195.671725][ T7150] should_fail_ex+0x414/0x560 [ 195.671759][ T7150] _copy_from_user+0x2d/0xb0 [ 195.671785][ T7150] get_compat_msghdr+0xad/0x4a0 [ 195.671820][ T7150] ? __pfx_get_compat_msghdr+0x10/0x10 [ 195.671849][ T7150] ? rcu_is_watching+0x15/0xb0 [ 195.671871][ T7150] ? ___sys_sendmsg+0x22f/0x2a0 [ 195.671905][ T7150] ___sys_sendmsg+0x193/0x2a0 [ 195.671933][ T7150] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.671999][ T7150] ? __fget_files+0x2a/0x420 [ 195.672023][ T7150] ? __fget_files+0x3a0/0x420 [ 195.672061][ T7150] __sys_sendmmsg+0x28e/0x430 [ 195.672093][ T7150] ? __pfx___sys_sendmmsg+0x10/0x10 [ 195.672129][ T7150] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.672170][ T7150] ? ksys_write+0x22a/0x250 [ 195.672206][ T7150] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 195.672234][ T7150] __do_fast_syscall_32+0xb6/0x2b0 [ 195.672255][ T7150] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.672290][ T7150] do_fast_syscall_32+0x34/0x80 [ 195.672309][ T7150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.672334][ T7150] RIP: 0023:0xf70de539 [ 195.672352][ T7150] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 195.672368][ T7150] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 195.672390][ T7150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000900 [ 195.672404][ T7150] RDX: 00000000040000cf RSI: 0000000000000000 RDI: 0000000000000000 [ 195.672416][ T7150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.672427][ T7150] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.672439][ T7150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.672469][ T7150] [ 195.920712][ T7153] bridge0: entered promiscuous mode [ 195.926077][ T7153] macvlan2: entered promiscuous mode [ 196.265441][ T7158] binder: 7157:7158 ioctl c0306201 80000080 returned -14 [ 196.274724][ T7158] binder: 7157:7158 ioctl c0306201 80000600 returned -14 [ 196.283630][ T7158] netlink: 'syz.0.323': attribute type 11 has an invalid length. [ 196.286590][ T5848] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 196.395708][ T7160] netlink: 'syz.0.324': attribute type 2 has an invalid length. [ 196.413458][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'. [ 196.422941][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'. [ 196.446704][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 196.456088][ T5848] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 196.644826][ T5848] usb 4-1: config 0 has no interface number 0 [ 196.670004][ T5848] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=7d.35 [ 196.679560][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.701229][ T5848] usb 4-1: Product: syz [ 196.712876][ T5848] usb 4-1: Manufacturer: syz [ 196.780243][ T5848] usb 4-1: SerialNumber: syz [ 196.894774][ T5848] usb 4-1: config 0 descriptor?? [ 197.559624][ T5934] usb 5-1: USB disconnect, device number 21 [ 198.324064][ T5846] usb 3-1: USB disconnect, device number 18 [ 198.702239][ T7183] netlink: 112 bytes leftover after parsing attributes in process `syz.0.328'. [ 198.735451][ T5848] qmi_wwan 4-1:0.35: probe with driver qmi_wwan failed with error -22 [ 198.757459][ T5848] usb 4-1: USB disconnect, device number 21 [ 199.104086][ T7172] FAULT_INJECTION: forcing a failure. [ 199.104086][ T7172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.146421][ T7172] CPU: 1 UID: 0 PID: 7172 Comm: syz.4.327 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 199.146447][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.146467][ T7172] Call Trace: [ 199.146475][ T7172] [ 199.146483][ T7172] dump_stack_lvl+0x189/0x250 [ 199.146513][ T7172] ? __pfx____ratelimit+0x10/0x10 [ 199.146542][ T7172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.146565][ T7172] ? __pfx__printk+0x10/0x10 [ 199.146590][ T7172] ? __might_fault+0xb0/0x130 [ 199.146625][ T7172] should_fail_ex+0x414/0x560 [ 199.146658][ T7172] _copy_from_user+0x2d/0xb0 [ 199.146682][ T7172] get_compat_msghdr+0xad/0x4a0 [ 199.146715][ T7172] ? __pfx_get_compat_msghdr+0x10/0x10 [ 199.146756][ T7172] ___sys_sendmsg+0x193/0x2a0 [ 199.146785][ T7172] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.146849][ T7172] ? __fget_files+0x2a/0x420 [ 199.146873][ T7172] ? __fget_files+0x3a0/0x420 [ 199.146910][ T7172] __sys_sendmsg+0x164/0x220 [ 199.146938][ T7172] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.146977][ T7172] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 199.147009][ T7172] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.147038][ T7172] __do_fast_syscall_32+0xb6/0x2b0 [ 199.147057][ T7172] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.147090][ T7172] do_fast_syscall_32+0x34/0x80 [ 199.147109][ T7172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.147133][ T7172] RIP: 0023:0xf7f17539 [ 199.147150][ T7172] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 199.147164][ T7172] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 199.147186][ T7172] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 199.147199][ T7172] RDX: 000000000400c010 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.147210][ T7172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.147221][ T7172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.147233][ T7172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.147262][ T7172] [ 199.456792][ T5846] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 199.548442][ T7194] fuse: Bad value for 'fd' [ 199.670297][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 199.686413][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 199.693996][ T5846] usb 2-1: unable to get BOS descriptor or descriptor too short [ 199.702820][ T5846] usb 2-1: too many configurations: 249, using maximum allowed: 8 [ 199.714115][ T5846] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 199.726050][ T5846] usb 2-1: can't read configurations, error -61 [ 199.857138][ T5846] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 199.926963][ T24] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 200.066800][ T7201] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 200.335794][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 200.552968][ T5846] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.563046][ T5846] usb 2-1: too many configurations: 249, using maximum allowed: 8 [ 200.587892][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.636912][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.660630][ T5846] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 200.671024][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.692767][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.701738][ T5846] usb 2-1: can't read configurations, error -61 [ 200.756563][ T24] usb 3-1: Product: syz [ 200.760789][ T24] usb 3-1: Manufacturer: syz [ 200.765426][ T24] usb 3-1: SerialNumber: syz [ 200.774976][ T5846] usb usb2-port1: attempt power cycle [ 201.189457][ T5846] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 201.271878][ T24] usb 3-1: 0:2 : does not exist [ 201.279674][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 201.295803][ T5846] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.313189][ T5846] usb 2-1: too many configurations: 249, using maximum allowed: 8 [ 201.363445][ T5846] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 201.453704][ T5846] usb 2-1: can't read configurations, error -61 [ 201.490866][ T7218] Cannot find map_set index 0 as target [ 201.622214][ T5846] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 201.677360][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 201.908488][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 201.949911][ T7220] vlan2: entered promiscuous mode [ 201.975497][ T5846] usb 2-1: device descriptor read/all, error -71 [ 202.006807][ T5846] usb usb2-port1: unable to enumerate USB device [ 202.628359][ T7228] macvlan4: entered promiscuous mode [ 203.068837][ T5848] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 203.226486][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 203.233979][ T5848] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 203.248922][ T5848] usb 2-1: config 0 has no interface number 0 [ 203.264826][ T5848] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=7d.35 [ 203.279257][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.289643][ T5848] usb 2-1: Product: syz [ 203.301374][ T5848] usb 2-1: Manufacturer: syz [ 203.321417][ T5848] usb 2-1: SerialNumber: syz [ 203.365826][ T5848] usb 2-1: config 0 descriptor?? [ 203.634348][ T92] usb 3-1: USB disconnect, device number 19 [ 203.764627][ T7241] SET target dimension over the limit! [ 205.059475][ T7257] netlink: 112 bytes leftover after parsing attributes in process `syz.3.353'. [ 205.206642][ T92] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 205.410743][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 205.438832][ T92] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 205.460260][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.473916][ T5848] qmi_wwan 2-1:0.35: probe with driver qmi_wwan failed with error -22 [ 205.570001][ T92] usb 3-1: Product: syz [ 205.591482][ T92] usb 3-1: Manufacturer: syz [ 205.606636][ T92] usb 3-1: SerialNumber: syz [ 205.619351][ T92] usb 3-1: config 0 descriptor?? [ 205.636467][ T92] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 205.651677][ T92] em28xx 3-1:0.0: Device initialization failed. [ 205.660333][ T5848] usb 2-1: USB disconnect, device number 22 [ 205.669424][ T92] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 205.686663][ T5846] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 205.837836][ T5934] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 205.846404][ T5846] usb 1-1: device descriptor read/64, error -71 [ 205.994421][ T2153] usb 3-1: USB disconnect, device number 20 [ 206.037723][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 206.061934][ T5934] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 206.086547][ T5934] usb 4-1: config 0 has no interface number 0 [ 206.096680][ T5934] usb 4-1: config 0 interface 89 has no altsetting 0 [ 206.108907][ T5846] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 206.115035][ T5934] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 206.126013][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.149357][ T5934] usb 4-1: Product: syz [ 206.153696][ T5934] usb 4-1: Manufacturer: syz [ 206.175326][ T5934] usb 4-1: SerialNumber: syz [ 206.207545][ T5934] usb 4-1: config 0 descriptor?? [ 206.256482][ T5846] usb 1-1: device descriptor read/64, error -71 [ 206.376799][ T5846] usb usb1-port1: attempt power cycle [ 206.437996][ T7263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.457550][ T7263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.580542][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 206.606706][ T5848] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 206.621047][ T92] usb 4-1: USB disconnect, device number 22 [ 206.716583][ T5846] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 206.757126][ T5846] usb 1-1: device descriptor read/8, error -71 [ 206.798410][ T5848] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 206.809182][ T5848] usb 5-1: config 8 has no interface number 0 [ 206.815332][ T5848] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 206.840355][ T5848] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 206.853789][ T5848] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has an invalid bInterval 115, changing to 4 [ 206.866486][ T2153] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 206.868218][ T5848] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid maxpacket 55430, setting to 1023 [ 206.887800][ T5848] usb 5-1: config 8 interface 177 has no altsetting 0 [ 206.894932][ T5848] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 206.906807][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.923475][ T7269] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 207.007260][ T5846] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 207.036677][ T2153] usb 3-1: Using ep0 maxpacket: 8 [ 207.046141][ T5846] usb 1-1: device descriptor read/8, error -71 [ 207.054896][ T2153] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 207.068269][ T2153] usb 3-1: config 2 has no interface number 0 [ 207.074410][ T2153] usb 3-1: config 2 interface 31 has no altsetting 0 [ 207.092000][ T2153] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 207.101204][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.109426][ T2153] usb 3-1: Product: syz [ 207.113626][ T2153] usb 3-1: Manufacturer: syz [ 207.126669][ T2153] usb 3-1: SerialNumber: syz [ 207.145611][ T2153] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 207.151175][ T5848] usb 5-1: string descriptor 0 read error: -71 [ 207.156735][ T5846] usb usb1-port1: unable to enumerate USB device [ 207.207590][ T5848] ir_toy 5-1:8.177: required endpoints not found [ 207.240341][ T5848] usb 5-1: USB disconnect, device number 22 [ 207.389170][ T7273] batadv0: entered promiscuous mode [ 207.396939][ T7273] macsec1: entered promiscuous mode [ 207.432476][ T7273] batadv0: left promiscuous mode [ 207.553692][ T2153] usb 3-1: USB disconnect, device number 21 [ 207.673633][ T7290] netlink: 'syz.3.366': attribute type 39 has an invalid length. [ 207.930415][ T7294] macvlan4: entered promiscuous mode [ 207.966460][ T5846] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 208.186436][ T5934] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 208.186621][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 208.239909][ T5846] usb 4-1: too many configurations: 69, using maximum allowed: 8 [ 208.287897][ T5846] usb 4-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 208.327108][ T5846] usb 4-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 208.336587][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 208.344784][ T5846] usb 4-1: Product: syz [ 208.350399][ T5846] usb 4-1: Manufacturer: syz [ 208.353800][ T5934] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 208.355411][ T5846] usb 4-1: SerialNumber: syz [ 208.390370][ T5934] usb 5-1: config 0 has no interface number 0 [ 208.397494][ T5846] usb 4-1: config 0 descriptor?? [ 208.403038][ T5934] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=7d.35 [ 208.425064][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.454937][ T5934] usb 5-1: Product: syz [ 208.465005][ T5934] usb 5-1: Manufacturer: syz [ 208.483004][ T5934] usb 5-1: SerialNumber: syz [ 208.497965][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 208.501051][ T5934] usb 5-1: config 0 descriptor?? [ 208.507771][ T7302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.371'. [ 208.567976][ T2153] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 208.653020][ T5846] usb 4-1: USB disconnect, device number 23 [ 208.714134][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 208.725562][ T7307] netlink: 'syz.2.373': attribute type 5 has an invalid length. [ 208.733956][ T7307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'. [ 208.748854][ T2153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 208.771320][ T7307] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 208.778570][ T2153] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 208.782010][ T7307] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 208.798231][ T7307] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 208.800217][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.806994][ T7307] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 208.807177][ T7307] geneve2: entered promiscuous mode [ 208.830803][ T7307] geneve2: entered allmulticast mode [ 208.855014][ T2153] usb 2-1: Product: syz [ 208.865504][ T2153] usb 2-1: Manufacturer: syz [ 208.884667][ T2153] usb 2-1: SerialNumber: syz [ 208.911203][ T2153] usb 2-1: config 0 descriptor?? [ 208.950059][ T2153] em28xx 2-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 209.000306][ T2153] em28xx 2-1:0.0: Device initialization failed. [ 209.025003][ T2153] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 209.256649][ T5848] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 209.366520][ T2153] usb 2-1: USB disconnect, device number 23 [ 209.424223][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 209.436488][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 209.444153][ T5848] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 209.455008][ T5848] usb 3-1: config 4 has no interface number 0 [ 209.461679][ T5848] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.471883][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 209.476511][ T5848] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.657805][ T5848] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 209.667689][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.689995][ T5848] hub 3-1:4.128: USB hub found [ 210.349427][ T5848] hub 3-1:4.128: config failed, can't read hub descriptor (err -90) [ 210.378053][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 210.471126][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 210.607324][ T92] usb 3-1: USB disconnect, device number 22 [ 210.697128][ T5848] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 210.892361][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 211.088596][ T5848] usb 4-1: config 162 has an invalid interface number: 161 but max is 1 [ 211.117129][ T5848] usb 4-1: config 162 has an invalid interface number: 187 but max is 1 [ 211.125585][ T5848] usb 4-1: config 162 has no interface number 0 [ 211.168537][ T5934] qmi_wwan 5-1:0.35: probe with driver qmi_wwan failed with error -22 [ 211.206588][ T92] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 211.235987][ T5848] usb 4-1: config 162 has no interface number 1 [ 211.251679][ T5848] usb 4-1: config 162 interface 161 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 211.276299][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 211.290658][ T5934] usb 5-1: USB disconnect, device number 23 [ 211.327852][ T5848] usb 4-1: config 162 interface 187 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 211.356681][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 211.382961][ T5848] usb 4-1: config 162 interface 187 altsetting 1 has an invalid endpoint descriptor of length 6, skipping [ 211.443293][ T92] usb 3-1: config 0 has no interfaces? [ 211.479392][ T5848] usb 4-1: config 162 interface 187 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 211.548796][ T92] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 211.648673][ T5848] usb 4-1: config 162 interface 161 has no altsetting 0 [ 211.655847][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.664910][ T5848] usb 4-1: config 162 interface 187 has no altsetting 0 [ 211.674605][ T92] usb 3-1: Product: syz [ 211.680029][ T92] usb 3-1: Manufacturer: syz [ 211.684935][ T92] usb 3-1: SerialNumber: syz [ 211.693459][ T5848] usb 4-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7 [ 211.716973][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.736673][ T92] usb 3-1: config 0 descriptor?? [ 211.755841][ T5848] usb 4-1: Product: syz [ 211.778469][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 211.785625][ T5166] Bluetooth: hci0: command 0x0406 tx timeout [ 211.785652][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 211.792613][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 211.804360][ T5166] Bluetooth: hci4: command 0x0406 tx timeout [ 211.812119][ T5848] usb 4-1: Manufacturer: syz [ 211.845181][ T5848] usb 4-1: SerialNumber: syz [ 211.886798][ T7344] Cannot find add_set index 1 as target [ 212.298977][ T7331] ppp0: entered promiscuous mode [ 212.304202][ T7331] ppp0: entered allmulticast mode [ 212.402080][ T5848] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 212.439631][ T5848] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 212.496221][ T5848] usb 4-1: USB disconnect, device number 24 [ 212.799156][ T7354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.383'. [ 212.953982][ T7343] netlink: 'syz.1.381': attribute type 16 has an invalid length. [ 212.963283][ T7343] netlink: 'syz.1.381': attribute type 17 has an invalid length. [ 213.012633][ T7343] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 213.546539][ T5923] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 213.626731][ T7371] netlink: 'syz.0.387': attribute type 39 has an invalid length. [ 213.751467][ T5923] usb 5-1: config 0 has no interfaces? [ 213.841042][ T5923] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 213.861152][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.874290][ T5848] usb 3-1: USB disconnect, device number 23 [ 213.906008][ T5923] usb 5-1: Product: syz [ 213.941411][ T5923] usb 5-1: Manufacturer: syz [ 213.946045][ T5923] usb 5-1: SerialNumber: syz [ 214.004420][ T5923] usb 5-1: config 0 descriptor?? [ 214.009613][ T92] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 214.190675][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 214.210062][ T92] usb 1-1: too many configurations: 69, using maximum allowed: 8 [ 214.251286][ T7364] program syz.4.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.352045][ T92] usb 1-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 214.428024][ T92] usb 1-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 214.428058][ T92] usb 1-1: Product: syz [ 214.428076][ T92] usb 1-1: Manufacturer: syz [ 214.428093][ T92] usb 1-1: SerialNumber: syz [ 214.455153][ T92] usb 1-1: config 0 descriptor?? [ 214.699639][ T92] usb 1-1: USB disconnect, device number 25 [ 214.762054][ T7393] netlink: 112 bytes leftover after parsing attributes in process `syz.3.395'. [ 215.121878][ T7399] fuse: Bad value for 'fd' [ 215.259814][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 215.286707][ T92] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 215.413227][ T7405] FAULT_INJECTION: forcing a failure. [ 215.413227][ T7405] name failslab, interval 1, probability 0, space 0, times 0 [ 215.427308][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.3.399 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 215.427335][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.427355][ T7405] Call Trace: [ 215.427363][ T7405] [ 215.427372][ T7405] dump_stack_lvl+0x189/0x250 [ 215.427402][ T7405] ? __pfx____ratelimit+0x10/0x10 [ 215.427432][ T7405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.427457][ T7405] ? __pfx__printk+0x10/0x10 [ 215.427499][ T7405] ? __pfx___might_resched+0x10/0x10 [ 215.427521][ T7405] ? fs_reclaim_acquire+0x7d/0x100 [ 215.427555][ T7405] should_fail_ex+0x414/0x560 [ 215.427589][ T7405] should_failslab+0xa8/0x100 [ 215.427617][ T7405] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 215.427650][ T7405] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.427678][ T7405] ? __alloc_skb+0x112/0x2d0 [ 215.427706][ T7405] __alloc_skb+0x112/0x2d0 [ 215.427734][ T7405] sock_wmalloc+0xb2/0x130 [ 215.427765][ T7405] l2tp_ip_sendmsg+0x1bb/0x1630 [ 215.427792][ T7405] ? __asan_memset+0x22/0x50 [ 215.427816][ T7405] ? inet_sendmsg+0x2f4/0x370 [ 215.427834][ T7405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.427868][ T7405] __sock_sendmsg+0x19c/0x270 [ 215.427920][ T7405] ____sys_sendmsg+0x52d/0x830 [ 215.427952][ T7405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.427985][ T7405] ? rcu_is_watching+0x15/0xb0 [ 215.428008][ T7405] ? ___sys_sendmsg+0x22f/0x2a0 [ 215.428041][ T7405] ___sys_sendmsg+0x21f/0x2a0 [ 215.428071][ T7405] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.428134][ T7405] ? __fget_files+0x2a/0x420 [ 215.428159][ T7405] ? __fget_files+0x3a0/0x420 [ 215.428197][ T7405] __sys_sendmmsg+0x28e/0x430 [ 215.428230][ T7405] ? __pfx___sys_sendmmsg+0x10/0x10 [ 215.428267][ T7405] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.428309][ T7405] ? ksys_write+0x22a/0x250 [ 215.428351][ T7405] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 215.428382][ T7405] __do_fast_syscall_32+0xb6/0x2b0 [ 215.428403][ T7405] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.428437][ T7405] do_fast_syscall_32+0x34/0x80 [ 215.428458][ T7405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.428481][ T7405] RIP: 0023:0xf7fc3539 [ 215.428500][ T7405] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 215.428517][ T7405] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 215.428539][ T7405] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000900 [ 215.428553][ T7405] RDX: 00000000040000cf RSI: 0000000000000000 RDI: 0000000000000000 [ 215.428565][ T7405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.428577][ T7405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 215.428589][ T7405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.428620][ T7405] [ 215.758737][ T7407] binder: 7406:7407 ioctl c0306201 80000080 returned -14 [ 215.767278][ T7407] binder: BINDER_SET_CONTEXT_MGR already set [ 215.773286][ T7407] binder: 7406:7407 ioctl 4018620d 80000040 returned -16 [ 215.781071][ T7407] binder: 7406:7407 ioctl c0306201 80000600 returned -14 [ 215.788681][ T7407] netlink: 'syz.0.400': attribute type 11 has an invalid length. [ 216.056554][ T92] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.106457][ T92] usb 3-1: config 0 interface 0 has no altsetting 0 [ 216.176918][ T92] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 216.186054][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.209728][ T92] usb 3-1: Product: syz [ 216.213971][ T92] usb 3-1: Manufacturer: syz [ 216.219260][ T92] usb 3-1: SerialNumber: syz [ 216.281853][ T5846] usb 5-1: USB disconnect, device number 24 [ 216.289792][ T92] usb 3-1: config 0 descriptor?? [ 216.310569][ T92] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 216.412723][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.474314][ T92] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 216.486203][ T5923] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 216.496624][ T2153] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 216.510370][ T92] usb 3-1: media controller created [ 216.611450][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.671246][ T2153] usb 1-1: config 0 has no interfaces? [ 216.676781][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 216.686554][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.708272][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.731725][ T5923] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 216.778442][ T2153] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 216.797330][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.802246][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.815728][ T2153] usb 1-1: Product: syz [ 216.846186][ T2153] usb 1-1: Manufacturer: syz [ 216.856565][ T2153] usb 1-1: SerialNumber: syz [ 216.879533][ T2153] usb 1-1: config 0 descriptor?? [ 216.889946][ T92] DVB: Unable to find symbol tda10046_attach() [ 216.896158][ T92] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 216.907635][ T5923] usb 4-1: config 0 descriptor?? [ 216.963930][ T92] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 217.219226][ T92] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 217.244747][ T92] usb 3-1: USB disconnect, device number 24 [ 217.330237][ T5923] wacom 0003:056A:0000.0003: item fetching failed at offset 10/11 [ 217.529687][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.551728][ T5923] wacom 0003:056A:0000.0003: parse failed [ 217.564999][ T7435] netlink: 112 bytes leftover after parsing attributes in process `syz.1.409'. [ 217.574766][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.577517][ T5923] wacom 0003:056A:0000.0003: probe with driver wacom failed with error -22 [ 219.165904][ T2153] usb 4-1: USB disconnect, device number 25 [ 219.388226][ T7456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.417'. [ 219.500950][ T7461] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 219.518530][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 219.546921][ T7460] erspan0: Device is already in use. [ 219.706884][ T7468] netlink: 112 bytes leftover after parsing attributes in process `syz.4.420'. [ 219.871170][ T2153] usb 1-1: USB disconnect, device number 26 [ 219.906893][ T7448] FAULT_INJECTION: forcing a failure. [ 219.906893][ T7448] name failslab, interval 1, probability 0, space 0, times 0 [ 219.919997][ T7448] CPU: 0 UID: 0 PID: 7448 Comm: syz.2.414 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 219.920015][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.920023][ T7448] Call Trace: [ 219.920029][ T7448] [ 219.920034][ T7448] dump_stack_lvl+0x189/0x250 [ 219.920056][ T7448] ? __pfx____ratelimit+0x10/0x10 [ 219.920075][ T7448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.920090][ T7448] ? __pfx__printk+0x10/0x10 [ 219.920109][ T7448] ? __pfx___might_resched+0x10/0x10 [ 219.920126][ T7448] should_fail_ex+0x414/0x560 [ 219.920147][ T7448] should_failslab+0xa8/0x100 [ 219.920164][ T7448] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 219.920179][ T7448] ? __alloc_skb+0x112/0x2d0 [ 219.920195][ T7448] __alloc_skb+0x112/0x2d0 [ 219.920211][ T7448] netlink_sendmsg+0x5c6/0xb30 [ 219.920231][ T7448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.920247][ T7448] ? __import_iovec+0x5d4/0x7f0 [ 219.920260][ T7448] ? aa_sock_msg_perm+0x94/0x160 [ 219.920279][ T7448] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.920297][ T7448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.920320][ T7448] __sock_sendmsg+0x21c/0x270 [ 219.920340][ T7448] ____sys_sendmsg+0x505/0x830 [ 219.920358][ T7448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.920383][ T7448] ___sys_sendmsg+0x21f/0x2a0 [ 219.920399][ T7448] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.920436][ T7448] ? __fget_files+0x2a/0x420 [ 219.920451][ T7448] ? __fget_files+0x3a0/0x420 [ 219.920472][ T7448] __sys_sendmsg+0x164/0x220 [ 219.920489][ T7448] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.920512][ T7448] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 219.920533][ T7448] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.920552][ T7448] __do_fast_syscall_32+0xb6/0x2b0 [ 219.920564][ T7448] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.920584][ T7448] do_fast_syscall_32+0x34/0x80 [ 219.920596][ T7448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.920611][ T7448] RIP: 0023:0xf709e539 [ 219.920623][ T7448] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 219.920633][ T7448] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 219.920648][ T7448] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 219.920656][ T7448] RDX: 000000000400c010 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.920664][ T7448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.920671][ T7448] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 219.920678][ T7448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.920694][ T7448] [ 220.183701][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.248339][ T5923] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 220.450652][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 220.463271][ T5923] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 220.472517][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.482747][ T5923] usb 2-1: Product: syz [ 220.483143][ T7471] Cannot find map_set index 0 as target [ 220.488714][ T5923] usb 2-1: Manufacturer: syz [ 220.502212][ T5923] usb 2-1: SerialNumber: syz [ 220.510363][ T5923] usb 2-1: config 0 descriptor?? [ 220.539867][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 220.615940][ T5923] em28xx 2-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 220.635500][ T7473] vlan2: entered promiscuous mode [ 220.655217][ T5923] em28xx 2-1:0.0: Device initialization failed. [ 220.679238][ T5923] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 221.636393][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 221.909707][ T24] usb 4-1: device descriptor read/64, error -71 [ 222.126993][ T5842] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 222.176427][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 222.317502][ T5842] usb 5-1: device descriptor read/64, error -71 [ 222.398217][ T24] usb 4-1: device descriptor read/64, error -71 [ 222.437178][ T7500] FAULT_INJECTION: forcing a failure. [ 222.437178][ T7500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.483434][ T7500] CPU: 0 UID: 0 PID: 7500 Comm: syz.2.427 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 222.483464][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.483474][ T7500] Call Trace: [ 222.483483][ T7500] [ 222.483491][ T7500] dump_stack_lvl+0x189/0x250 [ 222.483521][ T7500] ? __pfx____ratelimit+0x10/0x10 [ 222.483553][ T7500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.483577][ T7500] ? __pfx__printk+0x10/0x10 [ 222.483619][ T7500] should_fail_ex+0x414/0x560 [ 222.483653][ T7500] _copy_to_user+0x31/0xb0 [ 222.483680][ T7500] simple_read_from_buffer+0xe1/0x170 [ 222.483711][ T7500] proc_fail_nth_read+0x1df/0x250 [ 222.483743][ T7500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.483776][ T7500] ? rw_verify_area+0x258/0x650 [ 222.483798][ T7500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.483828][ T7500] vfs_read+0x200/0x980 [ 222.483857][ T7500] ? __pfx___mutex_lock+0x10/0x10 [ 222.483878][ T7500] ? __pfx_vfs_read+0x10/0x10 [ 222.483902][ T7500] ? __fget_files+0x2a/0x420 [ 222.483941][ T7500] ? __fget_files+0x3a0/0x420 [ 222.483965][ T7500] ? __fget_files+0x2a/0x420 [ 222.484001][ T7500] ksys_read+0x145/0x250 [ 222.484025][ T7500] ? __pfx_ksys_read+0x10/0x10 [ 222.484041][ T7500] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 222.484060][ T7500] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.484080][ T7500] __do_fast_syscall_32+0xb6/0x2b0 [ 222.484092][ T7500] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.484113][ T7500] do_fast_syscall_32+0x34/0x80 [ 222.484125][ T7500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.484139][ T7500] RIP: 0023:0xf709e539 [ 222.484151][ T7500] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 222.484167][ T7500] RSP: 002b:00000000f503a590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 222.484184][ T7500] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f503a620 [ 222.484193][ T7500] RDX: 000000000000000f RSI: 00000000f7403ff4 RDI: 0000000000000000 [ 222.484200][ T7500] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 222.484207][ T7500] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.484215][ T7500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.484233][ T7500] [ 222.556462][ T5842] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 222.557229][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.726209][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.735347][ T24] usb usb4-port1: attempt power cycle [ 223.046452][ T5842] usb 5-1: device descriptor read/64, error -71 [ 223.176677][ T5842] usb usb5-port1: attempt power cycle [ 223.226022][ T5846] usb 2-1: USB disconnect, device number 24 [ 223.296495][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 223.341998][ T24] usb 4-1: device descriptor read/8, error -71 [ 223.353979][ T7503] macsec1: entered promiscuous mode [ 223.536994][ T5842] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 223.576981][ T5842] usb 5-1: device descriptor read/8, error -71 [ 223.596478][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 223.637264][ T24] usb 4-1: device descriptor read/8, error -71 [ 223.768331][ T24] usb usb4-port1: unable to enumerate USB device [ 223.908045][ T5842] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 224.080324][ T5842] usb 5-1: device descriptor read/8, error -71 [ 224.296841][ T5842] usb usb5-port1: unable to enumerate USB device [ 225.354500][ T7532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.227036][ T5934] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 226.318321][ T7540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.439'. [ 226.576201][ T5934] usb 3-1: config 0 has no interfaces? [ 226.589589][ T5934] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 226.600696][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.613899][ T5934] usb 3-1: Product: syz [ 226.722325][ T5934] usb 3-1: Manufacturer: syz [ 226.729799][ T5934] usb 3-1: SerialNumber: syz [ 226.813177][ T5934] usb 3-1: config 0 descriptor?? [ 227.086523][ T5923] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 227.276587][ T5923] usb 1-1: device descriptor read/64, error -71 [ 227.293431][ T7539] fuse: Bad value for 'fd' [ 227.302257][ T7539] netlink: 'syz.2.436': attribute type 12 has an invalid length. [ 227.326191][ T7539] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 227.337059][ T30] kauditd_printk_skb: 295 callbacks suppressed [ 227.337073][ T30] audit: type=1326 audit(1751924644.450:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 227.402110][ T30] audit: type=1326 audit(1751924644.450:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 227.473124][ T30] audit: type=1326 audit(1751924644.450:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 227.526469][ T5923] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 227.606756][ T30] audit: type=1326 audit(1751924644.570:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 227.766496][ T5923] usb 1-1: device descriptor read/64, error -71 [ 227.772979][ T30] audit: type=1326 audit(1751924644.570:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 227.876915][ T5923] usb usb1-port1: attempt power cycle [ 228.034671][ T30] audit: type=1326 audit(1751924645.170:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.4.443" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 228.260090][ T5923] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 228.335600][ T5923] usb 1-1: device descriptor read/8, error -71 [ 228.465498][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 228.515846][ T30] audit: type=1326 audit(1751924645.650:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.445" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x0 [ 228.631433][ T5846] usb 3-1: USB disconnect, device number 25 [ 228.664100][ T5923] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 228.710010][ T5923] usb 1-1: device descriptor read/8, error -71 [ 228.786617][ T92] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 228.820713][ T5923] usb usb1-port1: unable to enumerate USB device [ 228.947750][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 228.955863][ T92] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 228.977742][ T92] usb 4-1: config 0 has no interface number 0 [ 228.986186][ T92] usb 4-1: config 0 interface 89 has no altsetting 0 [ 229.006925][ T92] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 229.024742][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.042046][ T92] usb 4-1: Product: syz [ 229.052165][ T92] usb 4-1: Manufacturer: syz [ 229.060101][ T92] usb 4-1: SerialNumber: syz [ 229.076267][ T92] usb 4-1: config 0 descriptor?? [ 229.168654][ T5846] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 229.302369][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.317054][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.358209][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 229.372823][ T5846] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 229.372856][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.372878][ T5846] usb 3-1: Product: syz [ 229.372893][ T5846] usb 3-1: Manufacturer: syz [ 229.372909][ T5846] usb 3-1: SerialNumber: syz [ 229.376778][ T5846] usb 3-1: config 0 descriptor?? [ 229.403998][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 229.405860][ T5846] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 229.405896][ T5846] em28xx 3-1:0.0: Device initialization failed. [ 229.405912][ T5846] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 229.649368][ T5846] usb 4-1: USB disconnect, device number 30 [ 231.232097][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 231.773609][ T7605] netlink: 56 bytes leftover after parsing attributes in process `syz.4.457'. [ 232.002788][ T5842] usb 3-1: USB disconnect, device number 26 [ 232.063980][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 232.145917][ T7611] netlink: 'syz.4.460': attribute type 5 has an invalid length. [ 232.182803][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.460'. [ 232.237698][ T7611] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 232.248561][ T7611] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 232.259100][ T7611] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 232.270547][ T7611] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 232.280825][ T7611] geneve2: entered promiscuous mode [ 232.288516][ T7611] geneve2: entered allmulticast mode [ 232.650223][ T7621] loop4: detected capacity change from 0 to 7 [ 232.685155][ T7621] Dev loop4: unable to read RDB block 7 [ 232.704602][ T7621] loop4: unable to read partition table [ 232.761559][ T7621] loop4: partition table beyond EOD, truncated [ 232.798777][ T7621] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.893419][ T5216] Dev loop4: unable to read RDB block 7 [ 232.946576][ T5216] loop4: unable to read partition table [ 232.953071][ T5216] loop4: partition table beyond EOD, truncated [ 233.242477][ T7632] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 233.628230][ T7641] fuse: Unknown parameter 'group_id00000000000000000000' [ 233.726672][ T92] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 233.777459][ T7643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.473'. [ 233.907444][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 233.944892][ T92] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 233.992124][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.035931][ T92] usb 5-1: Product: syz [ 234.046120][ T92] usb 5-1: Manufacturer: syz [ 234.055575][ T92] usb 5-1: SerialNumber: syz [ 234.077606][ T92] usb 5-1: config 0 descriptor?? [ 234.104923][ T92] em28xx 5-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 234.145348][ T92] em28xx 5-1:0.0: Device initialization failed. [ 234.164011][ T92] em28xx 5-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 234.188762][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.476'. [ 234.243722][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.476'. [ 234.878058][ T30] audit: type=1326 audit(1751924651.970:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 234.963494][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 234.987025][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 235.448830][ T30] audit: type=1326 audit(1751924651.970:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 235.509882][ T30] audit: type=1326 audit(1751924651.980:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 235.509903][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 235.531767][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.607848][ T30] audit: type=1326 audit(1751924651.980:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 235.629716][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.650280][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 235.698358][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 235.716834][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 235.732166][ T24] usb 1-1: config 162 has an invalid interface number: 161 but max is 1 [ 235.747777][ T30] audit: type=1326 audit(1751924651.980:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 235.758829][ T24] usb 1-1: config 162 has an invalid interface number: 187 but max is 1 [ 235.806397][ T24] usb 1-1: config 162 has no interface number 0 [ 235.814691][ T24] usb 1-1: config 162 has no interface number 1 [ 235.825510][ T24] usb 1-1: config 162 interface 161 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 235.860866][ T24] usb 1-1: config 162 interface 187 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 235.903831][ T24] usb 1-1: config 162 interface 187 altsetting 1 has an invalid endpoint descriptor of length 6, skipping [ 235.929912][ T30] audit: type=1326 audit(1751924651.980:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 235.949710][ T24] usb 1-1: config 162 interface 187 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 236.036498][ T24] usb 1-1: config 162 interface 161 has no altsetting 0 [ 236.044845][ T30] audit: type=1326 audit(1751924651.980:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 236.075408][ T24] usb 1-1: config 162 interface 187 has no altsetting 0 [ 236.093405][ T24] usb 1-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7 [ 236.109216][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.130921][ T24] usb 1-1: Product: syz [ 236.154461][ T24] usb 1-1: Manufacturer: syz [ 236.170184][ T24] usb 1-1: SerialNumber: syz [ 236.607881][ T24] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 236.655246][ T24] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 236.739110][ T24] usb 1-1: USB disconnect, device number 31 [ 236.835195][ T92] usb 5-1: USB disconnect, device number 29 [ 237.796928][ T5923] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 238.040489][ T5923] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 238.055470][ T5923] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 238.075536][ T7720] binder: 7718:7720 ioctl c0306201 80000080 returned -14 [ 238.105754][ T7720] binder: 7718:7720 ioctl c0306201 80000600 returned -14 [ 238.113964][ T5923] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 238.127199][ T7720] netlink: 'syz.2.496': attribute type 11 has an invalid length. [ 238.135187][ T5923] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 238.182182][ T5923] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 238.242548][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 238.280672][ T5923] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 238.290346][ T5923] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 238.371085][ T5923] usb 4-1: Product: syz [ 238.398173][ T5923] usb 4-1: Manufacturer: syz [ 238.435556][ T5923] usb 4-1: SerialNumber: syz [ 238.472323][ T5923] usb 4-1: config 0 descriptor?? [ 238.492220][ T7710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 238.512665][ T5923] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 238.557497][ T5923] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 238.685392][ T7733] fuse: Bad value for 'fd' [ 238.829084][ T5848] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 238.862482][ T7738] __nla_validate_parse: 2 callbacks suppressed [ 238.862503][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 239.053925][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 239.113986][ T5848] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 239.125672][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.134453][ T5848] usb 3-1: Product: syz [ 239.139918][ T5848] usb 3-1: Manufacturer: syz [ 239.163310][ T7737] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 239.210637][ T5848] usb 3-1: SerialNumber: syz [ 239.228622][ T7737] batman_adv: batadv0: Adding interface: ip6gretap1 [ 239.235340][ T7737] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 239.302513][ T5848] usb 3-1: config 0 descriptor?? [ 239.318666][ T7737] batman_adv: batadv0: Interface activated: ip6gretap1 [ 239.329334][ T5848] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 239.342213][ T5848] em28xx 3-1:0.0: Device initialization failed. [ 239.350413][ T5848] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 240.997206][ T92] usb 4-1: USB disconnect, device number 31 [ 241.006691][ T92] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 241.216459][ T5934] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 241.406692][ T5934] usb 2-1: config 0 has no interfaces? [ 241.492067][ T5934] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 241.540602][ T7763] team_slave_0: entered promiscuous mode [ 241.546444][ T7763] team_slave_1: entered promiscuous mode [ 241.573752][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.606271][ T5934] usb 2-1: Product: syz [ 241.628261][ T5934] usb 2-1: Manufacturer: syz [ 241.637394][ T7763] macsec1: entered promiscuous mode [ 241.643370][ T7763] team0: entered promiscuous mode [ 241.661104][ T5934] usb 2-1: SerialNumber: syz [ 241.690905][ T7763] team0: left promiscuous mode [ 241.696762][ T7763] team_slave_0: left promiscuous mode [ 241.702252][ T7763] team_slave_1: left promiscuous mode [ 241.733774][ T5934] usb 2-1: config 0 descriptor?? [ 241.998040][ T7751] program syz.1.503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.433148][ T24] usb 3-1: USB disconnect, device number 27 [ 243.054181][ T7784] openvswitch: netlink: Missing key (keys=40, expected=100) [ 243.072191][ T7784] netlink: 'syz.0.516': attribute type 10 has an invalid length. [ 243.149543][ T7784] : (slave hsr0): The slave device specified does not support setting the MAC address [ 243.209832][ T7784] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 243.263333][ T7784] : (slave hsr0): Error -22 calling dev_set_mtu [ 243.286618][ T92] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 243.436422][ T92] usb 4-1: device descriptor read/64, error -71 [ 243.656980][ T7792] macvlan3: entered promiscuous mode [ 243.779652][ T92] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 243.987180][ T5848] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 244.006485][ T92] usb 4-1: device descriptor read/64, error -71 [ 244.093857][ T5934] usb 2-1: USB disconnect, device number 25 [ 244.136676][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 244.151549][ T92] usb usb4-port1: attempt power cycle [ 244.169217][ T5848] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 244.192885][ T5848] usb 1-1: config 0 has no interface number 0 [ 244.213482][ T5848] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=7d.35 [ 244.229237][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.257771][ T5848] usb 1-1: Product: syz [ 244.262029][ T5848] usb 1-1: Manufacturer: syz [ 244.357796][ T5848] usb 1-1: SerialNumber: syz [ 244.373481][ T5848] usb 1-1: config 0 descriptor?? [ 244.536511][ T92] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 244.606719][ T5934] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 244.629762][ T92] usb 4-1: device descriptor read/8, error -71 [ 244.670978][ T7807] usb usb8: usbfs: process 7807 (syz.1.522) did not claim interface 0 before use [ 244.733248][ T5913] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 244.796472][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 244.807866][ T5934] usb 5-1: too many configurations: 69, using maximum allowed: 8 [ 244.946545][ T92] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 244.974791][ T5934] usb 5-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 244.984105][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 244.992106][ T5934] usb 5-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 245.003164][ T5913] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 245.013684][ T92] usb 4-1: device descriptor read/8, error -71 [ 245.020084][ T5913] usb 3-1: config 2 has no interface number 0 [ 245.061607][ T5934] usb 5-1: Product: syz [ 245.068161][ T5913] usb 3-1: config 2 interface 31 has no altsetting 0 [ 245.075000][ T5934] usb 5-1: Manufacturer: syz [ 245.083513][ T5934] usb 5-1: SerialNumber: syz [ 245.092155][ T5913] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 245.104282][ T5934] usb 5-1: config 0 descriptor?? [ 245.109747][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.124514][ T5913] usb 3-1: Product: syz [ 245.130383][ T5913] usb 3-1: Manufacturer: syz [ 245.135101][ T5913] usb 3-1: SerialNumber: syz [ 245.142244][ T92] usb usb4-port1: unable to enumerate USB device [ 245.167485][ T5913] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 245.334801][ T5934] usb 5-1: USB disconnect, device number 30 [ 245.380934][ T7804] batadv0: entered promiscuous mode [ 245.386271][ T7804] macsec1: entered promiscuous mode [ 245.399772][ T7804] batadv0: left promiscuous mode [ 245.566499][ T5913] usb 3-1: USB disconnect, device number 28 [ 246.317384][ T5846] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 246.477742][ T7821] netlink: 'syz.1.529': attribute type 10 has an invalid length. [ 246.506481][ T5846] usb 5-1: Using ep0 maxpacket: 16 [ 246.514890][ T5846] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 246.526570][ T5846] usb 5-1: config 0 has no interface number 0 [ 246.539792][ T7821] batman_adv: batadv0: Adding interface: team0 [ 246.546172][ T5846] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 246.578972][ T7821] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.630580][ T5848] qmi_wwan 1-1:0.35: probe with driver qmi_wwan failed with error -22 [ 246.635083][ T5846] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 246.656549][ T7821] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 246.658511][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.677293][ T5848] usb 1-1: USB disconnect, device number 32 [ 246.698327][ T5846] usb 5-1: Product: syz [ 246.702772][ T5846] usb 5-1: Manufacturer: syz [ 246.710814][ T5842] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 246.723173][ T5846] usb 5-1: SerialNumber: syz [ 246.757952][ T5846] usb 5-1: config 0 descriptor?? [ 246.773637][ T7811] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 246.793540][ T5846] asix 5-1:0.251: probe with driver asix failed with error -22 [ 246.847049][ T5842] usb 4-1: device descriptor read/64, error -71 [ 247.106471][ T5842] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 247.136837][ T5848] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 247.266425][ T5842] usb 4-1: device descriptor read/64, error -71 [ 247.299544][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 247.332899][ T5848] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 247.360758][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.392446][ T5848] usb 1-1: Product: syz [ 247.396661][ T5842] usb usb4-port1: attempt power cycle [ 247.405484][ T5848] usb 1-1: Manufacturer: syz [ 247.411170][ T5848] usb 1-1: SerialNumber: syz [ 247.423444][ T5848] usb 1-1: config 0 descriptor?? [ 247.447446][ T5848] em28xx 1-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 247.469140][ T5848] em28xx 1-1:0.0: Device initialization failed. [ 247.475443][ T5848] em28xx 1-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 247.504357][ T7833] netlink: 112 bytes leftover after parsing attributes in process `syz.1.532'. [ 247.749477][ T5842] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 247.808221][ T5842] usb 4-1: device descriptor read/8, error -71 [ 248.096819][ T5848] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 248.096956][ T5842] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 248.143039][ T5842] usb 4-1: device descriptor read/8, error -71 [ 248.261189][ T5842] usb usb4-port1: unable to enumerate USB device [ 248.267788][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 248.290921][ T5848] usb 2-1: too many configurations: 69, using maximum allowed: 8 [ 248.332776][ T5848] usb 2-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 248.348674][ T5848] usb 2-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 248.361637][ T5848] usb 2-1: Product: syz [ 248.365939][ T5848] usb 2-1: Manufacturer: syz [ 248.374884][ T5848] usb 2-1: SerialNumber: syz [ 248.388856][ T5848] usb 2-1: config 0 descriptor?? [ 248.628700][ T5848] usb 2-1: USB disconnect, device number 26 [ 249.851046][ T5846] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 249.913125][ T7862] netlink: 56 bytes leftover after parsing attributes in process `syz.3.539'. [ 249.916557][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'. [ 249.923088][ T7862] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 249.972727][ T30] audit: type=1800 audit(1751924667.100:430): pid=7862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.539" name=A0F29C1437B3CFF8C3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=17859 res=0 errno=0 [ 250.026937][ T5848] usb 5-1: USB disconnect, device number 31 [ 250.086956][ T5846] usb 2-1: device descriptor read/64, error -71 [ 250.191555][ T24] usb 1-1: USB disconnect, device number 33 [ 250.326502][ T5846] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 250.333036][ T7869] macvlan3: entered promiscuous mode [ 250.420519][ T7874] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 250.516498][ T5846] usb 2-1: device descriptor read/64, error -71 [ 250.595277][ T7880] Cannot find map_set index 0 as target [ 250.606466][ T5934] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 250.645768][ T5846] usb usb2-port1: attempt power cycle [ 250.726963][ T7886] netlink: 112 bytes leftover after parsing attributes in process `syz.2.545'. [ 250.768404][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 250.793936][ T7885] vlan2: entered promiscuous mode [ 250.816691][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 250.836835][ T5934] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 250.844992][ T5934] usb 4-1: config 0 has no interface number 0 [ 250.865267][ T5934] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=7d.35 [ 250.877418][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.906192][ T5934] usb 4-1: Product: syz [ 250.917115][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 250.961300][ T5934] usb 4-1: Manufacturer: syz [ 250.993914][ T5934] usb 4-1: SerialNumber: syz [ 251.026436][ T5846] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 251.063410][ T5934] usb 4-1: config 0 descriptor?? [ 251.063415][ T5846] usb 2-1: device descriptor read/8, error -71 [ 251.077824][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 251.090165][ T24] usb 5-1: too many configurations: 69, using maximum allowed: 8 [ 251.110881][ T24] usb 5-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 251.122479][ T24] usb 5-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 251.132617][ T7890] netlink: 100 bytes leftover after parsing attributes in process `syz.2.550'. [ 251.144698][ T24] usb 5-1: Product: syz [ 251.154740][ T24] usb 5-1: Manufacturer: syz [ 251.184592][ T24] usb 5-1: SerialNumber: syz [ 251.217514][ T24] usb 5-1: config 0 descriptor?? [ 251.256677][ T48] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 251.298581][ T5846] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 251.337919][ T5846] usb 2-1: device descriptor read/8, error -71 [ 251.447953][ T5846] usb usb2-port1: unable to enumerate USB device [ 251.483649][ T24] usb 5-1: USB disconnect, device number 32 [ 251.494934][ T48] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.533382][ T48] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.550863][ T48] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 251.563250][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 251.572400][ T5942] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 251.586126][ T48] usb 1-1: SerialNumber: syz [ 251.605767][ T48] usb 1-1: 0:2 : does not exist [ 251.750389][ T5942] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 251.758951][ T5942] usb 3-1: config 179 has no interface number 0 [ 251.765302][ T5942] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 251.777709][ T5942] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 251.791274][ T5942] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 255, setting to 64 [ 251.806427][ T5942] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 251.820250][ T5942] usb 3-1: config 179 interface 65 has no altsetting 0 [ 251.827599][ T5942] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 251.837175][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.850730][ T7890] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 251.859601][ T7890] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 251.889979][ T5942] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input12 [ 251.967231][ T5201] input input12: unable to receive magic message: -110 [ 251.989906][ T5201] input input12: unable to receive magic message: -32 [ 252.059859][ T5201] input input12: unable to receive magic message: -32 [ 252.124370][ T5201] input input12: unable to receive magic message: -71 [ 252.186254][ T5942] usb 3-1: USB disconnect, device number 29 [ 252.186354][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 252.200721][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 252.214162][ T5201] input input12: unable to receive magic message: -19 [ 252.876666][ T5846] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 253.046393][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 253.070954][ T5846] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 253.098906][ T5846] usb 2-1: config 0 has no interface number 0 [ 253.119669][ T5846] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 253.152119][ T5846] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 253.178699][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.204394][ T5846] usb 2-1: Product: syz [ 253.216752][ T5846] usb 2-1: Manufacturer: syz [ 253.229681][ T5846] usb 2-1: SerialNumber: syz [ 253.233638][ T5934] qmi_wwan 4-1:0.35: probe with driver qmi_wwan failed with error -22 [ 253.262726][ T5846] usb 2-1: config 0 descriptor?? [ 253.265416][ T5934] usb 4-1: USB disconnect, device number 40 [ 253.285874][ T7900] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.307302][ T5846] asix 2-1:0.251: probe with driver asix failed with error -22 [ 253.426800][ T5848] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 253.599114][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 253.635212][ T5848] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 253.649983][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.670724][ T5848] usb 3-1: Product: syz [ 253.674950][ T5848] usb 3-1: Manufacturer: syz [ 253.697481][ T5848] usb 3-1: SerialNumber: syz [ 253.708685][ T5848] usb 3-1: config 0 descriptor?? [ 253.718719][ T5848] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 253.718758][ T5848] em28xx 3-1:0.0: Device initialization failed. [ 253.718774][ T5848] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 254.113562][ T48] usb 1-1: USB disconnect, device number 34 [ 254.415093][ T7927] macsec1: entered promiscuous mode [ 254.590303][ T5846] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 254.766639][ T5846] usb 5-1: device descriptor read/64, error -71 [ 255.072861][ T5846] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 255.276812][ T5846] usb 5-1: device descriptor read/64, error -71 [ 255.425656][ T5846] usb usb5-port1: attempt power cycle [ 255.746478][ T92] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 255.781269][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.787782][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.846602][ T5846] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 255.920085][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 255.920216][ T5846] usb 5-1: device descriptor read/8, error -71 [ 255.954305][ T92] usb 4-1: too many configurations: 69, using maximum allowed: 8 [ 255.988717][ T5934] usb 3-1: USB disconnect, device number 30 [ 256.009599][ T92] usb 4-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 256.037339][ T92] usb 4-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 256.051489][ T92] usb 4-1: Product: syz [ 256.055721][ T92] usb 4-1: Manufacturer: syz [ 256.062733][ T92] usb 4-1: SerialNumber: syz [ 256.067636][ T5848] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 256.096992][ T92] usb 4-1: config 0 descriptor?? [ 256.226487][ T5848] usb 1-1: device descriptor read/64, error -71 [ 256.857928][ T5846] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 256.890971][ T5846] usb 5-1: device descriptor read/8, error -71 [ 256.898956][ T92] usb 4-1: USB disconnect, device number 41 [ 257.020624][ T5848] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 257.069127][ T5846] usb usb5-port1: unable to enumerate USB device [ 257.340302][ T5848] usb 1-1: device descriptor read/64, error -71 [ 257.465571][ T7943] netlink: 112 bytes leftover after parsing attributes in process `syz.2.563'. [ 257.487129][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 257.491415][ T92] usb 2-1: USB disconnect, device number 31 [ 257.514673][ T5848] usb usb1-port1: attempt power cycle [ 257.537757][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 257.927328][ T5848] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 257.956562][ T5934] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 257.983259][ T5848] usb 1-1: device descriptor read/8, error -71 [ 258.108432][ T5934] usb 4-1: device descriptor read/64, error -71 [ 258.157786][ T7953] macvlan5: entered promiscuous mode [ 258.236386][ T5848] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 258.344757][ T5848] usb 1-1: device descriptor read/8, error -71 [ 258.356680][ T5942] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 258.406640][ T5846] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 258.442554][ T5934] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 258.506557][ T5942] usb 5-1: device descriptor read/64, error -71 [ 258.545263][ T7958] FAULT_INJECTION: forcing a failure. [ 258.545263][ T7958] name failslab, interval 1, probability 0, space 0, times 0 [ 258.567237][ T5848] usb usb1-port1: unable to enumerate USB device [ 258.585166][ T7958] CPU: 1 UID: 0 PID: 7958 Comm: syz.2.569 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 258.585194][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.585206][ T7958] Call Trace: [ 258.585215][ T7958] [ 258.585224][ T7958] dump_stack_lvl+0x189/0x250 [ 258.585256][ T7958] ? __pfx____ratelimit+0x10/0x10 [ 258.585288][ T7958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.585313][ T7958] ? __pfx__printk+0x10/0x10 [ 258.585348][ T7958] ? __pfx___might_resched+0x10/0x10 [ 258.585369][ T7958] ? fs_reclaim_acquire+0x7d/0x100 [ 258.585403][ T7958] should_fail_ex+0x414/0x560 [ 258.585438][ T7958] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 258.585458][ T7958] should_failslab+0xa8/0x100 [ 258.585486][ T7958] __kvmalloc_node_noprof+0x161/0x5f0 [ 258.585520][ T7958] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 258.585547][ T7958] rhashtable_init_noprof+0x4ee/0xbb0 [ 258.585576][ T7958] rhltable_init_noprof+0x1e/0x60 [ 258.585599][ T7958] nf_tables_newtable+0x68f/0x1890 [ 258.585651][ T7958] nfnetlink_rcv+0x1132/0x2520 [ 258.585718][ T7958] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 258.585765][ T7958] ? ref_tracker_free+0x63a/0x7d0 [ 258.585831][ T7958] ? __netlink_deliver_tap+0x807/0x850 [ 258.585867][ T7958] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.585890][ T7958] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.585920][ T7958] netlink_unicast+0x75b/0x8d0 [ 258.585956][ T7958] netlink_sendmsg+0x805/0xb30 [ 258.585991][ T7958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.586026][ T7958] ? __import_iovec+0x5d4/0x7f0 [ 258.586048][ T7958] ? aa_sock_msg_perm+0x94/0x160 [ 258.586079][ T7958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.586108][ T7958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.586134][ T7958] __sock_sendmsg+0x21c/0x270 [ 258.586177][ T7958] ____sys_sendmsg+0x505/0x830 [ 258.586211][ T7958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.586257][ T7958] ___sys_sendmsg+0x21f/0x2a0 [ 258.586298][ T7958] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.586366][ T7958] ? __fget_files+0x2a/0x420 [ 258.586403][ T7958] ? __fget_files+0x3a0/0x420 [ 258.586442][ T7958] __sys_sendmsg+0x164/0x220 [ 258.586470][ T7958] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.586521][ T7958] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 258.586555][ T7958] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.586587][ T7958] __do_fast_syscall_32+0xb6/0x2b0 [ 258.586608][ T7958] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.586643][ T7958] do_fast_syscall_32+0x34/0x80 [ 258.586662][ T7958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.586687][ T7958] RIP: 0023:0xf709e539 [ 258.586705][ T7958] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 258.586723][ T7958] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 258.586746][ T7958] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 258.586760][ T7958] RDX: 0000000000040080 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.586772][ T7958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.586784][ T7958] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 258.586795][ T7958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.586827][ T7958] [ 258.902059][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.976592][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 258.985400][ T5846] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 258.993634][ T5846] usb 2-1: config 0 has no interface number 0 [ 259.008054][ T5934] usb 4-1: device descriptor read/64, error -71 [ 259.027005][ T5846] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=7d.35 [ 259.036075][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.044181][ T5846] usb 2-1: Product: syz [ 259.048389][ T5846] usb 2-1: Manufacturer: syz [ 259.054649][ T5846] usb 2-1: SerialNumber: syz [ 259.061375][ T5846] usb 2-1: config 0 descriptor?? [ 259.110135][ T7960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.118662][ T5942] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 259.127710][ T5934] usb usb4-port1: attempt power cycle [ 259.257973][ T5942] usb 5-1: device descriptor read/64, error -71 [ 259.370362][ T5942] usb usb5-port1: attempt power cycle [ 259.496790][ T5934] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 259.527257][ T5934] usb 4-1: device descriptor read/8, error -71 [ 259.716536][ T5942] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 259.760174][ T5942] usb 5-1: device descriptor read/8, error -71 [ 259.777018][ T5934] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 259.817096][ T5934] usb 4-1: device descriptor read/8, error -71 [ 259.926791][ T5934] usb usb4-port1: unable to enumerate USB device [ 260.034444][ T5942] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 260.075342][ T7972] binder: BINDER_SET_CONTEXT_MGR already set [ 260.082468][ T7972] binder: 7966:7972 ioctl 4018620d 80000040 returned -16 [ 260.092929][ T7972] binder: 7966:7972 ioctl c0306201 800003c0 returned -14 [ 260.099980][ T5942] usb 5-1: device descriptor read/8, error -71 [ 260.206978][ T5942] usb usb5-port1: unable to enumerate USB device [ 260.427063][ T24] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 260.612806][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 260.639745][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 260.748988][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.767864][ T24] usb 1-1: Product: syz [ 260.779372][ T24] usb 1-1: Manufacturer: syz [ 260.788437][ T24] usb 1-1: SerialNumber: syz [ 260.802798][ T24] usb 1-1: config 0 descriptor?? [ 260.814384][ T24] em28xx 1-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 260.824282][ T24] em28xx 1-1:0.0: Device initialization failed. [ 260.847882][ T24] em28xx 1-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 261.506574][ T5846] qmi_wwan 2-1:0.35: probe with driver qmi_wwan failed with error -22 [ 261.584368][ T5846] usb 2-1: USB disconnect, device number 32 [ 261.694240][ T5934] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 262.046851][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 262.137387][ T5934] usb 5-1: too many configurations: 69, using maximum allowed: 8 [ 262.137782][ T7987] SET target dimension over the limit! [ 262.175913][ T5934] usb 5-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 262.185670][ T5934] usb 5-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 262.203308][ T5934] usb 5-1: Product: syz [ 262.211677][ T5934] usb 5-1: Manufacturer: syz [ 262.223263][ T5934] usb 5-1: SerialNumber: syz [ 262.244849][ T5934] usb 5-1: config 0 descriptor?? [ 262.356550][ T5942] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 262.481542][ T5934] usb 5-1: USB disconnect, device number 41 [ 262.526912][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 262.555199][ T7994] netlink: 112 bytes leftover after parsing attributes in process `syz.2.579'. [ 262.555960][ T5942] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 262.628407][ T5942] usb 4-1: config 0 has no interface number 0 [ 262.650099][ T5942] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 262.684101][ T5942] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 262.713763][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.762005][ T7997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.580'. [ 262.796586][ T5942] usb 4-1: Product: syz [ 262.800907][ T5942] usb 4-1: Manufacturer: syz [ 262.838241][ T5942] usb 4-1: SerialNumber: syz [ 262.854425][ T5942] usb 4-1: config 0 descriptor?? [ 262.860962][ T7989] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 262.871532][ T5942] asix 4-1:0.251: probe with driver asix failed with error -22 [ 262.970235][ T5942] usb 1-1: USB disconnect, device number 39 [ 262.998901][ T8001] netlink: 76 bytes leftover after parsing attributes in process `syz.1.582'. [ 263.726561][ T5942] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 264.146415][ T5942] usb 2-1: device descriptor read/64, error -71 [ 264.386444][ T5942] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 264.453819][ T8024] macvlan3: entered promiscuous mode [ 264.559685][ T5942] usb 2-1: device descriptor read/64, error -71 [ 264.676669][ T5942] usb usb2-port1: attempt power cycle [ 264.696453][ T5846] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 264.860236][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 264.868618][ T5846] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 264.879394][ T5846] usb 3-1: config 0 has no interface number 0 [ 264.887604][ T5846] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=7d.35 [ 264.901334][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.918547][ T5846] usb 3-1: Product: syz [ 264.960255][ T5846] usb 3-1: Manufacturer: syz [ 265.004278][ T5846] usb 3-1: SerialNumber: syz [ 265.046435][ T5942] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 265.086578][ T5846] usb 3-1: config 0 descriptor?? [ 265.131373][ T5942] usb 2-1: device descriptor read/8, error -71 [ 265.376890][ T5942] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 265.408497][ T5942] usb 2-1: device descriptor read/8, error -71 [ 265.424005][ T8042] netlink: 112 bytes leftover after parsing attributes in process `syz.0.592'. [ 265.537205][ T5942] usb usb2-port1: unable to enumerate USB device [ 265.650163][ T5934] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 265.847011][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 265.855085][ T5934] usb 5-1: too many configurations: 69, using maximum allowed: 8 [ 265.879379][ T5934] usb 5-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 265.888775][ T5934] usb 5-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 265.897441][ T5934] usb 5-1: Product: syz [ 265.901636][ T5934] usb 5-1: Manufacturer: syz [ 265.906898][ T5934] usb 5-1: SerialNumber: syz [ 265.922405][ T5934] usb 5-1: config 0 descriptor?? [ 266.106503][ T5942] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 266.147091][ T5934] usb 5-1: USB disconnect, device number 42 [ 266.276495][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 266.279945][ T5913] usb 4-1: USB disconnect, device number 46 [ 266.320317][ T5942] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 266.332344][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.361231][ T5942] usb 1-1: Product: syz [ 266.379195][ T5942] usb 1-1: Manufacturer: syz [ 266.406114][ T5942] usb 1-1: SerialNumber: syz [ 266.435040][ T5942] usb 1-1: config 0 descriptor?? [ 266.492355][ T5942] em28xx 1-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 266.514431][ T5942] em28xx 1-1:0.0: Device initialization failed. [ 266.529644][ T5942] em28xx 1-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 266.901968][ T8065] netlink: 48 bytes leftover after parsing attributes in process `syz.1.600'. [ 267.196487][ T5913] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 267.325891][ T5846] qmi_wwan 3-1:0.35: probe with driver qmi_wwan failed with error -22 [ 267.359980][ T5846] usb 3-1: USB disconnect, device number 31 [ 267.531522][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 267.557907][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.606603][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 267.714864][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.793805][ T5913] usb 5-1: config 0 descriptor?? [ 267.851596][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 268.223483][ T5846] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 268.396638][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 268.429549][ T5846] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 268.442016][ T5846] usb 2-1: config 0 has no interface number 0 [ 268.455385][ T5846] usb 2-1: config 0 interface 89 has no altsetting 0 [ 268.529561][ T5846] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 268.546837][ T8085] netlink: 112 bytes leftover after parsing attributes in process `syz.3.605'. [ 268.576737][ T5201] bcm5974 5-1:0.0: could not write to device [ 268.594425][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.639718][ T5201] bcm5974 5-1:0.0: could not read from device [ 268.645952][ T5846] usb 2-1: Product: syz [ 268.654837][ T5913] usb 5-1: USB disconnect, device number 43 [ 268.705775][ T5846] usb 2-1: Manufacturer: syz [ 268.781166][ T5846] usb 2-1: SerialNumber: syz [ 268.851799][ T6190] udevd[6190]: Error opening device "/dev/input/event4": No such file or directory [ 268.884879][ T5846] usb 2-1: config 0 descriptor?? [ 268.892829][ T6190] udevd[6190]: Unable to EVIOCGABS device "/dev/input/event4" [ 268.911893][ T6190] udevd[6190]: Unable to EVIOCGABS device "/dev/input/event4" [ 268.928790][ T6190] udevd[6190]: Unable to EVIOCGABS device "/dev/input/event4" [ 268.978984][ T6190] udevd[6190]: Unable to EVIOCGABS device "/dev/input/event4" [ 269.153183][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.206867][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.277122][ T5846] usb 1-1: USB disconnect, device number 40 [ 269.358734][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 269.450584][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 269.466443][ T92] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 269.490544][ T5846] usb 2-1: USB disconnect, device number 37 [ 269.626502][ T92] usb 3-1: Using ep0 maxpacket: 16 [ 269.641641][ T92] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 269.655013][ T92] usb 3-1: config 0 has no interface number 0 [ 269.672407][ T92] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 269.674250][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 269.721083][ T92] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 269.739650][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.764198][ T92] usb 3-1: Product: syz [ 269.775783][ T92] usb 3-1: Manufacturer: syz [ 269.784005][ T92] usb 3-1: SerialNumber: syz [ 269.788871][ T5934] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 269.814286][ T92] usb 3-1: config 0 descriptor?? [ 269.825223][ T8089] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 269.833148][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 269.849123][ T92] asix 3-1:0.251: probe with driver asix failed with error -22 [ 269.885703][ T8107] macvlan4: entered promiscuous mode [ 269.946402][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 269.952472][ T5934] usb 4-1: too many configurations: 69, using maximum allowed: 8 [ 269.966847][ T24] usb 5-1: device descriptor read/64, error -71 [ 269.994509][ T5934] usb 4-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 270.006393][ T5934] usb 4-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 270.062708][ T5934] usb 4-1: Product: syz [ 270.069613][ T5934] usb 4-1: Manufacturer: syz [ 270.074774][ T5934] usb 4-1: SerialNumber: syz [ 270.083057][ T5934] usb 4-1: config 0 descriptor?? [ 270.137198][ T5846] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 270.216572][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 270.296454][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 270.305610][ T5846] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 270.307627][ T5934] usb 4-1: USB disconnect, device number 47 [ 270.321681][ T5846] usb 1-1: config 0 has no interface number 0 [ 270.386610][ T24] usb 5-1: device descriptor read/64, error -71 [ 270.465556][ T5846] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=7d.35 [ 270.482648][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.502654][ T5846] usb 1-1: Product: syz [ 270.516560][ T24] usb usb5-port1: attempt power cycle [ 270.525218][ T5846] usb 1-1: Manufacturer: syz [ 270.553981][ T5846] usb 1-1: SerialNumber: syz [ 270.591645][ T5846] usb 1-1: config 0 descriptor?? [ 270.916492][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 271.011574][ T24] usb 5-1: device descriptor read/8, error -71 [ 271.286893][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 271.317975][ T24] usb 5-1: device descriptor read/8, error -71 [ 271.427563][ T24] usb usb5-port1: unable to enumerate USB device [ 271.917205][ T8127] netlink: 112 bytes leftover after parsing attributes in process `syz.3.618'. [ 272.269792][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 272.279470][ T8129] netlink: 'syz.1.619': attribute type 5 has an invalid length. [ 272.287407][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.619'. [ 272.696409][ T92] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 272.772122][ T8137] loop4: detected capacity change from 0 to 7 [ 272.808324][ T5844] Dev loop4: unable to read RDB block 7 [ 272.817055][ T5844] loop4: unable to read partition table [ 272.824243][ T5846] qmi_wwan 1-1:0.35: probe with driver qmi_wwan failed with error -22 [ 272.840840][ T5844] loop4: partition table beyond EOD, truncated [ 272.852917][ T8137] Dev loop4: unable to read RDB block 7 [ 272.874787][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 272.875304][ T5846] usb 1-1: USB disconnect, device number 41 [ 272.895957][ T8137] loop4: unable to read partition table [ 272.914764][ T8137] loop4: partition table beyond EOD, truncated [ 272.934364][ T92] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 272.935572][ T8137] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 272.964160][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.989186][ T92] usb 2-1: Product: syz [ 272.999104][ T92] usb 2-1: Manufacturer: syz [ 273.005488][ T92] usb 2-1: SerialNumber: syz [ 273.024586][ T92] usb 2-1: config 0 descriptor?? [ 273.046068][ T2153] usb 3-1: USB disconnect, device number 32 [ 273.089334][ T92] em28xx 2-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 273.137136][ T92] em28xx 2-1:0.0: Device initialization failed. [ 273.143459][ T92] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 273.356619][ T5913] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 273.494242][ T8154] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 273.527318][ T5913] usb 5-1: too many configurations: 144, using maximum allowed: 8 [ 273.556956][ T2153] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 273.559777][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 273.582649][ T5913] usb 5-1: can't read configurations, error -61 [ 273.716489][ T2153] usb 3-1: Using ep0 maxpacket: 8 [ 273.725959][ T5913] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 273.735739][ T2153] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 273.782392][ T2153] usb 3-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 273.793555][ T2153] usb 3-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 273.808607][ T2153] usb 3-1: Product: syz [ 273.813561][ T2153] usb 3-1: Manufacturer: syz [ 273.821176][ T2153] usb 3-1: SerialNumber: syz [ 273.837366][ T2153] usb 3-1: config 0 descriptor?? [ 273.897173][ T5913] usb 5-1: too many configurations: 144, using maximum allowed: 8 [ 273.917822][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 273.942446][ T5913] usb 5-1: can't read configurations, error -61 [ 273.965748][ T5913] usb usb5-port1: attempt power cycle [ 274.072316][ T2153] usb 3-1: USB disconnect, device number 33 [ 274.266529][ T5934] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 274.326837][ T5913] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 274.360361][ T5913] usb 5-1: too many configurations: 144, using maximum allowed: 8 [ 274.373616][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 274.394973][ T5913] usb 5-1: can't read configurations, error -61 [ 274.418175][ T5934] usb 1-1: device descriptor read/64, error -71 [ 274.576489][ T5913] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 274.603895][ T5913] usb 5-1: too many configurations: 144, using maximum allowed: 8 [ 274.634553][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 274.642451][ T5913] usb 5-1: can't read configurations, error -61 [ 274.654485][ T5913] usb usb5-port1: unable to enumerate USB device [ 274.677169][ T5934] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 274.741474][ T8168] netlink: 112 bytes leftover after parsing attributes in process `syz.3.633'. [ 274.856447][ T5934] usb 1-1: device descriptor read/64, error -71 [ 274.952499][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'. [ 274.978113][ T5934] usb usb1-port1: attempt power cycle [ 275.340156][ T5934] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 275.367967][ T5934] usb 1-1: device descriptor read/8, error -71 [ 275.520981][ T8177] macvlan4: entered promiscuous mode [ 275.528613][ T5942] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 275.660445][ T5913] usb 2-1: USB disconnect, device number 38 [ 275.698370][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 275.708974][ T5934] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 275.723749][ T5942] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 275.736714][ T5942] usb 4-1: config 0 has no interface number 0 [ 275.738497][ T5934] usb 1-1: device descriptor read/8, error -71 [ 275.745539][ T5942] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 275.768456][ T5942] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 275.768601][ T8180] fuse: Bad value for 'user_id' [ 275.782976][ T8180] fuse: Bad value for 'user_id' [ 275.790002][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.801847][ T5942] usb 4-1: Product: syz [ 275.806057][ T5942] usb 4-1: Manufacturer: syz [ 275.812362][ T5942] usb 4-1: SerialNumber: syz [ 275.817135][ T2153] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 275.834280][ T5942] usb 4-1: config 0 descriptor?? [ 275.840374][ T8174] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 275.850967][ T5942] asix 4-1:0.251: probe with driver asix failed with error -22 [ 275.865640][ T8181] fuse: root generation should be zero [ 275.869514][ T5934] usb usb1-port1: unable to enumerate USB device [ 275.977022][ T2153] usb 3-1: Using ep0 maxpacket: 16 [ 275.983743][ T2153] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 275.991951][ T2153] usb 3-1: config 0 has no interface number 0 [ 276.000425][ T2153] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=7d.35 [ 276.010763][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.019678][ T2153] usb 3-1: Product: syz [ 276.023866][ T2153] usb 3-1: Manufacturer: syz [ 276.028546][ T2153] usb 3-1: SerialNumber: syz [ 276.039840][ T2153] usb 3-1: config 0 descriptor?? [ 276.196548][ T5942] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 276.366499][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 276.373611][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 276.384847][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 276.399854][ T5942] usb 2-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 276.409008][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.420961][ T5942] usb 2-1: Product: syz [ 276.425162][ T5942] usb 2-1: Manufacturer: syz [ 276.430010][ T5942] usb 2-1: SerialNumber: syz [ 276.437672][ T5942] usb 2-1: config 0 descriptor?? [ 276.486557][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 276.646418][ T24] usb 5-1: device descriptor read/64, error -71 [ 276.887549][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 276.930883][ T5942] usb 2-1: USB disconnect, device number 39 [ 276.956178][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.047467][ T24] usb 5-1: device descriptor read/64, error -71 [ 277.123134][ T8188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 277.136223][ T8188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 277.171716][ T8188] erspan0: entered promiscuous mode [ 277.180860][ T24] usb usb5-port1: attempt power cycle [ 277.182113][ T8188] gretap0: entered promiscuous mode [ 277.193017][ T8188] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 277.201852][ T8188] Cannot create hsr debugfs directory [ 277.526872][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 277.567206][ T24] usb 5-1: device descriptor read/8, error -71 [ 277.636425][ T5934] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 277.794112][ T5934] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 277.805215][ T5934] usb 1-1: config 0 interface 0 has no altsetting 0 [ 277.806538][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 277.824731][ T5934] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 277.834685][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.837056][ T24] usb 5-1: device descriptor read/8, error -71 [ 277.847908][ T5934] usb 1-1: config 0 descriptor?? [ 277.854888][ T8192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 277.956482][ T92] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 277.957029][ T24] usb usb5-port1: unable to enumerate USB device [ 278.077631][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.091039][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.116441][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 278.122556][ T92] usb 2-1: too many configurations: 69, using maximum allowed: 8 [ 278.151209][ T92] usb 2-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 278.160812][ T92] usb 2-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 278.169462][ T92] usb 2-1: Product: syz [ 278.173801][ T92] usb 2-1: Manufacturer: syz [ 278.179165][ T92] usb 2-1: SerialNumber: syz [ 278.187935][ T92] usb 2-1: config 0 descriptor?? [ 278.318805][ T5934] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 278.326898][ T5934] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 278.341400][ T5934] acrux 0003:1A34:0802.0004: hidraw0: USB HID v80.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 278.345314][ T2153] qmi_wwan 3-1:0.35: probe with driver qmi_wwan failed with error -22 [ 278.371108][ T5934] acrux 0003:1A34:0802.0004: no inputs found [ 278.380137][ T5934] acrux 0003:1A34:0802.0004: Failed to enable force feedback support, error: -19 [ 278.427550][ T2153] usb 3-1: USB disconnect, device number 34 [ 278.435694][ T92] usb 2-1: USB disconnect, device number 40 [ 278.534900][ T5934] usb 1-1: USB disconnect, device number 46 [ 278.572003][ T8197] fido_id[8197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 278.671236][ T5913] usb 4-1: USB disconnect, device number 48 [ 278.889764][ T8205] netlink: 112 bytes leftover after parsing attributes in process `syz.2.647'. [ 279.393281][ T8216] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 279.413087][ T8216] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 279.493526][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 279.522881][ T2153] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 279.626551][ T8216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.728770][ T2153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 279.741956][ T2153] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 279.751279][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.759319][ T2153] usb 1-1: Product: syz [ 279.763593][ T2153] usb 1-1: Manufacturer: syz [ 279.768483][ T2153] usb 1-1: SerialNumber: syz [ 279.778258][ T2153] usb 1-1: config 0 descriptor?? [ 279.876480][ T5913] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 280.163167][ T2153] em28xx 1-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 280.306382][ T2153] em28xx 1-1:0.0: Device initialization failed. [ 280.335345][ T2153] em28xx 1-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 280.352949][ T5913] usb 3-1: no configurations [ 280.379959][ T5913] usb 3-1: can't read configurations, error -22 [ 280.403309][ T8221] bond1 (unregistering): Released all slaves [ 280.460346][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 280.606498][ T5913] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 280.820535][ T5913] usb 3-1: no configurations [ 280.825435][ T5913] usb 3-1: can't read configurations, error -22 [ 280.833367][ T5913] usb usb3-port1: attempt power cycle [ 280.861633][ T24] usb 5-1: config 0 has no interfaces? [ 280.901558][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 280.914017][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.002239][ T24] usb 5-1: Product: syz [ 281.025703][ T24] usb 5-1: Manufacturer: syz [ 281.045146][ T24] usb 5-1: SerialNumber: syz [ 281.103557][ T24] usb 5-1: config 0 descriptor?? [ 281.263978][ T5913] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 281.321084][ T5913] usb 3-1: no configurations [ 281.326078][ T5913] usb 3-1: can't read configurations, error -22 [ 281.398605][ T8227] fuse: Bad value for 'fd' [ 281.409803][ T8227] netlink: 'syz.4.652': attribute type 12 has an invalid length. [ 281.445911][ T8227] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 281.460189][ T30] audit: type=1326 audit(1751924698.570:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 281.746401][ T30] audit: type=1326 audit(1751924698.570:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 281.796597][ T5913] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 281.804853][ T30] audit: type=1326 audit(1751924698.630:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 281.826746][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.856870][ T30] audit: type=1326 audit(1751924698.630:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 281.878708][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.057706][ T5913] usb 3-1: no configurations [ 282.062465][ T5913] usb 3-1: can't read configurations, error -22 [ 282.071691][ T5913] usb usb3-port1: unable to enumerate USB device [ 282.224916][ T92] usb 5-1: USB disconnect, device number 56 [ 282.497700][ T2153] usb 1-1: USB disconnect, device number 47 [ 282.918192][ T8249] macvlan5: entered promiscuous mode [ 282.936594][ T5913] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 283.089754][ T2153] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 283.196574][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 283.204009][ T5913] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 283.226474][ T5913] usb 1-1: config 0 has no interface number 0 [ 283.233015][ T92] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 283.248696][ T5913] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 283.266399][ T2153] usb 4-1: Using ep0 maxpacket: 8 [ 283.274817][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'. [ 283.284024][ T8254] erspan0: Device is already in use. [ 283.312510][ T2153] usb 4-1: too many configurations: 69, using maximum allowed: 8 [ 283.326201][ T5913] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 283.342284][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.375714][ T2153] usb 4-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 283.384978][ T5913] usb 1-1: Product: syz [ 283.389870][ T5913] usb 1-1: Manufacturer: syz [ 283.394605][ T2153] usb 4-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 283.394631][ T5913] usb 1-1: SerialNumber: syz [ 283.427500][ T5913] usb 1-1: config 0 descriptor?? [ 283.441552][ T8240] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.456572][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 283.466101][ T92] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 283.483759][ T2153] usb 4-1: Product: syz [ 283.490001][ T5913] asix 1-1:0.251: probe with driver asix failed with error -22 [ 283.503732][ T92] usb 5-1: config 0 has no interface number 0 [ 283.520351][ T92] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=7d.35 [ 283.543057][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.557569][ T2153] usb 4-1: Manufacturer: syz [ 283.560725][ T92] usb 5-1: Product: syz [ 283.569249][ T2153] usb 4-1: SerialNumber: syz [ 283.586506][ T92] usb 5-1: Manufacturer: syz [ 283.591505][ T92] usb 5-1: SerialNumber: syz [ 283.604811][ T92] usb 5-1: config 0 descriptor?? [ 283.625448][ T2153] usb 4-1: config 0 descriptor?? [ 283.650524][ T8257] netlink: 112 bytes leftover after parsing attributes in process `syz.2.661'. [ 283.913362][ T2153] usb 4-1: USB disconnect, device number 49 [ 284.916423][ T2153] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 284.940196][ T8272] netlink: 100 bytes leftover after parsing attributes in process `syz.1.664'. [ 285.208553][ T2153] usb 4-1: no configurations [ 285.213343][ T2153] usb 4-1: can't read configurations, error -22 [ 285.267864][ T24] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 285.376471][ T2153] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 285.438202][ T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 285.449159][ T24] usb 2-1: config 179 has no interface number 0 [ 285.457638][ T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 285.574906][ T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 285.592239][ T2153] usb 4-1: no configurations [ 285.596966][ T2153] usb 4-1: can't read configurations, error -22 [ 285.605880][ T2153] usb usb4-port1: attempt power cycle [ 285.621744][ T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 255, setting to 64 [ 285.644659][ T24] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 285.673926][ T24] usb 2-1: config 179 interface 65 has no altsetting 0 [ 285.693970][ T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 285.715353][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.739138][ T8272] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 285.756674][ T8272] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 285.801631][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input14 [ 285.838386][ T92] qmi_wwan 5-1:0.35: probe with driver qmi_wwan failed with error -22 [ 285.874162][ T92] usb 5-1: USB disconnect, device number 57 [ 285.886713][ T5201] input input14: unable to receive magic message: -110 [ 285.910852][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 285.935351][ T5201] input input14: unable to receive magic message: -32 [ 285.976602][ T2153] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 286.047711][ T5201] input input14: unable to receive magic message: -32 [ 286.060137][ T2153] usb 4-1: no configurations [ 286.066095][ T2153] usb 4-1: can't read configurations, error -22 [ 286.123794][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 286.131293][ T5201] input input14: unable to receive magic message: -32 [ 286.142549][ T24] usb 2-1: USB disconnect, device number 41 [ 286.142614][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 286.156922][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 286.247477][ T2153] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 286.279512][ T2153] usb 4-1: no configurations [ 286.287578][ T2153] usb 4-1: can't read configurations, error -22 [ 286.311740][ T2153] usb usb4-port1: unable to enumerate USB device [ 286.484677][ T8280] ipvlan2: entered promiscuous mode [ 286.542529][ T24] usb 1-1: USB disconnect, device number 48 [ 286.686654][ T92] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 287.200807][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 287.238382][ T92] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 287.254846][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.296602][ T92] usb 3-1: Product: syz [ 287.316769][ T92] usb 3-1: Manufacturer: syz [ 287.339579][ T92] usb 3-1: SerialNumber: syz [ 287.441771][ T8293] fuse: Bad value for 'fd' [ 287.481800][ T92] usb 3-1: config 0 descriptor?? [ 287.514853][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 287.561126][ T92] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 287.578992][ T92] em28xx 3-1:0.0: Device initialization failed. [ 287.585469][ T92] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 287.781145][ T8291] netlink: 64 bytes leftover after parsing attributes in process `syz.1.679'. [ 288.123276][ T2153] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 288.379845][ T2153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 288.610940][ T2153] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 288.624612][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.633440][ T2153] usb 4-1: Product: syz [ 288.643024][ T2153] usb 4-1: Manufacturer: syz [ 288.653585][ T2153] usb 4-1: SerialNumber: syz [ 288.658544][ T5934] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 288.697456][ T2153] usb 4-1: config 0 descriptor?? [ 288.719258][ T2153] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 288.739083][ T2153] em28xx 4-1:0.0: Device initialization failed. [ 288.753710][ T2153] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 288.836339][ T5934] usb 2-1: config 0 has no interfaces? [ 288.859902][ T5934] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 288.885624][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.911694][ T5934] usb 2-1: Product: syz [ 288.925884][ T5934] usb 2-1: Manufacturer: syz [ 288.942774][ T5846] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 288.951888][ T5934] usb 2-1: SerialNumber: syz [ 288.963498][ T5934] usb 2-1: config 0 descriptor?? [ 289.368561][ T5846] usb 5-1: Using ep0 maxpacket: 8 [ 289.374796][ T5846] usb 5-1: too many configurations: 69, using maximum allowed: 8 [ 289.395855][ T5846] usb 5-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 289.407232][ T5846] usb 5-1: New USB device strings: Mfr=29, Product=213, SerialNumber=120 [ 289.424873][ T5846] usb 5-1: Product: syz [ 289.432991][ T5846] usb 5-1: Manufacturer: syz [ 289.487124][ T5846] usb 5-1: SerialNumber: syz [ 289.501004][ T5846] usb 5-1: config 0 descriptor?? [ 289.639184][ T2153] usb 3-1: USB disconnect, device number 39 [ 289.862904][ T5846] usb 5-1: USB disconnect, device number 58 [ 289.867742][ T8315] netlink: 112 bytes leftover after parsing attributes in process `syz.0.674'. [ 290.176140][ T8320] macvlan5: entered promiscuous mode [ 290.487116][ T8324] fuse: Bad value for 'fd' [ 290.577210][ T5846] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 290.665352][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 290.816633][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 290.825616][ T5846] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 291.038780][ T5846] usb 3-1: config 0 has no interface number 0 [ 291.165436][ T2153] usb 2-1: USB disconnect, device number 42 [ 291.209443][ T5846] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=7d.35 [ 291.233691][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.437878][ T5846] usb 3-1: Product: syz [ 291.442114][ T5846] usb 3-1: Manufacturer: syz [ 291.446961][ T5846] usb 3-1: SerialNumber: syz [ 291.480452][ T5846] usb 3-1: config 0 descriptor?? [ 292.003416][ T5934] usb 4-1: USB disconnect, device number 54 [ 292.057124][ T2153] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 292.266565][ T2153] usb 2-1: Using ep0 maxpacket: 16 [ 292.286198][ T2153] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 292.385518][ T2153] usb 2-1: config 0 has no interface number 0 [ 292.408836][ T5934] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 292.412440][ T2153] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 292.492893][ T2153] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 292.522344][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.535471][ T2153] usb 2-1: Product: syz [ 292.543505][ T2153] usb 2-1: Manufacturer: syz [ 292.549615][ T2153] usb 2-1: SerialNumber: syz [ 292.567400][ T2153] usb 2-1: config 0 descriptor?? [ 292.574724][ T8332] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 292.599528][ T2153] asix 2-1:0.251: probe with driver asix failed with error -22 [ 292.608820][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 292.679955][ T5934] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 292.769365][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.783869][ T5934] usb 4-1: Product: syz [ 292.806233][ T5934] usb 4-1: Manufacturer: syz [ 292.814610][ T5934] usb 4-1: SerialNumber: syz [ 292.858596][ T5934] usb 4-1: config 0 descriptor?? [ 292.888922][ T5934] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 292.898425][ T5934] em28xx 4-1:0.0: Device initialization failed. [ 292.904761][ T5934] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 292.954572][ T5846] qmi_wwan 3-1:0.35: probe with driver qmi_wwan failed with error -22 [ 292.963162][ T2153] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 292.996190][ T5846] usb 3-1: USB disconnect, device number 40 [ 293.149018][ T2153] usb 5-1: no configurations [ 293.172647][ T2153] usb 5-1: can't read configurations, error -22 [ 293.366502][ T48] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 293.496390][ T2153] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 293.715471][ T48] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.887460][ T2153] usb 5-1: no configurations [ 293.892885][ T2153] usb 5-1: can't read configurations, error -22 [ 293.932004][ T48] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 293.943058][ T2153] usb usb5-port1: attempt power cycle [ 293.961614][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.984172][ T48] usb 1-1: Product: syz [ 293.991994][ T48] usb 1-1: Manufacturer: syz [ 294.001959][ T48] usb 1-1: SerialNumber: syz [ 294.354154][ T48] usb 1-1: config 0 descriptor?? [ 294.610123][ T2153] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 294.636962][ T48] usb 2-1: USB disconnect, device number 43 [ 294.720708][ T2153] usb 5-1: no configurations [ 294.725376][ T2153] usb 5-1: can't read configurations, error -22 [ 295.006972][ T2153] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 295.285852][ T2153] usb 5-1: no configurations [ 295.293476][ T2153] usb 5-1: can't read configurations, error -22 [ 295.317988][ T2153] usb usb5-port1: unable to enumerate USB device [ 295.892399][ T8363] page: refcount:515 mapcount:0 mapping:ffff88801bea2aa0 index:0x0 pfn:0x59600 [ 295.901778][ T8363] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 295.910310][ T8363] aops:hugetlbfs_aops ino:554e dentry name(?):"anon_hugepage" [ 295.917821][ T8363] flags: 0xfff000000000c1(locked|waiters|head|node=0|zone=1|lastcpupid=0x7ff) [ 295.926701][ T8363] page_type: f4(hugetlb) [ 295.930977][ T8363] raw: 00fff000000000c1 ffffea0001df0008 ffffc9000467fe10 ffff88801bea2aa0 [ 295.939593][ T8363] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 295.948216][ T8363] head: 00fff000000000c1 ffffea0001df0008 ffffc9000467fe10 ffff88801bea2aa0 [ 295.956916][ T8363] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 295.965615][ T8363] head: 00fff00000000009 ffffea0001658001 0000000000000000 0000000000000000 [ 295.974317][ T8363] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 295.983023][ T8363] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 295.990355][ T8363] page_owner tracks the page as allocated [ 295.996497][ T8363] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 8359, tgid 8340 (syz.0.692), ts 295234331324, free_ts 293764189813 [ 296.017036][ T8363] post_alloc_hook+0x240/0x2a0 [ 296.022111][ T8363] get_page_from_freelist+0x21e4/0x22c0 [ 296.027705][ T8363] __alloc_frozen_pages_noprof+0x181/0x370 [ 296.033554][ T8363] alloc_buddy_hugetlb_folio+0xdf/0x1c0 [ 296.039139][ T8363] only_alloc_fresh_hugetlb_folio+0x8c/0x280 [ 296.045164][ T8363] alloc_surplus_hugetlb_folio+0x103/0x430 [ 296.051022][ T8363] alloc_hugetlb_folio+0xb1a/0x16a0 [ 296.056249][ T8363] hugetlb_fault+0x1de0/0x29e0 [ 296.061050][ T8363] handle_mm_fault+0x740/0x8e0 [ 296.065848][ T8363] __get_user_pages+0x1af4/0x30b0 [ 296.070902][ T8363] populate_vma_page_range+0x26b/0x340 [ 296.076393][ T8363] __mm_populate+0x24c/0x380 [ 296.081022][ T8363] vm_mmap_pgoff+0x3f0/0x4c0 [ 296.085644][ T8363] ksys_mmap_pgoff+0x587/0x760 [ 296.090444][ T8363] __do_fast_syscall_32+0xb6/0x2b0 [ 296.095589][ T8363] do_fast_syscall_32+0x34/0x80 [ 296.100474][ T8363] page last free pid 8351 tgid 8333 stack trace: [ 296.106833][ T8363] __free_frozen_pages+0xc71/0xe70 [ 296.111987][ T8363] __folio_put+0x21b/0x2c0 [ 296.116447][ T8363] update_and_free_hugetlb_folio+0x169/0x280 [ 296.122467][ T8363] free_huge_folio+0xd72/0x1100 [ 296.127363][ T8363] folios_put_refs+0x410/0x640 [ 296.132274][ T8363] remove_inode_hugepages+0xee3/0x1100 [ 296.137774][ T8363] hugetlbfs_fallocate+0xbc7/0x1100 [ 296.143019][ T8363] vfs_fallocate+0x6a0/0x830 [ 296.147647][ T8363] madvise_do_behavior+0x169d/0x2e70 [ 296.152974][ T8363] do_madvise+0x174/0x220 [ 296.157346][ T8363] __ia32_sys_madvise+0xa7/0xc0 [ 296.162233][ T8363] __do_fast_syscall_32+0xb6/0x2b0 [ 296.167373][ T8363] do_fast_syscall_32+0x34/0x80 [ 296.172261][ T8363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 296.178793][ T8363] ------------[ cut here ]------------ [ 296.184277][ T8363] kernel BUG at mm/filemap.c:154! [ 296.189348][ T8363] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 296.195625][ T8363] CPU: 0 UID: 0 PID: 8363 Comm: syz.0.692 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 296.205809][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.215976][ T8363] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 296.222256][ T8363] Code: 54 c9 ff 48 89 df 48 c7 c6 60 38 94 8b e8 d3 f9 10 00 90 0f 0b e8 fb 53 c9 ff 48 89 df 48 c7 c6 40 37 94 8b e8 bc f9 10 00 90 <0f> 0b e8 e4 53 c9 ff 48 89 df 48 c7 c6 60 38 94 8b e8 a5 f9 10 00 [ 296.241895][ T8363] RSP: 0018:ffffc90003edf0e0 EFLAGS: 00010046 [ 296.248006][ T8363] RAX: 116bcc189543c200 RBX: ffffea0001658000 RCX: 116bcc189543c200 [ 296.256005][ T8363] RDX: 0000000000000005 RSI: ffffffff8db8503d RDI: ffff888026245a00 [ 296.264003][ T8363] RBP: 0000000000000001 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 296.272000][ T8363] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000040 [ 296.279995][ T8363] R13: 1ffffd40002cb000 R14: 1ffffd40002cb001 R15: ffffea0001658008 [ 296.287990][ T8363] FS: 0000000000000000(0000) GS:ffff888125c1d000(0063) knlGS:00000000f4846b40 [ 296.296947][ T8363] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 296.303555][ T8363] CR2: 000000000c33fe43 CR3: 0000000024d3c000 CR4: 00000000003526f0 [ 296.311816][ T8363] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 296.319810][ T8363] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 296.327807][ T8363] Call Trace: [ 296.331110][ T8363] [ 296.334065][ T8363] __filemap_remove_folio+0xc3/0x500 [ 296.339388][ T8363] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 296.345068][ T8363] ? __pfx___filemap_remove_folio+0x10/0x10 [ 296.351091][ T8363] ? _raw_spin_lock_irq+0xae/0xf0 [ 296.356165][ T8363] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 296.361763][ T8363] filemap_remove_folio+0xe6/0x1f0 [ 296.366918][ T8363] remove_inode_hugepages+0x594/0x1100 [ 296.372407][ T8363] ? unwind_get_return_address+0x4d/0x90 [ 296.378076][ T8363] ? load_gs_index+0x169/0x190 [ 296.382882][ T8363] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 296.388814][ T8363] ? hugetlbfs_fallocate+0xbaf/0x1100 [ 296.394208][ T8363] ? up_write+0x1c4/0x420 [ 296.398553][ T8363] hugetlbfs_fallocate+0xbc7/0x1100 [ 296.403769][ T8363] ? aa_file_perm+0x3e7/0xed0 [ 296.408458][ T8363] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 296.414137][ T8363] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 296.420050][ T8363] vfs_fallocate+0x6a0/0x830 [ 296.424662][ T8363] ? __pfx_vfs_fallocate+0x10/0x10 [ 296.429790][ T8363] madvise_do_behavior+0x169d/0x2e70 [ 296.435185][ T8363] ? __pfx_madvise_do_behavior+0x10/0x10 [ 296.440828][ T8363] ? futex_unqueue+0x22/0x240 [ 296.445515][ T8363] ? futex_unqueue+0x22/0x240 [ 296.450206][ T8363] ? futex_unqueue+0x22/0x240 [ 296.454898][ T8363] ? futex_unqueue+0x211/0x240 [ 296.459692][ T8363] ? __futex_wait+0x1d1/0x3e0 [ 296.464374][ T8363] ? __futex_wait+0x34f/0x3e0 [ 296.469058][ T8363] ? __pfx___futex_wait+0x10/0x10 [ 296.474101][ T8363] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 296.480009][ T8363] ? __pfx_futex_wake_mark+0x10/0x10 [ 296.485313][ T8363] ? try_to_wake_up+0x7e5/0x1290 [ 296.490270][ T8363] ? __lock_acquire+0xab9/0xd20 [ 296.495130][ T8363] ? madvise_lock+0xda/0x200 [ 296.499733][ T8363] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 296.505378][ T8363] do_madvise+0x174/0x220 [ 296.509805][ T8363] ? __pfx_do_futex+0x10/0x10 [ 296.514491][ T8363] ? __pfx_do_madvise+0x10/0x10 [ 296.519355][ T8363] ? rcu_is_watching+0x15/0xb0 [ 296.524136][ T8363] __ia32_sys_madvise+0xa7/0xc0 [ 296.529001][ T8363] __do_fast_syscall_32+0xb6/0x2b0 [ 296.534123][ T8363] do_fast_syscall_32+0x34/0x80 [ 296.538980][ T8363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 296.545319][ T8363] RIP: 0023:0xf70de539 [ 296.549402][ T8363] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 296.569019][ T8363] RSP: 002b:00000000f484655c EFLAGS: 00000206 ORIG_RAX: 00000000000000db [ 296.577474][ T8363] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600002 [ 296.585492][ T8363] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.593491][ T8363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.601483][ T8363] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 296.609464][ T8363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.617541][ T8363] [ 296.620568][ T8363] Modules linked in: [ 296.624477][ T8363] ---[ end trace 0000000000000000 ]--- [ 296.629934][ T8363] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 296.636200][ T8363] Code: 54 c9 ff 48 89 df 48 c7 c6 60 38 94 8b e8 d3 f9 10 00 90 0f 0b e8 fb 53 c9 ff 48 89 df 48 c7 c6 40 37 94 8b e8 bc f9 10 00 90 <0f> 0b e8 e4 53 c9 ff 48 89 df 48 c7 c6 60 38 94 8b e8 a5 f9 10 00 [ 296.655821][ T8363] RSP: 0018:ffffc90003edf0e0 EFLAGS: 00010046 [ 296.661898][ T8363] RAX: 116bcc189543c200 RBX: ffffea0001658000 RCX: 116bcc189543c200 [ 296.669878][ T8363] RDX: 0000000000000005 RSI: ffffffff8db8503d RDI: ffff888026245a00 [ 296.677855][ T8363] RBP: 0000000000000001 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 296.685829][ T8363] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000040 [ 296.693808][ T8363] R13: 1ffffd40002cb000 R14: 1ffffd40002cb001 R15: ffffea0001658008 [ 296.701788][ T8363] FS: 0000000000000000(0000) GS:ffff888125c1d000(0063) knlGS:00000000f4846b40 [ 296.710734][ T8363] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 296.717337][ T8363] CR2: 000000000c33fe43 CR3: 0000000024d3c000 CR4: 00000000003526f0 [ 296.725319][ T8363] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 296.733315][ T8363] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 296.741324][ T8363] Kernel panic - not syncing: Fatal exception [ 296.747545][ T8363] Kernel Offset: disabled [ 296.751867][ T8363] Rebooting in 86400 seconds..